last executing test programs: 3.067349992s ago: executing program 4 (id=2831): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) openat$cgroup_int(r2, &(0x7f0000000300)='memory.swap.max\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1400}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.688043475s ago: executing program 4 (id=2834): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x3000, 0x4, 0x0, 0x8, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=ANY=[@ANYBLOB="6b0000000000000029000000050000000000020000000000000000007f000001080000000700000000000034366567f221978756640000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="000000007f00000100010000"], 0x6b}, 0xfc00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000006600816657bb97c9269de9aaec8488040f0000004cb9cca7480ef402000000e305000a00000200000000", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1008d2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.53493299s ago: executing program 1 (id=2835): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 2.507850467s ago: executing program 2 (id=2836): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x8}, 0x14105, 0x9, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(0xffffffffffffffff) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x7, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000280)=""/3, 0x28, 0x3, 0x1}, 0x28) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x800}, 0xc) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x17, &(0x7f0000000000)=r5, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x708}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1b, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @initr0, @call={0x85, 0x0, 0x0, 0x70}, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000180)='GPL\x00', 0x51, 0x62, &(0x7f00000001c0)=""/98, 0x40f00, 0x2a, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000300)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r2, r0, r5, r6, 0x1, r7, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x0, 0x4, 0xb, 0xb}, {0x4, 0x3, 0x3, 0x9}], 0x10, 0xfffffffb}, 0x94) r8 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r8, 0x29, 0x1a, 0x0, 0x4) 2.349094281s ago: executing program 1 (id=2839): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0ee40000000000001400000000000c18000000000200000000000000000000001c000000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d180b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 2.278356322s ago: executing program 0 (id=2840): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e0000009540d6ac58135a0b28cc1c4b8da2d22606f332a6b6635b983446b8f82f0ae7a317bbc99fee21405175451fcf9b2aa3f04f5dbf8ed4457706542262bdadc8d1cea9898f5f88c175c747835600"/117], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f447333de39c7095758218a68bc5142f0cb2229fa6c8b0d7c8126aee6d3def94cd964218564fb1d255bce6cef9bea8322326039744a98eead8c59bc75bb5b42123eef53ae4bc331b0ad09a8efc4175c484ad74df9158ff1882cdd83c97c03a35e91c30a0"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000600)=0xd, 0x18) r3 = socket$kcm(0x18, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff1f}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000240081064e810ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fa215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbddd4f644ec7032de8dee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55c82148d29e000000000000000000000000000000004a", 0xd8}], 0x1}, 0x40844) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r8, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x10, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000040)="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", 0xfa}, {&(0x7f0000000140)="c4ad2ef2e48325dedcf94c85813554aa45a11cbd74ccda666fdb0fab0219822c8bb0c113703becd1cf1539cc709c27fb8acb91cc69909cfbcc2f915606f20b4cb3206c629c", 0x45}, {&(0x7f00000001c0)="f5d07b972092187bb32716d655ef8321b7c82294bcbb93ece77bd9397aa00a1f237362a6f9bfc9856432c0c07f660d28068f6effb7a8e28a5deb4052f6aefaa0e696c96e9663c5ccf587fe2f05bdcb105a098a98c6d01966c775c15d198ec03dcc3ff310e2d29257d23f7740056d5943246448f72f0eeabcac13cbeeb4a1fafacbad3c40208f7a7698dcc06ad07c0558ec91c6ea4451ad4f", 0x98}, {&(0x7f0000000280)="9d3033f8ff587e40a5da7eb77fd8b3594b84a700869e823eebae3a99fed009c31c0628419eaa7e4fb4321415e6dc8b762499492f9f81c90525d0035f47d9a1cd6e06d82091e4266ce5fa6a1a8677ef1ec7646e4a54629884325f1ced8dd8bcd9118a93d5110696157a179c80ab523ba4d5e9eb14bc1a04130fdb20eb77f6ae561ef40d4b70c4e463f5ac3e29b1320509010d044451168ddde9165f2b68895babd9389b0cf6bb256076f48f06dc8183052cef988382cef557dcde7c4cec0b0a491d1e7470fcb4db51a85db3", 0xcb}, {&(0x7f0000000380)="0825e7e3f9fb9f45d8d8e43820d0847a1c5c268660e4848252b4ade3d9367721a4f2e1bf2283bbf8d7b75fb7a4274d19ba92c3d4199221152955dc168c695bb4ffb8877ea6cd4802dc3865a8215876cf155d3febf369255f9fd0479e58c6372cee988c76fbd05dc62ed45ff21bf5a4a220a0fbf0a0dd1cad729f5b41396807c00c7356ace621316ffa056258ad76658603f56e7661ec4f9d94df8fb5a619b5adff10b5378a533d2aa721e24558802e89590ec9f0b66789954430ca3019136bcbebcf74bb4cd38f650e2e6ab462f418793d", 0xd1}, {&(0x7f0000000480)="664f5a4d863d5bb5331b27156ad497d8254d7c67", 0x14}, {&(0x7f00000004c0)="b9fcede6a119fc3079534a8c776ef7f7001421e19f0da29527c5d76f0d64f1a020fdf125a17212450a565ca29804a25e486be19103e12a852c15cfe43b2b343e0acf19886ed09f93c855ecf2525c9c84543fa35752d786a21ddda42be7e543bba38b4dc77542c0f653bd99dd2ad46e8f38e899997c3c6fa164503c60546d8a8cf3b223b4ebcde993572337117e55a84af7cfdc5f741e26f8e88167c761ff20ef53f5070538f30472ae2a26c60ceeb1853a0c07c1ea2e037c0cf8a0d8fed82dde60be6a36bcd541af60b6da086f3fbc08bed0cea5c7d388ae4bbabc", 0xdb}], 0x7, &(0x7f0000000640)=[@ip_ttl={{0x14, 0x0, 0x2, 0x240000}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf}}], 0x30}, 0x22040000) write$cgroup_subtree(r2, &(0x7f00000008c0)={[{0x2b, 'hugetlb'}]}, 0x9) 2.178837366s ago: executing program 4 (id=2841): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5c, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r1, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xd, &(0x7f0000000800)=@raw=[@snprintf], &(0x7f0000000880)='syzkaller\x00', 0xf21a, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0xe, 0x1}, 0x10}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%+9llu \x00'}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000900000000000000210000009500"/33], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) write$cgroup_int(r7, &(0x7f00000001c0), 0xfffffdef) write$cgroup_devices(r7, 0x0, 0x9) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000b00), 0x8) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x348, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x913ca856339c3a71, 0xf, &(0x7f00000002c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7e, '\x00', r0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, r1, r3, 0x0, &(0x7f0000000bc0)=[r4, 0xffffffffffffffff, r7, r8, r9], 0x0, 0x10, 0x7e}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r7, &(0x7f0000000d00)="8910fcf3c2baefb4db094a09d8914dfbd86f9c375743364ed18330a1eb45cf7b03a0ca55498b72c978e189a7e216e5020ed97aee774233fdfe2a44181e1c6b61b07516afad912c03ce605cf15d7e5906b1e0095ef43c40b0643f9b01a9383ca85ea3d593f7584542412eef0c86023567c24e71bbc5b273a54dc9dc0ca0b297a13f85537c2fd3cff9b640c74b6dc623a30807f9960c88b4944df08f28aafd5509ec9e57001afa0090e9150b3d1c820a11e22e8289e3b5154b2637fc882a2343d6339d4094c1ca0ab95dc0f4ff3352674c1bca156b70dda164fd1d206e422e6b", &(0x7f0000000e00)=""/68}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="0000000000000080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) socket$kcm(0x2b, 0x1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r11, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) 2.132829074s ago: executing program 1 (id=2843): r0 = socket$kcm(0x10, 0x400000002, 0x0) socketpair(0x29, 0x3, 0xf, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000009000000090000000080000001690600", @ANYRES32=0x1, @ANYBLOB="c26c000800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001000000050000000e00"/28], 0x50) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091ef"], 0xfe33) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) close(r1) 1.954503775s ago: executing program 3 (id=2844): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x82, &(0x7f0000000480), 0xa7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001500)=@bpf_ext={0x1c, 0x25, &(0x7f0000000240)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x3, 0x2, 0x3, 0x7, 0x6, 0x50, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x7, 0x1, 0xc, 0x3, 0x4, 0xc, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x9a}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000004c0)=""/4096, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0xf, 0x1, 0xca}, 0x10, 0x2184e, 0xffffffffffffffff, 0x0, &(0x7f00000014c0)=[0x1, 0x1], 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, 0x0, &(0x7f0000000100)=""/3, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r4, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.871807463s ago: executing program 4 (id=2845): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f00000006c0), 0x4}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = gettid() r3 = socket$kcm(0xa, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x9, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xe, 0x2}, {0x6, 0x4}, {0x6, 0x2}, {0x3, 0x3}, {0x4, 0x3}]}, @union={0x1, 0x0, 0x0, 0x5, 0x0, 0x9}, @typedef={0xe, 0x0, 0x0, 0x8, 0x5}, @enum64={0x1, 0x4, 0x0, 0x13, 0x1, 0x6, [{0x2, 0x6, 0x6}, {0xc, 0x6b3, 0x5}, {0x6, 0x5, 0x9}, {0x6, 0x4, 0x7}]}, @enum={0x1, 0x3, 0x0, 0x6, 0x4, [{0xc, 0x6}, {0x7, 0x4}, {0x8, 0x9}]}]}, {0x0, [0x61, 0x5f, 0x30, 0x5f, 0x5f, 0x61, 0x61]}}, &(0x7f0000000880)=""/224, 0xcd, 0xe0, 0x1, 0x3}, 0x28) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x20000984) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="bd7af3a39199652cb572a2761b944d285a57baef"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000089000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYRES64=r1, @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000828500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095", @ANYRES16=r1], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x102) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x1, 0xf7, 0xe, 0x8, 0x0, 0x200, 0x420, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x3, @perf_config_ext={0xfffffffffffffffc, 0x4}, 0x1000, 0x2, 0x9, 0x2c4290476853fd59, 0x9, 0x5, 0x7, 0x0, 0xcc, 0x0, 0xff}, r2, 0xf, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.712294587s ago: executing program 1 (id=2846): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100000}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)}], 0x1, &(0x7f0000001640)=ANY=[], 0x38}, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x1, 0x2, 0x0, 0x0, 0x210e, 0x148b0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_config_ext={0xf, 0x2}, 0x14505, 0x32, 0xcb9, 0x3, 0x2, 0xb, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/uts\x00') r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x9, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x80, 0xff, 0xfffffbff, 0x3, 0x2, 0xffffff9a, 0x7, 0x0, 0x0, 0x0, 0x98}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x5) r6 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000200)={0xffffffffffffffff, r5}) r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x1b, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f00000022c0)=""/4096, 0x41000, 0x10, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000280)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0xb, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)=[{0x5, 0x5, 0x1, 0xc}, {0x2, 0x2, 0xd, 0xa}, {0x2, 0x3, 0x7, 0xc}], 0x10, 0x888}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0xd900, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, &(0x7f0000000380), 0x0}, 0x20) r10 = socket$kcm(0x18, 0x5, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) close(r10) socket$kcm(0x2, 0x5, 0x84) 1.66276782s ago: executing program 3 (id=2847): socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x40, 0x0, 0x4, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10911, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e488a86317ce8102030400fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 1.580317674s ago: executing program 4 (id=2848): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (fail_nth: 2) 1.577272377s ago: executing program 0 (id=2849): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 1.47619613s ago: executing program 2 (id=2850): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.425238817s ago: executing program 3 (id=2851): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4\x04\x00+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82D\x80'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) 1.357550613s ago: executing program 0 (id=2852): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d8000000100081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bbace8017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000) 974.826586ms ago: executing program 2 (id=2853): perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) (async) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x9, &(0x7f0000000140)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x28}, [@ldst={0x0, 0x2, 0x6, 0x7, 0x8, 0xfffffffffffffff4}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xb4}, @map_idx={0x18, 0x7}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) (rerun: 32) 934.959903ms ago: executing program 3 (id=2854): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000493c008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r0, r2, 0x4, r3}, 0x10) r4 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x4, 0x5, 0x8, 0x7, 0x0, 0x7fffffff, 0x10690, 0xa, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x4, 0x1000, 0x81, 0x3, 0x80000001, 0x0, 0x8, 0x0, 0x2, 0x0, 0xc6}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x7, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socketpair(0x8, 0x4, 0x7, &(0x7f0000000580)) 923.526802ms ago: executing program 0 (id=2855): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = gettid() r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x20000984) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x21080, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000300)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', r5, 0x1f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r5, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000089000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000828500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r9, 0x0, 0x1ff) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x1, 0xf7, 0xe, 0x8, 0x0, 0x200, 0x420, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x3, @perf_config_ext={0xfffffffffffffffc, 0x4}, 0x1000, 0x2, 0x9, 0x2c4290476853fd59, 0x9, 0x5, 0x7, 0x0, 0xcc, 0x0, 0xff}, r2, 0xf, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x13, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000013c0)="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", 0x1f5}, {&(0x7f0000000a40)="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", 0x240}], 0x2}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, 0x0}, 0x4060845) 883.146993ms ago: executing program 4 (id=2856): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000008000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000c18a6295ab1e773e30ee636977dc9657075182c1d066b79dab8f757b97a19aaea6fdcbe0f2ba2103538466fd9955f7dfd91ff0b24067e024a248fa3126e12b7e20a513243da632d6c7a7a", @ANYRES32, @ANYBLOB], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0}, 0x1000, 0x8, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100003400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback, @multicast1}}}], 0x20}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0xff, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4073, 0xfe9}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/198, 0xc6}, {&(0x7f0000000340)=""/181, 0xb5}], 0x6}, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 830.468198ms ago: executing program 1 (id=2857): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x5402, 0x4, 0x0, 0x8, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) 714.426112ms ago: executing program 2 (id=2858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r0, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002c80)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000740)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0xca, 0x9, 0xf, 0x3, 0x1}], &(0x7f0000000780)='syzkaller\x00', 0x80000, 0xd2, &(0x7f00000007c0)=""/210, 0x41000, 0x52, '\x00', r1, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000002bc0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000002c00)={0x5, 0x1, 0x7, 0xffffffff}, 0x10, 0x8b13, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000002c40)=[{0x0, 0x2, 0xf, 0x5}, {0x4, 0x3, 0x6, 0xa}, {0x5, 0x5, 0x0, 0x4}, {0x3, 0x5, 0x2, 0x7}], 0x10, 0xfffffff7}, 0x94) socket$kcm(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x4e, 0x0, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e80f782db44b9040a1d080000000000000055a10a0015400100142603600e1208009e0000000401040016004000054003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409fd2ee0125b91643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d28a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3060000000000000081ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337812398", 0xd8}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) sendmsg(r6, &(0x7f0000000700)={&(0x7f00000002c0)=@qipcrtr={0x2a, 0x1, 0x7ffe}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000500)="3d0fdb569519414edbf3c03481e466736f419d429389c23ec6b98bd40a0b1bdfc57c0b06ce160d1674be2fe0ce48aef3ddf76225474f29b4ff700f8189ffe87269f3d19980e30a8dfb0f9bf1e9a7499eb67aedbd29066fb2ddd6c2f9c5af0f99b3de6a151f7a5ff2d7fd1a17e595c62a215e473c3089a52836119ee30dfd896fcfdb49a47262175442601284aa2d3a8fa8eee0e49b7d1736a17c9b7bdcaf4ec6812ff143b100270637931dd95904487c8e7a80d166a3e1e9a656473c23f00c6ce86d0ce8fad741d031f397651ae0f3a2cf664a06a7c31fffc871fff742184caf8d7d69524dffee59b7232c95d3ac78ae593438869a2049", 0xf7}, {&(0x7f0000000600)="638b7f04468422264359ad2367d0908ad8936779b7b6c3818759ce30aa126d4086dc168095993dea5aba285ce8b358905be8c4b1ddbb219437fb0979a6c6c13be630f969b1292134b15fbffdccb727ca515f", 0x52}, {&(0x7f0000000340)="b4b2", 0x2}, {&(0x7f0000000680)="a453a8c57b024c132575d4a1ad687225ada05fc20b8988f12999f43efeff599044138f961de2f8788f10d5cde8e11e8387252ef0bbe8cd12a88ff9410fef9e17b7b2a1e2767a6511faf5443f99af6cba2f991d66f163a4492df3336388215cb01bacdcb540a3194dcb64bfa8c5e370b592737a156e39961920c7ab4ca99e1b", 0x7f}], 0x4, &(0x7f0000000a00)=[{0x1010, 0x10b, 0x0, "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"}, {0xc0, 0x115, 0xf, "f0c26b8e32e9247de49d836175e23f8c0f0374e29b2206f25d09fb9bd91f0eca869f122ff29ce3ed6bf225febb78bc8d3148839ff8164d82fab052f184cf60964237a24fc4757ec4ae8215497d61608986e39831aec7c14fccca0f9e9b048d628851477636af6306f82eb319fcedd67e74ed66514eb20564bc5dea6366a29c09b129de49e526e59c6725b5aceefe89b06d42bc71501b415646c54849c954a2504bda07ed37926c492dd75971e3"}, {0xc0, 0x10b, 0x8, "909d4ae00d64a126aa29ed56d1532a8721ad7801242f6be17e76f8cc6412e332af0da17ea3b29b10ada702b5b47b9b07eb601d66053dcc26e84fd2a42459309d315b4ac1ed8490d648a529bcba22696040f06833787dae4114c87a0deafd5a716d880b10a9bbc7775b740cad9aa8f1de06d1c005f6eadc037293a8ee746bcb3cff58b31ad8b59562b89d8f1407766c076de4a9456fd6eee886c6928072ccacf2461b75b56bb8f874060f37e15dea"}, {0x1010, 0x101, 0x8000, "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"}], 0x21a0}, 0x400c001) 681.945368ms ago: executing program 1 (id=2859): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e0000009540d6ac58135a0b28cc1c4b8da2d22606f332a6b6635b983446b8f82f0ae7a317bbc99fee21405175451fcf9b2aa3f04f5dbf8ed4457706542262bdadc8d1cea9898f5f88c175c747835600"/117], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f447333de39c7095758218a68bc5142f0cb2229fa6c8b0d7c8126aee6d3def94cd964218564fb1d255bce6cef9bea8322326039744a98eead8c59bc75bb5b42123eef53ae4bc331b0ad09a8efc4175c484ad74df9158ff1882cdd83c97c03a35e91c30a0"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000600)=0xd, 0x18) r3 = socket$kcm(0x18, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff1f}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000240081064e810ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fa215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbddd4f644ec7032de8dee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55c82148d29e000000000000000000000000000000004a", 0xd8}], 0x1}, 0x40844) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r8, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x10, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000040)="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", 0xfa}, {&(0x7f0000000140)="c4ad2ef2e48325dedcf94c85813554aa45a11cbd74ccda666fdb0fab0219822c8bb0c113703becd1cf1539cc709c27fb8acb91cc69909cfbcc2f915606f20b4cb3206c629c", 0x45}, {&(0x7f00000001c0)="f5d07b972092187bb32716d655ef8321b7c82294bcbb93ece77bd9397aa00a1f237362a6f9bfc9856432c0c07f660d28068f6effb7a8e28a5deb4052f6aefaa0e696c96e9663c5ccf587fe2f05bdcb105a098a98c6d01966c775c15d198ec03dcc3ff310e2d29257d23f7740056d5943246448f72f0eeabcac13cbeeb4a1fafacbad3c40208f7a7698dcc06ad07c0558ec91c6ea4451ad4f", 0x98}, {&(0x7f0000000280)="9d3033f8ff587e40a5da7eb77fd8b3594b84a700869e823eebae3a99fed009c31c0628419eaa7e4fb4321415e6dc8b762499492f9f81c90525d0035f47d9a1cd6e06d82091e4266ce5fa6a1a8677ef1ec7646e4a54629884325f1ced8dd8bcd9118a93d5110696157a179c80ab523ba4d5e9eb14bc1a04130fdb20eb77f6ae561ef40d4b70c4e463f5ac3e29b1320509010d044451168ddde9165f2b68895babd9389b0cf6bb256076f48f06dc8183052cef988382cef557dcde7c4cec0b0a491d1e7470fcb4db51a85db3", 0xcb}, {&(0x7f0000000380)="0825e7e3f9fb9f45d8d8e43820d0847a1c5c268660e4848252b4ade3d9367721a4f2e1bf2283bbf8d7b75fb7a4274d19ba92c3d4199221152955dc168c695bb4ffb8877ea6cd4802dc3865a8215876cf155d3febf369255f9fd0479e58c6372cee988c76fbd05dc62ed45ff21bf5a4a220a0fbf0a0dd1cad729f5b41396807c00c7356ace621316ffa056258ad76658603f56e7661ec4f9d94df8fb5a619b5adff10b5378a533d2aa721e24558802e89590ec9f0b66789954430ca3019136bcbebcf74bb4cd38f650e2e6ab462f418793d", 0xd1}, {&(0x7f0000000480)="664f5a4d863d5bb5331b27156ad497d8254d7c67", 0x14}, {&(0x7f00000004c0)="b9fcede6a119fc3079534a8c776ef7f7001421e19f0da29527c5d76f0d64f1a020fdf125a17212450a565ca29804a25e486be19103e12a852c15cfe43b2b343e0acf19886ed09f93c855ecf2525c9c84543fa35752d786a21ddda42be7e543bba38b4dc77542c0f653bd99dd2ad46e8f38e899997c3c6fa164503c60546d8a8cf3b223b4ebcde993572337117e55a84af7cfdc5f741e26f8e88167c761ff20ef53f5070538f30472ae2a26c60ceeb1853a0c07c1ea2e037c0cf8a0d8fed82dde60be6a36bcd541af60b6da086f3fbc08bed0cea5c7d388ae4bbabc", 0xdb}], 0x7, &(0x7f0000000640)=[@ip_ttl={{0x14, 0x0, 0x2, 0x240000}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf}}], 0x30}, 0x22040000) write$cgroup_subtree(r2, &(0x7f00000008c0)={[{0x2b, 'hugetlb'}]}, 0x9) 661.849746ms ago: executing program 3 (id=2860): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, 0x0, 0x24000008) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x8}, 0x14105, 0x9, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000080)={0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000400000000000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1500}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000300)="25c89d0918a25b3725f245a434ac", 0x0, 0xf01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x13, &(0x7f0000000200)=r6, 0x4) sendmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2000c854) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10102) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000001822ebff1700000009000000080040000100000f05000100040000000000ec005f00002e00d361ca95e117cfeda3014af803f6ba389f0817375127fd20210ab50fd79667c41e4e864f3220c70c836ee73fdae7917f3b68fe060f5948a7bbc052b5d573d2d34fd8217e9d0d9bca822972dec396efca153d5ac600"/148], &(0x7f00000001c0)=""/257, 0x39, 0x101, 0x6}, 0x28) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002500"], 0x33fe0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) 534.005569ms ago: executing program 0 (id=2861): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x8}, 0x14105, 0x9, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x23, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006b0000009500000000080000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x81) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="100000000400000004005e000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, 0x0, &(0x7f00000008c0)}, 0x20) socket$kcm(0x10, 0x3, 0x10) socketpair(0x5, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0xc, 0x0, 0x0, 0x0, 0x8, 0x80001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x100, 0x0, 0xffffffff, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000000001}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 528.441003ms ago: executing program 2 (id=2862): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e020000100000000ac1414"], 0x30}, 0x40880) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x420d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x11, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.321252ms ago: executing program 0 (id=2863): perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x28) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, 0x0, &(0x7f0000000100)=""/3, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511ff070002000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0xc000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r5, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x5452, 0x0) recvmsg(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x15, 0x0, 0x0) 608.029µs ago: executing program 2 (id=2864): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x50) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x40000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) (fail_nth: 1) 0s ago: executing program 3 (id=2865): r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0x30}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async, rerun: 64) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x63, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000080)=0x68f7c902) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) (async, rerun: 64) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) (rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) socket$kcm(0x29, 0x1, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0x0, r1}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a603f00000f040b067c55a1bc0009003e0006990600000015000500fe800000000000000300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d7f452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4000044) kernel console output (not intermixed with test programs): ess `syz.3.806'. [ 239.722049][ T8533] netlink: 'syz.3.806': attribute type 11 has an invalid length. [ 239.742200][ T8533] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.806'. [ 240.166789][ T8547] netlink: 'syz.2.812': attribute type 11 has an invalid length. [ 240.175060][ T8547] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.812'. [ 240.202467][ T8547] netlink: 'syz.2.812': attribute type 11 has an invalid length. [ 240.217403][ T8547] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.812'. [ 240.508676][ T8532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.995604][ T8545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.483490][ T8599] netlink: 'syz.2.834': attribute type 11 has an invalid length. [ 242.505526][ T8599] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.834'. [ 242.631504][ T8599] netlink: 'syz.2.834': attribute type 11 has an invalid length. [ 242.701672][ T8599] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.834'. [ 243.651375][ T8597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.013738][ T8616] netlink: 160 bytes leftover after parsing attributes in process `syz.4.837'. [ 248.148822][ T8717] netlink: 160 bytes leftover after parsing attributes in process `syz.4.872'. [ 248.683874][ T8740] netlink: 156 bytes leftover after parsing attributes in process `syz.1.879'. [ 250.760886][ T8781] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.892'. [ 251.538543][ T8799] netlink: 'syz.3.901': attribute type 11 has an invalid length. [ 251.579084][ T8799] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.901'. [ 251.599624][ T8799] netlink: 'syz.3.901': attribute type 11 has an invalid length. [ 251.622914][ T8799] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.901'. [ 252.354078][ T8797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.674805][ T8835] netlink: 160 bytes leftover after parsing attributes in process `syz.0.913'. [ 256.296968][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.303418][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.627996][ T8851] netlink: 160 bytes leftover after parsing attributes in process `syz.0.918'. [ 257.825799][ T8862] netlink: 160 bytes leftover after parsing attributes in process `syz.3.921'. [ 258.616409][ T8873] netlink: 'syz.2.924': attribute type 7 has an invalid length. [ 258.946937][ T8876] netlink: 'syz.2.924': attribute type 2 has an invalid length. [ 258.967332][ T8876] netlink: 'syz.2.924': attribute type 1 has an invalid length. [ 261.422401][ T8917] netlink: 160 bytes leftover after parsing attributes in process `syz.2.935'. [ 261.614336][ T8911] netlink: 160 bytes leftover after parsing attributes in process `syz.4.934'. [ 264.824305][ T8959] netlink: 160 bytes leftover after parsing attributes in process `syz.0.950'. [ 266.037578][ T8971] netlink: 'syz.1.953': attribute type 7 has an invalid length. [ 266.049493][ T8971] netlink: 'syz.1.953': attribute type 6 has an invalid length. [ 266.210296][ T8975] netlink: 152 bytes leftover after parsing attributes in process `syz.3.954'. [ 266.926586][ T8975] tc_dump_action: action bad kind [ 269.220251][ T9013] netlink: 152 bytes leftover after parsing attributes in process `syz.3.968'. [ 269.236655][ T9013] tc_dump_action: action bad kind [ 269.764745][ T9029] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 269.867090][ T9032] netlink: 132 bytes leftover after parsing attributes in process `syz.4.973'. [ 272.577626][ T9114] netlink: 'syz.1.1005': attribute type 11 has an invalid length. [ 272.586129][ T9114] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1005'. [ 272.605043][ T9114] netlink: 'syz.1.1005': attribute type 11 has an invalid length. [ 272.613518][ T9114] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1005'. [ 272.987465][ T9113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.285777][ T9134] netlink: 'syz.0.1012': attribute type 11 has an invalid length. [ 273.294202][ T9134] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1012'. [ 273.321108][ T9134] netlink: 'syz.0.1012': attribute type 11 has an invalid length. [ 273.344380][ T9134] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1012'. [ 273.660138][ T9146] netlink: 'syz.2.1017': attribute type 11 has an invalid length. [ 273.691081][ T9133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.696602][ T9146] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1017'. [ 273.753370][ T9151] netlink: 'syz.2.1017': attribute type 11 has an invalid length. [ 273.787166][ T9151] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1017'. [ 274.463309][ T9145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.713844][ T9218] netlink: 'syz.2.1044': attribute type 11 has an invalid length. [ 275.736906][ T9218] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1044'. [ 275.793451][ T9218] netlink: 'syz.2.1044': attribute type 11 has an invalid length. [ 275.819741][ T9218] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1044'. [ 276.515026][ T9217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.928433][ T9251] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1055'. [ 276.959776][ T9246] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1055'. [ 277.011467][ T9251] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1055'. [ 277.166480][ T9262] netlink: 'syz.0.1059': attribute type 11 has an invalid length. [ 277.185627][ T9262] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1059'. [ 277.332092][ T9262] netlink: 'syz.0.1059': attribute type 11 has an invalid length. [ 277.377204][ T9262] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1059'. [ 277.710453][ T9270] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1061'. [ 278.518812][ T9258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.540406][ T9280] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1063'. [ 279.092666][ T9286] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1066'. [ 279.139356][ T9286] tc_dump_action: action bad kind [ 280.944868][ T9319] __nla_validate_parse: 1 callbacks suppressed [ 280.944888][ T9319] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1076'. [ 281.963674][ T9346] FAULT_INJECTION: forcing a failure. [ 281.963674][ T9346] name failslab, interval 1, probability 0, space 0, times 0 [ 282.014412][ T9346] CPU: 1 UID: 0 PID: 9346 Comm: syz.0.1084 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 282.014441][ T9346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.014463][ T9346] Call Trace: [ 282.014475][ T9346] [ 282.014488][ T9346] dump_stack_lvl+0x189/0x250 [ 282.014526][ T9346] ? __pfx____ratelimit+0x10/0x10 [ 282.014562][ T9346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.014596][ T9346] ? __pfx__printk+0x10/0x10 [ 282.014666][ T9346] ? __pfx___might_resched+0x10/0x10 [ 282.014731][ T9346] should_fail_ex+0x414/0x560 [ 282.014795][ T9346] should_failslab+0xa8/0x100 [ 282.014836][ T9346] __kmalloc_noprof+0xcb/0x4f0 [ 282.014862][ T9346] ? kernfs_fop_write_iter+0x158/0x4f0 [ 282.014915][ T9346] kernfs_fop_write_iter+0x158/0x4f0 [ 282.014982][ T9346] vfs_write+0x54b/0xa90 [ 282.015040][ T9346] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 282.015074][ T9346] ? __pfx_vfs_write+0x10/0x10 [ 282.015162][ T9346] ? __fget_files+0x2a/0x420 [ 282.015242][ T9346] ksys_write+0x145/0x250 [ 282.015286][ T9346] ? __pfx_ksys_write+0x10/0x10 [ 282.015304][ T9346] ? rcu_is_watching+0x15/0xb0 [ 282.015368][ T9346] ? do_syscall_64+0xbe/0x3b0 [ 282.015420][ T9346] do_syscall_64+0xfa/0x3b0 [ 282.015446][ T9346] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.015478][ T9346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.015501][ T9346] ? clear_bhb_loop+0x60/0xb0 [ 282.015545][ T9346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.015566][ T9346] RIP: 0033:0x7f8dc798e9a9 [ 282.015591][ T9346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.015607][ T9346] RSP: 002b:00007f8dc57f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 282.015627][ T9346] RAX: ffffffffffffffda RBX: 00007f8dc7bb5fa0 RCX: 00007f8dc798e9a9 [ 282.015641][ T9346] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 0000000000000005 [ 282.015653][ T9346] RBP: 00007f8dc57f6090 R08: 0000000000000000 R09: 0000000000000000 [ 282.015665][ T9346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.015676][ T9346] R13: 0000000000000000 R14: 00007f8dc7bb5fa0 R15: 00007fff30c3fc08 [ 282.015777][ T9346] [ 282.270358][ T9340] À: port 1(vlan0) entered blocking state [ 282.276567][ T9340] À: port 1(vlan0) entered disabled state [ 282.288327][ T9340] vlan0: entered allmulticast mode [ 282.293688][ T9340] veth0_vlan: entered allmulticast mode [ 282.305356][ T9340] vlan0: entered promiscuous mode [ 282.349413][ T9335] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1082'. [ 282.359686][ T9335] tc_dump_action: action bad kind [ 282.524923][ T9343] À: port 1(vlan0) entered blocking state [ 282.531034][ T9343] À: port 1(vlan0) entered forwarding state [ 282.868394][ T9369] netlink: 'syz.1.1092': attribute type 11 has an invalid length. [ 282.877923][ T9369] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1092'. [ 282.917849][ T9371] netlink: 'syz.1.1092': attribute type 11 has an invalid length. [ 282.926681][ T9371] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1092'. [ 282.973983][ T9373] netlink: 'syz.0.1093': attribute type 11 has an invalid length. [ 282.982348][ T9373] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1093'. [ 282.995244][ T9373] netlink: 'syz.0.1093': attribute type 11 has an invalid length. [ 283.004010][ T9373] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1093'. [ 283.355386][ T9382] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1095'. [ 283.679691][ T9366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.784862][ T9390] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1098'. [ 283.807953][ T9372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.875052][ T9390] tc_dump_action: action bad kind [ 284.133997][ T9391] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1097'. [ 284.993040][ T9403] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1101'. [ 285.330422][ T9425] netlink: 'syz.1.1109': attribute type 10 has an invalid length. [ 285.393623][ T9425] team0: Port device wlan1 added [ 285.442823][ T9430] netlink: 'syz.2.1110': attribute type 11 has an invalid length. [ 285.471815][ T9431] netlink: 'syz.4.1112': attribute type 10 has an invalid length. [ 285.481309][ T9430] netlink: 'syz.2.1110': attribute type 11 has an invalid length. [ 285.684029][ T9431] team0: Port device dummy0 added [ 285.698044][ T9429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.927546][ T9451] __nla_validate_parse: 2 callbacks suppressed [ 286.927566][ T9451] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1115'. [ 287.640005][ T9458] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1117'. [ 287.760367][ T9461] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 287.767013][ T9461] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 288.253691][ T9478] netlink: 'syz.4.1124': attribute type 10 has an invalid length. [ 288.539571][ T9484] netlink: 'syz.3.1126': attribute type 11 has an invalid length. [ 288.575382][ T9484] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1126'. [ 288.594217][ T9488] netlink: 'syz.3.1126': attribute type 11 has an invalid length. [ 288.671586][ T9488] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1126'. [ 288.842661][ T9491] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1128'. [ 289.198175][ T9497] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1129'. [ 289.311198][ T9483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.497466][ T9512] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1132'. [ 290.312036][ T9522] netlink: 'syz.2.1137': attribute type 10 has an invalid length. [ 290.448458][ T9522] team0: Port device wlan1 added [ 291.176715][ T9538] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1141'. [ 291.437654][ T9537] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1142'. [ 291.624173][ T9550] netlink: 'syz.3.1145': attribute type 11 has an invalid length. [ 291.655053][ T9550] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1145'. [ 291.667177][ T9550] netlink: 'syz.3.1145': attribute type 11 has an invalid length. [ 292.422467][ T9548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.559719][ T9577] Illegal XDP return value 38 on prog (id 1027) dev N/A, expect packet loss! [ 292.844282][ T9592] __nla_validate_parse: 1 callbacks suppressed [ 292.844303][ T9592] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1159'. [ 293.393577][ T9614] netlink: 'syz.3.1167': attribute type 11 has an invalid length. [ 293.425875][ T9614] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1167'. [ 293.438515][ T9614] netlink: 'syz.3.1167': attribute type 11 has an invalid length. [ 293.448502][ T9614] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1167'. [ 293.644759][ T9623] netlink: 'syz.0.1169': attribute type 11 has an invalid length. [ 293.653635][ T9623] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1169'. [ 293.666868][ T9623] netlink: 'syz.0.1169': attribute type 11 has an invalid length. [ 293.675477][ T9623] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1169'. [ 293.727986][ T9622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.807364][ T9627] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1171'. [ 294.338879][ T9611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.143831][ T9656] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1181'. [ 295.605300][ T9683] netlink: 'syz.4.1190': attribute type 11 has an invalid length. [ 295.617174][ T9683] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1190'. [ 295.644550][ T9683] netlink: 'syz.4.1190': attribute type 11 has an invalid length. [ 295.668207][ T9683] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1190'. [ 296.168514][ T9705] netlink: 'syz.0.1198': attribute type 7 has an invalid length. [ 296.317284][ T9709] netlink: 'syz.0.1198': attribute type 2 has an invalid length. [ 296.343531][ T9709] netlink: 'syz.0.1198': attribute type 1 has an invalid length. [ 296.434338][ T9682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.665273][ T9714] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1201'. [ 297.675470][ T9755] netlink: 'syz.1.1213': attribute type 7 has an invalid length. [ 298.022572][ T9761] netlink: 'syz.1.1213': attribute type 2 has an invalid length. [ 298.176661][ T9761] netlink: 'syz.1.1213': attribute type 1 has an invalid length. [ 299.362564][ T9773] __nla_validate_parse: 1 callbacks suppressed [ 299.362583][ T9773] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1216'. [ 300.033972][ T9781] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1219'. [ 300.391399][ T9795] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1223'. [ 301.054204][ T9802] netlink: 'syz.2.1225': attribute type 10 has an invalid length. [ 301.393619][ T9810] netlink: 'syz.2.1229': attribute type 7 has an invalid length. [ 301.520494][ T9813] netlink: 'syz.3.1226': attribute type 7 has an invalid length. [ 301.528270][ T9813] netlink: 'syz.3.1226': attribute type 6 has an invalid length. [ 301.711198][ T9815] netlink: 'syz.2.1229': attribute type 2 has an invalid length. [ 301.748679][ T9815] netlink: 'syz.2.1229': attribute type 1 has an invalid length. [ 303.086390][ T9841] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1234'. [ 304.156131][ T9849] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1238'. [ 304.755861][ T9857] netlink: 'syz.4.1240': attribute type 21 has an invalid length. [ 304.966363][ T9853] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1239'. [ 305.286269][ T9867] netlink: 'syz.3.1242': attribute type 7 has an invalid length. [ 305.536528][ T9874] netlink: 'syz.3.1242': attribute type 2 has an invalid length. [ 305.568729][ T9874] netlink: 'syz.3.1242': attribute type 1 has an invalid length. [ 306.674120][ T9893] netlink: 'syz.2.1252': attribute type 2 has an invalid length. [ 307.143020][ T9902] netlink: 'syz.4.1255': attribute type 10 has an invalid length. [ 307.157557][ T9903] netlink: 'syz.4.1255': attribute type 10 has an invalid length. [ 307.332692][ T9902] team0: Device ipvlan1 failed to register rx_handler [ 307.562785][ T9916] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1258'. [ 307.648637][ T9903] team0: Device ipvlan1 failed to register rx_handler [ 307.973792][ T9921] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 307.981091][ T9921] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 308.087596][ T9923] netlink: 'syz.4.1260': attribute type 7 has an invalid length. [ 308.289937][ T9932] netlink: 'syz.4.1260': attribute type 2 has an invalid length. [ 308.318422][ T9932] netlink: 'syz.4.1260': attribute type 1 has an invalid length. [ 308.438837][ T9940] netlink: 'syz.3.1266': attribute type 11 has an invalid length. [ 308.446943][ T9940] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1266'. [ 308.474629][ T9940] netlink: 'syz.3.1266': attribute type 11 has an invalid length. [ 308.493132][ T9940] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1266'. [ 308.676248][ T9945] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1264'. [ 309.614033][ T9963] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1270'. [ 309.731823][ T9939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.076834][ T9975] FAULT_INJECTION: forcing a failure. [ 310.076834][ T9975] name failslab, interval 1, probability 0, space 0, times 0 [ 310.089741][ T9975] CPU: 0 UID: 0 PID: 9975 Comm: syz.4.1273 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 310.089771][ T9975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.089784][ T9975] Call Trace: [ 310.089792][ T9975] [ 310.089800][ T9975] dump_stack_lvl+0x189/0x250 [ 310.089832][ T9975] ? __pfx____ratelimit+0x10/0x10 [ 310.089860][ T9975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.089883][ T9975] ? __pfx__printk+0x10/0x10 [ 310.089914][ T9975] ? __lock_acquire+0xab9/0xd20 [ 310.089944][ T9975] should_fail_ex+0x414/0x560 [ 310.089977][ T9975] should_failslab+0xa8/0x100 [ 310.090003][ T9975] kmem_cache_alloc_noprof+0x73/0x3c0 [ 310.090024][ T9975] ? __inet_hash_connect+0x151e/0x2310 [ 310.090052][ T9975] __inet_hash_connect+0x151e/0x2310 [ 310.090090][ T9975] ? __inet_hash_connect+0x4fa/0x2310 [ 310.090120][ T9975] ? __pfx___inet_hash_connect+0x10/0x10 [ 310.090141][ T9975] ? sk_setup_caps+0x850/0xac0 [ 310.090171][ T9975] ? inet6_hash_connect+0xd8/0x170 [ 310.090194][ T9975] tcp_v6_connect+0xf2e/0x1880 [ 310.090236][ T9975] ? __pfx_tcp_v6_connect+0x10/0x10 [ 310.090260][ T9975] ? __local_bh_enable_ip+0x12d/0x1c0 [ 310.090282][ T9975] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 310.090341][ T9975] mptcp_connect+0x75d/0xb50 [ 310.090374][ T9975] __inet_stream_connect+0x2ab/0xe80 [ 310.090415][ T9975] ? __pfx___inet_stream_connect+0x10/0x10 [ 310.090446][ T9975] ? __kasan_kmalloc+0x93/0xb0 [ 310.090469][ T9975] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 310.090490][ T9975] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 310.090523][ T9975] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 310.090559][ T9975] mptcp_sendmsg_fastopen+0x17d/0x580 [ 310.090595][ T9975] mptcp_sendmsg+0x176c/0x1970 [ 310.090621][ T9975] ? __pfx___might_resched+0x10/0x10 [ 310.090645][ T9975] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 310.090694][ T9975] ? aa_sk_perm+0x81e/0x950 [ 310.090725][ T9975] ? __pfx_aa_sk_perm+0x10/0x10 [ 310.090749][ T9975] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 310.090785][ T9975] ? inet6_sendmsg+0x101/0x120 [ 310.090816][ T9975] __sock_sendmsg+0xe5/0x270 [ 310.090849][ T9975] ____sys_sendmsg+0x505/0x830 [ 310.090879][ T9975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.090913][ T9975] ? import_iovec+0x74/0xa0 [ 310.090939][ T9975] ___sys_sendmsg+0x21f/0x2a0 [ 310.090964][ T9975] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.091025][ T9975] ? __fget_files+0x2a/0x420 [ 310.091047][ T9975] ? __fget_files+0x3a0/0x420 [ 310.091081][ T9975] __x64_sys_sendmsg+0x19b/0x260 [ 310.091108][ T9975] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.091157][ T9975] do_syscall_64+0xfa/0x3b0 [ 310.091186][ T9975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.091205][ T9975] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 310.091223][ T9975] ? clear_bhb_loop+0x60/0xb0 [ 310.091247][ T9975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.091266][ T9975] RIP: 0033:0x7f9b8a38e9a9 [ 310.091285][ T9975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.091301][ T9975] RSP: 002b:00007f9b8b1ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.091328][ T9975] RAX: ffffffffffffffda RBX: 00007f9b8a5b5fa0 RCX: 00007f9b8a38e9a9 [ 310.091342][ T9975] RDX: e07e872420dfefca RSI: 0000200000000780 RDI: 0000000000000006 [ 310.091354][ T9975] RBP: 00007f9b8b1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 310.091366][ T9975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.091376][ T9975] R13: 0000000000000000 R14: 00007f9b8a5b5fa0 R15: 00007ffda973cd28 [ 310.091406][ T9975] [ 311.352568][T10006] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 311.359866][T10006] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 313.103186][T10077] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1296'. [ 313.142798][T10077] tc_dump_action: action bad kind [ 313.783083][T10097] netlink: 'syz.3.1300': attribute type 39 has an invalid length. [ 315.249046][T10134] FAULT_INJECTION: forcing a failure. [ 315.249046][T10134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.287913][T10134] CPU: 1 UID: 0 PID: 10134 Comm: syz.1.1314 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 315.287944][T10134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.287956][T10134] Call Trace: [ 315.287964][T10134] [ 315.287973][T10134] dump_stack_lvl+0x189/0x250 [ 315.288006][T10134] ? __pfx____ratelimit+0x10/0x10 [ 315.288035][T10134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.288058][T10134] ? __pfx__printk+0x10/0x10 [ 315.288085][T10134] ? __might_fault+0xb0/0x130 [ 315.288110][T10134] ? __might_fault+0xb0/0x130 [ 315.288147][T10134] should_fail_ex+0x414/0x560 [ 315.288181][T10134] _copy_from_user+0x2d/0xb0 [ 315.288204][T10134] ___sys_sendmsg+0x158/0x2a0 [ 315.288233][T10134] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.288283][T10134] ? __fget_files+0x2a/0x420 [ 315.288324][T10134] ? __fget_files+0x2a/0x420 [ 315.288345][T10134] ? __fget_files+0x3a0/0x420 [ 315.288381][T10134] __x64_sys_sendmsg+0x19b/0x260 [ 315.288409][T10134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.288444][T10134] ? __pfx_ksys_write+0x10/0x10 [ 315.288462][T10134] ? rcu_is_watching+0x15/0xb0 [ 315.288492][T10134] ? do_syscall_64+0xbe/0x3b0 [ 315.288524][T10134] do_syscall_64+0xfa/0x3b0 [ 315.288549][T10134] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.288573][T10134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.288593][T10134] ? clear_bhb_loop+0x60/0xb0 [ 315.288617][T10134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.288636][T10134] RIP: 0033:0x7f4b88f8e9a9 [ 315.288653][T10134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.288669][T10134] RSP: 002b:00007f4b89e85038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.288690][T10134] RAX: ffffffffffffffda RBX: 00007f4b891b5fa0 RCX: 00007f4b88f8e9a9 [ 315.288703][T10134] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 315.288715][T10134] RBP: 00007f4b89e85090 R08: 0000000000000000 R09: 0000000000000000 [ 315.288727][T10134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.288737][T10134] R13: 0000000000000000 R14: 00007f4b891b5fa0 R15: 00007fffd0c3a698 [ 315.288771][T10134] [ 317.475477][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.484462][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.752437][T10204] netlink: 'syz.0.1339': attribute type 39 has an invalid length. [ 321.355784][T10222] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1346'. [ 322.295073][T10227] netlink: 'syz.2.1347': attribute type 20 has an invalid length. [ 322.608806][T10238] FAULT_INJECTION: forcing a failure. [ 322.608806][T10238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.665357][T10238] CPU: 0 UID: 0 PID: 10238 Comm: syz.1.1350 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 322.665388][T10238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.665400][T10238] Call Trace: [ 322.665408][T10238] [ 322.665417][T10238] dump_stack_lvl+0x189/0x250 [ 322.665445][T10238] ? __pfx____ratelimit+0x10/0x10 [ 322.665472][T10238] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.665496][T10238] ? __pfx__printk+0x10/0x10 [ 322.665534][T10238] should_fail_ex+0x414/0x560 [ 322.665566][T10238] _copy_to_user+0x31/0xb0 [ 322.665590][T10238] simple_read_from_buffer+0xe1/0x170 [ 322.665625][T10238] proc_fail_nth_read+0x1df/0x250 [ 322.665655][T10238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.665683][T10238] ? rw_verify_area+0x258/0x650 [ 322.665702][T10238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.665728][T10238] vfs_read+0x1fd/0x980 [ 322.665754][T10238] ? __pfx___mutex_lock+0x10/0x10 [ 322.665781][T10238] ? __pfx_vfs_read+0x10/0x10 [ 322.665803][T10238] ? __fget_files+0x2a/0x420 [ 322.665831][T10238] ? __fget_files+0x3a0/0x420 [ 322.665853][T10238] ? __fget_files+0x2a/0x420 [ 322.665887][T10238] ksys_read+0x145/0x250 [ 322.665909][T10238] ? __pfx_ksys_read+0x10/0x10 [ 322.665935][T10238] ? do_syscall_64+0xbe/0x3b0 [ 322.665966][T10238] do_syscall_64+0xfa/0x3b0 [ 322.665991][T10238] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.666015][T10238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.666035][T10238] ? clear_bhb_loop+0x60/0xb0 [ 322.666059][T10238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.666078][T10238] RIP: 0033:0x7f4b88f8d3bc [ 322.666095][T10238] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 322.666111][T10238] RSP: 002b:00007f4b89e64030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 322.666131][T10238] RAX: ffffffffffffffda RBX: 00007f4b891b6080 RCX: 00007f4b88f8d3bc [ 322.666146][T10238] RDX: 000000000000000f RSI: 00007f4b89e640a0 RDI: 0000000000000005 [ 322.666158][T10238] RBP: 00007f4b89e64090 R08: 0000000000000000 R09: 0000000000000000 [ 322.666169][T10238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.666181][T10238] R13: 0000000000000000 R14: 00007f4b891b6080 R15: 00007fffd0c3a698 [ 322.666212][T10238] [ 324.250362][T10244] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1353'. [ 325.540312][T10259] netlink: 'syz.0.1357': attribute type 11 has an invalid length. [ 325.548745][T10259] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1357'. [ 325.564794][T10259] netlink: 'syz.0.1357': attribute type 11 has an invalid length. [ 325.577710][T10259] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1357'. [ 326.296120][T10268] netlink: 'syz.4.1360': attribute type 11 has an invalid length. [ 326.317306][T10268] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1360'. [ 326.338507][T10268] netlink: 'syz.4.1360': attribute type 11 has an invalid length. [ 326.359304][T10271] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 326.366222][T10271] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 326.369347][T10268] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1360'. [ 326.383677][T10258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.079919][T10296] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 327.086814][T10296] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 327.113529][T10264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.839201][T10320] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1375'. [ 329.602697][T10328] netlink: 'syz.3.1378': attribute type 11 has an invalid length. [ 329.745942][T10328] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1378'. [ 329.899510][T10328] netlink: 'syz.3.1378': attribute type 11 has an invalid length. [ 329.907462][T10328] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1378'. [ 330.274832][T10340] netlink: 'syz.0.1381': attribute type 10 has an invalid length. [ 330.282432][T10335] syzkaller0: entered promiscuous mode [ 330.293103][T10335] syzkaller0: entered allmulticast mode [ 330.354296][T10344] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1380'. [ 330.455982][T10327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.603485][T10340] team0: Port device wlan1 added [ 330.979717][T10354] netlink: 'syz.3.1383': attribute type 21 has an invalid length. [ 331.009533][T10354] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1383'. [ 333.050837][T10352] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1382'. [ 333.061039][T10354] netlink: 'syz.3.1383': attribute type 5 has an invalid length. [ 333.094448][T10354] netlink: 'syz.3.1383': attribute type 6 has an invalid length. [ 333.120035][T10354] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1383'. [ 334.299587][T10376] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1389'. [ 334.689222][T10379] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1391'. [ 335.288238][T10393] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1393'. [ 335.330791][T10393] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1393'. [ 335.500184][T10393] netlink: 'syz.1.1393': attribute type 10 has an invalid length. [ 336.042391][T10393] team0 (unregistering): Port device team_slave_0 removed [ 336.131164][T10393] team0 (unregistering): Port device team_slave_1 removed [ 336.166570][T10393] team0 (unregistering): Port device wlan1 removed [ 336.286566][T10414] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1399'. [ 336.926367][T10424] netlink: 'syz.4.1403': attribute type 21 has an invalid length. [ 337.249063][T10439] netlink: 'syz.3.1409': attribute type 1 has an invalid length. [ 337.580825][T10443] netlink: 'syz.0.1411': attribute type 11 has an invalid length. [ 337.608943][T10443] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1411'. [ 337.622742][T10443] netlink: 'syz.0.1411': attribute type 11 has an invalid length. [ 337.631435][T10443] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1411'. [ 338.365895][T10441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.958029][T10464] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1416'. [ 340.154836][T10498] ipvlan0: entered promiscuous mode [ 340.162591][T10498] ipvlan0: entered allmulticast mode [ 340.198617][T10498] veth0_vlan: entered allmulticast mode [ 341.288323][T10508] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1432'. [ 342.149966][T10545] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1443'. [ 342.892281][T10561] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1448'. [ 343.606422][T10579] netlink: 'syz.1.1455': attribute type 4 has an invalid length. [ 344.395717][T10609] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1461'. [ 345.982811][T10650] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1475'. [ 346.028741][T10643] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1475'. [ 346.564933][T10649] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1478'. [ 347.090894][T10679] FAULT_INJECTION: forcing a failure. [ 347.090894][T10679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.108087][T10679] CPU: 1 UID: 0 PID: 10679 Comm: syz.2.1488 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 347.108111][T10679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.108122][T10679] Call Trace: [ 347.108129][T10679] [ 347.108136][T10679] dump_stack_lvl+0x189/0x250 [ 347.108163][T10679] ? __pfx____ratelimit+0x10/0x10 [ 347.108187][T10679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.108209][T10679] ? __pfx__printk+0x10/0x10 [ 347.108237][T10679] ? __asan_memcpy+0x40/0x70 [ 347.108271][T10679] should_fail_ex+0x414/0x560 [ 347.108302][T10679] _copy_to_user+0x31/0xb0 [ 347.108324][T10679] bpf_verifier_vlog+0x48c/0x900 [ 347.108355][T10679] __btf_verifier_log+0xd4/0x120 [ 347.108381][T10679] ? __pfx___btf_verifier_log+0x10/0x10 [ 347.108413][T10679] __btf_verifier_log_type+0x494/0x630 [ 347.108444][T10679] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 347.108468][T10679] ? perf_trace_run_bpf_submit+0xee/0x170 [ 347.108502][T10679] btf_datasec_check_meta+0x3a9/0xa80 [ 347.108527][T10679] ? irqentry_enter+0x3d/0x60 [ 347.108557][T10679] ? __pfx_sort+0x10/0x10 [ 347.108581][T10679] btf_parse_type_sec+0x44a/0x24a0 [ 347.108607][T10679] ? irqentry_exit+0x74/0x90 [ 347.108645][T10679] ? btf_parse_str_sec+0x212/0x2a0 [ 347.108683][T10679] btf_new_fd+0x40e/0xc90 [ 347.108709][T10679] ? apparmor_capable+0x137/0x1b0 [ 347.108739][T10679] ? __pfx_btf_new_fd+0x10/0x10 [ 347.108767][T10679] ? bpf_token_put+0x143/0x160 [ 347.108787][T10679] ? bpf_btf_load+0x126/0x190 [ 347.108810][T10679] __sys_bpf+0x406/0x870 [ 347.108831][T10679] ? __pfx___sys_bpf+0x10/0x10 [ 347.108864][T10679] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 347.108909][T10679] __x64_sys_bpf+0x7c/0x90 [ 347.108937][T10679] do_syscall_64+0xfa/0x3b0 [ 347.108965][T10679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.108983][T10679] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 347.109001][T10679] ? clear_bhb_loop+0x60/0xb0 [ 347.109020][T10679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.109038][T10679] RIP: 0033:0x7f25a738e9a9 [ 347.109054][T10679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.109070][T10679] RSP: 002b:00007f25a826d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.109088][T10679] RAX: ffffffffffffffda RBX: 00007f25a75b5fa0 RCX: 00007f25a738e9a9 [ 347.109100][T10679] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 347.109111][T10679] RBP: 00007f25a826d090 R08: 0000000000000000 R09: 0000000000000000 [ 347.109122][T10679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 347.109131][T10679] R13: 0000000000000000 R14: 00007f25a75b5fa0 R15: 00007ffd1b374398 [ 347.109159][T10679] [ 347.705569][T10694] netlink: 'syz.0.1494': attribute type 7 has an invalid length. [ 347.954336][T10706] netlink: 'syz.2.1498': attribute type 11 has an invalid length. [ 348.005380][T10706] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1498'. [ 348.064766][T10711] netlink: 'syz.2.1498': attribute type 11 has an invalid length. [ 348.074611][T10698] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1497'. [ 348.145110][T10711] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1498'. [ 348.163129][T10710] netlink: 'syz.0.1494': attribute type 2 has an invalid length. [ 348.428086][T10710] netlink: 'syz.0.1494': attribute type 1 has an invalid length. [ 348.768438][T10703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.691267][T10737] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1508'. [ 349.864617][T10745] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1510'. [ 350.163583][T10744] syzkaller0: entered promiscuous mode [ 350.184273][T10744] syzkaller0: entered allmulticast mode [ 350.401175][T10756] netlink: 'syz.2.1514': attribute type 11 has an invalid length. [ 350.413520][T10756] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1514'. [ 350.472117][T10759] netlink: 'syz.2.1514': attribute type 11 has an invalid length. [ 350.549152][T10759] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1514'. [ 351.085284][T10784] netlink: 'syz.3.1524': attribute type 11 has an invalid length. [ 351.095109][T10784] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1524'. [ 351.108634][T10784] netlink: 'syz.3.1524': attribute type 11 has an invalid length. [ 351.173450][T10786] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1522'. [ 351.178567][T10784] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1524'. [ 351.229967][T10755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.182725][T10783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.835057][T10817] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1532'. [ 358.201559][T10870] tap0: tun_chr_ioctl cmd 2147767506 [ 358.272200][T10873] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1550'. [ 358.283476][T10873] tc_dump_action: action bad kind [ 358.562623][T10879] netlink: 'syz.4.1551': attribute type 7 has an invalid length. [ 358.781807][T10882] netlink: 'syz.4.1551': attribute type 2 has an invalid length. [ 358.841511][T10882] netlink: 'syz.4.1551': attribute type 1 has an invalid length. [ 359.720433][T10895] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1555'. [ 360.253161][T10903] netlink: 'syz.3.1559': attribute type 7 has an invalid length. [ 360.265619][T10903] netlink: 'syz.3.1559': attribute type 6 has an invalid length. [ 360.424137][T10909] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1561'. [ 360.471816][T10909] tc_dump_action: action bad kind [ 360.588161][T10912] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 360.595445][T10912] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 361.289967][T10937] netlink: 'syz.4.1572': attribute type 11 has an invalid length. [ 361.298061][T10937] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1572'. [ 361.433930][T10937] netlink: 'syz.4.1572': attribute type 11 has an invalid length. [ 361.466258][T10937] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1572'. [ 361.714752][T10949] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1577'. [ 361.724702][T10949] tc_dump_action: action bad kind [ 362.150329][T10935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.205313][T10962] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1581'. [ 363.410918][T10989] netlink: 'syz.1.1592': attribute type 11 has an invalid length. [ 363.418935][T10989] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1592'. [ 363.445063][T10989] netlink: 'syz.1.1592': attribute type 11 has an invalid length. [ 363.453430][T10989] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1592'. [ 363.634432][T11001] netlink: 'syz.2.1597': attribute type 11 has an invalid length. [ 363.642953][T11001] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1597'. [ 364.241217][T10988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.470281][T11022] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 364.477362][T11022] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 364.513161][T11000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.291365][T11165] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1655'. [ 372.254069][T11186] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 372.260678][T11186] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 378.646063][T11271] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 378.653075][T11271] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 378.930042][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.939415][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.537439][T11282] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1692'. [ 379.663021][T11286] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1696'. [ 380.901710][T11320] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1708'. [ 381.142460][T11337] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 381.148988][T11337] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 382.580638][T11378] netlink: 'syz.1.1730': attribute type 11 has an invalid length. [ 382.588545][T11378] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1730'. [ 382.599884][T11364] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1725'. [ 382.638310][T11378] netlink: 'syz.1.1730': attribute type 11 has an invalid length. [ 382.647232][T11378] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1730'. [ 383.372651][T11377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.815392][T11413] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 383.822503][T11413] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 384.510352][T11440] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 384.517368][T11440] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 385.158084][T11457] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 385.165075][T11457] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 385.558092][T11472] netlink: 'syz.2.1766': attribute type 7 has an invalid length. [ 385.692610][T11474] netlink: 'syz.2.1766': attribute type 2 has an invalid length. [ 385.741601][T11474] netlink: 'syz.2.1766': attribute type 1 has an invalid length. [ 386.290046][T11485] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1770'. [ 386.922484][T11500] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 386.929523][T11500] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 387.222496][T11506] netlink: 'syz.1.1778': attribute type 11 has an invalid length. [ 387.263814][T11506] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1778'. [ 387.294610][T11506] netlink: 'syz.1.1778': attribute type 11 has an invalid length. [ 387.302853][T11506] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1778'. [ 387.726398][T11520] netlink: 'syz.4.1782': attribute type 7 has an invalid length. [ 387.882584][T11522] netlink: 'syz.4.1782': attribute type 2 has an invalid length. [ 387.896271][T11522] netlink: 'syz.4.1782': attribute type 1 has an invalid length. [ 388.047055][T11505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.554855][T11620] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 391.561843][T11620] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 392.700576][T11626] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1820'. [ 393.158679][T11646] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1826'. [ 393.185942][T11651] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1826'. [ 393.491293][T11667] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1830'. [ 395.467353][T11712] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1846'. [ 395.623048][T11704] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1845'. [ 395.651694][T11707] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1845'. [ 397.085779][T11760] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1861'. [ 397.455384][T11769] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1865'. [ 397.484639][T11765] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1865'. [ 397.860014][T11771] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1866'. [ 398.661718][T11776] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1869'. [ 399.056068][T11798] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1877'. [ 399.201535][T11798] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1877'. [ 399.382453][T11812] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1879'. [ 399.401406][T11803] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1879'. [ 400.747296][T11837] netlink: 'syz.2.1891': attribute type 11 has an invalid length. [ 400.756634][T11837] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1891'. [ 401.153754][T11847] netlink: 'syz.1.1895': attribute type 11 has an invalid length. [ 401.206363][T11847] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1895'. [ 401.256321][T11847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.587074][T11836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.188329][T11861] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1900'. [ 402.271544][T11871] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1900'. [ 402.685428][T11892] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 402.692537][T11892] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 402.950129][T11899] netlink: 'syz.2.1915': attribute type 11 has an invalid length. [ 402.965288][T11899] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1915'. [ 402.983644][T11899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.358987][T11910] netlink: 'syz.1.1919': attribute type 11 has an invalid length. [ 403.433577][T11910] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1919'. [ 403.465936][T11910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.373302][T11942] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1929'. [ 404.397556][T11939] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1929'. [ 404.535797][T11949] netlink: 'syz.1.1933': attribute type 11 has an invalid length. [ 404.545516][T11949] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1933'. [ 404.563434][T11949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.904464][T11964] netlink: 'syz.2.1939': attribute type 11 has an invalid length. [ 404.913173][T11964] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1939'. [ 404.929749][T11964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.064013][T12008] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1948'. [ 407.498798][T12019] netlink: 'syz.2.1956': attribute type 11 has an invalid length. [ 407.539661][T12019] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1956'. [ 407.563759][T12019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.542523][T12047] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1965'. [ 409.038475][T12059] netlink: 'syz.0.1969': attribute type 11 has an invalid length. [ 409.047145][T12059] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1969'. [ 409.063457][T12059] netlink: 'syz.0.1969': attribute type 11 has an invalid length. [ 409.072702][T12059] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1969'. [ 409.461478][T12075] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1973'. [ 409.861055][T12058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.891797][T12085] netlink: 'syz.1.1979': attribute type 7 has an invalid length. [ 410.151985][T12085] netlink: 'syz.1.1979': attribute type 2 has an invalid length. [ 410.161430][T12085] netlink: 'syz.1.1979': attribute type 1 has an invalid length. [ 410.437946][T12087] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1980'. [ 411.272498][T12115] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1987'. [ 411.821429][T12143] netlink: 'syz.2.1998': attribute type 11 has an invalid length. [ 411.857368][T12143] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1998'. [ 411.912425][T12146] netlink: 'syz.2.1998': attribute type 11 has an invalid length. [ 411.959246][T12146] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1998'. [ 412.320613][T12150] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2001'. [ 412.634603][T12142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.968170][T12177] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2008'. [ 414.163762][T12195] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2017'. [ 414.415880][T12210] netlink: 'syz.2.2021': attribute type 11 has an invalid length. [ 414.425754][T12210] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2021'. [ 414.443080][T12210] netlink: 'syz.2.2021': attribute type 11 has an invalid length. [ 414.461754][T12210] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2021'. [ 414.826675][T12226] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 414.833829][T12226] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 414.865382][T12230] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 414.872588][T12230] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 415.233355][T12240] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2034'. [ 415.255539][T12208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.374597][T12240] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2034'. [ 415.780941][T12266] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 415.788145][T12266] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 417.530577][T12294] netlink: 'syz.1.2057': attribute type 11 has an invalid length. [ 417.547668][T12294] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2057'. [ 417.568487][T12294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.133676][T12312] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2060'. [ 418.147043][T12311] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2060'. [ 418.422841][T12313] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2058'. [ 418.931722][T12323] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 418.938643][T12323] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 419.579243][T12347] netlink: 'syz.4.2073': attribute type 11 has an invalid length. [ 419.609266][T12347] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2073'. [ 419.651411][T12347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.287245][T12390] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2086'. [ 422.108408][T12394] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2088'. [ 422.370772][T12407] netlink: 'syz.4.2092': attribute type 11 has an invalid length. [ 422.424880][T12407] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2092'. [ 422.484009][T12402] netlink: 'syz.0.2090': attribute type 11 has an invalid length. [ 422.574022][T12402] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2090'. [ 422.606474][T12402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.608813][T12407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.011713][T12418] netlink: 'syz.1.2094': attribute type 11 has an invalid length. [ 423.040623][T12418] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2094'. [ 423.077988][T12418] netlink: 'syz.1.2094': attribute type 11 has an invalid length. [ 423.095493][T12418] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2094'. [ 423.667160][T12432] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2098'. [ 423.821819][T12416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.665928][T12460] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2105'. [ 424.706831][T12453] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2105'. [ 424.959521][T12467] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2103'. [ 425.266606][T12473] netlink: 'syz.3.2109': attribute type 11 has an invalid length. [ 425.296021][T12473] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2109'. [ 425.333735][T12473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.044327][T12496] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2118'. [ 426.079514][T12496] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2118'. [ 426.850079][T12501] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2119'. [ 428.262387][T12514] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2122'. [ 428.535906][T12518] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2124'. [ 429.851269][T12544] netlink: 'syz.1.2132': attribute type 11 has an invalid length. [ 429.911621][T12544] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2132'. [ 430.233422][T12544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.654811][T12553] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2131'. [ 432.192184][T12582] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2138'. [ 433.209387][T12591] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2145'. [ 433.250899][T12596] netlink: 'syz.4.2147': attribute type 11 has an invalid length. [ 433.269216][T12596] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2147'. [ 433.298223][T12596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.437584][T12600] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2148'. [ 433.479888][T12600] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2148'. [ 434.592174][T12633] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2160'. [ 434.919690][T12638] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2160'. [ 435.076481][T12625] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2157'. [ 435.380527][T12643] netlink: 'syz.0.2161': attribute type 7 has an invalid length. [ 436.995145][T12643] netlink: 'syz.0.2161': attribute type 2 has an invalid length. [ 436.995294][T12657] netlink: 'syz.2.2164': attribute type 2 has an invalid length. [ 437.049447][T12643] netlink: 'syz.0.2161': attribute type 1 has an invalid length. [ 437.079281][T12657] netlink: 'syz.2.2164': attribute type 1 has an invalid length. [ 438.491210][T12695] netlink: 'syz.1.2179': attribute type 11 has an invalid length. [ 438.521791][T12695] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2179'. [ 438.565819][T12696] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2174'. [ 438.595181][T12695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.553102][T12715] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2185'. [ 439.615750][T12715] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2185'. [ 439.703463][T12722] netlink: 'syz.0.2187': attribute type 11 has an invalid length. [ 439.723487][T12722] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2187'. [ 439.770610][T12722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.353664][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.360764][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.466893][T12734] netlink: 'syz.3.2191': attribute type 11 has an invalid length. [ 440.478397][T12734] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2191'. [ 441.069373][T12751] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2195'. [ 441.295596][T12733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.239162][T12770] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2203'. [ 443.153778][T12802] netlink: 'syz.2.2214': attribute type 11 has an invalid length. [ 443.163480][T12802] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2214'. [ 443.987421][T12799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.008305][T12845] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2228'. [ 446.815228][T12883] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 446.822552][T12883] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 448.028108][T12900] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2246'. [ 449.356958][T12909] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2250'. [ 450.057357][T12935] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2258'. [ 450.621143][T12955] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 450.628184][T12955] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 452.954504][T13003] netlink: 'syz.2.2279': attribute type 11 has an invalid length. [ 452.969946][T13003] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2279'. [ 453.028692][T13003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.446644][T13012] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2280'. [ 454.146042][T13034] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 454.153921][T13034] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 455.637807][T13063] netlink: 'syz.1.2299': attribute type 11 has an invalid length. [ 455.729242][T13063] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2299'. [ 455.801249][T13063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.820107][T13065] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2298'. [ 457.853334][T13121] netlink: 'syz.0.2318': attribute type 11 has an invalid length. [ 457.862999][T13121] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2318'. [ 457.880312][T13109] netlink: 'syz.3.2315': attribute type 2 has an invalid length. [ 457.904754][T13109] netlink: 'syz.3.2315': attribute type 1 has an invalid length. [ 458.021056][T13121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.065668][T13175] netlink: 'syz.3.2335': attribute type 11 has an invalid length. [ 461.096304][T13175] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2335'. [ 461.133756][T13175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.611548][T13203] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2343'. [ 463.392557][T13227] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2353'. [ 463.431314][T13227] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2353'. [ 463.741744][T13228] netlink: 'syz.2.2352': attribute type 2 has an invalid length. [ 463.753814][T13228] netlink: 'syz.2.2352': attribute type 1 has an invalid length. [ 464.304432][T13249] netlink: 'syz.4.2358': attribute type 2 has an invalid length. [ 464.374330][T13249] netlink: 'syz.4.2358': attribute type 1 has an invalid length. [ 464.719923][T13264] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2364'. [ 465.482461][T13291] netlink: 'syz.2.2371': attribute type 2 has an invalid length. [ 465.523125][T13291] netlink: 'syz.2.2371': attribute type 1 has an invalid length. [ 465.917377][T13301] netlink: 'syz.2.2378': attribute type 2 has an invalid length. [ 465.926756][T13301] netlink: 'syz.2.2378': attribute type 1 has an invalid length. [ 466.324008][T13313] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2381'. [ 467.402703][T13340] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 467.409829][T13340] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 467.480727][T13341] netlink: 'syz.3.2388': attribute type 2 has an invalid length. [ 467.493521][T13341] netlink: 'syz.3.2388': attribute type 1 has an invalid length. [ 468.719409][T13376] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2399'. [ 468.857890][T13381] netlink: 'syz.2.2403': attribute type 11 has an invalid length. [ 468.935435][T13381] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2403'. [ 468.950312][T13381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.853505][T13416] netlink: 'syz.1.2415': attribute type 2 has an invalid length. [ 470.908419][T13416] netlink: 'syz.1.2415': attribute type 1 has an invalid length. [ 471.030613][T13420] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2417'. [ 471.627569][T13430] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2418'. [ 474.760109][T13470] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2433'. [ 475.828994][T13486] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2437'. [ 476.146126][T13501] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2440'. [ 476.956529][T13519] netlink: 'syz.4.2448': attribute type 11 has an invalid length. [ 476.965543][T13519] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2448'. [ 477.000149][T13519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.404507][T13531] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2450'. [ 478.437582][T13537] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2451'. [ 479.062750][T13569] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2459'. [ 480.396161][T13582] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2465'. [ 481.033154][T13592] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2466'. [ 481.277481][T13590] netlink: 'syz.2.2467': attribute type 2 has an invalid length. [ 481.472886][T13590] netlink: 'syz.2.2467': attribute type 1 has an invalid length. [ 482.334871][T13599] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2469'. [ 483.847852][T13630] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2478'. [ 484.236764][T13645] netlink: 'syz.1.2483': attribute type 2 has an invalid length. [ 484.286304][T13645] netlink: 'syz.1.2483': attribute type 1 has an invalid length. [ 484.948421][T13674] netlink: 'syz.3.2490': attribute type 11 has an invalid length. [ 484.959384][T13674] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2490'. [ 484.977527][T13674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.995317][T13700] netlink: 'syz.0.2501': attribute type 11 has an invalid length. [ 486.035473][T13700] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2501'. [ 486.053218][T13700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.095227][T13704] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 486.102361][T13704] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 487.344875][T13730] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2511'. [ 487.820699][T13742] netlink: 'syz.4.2516': attribute type 11 has an invalid length. [ 487.828816][T13742] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2516'. [ 487.848623][T13742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.211951][T13746] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2515'. [ 489.332101][T13770] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2524'. [ 489.835154][T13783] netlink: 'syz.0.2529': attribute type 2 has an invalid length. [ 489.892444][T13783] netlink: 'syz.0.2529': attribute type 1 has an invalid length. [ 490.166917][T13792] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2530'. [ 490.621239][T13811] lo: entered allmulticast mode [ 490.678594][T13811] sit0: entered promiscuous mode [ 490.691809][T13811] sit0: entered allmulticast mode [ 490.956226][T13817] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2541'. [ 491.214507][T13823] netlink: 'syz.2.2542': attribute type 2 has an invalid length. [ 491.230849][T13823] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2542'. [ 492.203190][T13852] vlan0: entered allmulticast mode [ 492.212151][T13852] veth0_vlan: entered allmulticast mode [ 492.273967][T13852] netlink: 'syz.2.2553': attribute type 10 has an invalid length. [ 492.284346][T13852] lo: entered promiscuous mode [ 492.306539][T13852] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 492.719545][T13866] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2556'. [ 492.763541][T13860] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2554'. [ 493.978961][T13902] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 493.985586][T13902] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 494.336155][T13897] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2569'. [ 495.191146][T13919] netlink: 'syz.1.2575': attribute type 7 has an invalid length. [ 495.202430][T13919] netlink: 'syz.1.2575': attribute type 6 has an invalid length. [ 495.290149][T13918] delete_channel: no stack [ 495.375009][T13932] netlink: 'syz.4.2580': attribute type 1 has an invalid length. [ 496.411898][T13969] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2596'. [ 496.432127][T13969] netlink: zone id is out of range [ 496.443548][T13969] netlink: zone id is out of range [ 496.479205][T13969] netlink: zone id is out of range [ 496.484686][T13969] netlink: zone id is out of range [ 496.490282][T13969] netlink: zone id is out of range [ 496.496705][T13969] netlink: zone id is out of range [ 496.508374][T13969] netlink: zone id is out of range [ 496.516193][T13969] netlink: zone id is out of range [ 496.701728][T13974] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.2598'. [ 497.370073][T13987] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2601'. [ 497.624905][T14003] netlink: 'syz.0.2608': attribute type 7 has an invalid length. [ 497.735260][T14005] netlink: 'syz.0.2608': attribute type 2 has an invalid length. [ 497.755765][T14005] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.2608'. [ 497.855229][T14007] netlink: 'syz.3.2609': attribute type 39 has an invalid length. [ 498.272052][T14026] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.2617'. [ 498.321952][T14030] veth1_macvtap: entered allmulticast mode [ 498.828954][T14043] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.2620'. [ 498.892959][T14043] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.2620'. [ 498.906355][T14043] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.2620'. [ 499.566667][T14066] FAULT_INJECTION: forcing a failure. [ 499.566667][T14066] name failslab, interval 1, probability 0, space 0, times 0 [ 499.619300][T14066] CPU: 1 UID: 0 PID: 14066 Comm: syz.1.2629 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 499.619330][T14066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.619348][T14066] Call Trace: [ 499.619359][T14066] [ 499.619372][T14066] dump_stack_lvl+0x189/0x250 [ 499.619409][T14066] ? __pfx____ratelimit+0x10/0x10 [ 499.619452][T14066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.619485][T14066] ? __pfx__printk+0x10/0x10 [ 499.619549][T14066] ? __pfx___might_resched+0x10/0x10 [ 499.619571][T14066] ? fs_reclaim_acquire+0x7d/0x100 [ 499.619626][T14066] should_fail_ex+0x414/0x560 [ 499.619684][T14066] should_failslab+0xa8/0x100 [ 499.619722][T14066] kmem_cache_alloc_noprof+0x73/0x3c0 [ 499.619748][T14066] ? security_inode_alloc+0x39/0x330 [ 499.619805][T14066] security_inode_alloc+0x39/0x330 [ 499.619853][T14066] inode_init_always_gfp+0x9ed/0xdc0 [ 499.619922][T14066] alloc_inode+0x82/0x1b0 [ 499.619961][T14066] path_from_stashed+0x299/0x8f0 [ 499.620035][T14066] ? __pfx_path_from_stashed+0x10/0x10 [ 499.620083][T14066] ? ipcns_get+0xd3/0x110 [ 499.620135][T14066] proc_ns_get_link+0xef/0x230 [ 499.620169][T14066] ? __pfx_proc_ns_get_link+0x10/0x10 [ 499.620219][T14066] ? atime_needs_update+0x3ac/0x6d0 [ 499.620252][T14066] ? bpf_lsm_inode_follow_link+0x9/0x20 [ 499.620289][T14066] ? __pfx_proc_ns_get_link+0x10/0x10 [ 499.620323][T14066] pick_link+0x633/0xe80 [ 499.620397][T14066] step_into+0xc5d/0xf30 [ 499.620467][T14066] ? rcu_read_lock_any_held+0xb3/0x120 [ 499.620500][T14066] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 499.620535][T14066] ? __pfx_step_into+0x10/0x10 [ 499.620617][T14066] path_openat+0x1bc6/0x3830 [ 499.620804][T14066] ? __pfx_path_openat+0x10/0x10 [ 499.620820][T14066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.620940][T14066] do_filp_open+0x1fa/0x410 [ 499.620981][T14066] ? __pfx_do_filp_open+0x10/0x10 [ 499.621113][T14066] ? _raw_spin_unlock+0x28/0x50 [ 499.621136][T14066] ? alloc_fd+0x64c/0x6c0 [ 499.621220][T14066] do_sys_openat2+0x121/0x1c0 [ 499.621269][T14066] ? __pfx_do_sys_openat2+0x10/0x10 [ 499.621320][T14066] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 499.621361][T14066] ? __pfx_notify_die+0x10/0x10 [ 499.621383][T14066] ? rcu_is_watching+0x15/0xb0 [ 499.621435][T14066] __x64_sys_openat+0x138/0x170 [ 499.621496][T14066] do_syscall_64+0xfa/0x3b0 [ 499.621522][T14066] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.621553][T14066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.621574][T14066] ? clear_bhb_loop+0x60/0xb0 [ 499.621615][T14066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.621641][T14066] RIP: 0033:0x7f4b88f8d310 [ 499.621665][T14066] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 499.621682][T14066] RSP: 002b:00007f4b89e84f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 499.621703][T14066] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4b88f8d310 [ 499.621717][T14066] RDX: 0000000000000002 RSI: 00007f4b89e84fa0 RDI: 00000000ffffff9c [ 499.621730][T14066] RBP: 00007f4b89e84fa0 R08: 0000000000000000 R09: 0000000000000000 [ 499.621742][T14066] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 499.621754][T14066] R13: 0000000000000000 R14: 00007f4b891b5fa0 R15: 00007fffd0c3a698 [ 499.621845][T14066] [ 500.121699][T14068] tun0: tun_chr_ioctl cmd 2148553947 [ 500.395136][T14081] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2633'. [ 500.417368][T14079] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2633'. [ 501.558460][T14108] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2638'. [ 501.808523][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.815171][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.829986][T14117] netlink: 'syz.3.2646': attribute type 8 has an invalid length. [ 501.880611][T14117] netlink: 'syz.3.2646': attribute type 3 has an invalid length. [ 501.888429][T14117] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.2646'. [ 504.902667][T14141] netlink: 'syz.0.2652': attribute type 19 has an invalid length. [ 505.255661][T14171] FAULT_INJECTION: forcing a failure. [ 505.255661][T14171] name failslab, interval 1, probability 0, space 0, times 0 [ 505.278381][T14171] CPU: 1 UID: 0 PID: 14171 Comm: syz.2.2662 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 505.278412][T14171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 505.278424][T14171] Call Trace: [ 505.278432][T14171] [ 505.278440][T14171] dump_stack_lvl+0x189/0x250 [ 505.278468][T14171] ? __pfx____ratelimit+0x10/0x10 [ 505.278492][T14171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.278511][T14171] ? __pfx__printk+0x10/0x10 [ 505.278539][T14171] ? __pfx___might_resched+0x10/0x10 [ 505.278564][T14171] should_fail_ex+0x414/0x560 [ 505.278592][T14171] should_failslab+0xa8/0x100 [ 505.278616][T14171] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 505.278637][T14171] ? __alloc_skb+0x112/0x2d0 [ 505.278660][T14171] __alloc_skb+0x112/0x2d0 [ 505.278681][T14171] netlink_sendmsg+0x5c6/0xb30 [ 505.278709][T14171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.278729][T14171] ? aa_sock_msg_perm+0x94/0x160 [ 505.278755][T14171] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 505.278779][T14171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.278797][T14171] __sock_sendmsg+0x219/0x270 [ 505.278825][T14171] ____sys_sendmsg+0x505/0x830 [ 505.278850][T14171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.278877][T14171] ? import_iovec+0x74/0xa0 [ 505.278899][T14171] ___sys_sendmsg+0x21f/0x2a0 [ 505.278921][T14171] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.278970][T14171] ? __fget_files+0x2a/0x420 [ 505.278990][T14171] ? __fget_files+0x3a0/0x420 [ 505.279018][T14171] __x64_sys_sendmsg+0x19b/0x260 [ 505.279042][T14171] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 505.279070][T14171] ? __pfx_ksys_write+0x10/0x10 [ 505.279092][T14171] ? do_syscall_64+0xbe/0x3b0 [ 505.279119][T14171] do_syscall_64+0xfa/0x3b0 [ 505.279141][T14171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.279158][T14171] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 505.279182][T14171] ? clear_bhb_loop+0x60/0xb0 [ 505.279202][T14171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.279219][T14171] RIP: 0033:0x7f25a738e9a9 [ 505.279235][T14171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.279250][T14171] RSP: 002b:00007f25a826d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.279270][T14171] RAX: ffffffffffffffda RBX: 00007f25a75b5fa0 RCX: 00007f25a738e9a9 [ 505.279282][T14171] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000004 [ 505.279294][T14171] RBP: 00007f25a826d090 R08: 0000000000000000 R09: 0000000000000000 [ 505.279304][T14171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.279315][T14171] R13: 0000000000000000 R14: 00007f25a75b5fa0 R15: 00007ffd1b374398 [ 505.279339][T14171] [ 506.692484][T14190] netlink: 'syz.0.2668': attribute type 11 has an invalid length. [ 506.739815][T14190] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2668'. [ 507.021506][T14204] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2674'. [ 507.285601][T14212] netlink: 'syz.4.2676': attribute type 29 has an invalid length. [ 507.404735][T14216] netlink: 'syz.4.2677': attribute type 7 has an invalid length. [ 507.412932][T14216] netlink: 'syz.4.2677': attribute type 6 has an invalid length. [ 507.495742][T14186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.074252][T14222] netlink: 'syz.0.2679': attribute type 2 has an invalid length. [ 508.094263][T14222] netlink: 'syz.0.2679': attribute type 1 has an invalid length. [ 508.598969][T14245] netlink: 'syz.2.2686': attribute type 10 has an invalid length. [ 508.851948][T14248] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2685'. [ 509.783158][T14274] FAULT_INJECTION: forcing a failure. [ 509.783158][T14274] name failslab, interval 1, probability 0, space 0, times 0 [ 509.838290][T14274] CPU: 1 UID: 0 PID: 14274 Comm: syz.3.2699 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 509.838324][T14274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.838338][T14274] Call Trace: [ 509.838346][T14274] [ 509.838356][T14274] dump_stack_lvl+0x189/0x250 [ 509.838389][T14274] ? __pfx____ratelimit+0x10/0x10 [ 509.838417][T14274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 509.838440][T14274] ? __pfx__printk+0x10/0x10 [ 509.838474][T14274] ? __pfx___might_resched+0x10/0x10 [ 509.838503][T14274] should_fail_ex+0x414/0x560 [ 509.838536][T14274] should_failslab+0xa8/0x100 [ 509.838562][T14274] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 509.838586][T14274] ? __get_vm_area_node+0x13f/0x300 [ 509.838613][T14274] __get_vm_area_node+0x13f/0x300 [ 509.838641][T14274] __vmalloc_node_range_noprof+0x301/0x12f0 [ 509.838666][T14274] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 509.838690][T14274] ? is_bpf_text_address+0x26/0x2b0 [ 509.838737][T14274] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 509.838760][T14274] ? __might_fault+0xb0/0x130 [ 509.838780][T14274] ? __pfx_aa_get_newest_label+0x10/0x10 [ 509.838808][T14274] ? _parse_integer_limit+0x1ae/0x1f0 [ 509.838842][T14274] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 509.838861][T14274] __vmalloc_noprof+0xb1/0xf0 [ 509.838883][T14274] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 509.838907][T14274] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 509.838934][T14274] bpf_prog_alloc+0x3c/0x1a0 [ 509.838957][T14274] bpf_prog_load+0x735/0x1930 [ 509.838992][T14274] ? __pfx_bpf_prog_load+0x10/0x10 [ 509.839034][T14274] ? bpf_lsm_bpf+0x9/0x20 [ 509.839050][T14274] ? security_bpf+0x7e/0x300 [ 509.839076][T14274] __sys_bpf+0x528/0x870 [ 509.839096][T14274] ? __pfx___sys_bpf+0x10/0x10 [ 509.839140][T14274] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 509.839173][T14274] ? __pfx_ksys_write+0x10/0x10 [ 509.839202][T14274] __x64_sys_bpf+0x7c/0x90 [ 509.839233][T14274] do_syscall_64+0xfa/0x3b0 [ 509.839259][T14274] ? lockdep_hardirqs_on+0x9c/0x150 [ 509.839284][T14274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.839304][T14274] ? clear_bhb_loop+0x60/0xb0 [ 509.839328][T14274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.839347][T14274] RIP: 0033:0x7f226058e9a9 [ 509.839364][T14274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.839382][T14274] RSP: 002b:00007f226147a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 509.839404][T14274] RAX: ffffffffffffffda RBX: 00007f22607b5fa0 RCX: 00007f226058e9a9 [ 509.839419][T14274] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 509.839432][T14274] RBP: 00007f226147a090 R08: 0000000000000000 R09: 0000000000000000 [ 509.839444][T14274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.839456][T14274] R13: 0000000000000001 R14: 00007f22607b5fa0 R15: 00007ffec5b67d58 [ 509.839487][T14274] [ 510.147680][T14274] syz.3.2699: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 510.169399][T14274] CPU: 0 UID: 0 PID: 14274 Comm: syz.3.2699 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 510.169429][T14274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 510.169441][T14274] Call Trace: [ 510.169450][T14274] [ 510.169459][T14274] dump_stack_lvl+0x189/0x250 [ 510.169494][T14274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.169518][T14274] ? __pfx__printk+0x10/0x10 [ 510.169545][T14274] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 510.169573][T14274] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 510.169602][T14274] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 510.169632][T14274] warn_alloc+0x214/0x310 [ 510.169663][T14274] ? __pfx_warn_alloc+0x10/0x10 [ 510.169690][T14274] ? __get_vm_area_node+0x13f/0x300 [ 510.169717][T14274] ? __get_vm_area_node+0x2b5/0x300 [ 510.169746][T14274] __vmalloc_node_range_noprof+0x326/0x12f0 [ 510.169779][T14274] ? is_bpf_text_address+0x26/0x2b0 [ 510.169829][T14274] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 510.169851][T14274] ? __might_fault+0xb0/0x130 [ 510.169871][T14274] ? __pfx_aa_get_newest_label+0x10/0x10 [ 510.169899][T14274] ? _parse_integer_limit+0x1ae/0x1f0 [ 510.169933][T14274] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 510.169952][T14274] __vmalloc_noprof+0xb1/0xf0 [ 510.169975][T14274] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 510.170000][T14274] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 510.170024][T14274] bpf_prog_alloc+0x3c/0x1a0 [ 510.170048][T14274] bpf_prog_load+0x735/0x1930 [ 510.170082][T14274] ? __pfx_bpf_prog_load+0x10/0x10 [ 510.170126][T14274] ? bpf_lsm_bpf+0x9/0x20 [ 510.170145][T14274] ? security_bpf+0x7e/0x300 [ 510.170173][T14274] __sys_bpf+0x528/0x870 [ 510.170204][T14274] ? __pfx___sys_bpf+0x10/0x10 [ 510.170240][T14274] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 510.170273][T14274] ? __pfx_ksys_write+0x10/0x10 [ 510.170303][T14274] __x64_sys_bpf+0x7c/0x90 [ 510.170334][T14274] do_syscall_64+0xfa/0x3b0 [ 510.170360][T14274] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.170385][T14274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.170405][T14274] ? clear_bhb_loop+0x60/0xb0 [ 510.170432][T14274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.170451][T14274] RIP: 0033:0x7f226058e9a9 [ 510.170469][T14274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.170487][T14274] RSP: 002b:00007f226147a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 510.170508][T14274] RAX: ffffffffffffffda RBX: 00007f22607b5fa0 RCX: 00007f226058e9a9 [ 510.170523][T14274] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 510.170536][T14274] RBP: 00007f226147a090 R08: 0000000000000000 R09: 0000000000000000 [ 510.170548][T14274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.170560][T14274] R13: 0000000000000001 R14: 00007f22607b5fa0 R15: 00007ffec5b67d58 [ 510.170591][T14274] [ 510.170692][T14274] Mem-Info: [ 510.485026][T14279] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2700'. [ 510.658548][T14274] active_anon:6354 inactive_anon:0 isolated_anon:0 [ 510.658548][T14274] active_file:18730 inactive_file:39998 isolated_file:0 [ 510.658548][T14274] unevictable:768 dirty:432 writeback:0 [ 510.658548][T14274] slab_reclaimable:10230 slab_unreclaimable:98622 [ 510.658548][T14274] mapped:29612 shmem:1362 pagetables:1235 [ 510.658548][T14274] sec_pagetables:0 bounce:0 [ 510.658548][T14274] kernel_misc_reclaimable:0 [ 510.658548][T14274] free:1307218 free_pcp:19672 free_cma:0 [ 510.759213][T14274] Node 0 active_anon:25216kB inactive_anon:0kB active_file:74920kB inactive_file:159788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118448kB dirty:1728kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11736kB pagetables:4796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 510.823218][T14280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2701'. [ 510.881455][T14284] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2701'. [ 510.898989][T14274] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 511.015837][T14274] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 511.049867][T14274] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 511.055688][T14274] Node 0 DMA32 free:1308392kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25068kB inactive_anon:0kB active_file:74920kB inactive_file:158224kB unevictable:1536kB writepending:1728kB present:3129332kB managed:2558464kB mlocked:0kB bounce:0kB free_pcp:63748kB local_pcp:43452kB free_cma:0kB [ 511.088298][T14274] lowmem_reserve[]: 0 0 1 1 1 [ 511.093101][T14274] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 511.122552][T14274] lowmem_reserve[]: 0 0 0 0 0 [ 511.127308][T14274] Node 1 Normal free:3904996kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15392kB local_pcp:4288kB free_cma:0kB [ 511.160027][T14274] lowmem_reserve[]: 0 0 0 0 0 [ 511.164815][T14274] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 511.177674][T14274] Node 0 DMA32: 1960*4kB (UME) 944*8kB (UM) 761*16kB (UM) 679*32kB (UM) 112*64kB (UME) 34*128kB (UM) 5*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (U) 303*4096kB (UM) = 1308304kB [ 511.208279][T14274] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 511.241308][T14274] Node 1 Normal: 167*4kB (UME) 47*8kB (UME) 37*16kB (UME) 158*32kB (UME) 45*64kB (UME) 11*128kB (UME) 7*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3904996kB [ 511.243142][T14290] netlink: 'syz.0.2703': attribute type 6 has an invalid length. [ 511.260217][T14274] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 511.260243][T14274] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 511.260263][T14274] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 511.260278][T14274] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 511.260295][T14274] 60086 total pagecache pages [ 511.260309][T14274] 0 pages in swap cache [ 511.260317][T14274] Free swap = 124996kB [ 511.260326][T14274] Total swap = 124996kB [ 511.260336][T14274] 2097051 pages RAM [ 511.260344][T14274] 0 pages HighMem/MovableOnly [ 511.260351][T14274] 425393 pages reserved [ 511.260359][T14274] 0 pages cma reserved [ 511.306800][T14293] netlink: 'syz.3.2704': attribute type 2 has an invalid length. [ 511.352674][T14290] netlink: 'syz.0.2703': attribute type 1 has an invalid length. [ 511.364770][T14291] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2702'. [ 511.452221][T14293] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2704'. [ 511.584635][T14290] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2703'. [ 511.670079][T14299] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2705'. [ 511.761370][T14304] netlink: 'syz.4.2708': attribute type 1 has an invalid length. [ 513.053607][T14326] netlink: 'syz.1.2716': attribute type 10 has an invalid length. [ 513.186684][T14328] net_ratelimit: 76 callbacks suppressed [ 513.186750][T14328] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 513.202480][T14328] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 513.473879][T14332] FAULT_INJECTION: forcing a failure. [ 513.473879][T14332] name failslab, interval 1, probability 0, space 0, times 0 [ 513.487330][T14332] CPU: 1 UID: 0 PID: 14332 Comm: syz.3.2719 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 513.487358][T14332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 513.487371][T14332] Call Trace: [ 513.487382][T14332] [ 513.487394][T14332] dump_stack_lvl+0x189/0x250 [ 513.487432][T14332] ? __pfx____ratelimit+0x10/0x10 [ 513.487468][T14332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.487500][T14332] ? __pfx__printk+0x10/0x10 [ 513.487564][T14332] ? __pfx___might_resched+0x10/0x10 [ 513.487615][T14332] should_fail_ex+0x414/0x560 [ 513.487673][T14332] should_failslab+0xa8/0x100 [ 513.487721][T14332] __kmalloc_noprof+0xcb/0x4f0 [ 513.487744][T14332] ? kfree+0x4d/0x440 [ 513.487760][T14332] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 513.487818][T14332] tomoyo_realpath_from_path+0xe3/0x5d0 [ 513.487862][T14332] ? tomoyo_domain+0xd9/0x130 [ 513.487912][T14332] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 513.487946][T14332] tomoyo_path_number_perm+0x1e8/0x5a0 [ 513.487991][T14332] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 513.488030][T14332] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 513.488223][T14332] ? __fget_files+0x2a/0x420 [ 513.488265][T14332] ? __fget_files+0x2a/0x420 [ 513.488289][T14332] ? __fget_files+0x3a0/0x420 [ 513.488313][T14332] ? __fget_files+0x2a/0x420 [ 513.488364][T14332] security_file_ioctl+0xcb/0x2d0 [ 513.488407][T14332] __se_sys_ioctl+0x47/0x170 [ 513.488442][T14332] do_syscall_64+0xfa/0x3b0 [ 513.488469][T14332] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.488498][T14332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.488520][T14332] ? clear_bhb_loop+0x60/0xb0 [ 513.488561][T14332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.488580][T14332] RIP: 0033:0x7f226058e9a9 [ 513.488604][T14332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.488621][T14332] RSP: 002b:00007f226147a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.488642][T14332] RAX: ffffffffffffffda RBX: 00007f22607b5fa0 RCX: 00007f226058e9a9 [ 513.488656][T14332] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000007 [ 513.488669][T14332] RBP: 00007f226147a090 R08: 0000000000000000 R09: 0000000000000000 [ 513.488681][T14332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.488692][T14332] R13: 0000000000000000 R14: 00007f22607b5fa0 R15: 00007ffec5b67d58 [ 513.488786][T14332] [ 513.488796][T14332] ERROR: Out of memory at tomoyo_realpath_from_path. [ 513.542720][T14336] netlink: 'syz.4.2720': attribute type 1 has an invalid length. [ 514.587620][T14347] netlink: 'syz.4.2724': attribute type 21 has an invalid length. [ 514.647577][T14347] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2724'. [ 516.084438][T14348] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.2725'. [ 516.925716][T14366] FAULT_INJECTION: forcing a failure. [ 516.925716][T14366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.960295][T14366] CPU: 1 UID: 0 PID: 14366 Comm: syz.0.2732 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 516.960329][T14366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 516.960342][T14366] Call Trace: [ 516.960349][T14366] [ 516.960358][T14366] dump_stack_lvl+0x189/0x250 [ 516.960386][T14366] ? __pfx____ratelimit+0x10/0x10 [ 516.960412][T14366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.960435][T14366] ? __pfx__printk+0x10/0x10 [ 516.960461][T14366] ? __might_fault+0xb0/0x130 [ 516.960494][T14366] should_fail_ex+0x414/0x560 [ 516.960524][T14366] _copy_from_user+0x2d/0xb0 [ 516.960547][T14366] ___sys_sendmsg+0x158/0x2a0 [ 516.960575][T14366] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.960635][T14366] ? __fget_files+0x2a/0x420 [ 516.960658][T14366] ? __fget_files+0x3a0/0x420 [ 516.960691][T14366] __x64_sys_sendmsg+0x19b/0x260 [ 516.960718][T14366] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.960767][T14366] do_syscall_64+0xfa/0x3b0 [ 516.960796][T14366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.960815][T14366] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 516.960835][T14366] ? clear_bhb_loop+0x60/0xb0 [ 516.960859][T14366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.960878][T14366] RIP: 0033:0x7f8dc798e9a9 [ 516.960896][T14366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.960913][T14366] RSP: 002b:00007f8dc57f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.960934][T14366] RAX: ffffffffffffffda RBX: 00007f8dc7bb5fa0 RCX: 00007f8dc798e9a9 [ 516.960949][T14366] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000006 [ 516.960961][T14366] RBP: 00007f8dc57f6090 R08: 0000000000000000 R09: 0000000000000000 [ 516.960974][T14366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.960986][T14366] R13: 0000000000000000 R14: 00007f8dc7bb5fa0 R15: 00007fff30c3fc08 [ 516.961016][T14366] [ 516.964859][T14370] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2733'. [ 517.158584][T14381] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2736'. [ 517.765148][T14399] netlink: 'syz.0.2739': attribute type 21 has an invalid length. [ 517.809308][T14399] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2739'. [ 518.099567][T14412] syz_tun: tun_net_xmit 86 [ 519.149428][ C1] syz_tun: tun_net_xmit 86 [ 519.721795][T14452] FAULT_INJECTION: forcing a failure. [ 519.721795][T14452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.740735][T14452] CPU: 1 UID: 0 PID: 14452 Comm: syz.3.2755 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 519.740763][T14452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 519.740775][T14452] Call Trace: [ 519.740782][T14452] [ 519.740790][T14452] dump_stack_lvl+0x189/0x250 [ 519.740818][T14452] ? __pfx____ratelimit+0x10/0x10 [ 519.740843][T14452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.740864][T14452] ? __pfx__printk+0x10/0x10 [ 519.740889][T14452] ? __might_fault+0xb0/0x130 [ 519.740912][T14452] ? __might_fault+0xb0/0x130 [ 519.740938][T14452] should_fail_ex+0x414/0x560 [ 519.740968][T14452] _copy_from_user+0x2d/0xb0 [ 519.740989][T14452] __sys_bpf+0x1ed/0x870 [ 519.741011][T14452] ? __pfx___sys_bpf+0x10/0x10 [ 519.741042][T14452] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 519.741075][T14452] ? __pfx_ksys_write+0x10/0x10 [ 519.741092][T14452] ? rcu_is_watching+0x15/0xb0 [ 519.741123][T14452] __x64_sys_bpf+0x7c/0x90 [ 519.741152][T14452] do_syscall_64+0xfa/0x3b0 [ 519.741175][T14452] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.741200][T14452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.741218][T14452] ? clear_bhb_loop+0x60/0xb0 [ 519.741241][T14452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.741260][T14452] RIP: 0033:0x7f226058e9a9 [ 519.741278][T14452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.741302][T14452] RSP: 002b:00007f226147a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 519.741322][T14452] RAX: ffffffffffffffda RBX: 00007f22607b5fa0 RCX: 00007f226058e9a9 [ 519.741337][T14452] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 519.741349][T14452] RBP: 00007f226147a090 R08: 0000000000000000 R09: 0000000000000000 [ 519.741360][T14452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.741371][T14452] R13: 0000000000000000 R14: 00007f22607b5fa0 R15: 00007ffec5b67d58 [ 519.741401][T14452] [ 520.175382][T14460] FAULT_INJECTION: forcing a failure. [ 520.175382][T14460] name failslab, interval 1, probability 0, space 0, times 0 [ 520.209075][ C1] syz_tun: tun_net_xmit 86 [ 520.294686][T14460] CPU: 0 UID: 0 PID: 14460 Comm: syz.2.2757 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 520.294716][T14460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 520.294728][T14460] Call Trace: [ 520.294737][T14460] [ 520.294745][T14460] dump_stack_lvl+0x189/0x250 [ 520.294774][T14460] ? __pfx____ratelimit+0x10/0x10 [ 520.294801][T14460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.294825][T14460] ? __pfx__printk+0x10/0x10 [ 520.294853][T14460] ? __pfx_sock_alloc_inode+0x10/0x10 [ 520.294882][T14460] ? __pfx___might_resched+0x10/0x10 [ 520.294911][T14460] should_fail_ex+0x414/0x560 [ 520.294940][T14460] ? __pfx_sock_alloc_inode+0x10/0x10 [ 520.294965][T14460] should_failslab+0xa8/0x100 [ 520.294989][T14460] ? __pfx_sock_alloc_inode+0x10/0x10 [ 520.295014][T14460] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 520.295036][T14460] ? sock_alloc_inode+0x28/0xc0 [ 520.295067][T14460] ? __pfx_sock_alloc_inode+0x10/0x10 [ 520.295091][T14460] sock_alloc_inode+0x28/0xc0 [ 520.295116][T14460] alloc_inode+0x67/0x1b0 [ 520.295138][T14460] __sock_create+0x12d/0x9f0 [ 520.295168][T14460] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.295201][T14460] __sys_socket+0xd7/0x1b0 [ 520.295240][T14460] __x64_sys_socket+0x7a/0x90 [ 520.295266][T14460] do_syscall_64+0xfa/0x3b0 [ 520.295294][T14460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.295312][T14460] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 520.295332][T14460] ? clear_bhb_loop+0x60/0xb0 [ 520.295356][T14460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.295375][T14460] RIP: 0033:0x7f25a738e9a9 [ 520.295392][T14460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.295410][T14460] RSP: 002b:00007f25a826d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 520.295432][T14460] RAX: ffffffffffffffda RBX: 00007f25a75b5fa0 RCX: 00007f25a738e9a9 [ 520.295446][T14460] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000018 [ 520.295459][T14460] RBP: 00007f25a826d090 R08: 0000000000000000 R09: 0000000000000000 [ 520.295471][T14460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.295483][T14460] R13: 0000000000000000 R14: 00007f25a75b5fa0 R15: 00007ffd1b374398 [ 520.295514][T14460] [ 520.296477][T14460] socket: no more sockets [ 521.010831][T14478] FAULT_INJECTION: forcing a failure. [ 521.010831][T14478] name failslab, interval 1, probability 0, space 0, times 0 [ 521.069249][T14478] CPU: 1 UID: 0 PID: 14478 Comm: syz.4.2762 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 521.069280][T14478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 521.069293][T14478] Call Trace: [ 521.069301][T14478] [ 521.069309][T14478] dump_stack_lvl+0x189/0x250 [ 521.069339][T14478] ? __pfx____ratelimit+0x10/0x10 [ 521.069367][T14478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.069391][T14478] ? __pfx__printk+0x10/0x10 [ 521.069425][T14478] ? __pfx___might_resched+0x10/0x10 [ 521.069457][T14478] should_fail_ex+0x414/0x560 [ 521.069491][T14478] should_failslab+0xa8/0x100 [ 521.069517][T14478] __kmalloc_noprof+0xcb/0x4f0 [ 521.069538][T14478] ? kfree+0x4d/0x440 [ 521.069554][T14478] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 521.069591][T14478] tomoyo_realpath_from_path+0xe3/0x5d0 [ 521.069623][T14478] ? tomoyo_domain+0xd9/0x130 [ 521.069648][T14478] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 521.069673][T14478] tomoyo_path_number_perm+0x1e8/0x5a0 [ 521.069701][T14478] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 521.069728][T14478] ? trace_call_bpf+0xb7/0x850 [ 521.069754][T14478] ? trace_call_bpf+0xb7/0x850 [ 521.069817][T14478] ? __fget_files+0x2a/0x420 [ 521.069845][T14478] ? __fget_files+0x2a/0x420 [ 521.069867][T14478] ? __fget_files+0x3a0/0x420 [ 521.069896][T14478] ? __fget_files+0x2a/0x420 [ 521.069925][T14478] security_file_ioctl+0xcb/0x2d0 [ 521.069952][T14478] __se_sys_ioctl+0x47/0x170 [ 521.069975][T14478] do_syscall_64+0xfa/0x3b0 [ 521.070003][T14478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.070028][T14478] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 521.070048][T14478] ? clear_bhb_loop+0x60/0xb0 [ 521.070073][T14478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.070091][T14478] RIP: 0033:0x7f9b8a38e9a9 [ 521.070109][T14478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.070126][T14478] RSP: 002b:00007f9b8b1ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 521.070146][T14478] RAX: ffffffffffffffda RBX: 00007f9b8a5b5fa0 RCX: 00007f9b8a38e9a9 [ 521.070161][T14478] RDX: 00002000000013c0 RSI: 0000000000005411 RDI: 0000000000000007 [ 521.070172][T14478] RBP: 00007f9b8b1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 521.070184][T14478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.070196][T14478] R13: 0000000000000000 R14: 00007f9b8a5b5fa0 R15: 00007ffda973cd28 [ 521.070231][T14478] [ 521.070286][T14478] ERROR: Out of memory at tomoyo_realpath_from_path. [ 521.396071][T14485] FAULT_INJECTION: forcing a failure. [ 521.396071][T14485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.412969][T14484] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2763'. [ 521.422274][T14485] CPU: 1 UID: 0 PID: 14485 Comm: syz.2.2764 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 521.422301][T14485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 521.422313][T14485] Call Trace: [ 521.422322][T14485] [ 521.422330][T14485] dump_stack_lvl+0x189/0x250 [ 521.422359][T14485] ? __pfx____ratelimit+0x10/0x10 [ 521.422386][T14485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.422410][T14485] ? __pfx__printk+0x10/0x10 [ 521.422438][T14485] ? __might_fault+0xb0/0x130 [ 521.422463][T14485] ? __might_fault+0xb0/0x130 [ 521.422491][T14485] should_fail_ex+0x414/0x560 [ 521.422524][T14485] _copy_from_user+0x2d/0xb0 [ 521.422547][T14485] __sys_bpf+0x1ed/0x870 [ 521.422570][T14485] ? __pfx___sys_bpf+0x10/0x10 [ 521.422610][T14485] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 521.422642][T14485] ? __pfx_ksys_write+0x10/0x10 [ 521.422660][T14485] ? rcu_is_watching+0x15/0xb0 [ 521.422693][T14485] __x64_sys_bpf+0x7c/0x90 [ 521.422724][T14485] do_syscall_64+0xfa/0x3b0 [ 521.422750][T14485] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.422775][T14485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.422795][T14485] ? clear_bhb_loop+0x60/0xb0 [ 521.422821][T14485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.422839][T14485] RIP: 0033:0x7f25a738e9a9 [ 521.422857][T14485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.422874][T14485] RSP: 002b:00007f25a824c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 521.422895][T14485] RAX: ffffffffffffffda RBX: 00007f25a75b6080 RCX: 00007f25a738e9a9 [ 521.422910][T14485] RDX: 0000000000000028 RSI: 0000200000000800 RDI: 0000000000000012 [ 521.422923][T14485] RBP: 00007f25a824c090 R08: 0000000000000000 R09: 0000000000000000 [ 521.422934][T14485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.422946][T14485] R13: 0000000000000000 R14: 00007f25a75b6080 R15: 00007ffd1b374398 [ 521.422980][T14485] [ 522.326887][T14510] FAULT_INJECTION: forcing a failure. [ 522.326887][T14510] name failslab, interval 1, probability 0, space 0, times 0 [ 522.366064][T14510] CPU: 1 UID: 0 PID: 14510 Comm: syz.3.2773 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 522.366095][T14510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 522.366108][T14510] Call Trace: [ 522.366119][T14510] [ 522.366131][T14510] dump_stack_lvl+0x189/0x250 [ 522.366167][T14510] ? __pfx____ratelimit+0x10/0x10 [ 522.366203][T14510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.366236][T14510] ? __pfx__printk+0x10/0x10 [ 522.366301][T14510] ? __pfx___might_resched+0x10/0x10 [ 522.366327][T14510] ? fs_reclaim_acquire+0x7d/0x100 [ 522.366382][T14510] should_fail_ex+0x414/0x560 [ 522.366441][T14510] should_failslab+0xa8/0x100 [ 522.366480][T14510] __kmalloc_noprof+0xcb/0x4f0 [ 522.366501][T14510] ? kfree+0x4d/0x440 [ 522.366518][T14510] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 522.366576][T14510] tomoyo_realpath_from_path+0xe3/0x5d0 [ 522.366661][T14510] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 522.366695][T14510] tomoyo_path_number_perm+0x1e8/0x5a0 [ 522.366742][T14510] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 522.366787][T14510] ? perf_trace_lock_acquire+0x335/0x410 [ 522.366870][T14510] ? __lock_acquire+0xab9/0xd20 [ 522.366988][T14510] ? __fget_files+0x2a/0x420 [ 522.367033][T14510] ? __fget_files+0x2a/0x420 [ 522.367065][T14510] ? __fget_files+0x3a0/0x420 [ 522.367090][T14510] ? __fget_files+0x2a/0x420 [ 522.367141][T14510] security_file_ioctl+0xcb/0x2d0 [ 522.367184][T14510] __se_sys_ioctl+0x47/0x170 [ 522.367225][T14510] do_syscall_64+0xfa/0x3b0 [ 522.367251][T14510] ? lockdep_hardirqs_on+0x9c/0x150 [ 522.367282][T14510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.367305][T14510] ? clear_bhb_loop+0x60/0xb0 [ 522.367346][T14510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.367366][T14510] RIP: 0033:0x7f226058e9a9 [ 522.367391][T14510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.367408][T14510] RSP: 002b:00007f226147a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 522.367429][T14510] RAX: ffffffffffffffda RBX: 00007f22607b5fa0 RCX: 00007f226058e9a9 [ 522.367443][T14510] RDX: 0000200000000640 RSI: 000000000000541b RDI: 0000000000000000 [ 522.367456][T14510] RBP: 00007f226147a090 R08: 0000000000000000 R09: 0000000000000000 [ 522.367468][T14510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.367480][T14510] R13: 0000000000000000 R14: 00007f22607b5fa0 R15: 00007ffec5b67d58 [ 522.367568][T14510] [ 522.367576][T14510] ERROR: Out of memory at tomoyo_realpath_from_path. [ 522.734860][T14515] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2774'. [ 524.052266][T14528] netlink: 'syz.3.2778': attribute type 21 has an invalid length. [ 524.218074][T14528] netlink: 'syz.3.2778': attribute type 6 has an invalid length. [ 524.229608][T14528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2778'. [ 524.416239][T14539] netlink: 'syz.1.2783': attribute type 11 has an invalid length. [ 524.429232][T14539] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2783'. [ 525.515109][T14537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.557839][T14568] FAULT_INJECTION: forcing a failure. [ 525.557839][T14568] name failslab, interval 1, probability 0, space 0, times 0 [ 525.571056][T14568] CPU: 0 UID: 0 PID: 14568 Comm: syz.3.2793 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 525.571085][T14568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 525.571099][T14568] Call Trace: [ 525.571108][T14568] [ 525.571118][T14568] dump_stack_lvl+0x189/0x250 [ 525.571152][T14568] ? __pfx____ratelimit+0x10/0x10 [ 525.571183][T14568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.571212][T14568] ? __pfx__printk+0x10/0x10 [ 525.571260][T14568] ? __pfx___might_resched+0x10/0x10 [ 525.571282][T14568] ? fs_reclaim_acquire+0x7d/0x100 [ 525.571325][T14568] should_fail_ex+0x414/0x560 [ 525.571370][T14568] should_failslab+0xa8/0x100 [ 525.571403][T14568] kmem_cache_alloc_noprof+0x73/0x3c0 [ 525.571426][T14568] ? alloc_empty_file+0x55/0x1d0 [ 525.571449][T14568] ? __pfx_perf_tp_event+0x10/0x10 [ 525.571482][T14568] alloc_empty_file+0x55/0x1d0 [ 525.571512][T14568] path_openat+0x107/0x3830 [ 525.571616][T14568] ? kasan_save_track+0x4f/0x80 [ 525.571636][T14568] ? __kasan_slab_alloc+0x6c/0x80 [ 525.571657][T14568] ? getname_flags+0xb8/0x540 [ 525.571684][T14568] ? __pfx_path_openat+0x10/0x10 [ 525.571699][T14568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.571734][T14568] ? perf_trace_run_bpf_submit+0xee/0x170 [ 525.571803][T14568] do_filp_open+0x1fa/0x410 [ 525.571842][T14568] ? __pfx_do_filp_open+0x10/0x10 [ 525.571929][T14568] ? _raw_spin_unlock+0x28/0x50 [ 525.571954][T14568] ? alloc_fd+0x64c/0x6c0 [ 525.572015][T14568] do_sys_openat2+0x121/0x1c0 [ 525.572042][T14568] ? atomic_notifier_call_chain+0x26/0x180 [ 525.572077][T14568] ? __pfx_do_sys_openat2+0x10/0x10 [ 525.572101][T14568] ? perf_trace_preemptirq_template+0xa3/0x340 [ 525.572145][T14568] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 525.572181][T14568] ? __pfx_notify_die+0x10/0x10 [ 525.572201][T14568] ? rcu_is_watching+0x15/0xb0 [ 525.572237][T14568] __x64_sys_openat+0x138/0x170 [ 525.572283][T14568] do_syscall_64+0xfa/0x3b0 [ 525.572311][T14568] ? lockdep_hardirqs_on+0x9c/0x150 [ 525.572339][T14568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.572359][T14568] ? clear_bhb_loop+0x60/0xb0 [ 525.572392][T14568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.572412][T14568] RIP: 0033:0x7f226058d310 [ 525.572435][T14568] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 525.572452][T14568] RSP: 002b:00007f2261479f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 525.572475][T14568] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f226058d310 [ 525.572488][T14568] RDX: 0000000000000002 RSI: 00007f2261479fa0 RDI: 00000000ffffff9c [ 525.572502][T14568] RBP: 00007f2261479fa0 R08: 0000000000000000 R09: 0000000000000000 [ 525.572515][T14568] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 525.572527][T14568] R13: 0000000000000000 R14: 00007f22607b5fa0 R15: 00007ffec5b67d58 [ 525.572590][T14568] [ 526.681251][T14594] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2800'. [ 526.864467][T14601] FAULT_INJECTION: forcing a failure. [ 526.864467][T14601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.003135][T14601] CPU: 1 UID: 0 PID: 14601 Comm: syz.0.2803 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 527.003170][T14601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 527.003184][T14601] Call Trace: [ 527.003193][T14601] [ 527.003202][T14601] dump_stack_lvl+0x189/0x250 [ 527.003234][T14601] ? __pfx____ratelimit+0x10/0x10 [ 527.003262][T14601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.003286][T14601] ? __pfx__printk+0x10/0x10 [ 527.003314][T14601] ? __might_fault+0xb0/0x130 [ 527.003341][T14601] ? __might_fault+0xb0/0x130 [ 527.003369][T14601] should_fail_ex+0x414/0x560 [ 527.003404][T14601] _copy_from_user+0x2d/0xb0 [ 527.003428][T14601] ___sys_sendmsg+0x158/0x2a0 [ 527.003457][T14601] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.003509][T14601] ? __fget_files+0x2a/0x420 [ 527.003550][T14601] ? __fget_files+0x2a/0x420 [ 527.003572][T14601] ? __fget_files+0x3a0/0x420 [ 527.003620][T14601] __x64_sys_sendmsg+0x19b/0x260 [ 527.003642][T14601] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 527.003673][T14601] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.003710][T14601] ? __pfx_ksys_write+0x10/0x10 [ 527.003729][T14601] ? rcu_is_watching+0x15/0xb0 [ 527.003760][T14601] ? do_syscall_64+0xbe/0x3b0 [ 527.003799][T14601] do_syscall_64+0xfa/0x3b0 [ 527.003823][T14601] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.003849][T14601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.003868][T14601] ? clear_bhb_loop+0x60/0xb0 [ 527.003894][T14601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.003914][T14601] RIP: 0033:0x7f8dc798e9a9 [ 527.003933][T14601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.003951][T14601] RSP: 002b:00007f8dc57d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.003972][T14601] RAX: ffffffffffffffda RBX: 00007f8dc7bb6080 RCX: 00007f8dc798e9a9 [ 527.003987][T14601] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 527.003999][T14601] RBP: 00007f8dc57d5090 R08: 0000000000000000 R09: 0000000000000000 [ 527.004011][T14601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.004023][T14601] R13: 0000000000000000 R14: 00007f8dc7bb6080 R15: 00007fff30c3fc08 [ 527.004058][T14601] [ 527.277047][T14593] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2802'. [ 527.597287][T14611] netlink: 'syz.4.2807': attribute type 5 has an invalid length. [ 527.607557][T14611] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2807'. [ 528.166316][T14632] FAULT_INJECTION: forcing a failure. [ 528.166316][T14632] name failslab, interval 1, probability 0, space 0, times 0 [ 528.211909][T14632] CPU: 1 UID: 0 PID: 14632 Comm: syz.4.2814 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 528.211939][T14632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 528.211953][T14632] Call Trace: [ 528.211964][T14632] [ 528.211977][T14632] dump_stack_lvl+0x189/0x250 [ 528.212017][T14632] ? __pfx____ratelimit+0x10/0x10 [ 528.212055][T14632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.212086][T14632] ? __pfx__printk+0x10/0x10 [ 528.212149][T14632] ? __pfx___might_resched+0x10/0x10 [ 528.212207][T14632] should_fail_ex+0x414/0x560 [ 528.212267][T14632] should_failslab+0xa8/0x100 [ 528.212307][T14632] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 528.212335][T14632] ? __d_alloc+0x31/0x6f0 [ 528.212392][T14632] __d_alloc+0x31/0x6f0 [ 528.212448][T14632] path_from_stashed+0x46c/0x8f0 [ 528.212522][T14632] ? __pfx_path_from_stashed+0x10/0x10 [ 528.212568][T14632] ? ipcns_get+0xd3/0x110 [ 528.212618][T14632] proc_ns_get_link+0xef/0x230 [ 528.212660][T14632] ? __pfx_proc_ns_get_link+0x10/0x10 [ 528.212715][T14632] ? atime_needs_update+0x3ac/0x6d0 [ 528.212747][T14632] ? bpf_lsm_inode_follow_link+0x9/0x20 [ 528.212778][T14632] ? __pfx_proc_ns_get_link+0x10/0x10 [ 528.212818][T14632] pick_link+0x633/0xe80 [ 528.212889][T14632] step_into+0xc5d/0xf30 [ 528.212949][T14632] ? rcu_read_lock_any_held+0xb3/0x120 [ 528.212978][T14632] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 528.213009][T14632] ? __pfx_step_into+0x10/0x10 [ 528.213087][T14632] path_openat+0x1bc6/0x3830 [ 528.213266][T14632] ? __pfx_path_openat+0x10/0x10 [ 528.213283][T14632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.213417][T14632] do_filp_open+0x1fa/0x410 [ 528.213454][T14632] ? __pfx_do_filp_open+0x10/0x10 [ 528.213581][T14632] ? _raw_spin_unlock+0x28/0x50 [ 528.213607][T14632] ? alloc_fd+0x64c/0x6c0 [ 528.213702][T14632] do_sys_openat2+0x121/0x1c0 [ 528.213758][T14632] ? __pfx_do_sys_openat2+0x10/0x10 [ 528.213810][T14632] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 528.213854][T14632] ? __pfx_notify_die+0x10/0x10 [ 528.213878][T14632] ? rcu_is_watching+0x15/0xb0 [ 528.213926][T14632] __x64_sys_openat+0x138/0x170 [ 528.213987][T14632] do_syscall_64+0xfa/0x3b0 [ 528.214014][T14632] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.214045][T14632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.214067][T14632] ? clear_bhb_loop+0x60/0xb0 [ 528.214109][T14632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.214129][T14632] RIP: 0033:0x7f9b8a38d310 [ 528.214153][T14632] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 528.214171][T14632] RSP: 002b:00007f9b8b1fef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 528.214193][T14632] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9b8a38d310 [ 528.214207][T14632] RDX: 0000000000000002 RSI: 00007f9b8b1fefa0 RDI: 00000000ffffff9c [ 528.214224][T14632] RBP: 00007f9b8b1fefa0 R08: 0000000000000000 R09: 0000000000000000 [ 528.214237][T14632] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 528.214248][T14632] R13: 0000000000000000 R14: 00007f9b8a5b5fa0 R15: 00007ffda973cd28 [ 528.214340][T14632] [ 528.630151][T14636] netlink: 'syz.1.2815': attribute type 10 has an invalid length. [ 528.638905][T14636] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2815'. [ 528.658288][T14636] ªªªªªª: entered promiscuous mode [ 528.688936][T14636] bridge0: port 3(ªªªªªª) entered blocking state [ 528.699990][T14636] bridge0: port 3(ªªªªªª) entered disabled state [ 528.711012][T14636] ªªªªªª: entered allmulticast mode [ 528.915263][T14636] bridge0: port 3(ªªªªªª) entered blocking state [ 528.925145][T14636] bridge0: port 3(ªªªªªª) entered forwarding state [ 529.108012][T14646] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2816'. [ 529.858003][T14669] FAULT_INJECTION: forcing a failure. [ 529.858003][T14669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.892010][T14669] CPU: 1 UID: 0 PID: 14669 Comm: syz.3.2824 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 529.892040][T14669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 529.892053][T14669] Call Trace: [ 529.892061][T14669] [ 529.892070][T14669] dump_stack_lvl+0x189/0x250 [ 529.892100][T14669] ? __pfx____ratelimit+0x10/0x10 [ 529.892126][T14669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.892149][T14669] ? __pfx__printk+0x10/0x10 [ 529.892176][T14669] ? __might_fault+0xb0/0x130 [ 529.892209][T14669] should_fail_ex+0x414/0x560 [ 529.892241][T14669] _copy_from_user+0x2d/0xb0 [ 529.892265][T14669] ____sys_sendmsg+0x2fe/0x830 [ 529.892295][T14669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.892328][T14669] ? import_iovec+0x74/0xa0 [ 529.892354][T14669] ___sys_sendmsg+0x21f/0x2a0 [ 529.892377][T14669] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.892432][T14669] ? __fget_files+0x2a/0x420 [ 529.892455][T14669] ? __fget_files+0x3a0/0x420 [ 529.892489][T14669] __x64_sys_sendmsg+0x19b/0x260 [ 529.892511][T14669] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 529.892549][T14669] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.892583][T14669] ? __pfx_ksys_write+0x10/0x10 [ 529.892602][T14669] ? rcu_is_watching+0x15/0xb0 [ 529.892631][T14669] ? do_syscall_64+0xbe/0x3b0 [ 529.892662][T14669] do_syscall_64+0xfa/0x3b0 [ 529.892687][T14669] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.892712][T14669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.892731][T14669] ? clear_bhb_loop+0x60/0xb0 [ 529.892754][T14669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.892774][T14669] RIP: 0033:0x7f226058e9a9 [ 529.892792][T14669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.892809][T14669] RSP: 002b:00007f226147a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.892829][T14669] RAX: ffffffffffffffda RBX: 00007f22607b5fa0 RCX: 00007f226058e9a9 [ 529.892844][T14669] RDX: 0000000004000081 RSI: 0000200000000000 RDI: 0000000000000003 [ 529.892857][T14669] RBP: 00007f226147a090 R08: 0000000000000000 R09: 0000000000000000 [ 529.892869][T14669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.892880][T14669] R13: 0000000000000000 R14: 00007f22607b5fa0 R15: 00007ffec5b67d58 [ 529.892910][T14669] [ 530.490472][T14670] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2820'. [ 530.756954][T14685] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2830'. [ 531.442879][T14699] netlink: 'syz.3.2833': attribute type 21 has an invalid length. [ 531.451583][T14692] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2829'. [ 531.517473][T14699] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2833'. [ 532.127719][T14724] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2840'. [ 532.326139][T14732] netlink: 'syz.3.2844': attribute type 39 has an invalid length. [ 532.558474][T14736] netlink: 'syz.1.2846': attribute type 39 has an invalid length. [ 532.780053][T14744] FAULT_INJECTION: forcing a failure. [ 532.780053][T14744] name failslab, interval 1, probability 0, space 0, times 0 [ 532.824024][T14744] CPU: 0 UID: 0 PID: 14744 Comm: syz.4.2848 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 532.824070][T14744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 532.824089][T14744] Call Trace: [ 532.824096][T14744] [ 532.824104][T14744] dump_stack_lvl+0x189/0x250 [ 532.824144][T14744] ? __pfx____ratelimit+0x10/0x10 [ 532.824169][T14744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.824192][T14744] ? __pfx__printk+0x10/0x10 [ 532.824223][T14744] ? __pfx___might_resched+0x10/0x10 [ 532.824244][T14744] ? fs_reclaim_acquire+0x7d/0x100 [ 532.824273][T14744] should_fail_ex+0x414/0x560 [ 532.824308][T14744] should_failslab+0xa8/0x100 [ 532.824332][T14744] __kmalloc_noprof+0xcb/0x4f0 [ 532.824353][T14744] ? bpf_test_init+0xc2/0x170 [ 532.824374][T14744] bpf_test_init+0xc2/0x170 [ 532.824394][T14744] bpf_prog_test_run_skb+0x1e9/0x1560 [ 532.824412][T14744] ? __fget_files+0x2a/0x420 [ 532.824439][T14744] ? __fget_files+0x2a/0x420 [ 532.824470][T14744] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 532.824491][T14744] bpf_prog_test_run+0x2c4/0x340 [ 532.824517][T14744] __sys_bpf+0x581/0x870 [ 532.824539][T14744] ? __pfx___sys_bpf+0x10/0x10 [ 532.824579][T14744] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 532.824610][T14744] ? __pfx_ksys_write+0x10/0x10 [ 532.824628][T14744] ? rcu_is_watching+0x15/0xb0 [ 532.824659][T14744] __x64_sys_bpf+0x7c/0x90 [ 532.824689][T14744] do_syscall_64+0xfa/0x3b0 [ 532.824715][T14744] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.824736][T14744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.824755][T14744] ? clear_bhb_loop+0x60/0xb0 [ 532.824779][T14744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.824798][T14744] RIP: 0033:0x7f9b8a38e9a9 [ 532.824816][T14744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.824834][T14744] RSP: 002b:00007f9b8b1ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 532.824854][T14744] RAX: ffffffffffffffda RBX: 00007f9b8a5b5fa0 RCX: 00007f9b8a38e9a9 [ 532.824869][T14744] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 532.824882][T14744] RBP: 00007f9b8b1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 532.824894][T14744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.824905][T14744] R13: 0000000000000000 R14: 00007f9b8a5b5fa0 R15: 00007ffda973cd28 [ 532.824935][T14744] [ 533.088807][T14749] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2852'. [ 533.403854][T14756] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2855'. [ 533.461100][T14765] netlink: 'syz.2.2858': attribute type 21 has an invalid length. [ 533.485117][T14765] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2858'. [ 534.258293][T14784] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2863'. [ 534.269671][T14783] FAULT_INJECTION: forcing a failure. [ 534.269671][T14783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.286326][T14785] ------------[ cut here ]------------ [ 534.292845][T14785] WARNING: CPU: 1 PID: 14785 at kernel/events/core.c:7211 perf_pending_task+0x319/0x400 [ 534.303243][T14785] Modules linked in: [ 534.307173][T14785] CPU: 1 UID: 0 PID: 14785 Comm: syz.3.2865 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 534.319132][T14785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 534.329815][T14785] RIP: 0010:perf_pending_task+0x319/0x400 [ 534.335577][T14785] Code: 85 8f 00 00 00 41 fe 4d 00 eb 05 e8 91 ab cd ff 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 78 ab cd ff 90 <0f> 0b 90 41 80 3c 1c 00 0f 85 02 ff ff ff e9 05 ff ff ff 44 89 e1 [ 534.355535][T14785] RSP: 0018:ffffc9001c0379d0 EFLAGS: 00010293 [ 534.361725][T14785] RAX: ffffffff81f2a8c8 RBX: dffffc0000000000 RCX: ffff8880351e3c00 [ 534.369811][T14785] RDX: 0000000000000000 RSI: 00000000748f5a97 RDI: 0000000000000000 [ 534.371575][T14783] CPU: 0 UID: 0 PID: 14783 Comm: syz.2.2864 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 534.371600][T14783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 534.371612][T14783] Call Trace: [ 534.371619][T14783] [ 534.371627][T14783] dump_stack_lvl+0x189/0x250 [ 534.371655][T14783] ? __pfx____ratelimit+0x10/0x10 [ 534.371681][T14783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.371704][T14783] ? __pfx__printk+0x10/0x10 [ 534.371729][T14783] ? __might_fault+0xb0/0x130 [ 534.371752][T14783] ? __might_fault+0xb0/0x130 [ 534.371779][T14783] should_fail_ex+0x414/0x560 [ 534.371816][T14783] _copy_from_user+0x2d/0xb0 [ 534.371838][T14783] __sys_bpf+0x1ed/0x870 [ 534.371860][T14783] ? __pfx___sys_bpf+0x10/0x10 [ 534.371895][T14783] ? ksys_write+0x22a/0x250 [ 534.371918][T14783] ? __pfx_ksys_write+0x10/0x10 [ 534.371935][T14783] ? rcu_is_watching+0x15/0xb0 [ 534.371966][T14783] __x64_sys_bpf+0x7c/0x90 [ 534.371996][T14783] do_syscall_64+0xfa/0x3b0 [ 534.372034][T14783] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.372058][T14783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.372077][T14783] ? clear_bhb_loop+0x60/0xb0 [ 534.372101][T14783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.372120][T14783] RIP: 0033:0x7f25a738e9a9 [ 534.372137][T14783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.372154][T14783] RSP: 002b:00007f25a826d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 534.372174][T14783] RAX: ffffffffffffffda RBX: 00007f25a75b5fa0 RCX: 00007f25a738e9a9 [ 534.372188][T14783] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000004 [ 534.372200][T14783] RBP: 00007f25a826d090 R08: 0000000000000000 R09: 0000000000000000 [ 534.372211][T14783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.372222][T14783] R13: 0000000000000000 R14: 00007f25a75b5fa0 R15: 00007ffd1b374398 [ 534.372254][T14783] [ 534.577807][T14785] RBP: 00000000748f5a97 R08: ffffffff8fa1d2f7 R09: 1ffffffff1f43a5e [ 534.585944][T14785] R10: dffffc0000000000 R11: ffffffff81f2a5b0 R12: 1ffff110022f9367 [ 534.593984][T14785] R13: ffff8880351e3c00 R14: ffff8880117c9d98 R15: ffff8880117c9b38 [ 534.603098][T14785] FS: 0000000000000000(0000) GS:ffff888125d22000(0000) knlGS:0000000000000000 [ 534.612539][T14785] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.619345][T14785] CR2: 0000000000000000 CR3: 0000000032d4e000 CR4: 00000000003526f0 [ 534.627349][T14785] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 534.635415][T14785] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 534.643692][T14785] Call Trace: [ 534.646990][T14785] [ 534.649988][T14785] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.655224][T14785] task_work_run+0x1d1/0x260 [ 534.659947][T14785] ? __pfx_task_work_run+0x10/0x10 [ 534.665107][T14785] do_exit+0x6b5/0x22e0 [ 534.669388][T14785] ? perf_trace_lock+0xec/0x3b0 [ 534.674273][T14785] ? do_raw_spin_lock+0x121/0x290 [ 534.679402][T14785] ? __pfx_do_exit+0x10/0x10 [ 534.684038][T14785] do_group_exit+0x21c/0x2d0 [ 534.688652][T14785] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.693923][T14785] get_signal+0x1286/0x1340 [ 534.699477][T14785] arch_do_signal_or_restart+0x9a/0x750 [ 534.705073][T14785] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 534.711815][T14785] ? exit_to_user_mode_loop+0x40/0x110 [ 534.717308][T14785] exit_to_user_mode_loop+0x75/0x110 [ 534.722692][T14785] do_syscall_64+0x2bd/0x3b0 [ 534.727305][T14785] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.732709][T14785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.737447][T14784] netlink: 'syz.0.2863': attribute type 39 has an invalid length. [ 534.738782][T14785] ? clear_bhb_loop+0x60/0xb0 [ 534.751748][T14785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.757678][T14785] RIP: 0033:0x7f226058e9a9 [ 534.762197][T14785] Code: Unable to access opcode bytes at 0x7f226058e97f. [ 534.769330][T14785] RSP: 002b:00007f226147a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 534.777868][T14785] RAX: fffffffffffffe00 RBX: 00007f22607b5fa8 RCX: 00007f226058e9a9 [ 534.785940][T14785] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f22607b5fa8 [ 534.794031][T14785] RBP: 00007f22607b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 534.803098][T14785] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f22607b5fac [ 534.811758][T14785] R13: 0000000000000000 R14: 00007ffec5b67c70 R15: 00007ffec5b67d58 [ 534.819820][T14785] [ 534.822861][T14785] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 534.830182][T14785] CPU: 1 UID: 0 PID: 14785 Comm: syz.3.2865 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 534.841751][T14785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 534.851916][T14785] Call Trace: [ 534.855207][T14785] [ 534.858133][T14785] dump_stack_lvl+0x99/0x250 [ 534.862730][T14785] ? __asan_memcpy+0x40/0x70 [ 534.867492][T14785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.872773][T14785] ? __pfx__printk+0x10/0x10 [ 534.877365][T14785] panic+0x2db/0x790 [ 534.881279][T14785] ? __pfx_panic+0x10/0x10 [ 534.885754][T14785] __warn+0x31b/0x4b0 [ 534.889816][T14785] ? perf_pending_task+0x319/0x400 [ 534.895104][T14785] ? perf_pending_task+0x319/0x400 [ 534.900220][T14785] report_bug+0x2be/0x4f0 [ 534.904556][T14785] ? perf_pending_task+0x319/0x400 [ 534.909686][T14785] ? perf_pending_task+0x319/0x400 [ 534.914795][T14785] ? perf_pending_task+0x31b/0x400 [ 534.919905][T14785] handle_bug+0x84/0x160 [ 534.924158][T14785] exc_invalid_op+0x1a/0x50 [ 534.928676][T14785] asm_exc_invalid_op+0x1a/0x20 [ 534.933528][T14785] RIP: 0010:perf_pending_task+0x319/0x400 [ 534.939267][T14785] Code: 85 8f 00 00 00 41 fe 4d 00 eb 05 e8 91 ab cd ff 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 78 ab cd ff 90 <0f> 0b 90 41 80 3c 1c 00 0f 85 02 ff ff ff e9 05 ff ff ff 44 89 e1 [ 534.959049][T14785] RSP: 0018:ffffc9001c0379d0 EFLAGS: 00010293 [ 534.965119][T14785] RAX: ffffffff81f2a8c8 RBX: dffffc0000000000 RCX: ffff8880351e3c00 [ 534.973088][T14785] RDX: 0000000000000000 RSI: 00000000748f5a97 RDI: 0000000000000000 [ 534.981071][T14785] RBP: 00000000748f5a97 R08: ffffffff8fa1d2f7 R09: 1ffffffff1f43a5e [ 534.989039][T14785] R10: dffffc0000000000 R11: ffffffff81f2a5b0 R12: 1ffff110022f9367 [ 534.997029][T14785] R13: ffff8880351e3c00 R14: ffff8880117c9d98 R15: ffff8880117c9b38 [ 535.005046][T14785] ? __pfx_perf_pending_task+0x10/0x10 [ 535.010513][T14785] ? perf_pending_task+0x318/0x400 [ 535.015635][T14785] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.020839][T14785] task_work_run+0x1d1/0x260 [ 535.025447][T14785] ? __pfx_task_work_run+0x10/0x10 [ 535.030573][T14785] do_exit+0x6b5/0x22e0 [ 535.034736][T14785] ? perf_trace_lock+0xec/0x3b0 [ 535.039603][T14785] ? do_raw_spin_lock+0x121/0x290 [ 535.044651][T14785] ? __pfx_do_exit+0x10/0x10 [ 535.049280][T14785] do_group_exit+0x21c/0x2d0 [ 535.053886][T14785] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.059094][T14785] get_signal+0x1286/0x1340 [ 535.063616][T14785] arch_do_signal_or_restart+0x9a/0x750 [ 535.069179][T14785] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 535.075445][T14785] ? exit_to_user_mode_loop+0x40/0x110 [ 535.080907][T14785] exit_to_user_mode_loop+0x75/0x110 [ 535.086203][T14785] do_syscall_64+0x2bd/0x3b0 [ 535.090801][T14785] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.096002][T14785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.102066][T14785] ? clear_bhb_loop+0x60/0xb0 [ 535.106919][T14785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.112812][T14785] RIP: 0033:0x7f226058e9a9 [ 535.117236][T14785] Code: Unable to access opcode bytes at 0x7f226058e97f. [ 535.124254][T14785] RSP: 002b:00007f226147a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 535.132686][T14785] RAX: fffffffffffffe00 RBX: 00007f22607b5fa8 RCX: 00007f226058e9a9 [ 535.140666][T14785] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f22607b5fa8 [ 535.148827][T14785] RBP: 00007f22607b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 535.156797][T14785] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f22607b5fac [ 535.164868][T14785] R13: 0000000000000000 R14: 00007ffec5b67c70 R15: 00007ffec5b67d58 [ 535.172857][T14785] [ 535.176165][T14785] Kernel Offset: disabled [ 535.180482][T14785] Rebooting in 86400 seconds..