last executing test programs: 3.051471285s ago: executing program 2 (id=2007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r1 = socket$kcm(0x22, 0x2, 0x21) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) sendmsg$kcm(r1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x1f, 0x0, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x27, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r6, 0x88, 0x67, &(0x7f00000002c0), 0x4) sendmsg$inet(r6, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e19, @multicast1=0xe0000002}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @loopback}}}], 0x20}, 0xc000) bpf$TOKEN_CREATE(0x24, &(0x7f0000001240)={0x0, r2}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x4}]}, {0x0, [0x30, 0x51, 0x2e, 0x30, 0xa0, 0x30, 0x30]}}, &(0x7f00000013c0)=""/102, 0x31, 0x66, 0x1, 0x81}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r11 = openat$cgroup_devices(r10, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r11, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0xd) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_ext={0x1c, 0x13, &(0x7f0000001280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x7, 0xa, 0x1, 0xffffffffffffffff, 0x1}, @generic={0x4, 0xc, 0x9, 0x7, 0x1d80de7d}, @call={0x85, 0x0, 0x0, 0x77}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xfffffffa, 0x8, &(0x7f0000001340)=""/8, 0x41000, 0x3b, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000001480)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000014c0)={0x1, 0x2, 0x80, 0x9}, 0x10, 0x15045, r3, 0x4, &(0x7f0000001500)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000001540)=[{0x5, 0x4, 0x9, 0x5}, {0x4, 0x1, 0xf, 0x6}, {0x4, 0x8, 0x10, 0x1}, {0x1, 0x4, 0xe, 0x1}]}, 0x94) recvmsg(r8, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000400)="e4e647c9e0b8", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r6, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x160}, 0x40) recvmsg$kcm(r4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788ba", 0x15}], 0x1}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)) 2.988884s ago: executing program 4 (id=2009): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 2.776781627s ago: executing program 0 (id=2010): openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000800) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair(0xa, 0x3, 0x4, &(0x7f0000000180)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10143) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x400c804) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0x80, 0x0}, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5fdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xffffffec}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x2) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe21}, 0x4000800) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="1400000036000b6c9afffde9d5583b41d3d95148eb116bd2c8b1fccabb00f904290b5faff15f8298fe956b03f5c6b7eeaec751789ff008e5c47ecd082972a295e2b7a24203ee308aabda4d0e6cf85c4b4823f3d823ba4a6fa94f4c00d361f77c773162d8ebb5209adb02c07dbb0ccd4f98c3d6884cda9efcb6a73511908f996f768e857bbfd7745fc82fe25254fde4ae956ffb7c699175c65fafb21aaa695aee8e05dfbe47fbf6897a5d2d1ab2716f6c04adb0edae50afd8d64636759c5494ef900f6e1f6fec24eb10ea0fb78c54574e23f42f47655f6cdaed5fbb74afa1f668c5f2ddd51e915e", 0xe7}], 0x1}, 0x2400c000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, 0x0, 0x0, 0x3}, 0x94) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)=r1, 0x4a) r7 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, 0x0) 2.405676477s ago: executing program 0 (id=2013): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0xfffffeff}, 0x50) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) 2.405373557s ago: executing program 4 (id=2014): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 2.335556052s ago: executing program 1 (id=2015): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{0x41, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x8000080) 2.285041536s ago: executing program 2 (id=2016): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x20000000}, 0x0) r1 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2041) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x801, 0x1fd, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x100000000000, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000008000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff7600000095dc209dae7d7d980000ffffffb056080000000000008500000005000000b7000000000000009500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x7, &(0x7f0000000a00)=ANY=[@ANYBLOB="180200000000000000000000000000000000000000050000000000000095000000000000000000ac5700"/51], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={r3, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_ext={0x1c, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="1800006c00000085200000030000009500"/32], &(0x7f00000009c0)='syzkaller\x00', 0x2, 0xca, &(0x7f0000000b00)=""/202, 0x40f04, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000d40)={0x3, 0xc, 0x8, 0xe9}, 0x10, 0xfaae, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000e80)=[{0x2, 0x2, 0xe, 0x1}, {0x3, 0x5, 0x6, 0x1f}, {0x8004, 0x4, 0x4, 0x9}, {0x0, 0x4, 0xd, 0x9}, {0x5, 0x3, 0xb, 0x1}, {0x1, 0x3, 0x6, 0x8}, {0x0, 0xffffff6d, 0x2, 0x9}, {0x1, 0x5, 0x1}, {0x5, 0x3, 0x10, 0x6}], 0x10, 0x80000000}, 0x94) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x380, 0xe}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001100)={@cgroup, 0x16, 0x1, 0x54, &(0x7f0000001000)=[0x0], 0x1, 0x0, &(0x7f0000001040)=[0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001140)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="ed82000000000000675c6e9f", @ANYRES32, @ANYRES64=r6], 0x20) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x110, 0xe}}], 0x18}, 0x20044800) sendmsg$kcm(r5, &(0x7f0000000900)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x40080) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 2.163884187s ago: executing program 4 (id=2019): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x191242, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0xc000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r3}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', r2}, 0x18) 2.095841391s ago: executing program 3 (id=2020): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000369ade050000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 2.042400316s ago: executing program 1 (id=2021): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 2.021705118s ago: executing program 0 (id=2022): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000180)="2c1c", 0x2}], 0x1}, 0x8001) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x5}, 0x4, 0x1, 0x9, 0x2, 0x10000, 0x9, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c40)={r3, 0x0, 0x0, 0xae, &(0x7f0000001ac0), &(0x7f0000001b00)=""/174, 0x6, 0x0, 0x66, 0x0, &(0x7f0000001bc0)="e95518dc6003ab4d0a2d8f1bdac19609b36307b4c33a3d0a5b341b9d4c999a340100b4ebbf6baf87cec4d5ce599fe82122d2ad3901a375136baf0cf97dcf12c21e6f8680c23d4cfc4818a25892920a19eae5a163f62688aeb6a6fcc7d461cf7095bb9e7d1931", 0x0, 0x1, 0x0, 0x9}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500050001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 1.892121638s ago: executing program 3 (id=2023): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.815615424s ago: executing program 1 (id=2024): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 1.556991905s ago: executing program 2 (id=2025): openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000800) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair(0xa, 0x3, 0x4, &(0x7f0000000180)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10143) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x400c804) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0x80, 0x0}, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5fdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xffffffec}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x2) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe21}, 0x4000800) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="1400000036000b6c9afffde9d5583b41d3d95148eb116bd2c8b1fccabb00f904290b5faff15f8298fe956b03f5c6b7eeaec751789ff008e5c47ecd082972a295e2b7a24203ee308aabda4d0e6cf85c4b4823f3d823ba4a6fa94f4c00d361f77c773162d8ebb5209adb02c07dbb0ccd4f98c3d6884cda9efcb6a73511908f996f768e857bbfd7745fc82fe25254fde4ae956ffb7c699175c65fafb21aaa695aee8e05dfbe47fbf6897a5d2d1ab2716f6c04adb0edae50afd8d64636759c5494ef900f6e1f6fec24eb10ea0fb78c54574e23f42f47655f6cdaed5fbb74afa1f668c5f2ddd51e915e", 0xe7}], 0x1}, 0x2400c000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, 0x0, 0x0, 0x3}, 0x94) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)=r1, 0x4a) r7 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, 0x0) 1.047278496s ago: executing program 3 (id=2026): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x41, 0x0, 0x4) 935.682015ms ago: executing program 4 (id=2027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r1 = socket$kcm(0x22, 0x2, 0x21) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) sendmsg$kcm(r1, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x1f, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x27, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r4, 0x88, 0x67, &(0x7f00000002c0), 0x4) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e19, @multicast1=0xe0000002}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @loopback}}}], 0x20}, 0xc000) bpf$TOKEN_CREATE(0x24, &(0x7f0000001240)={0x0, r2}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x4}]}, {0x0, [0x30, 0x51, 0x2e, 0x30, 0xa0, 0x30, 0x30]}}, &(0x7f00000013c0)=""/102, 0x31, 0x66, 0x1, 0x81}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0xd) 878.27961ms ago: executing program 2 (id=2028): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x0, &(0x7f0000000480), 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa2}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2e}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x20000000}, 0x200000c0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32=r0, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x10000000}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 835.006023ms ago: executing program 1 (id=2029): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 805.581986ms ago: executing program 0 (id=2030): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x12, 0x3, 0x8, 0x6}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, &(0x7f0000000a80), 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x60, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0x25, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x100000}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000280)}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000369ade050000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 738.416761ms ago: executing program 3 (id=2031): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{0x41, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x8000080) 548.945916ms ago: executing program 2 (id=2032): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x6, &(0x7f0000000040)=[{0xfff, 0x7f, 0x9, 0x400}, {0xa1d3, 0x2, 0xff, 0x5}, {0x401, 0x4, 0x2, 0x3}, {0x8, 0x32, 0x7, 0xfffffffb}, {0x6, 0x4, 0x9}, {0x9, 0x44, 0x2, 0xffffffff}]}) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 528.930018ms ago: executing program 4 (id=2033): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000369ade050000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 514.329119ms ago: executing program 0 (id=2034): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 427.584146ms ago: executing program 3 (id=2035): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/52, 0x34}, 0x160) 409.410008ms ago: executing program 1 (id=2036): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 346.717033ms ago: executing program 0 (id=2037): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x61}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) r4 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10113, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1488, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xf) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x1, 0x5, 0x2, 0x4, 0x0, 0x8000000000000001, 0x8004, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x81c9, 0x2}, 0x10060, 0x2, 0x0, 0x1, 0xfffffffffffffffd, 0xfffffbff, 0x2, 0x0, 0xffff, 0x0, 0x4a}, 0x0, 0xc, r0, 0x0) recvmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0x40000020) r5 = socket$kcm(0x25, 0x1, 0x0) sendmsg(r5, 0x0, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x0, 0x0, r3, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 306.120546ms ago: executing program 2 (id=2038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xffffffff, 0x0, 0x8000, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa2000000000000070a0000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() sendmsg$unix(r2, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee01, 0xee01}}}], 0x38, 0x20000080}, 0x85) syz_open_procfs$namespace(r3, &(0x7f00000001c0)='ns/pid\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000100)="37141fe9f6e30f9be02a08b787da0ea471fb6e6ae659246a01bfb57b06daff3a2f0e860bc20ef14edcee09f02ba27321070ea6d16346ce04b4350b629339a7c3e31fcd6d10df4fd7903eec71a80acebab8134390c494241576596467d71e7c89affb72896070f20f9a608eca5a96a8acca6be96bde319f6c272c49bffcda83e3391303d87d8f11377caa290a9f26e57222", &(0x7f0000000240)=""/245, 0x4}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000fccb3bbc91e2d094818e732d62318500473bed7d80ee828153ad4983bbbf93fc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@union={0x5, 0x0, 0x0, 0x5, 0x1, 0x20e2b81}]}, {0x0, [0x61, 0x2e, 0x61, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000300)=""/242, 0x2c, 0xf2, 0x1}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00'}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000b0a500007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x789}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x2, 0x0) 305.635756ms ago: executing program 4 (id=2039): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 237.875222ms ago: executing program 3 (id=2040): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000180)="2c1c", 0x2}], 0x1}, 0x8001) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x5}, 0x4, 0x1, 0x9, 0x2, 0x10000, 0x9, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c40)={r3, 0x0, 0x0, 0xae, &(0x7f0000001ac0), &(0x7f0000001b00)=""/174, 0x6, 0x0, 0x66, 0x0, &(0x7f0000001bc0)="e95518dc6003ab4d0a2d8f1bdac19609b36307b4c33a3d0a5b341b9d4c999a340100b4ebbf6baf87cec4d5ce599fe82122d2ad3901a375136baf0cf97dcf12c21e6f8680c23d4cfc4818a25892920a19eae5a163f62688aeb6a6fcc7d461cf7095bb9e7d1931", 0x0, 0x1, 0x0, 0x9}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500050001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 0s ago: executing program 1 (id=2041): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000d73af40210bf7b7737"], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0xed}, 0x2}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x30, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xdd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}, @ldst={0x1, 0x3, 0x1, 0x9, 0x3, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x7, 0x1, 0x6, 0x6, 0xa, 0xfffffffffffffff8, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2866d86f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @generic={0x3, 0x3, 0x0, 0xb, 0x78}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0x71, &(0x7f0000000e40)=""/113, 0x40f00, 0x0, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000ec0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000f00)=[r2, r2, r2], &(0x7f00000003c0)=[{0x5, 0x5, 0x6, 0x8}, {0x0, 0x2, 0xa, 0x8}, {0x3, 0x1, 0x2, 0x8}, {0x4, 0x5, 0x3, 0xa}, {0x2, 0x2, 0xb}, {0x0, 0x3, 0x10, 0x9}, {0x3, 0x4, 0x5, 0x6}, {0x1, 0x2, 0xe, 0x2}, {0x5, 0x1, 0x0, 0x2}], 0x10, 0x768}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xfc58, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r3, 0x3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0900000004000000e27f00000100000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000cc55c8e48f3b175b3e62463e6fef1e780e3b2abd9391c497655873bcbec0f261ea552a09842b46c45ef0e63045bc61da8029f2e2629c90ef8719"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001140)={{r4}, &(0x7f00000010c0), &(0x7f0000001100)='%pB \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): 680853][ T7647] ? clear_bhb_loop+0x60/0xb0 [ 276.685557][ T7647] ? clear_bhb_loop+0x60/0xb0 [ 276.690336][ T7647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.696246][ T7647] RIP: 0033:0x7f3777b8ebe9 [ 276.700665][ T7647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.720451][ T7647] RSP: 002b:00007f37789ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 276.728874][ T7647] RAX: ffffffffffffffda RBX: 00007f3777db5fa0 RCX: 00007f3777b8ebe9 [ 276.736937][ T7647] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a [ 276.744915][ T7647] RBP: 00007f37789ce090 R08: 0000000000000000 R09: 0000000000000000 [ 276.752979][ T7647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.760967][ T7647] R13: 00007f3777db6038 R14: 00007f3777db5fa0 R15: 00007ffd643a9548 [ 276.769000][ T7647] [ 276.968413][ T7645] dvmrp1: tun_chr_ioctl cmd 1074025676 [ 277.090576][ T7645] dvmrp1: owner set to 0 [ 277.575674][ T7664] FAULT_INJECTION: forcing a failure. [ 277.575674][ T7664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.640906][ T7664] CPU: 1 PID: 7664 Comm: syz.1.985 Not tainted 6.1.147-syzkaller #0 [ 277.648956][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.659045][ T7664] Call Trace: [ 277.662447][ T7664] [ 277.665403][ T7664] dump_stack_lvl+0x168/0x22e [ 277.670120][ T7664] ? show_regs_print_info+0x12/0x12 [ 277.675356][ T7664] ? load_image+0x3b0/0x3b0 [ 277.679894][ T7664] ? __lock_acquire+0x7c50/0x7c50 [ 277.684948][ T7664] ? snprintf+0xd7/0x120 [ 277.689222][ T7664] should_fail_ex+0x399/0x4d0 [ 277.693939][ T7664] _copy_to_user+0x2c/0x130 [ 277.698473][ T7664] simple_read_from_buffer+0xe3/0x150 [ 277.703886][ T7664] proc_fail_nth_read+0x19a/0x210 [ 277.708967][ T7664] ? proc_fault_inject_write+0x2f0/0x2f0 [ 277.714629][ T7664] ? fsnotify_perm+0x248/0x550 [ 277.719506][ T7664] ? proc_fault_inject_write+0x2f0/0x2f0 [ 277.725165][ T7664] vfs_read+0x2c0/0x920 [ 277.729362][ T7664] ? kernel_read+0x1e0/0x1e0 [ 277.733985][ T7664] ? __fget_files+0x28/0x4d0 [ 277.738634][ T7664] ? __fget_files+0x44a/0x4d0 [ 277.743455][ T7664] ? __fdget_pos+0x2ae/0x360 [ 277.748197][ T7664] ? ksys_read+0x71/0x240 [ 277.752579][ T7664] ksys_read+0x143/0x240 [ 277.756955][ T7664] ? vfs_write+0x960/0x960 [ 277.761592][ T7664] ? trace_sys_enter+0x22/0x80 [ 277.766389][ T7664] do_syscall_64+0x4c/0xa0 [ 277.770914][ T7664] ? clear_bhb_loop+0x60/0xb0 [ 277.775619][ T7664] ? clear_bhb_loop+0x60/0xb0 [ 277.780317][ T7664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.786251][ T7664] RIP: 0033:0x7f5a97d8d5fc [ 277.790690][ T7664] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 277.810334][ T7664] RSP: 002b:00007f5a98c8e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 277.818808][ T7664] RAX: ffffffffffffffda RBX: 00007f5a97fb6090 RCX: 00007f5a97d8d5fc [ 277.826897][ T7664] RDX: 000000000000000f RSI: 00007f5a98c8e0a0 RDI: 0000000000000008 [ 277.834891][ T7664] RBP: 00007f5a98c8e090 R08: 0000000000000000 R09: 0000000000000000 [ 277.842994][ T7664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 277.850985][ T7664] R13: 00007f5a97fb6128 R14: 00007f5a97fb6090 R15: 00007ffc3a953bd8 [ 277.858999][ T7664] [ 277.906460][ T7667] netlink: 'syz.0.986': attribute type 29 has an invalid length. [ 277.921962][ T7667] netlink: 'syz.0.986': attribute type 29 has an invalid length. [ 277.943422][ T7667] netlink: 'syz.0.986': attribute type 29 has an invalid length. [ 278.196805][ T7671] netlink: 'syz.4.987': attribute type 10 has an invalid length. [ 278.341733][ T7670] netlink: 'syz.3.988': attribute type 10 has an invalid length. [ 279.428611][ T7684] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.993'. [ 279.511351][ T7684] netlink: zone id is out of range [ 279.586042][ T7684] netlink: get zone limit has 8 unknown bytes [ 280.110804][ T7702] netlink: 'syz.3.999': attribute type 29 has an invalid length. [ 280.156227][ T7700] netlink: 'syz.0.997': attribute type 10 has an invalid length. [ 280.184580][ T7702] netlink: 'syz.3.999': attribute type 29 has an invalid length. [ 280.202847][ T7703] netlink: 'syz.3.999': attribute type 29 has an invalid length. [ 280.429880][ T7711] netlink: 'syz.0.1002': attribute type 10 has an invalid length. [ 280.865777][ T7717] netlink: 'syz.3.1006': attribute type 1 has an invalid length. [ 280.940424][ T7717] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1006'. [ 281.166217][ T7718] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1005'. [ 281.640150][ T7723] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.1007'. [ 281.909327][ T7723] netlink: zone id is out of range [ 282.070222][ T7723] netlink: get zone limit has 8 unknown bytes [ 282.960636][ T7748] netlink: 'syz.3.1014': attribute type 10 has an invalid length. [ 284.719082][ T7748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.741526][ T7748] team0: Port device bond0 added [ 284.788765][ T7752] netlink: 'syz.0.1015': attribute type 10 has an invalid length. [ 285.045211][ T7762] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.1018'. [ 285.077853][ T7760] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 285.134912][ T7762] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 285.543943][ T7770] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.1018'. [ 285.633861][ T7770] netlink: zone id is out of range [ 285.643775][ T7770] netlink: zone id is out of range [ 285.658672][ T7770] netlink: zone id is out of range [ 285.672410][ T7770] netlink: zone id is out of range [ 285.682834][ T7770] netlink: zone id is out of range [ 285.721614][ T7770] netlink: zone id is out of range [ 285.740410][ T7770] netlink: zone id is out of range [ 285.757010][ T7770] netlink: zone id is out of range [ 286.764353][ T7776] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1022'. [ 286.978830][ T7798] netlink: 'syz.3.1026': attribute type 10 has an invalid length. [ 287.491637][ T7807] netlink: 'syz.1.1030': attribute type 10 has an invalid length. [ 287.531647][ T7807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.586028][ T7807] team0: Port device bond0 added [ 287.721042][ T7816] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1031'. [ 288.068452][ T7825] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.1037'. [ 288.210499][ T7833] FAULT_INJECTION: forcing a failure. [ 288.210499][ T7833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.216865][ T7825] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.1037'. [ 288.322595][ T7833] CPU: 1 PID: 7833 Comm: syz.2.1039 Not tainted 6.1.147-syzkaller #0 [ 288.330760][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.340875][ T7833] Call Trace: [ 288.344303][ T7833] [ 288.347292][ T7833] dump_stack_lvl+0x168/0x22e [ 288.352127][ T7833] ? show_regs_print_info+0x12/0x12 [ 288.357461][ T7833] ? load_image+0x3b0/0x3b0 [ 288.362019][ T7833] ? __lock_acquire+0x7c50/0x7c50 [ 288.367078][ T7833] ? __virt_addr_valid+0x188/0x540 [ 288.372268][ T7833] should_fail_ex+0x399/0x4d0 [ 288.377164][ T7833] _copy_from_user+0x2c/0x170 [ 288.381871][ T7833] ___bpf_copy_key+0xb0/0x100 [ 288.386607][ T7833] map_update_elem+0x2a9/0x680 [ 288.391507][ T7833] __sys_bpf+0x454/0x6d0 [ 288.395807][ T7833] ? bpf_link_show_fdinfo+0x340/0x340 [ 288.401271][ T7833] ? lock_chain_count+0x20/0x20 [ 288.406219][ T7833] __x64_sys_bpf+0x78/0x90 [ 288.410692][ T7833] do_syscall_64+0x4c/0xa0 [ 288.415225][ T7833] ? clear_bhb_loop+0x60/0xb0 [ 288.419933][ T7833] ? clear_bhb_loop+0x60/0xb0 [ 288.424659][ T7833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.430605][ T7833] RIP: 0033:0x7fa50558ebe9 [ 288.435058][ T7833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.455039][ T7833] RSP: 002b:00007fa506321038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 288.463494][ T7833] RAX: ffffffffffffffda RBX: 00007fa5057b5fa0 RCX: 00007fa50558ebe9 [ 288.471585][ T7833] RDX: 0000000000000020 RSI: 00002000000009c0 RDI: 0000000000000002 [ 288.479931][ T7833] RBP: 00007fa506321090 R08: 0000000000000000 R09: 0000000000000000 [ 288.487944][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.495953][ T7833] R13: 00007fa5057b6038 R14: 00007fa5057b5fa0 R15: 00007fff1dfebdb8 [ 288.503989][ T7833] [ 288.704409][ T7840] netlink: 'syz.0.1041': attribute type 6 has an invalid length. [ 289.586968][ T7855] FAULT_INJECTION: forcing a failure. [ 289.586968][ T7855] name failslab, interval 1, probability 0, space 0, times 0 [ 289.624457][ T7855] CPU: 1 PID: 7855 Comm: syz.1.1048 Not tainted 6.1.147-syzkaller #0 [ 289.632788][ T7855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.642876][ T7855] Call Trace: [ 289.646174][ T7855] [ 289.649109][ T7855] dump_stack_lvl+0x168/0x22e [ 289.653803][ T7855] ? show_regs_print_info+0x12/0x12 [ 289.659019][ T7855] ? load_image+0x3b0/0x3b0 [ 289.663638][ T7855] ? __might_sleep+0xd0/0xd0 [ 289.668276][ T7855] ? __lock_acquire+0x7c50/0x7c50 [ 289.673319][ T7855] should_fail_ex+0x399/0x4d0 [ 289.678109][ T7855] should_failslab+0x5/0x20 [ 289.682624][ T7855] slab_pre_alloc_hook+0x59/0x310 [ 289.687664][ T7855] kmem_cache_alloc_node+0x5a/0x320 [ 289.692981][ T7855] ? if_nlmsg_size+0x5b0/0x880 [ 289.697778][ T7855] ? __alloc_skb+0xfc/0x7e0 [ 289.702310][ T7855] __alloc_skb+0xfc/0x7e0 [ 289.706664][ T7855] rtmsg_ifinfo_build_skb+0x80/0x180 [ 289.711965][ T7855] rtnetlink_event+0xcd/0x1a0 [ 289.716658][ T7855] raw_notifier_call_chain+0xcb/0x160 [ 289.722038][ T7855] dev_set_mac_address+0x2c4/0x3d0 [ 289.727187][ T7855] ? dev_pre_changeaddr_notify+0x100/0x100 [ 289.733002][ T7855] ? rwsem_write_trylock+0x12f/0x1b0 [ 289.738304][ T7855] ? clear_nonspinnable+0x60/0x60 [ 289.743364][ T7855] ? full_name_hash+0x8e/0xe0 [ 289.748607][ T7855] dev_set_mac_address_user+0x2d/0x50 [ 289.754024][ T7855] dev_ifsioc+0x770/0xe90 [ 289.758397][ T7855] ? dev_ioctl+0xea0/0xea0 [ 289.762830][ T7855] ? mutex_lock_nested+0x10/0x10 [ 289.767781][ T7855] ? apparmor_capable+0x12c/0x190 [ 289.772821][ T7855] ? full_name_hash+0x8e/0xe0 [ 289.777545][ T7855] ? dev_load+0x1d/0x1e0 [ 289.781794][ T7855] ? dev_load+0x1d/0x1e0 [ 289.786049][ T7855] dev_ioctl+0x578/0xea0 [ 289.790310][ T7855] sock_do_ioctl+0x222/0x2f0 [ 289.794922][ T7855] ? sock_show_fdinfo+0xb0/0xb0 [ 289.799798][ T7855] sock_ioctl+0x4ed/0x6e0 [ 289.804140][ T7855] ? sock_poll+0x3f0/0x3f0 [ 289.808576][ T7855] ? bpf_lsm_file_ioctl+0x5/0x10 [ 289.813635][ T7855] ? security_file_ioctl+0x7c/0xa0 [ 289.818755][ T7855] ? sock_poll+0x3f0/0x3f0 [ 289.823181][ T7855] __se_sys_ioctl+0xfa/0x170 [ 289.827808][ T7855] do_syscall_64+0x4c/0xa0 [ 289.832229][ T7855] ? clear_bhb_loop+0x60/0xb0 [ 289.836915][ T7855] ? clear_bhb_loop+0x60/0xb0 [ 289.841596][ T7855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.847589][ T7855] RIP: 0033:0x7f5a97d8ebe9 [ 289.852011][ T7855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.871823][ T7855] RSP: 002b:00007f5a98caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.880262][ T7855] RAX: ffffffffffffffda RBX: 00007f5a97fb5fa0 RCX: 00007f5a97d8ebe9 [ 289.888252][ T7855] RDX: 0000200000000080 RSI: 0000000000008924 RDI: 0000000000000004 [ 289.896249][ T7855] RBP: 00007f5a98caf090 R08: 0000000000000000 R09: 0000000000000000 [ 289.904335][ T7855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.912487][ T7855] R13: 00007f5a97fb6038 R14: 00007f5a97fb5fa0 R15: 00007ffc3a953bd8 [ 289.920485][ T7855] [ 290.418991][ T7866] netlink: 'syz.0.1054': attribute type 10 has an invalid length. [ 290.506528][ T7871] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1050'. [ 290.669751][ T7878] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.1056'. [ 290.708348][ T7878] net_ratelimit: 63 callbacks suppressed [ 290.708368][ T7878] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 290.838848][ T7878] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.1056'. [ 290.886145][ T7878] netlink: zone id is out of range [ 290.903839][ T7878] netlink: zone id is out of range [ 290.910975][ T7878] netlink: zone id is out of range [ 290.962514][ T7878] netlink: zone id is out of range [ 290.978673][ T7878] netlink: zone id is out of range [ 291.005877][ T7878] netlink: zone id is out of range [ 291.050217][ T7878] netlink: zone id is out of range [ 291.094707][ T7878] netlink: zone id is out of range [ 291.100767][ T7878] netlink: zone id is out of range [ 291.623296][ T7903] netlink: 'syz.4.1062': attribute type 29 has an invalid length. [ 291.662387][ T7898] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1058'. [ 291.700112][ T7903] netlink: 'syz.4.1062': attribute type 29 has an invalid length. [ 291.714407][ T7904] netlink: 'syz.4.1062': attribute type 29 has an invalid length. [ 291.764613][ T7902] delete_channel: no stack [ 292.175811][ T7920] netlink: 'syz.1.1067': attribute type 10 has an invalid length. [ 293.446531][ T7937] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1071'. [ 294.331949][ T7953] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1077'. [ 294.392339][ T11] wlan1: Trigger new scan to find an IBSS to join [ 295.954617][ T7974] netlink: 'syz.0.1080': attribute type 10 has an invalid length. [ 296.594952][ T7972] netlink: 'syz.3.1092': attribute type 10 has an invalid length. [ 298.888676][ T7992] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1087'. [ 299.289328][ T7998] FAULT_INJECTION: forcing a failure. [ 299.289328][ T7998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.393061][ T7998] CPU: 0 PID: 7998 Comm: syz.3.1090 Not tainted 6.1.147-syzkaller #0 [ 299.401488][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.411594][ T7998] Call Trace: [ 299.414924][ T7998] [ 299.417899][ T7998] dump_stack_lvl+0x168/0x22e [ 299.422733][ T7998] ? show_regs_print_info+0x12/0x12 [ 299.428077][ T7998] ? load_image+0x3b0/0x3b0 [ 299.432729][ T7998] ? __might_fault+0xa6/0x120 [ 299.437486][ T7998] should_fail_ex+0x399/0x4d0 [ 299.442412][ T7998] copyin+0x1b/0x120 [ 299.446364][ T7998] _copy_from_iter+0x45a/0x10c0 [ 299.451303][ T7998] ? copyout_mc+0x110/0x110 [ 299.455937][ T7998] ? __virt_addr_valid+0x188/0x540 [ 299.461186][ T7998] ? __virt_addr_valid+0x188/0x540 [ 299.466357][ T7998] ? __virt_addr_valid+0x465/0x540 [ 299.471535][ T7998] ? __check_object_size+0x500/0xa40 [ 299.476885][ T7998] netlink_sendmsg+0x746/0xbc0 [ 299.481832][ T7998] ? netlink_getsockopt+0x540/0x540 [ 299.487091][ T7998] ? aa_sock_msg_perm+0x94/0x150 [ 299.492091][ T7998] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 299.497425][ T7998] ? security_socket_sendmsg+0x7c/0xa0 [ 299.502946][ T7998] ? netlink_getsockopt+0x540/0x540 [ 299.508193][ T7998] ____sys_sendmsg+0x59b/0x970 [ 299.513130][ T7998] ? __sys_sendmsg_sock+0x30/0x30 [ 299.518203][ T7998] ? __import_iovec+0x315/0x500 [ 299.523165][ T7998] ? import_iovec+0x6f/0xa0 [ 299.527737][ T7998] ___sys_sendmsg+0x21c/0x290 [ 299.532479][ T7998] ? __sys_sendmsg+0x270/0x270 [ 299.537428][ T7998] ? __lock_acquire+0x7c50/0x7c50 [ 299.542835][ T7998] ? __fdget+0x17c/0x200 [ 299.547267][ T7998] __se_sys_sendmsg+0x19e/0x270 [ 299.552187][ T7998] ? __x64_sys_sendmsg+0x80/0x80 [ 299.557448][ T7998] ? lockdep_hardirqs_on+0x94/0x140 [ 299.562739][ T7998] do_syscall_64+0x4c/0xa0 [ 299.567208][ T7998] ? clear_bhb_loop+0x60/0xb0 [ 299.571933][ T7998] ? clear_bhb_loop+0x60/0xb0 [ 299.576659][ T7998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.582600][ T7998] RIP: 0033:0x7f7d9658ebe9 [ 299.587074][ T7998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.606738][ T7998] RSP: 002b:00007f7d973d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.615207][ T7998] RAX: ffffffffffffffda RBX: 00007f7d967b5fa0 RCX: 00007f7d9658ebe9 [ 299.623222][ T7998] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 299.631242][ T7998] RBP: 00007f7d973d3090 R08: 0000000000000000 R09: 0000000000000000 [ 299.639258][ T7998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.647290][ T7998] R13: 00007f7d967b6038 R14: 00007f7d967b5fa0 R15: 00007ffc382c9e28 [ 299.655364][ T7998] [ 299.662217][ T4675] wlan1: Trigger new scan to find an IBSS to join [ 300.296404][ T8004] FAULT_INJECTION: forcing a failure. [ 300.296404][ T8004] name failslab, interval 1, probability 0, space 0, times 0 [ 300.372297][ T8004] CPU: 1 PID: 8004 Comm: syz.0.1094 Not tainted 6.1.147-syzkaller #0 [ 300.380451][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.390543][ T8004] Call Trace: [ 300.393946][ T8004] [ 300.396916][ T8004] dump_stack_lvl+0x168/0x22e [ 300.401745][ T8004] ? show_regs_print_info+0x12/0x12 [ 300.406987][ T8004] ? load_image+0x3b0/0x3b0 [ 300.411536][ T8004] ? __might_sleep+0xd0/0xd0 [ 300.416179][ T8004] ? __lock_acquire+0x7c50/0x7c50 [ 300.421264][ T8004] should_fail_ex+0x399/0x4d0 [ 300.425999][ T8004] should_failslab+0x5/0x20 [ 300.430548][ T8004] slab_pre_alloc_hook+0x59/0x310 [ 300.435695][ T8004] ? apparmor_sk_alloc_security+0x74/0x100 [ 300.441562][ T8004] __kmem_cache_alloc_node+0x4f/0x260 [ 300.446981][ T8004] ? apparmor_sk_alloc_security+0x74/0x100 [ 300.452815][ T8004] kmalloc_trace+0x26/0xe0 [ 300.457245][ T8004] apparmor_sk_alloc_security+0x74/0x100 [ 300.462910][ T8004] security_sk_alloc+0x6a/0xa0 [ 300.467691][ T8004] sk_prot_alloc+0x101/0x210 [ 300.472292][ T8004] ? sk_alloc+0x20/0x340 [ 300.476550][ T8004] sk_alloc+0x36/0x340 [ 300.480628][ T8004] ? bpf_ctx_init+0x163/0x1a0 [ 300.485317][ T8004] ? bpf_prog_test_run_skb+0x267/0x11b0 [ 300.490911][ T8004] bpf_prog_test_run_skb+0x350/0x11b0 [ 300.496307][ T8004] ? lockdep_hardirqs_on+0x94/0x140 [ 300.501546][ T8004] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 300.507806][ T8004] ? cpu_online+0xa0/0xa0 [ 300.512158][ T8004] bpf_prog_test_run+0x31e/0x390 [ 300.517134][ T8004] __sys_bpf+0x593/0x6d0 [ 300.521385][ T8004] ? bpf_link_show_fdinfo+0x340/0x340 [ 300.526796][ T8004] ? lock_chain_count+0x20/0x20 [ 300.531672][ T8004] __x64_sys_bpf+0x78/0x90 [ 300.536098][ T8004] do_syscall_64+0x4c/0xa0 [ 300.540603][ T8004] ? clear_bhb_loop+0x60/0xb0 [ 300.545286][ T8004] ? clear_bhb_loop+0x60/0xb0 [ 300.550069][ T8004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.556013][ T8004] RIP: 0033:0x7f3777b8ebe9 [ 300.560970][ T8004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.580770][ T8004] RSP: 002b:00007f37789ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 300.589227][ T8004] RAX: ffffffffffffffda RBX: 00007f3777db5fa0 RCX: 00007f3777b8ebe9 [ 300.597207][ T8004] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 300.605276][ T8004] RBP: 00007f37789ce090 R08: 0000000000000000 R09: 0000000000000000 [ 300.613286][ T8004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.621617][ T8004] R13: 00007f3777db6038 R14: 00007f3777db5fa0 R15: 00007ffd643a9548 [ 300.629621][ T8004] [ 300.722916][ T9] wlan1: Creating new IBSS network, BSSID 46:e9:cc:92:57:86 [ 300.814412][ T8008] netlink: 'syz.2.1096': attribute type 10 has an invalid length. [ 301.654200][ T8038] netlink: 'syz.3.1104': attribute type 10 has an invalid length. [ 301.719665][ T8037] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1105'. [ 302.728328][ T8068] netlink: 'syz.2.1117': attribute type 21 has an invalid length. [ 302.747274][ T8069] FAULT_INJECTION: forcing a failure. [ 302.747274][ T8069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.768607][ T8068] netlink: 'syz.2.1117': attribute type 11 has an invalid length. [ 302.794691][ T8069] CPU: 0 PID: 8069 Comm: syz.3.1115 Not tainted 6.1.147-syzkaller #0 [ 302.802841][ T8069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.813016][ T8069] Call Trace: [ 302.816331][ T8069] [ 302.819293][ T8069] dump_stack_lvl+0x168/0x22e [ 302.824016][ T8069] ? show_regs_print_info+0x12/0x12 [ 302.829318][ T8069] ? load_image+0x3b0/0x3b0 [ 302.833837][ T8069] ? __lock_acquire+0x7c50/0x7c50 [ 302.838884][ T8069] ? snprintf+0xd7/0x120 [ 302.843182][ T8069] should_fail_ex+0x399/0x4d0 [ 302.848049][ T8069] _copy_to_user+0x2c/0x130 [ 302.852596][ T8069] simple_read_from_buffer+0xe3/0x150 [ 302.858006][ T8069] proc_fail_nth_read+0x19a/0x210 [ 302.863054][ T8069] ? proc_fault_inject_write+0x2f0/0x2f0 [ 302.868785][ T8069] ? fsnotify_perm+0x248/0x550 [ 302.873650][ T8069] ? proc_fault_inject_write+0x2f0/0x2f0 [ 302.879733][ T8069] vfs_read+0x2c0/0x920 [ 302.883915][ T8069] ? kernel_read+0x1e0/0x1e0 [ 302.888519][ T8069] ? __fget_files+0x28/0x4d0 [ 302.893134][ T8069] ? __fget_files+0x44a/0x4d0 [ 302.897842][ T8069] ? __fdget_pos+0x2ae/0x360 [ 302.902700][ T8069] ? ksys_read+0x71/0x240 [ 302.907041][ T8069] ksys_read+0x143/0x240 [ 302.911304][ T8069] ? vfs_write+0x960/0x960 [ 302.915735][ T8069] ? lockdep_hardirqs_on+0x94/0x140 [ 302.920977][ T8069] do_syscall_64+0x4c/0xa0 [ 302.925420][ T8069] ? clear_bhb_loop+0x60/0xb0 [ 302.930105][ T8069] ? clear_bhb_loop+0x60/0xb0 [ 302.934790][ T8069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.940695][ T8069] RIP: 0033:0x7f7d9658d5fc [ 302.945119][ T8069] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 302.964828][ T8069] RSP: 002b:00007f7d973d3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 302.973252][ T8069] RAX: ffffffffffffffda RBX: 00007f7d967b5fa0 RCX: 00007f7d9658d5fc [ 302.981315][ T8069] RDX: 000000000000000f RSI: 00007f7d973d30a0 RDI: 0000000000000004 [ 302.989464][ T8069] RBP: 00007f7d973d3090 R08: 0000000000000000 R09: 0000000000000000 [ 302.997441][ T8069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.005511][ T8069] R13: 00007f7d967b6038 R14: 00007f7d967b5fa0 R15: 00007ffc382c9e28 [ 303.013503][ T8069] [ 303.495609][ T8085] device ipvlan1 entered promiscuous mode [ 303.530870][ T8078] netlink: 'syz.4.1119': attribute type 11 has an invalid length. [ 303.546817][ T8087] netlink: 'syz.1.1120': attribute type 10 has an invalid length. [ 303.564817][ T8078] netlink: 177212 bytes leftover after parsing attributes in process `syz.4.1119'. [ 303.677854][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.957768][ T8092] FAULT_INJECTION: forcing a failure. [ 303.957768][ T8092] name failslab, interval 1, probability 0, space 0, times 0 [ 304.015095][ T8092] CPU: 0 PID: 8092 Comm: syz.2.1124 Not tainted 6.1.147-syzkaller #0 [ 304.023433][ T8092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.033575][ T8092] Call Trace: [ 304.036890][ T8092] [ 304.039865][ T8092] dump_stack_lvl+0x168/0x22e [ 304.044605][ T8092] ? show_regs_print_info+0x12/0x12 [ 304.049851][ T8092] ? load_image+0x3b0/0x3b0 [ 304.054415][ T8092] ? __might_sleep+0xd0/0xd0 [ 304.059164][ T8092] ? __lock_acquire+0x7c50/0x7c50 [ 304.064262][ T8092] should_fail_ex+0x399/0x4d0 [ 304.069007][ T8092] should_failslab+0x5/0x20 [ 304.073654][ T8092] slab_pre_alloc_hook+0x59/0x310 [ 304.078746][ T8092] kmem_cache_alloc_node+0x5a/0x320 [ 304.083993][ T8092] ? __alloc_skb+0xfc/0x7e0 [ 304.088584][ T8092] __alloc_skb+0xfc/0x7e0 [ 304.093398][ T8092] ? netlink_autobind+0xda/0x300 [ 304.098427][ T8092] netlink_sendmsg+0x645/0xbc0 [ 304.103293][ T8092] ? netlink_getsockopt+0x540/0x540 [ 304.108550][ T8092] ? aa_sock_msg_perm+0x94/0x150 [ 304.113552][ T8092] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 304.118876][ T8092] ? security_socket_sendmsg+0x7c/0xa0 [ 304.124390][ T8092] ? netlink_getsockopt+0x540/0x540 [ 304.129630][ T8092] ____sys_sendmsg+0x59b/0x970 [ 304.134456][ T8092] ? __sys_sendmsg_sock+0x30/0x30 [ 304.139522][ T8092] ? __import_iovec+0x315/0x500 [ 304.144434][ T8092] ? import_iovec+0x6f/0xa0 [ 304.149020][ T8092] ___sys_sendmsg+0x21c/0x290 [ 304.153749][ T8092] ? __sys_sendmsg+0x270/0x270 [ 304.158595][ T8092] ? __lock_acquire+0x7c50/0x7c50 [ 304.163695][ T8092] ? __fdget+0x17c/0x200 [ 304.167980][ T8092] __se_sys_sendmsg+0x19e/0x270 [ 304.172873][ T8092] ? __x64_sys_sendmsg+0x80/0x80 [ 304.177881][ T8092] ? lockdep_hardirqs_on+0x94/0x140 [ 304.183142][ T8092] do_syscall_64+0x4c/0xa0 [ 304.187595][ T8092] ? clear_bhb_loop+0x60/0xb0 [ 304.192308][ T8092] ? clear_bhb_loop+0x60/0xb0 [ 304.197040][ T8092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.202994][ T8092] RIP: 0033:0x7fa50558ebe9 [ 304.207535][ T8092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.227279][ T8092] RSP: 002b:00007fa506321038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.235739][ T8092] RAX: ffffffffffffffda RBX: 00007fa5057b5fa0 RCX: 00007fa50558ebe9 [ 304.243742][ T8092] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 304.251752][ T8092] RBP: 00007fa506321090 R08: 0000000000000000 R09: 0000000000000000 [ 304.259860][ T8092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.267949][ T8092] R13: 00007fa5057b6038 R14: 00007fa5057b5fa0 R15: 00007fff1dfebdb8 [ 304.275982][ T8092] [ 304.491290][ T8101] can: request_module (can-proto-0) failed. [ 306.009786][ T8124] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1134'. [ 306.428110][ T8131] netlink: 'syz.3.1136': attribute type 39 has an invalid length. [ 306.937921][ T8136] netlink: 'syz.2.1137': attribute type 21 has an invalid length. [ 307.152369][ T8136] netlink: 'syz.2.1137': attribute type 6 has an invalid length. [ 307.160215][ T8136] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1137'. [ 307.268382][ T8139] netlink: 'syz.4.1138': attribute type 10 has an invalid length. [ 307.673656][ T8154] FAULT_INJECTION: forcing a failure. [ 307.673656][ T8154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.784056][ T8154] CPU: 1 PID: 8154 Comm: syz.2.1142 Not tainted 6.1.147-syzkaller #0 [ 307.792384][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.802465][ T8154] Call Trace: [ 307.805770][ T8154] [ 307.808709][ T8154] dump_stack_lvl+0x168/0x22e [ 307.813416][ T8154] ? show_regs_print_info+0x12/0x12 [ 307.818726][ T8154] ? load_image+0x3b0/0x3b0 [ 307.823251][ T8154] ? __might_fault+0xa6/0x120 [ 307.827962][ T8154] should_fail_ex+0x399/0x4d0 [ 307.832666][ T8154] copyin+0x1b/0x120 [ 307.836573][ T8154] _copy_from_iter+0x45a/0x10c0 [ 307.841441][ T8154] ? copyout_mc+0x110/0x110 [ 307.845975][ T8154] ? __virt_addr_valid+0x188/0x540 [ 307.851182][ T8154] ? __virt_addr_valid+0x188/0x540 [ 307.856404][ T8154] ? __virt_addr_valid+0x465/0x540 [ 307.861527][ T8154] ? __check_object_size+0x500/0xa40 [ 307.866815][ T8154] netlink_sendmsg+0x746/0xbc0 [ 307.871589][ T8154] ? netlink_getsockopt+0x540/0x540 [ 307.876797][ T8154] ? aa_sock_msg_perm+0x94/0x150 [ 307.881749][ T8154] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 307.887038][ T8154] ? security_socket_sendmsg+0x7c/0xa0 [ 307.892508][ T8154] ? netlink_getsockopt+0x540/0x540 [ 307.897718][ T8154] ____sys_sendmsg+0x59b/0x970 [ 307.902507][ T8154] ? __sys_sendmsg_sock+0x30/0x30 [ 307.907540][ T8154] ? __import_iovec+0x315/0x500 [ 307.912408][ T8154] ? import_iovec+0x6f/0xa0 [ 307.916925][ T8154] ___sys_sendmsg+0x21c/0x290 [ 307.921928][ T8154] ? __sys_sendmsg+0x270/0x270 [ 307.926721][ T8154] ? __lock_acquire+0x7c50/0x7c50 [ 307.931866][ T8154] ? __fdget+0x17c/0x200 [ 307.936118][ T8154] __se_sys_sendmsg+0x19e/0x270 [ 307.941586][ T8154] ? __x64_sys_sendmsg+0x80/0x80 [ 307.946546][ T8154] ? lockdep_hardirqs_on+0x94/0x140 [ 307.951757][ T8154] do_syscall_64+0x4c/0xa0 [ 307.956268][ T8154] ? clear_bhb_loop+0x60/0xb0 [ 307.961037][ T8154] ? clear_bhb_loop+0x60/0xb0 [ 307.965746][ T8154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.971676][ T8154] RIP: 0033:0x7fa50558ebe9 [ 307.976186][ T8154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.995810][ T8154] RSP: 002b:00007fa506321038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.004237][ T8154] RAX: ffffffffffffffda RBX: 00007fa5057b5fa0 RCX: 00007fa50558ebe9 [ 308.012220][ T8154] RDX: 0000000000000084 RSI: 0000200000000600 RDI: 0000000000000003 [ 308.020196][ T8154] RBP: 00007fa506321090 R08: 0000000000000000 R09: 0000000000000000 [ 308.028183][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.036157][ T8154] R13: 00007fa5057b6038 R14: 00007fa5057b5fa0 R15: 00007fff1dfebdb8 [ 308.044160][ T8154] [ 308.316068][ T8159] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1141'. [ 308.725804][ T8164] netlink: 'syz.2.1144': attribute type 10 has an invalid length. [ 309.439712][ T8182] netlink: 'syz.2.1151': attribute type 10 has an invalid length. [ 309.498658][ T8183] FAULT_INJECTION: forcing a failure. [ 309.498658][ T8183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.532287][ T8183] CPU: 0 PID: 8183 Comm: syz.2.1151 Not tainted 6.1.147-syzkaller #0 [ 309.540517][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.550697][ T8183] Call Trace: [ 309.553997][ T8183] [ 309.556948][ T8183] dump_stack_lvl+0x168/0x22e [ 309.561840][ T8183] ? show_regs_print_info+0x12/0x12 [ 309.567161][ T8183] ? load_image+0x3b0/0x3b0 [ 309.571694][ T8183] ? __lock_acquire+0x7c50/0x7c50 [ 309.576752][ T8183] ? verify_lock_unused+0x140/0x140 [ 309.582164][ T8183] should_fail_ex+0x399/0x4d0 [ 309.586886][ T8183] _copy_from_user+0x2c/0x170 [ 309.591684][ T8183] ___sys_sendmsg+0x155/0x290 [ 309.596398][ T8183] ? __sys_sendmsg+0x270/0x270 [ 309.601481][ T8183] ? __lock_acquire+0x7c50/0x7c50 [ 309.606591][ T8183] ? __fdget+0x17c/0x200 [ 309.610972][ T8183] __se_sys_sendmsg+0x19e/0x270 [ 309.615864][ T8183] ? __x64_sys_sendmsg+0x80/0x80 [ 309.620854][ T8183] ? lockdep_hardirqs_on+0x94/0x140 [ 309.626095][ T8183] do_syscall_64+0x4c/0xa0 [ 309.630717][ T8183] ? clear_bhb_loop+0x60/0xb0 [ 309.635604][ T8183] ? clear_bhb_loop+0x60/0xb0 [ 309.640490][ T8183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.646429][ T8183] RIP: 0033:0x7fa50558ebe9 [ 309.650862][ T8183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.670765][ T8183] RSP: 002b:00007fa5053ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.679286][ T8183] RAX: ffffffffffffffda RBX: 00007fa5057b6090 RCX: 00007fa50558ebe9 [ 309.687350][ T8183] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 309.695323][ T8183] RBP: 00007fa5053ff090 R08: 0000000000000000 R09: 0000000000000000 [ 309.703384][ T8183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.711364][ T8183] R13: 00007fa5057b6128 R14: 00007fa5057b6090 R15: 00007fff1dfebdb8 [ 309.719619][ T8183] [ 310.444503][ T8182] team0: Port device dummy0 added [ 310.462270][ T8190] netlink: 'syz.0.1154': attribute type 10 has an invalid length. [ 310.523416][ T8196] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1153'. [ 311.108916][ T8213] netlink: 'syz.1.1159': attribute type 10 has an invalid length. [ 311.962668][ T8229] FAULT_INJECTION: forcing a failure. [ 311.962668][ T8229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.054362][ T8229] CPU: 0 PID: 8229 Comm: syz.1.1166 Not tainted 6.1.147-syzkaller #0 [ 312.062523][ T8229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.072640][ T8229] Call Trace: [ 312.075942][ T8229] [ 312.078892][ T8229] dump_stack_lvl+0x168/0x22e [ 312.083605][ T8229] ? show_regs_print_info+0x12/0x12 [ 312.088844][ T8229] ? load_image+0x3b0/0x3b0 [ 312.093414][ T8229] ? __lock_acquire+0x7c50/0x7c50 [ 312.098503][ T8229] should_fail_ex+0x399/0x4d0 [ 312.103324][ T8229] _copy_from_iter+0x1c5/0x10c0 [ 312.108255][ T8229] ? __lock_acquire+0x7c50/0x7c50 [ 312.113321][ T8229] ? copyout_mc+0x110/0x110 [ 312.117883][ T8229] ? __virt_addr_valid+0x188/0x540 [ 312.123044][ T8229] ? __virt_addr_valid+0x188/0x540 [ 312.128292][ T8229] ? __virt_addr_valid+0x465/0x540 [ 312.133461][ T8229] ? __phys_addr+0xb6/0x170 [ 312.138030][ T8229] ? __check_object_size+0x500/0xa40 [ 312.143374][ T8229] pep_sendmsg+0x1fb/0xaa0 [ 312.147846][ T8229] ? lock_chain_count+0x20/0x20 [ 312.152754][ T8229] ? __local_bh_enable_ip+0x12a/0x1b0 [ 312.158177][ T8229] ? lockdep_hardirqs_on+0x94/0x140 [ 312.163405][ T8229] ? pep_getsockopt+0x2c0/0x2c0 [ 312.168278][ T8229] ? __local_bh_enable_ip+0x12a/0x1b0 [ 312.173687][ T8229] ? _local_bh_enable+0xa0/0xa0 [ 312.178562][ T8229] ? release_sock+0x2b/0x1b0 [ 312.183347][ T8229] ? do_raw_spin_unlock+0x11d/0x230 [ 312.188562][ T8229] ? pn_socket_bind+0x3fd/0x530 [ 312.193511][ T8229] ? pn_socket_bind+0x3fd/0x530 [ 312.198392][ T8229] pn_socket_sendmsg+0x1b5/0x210 [ 312.203343][ T8229] ? pn_socket_ioctl+0x350/0x350 [ 312.208303][ T8229] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 312.213688][ T8229] ? security_socket_sendmsg+0x7c/0xa0 [ 312.219176][ T8229] sock_write_iter+0x2b5/0x3a0 [ 312.223961][ T8229] ? sock_read_iter+0x370/0x370 [ 312.228856][ T8229] ? common_file_perm+0x171/0x1c0 [ 312.233909][ T8229] ? fsnotify_perm+0x5a/0x550 [ 312.238651][ T8229] vfs_write+0x44c/0x960 [ 312.242921][ T8229] ? file_end_write+0x250/0x250 [ 312.247806][ T8229] ? __fget_files+0x44a/0x4d0 [ 312.252522][ T8229] ? __fdget_pos+0x1d4/0x360 [ 312.257150][ T8229] ? ksys_write+0x71/0x240 [ 312.261604][ T8229] ksys_write+0x143/0x240 [ 312.265979][ T8229] ? __ia32_sys_read+0x80/0x80 [ 312.270776][ T8229] ? lockdep_hardirqs_on+0x94/0x140 [ 312.276005][ T8229] do_syscall_64+0x4c/0xa0 [ 312.280435][ T8229] ? clear_bhb_loop+0x60/0xb0 [ 312.285218][ T8229] ? clear_bhb_loop+0x60/0xb0 [ 312.289915][ T8229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.295834][ T8229] RIP: 0033:0x7f5a97d8ebe9 [ 312.300263][ T8229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.320107][ T8229] RSP: 002b:00007f5a98caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 312.328620][ T8229] RAX: ffffffffffffffda RBX: 00007f5a97fb5fa0 RCX: 00007f5a97d8ebe9 [ 312.336601][ T8229] RDX: 000000000000eaff RSI: 0000000000000000 RDI: 0000000000000003 [ 312.344587][ T8229] RBP: 00007f5a98caf090 R08: 0000000000000000 R09: 0000000000000000 [ 312.352564][ T8229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.360598][ T8229] R13: 00007f5a97fb6038 R14: 00007f5a97fb5fa0 R15: 00007ffc3a953bd8 [ 312.368673][ T8229] [ 313.691879][ T8251] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1173'. [ 313.974493][ T8253] netlink: 'syz.1.1179': attribute type 10 has an invalid length. [ 314.280013][ T8260] netlink: 'syz.2.1175': attribute type 10 has an invalid length. [ 314.448295][ T8270] FAULT_INJECTION: forcing a failure. [ 314.448295][ T8270] name failslab, interval 1, probability 0, space 0, times 0 [ 314.647717][ T8270] CPU: 0 PID: 8270 Comm: syz.4.1176 Not tainted 6.1.147-syzkaller #0 [ 314.655865][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.665961][ T8270] Call Trace: [ 314.669280][ T8270] [ 314.672264][ T8270] dump_stack_lvl+0x168/0x22e [ 314.676988][ T8270] ? show_regs_print_info+0x12/0x12 [ 314.682265][ T8270] ? load_image+0x3b0/0x3b0 [ 314.686812][ T8270] ? __might_sleep+0xd0/0xd0 [ 314.691462][ T8270] ? __lock_acquire+0x7c50/0x7c50 [ 314.697029][ T8270] should_fail_ex+0x399/0x4d0 [ 314.701728][ T8270] should_failslab+0x5/0x20 [ 314.706244][ T8270] slab_pre_alloc_hook+0x59/0x310 [ 314.711631][ T8270] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 314.717368][ T8270] __kmem_cache_alloc_node+0x4f/0x260 [ 314.722841][ T8270] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 314.728568][ T8270] __kmalloc+0xa0/0x240 [ 314.732736][ T8270] tomoyo_realpath_from_path+0xdf/0x5d0 [ 314.738396][ T8270] tomoyo_path_number_perm+0x1e3/0x600 [ 314.743858][ T8270] ? tomoyo_path_number_perm+0x1b6/0x600 [ 314.749501][ T8270] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 314.754966][ T8270] ? ksys_write+0x1bd/0x240 [ 314.759657][ T8270] ? common_file_perm+0x171/0x1c0 [ 314.764723][ T8270] ? __fget_files+0x28/0x4d0 [ 314.769339][ T8270] security_file_ioctl+0x6c/0xa0 [ 314.774292][ T8270] __se_sys_ioctl+0x48/0x170 [ 314.778900][ T8270] do_syscall_64+0x4c/0xa0 [ 314.783414][ T8270] ? clear_bhb_loop+0x60/0xb0 [ 314.788122][ T8270] ? clear_bhb_loop+0x60/0xb0 [ 314.792909][ T8270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.798990][ T8270] RIP: 0033:0x7f79fe58ebe9 [ 314.803419][ T8270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.823293][ T8270] RSP: 002b:00007f79ff3a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.831720][ T8270] RAX: ffffffffffffffda RBX: 00007f79fe7b6090 RCX: 00007f79fe58ebe9 [ 314.839725][ T8270] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000006 [ 314.847702][ T8270] RBP: 00007f79ff3a6090 R08: 0000000000000000 R09: 0000000000000000 [ 314.855851][ T8270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.863825][ T8270] R13: 00007f79fe7b6128 R14: 00007f79fe7b6090 R15: 00007ffe63bdc448 [ 314.871905][ T8270] [ 314.908218][ T8270] ERROR: Out of memory at tomoyo_realpath_from_path. [ 315.013596][ T8277] netlink: 'syz.1.1181': attribute type 10 has an invalid length. [ 315.583958][ T8294] FAULT_INJECTION: forcing a failure. [ 315.583958][ T8294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.752145][ T8294] CPU: 1 PID: 8294 Comm: syz.3.1188 Not tainted 6.1.147-syzkaller #0 [ 315.760293][ T8294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.770377][ T8294] Call Trace: [ 315.773772][ T8294] [ 315.776726][ T8294] dump_stack_lvl+0x168/0x22e [ 315.781436][ T8294] ? show_regs_print_info+0x12/0x12 [ 315.786750][ T8294] ? load_image+0x3b0/0x3b0 [ 315.791322][ T8294] ? __might_fault+0xa6/0x120 [ 315.796036][ T8294] should_fail_ex+0x399/0x4d0 [ 315.800747][ T8294] copyin+0x1b/0x120 [ 315.804763][ T8294] _copy_from_iter+0x45a/0x10c0 [ 315.809661][ T8294] ? copyout_mc+0x110/0x110 [ 315.814285][ T8294] ? __virt_addr_valid+0x188/0x540 [ 315.819423][ T8294] ? __virt_addr_valid+0x188/0x540 [ 315.824558][ T8294] ? __virt_addr_valid+0x465/0x540 [ 315.829712][ T8294] ? __check_object_size+0x500/0xa40 [ 315.835220][ T8294] netlink_sendmsg+0x746/0xbc0 [ 315.840042][ T8294] ? netlink_getsockopt+0x540/0x540 [ 315.845373][ T8294] ? aa_sock_msg_perm+0x94/0x150 [ 315.850367][ T8294] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 315.855694][ T8294] ? security_socket_sendmsg+0x7c/0xa0 [ 315.861194][ T8294] ? netlink_getsockopt+0x540/0x540 [ 315.866441][ T8294] ____sys_sendmsg+0x59b/0x970 [ 315.871244][ T8294] ? __sys_sendmsg_sock+0x30/0x30 [ 315.876383][ T8294] ? __import_iovec+0x315/0x500 [ 315.881296][ T8294] ? import_iovec+0x6f/0xa0 [ 315.885837][ T8294] ___sys_sendmsg+0x21c/0x290 [ 315.890544][ T8294] ? __sys_sendmsg+0x270/0x270 [ 315.895354][ T8294] ? __lock_acquire+0x7c50/0x7c50 [ 315.900431][ T8294] ? __fdget+0x17c/0x200 [ 315.904792][ T8294] __se_sys_sendmsg+0x19e/0x270 [ 315.909717][ T8294] ? __x64_sys_sendmsg+0x80/0x80 [ 315.914710][ T8294] ? lockdep_hardirqs_on+0x94/0x140 [ 315.919956][ T8294] do_syscall_64+0x4c/0xa0 [ 315.924424][ T8294] ? clear_bhb_loop+0x60/0xb0 [ 315.929124][ T8294] ? clear_bhb_loop+0x60/0xb0 [ 315.933841][ T8294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.939776][ T8294] RIP: 0033:0x7f7d9658ebe9 [ 315.944215][ T8294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.963967][ T8294] RSP: 002b:00007f7d973d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.972417][ T8294] RAX: ffffffffffffffda RBX: 00007f7d967b5fa0 RCX: 00007f7d9658ebe9 [ 315.980510][ T8294] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 315.988503][ T8294] RBP: 00007f7d973d3090 R08: 0000000000000000 R09: 0000000000000000 [ 315.996512][ T8294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.004519][ T8294] R13: 00007f7d967b6038 R14: 00007f7d967b5fa0 R15: 00007ffc382c9e28 [ 316.012621][ T8294] [ 316.268650][ T8301] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1189'. [ 316.549898][ T8312] FAULT_INJECTION: forcing a failure. [ 316.549898][ T8312] name failslab, interval 1, probability 0, space 0, times 0 [ 316.556296][ T8308] netlink: 'syz.3.1193': attribute type 10 has an invalid length. [ 316.584012][ T8312] CPU: 1 PID: 8312 Comm: syz.2.1194 Not tainted 6.1.147-syzkaller #0 [ 316.592181][ T8312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.602300][ T8312] Call Trace: [ 316.605611][ T8312] [ 316.608578][ T8312] dump_stack_lvl+0x168/0x22e [ 316.613311][ T8312] ? show_regs_print_info+0x12/0x12 [ 316.618556][ T8312] ? load_image+0x3b0/0x3b0 [ 316.623095][ T8312] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 316.629382][ T8312] should_fail_ex+0x399/0x4d0 [ 316.634092][ T8312] should_failslab+0x5/0x20 [ 316.638625][ T8312] slab_pre_alloc_hook+0x59/0x310 [ 316.643722][ T8312] ? current_time+0x197/0x2b0 [ 316.648424][ T8312] ? proc_self_get_link+0xe1/0x170 [ 316.653647][ T8312] __kmem_cache_alloc_node+0x4f/0x260 [ 316.659051][ T8312] ? proc_self_get_link+0xe1/0x170 [ 316.664186][ T8312] kmalloc_trace+0x26/0xe0 [ 316.668650][ T8312] proc_self_get_link+0xe1/0x170 [ 316.673717][ T8312] ? proc_setup_self+0x2f0/0x2f0 [ 316.678692][ T8312] pick_link+0x6f3/0xe20 [ 316.682984][ T8312] step_into+0xc39/0xf10 [ 316.687269][ T8312] ? __d_lookup_rcu+0x43a/0x4c0 [ 316.692157][ T8312] ? set_root+0x3a0/0x3a0 [ 316.696522][ T8312] ? lookup_fast+0x15b/0x4d0 [ 316.701301][ T8312] ? security_inode_permission+0xac/0xf0 [ 316.706962][ T8312] link_path_walk+0x6be/0xe50 [ 316.711682][ T8312] ? handle_lookup_down+0x130/0x130 [ 316.717004][ T8312] ? percpu_counter_add_batch+0x13b/0x160 [ 316.722772][ T8312] path_openat+0x276/0x2e70 [ 316.727327][ T8312] ? do_sys_openat2+0xcf/0x490 [ 316.732136][ T8312] ? __x64_sys_openat+0x135/0x160 [ 316.737197][ T8312] ? do_syscall_64+0x4c/0xa0 [ 316.741821][ T8312] ? do_filp_open+0x3c0/0x3c0 [ 316.746541][ T8312] do_filp_open+0x1c1/0x3c0 [ 316.751068][ T8312] ? vfs_tmpfile+0x480/0x480 [ 316.755709][ T8312] ? _raw_spin_unlock+0x24/0x40 [ 316.760587][ T8312] ? alloc_fd+0x58f/0x630 [ 316.764948][ T8312] do_sys_openat2+0x142/0x490 [ 316.769651][ T8312] ? atomic_notifier_call_chain+0x282/0x2b0 [ 316.775572][ T8312] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 316.781403][ T8312] ? do_sys_open+0xe0/0xe0 [ 316.785860][ T8312] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 316.791874][ T8312] ? lock_chain_count+0x20/0x20 [ 316.796753][ T8312] __x64_sys_openat+0x135/0x160 [ 316.801631][ T8312] do_syscall_64+0x4c/0xa0 [ 316.806070][ T8312] ? clear_bhb_loop+0x60/0xb0 [ 316.810771][ T8312] ? clear_bhb_loop+0x60/0xb0 [ 316.815466][ T8312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.821387][ T8312] RIP: 0033:0x7fa50558d550 [ 316.825824][ T8312] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 316.845460][ T8312] RSP: 002b:00007fa506320f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 316.853894][ T8312] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa50558d550 [ 316.861888][ T8312] RDX: 0000000000000002 RSI: 00007fa506320fa0 RDI: 00000000ffffff9c [ 316.869879][ T8312] RBP: 00007fa506320fa0 R08: 0000000000000000 R09: 0000000000000000 [ 316.877959][ T8312] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 316.885955][ T8312] R13: 00007fa5057b6038 R14: 00007fa5057b5fa0 R15: 00007fff1dfebdb8 [ 316.893961][ T8312] [ 316.900278][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.906672][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.367163][ T8321] device syzkaller0 entered promiscuous mode [ 317.644914][ T8336] syz.0.1201[8336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.645037][ T8336] syz.0.1201[8336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.993820][ T8344] netlink: 'syz.2.1204': attribute type 10 has an invalid length. [ 320.020123][ T8351] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1206'. [ 320.031875][ T8353] netlink: 'syz.1.1207': attribute type 10 has an invalid length. [ 320.289878][ T8358] netlink: 'syz.4.1209': attribute type 10 has an invalid length. [ 320.793983][ T8382] netlink: 'syz.4.1214': attribute type 10 has an invalid length. [ 320.969344][ T8384] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1217'. [ 321.471357][ T8395] netlink: 'syz.1.1220': attribute type 10 has an invalid length. [ 321.489203][ T8389] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1219'. [ 322.440145][ T8408] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1222'. [ 322.451763][ T8410] netlink: 'syz.2.1226': attribute type 10 has an invalid length. [ 322.746774][ T8420] netlink: 'syz.3.1227': attribute type 10 has an invalid length. [ 322.783600][ T8420] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1227'. [ 322.802330][ T8420] device bond0 entered promiscuous mode [ 322.868493][ T8420] device bond_slave_0 entered promiscuous mode [ 322.877471][ T8420] device bond_slave_1 entered promiscuous mode [ 322.884432][ T8420] device bridge0 entered promiscuous mode [ 322.998045][ T8420] team0: Port device bond0 removed [ 323.038660][ T8420] bridge0: port 3(bond0) entered blocking state [ 323.067741][ T8420] bridge0: port 3(bond0) entered disabled state [ 323.100956][ T8430] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1231'. [ 323.443406][ T8441] FAULT_INJECTION: forcing a failure. [ 323.443406][ T8441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.485665][ T8441] CPU: 1 PID: 8441 Comm: syz.1.1234 Not tainted 6.1.147-syzkaller #0 [ 323.494011][ T8441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.504090][ T8441] Call Trace: [ 323.507385][ T8441] [ 323.510333][ T8441] dump_stack_lvl+0x168/0x22e [ 323.515051][ T8441] ? show_regs_print_info+0x12/0x12 [ 323.520261][ T8441] ? load_image+0x3b0/0x3b0 [ 323.524784][ T8441] ? __lock_acquire+0x7c50/0x7c50 [ 323.529928][ T8441] ? __fget_files+0x28/0x4d0 [ 323.534562][ T8441] should_fail_ex+0x399/0x4d0 [ 323.539282][ T8441] _copy_from_user+0x2c/0x170 [ 323.543979][ T8441] netlink_setsockopt+0x19e/0x770 [ 323.549018][ T8441] ? aa_af_perm+0x2b0/0x2b0 [ 323.553549][ T8441] ? netlink_ioctl+0x10/0x10 [ 323.558175][ T8441] ? aa_sock_opt_perm+0x74/0x100 [ 323.563147][ T8441] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 323.568694][ T8441] ? security_socket_setsockopt+0x7a/0xa0 [ 323.574422][ T8441] ? netlink_ioctl+0x10/0x10 [ 323.579060][ T8441] __sys_setsockopt+0x2bf/0x3d0 [ 323.584014][ T8441] __x64_sys_setsockopt+0xb1/0xc0 [ 323.589228][ T8441] do_syscall_64+0x4c/0xa0 [ 323.593654][ T8441] ? clear_bhb_loop+0x60/0xb0 [ 323.598343][ T8441] ? clear_bhb_loop+0x60/0xb0 [ 323.603124][ T8441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.609028][ T8441] RIP: 0033:0x7f5a97d8ebe9 [ 323.613477][ T8441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.633092][ T8441] RSP: 002b:00007f5a98caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 323.641522][ T8441] RAX: ffffffffffffffda RBX: 00007f5a97fb5fa0 RCX: 00007f5a97d8ebe9 [ 323.649503][ T8441] RDX: 0000000000000002 RSI: 000000000000010e RDI: 0000000000000003 [ 323.657476][ T8441] RBP: 00007f5a98caf090 R08: 0000000000000004 R09: 0000000000000000 [ 323.665451][ T8441] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 323.673425][ T8441] R13: 00007f5a97fb6038 R14: 00007f5a97fb5fa0 R15: 00007ffc3a953bd8 [ 323.681419][ T8441] [ 323.710133][ T8428] device syzkaller0 entered promiscuous mode [ 323.718434][ T8439] netlink: 'syz.4.1233': attribute type 10 has an invalid length. [ 323.828923][ T8444] device team_slave_0 entered promiscuous mode [ 325.857053][ T8463] netlink: 'syz.0.1244': attribute type 10 has an invalid length. [ 325.891300][ T8470] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1243'. [ 326.364598][ T8476] netlink: 'syz.3.1247': attribute type 39 has an invalid length. [ 326.862047][ T8482] netlink: 'syz.4.1250': attribute type 10 has an invalid length. [ 327.149273][ T8505] netlink: 'syz.4.1258': attribute type 39 has an invalid length. [ 327.485341][ T8511] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1261'. [ 327.505796][ T8517] FAULT_INJECTION: forcing a failure. [ 327.505796][ T8517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.520806][ T8517] CPU: 1 PID: 8517 Comm: syz.1.1263 Not tainted 6.1.147-syzkaller #0 [ 327.529030][ T8517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.539552][ T8517] Call Trace: [ 327.542857][ T8517] [ 327.545810][ T8517] dump_stack_lvl+0x168/0x22e [ 327.550532][ T8517] ? show_regs_print_info+0x12/0x12 [ 327.555761][ T8517] ? load_image+0x3b0/0x3b0 [ 327.560407][ T8517] ? __lock_acquire+0x7c50/0x7c50 [ 327.565470][ T8517] ? verify_lock_unused+0x140/0x140 [ 327.570682][ T8517] ? perf_trace_lock+0xf3/0x370 [ 327.575541][ T8517] should_fail_ex+0x399/0x4d0 [ 327.580231][ T8517] _copy_from_user+0x2c/0x170 [ 327.584927][ T8517] ___sys_sendmsg+0x155/0x290 [ 327.589699][ T8517] ? __sys_sendmsg+0x270/0x270 [ 327.594487][ T8517] ? __lock_acquire+0x7c50/0x7c50 [ 327.599536][ T8517] ? __fdget+0x17c/0x200 [ 327.603891][ T8517] __se_sys_sendmsg+0x19e/0x270 [ 327.608756][ T8517] ? __x64_sys_sendmsg+0x80/0x80 [ 327.613726][ T8517] ? lockdep_hardirqs_on+0x94/0x140 [ 327.618956][ T8517] do_syscall_64+0x4c/0xa0 [ 327.623463][ T8517] ? clear_bhb_loop+0x60/0xb0 [ 327.628144][ T8517] ? clear_bhb_loop+0x60/0xb0 [ 327.632824][ T8517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.638730][ T8517] RIP: 0033:0x7f5a97d8ebe9 [ 327.643175][ T8517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.662880][ T8517] RSP: 002b:00007f5a98caf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.671312][ T8517] RAX: ffffffffffffffda RBX: 00007f5a97fb5fa0 RCX: 00007f5a97d8ebe9 [ 327.679293][ T8517] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 327.687278][ T8517] RBP: 00007f5a98caf090 R08: 0000000000000000 R09: 0000000000000000 [ 327.695307][ T8517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.703333][ T8517] R13: 00007f5a97fb6038 R14: 00007f5a97fb5fa0 R15: 00007ffc3a953bd8 [ 327.711432][ T8517] [ 328.013558][ T8524] netlink: 'syz.1.1265': attribute type 3 has an invalid length. [ 328.021359][ T8524] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1265'. [ 328.479059][ T8537] netlink: 'syz.3.1281': attribute type 10 has an invalid length. [ 328.576383][ T8537] device bond0 left promiscuous mode [ 328.581819][ T8537] device bond_slave_0 left promiscuous mode [ 328.588049][ T8537] device bond_slave_1 left promiscuous mode [ 328.595283][ T8537] device bridge0 left promiscuous mode [ 328.607512][ T8537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.636457][ T8537] team0: Port device bond0 added [ 330.524584][ T8584] netlink: 'syz.1.1289': attribute type 39 has an invalid length. [ 330.607580][ T8590] netlink: 'syz.4.1291': attribute type 27 has an invalid length. [ 330.654677][ T8590] netlink: 'syz.4.1291': attribute type 3 has an invalid length. [ 330.674521][ T8590] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1291'. [ 331.776812][ T8597] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1293'. [ 332.059198][ T8609] FAULT_INJECTION: forcing a failure. [ 332.059198][ T8609] name failslab, interval 1, probability 0, space 0, times 0 [ 332.119525][ T8609] CPU: 0 PID: 8609 Comm: syz.2.1298 Not tainted 6.1.147-syzkaller #0 [ 332.127663][ T8609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.137741][ T8609] Call Trace: [ 332.141036][ T8609] [ 332.144014][ T8609] dump_stack_lvl+0x168/0x22e [ 332.148710][ T8609] ? show_regs_print_info+0x12/0x12 [ 332.153915][ T8609] ? load_image+0x3b0/0x3b0 [ 332.158437][ T8609] ? __might_sleep+0xd0/0xd0 [ 332.163053][ T8609] ? __lock_acquire+0x7c50/0x7c50 [ 332.168209][ T8609] should_fail_ex+0x399/0x4d0 [ 332.172905][ T8609] should_failslab+0x5/0x20 [ 332.177589][ T8609] slab_pre_alloc_hook+0x59/0x310 [ 332.182620][ T8609] ? dev_ethtool+0x117/0x1140 [ 332.187299][ T8609] __kmem_cache_alloc_node+0x4f/0x260 [ 332.192767][ T8609] ? dev_ethtool+0x117/0x1140 [ 332.197794][ T8609] kmalloc_trace+0x26/0xe0 [ 332.202230][ T8609] dev_ethtool+0x117/0x1140 [ 332.206741][ T8609] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 332.213020][ T8609] ? __lock_acquire+0x7c50/0x7c50 [ 332.218060][ T8609] ? __kmem_cache_free+0xb6/0x1f0 [ 332.223130][ T8609] ? full_name_hash+0x8e/0xe0 [ 332.227910][ T8609] ? dev_load+0x1d/0x1e0 [ 332.232164][ T8609] ? dev_load+0x1d/0x1e0 [ 332.236418][ T8609] dev_ioctl+0x48e/0xea0 [ 332.240669][ T8609] sock_do_ioctl+0x222/0x2f0 [ 332.245272][ T8609] ? sock_show_fdinfo+0xb0/0xb0 [ 332.250149][ T8609] sock_ioctl+0x4ed/0x6e0 [ 332.254488][ T8609] ? sock_poll+0x3f0/0x3f0 [ 332.258920][ T8609] ? bpf_lsm_file_ioctl+0x5/0x10 [ 332.263866][ T8609] ? security_file_ioctl+0x7c/0xa0 [ 332.268988][ T8609] ? sock_poll+0x3f0/0x3f0 [ 332.273411][ T8609] __se_sys_ioctl+0xfa/0x170 [ 332.278013][ T8609] do_syscall_64+0x4c/0xa0 [ 332.282432][ T8609] ? clear_bhb_loop+0x60/0xb0 [ 332.287116][ T8609] ? clear_bhb_loop+0x60/0xb0 [ 332.291983][ T8609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.297894][ T8609] RIP: 0033:0x7fa50558ebe9 [ 332.302317][ T8609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.321955][ T8609] RSP: 002b:00007fa506321038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.330379][ T8609] RAX: ffffffffffffffda RBX: 00007fa5057b5fa0 RCX: 00007fa50558ebe9 [ 332.338357][ T8609] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 332.346333][ T8609] RBP: 00007fa506321090 R08: 0000000000000000 R09: 0000000000000000 [ 332.354487][ T8609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.362471][ T8609] R13: 00007fa5057b6038 R14: 00007fa5057b5fa0 R15: 00007fff1dfebdb8 [ 332.370544][ T8609] [ 332.415271][ T8612] netlink: 'syz.1.1299': attribute type 10 has an invalid length. [ 332.801968][ T8624] netlink: 'syz.1.1304': attribute type 10 has an invalid length. [ 333.114687][ T8632] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1307'. [ 333.646508][ T8644] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1312'. [ 333.781283][ T8643] netlink: 'syz.3.1315': attribute type 10 has an invalid length. [ 333.938833][ T8651] netlink: 63435 bytes leftover after parsing attributes in process `syz.4.1316'. [ 334.002490][ T4691] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 334.220679][ T8656] netlink: 'syz.4.1318': attribute type 10 has an invalid length. [ 335.076690][ T8680] netlink: 'syz.3.1328': attribute type 10 has an invalid length. [ 335.785984][ T8698] netlink: 'syz.3.1335': attribute type 10 has an invalid length. [ 336.091403][ T8701] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1337'. [ 336.516485][ T8712] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 336.776662][ T8714] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1341'. [ 337.040524][ T8724] netlink: 'syz.0.1344': attribute type 29 has an invalid length. [ 337.084641][ T8723] netlink: 'syz.0.1344': attribute type 29 has an invalid length. [ 337.143457][ T8724] netlink: 'syz.0.1344': attribute type 29 has an invalid length. [ 337.269463][ T8732] netlink: 'syz.1.1348': attribute type 10 has an invalid length. [ 337.396416][ T8736] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1349'. [ 337.442376][ T8736] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1349'. [ 338.265737][ T8749] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1350'. [ 338.874469][ T8771] netlink: 'syz.3.1361': attribute type 10 has an invalid length. [ 339.001279][ T8774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1362'. [ 339.039437][ T8774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1362'. [ 339.074462][ T8775] FAULT_INJECTION: forcing a failure. [ 339.074462][ T8775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.105996][ T8769] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1360'. [ 339.133519][ T8775] CPU: 1 PID: 8775 Comm: syz.0.1362 Not tainted 6.1.147-syzkaller #0 [ 339.141656][ T8775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.151751][ T8775] Call Trace: [ 339.155062][ T8775] [ 339.158035][ T8775] dump_stack_lvl+0x168/0x22e [ 339.162758][ T8775] ? show_regs_print_info+0x12/0x12 [ 339.168000][ T8775] ? load_image+0x3b0/0x3b0 [ 339.172545][ T8775] ? __lock_acquire+0x7c50/0x7c50 [ 339.177603][ T8775] ? snprintf+0xd7/0x120 [ 339.181883][ T8775] should_fail_ex+0x399/0x4d0 [ 339.186602][ T8775] _copy_to_user+0x2c/0x130 [ 339.191164][ T8775] simple_read_from_buffer+0xe3/0x150 [ 339.196578][ T8775] proc_fail_nth_read+0x19a/0x210 [ 339.201636][ T8775] ? proc_fault_inject_write+0x2f0/0x2f0 [ 339.207305][ T8775] ? fsnotify_perm+0x248/0x550 [ 339.212110][ T8775] ? proc_fault_inject_write+0x2f0/0x2f0 [ 339.217784][ T8775] vfs_read+0x2c0/0x920 [ 339.221982][ T8775] ? kernel_read+0x1e0/0x1e0 [ 339.226606][ T8775] ? __fget_files+0x28/0x4d0 [ 339.231233][ T8775] ? __fget_files+0x44a/0x4d0 [ 339.235960][ T8775] ? __fdget_pos+0x2ae/0x360 [ 339.240576][ T8775] ? ksys_read+0x71/0x240 [ 339.245020][ T8775] ksys_read+0x143/0x240 [ 339.249304][ T8775] ? vfs_write+0x960/0x960 [ 339.253758][ T8775] ? lockdep_hardirqs_on+0x94/0x140 [ 339.259025][ T8775] do_syscall_64+0x4c/0xa0 [ 339.263573][ T8775] ? clear_bhb_loop+0x60/0xb0 [ 339.268286][ T8775] ? clear_bhb_loop+0x60/0xb0 [ 339.272998][ T8775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.278923][ T8775] RIP: 0033:0x7f3777b8d5fc [ 339.283370][ T8775] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 339.303104][ T8775] RSP: 002b:00007f37789ad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 339.311723][ T8775] RAX: ffffffffffffffda RBX: 00007f3777db6090 RCX: 00007f3777b8d5fc [ 339.319733][ T8775] RDX: 000000000000000f RSI: 00007f37789ad0a0 RDI: 0000000000000005 [ 339.327736][ T8775] RBP: 00007f37789ad090 R08: 0000000000000000 R09: 0000000000000000 [ 339.335738][ T8775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.343744][ T8775] R13: 00007f3777db6128 R14: 00007f3777db6090 R15: 00007ffd643a9548 [ 339.351851][ T8775] [ 339.744679][ T8788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1366'. [ 339.833734][ T8788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1366'. [ 339.853656][ T8791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1366'. [ 340.563532][ T8805] FAULT_INJECTION: forcing a failure. [ 340.563532][ T8805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.618310][ T8805] CPU: 1 PID: 8805 Comm: syz.3.1374 Not tainted 6.1.147-syzkaller #0 [ 340.626449][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.636551][ T8805] Call Trace: [ 340.639869][ T8805] [ 340.642841][ T8805] dump_stack_lvl+0x168/0x22e [ 340.647570][ T8805] ? show_regs_print_info+0x12/0x12 [ 340.652884][ T8805] ? load_image+0x3b0/0x3b0 [ 340.657428][ T8805] ? __lock_acquire+0x7c50/0x7c50 [ 340.662674][ T8805] should_fail_ex+0x399/0x4d0 [ 340.667430][ T8805] _copy_from_user+0x2c/0x170 [ 340.672148][ T8805] bpf_prog_test_run_xdp+0xbbe/0xe50 [ 340.677495][ T8805] ? dev_put+0x80/0x80 [ 340.681619][ T8805] ? dev_put+0x80/0x80 [ 340.685731][ T8805] bpf_prog_test_run+0x31e/0x390 [ 340.690711][ T8805] __sys_bpf+0x593/0x6d0 [ 340.694995][ T8805] ? bpf_link_show_fdinfo+0x340/0x340 [ 340.700498][ T8805] ? lock_chain_count+0x20/0x20 [ 340.705379][ T8805] __x64_sys_bpf+0x78/0x90 [ 340.709819][ T8805] do_syscall_64+0x4c/0xa0 [ 340.714247][ T8805] ? clear_bhb_loop+0x60/0xb0 [ 340.718940][ T8805] ? clear_bhb_loop+0x60/0xb0 [ 340.723629][ T8805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.729576][ T8805] RIP: 0033:0x7f7d9658ebe9 [ 340.734012][ T8805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.753633][ T8805] RSP: 002b:00007f7d973d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 340.762069][ T8805] RAX: ffffffffffffffda RBX: 00007f7d967b5fa0 RCX: 00007f7d9658ebe9 [ 340.770063][ T8805] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 340.778137][ T8805] RBP: 00007f7d973d3090 R08: 0000000000000000 R09: 0000000000000000 [ 340.786208][ T8805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.794187][ T8805] R13: 00007f7d967b6038 R14: 00007f7d967b5fa0 R15: 00007ffc382c9e28 [ 340.802196][ T8805] [ 341.066374][ T8811] netlink: 'syz.2.1376': attribute type 10 has an invalid length. [ 341.493613][ T8820] FAULT_INJECTION: forcing a failure. [ 341.493613][ T8820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.572222][ T8820] CPU: 1 PID: 8820 Comm: syz.2.1378 Not tainted 6.1.147-syzkaller #0 [ 341.580376][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.590472][ T8820] Call Trace: [ 341.593783][ T8820] [ 341.596745][ T8820] dump_stack_lvl+0x168/0x22e [ 341.601459][ T8820] ? show_regs_print_info+0x12/0x12 [ 341.606685][ T8820] ? load_image+0x3b0/0x3b0 [ 341.611230][ T8820] ? __lock_acquire+0x7c50/0x7c50 [ 341.616303][ T8820] should_fail_ex+0x399/0x4d0 [ 341.621028][ T8820] _copy_from_user+0x2c/0x170 [ 341.625745][ T8820] __sys_bpf+0x265/0x6d0 [ 341.630027][ T8820] ? bpf_link_show_fdinfo+0x340/0x340 [ 341.635463][ T8820] ? lock_chain_count+0x20/0x20 [ 341.640366][ T8820] __x64_sys_bpf+0x78/0x90 [ 341.644825][ T8820] do_syscall_64+0x4c/0xa0 [ 341.649277][ T8820] ? clear_bhb_loop+0x60/0xb0 [ 341.653990][ T8820] ? clear_bhb_loop+0x60/0xb0 [ 341.658690][ T8820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.664608][ T8820] RIP: 0033:0x7fa50558ebe9 [ 341.669037][ T8820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.688667][ T8820] RSP: 002b:00007fa506321038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 341.697096][ T8820] RAX: ffffffffffffffda RBX: 00007fa5057b5fa0 RCX: 00007fa50558ebe9 [ 341.705082][ T8820] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 341.713242][ T8820] RBP: 00007fa506321090 R08: 0000000000000000 R09: 0000000000000000 [ 341.721220][ T8820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.729196][ T8820] R13: 00007fa5057b6038 R14: 00007fa5057b5fa0 R15: 00007fff1dfebdb8 [ 341.737224][ T8820] [ 343.322257][ T8842] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1384'. [ 343.556675][ T8848] netlink: 'syz.1.1388': attribute type 10 has an invalid length. [ 344.153563][ T8864] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1391'. [ 344.404588][ T8868] netlink: 'syz.0.1395': attribute type 10 has an invalid length. [ 345.215903][ T8891] netlink: 'syz.3.1403': attribute type 10 has an invalid length. [ 345.717509][ T8902] FAULT_INJECTION: forcing a failure. [ 345.717509][ T8902] name failslab, interval 1, probability 0, space 0, times 0 [ 345.861716][ T8902] CPU: 1 PID: 8902 Comm: syz.3.1408 Not tainted 6.1.147-syzkaller #0 [ 345.869877][ T8902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 345.880063][ T8902] Call Trace: [ 345.883381][ T8902] [ 345.886422][ T8902] dump_stack_lvl+0x168/0x22e [ 345.891165][ T8902] ? show_regs_print_info+0x12/0x12 [ 345.896425][ T8902] ? load_image+0x3b0/0x3b0 [ 345.900994][ T8902] ? __might_sleep+0xd0/0xd0 [ 345.905644][ T8902] ? __lock_acquire+0x7c50/0x7c50 [ 345.910726][ T8902] ? __might_sleep+0xd0/0xd0 [ 345.915387][ T8902] should_fail_ex+0x399/0x4d0 [ 345.920132][ T8902] should_failslab+0x5/0x20 [ 345.924681][ T8902] slab_pre_alloc_hook+0x59/0x310 [ 345.929769][ T8902] kmem_cache_alloc_lru+0x49/0x2e0 [ 345.934922][ T8902] ? sock_alloc_inode+0x24/0xc0 [ 345.939845][ T8902] sock_alloc_inode+0x24/0xc0 [ 345.945426][ T8902] ? sockfs_init_fs_context+0xa0/0xa0 [ 345.951132][ T8902] new_inode_pseudo+0x5f/0x1c0 [ 345.955964][ T8902] __sock_create+0x129/0x940 [ 345.960613][ T8902] ? __might_fault+0xa6/0x120 [ 345.965351][ T8902] ? __might_fault+0xc2/0x120 [ 345.970109][ T8902] __sys_socketpair+0x1bd/0x540 [ 345.975066][ T8902] __x64_sys_socketpair+0x97/0xb0 [ 345.980262][ T8902] do_syscall_64+0x4c/0xa0 [ 345.984741][ T8902] ? clear_bhb_loop+0x60/0xb0 [ 345.989480][ T8902] ? clear_bhb_loop+0x60/0xb0 [ 345.994230][ T8902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.000184][ T8902] RIP: 0033:0x7f7d9658ebe9 [ 346.004744][ T8902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.024391][ T8902] RSP: 002b:00007f7d973d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 346.032834][ T8902] RAX: ffffffffffffffda RBX: 00007f7d967b5fa0 RCX: 00007f7d9658ebe9 [ 346.040822][ T8902] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 0000000000000010 [ 346.048809][ T8902] RBP: 00007f7d973d3090 R08: 0000000000000000 R09: 0000000000000000 [ 346.056797][ T8902] R10: 0000200000001640 R11: 0000000000000246 R12: 0000000000000001 [ 346.064790][ T8902] R13: 00007f7d967b6038 R14: 00007f7d967b5fa0 R15: 00007ffc382c9e28 [ 346.072824][ T8902] [ 346.194988][ T8902] net_ratelimit: 26 callbacks suppressed [ 346.195011][ T8902] socket: no more sockets [ 346.669896][ T8913] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1410'. [ 346.880207][ T8916] netlink: 'syz.4.1412': attribute type 10 has an invalid length. [ 347.067870][ T8923] netlink: 'syz.0.1417': attribute type 10 has an invalid length. [ 347.324567][ T8934] netlink: 'syz.1.1419': attribute type 10 has an invalid length. [ 347.972019][ T8953] netlink: 'syz.1.1426': attribute type 10 has an invalid length. [ 348.062823][ T8962] FAULT_INJECTION: forcing a failure. [ 348.062823][ T8962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.148888][ T8962] CPU: 0 PID: 8962 Comm: syz.2.1430 Not tainted 6.1.147-syzkaller #0 [ 348.157118][ T8962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 348.167208][ T8962] Call Trace: [ 348.170511][ T8962] [ 348.173462][ T8962] dump_stack_lvl+0x168/0x22e [ 348.178184][ T8962] ? show_regs_print_info+0x12/0x12 [ 348.183415][ T8962] ? load_image+0x3b0/0x3b0 [ 348.187981][ T8962] ? __lock_acquire+0x7c50/0x7c50 [ 348.193048][ T8962] should_fail_ex+0x399/0x4d0 [ 348.197766][ T8962] _copy_from_user+0x2c/0x170 [ 348.202491][ T8962] tipc_setsockopt+0x261/0x900 [ 348.207292][ T8962] ? tipc_shutdown+0x560/0x560 [ 348.212079][ T8962] ? aa_sock_opt_perm+0x74/0x100 [ 348.217041][ T8962] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 348.222597][ T8962] ? security_socket_setsockopt+0x7a/0xa0 [ 348.228323][ T8962] ? tipc_shutdown+0x560/0x560 [ 348.233101][ T8962] __sys_setsockopt+0x2bf/0x3d0 [ 348.237971][ T8962] __x64_sys_setsockopt+0xb1/0xc0 [ 348.243001][ T8962] do_syscall_64+0x4c/0xa0 [ 348.247422][ T8962] ? clear_bhb_loop+0x60/0xb0 [ 348.252109][ T8962] ? clear_bhb_loop+0x60/0xb0 [ 348.256800][ T8962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.262730][ T8962] RIP: 0033:0x7fa50558ebe9 [ 348.267240][ T8962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.286876][ T8962] RSP: 002b:00007fa506321038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 348.295315][ T8962] RAX: ffffffffffffffda RBX: 00007fa5057b5fa0 RCX: 00007fa50558ebe9 [ 348.303301][ T8962] RDX: 000000000000008a RSI: 000000000000010f RDI: 0000000000000006 [ 348.311364][ T8962] RBP: 00007fa506321090 R08: 0000000000000004 R09: 0000000000000000 [ 348.319340][ T8962] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 348.327315][ T8962] R13: 00007fa5057b6038 R14: 00007fa5057b5fa0 R15: 00007fff1dfebdb8 [ 348.335566][ T8962] [ 348.551935][ T8966] netlink: 'syz.0.1434': attribute type 10 has an invalid length. [ 348.957234][ T8977] netlink: 'syz.4.1439': attribute type 10 has an invalid length. [ 349.374052][ T8988] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1442'. [ 349.408701][ T8987] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1443'. [ 349.701310][ T9004] netlink: 'syz.4.1448': attribute type 10 has an invalid length. [ 350.922347][ T9034] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1459'. [ 350.941570][ T9035] netlink: 'syz.4.1461': attribute type 10 has an invalid length. [ 350.989862][ T9038] netlink: 'syz.2.1460': attribute type 10 has an invalid length. [ 351.016922][ T9039] netlink: 'syz.3.1462': attribute type 10 has an invalid length. [ 352.042206][ T9071] netlink: 'syz.2.1474': attribute type 10 has an invalid length. [ 352.071152][ T9068] netlink: 'syz.4.1473': attribute type 10 has an invalid length. [ 352.211696][ T9075] netlink: 'syz.0.1487': attribute type 10 has an invalid length. [ 352.934512][ T9083] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1475'. [ 352.949938][ T9090] netlink: 'syz.0.1478': attribute type 10 has an invalid length. [ 353.713905][ T9111] netlink: 'syz.4.1490': attribute type 10 has an invalid length. [ 353.723408][ T9114] netlink: 'syz.1.1491': attribute type 10 has an invalid length. [ 354.691340][ T9137] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1498'. [ 355.010238][ T9149] validate_nla: 1 callbacks suppressed [ 355.010255][ T9149] netlink: 'syz.1.1505': attribute type 10 has an invalid length. [ 355.237726][ T9152] netlink: 'syz.3.1506': attribute type 10 has an invalid length. [ 355.602413][ T9166] netlink: 'syz.2.1510': attribute type 10 has an invalid length. [ 355.943031][ T9175] FAULT_INJECTION: forcing a failure. [ 355.943031][ T9175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.009156][ T9175] CPU: 1 PID: 9175 Comm: syz.1.1515 Not tainted 6.1.147-syzkaller #0 [ 356.017288][ T9175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.027350][ T9175] Call Trace: [ 356.030630][ T9175] [ 356.033569][ T9175] dump_stack_lvl+0x168/0x22e [ 356.038263][ T9175] ? show_regs_print_info+0x12/0x12 [ 356.043465][ T9175] ? load_image+0x3b0/0x3b0 [ 356.047983][ T9175] ? __lock_acquire+0x7c50/0x7c50 [ 356.053027][ T9175] ? __rcu_read_unlock+0x78/0xd0 [ 356.058065][ T9175] should_fail_ex+0x399/0x4d0 [ 356.062753][ T9175] _copy_to_user+0x2c/0x130 [ 356.067261][ T9175] bpf_test_finish+0x4c8/0x600 [ 356.072047][ T9175] ? convert___skb_to_skb+0x580/0x580 [ 356.077432][ T9175] ? convert_skb_to___skb+0x420/0x420 [ 356.082815][ T9175] ? bpf_test_init+0x134/0x150 [ 356.087588][ T9175] bpf_prog_test_run_xdp+0x782/0xe50 [ 356.092892][ T9175] ? dev_put+0x80/0x80 [ 356.096978][ T9175] ? dev_put+0x80/0x80 [ 356.101080][ T9175] bpf_prog_test_run+0x31e/0x390 [ 356.106055][ T9175] __sys_bpf+0x593/0x6d0 [ 356.110320][ T9175] ? bpf_link_show_fdinfo+0x340/0x340 [ 356.115724][ T9175] ? lock_chain_count+0x20/0x20 [ 356.120679][ T9175] __x64_sys_bpf+0x78/0x90 [ 356.125105][ T9175] do_syscall_64+0x4c/0xa0 [ 356.129527][ T9175] ? clear_bhb_loop+0x60/0xb0 [ 356.134211][ T9175] ? clear_bhb_loop+0x60/0xb0 [ 356.138898][ T9175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.144803][ T9175] RIP: 0033:0x7f5a97d8ebe9 [ 356.149222][ T9175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.168856][ T9175] RSP: 002b:00007f5a98caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.177287][ T9175] RAX: ffffffffffffffda RBX: 00007f5a97fb5fa0 RCX: 00007f5a97d8ebe9 [ 356.185270][ T9175] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 356.193251][ T9175] RBP: 00007f5a98caf090 R08: 0000000000000000 R09: 0000000000000000 [ 356.201232][ T9175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.209215][ T9175] R13: 00007f5a97fb6038 R14: 00007f5a97fb5fa0 R15: 00007ffc3a953bd8 [ 356.217211][ T9175] [ 356.475697][ T9188] netlink: 'syz.0.1519': attribute type 10 has an invalid length. [ 356.831397][ T9198] netlink: 'syz.4.1524': attribute type 10 has an invalid length. [ 357.131865][ T9202] netlink: 'syz.3.1527': attribute type 10 has an invalid length. [ 357.469349][ T9210] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1529'. [ 357.766365][ T9222] FAULT_INJECTION: forcing a failure. [ 357.766365][ T9222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.842459][ T9222] CPU: 0 PID: 9222 Comm: syz.4.1534 Not tainted 6.1.147-syzkaller #0 [ 357.850602][ T9222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 357.860683][ T9222] Call Trace: [ 357.863979][ T9222] [ 357.866918][ T9222] dump_stack_lvl+0x168/0x22e [ 357.871613][ T9222] ? show_regs_print_info+0x12/0x12 [ 357.876836][ T9222] ? load_image+0x3b0/0x3b0 [ 357.881356][ T9222] ? __lock_acquire+0x7c50/0x7c50 [ 357.886390][ T9222] ? snprintf+0xd7/0x120 [ 357.890644][ T9222] should_fail_ex+0x399/0x4d0 [ 357.895353][ T9222] _copy_to_user+0x2c/0x130 [ 357.899878][ T9222] simple_read_from_buffer+0xe3/0x150 [ 357.905279][ T9222] proc_fail_nth_read+0x19a/0x210 [ 357.910416][ T9222] ? proc_fault_inject_write+0x2f0/0x2f0 [ 357.916063][ T9222] ? fsnotify_perm+0x248/0x550 [ 357.920841][ T9222] ? proc_fault_inject_write+0x2f0/0x2f0 [ 357.926481][ T9222] vfs_read+0x2c0/0x920 [ 357.930649][ T9222] ? kernel_read+0x1e0/0x1e0 [ 357.935252][ T9222] ? __fget_files+0x28/0x4d0 [ 357.939862][ T9222] ? __fget_files+0x44a/0x4d0 [ 357.944562][ T9222] ? __fdget_pos+0x2ae/0x360 [ 357.949155][ T9222] ? ksys_read+0x71/0x240 [ 357.953490][ T9222] ksys_read+0x143/0x240 [ 357.957745][ T9222] ? vfs_write+0x960/0x960 [ 357.962170][ T9222] ? lockdep_hardirqs_on+0x94/0x140 [ 357.967384][ T9222] do_syscall_64+0x4c/0xa0 [ 357.971806][ T9222] ? clear_bhb_loop+0x60/0xb0 [ 357.976489][ T9222] ? clear_bhb_loop+0x60/0xb0 [ 357.981172][ T9222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.987073][ T9222] RIP: 0033:0x7f79fe58d5fc [ 357.991490][ T9222] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 358.011104][ T9222] RSP: 002b:00007f79ff3c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 358.019527][ T9222] RAX: ffffffffffffffda RBX: 00007f79fe7b5fa0 RCX: 00007f79fe58d5fc [ 358.027506][ T9222] RDX: 000000000000000f RSI: 00007f79ff3c70a0 RDI: 0000000000000008 [ 358.035478][ T9222] RBP: 00007f79ff3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 358.043454][ T9222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.051429][ T9222] R13: 00007f79fe7b6038 R14: 00007f79fe7b5fa0 R15: 00007ffe63bdc448 [ 358.059418][ T9222] [ 358.371025][ T9233] netlink: 'syz.0.1548': attribute type 10 has an invalid length. [ 358.555727][ T9235] netlink: 'syz.2.1539': attribute type 10 has an invalid length. [ 359.424090][ T9257] netlink: 'syz.1.1544': attribute type 10 has an invalid length. [ 360.093323][ T9281] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1555'. [ 360.326471][ T9283] netlink: 'syz.3.1556': attribute type 10 has an invalid length. [ 360.768142][ T9298] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1561'. [ 360.909537][ T9302] FAULT_INJECTION: forcing a failure. [ 360.909537][ T9302] name failslab, interval 1, probability 0, space 0, times 0 [ 360.960079][ T9302] CPU: 1 PID: 9302 Comm: syz.1.1564 Not tainted 6.1.147-syzkaller #0 [ 360.968222][ T9302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.978313][ T9302] Call Trace: [ 360.981618][ T9302] [ 360.984578][ T9302] dump_stack_lvl+0x168/0x22e [ 360.989298][ T9302] ? show_regs_print_info+0x12/0x12 [ 360.994537][ T9302] ? load_image+0x3b0/0x3b0 [ 360.999079][ T9302] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 361.005453][ T9302] should_fail_ex+0x399/0x4d0 [ 361.010178][ T9302] should_failslab+0x5/0x20 [ 361.014729][ T9302] slab_pre_alloc_hook+0x59/0x310 [ 361.019787][ T9302] ? current_time+0x197/0x2b0 [ 361.024512][ T9302] ? proc_thread_self_get_link+0xf8/0x190 [ 361.030268][ T9302] __kmem_cache_alloc_node+0x4f/0x260 [ 361.035686][ T9302] ? proc_thread_self_get_link+0xf8/0x190 [ 361.041439][ T9302] kmalloc_trace+0x26/0xe0 [ 361.045894][ T9302] proc_thread_self_get_link+0xf8/0x190 [ 361.051473][ T9302] ? proc_setup_thread_self+0x2f0/0x2f0 [ 361.057042][ T9302] pick_link+0x6f3/0xe20 [ 361.061306][ T9302] step_into+0xc39/0xf10 [ 361.067242][ T9302] ? __d_lookup_rcu+0x43a/0x4c0 [ 361.072385][ T9302] ? set_root+0x3a0/0x3a0 [ 361.076736][ T9302] ? lookup_fast+0x15b/0x4d0 [ 361.081951][ T9302] ? security_inode_permission+0xac/0xf0 [ 361.087608][ T9302] link_path_walk+0x6be/0xe50 [ 361.092307][ T9302] ? handle_lookup_down+0x130/0x130 [ 361.097508][ T9302] ? percpu_counter_add_batch+0x13b/0x160 [ 361.103285][ T9302] path_openat+0x276/0x2e70 [ 361.109151][ T9302] ? do_sys_openat2+0xcf/0x490 [ 361.113935][ T9302] ? __x64_sys_openat+0x135/0x160 [ 361.118965][ T9302] ? do_syscall_64+0x4c/0xa0 [ 361.123577][ T9302] ? do_filp_open+0x3c0/0x3c0 [ 361.128279][ T9302] do_filp_open+0x1c1/0x3c0 [ 361.132800][ T9302] ? vfs_tmpfile+0x480/0x480 [ 361.137420][ T9302] ? _raw_spin_unlock+0x24/0x40 [ 361.142282][ T9302] ? alloc_fd+0x58f/0x630 [ 361.146635][ T9302] do_sys_openat2+0x142/0x490 [ 361.151327][ T9302] ? do_sys_open+0xe0/0xe0 [ 361.155760][ T9302] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 361.161752][ T9302] ? lock_chain_count+0x20/0x20 [ 361.166621][ T9302] __x64_sys_openat+0x135/0x160 [ 361.171482][ T9302] do_syscall_64+0x4c/0xa0 [ 361.175902][ T9302] ? clear_bhb_loop+0x60/0xb0 [ 361.180580][ T9302] ? clear_bhb_loop+0x60/0xb0 [ 361.185259][ T9302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.191164][ T9302] RIP: 0033:0x7f5a97d8d550 [ 361.195583][ T9302] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 361.215455][ T9302] RSP: 002b:00007f5a98caef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 361.223877][ T9302] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5a97d8d550 [ 361.231854][ T9302] RDX: 0000000000000002 RSI: 00007f5a98caefa0 RDI: 00000000ffffff9c [ 361.239842][ T9302] RBP: 00007f5a98caefa0 R08: 0000000000000000 R09: 0000000000000000 [ 361.247901][ T9302] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 361.255874][ T9302] R13: 00007f5a97fb6038 R14: 00007f5a97fb5fa0 R15: 00007ffc3a953bd8 [ 361.263867][ T9302] [ 362.049017][ T9321] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1569'. [ 362.149459][ T9323] netlink: 'syz.1.1572': attribute type 10 has an invalid length. [ 363.214859][ T9341] netlink: 'syz.0.1580': attribute type 2 has an invalid length. [ 363.251018][ T9341] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1580'. [ 363.706146][ T9362] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1586'. [ 363.929319][ T9372] netlink: 'syz.1.1589': attribute type 10 has an invalid length. [ 364.188819][ T9373] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1591'. [ 365.450879][ T9408] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1602'. [ 365.994376][ T40] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 366.061062][ T9407] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1604'. [ 366.125551][ T9416] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1608'. [ 366.158528][ T9415] netlink: 'syz.2.1607': attribute type 10 has an invalid length. [ 366.193198][ T9416] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1608'. [ 366.223508][ T9416] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1608'. [ 366.241212][ T9416] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1608'. [ 366.854954][ T9432] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1615'. [ 367.107942][ T9440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1618'. [ 367.129850][ T9440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1618'. [ 367.174118][ T9440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1618'. [ 368.062650][ T9455] netlink: 'syz.2.1624': attribute type 10 has an invalid length. [ 368.266647][ T9463] netlink: 'syz.0.1628': attribute type 28 has an invalid length. [ 368.290301][ T9467] FAULT_INJECTION: forcing a failure. [ 368.290301][ T9467] name failslab, interval 1, probability 0, space 0, times 0 [ 368.342253][ T9467] CPU: 1 PID: 9467 Comm: syz.4.1629 Not tainted 6.1.147-syzkaller #0 [ 368.350392][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.358537][ T9471] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 368.360453][ T9467] Call Trace: [ 368.360464][ T9467] [ 368.375750][ T9467] dump_stack_lvl+0x168/0x22e [ 368.380463][ T9467] ? show_regs_print_info+0x12/0x12 [ 368.385689][ T9467] ? load_image+0x3b0/0x3b0 [ 368.390234][ T9467] ? __might_sleep+0xd0/0xd0 [ 368.395121][ T9467] ? __lock_acquire+0x7c50/0x7c50 [ 368.400186][ T9467] should_fail_ex+0x399/0x4d0 [ 368.404905][ T9467] should_failslab+0x5/0x20 [ 368.409461][ T9467] slab_pre_alloc_hook+0x59/0x310 [ 368.414524][ T9467] ? kvmalloc_node+0x6c/0x180 [ 368.419237][ T9467] __kmem_cache_alloc_node+0x4f/0x260 [ 368.424646][ T9467] ? kvmalloc_node+0x6c/0x180 [ 368.429359][ T9467] __kmalloc_node+0xa0/0x240 [ 368.433991][ T9467] kvmalloc_node+0x6c/0x180 [ 368.438526][ T9467] bpf_test_run_xdp_live+0x1a9/0x1970 [ 368.443947][ T9467] ? verify_lock_unused+0x140/0x140 [ 368.449183][ T9467] ? kasan_set_track+0x60/0x70 [ 368.453985][ T9467] ? kasan_set_track+0x4b/0x70 [ 368.458784][ T9467] ? __kasan_kmalloc+0x8e/0xa0 [ 368.463581][ T9467] ? __kmalloc+0xb0/0x240 [ 368.467955][ T9467] ? bpf_test_init+0xc0/0x150 [ 368.472661][ T9467] ? bpf_prog_test_run_xdp+0x359/0xe50 [ 368.478159][ T9467] ? __sys_bpf+0x593/0x6d0 [ 368.482604][ T9467] ? __x64_sys_bpf+0x78/0x90 [ 368.487220][ T9467] ? do_syscall_64+0x4c/0xa0 [ 368.491853][ T9467] ? xdp_convert_md_to_buff+0x330/0x330 [ 368.497474][ T9467] ? __lock_acquire+0x7c50/0x7c50 [ 368.500507][ T9471] netlink: 'syz.0.1628': attribute type 10 has an invalid length. [ 368.502521][ T9467] ? __virt_addr_valid+0x188/0x540 [ 368.502559][ T9467] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 368.502595][ T9467] ? bpf_test_init+0x134/0x150 [ 368.502618][ T9467] ? xdp_convert_md_to_buff+0x5b/0x330 [ 368.502648][ T9467] bpf_prog_test_run_xdp+0x6f1/0xe50 [ 368.502692][ T9467] ? dev_put+0x80/0x80 [ 368.502732][ T9467] ? dev_put+0x80/0x80 [ 368.545569][ T9467] bpf_prog_test_run+0x31e/0x390 [ 368.549886][ T9471] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 368.550531][ T9467] __sys_bpf+0x593/0x6d0 [ 368.550565][ T9467] ? bpf_link_show_fdinfo+0x340/0x340 [ 368.568666][ T9467] ? lock_chain_count+0x20/0x20 [ 368.573569][ T9467] __x64_sys_bpf+0x78/0x90 [ 368.578022][ T9467] do_syscall_64+0x4c/0xa0 [ 368.582463][ T9467] ? clear_bhb_loop+0x60/0xb0 [ 368.587166][ T9467] ? clear_bhb_loop+0x60/0xb0 [ 368.591866][ T9467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.597794][ T9467] RIP: 0033:0x7f79fe58ebe9 [ 368.602237][ T9467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.621874][ T9467] RSP: 002b:00007f79ff3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 368.630333][ T9467] RAX: ffffffffffffffda RBX: 00007f79fe7b5fa0 RCX: 00007f79fe58ebe9 [ 368.638335][ T9467] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 368.646338][ T9467] RBP: 00007f79ff3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 368.654526][ T9467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.662543][ T9467] R13: 00007f79fe7b6038 R14: 00007f79fe7b5fa0 R15: 00007ffe63bdc448 [ 368.670569][ T9467] [ 368.674829][ T9463] netlink: 'syz.0.1628': attribute type 29 has an invalid length. [ 368.696758][ T9477] netlink: 'syz.2.1632': attribute type 10 has an invalid length. [ 368.830184][ T9480] netlink: 'syz.3.1634': attribute type 25 has an invalid length. [ 369.075480][ T9489] FAULT_INJECTION: forcing a failure. [ 369.075480][ T9489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.088883][ T9489] CPU: 1 PID: 9489 Comm: syz.4.1639 Not tainted 6.1.147-syzkaller #0 [ 369.096999][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.107090][ T9489] Call Trace: [ 369.110402][ T9489] [ 369.113361][ T9489] dump_stack_lvl+0x168/0x22e [ 369.118073][ T9489] ? show_regs_print_info+0x12/0x12 [ 369.123308][ T9489] ? load_image+0x3b0/0x3b0 [ 369.127872][ T9489] ? __lock_acquire+0x7c50/0x7c50 [ 369.132935][ T9489] ? __virt_addr_valid+0x188/0x540 [ 369.138082][ T9489] should_fail_ex+0x399/0x4d0 [ 369.142803][ T9489] _copy_from_user+0x2c/0x170 [ 369.147516][ T9489] btf_new_fd+0x324/0x780 [ 369.151882][ T9489] __sys_bpf+0x57a/0x6d0 [ 369.156172][ T9489] ? bpf_link_show_fdinfo+0x340/0x340 [ 369.161790][ T9489] ? lock_chain_count+0x20/0x20 [ 369.166688][ T9489] __x64_sys_bpf+0x78/0x90 [ 369.171140][ T9489] do_syscall_64+0x4c/0xa0 [ 369.175587][ T9489] ? clear_bhb_loop+0x60/0xb0 [ 369.180291][ T9489] ? clear_bhb_loop+0x60/0xb0 [ 369.184986][ T9489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.190911][ T9489] RIP: 0033:0x7f79fe58ebe9 [ 369.195333][ T9489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.215026][ T9489] RSP: 002b:00007f79ff3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.223460][ T9489] RAX: ffffffffffffffda RBX: 00007f79fe7b5fa0 RCX: 00007f79fe58ebe9 [ 369.231534][ T9489] RDX: 0000000000000020 RSI: 00002000000007c0 RDI: 0000000000000012 [ 369.239494][ T9489] RBP: 00007f79ff3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 369.247450][ T9489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.255423][ T9489] R13: 00007f79fe7b6038 R14: 00007f79fe7b5fa0 R15: 00007ffe63bdc448 [ 369.263411][ T9489] [ 371.095500][ T9500] netlink: 'syz.4.1642': attribute type 10 has an invalid length. [ 371.136988][ T9509] netlink: 'syz.2.1645': attribute type 10 has an invalid length. [ 371.311760][ T9519] __nla_validate_parse: 4 callbacks suppressed [ 371.311780][ T9519] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1647'. [ 371.432781][ T9519] netlink: 'syz.3.1647': attribute type 28 has an invalid length. [ 371.440717][ T9519] netlink: 'syz.3.1647': attribute type 29 has an invalid length. [ 371.479587][ T9522] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 371.487545][ T9519] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1647'. [ 371.547940][ T9519] netlink: 'syz.3.1647': attribute type 10 has an invalid length. [ 371.604343][ T9519] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 371.628502][ T9526] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1649'. [ 372.927133][ T9545] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1654'. [ 373.050783][ T9549] netlink: 'syz.2.1659': attribute type 10 has an invalid length. [ 373.093632][ T9551] netlink: 'syz.0.1660': attribute type 10 has an invalid length. [ 373.687302][ T9561] FAULT_INJECTION: forcing a failure. [ 373.687302][ T9561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.739807][ T9561] CPU: 1 PID: 9561 Comm: syz.0.1664 Not tainted 6.1.147-syzkaller #0 [ 373.747940][ T9561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 373.758039][ T9561] Call Trace: [ 373.761343][ T9561] [ 373.764302][ T9561] dump_stack_lvl+0x168/0x22e [ 373.769019][ T9561] ? show_regs_print_info+0x12/0x12 [ 373.774255][ T9561] ? load_image+0x3b0/0x3b0 [ 373.778795][ T9561] ? __lock_acquire+0x7c50/0x7c50 [ 373.783865][ T9561] should_fail_ex+0x399/0x4d0 [ 373.788564][ T9561] _copy_from_user+0x2c/0x170 [ 373.793245][ T9561] bpf_obj_get_info_by_fd+0x3f5/0x2bd0 [ 373.798727][ T9561] ? bpf_map_get_fd_by_id+0x310/0x310 [ 373.804082][ T9561] ? perf_trace_lock+0x2ec/0x370 [ 373.809002][ T9561] ? trace_event_raw_event_lock+0x230/0x230 [ 373.814887][ T9561] ? __might_fault+0xa6/0x120 [ 373.819564][ T9561] ? __might_fault+0xc2/0x120 [ 373.824237][ T9561] ? __might_fault+0xa6/0x120 [ 373.828914][ T9561] ? bpf_lsm_bpf+0x5/0x10 [ 373.833262][ T9561] ? security_bpf+0x7a/0xa0 [ 373.837772][ T9561] __sys_bpf+0x46d/0x6d0 [ 373.842049][ T9561] ? bpf_link_show_fdinfo+0x340/0x340 [ 373.847467][ T9561] ? lock_chain_count+0x20/0x20 [ 373.852360][ T9561] __x64_sys_bpf+0x78/0x90 [ 373.856818][ T9561] do_syscall_64+0x4c/0xa0 [ 373.861261][ T9561] ? clear_bhb_loop+0x60/0xb0 [ 373.865951][ T9561] ? clear_bhb_loop+0x60/0xb0 [ 373.870608][ T9561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.876660][ T9561] RIP: 0033:0x7f3777b8ebe9 [ 373.881060][ T9561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.900653][ T9561] RSP: 002b:00007f37789ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 373.909055][ T9561] RAX: ffffffffffffffda RBX: 00007f3777db5fa0 RCX: 00007f3777b8ebe9 [ 373.917015][ T9561] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 000000000000000f [ 373.924976][ T9561] RBP: 00007f37789ce090 R08: 0000000000000000 R09: 0000000000000000 [ 373.932947][ T9561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.940912][ T9561] R13: 00007f3777db6038 R14: 00007f3777db5fa0 R15: 00007ffd643a9548 [ 373.948875][ T9561] [ 374.196700][ T9577] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1668'. [ 374.234956][ T9577] netlink: 'syz.1.1668': attribute type 28 has an invalid length. [ 374.277978][ T9577] netlink: 'syz.1.1668': attribute type 29 has an invalid length. [ 374.299937][ T9577] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1668'. [ 374.310520][ T9580] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 374.347859][ T9580] netlink: 'syz.1.1668': attribute type 10 has an invalid length. [ 374.439343][ T9580] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 375.068448][ T9593] netlink: 'syz.1.1675': attribute type 10 has an invalid length. [ 375.432956][ T11] wlan1: Trigger new scan to find an IBSS to join [ 375.702380][ T9597] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1674'. [ 376.481666][ T11] wlan1: Trigger new scan to find an IBSS to join [ 376.823292][ T9615] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1679'. [ 377.056118][ T9626] FAULT_INJECTION: forcing a failure. [ 377.056118][ T9626] name failslab, interval 1, probability 0, space 0, times 0 [ 377.138654][ T9626] CPU: 1 PID: 9626 Comm: syz.2.1684 Not tainted 6.1.147-syzkaller #0 [ 377.146793][ T9626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 377.156882][ T9626] Call Trace: [ 377.160196][ T9626] [ 377.163155][ T9626] dump_stack_lvl+0x168/0x22e [ 377.167865][ T9626] ? show_regs_print_info+0x12/0x12 [ 377.173103][ T9626] ? load_image+0x3b0/0x3b0 [ 377.177648][ T9626] ? __might_sleep+0xd0/0xd0 [ 377.182273][ T9626] ? __lock_acquire+0x7c50/0x7c50 [ 377.187337][ T9626] should_fail_ex+0x399/0x4d0 [ 377.192061][ T9626] should_failslab+0x5/0x20 [ 377.196592][ T9626] slab_pre_alloc_hook+0x59/0x310 [ 377.201629][ T9626] ? tomoyo_encode+0x27e/0x540 [ 377.206402][ T9626] __kmem_cache_alloc_node+0x4f/0x260 [ 377.211780][ T9626] ? tomoyo_encode+0x27e/0x540 [ 377.216578][ T9626] __kmalloc+0xa0/0x240 [ 377.220766][ T9626] tomoyo_encode+0x27e/0x540 [ 377.225382][ T9626] tomoyo_realpath_from_path+0x58e/0x5d0 [ 377.231053][ T9626] tomoyo_path_number_perm+0x1e3/0x600 [ 377.236528][ T9626] ? tomoyo_path_number_perm+0x1b6/0x600 [ 377.242175][ T9626] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 377.247662][ T9626] ? ksys_write+0x1bd/0x240 [ 377.252176][ T9626] ? common_file_perm+0x171/0x1c0 [ 377.257242][ T9626] ? __fget_files+0x28/0x4d0 [ 377.261849][ T9626] security_file_ioctl+0x6c/0xa0 [ 377.266794][ T9626] __se_sys_ioctl+0x48/0x170 [ 377.271391][ T9626] do_syscall_64+0x4c/0xa0 [ 377.275809][ T9626] ? clear_bhb_loop+0x60/0xb0 [ 377.280488][ T9626] ? clear_bhb_loop+0x60/0xb0 [ 377.285198][ T9626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.291129][ T9626] RIP: 0033:0x7fa50558ebe9 [ 377.295571][ T9626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.315187][ T9626] RSP: 002b:00007fa506321038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.323610][ T9626] RAX: ffffffffffffffda RBX: 00007fa5057b5fa0 RCX: 00007fa50558ebe9 [ 377.332022][ T9626] RDX: 0000000000000000 RSI: 000000000000891b RDI: 0000000000000003 [ 377.340000][ T9626] RBP: 00007fa506321090 R08: 0000000000000000 R09: 0000000000000000 [ 377.347975][ T9626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.355957][ T9626] R13: 00007fa5057b6038 R14: 00007fa5057b5fa0 R15: 00007fff1dfebdb8 [ 377.363943][ T9626] [ 377.389446][ T9626] ERROR: Out of memory at tomoyo_realpath_from_path. [ 377.778190][ T9640] netlink: 'syz.3.1690': attribute type 10 has an invalid length. [ 378.164645][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.171003][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.180128][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1696'. [ 378.472398][ T40] wlan1: Trigger new scan to find an IBSS to join [ 378.488090][ T9662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1696'. [ 378.558501][ T9662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1696'. [ 378.709648][ T9653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1696'. [ 378.722601][ T9669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1696'. [ 379.159287][ T9681] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1703'. [ 379.466022][ T4671] wlan1: Creating new IBSS network, BSSID 0a:d8:af:89:72:5f [ 380.223819][ T9694] netlink: 'syz.4.1708': attribute type 10 has an invalid length. [ 380.479108][ T9705] netlink: 'syz.1.1713': attribute type 10 has an invalid length. [ 381.432366][ T11] wlan1: Trigger new scan to find an IBSS to join [ 381.872739][ T9741] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1728'. [ 381.895552][ T9739] netlink: 'syz.2.1727': attribute type 10 has an invalid length. [ 381.918985][ T9737] netlink: 'syz.0.1726': attribute type 10 has an invalid length. [ 382.448124][ T11] wlan1: Creating new IBSS network, BSSID 3e:ba:2f:25:08:68 [ 384.209158][ T9776] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1737'. [ 384.378752][ T9780] netlink: 'syz.3.1739': attribute type 10 has an invalid length. [ 384.461099][ T9783] netlink: 'syz.2.1740': attribute type 10 has an invalid length. [ 384.647797][ T9785] netlink: 'syz.1.1751': attribute type 10 has an invalid length. [ 386.610533][ T9830] netlink: 'syz.1.1754': attribute type 10 has an invalid length. [ 386.625370][ T9825] netlink: 'syz.4.1755': attribute type 10 has an invalid length. [ 386.728298][ T9829] netlink: 'syz.3.1756': attribute type 10 has an invalid length. [ 388.682804][ T9862] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1767'. [ 388.708091][ T9858] netlink: 'syz.0.1769': attribute type 10 has an invalid length. [ 388.765472][ T9870] netlink: 'syz.4.1771': attribute type 10 has an invalid length. [ 388.793237][ T9872] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1768'. [ 389.973404][ T9906] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1787'. [ 390.162255][ T9909] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1786'. [ 390.224080][ T9908] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1788'. [ 390.690295][ T9921] netlink: 'syz.3.1794': attribute type 29 has an invalid length. [ 390.718860][ T9921] netlink: 'syz.3.1794': attribute type 29 has an invalid length. [ 390.773191][ T9926] FAULT_INJECTION: forcing a failure. [ 390.773191][ T9926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.805212][ T9926] CPU: 1 PID: 9926 Comm: syz.3.1794 Not tainted 6.1.147-syzkaller #0 [ 390.813341][ T9926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 390.823424][ T9926] Call Trace: [ 390.826727][ T9926] [ 390.829686][ T9926] dump_stack_lvl+0x168/0x22e [ 390.834401][ T9926] ? show_regs_print_info+0x12/0x12 [ 390.839632][ T9926] ? load_image+0x3b0/0x3b0 [ 390.844185][ T9926] ? __might_fault+0xa6/0x120 [ 390.848911][ T9926] should_fail_ex+0x399/0x4d0 [ 390.853620][ T9926] copyout+0x1b/0x120 [ 390.857628][ T9926] _copy_to_iter+0x48f/0x1030 [ 390.862347][ T9926] ? iov_iter_init+0x1f0/0x1f0 [ 390.867153][ T9926] ? __virt_addr_valid+0x188/0x540 [ 390.872302][ T9926] ? __virt_addr_valid+0x465/0x540 [ 390.877449][ T9926] ? __phys_addr_symbol+0x2b/0x70 [ 390.882509][ T9926] ? __check_object_size+0x500/0xa40 [ 390.887839][ T9926] __skb_datagram_iter+0xde/0x740 [ 390.893255][ T9926] ? skb_copy_datagram_iter+0x290/0x290 [ 390.898846][ T9926] skb_copy_datagram_iter+0xd7/0x290 [ 390.904174][ T9926] netlink_recvmsg+0x2bd/0xd90 [ 390.908983][ T9926] ? netlink_sendmsg+0xbc0/0xbc0 [ 390.913956][ T9926] ? aa_sk_perm+0x7e5/0x920 [ 390.918508][ T9926] ? aa_af_perm+0x2b0/0x2b0 [ 390.923148][ T9926] ? __might_fault+0xa6/0x120 [ 390.927868][ T9926] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 390.933182][ T9926] ? security_socket_recvmsg+0x85/0xb0 [ 390.938681][ T9926] ? netlink_sendmsg+0xbc0/0xbc0 [ 390.943647][ T9926] ____sys_recvmsg+0x292/0x580 [ 390.948432][ T9926] ? __sys_recvmsg_sock+0x40/0x40 [ 390.953475][ T9926] ? import_iovec+0x6f/0xa0 [ 390.957993][ T9926] ___sys_recvmsg+0x1b2/0x510 [ 390.962684][ T9926] ? __sys_recvmsg+0x270/0x270 [ 390.967468][ T9926] ? common_file_perm+0x171/0x1c0 [ 390.972514][ T9926] ? __fget_files+0x44a/0x4d0 [ 390.977215][ T9926] ? __fdget+0x17c/0x200 [ 390.981466][ T9926] __x64_sys_recvmsg+0x1eb/0x2b0 [ 390.986413][ T9926] ? ___sys_recvmsg+0x510/0x510 [ 390.991278][ T9926] ? lockdep_hardirqs_on+0x94/0x140 [ 390.996490][ T9926] do_syscall_64+0x4c/0xa0 [ 391.000924][ T9926] ? clear_bhb_loop+0x60/0xb0 [ 391.005603][ T9926] ? clear_bhb_loop+0x60/0xb0 [ 391.010283][ T9926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.016188][ T9926] RIP: 0033:0x7f7d9658ebe9 [ 391.020607][ T9926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.040220][ T9926] RSP: 002b:00007f7d973b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 391.048638][ T9926] RAX: ffffffffffffffda RBX: 00007f7d967b6090 RCX: 00007f7d9658ebe9 [ 391.056616][ T9926] RDX: 0000000040002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 391.064592][ T9926] RBP: 00007f7d973b2090 R08: 0000000000000000 R09: 0000000000000000 [ 391.072563][ T9926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.080536][ T9926] R13: 00007f7d967b6128 R14: 00007f7d967b6090 R15: 00007ffc382c9e28 [ 391.088531][ T9926] [ 391.156994][ T9926] netlink: 'syz.3.1794': attribute type 29 has an invalid length. [ 392.184291][ T9942] netlink: 'syz.4.1801': attribute type 10 has an invalid length. [ 392.185383][ T9951] netlink: 'syz.0.1803': attribute type 29 has an invalid length. [ 392.220904][ T9944] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1800'. [ 392.235463][ T9951] netlink: 'syz.0.1803': attribute type 29 has an invalid length. [ 392.259051][ T9952] sctp: [Deprecated]: syz.0.1803 (pid 9952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.259051][ T9952] Use struct sctp_sack_info instead [ 392.311550][ T9951] netlink: 'syz.0.1803': attribute type 29 has an invalid length. [ 392.339171][ T9950] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1802'. [ 393.784789][ T9986] netlink: 'syz.1.1817': attribute type 10 has an invalid length. [ 394.103428][ T9990] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1818'. [ 394.555194][ T9995] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1821'. [ 394.614881][ T9998] netlink: 'syz.3.1822': attribute type 28 has an invalid length. [ 394.779713][T10005] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1824'. [ 395.050481][T10011] netlink: 'syz.1.1826': attribute type 10 has an invalid length. [ 396.404902][T10038] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1835'. [ 396.706341][T10044] netlink: 'syz.0.1837': attribute type 10 has an invalid length. [ 396.793879][T10046] netlink: 'syz.1.1838': attribute type 3 has an invalid length. [ 396.827937][T10046] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1838'. [ 396.925565][T10046] netlink: 'syz.1.1838': attribute type 3 has an invalid length. [ 396.981890][T10046] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1838'. [ 397.078047][T10056] netlink: 'syz.4.1841': attribute type 10 has an invalid length. [ 397.992963][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 398.007134][T10083] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1850'. [ 398.463501][T10091] netlink: 'syz.2.1855': attribute type 10 has an invalid length. [ 398.914792][T10109] device pim6reg1 entered promiscuous mode [ 399.260091][T10123] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1865'. [ 399.944126][T10132] netlink: 'syz.3.1868': attribute type 10 has an invalid length. [ 399.997864][T10134] netlink: 'syz.2.1869': attribute type 10 has an invalid length. [ 400.076828][T10137] FAULT_INJECTION: forcing a failure. [ 400.076828][T10137] name failslab, interval 1, probability 0, space 0, times 0 [ 400.141217][T10137] CPU: 1 PID: 10137 Comm: syz.4.1871 Not tainted 6.1.147-syzkaller #0 [ 400.149454][T10137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 400.159537][T10137] Call Trace: [ 400.162842][T10137] [ 400.165797][T10137] dump_stack_lvl+0x168/0x22e [ 400.170506][T10137] ? show_regs_print_info+0x12/0x12 [ 400.175732][T10137] ? load_image+0x3b0/0x3b0 [ 400.180270][T10137] ? __might_sleep+0xd0/0xd0 [ 400.184893][T10137] ? __lock_acquire+0x7c50/0x7c50 [ 400.189940][T10137] ? __lock_acquire+0x12e5/0x7c50 [ 400.195004][T10137] should_fail_ex+0x399/0x4d0 [ 400.199741][T10137] should_failslab+0x5/0x20 [ 400.204267][T10137] slab_pre_alloc_hook+0x59/0x310 [ 400.209320][T10137] kmem_cache_alloc_lru+0x49/0x2e0 [ 400.214456][T10137] ? __d_alloc+0x31/0x700 [ 400.218823][T10137] __d_alloc+0x31/0x700 [ 400.223015][T10137] d_alloc_parallel+0xd9/0x1480 [ 400.227903][T10137] ? memset+0x1e/0x40 [ 400.231917][T10137] ? lockdep_init_map_type+0x9d/0x880 [ 400.237315][T10137] ? memset+0x1e/0x40 [ 400.241320][T10137] ? lockdep_init_map_type+0x9d/0x880 [ 400.246722][T10137] ? lockdep_softirqs_off+0x420/0x420 [ 400.252121][T10137] ? d_hash_and_lookup+0x1b0/0x1b0 [ 400.257282][T10137] ? __init_waitqueue_head+0xa5/0x150 [ 400.262695][T10137] __lookup_slow+0x113/0x3a0 [ 400.267316][T10137] ? lookup_one_len+0x2c0/0x2c0 [ 400.272211][T10137] lookup_one_len+0x18e/0x2c0 [ 400.276923][T10137] ? clear_nonspinnable+0x60/0x60 [ 400.281960][T10137] ? lookup_one_common+0x450/0x450 [ 400.287090][T10137] ? do_raw_spin_unlock+0x11d/0x230 [ 400.292303][T10137] ? mntput+0x61/0xb0 [ 400.296309][T10137] start_creating+0x184/0x310 [ 400.301009][T10137] debugfs_create_dir+0x24/0x4b0 [ 400.305954][T10137] ? ieee80211_chswitch_work+0x9e0/0x9e0 [ 400.311600][T10137] ieee80211_debugfs_add_netdev+0x11e/0xec0 [ 400.317507][T10137] ? sta_aql_write+0x2f0/0x2f0 [ 400.322286][T10137] ? ieee80211_setup_sdata+0x9ae/0xc20 [ 400.327785][T10137] ieee80211_if_change_type+0x5dc/0xa50 [ 400.333350][T10137] ieee80211_change_iface+0x58/0x4c0 [ 400.338649][T10137] cfg80211_change_iface+0x7e6/0xf80 [ 400.343951][T10137] __cfg80211_wext_siwmode+0x1b4/0x270 [ 400.349426][T10137] ? __cfg80211_wext_giwfreq+0x860/0x860 [ 400.355095][T10137] ? full_name_hash+0x8e/0xe0 [ 400.359786][T10137] ? __cfg80211_wext_giwfreq+0x860/0x860 [ 400.365432][T10137] ioctl_standard_call+0xd4/0x2b0 [ 400.370464][T10137] ? __cfg80211_wext_giwfreq+0x860/0x860 [ 400.376109][T10137] wext_ioctl_dispatch+0x3da/0x470 [ 400.381232][T10137] ? wext_ioctl_dispatch+0x470/0x470 [ 400.386520][T10137] ? iw_handler_get_private+0x1e0/0x1e0 [ 400.392100][T10137] wext_handle_ioctl+0x104/0x1c0 [ 400.397060][T10137] ? call_commit_handler+0xf0/0xf0 [ 400.402198][T10137] sock_ioctl+0x145/0x6e0 [ 400.406541][T10137] ? sock_poll+0x3f0/0x3f0 [ 400.411060][T10137] ? bpf_lsm_file_ioctl+0x5/0x10 [ 400.416021][T10137] ? security_file_ioctl+0x7c/0xa0 [ 400.421137][T10137] ? sock_poll+0x3f0/0x3f0 [ 400.425561][T10137] __se_sys_ioctl+0xfa/0x170 [ 400.430163][T10137] do_syscall_64+0x4c/0xa0 [ 400.434586][T10137] ? clear_bhb_loop+0x60/0xb0 [ 400.439265][T10137] ? clear_bhb_loop+0x60/0xb0 [ 400.443957][T10137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.449949][T10137] RIP: 0033:0x7f79fe58ebe9 [ 400.454368][T10137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.473983][T10137] RSP: 002b:00007f79ff3a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.482403][T10137] RAX: ffffffffffffffda RBX: 00007f79fe7b6090 RCX: 00007f79fe58ebe9 [ 400.490379][T10137] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 0000000000000004 [ 400.498359][T10137] RBP: 00007f79ff3a6090 R08: 0000000000000000 R09: 0000000000000000 [ 400.506345][T10137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.514318][T10137] R13: 00007f79fe7b6128 R14: 00007f79fe7b6090 R15: 00007ffe63bdc448 [ 400.522320][T10137] [ 400.583964][T10144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.599026][T10144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.620666][T10144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.634640][T10144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.975481][T10148] netlink: 'syz.1.1875': attribute type 10 has an invalid length. [ 401.311727][T10159] netlink: 'syz.3.1878': attribute type 10 has an invalid length. [ 401.454789][T10159] team0: Port device geneve1 added [ 401.518880][T10163] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1879'. [ 401.731699][T10171] FAULT_INJECTION: forcing a failure. [ 401.731699][T10171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.765488][T10172] FAULT_INJECTION: forcing a failure. [ 401.765488][T10172] name failslab, interval 1, probability 0, space 0, times 0 [ 401.792271][T10171] CPU: 0 PID: 10171 Comm: syz.3.1883 Not tainted 6.1.147-syzkaller #0 [ 401.800479][T10171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.810571][T10171] Call Trace: [ 401.813865][T10171] [ 401.816800][T10171] dump_stack_lvl+0x168/0x22e [ 401.821502][T10171] ? show_regs_print_info+0x12/0x12 [ 401.826716][T10171] ? load_image+0x3b0/0x3b0 [ 401.831246][T10171] ? __lock_acquire+0x7c50/0x7c50 [ 401.836301][T10171] ? __virt_addr_valid+0x188/0x540 [ 401.841429][T10171] should_fail_ex+0x399/0x4d0 [ 401.846123][T10171] _copy_from_user+0x2c/0x170 [ 401.850818][T10171] btf_new_fd+0x324/0x780 [ 401.855170][T10171] __sys_bpf+0x57a/0x6d0 [ 401.859425][T10171] ? bpf_link_show_fdinfo+0x340/0x340 [ 401.864834][T10171] ? __x64_sys_bpf+0x19/0x90 [ 401.869453][T10171] __x64_sys_bpf+0x78/0x90 [ 401.873905][T10171] do_syscall_64+0x4c/0xa0 [ 401.878339][T10171] ? clear_bhb_loop+0x60/0xb0 [ 401.883025][T10171] ? clear_bhb_loop+0x60/0xb0 [ 401.887708][T10171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.893615][T10171] RIP: 0033:0x7f7d9658ebe9 [ 401.898063][T10171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.917678][T10171] RSP: 002b:00007f7d973d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.926110][T10171] RAX: ffffffffffffffda RBX: 00007f7d967b5fa0 RCX: 00007f7d9658ebe9 [ 401.934094][T10171] RDX: 0000000000000028 RSI: 00002000000007c0 RDI: 0000000000000012 [ 401.942079][T10171] RBP: 00007f7d973d3090 R08: 0000000000000000 R09: 0000000000000000 [ 401.950064][T10171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.958041][T10171] R13: 00007f7d967b6038 R14: 00007f7d967b5fa0 R15: 00007ffc382c9e28 [ 401.966034][T10171] [ 402.000304][T10172] CPU: 0 PID: 10172 Comm: syz.1.1882 Not tainted 6.1.147-syzkaller #0 [ 402.008512][T10172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.018597][T10172] Call Trace: [ 402.021903][T10172] [ 402.024857][T10172] dump_stack_lvl+0x168/0x22e [ 402.029571][T10172] ? show_regs_print_info+0x12/0x12 [ 402.034817][T10172] ? load_image+0x3b0/0x3b0 [ 402.039357][T10172] ? __might_sleep+0xd0/0xd0 [ 402.043983][T10172] ? __lock_acquire+0x7c50/0x7c50 [ 402.049043][T10172] should_fail_ex+0x399/0x4d0 [ 402.053767][T10172] should_failslab+0x5/0x20 [ 402.058310][T10172] slab_pre_alloc_hook+0x59/0x310 [ 402.063360][T10172] ? bpf_prog_test_run_skb+0x22b/0x11b0 [ 402.068939][T10172] __kmem_cache_alloc_node+0x4f/0x260 [ 402.074344][T10172] ? bpf_prog_test_run_skb+0x22b/0x11b0 [ 402.079932][T10172] __kmalloc+0xa0/0x240 [ 402.084127][T10172] bpf_prog_test_run_skb+0x22b/0x11b0 [ 402.089533][T10172] ? __fget_files+0x28/0x4d0 [ 402.094172][T10172] ? __fget_files+0x44a/0x4d0 [ 402.098887][T10172] ? cpu_online+0xa0/0xa0 [ 402.103250][T10172] bpf_prog_test_run+0x31e/0x390 [ 402.110061][T10172] __sys_bpf+0x593/0x6d0 [ 402.114349][T10172] ? bpf_link_show_fdinfo+0x340/0x340 [ 402.119778][T10172] ? lock_chain_count+0x20/0x20 [ 402.124678][T10172] __x64_sys_bpf+0x78/0x90 [ 402.129131][T10172] do_syscall_64+0x4c/0xa0 [ 402.133572][T10172] ? clear_bhb_loop+0x60/0xb0 [ 402.138277][T10172] ? clear_bhb_loop+0x60/0xb0 [ 402.142983][T10172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.148919][T10172] RIP: 0033:0x7f5a97d8ebe9 [ 402.153363][T10172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.172999][T10172] RSP: 002b:00007f5a98caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 402.181434][T10172] RAX: ffffffffffffffda RBX: 00007f5a97fb5fa0 RCX: 00007f5a97d8ebe9 [ 402.189421][T10172] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 402.197401][T10172] RBP: 00007f5a98caf090 R08: 0000000000000000 R09: 0000000000000000 [ 402.205375][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.213349][T10172] R13: 00007f5a97fb6038 R14: 00007f5a97fb5fa0 R15: 00007ffc3a953bd8 [ 402.221336][T10172] [ 402.248595][T10176] netlink: 'syz.2.1884': attribute type 10 has an invalid length. [ 402.679437][T10192] netlink: 'syz.2.1890': attribute type 10 has an invalid length. [ 403.750124][T10211] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1894'. [ 404.184568][T10217] netlink: 'syz.0.1899': attribute type 10 has an invalid length. [ 404.543163][T10234] netlink: 'syz.4.1905': attribute type 2 has an invalid length. [ 405.555985][T10238] netlink: 'syz.3.1906': attribute type 10 has an invalid length. [ 408.630630][T10255] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1912'. [ 408.670168][T10257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.703194][T10257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.729584][T10257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.758896][T10257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.841508][T10259] netlink: 'syz.4.1914': attribute type 10 has an invalid length. [ 409.328856][T10266] netlink: 'syz.4.1916': attribute type 29 has an invalid length. [ 409.472769][T10266] netlink: 'syz.4.1916': attribute type 29 has an invalid length. [ 409.481515][T10267] netlink: 'syz.4.1916': attribute type 29 has an invalid length. [ 409.501423][ T40] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 409.583118][T10266] netlink: 'syz.4.1916': attribute type 29 has an invalid length. [ 410.229680][T10276] netlink: 'syz.0.1917': attribute type 29 has an invalid length. [ 410.591497][T10276] netlink: 'syz.0.1917': attribute type 29 has an invalid length. [ 410.682618][T10275] netlink: 'syz.0.1917': attribute type 29 has an invalid length. [ 410.959466][T10279] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1920'. [ 411.128257][T10279] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 411.385851][T10282] netlink: 'syz.2.1921': attribute type 10 has an invalid length. [ 412.154051][T10292] netlink: 'syz.1.1926': attribute type 10 has an invalid length. [ 412.602769][T10304] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1928'. [ 412.839839][T10316] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1933'. [ 413.194860][T10324] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1936'. [ 413.224972][T10324] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 413.959118][T10339] FAULT_INJECTION: forcing a failure. [ 413.959118][T10339] name failslab, interval 1, probability 0, space 0, times 0 [ 413.995574][T10337] validate_nla: 2 callbacks suppressed [ 413.995591][T10337] netlink: 'syz.1.1940': attribute type 10 has an invalid length. [ 414.031547][T10339] CPU: 0 PID: 10339 Comm: syz.3.1942 Not tainted 6.1.147-syzkaller #0 [ 414.039772][T10339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.049854][T10339] Call Trace: [ 414.053157][T10339] [ 414.056115][T10339] dump_stack_lvl+0x168/0x22e [ 414.060824][T10339] ? show_regs_print_info+0x12/0x12 [ 414.066034][T10339] ? load_image+0x3b0/0x3b0 [ 414.070648][T10339] ? __might_sleep+0xd0/0xd0 [ 414.075254][T10339] ? __lock_acquire+0x7c50/0x7c50 [ 414.080295][T10339] should_fail_ex+0x399/0x4d0 [ 414.085005][T10339] should_failslab+0x5/0x20 [ 414.089532][T10339] slab_pre_alloc_hook+0x59/0x310 [ 414.094574][T10339] ? apparmor_sk_alloc_security+0x74/0x100 [ 414.100490][T10339] __kmem_cache_alloc_node+0x4f/0x260 [ 414.105880][T10339] ? apparmor_sk_alloc_security+0x74/0x100 [ 414.111696][T10339] kmalloc_trace+0x26/0xe0 [ 414.116124][T10339] apparmor_sk_alloc_security+0x74/0x100 [ 414.121775][T10339] security_sk_alloc+0x6a/0xa0 [ 414.126556][T10339] sk_prot_alloc+0x101/0x210 [ 414.131156][T10339] ? sk_alloc+0x20/0x340 [ 414.135753][T10339] sk_alloc+0x36/0x340 [ 414.139831][T10339] ? bpf_ctx_init+0x163/0x1a0 [ 414.144513][T10339] ? bpf_prog_test_run_skb+0x267/0x11b0 [ 414.150096][T10339] bpf_prog_test_run_skb+0x350/0x11b0 [ 414.155513][T10339] ? __fget_files+0x28/0x4d0 [ 414.160128][T10339] ? __fget_files+0x44a/0x4d0 [ 414.164825][T10339] ? cpu_online+0xa0/0xa0 [ 414.169174][T10339] bpf_prog_test_run+0x31e/0x390 [ 414.174132][T10339] __sys_bpf+0x593/0x6d0 [ 414.178386][T10339] ? bpf_link_show_fdinfo+0x340/0x340 [ 414.183786][T10339] ? lock_chain_count+0x20/0x20 [ 414.188655][T10339] __x64_sys_bpf+0x78/0x90 [ 414.193078][T10339] do_syscall_64+0x4c/0xa0 [ 414.197494][T10339] ? clear_bhb_loop+0x60/0xb0 [ 414.202176][T10339] ? clear_bhb_loop+0x60/0xb0 [ 414.206854][T10339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.212756][T10339] RIP: 0033:0x7f7d9658ebe9 [ 414.217178][T10339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.236783][T10339] RSP: 002b:00007f7d973d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 414.245199][T10339] RAX: ffffffffffffffda RBX: 00007f7d967b5fa0 RCX: 00007f7d9658ebe9 [ 414.253173][T10339] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 414.261150][T10339] RBP: 00007f7d973d3090 R08: 0000000000000000 R09: 0000000000000000 [ 414.269123][T10339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.277097][T10339] R13: 00007f7d967b6038 R14: 00007f7d967b5fa0 R15: 00007ffc382c9e28 [ 414.285082][T10339] [ 415.364146][T10357] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1946'. [ 415.386251][T10355] netlink: 'syz.3.1948': attribute type 10 has an invalid length. [ 415.684493][T10358] delete_channel: no stack [ 415.758687][T10370] netlink: 'syz.1.1952': attribute type 29 has an invalid length. [ 415.939723][T10370] netlink: 'syz.1.1952': attribute type 29 has an invalid length. [ 416.036404][T10369] netlink: 'syz.1.1952': attribute type 29 has an invalid length. [ 416.234147][T10380] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1956'. [ 416.247584][T10377] netlink: 'syz.0.1955': attribute type 10 has an invalid length. [ 416.356326][T10380] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 417.446688][T10409] netlink: 'syz.4.1968': attribute type 10 has an invalid length. [ 417.457502][T10411] netlink: 'syz.1.1966': attribute type 10 has an invalid length. [ 417.973941][T10427] netlink: 'syz.2.1973': attribute type 25 has an invalid length. [ 418.078704][T10431] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1973'. [ 418.197549][T10417] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 418.213512][T10435] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1975'. [ 418.216524][T10417] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 418.223345][T10435] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 418.279773][T10417] device veth0_to_bridge entered promiscuous mode [ 418.885886][T10451] netlink: 'syz.2.1980': attribute type 10 has an invalid length. [ 418.904209][T10453] FAULT_INJECTION: forcing a failure. [ 418.904209][T10453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.944407][T10453] CPU: 0 PID: 10453 Comm: syz.0.1981 Not tainted 6.1.147-syzkaller #0 [ 418.952629][T10453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 418.962726][T10453] Call Trace: [ 418.966041][T10453] [ 418.969001][T10453] dump_stack_lvl+0x168/0x22e [ 418.973737][T10453] ? show_regs_print_info+0x12/0x12 [ 418.978973][T10453] ? load_image+0x3b0/0x3b0 [ 418.983539][T10453] ? __lock_acquire+0x7c50/0x7c50 [ 418.988616][T10453] should_fail_ex+0x399/0x4d0 [ 418.993348][T10453] _copy_from_user+0x2c/0x170 [ 418.998068][T10453] ___sys_recvmsg+0x12b/0x510 [ 419.002804][T10453] ? __sys_recvmsg+0x270/0x270 [ 419.007609][T10453] ? common_file_perm+0x171/0x1c0 [ 419.012670][T10453] ? __fget_files+0x44a/0x4d0 [ 419.017375][T10453] ? __fdget+0x17c/0x200 [ 419.021634][T10453] __x64_sys_recvmsg+0x1eb/0x2b0 [ 419.026590][T10453] ? ___sys_recvmsg+0x510/0x510 [ 419.031500][T10453] ? lockdep_hardirqs_on+0x94/0x140 [ 419.036728][T10453] do_syscall_64+0x4c/0xa0 [ 419.041157][T10453] ? clear_bhb_loop+0x60/0xb0 [ 419.045844][T10453] ? clear_bhb_loop+0x60/0xb0 [ 419.050542][T10453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.056458][T10453] RIP: 0033:0x7f3777b8ebe9 [ 419.060893][T10453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.080531][T10453] RSP: 002b:00007f37789ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 419.088981][T10453] RAX: ffffffffffffffda RBX: 00007f3777db5fa0 RCX: 00007f3777b8ebe9 [ 419.096977][T10453] RDX: 0000000000000000 RSI: 0000200000000e80 RDI: 0000000000000004 [ 419.104962][T10453] RBP: 00007f37789ce090 R08: 0000000000000000 R09: 0000000000000000 [ 419.112938][T10453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.120913][T10453] R13: 00007f3777db6038 R14: 00007f3777db5fa0 R15: 00007ffd643a9548 [ 419.128923][T10453] [ 419.236274][T10455] netlink: 'syz.4.1982': attribute type 10 has an invalid length. [ 419.407825][T10462] netlink: 64519 bytes leftover after parsing attributes in process `syz.1.1987'. [ 419.456270][T10462] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1987'. [ 419.831355][T10474] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 419.870206][T10474] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 419.887598][T10474] device veth0_to_bridge entered promiscuous mode [ 420.146206][T10486] netlink: 'syz.2.1994': attribute type 10 has an invalid length. [ 420.360220][T10492] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.1998'. [ 420.787325][T10506] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.2003'. [ 420.851686][T10506] netlink: zone id is out of range [ 420.888361][T10506] netlink: zone id is out of range [ 420.911700][T10506] netlink: zone id is out of range [ 420.937103][T10506] netlink: zone id is out of range [ 420.958962][T10506] netlink: zone id is out of range [ 420.973597][T10506] netlink: get zone limit has 8 unknown bytes [ 421.649026][T10519] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 421.664774][T10519] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 421.678561][T10519] device veth0_to_bridge entered promiscuous mode [ 421.700703][T10526] netlink: 'syz.0.2010': attribute type 10 has an invalid length. [ 421.776068][T10515] delete_channel: no stack [ 423.169000][T10558] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2022'. [ 423.178452][T10560] netlink: 'syz.2.2025': attribute type 10 has an invalid length. [ 423.622502][T10565] delete_channel: no stack [ 424.251033][T10594] FAULT_INJECTION: forcing a failure. [ 424.251033][T10594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.252085][T10594] [ 424.252091][T10594] ====================================================== [ 424.252098][T10594] WARNING: possible circular locking dependency detected [ 424.252105][T10594] 6.1.147-syzkaller #0 Not tainted [ 424.252114][T10594] ------------------------------------------------------ [ 424.252118][T10594] syz.0.2037/10594 is trying to acquire lock: [ 424.252127][T10594] ffffffff8cb1efc0 (console_owner){-...}-{0:0}, at: console_emit_next_record+0x82d/0xc90 [ 424.252180][T10594] [ 424.252180][T10594] but task is already holding lock: [ 424.252184][T10594] ffff8880b8e3aa98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 424.252223][T10594] [ 424.252223][T10594] which lock already depends on the new lock. [ 424.252223][T10594] [ 424.252227][T10594] [ 424.252227][T10594] the existing dependency chain (in reverse order) is: [ 424.252232][T10594] [ 424.252232][T10594] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 424.252255][T10594] _raw_spin_lock_nested+0x2e/0x40 [ 424.252277][T10594] raw_spin_rq_lock_nested+0x26/0x140 [ 424.252293][T10594] task_fork_fair+0x5c/0x350 [ 424.252311][T10594] sched_cgroup_fork+0x32c/0x3c0 [ 424.252328][T10594] copy_process+0x24b8/0x4020 [ 424.252343][T10594] kernel_clone+0x225/0x8b0 [ 424.252357][T10594] user_mode_thread+0xda/0x130 [ 424.252370][T10594] rest_init+0x23/0x300 [ 424.252389][T10594] start_kernel+0x0/0x539 [ 424.252411][T10594] start_kernel+0x490/0x539 [ 424.252431][T10594] secondary_startup_64_no_verify+0xcf/0xdb [ 424.252451][T10594] [ 424.252451][T10594] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 424.252471][T10594] _raw_spin_lock_irqsave+0xa4/0xf0 [ 424.252492][T10594] try_to_wake_up+0x5c/0x1080 [ 424.252509][T10594] __wake_up_common+0x2a4/0x4e0 [ 424.252529][T10594] __wake_up+0x10e/0x190 [ 424.252547][T10594] tty_port_default_wakeup+0x9e/0xf0 [ 424.252569][T10594] serial8250_tx_chars+0x629/0x830 [ 424.252584][T10594] serial8250_handle_irq+0x516/0x6d0 [ 424.252600][T10594] serial8250_default_handle_irq+0xb4/0x1a0 [ 424.252616][T10594] serial8250_interrupt+0x9b/0x1c0 [ 424.252638][T10594] __handle_irq_event_percpu+0x298/0xa30 [ 424.252653][T10594] handle_irq_event+0x87/0x1e0 [ 424.252667][T10594] handle_edge_irq+0x243/0xb20 [ 424.252684][T10594] __common_interrupt+0xd7/0x1e0 [ 424.252704][T10594] common_interrupt+0xb0/0xd0 [ 424.252719][T10594] asm_common_interrupt+0x22/0x40 [ 424.252741][T10594] __sanitizer_cov_trace_pc+0x32/0x60 [ 424.252756][T10594] mas_next_entry+0x1e3/0xea0 [ 424.252775][T10594] validate_mm_mt+0x167/0x420 [ 424.252793][T10594] validate_mm+0xcc/0x2b0 [ 424.252810][T10594] __vma_adjust+0x17bf/0x1c50 [ 424.252825][T10594] __split_vma+0x3a7/0x500 [ 424.252842][T10594] mprotect_fixup+0x597/0x7f0 [ 424.252862][T10594] do_mprotect_pkey+0x754/0xa40 [ 424.252880][T10594] __x64_sys_mprotect+0x7c/0x90 [ 424.252900][T10594] do_syscall_64+0x4c/0xa0 [ 424.252914][T10594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.252936][T10594] [ 424.252936][T10594] -> #2 (&tty->write_wait){-...}-{2:2}: [ 424.252957][T10594] _raw_spin_lock_irqsave+0xa4/0xf0 [ 424.252985][T10594] __wake_up+0xf4/0x190 [ 424.253003][T10594] tty_port_default_wakeup+0x9e/0xf0 [ 424.253024][T10594] serial8250_tx_chars+0x629/0x830 [ 424.253039][T10594] serial8250_handle_irq+0x516/0x6d0 [ 424.253054][T10594] serial8250_default_handle_irq+0xb4/0x1a0 [ 424.253070][T10594] serial8250_interrupt+0x9b/0x1c0 [ 424.253092][T10594] __handle_irq_event_percpu+0x298/0xa30 [ 424.253106][T10594] handle_irq_event+0x87/0x1e0 [ 424.253119][T10594] handle_edge_irq+0x243/0xb20 [ 424.253137][T10594] __common_interrupt+0xd7/0x1e0 [ 424.253157][T10594] common_interrupt+0xb0/0xd0 [ 424.253172][T10594] asm_common_interrupt+0x22/0x40 [ 424.253195][T10594] default_idle+0xb/0x10 [ 424.253211][T10594] default_idle_call+0x84/0xc0 [ 424.253230][T10594] do_idle+0x1fc/0x570 [ 424.253248][T10594] cpu_startup_entry+0x3f/0x60 [ 424.253267][T10594] rest_init+0x2dc/0x300 [ 424.253286][T10594] start_kernel+0x0/0x539 [ 424.253305][T10594] start_kernel+0x490/0x539 [ 424.253327][T10594] secondary_startup_64_no_verify+0xcf/0xdb [ 424.253345][T10594] [ 424.253345][T10594] -> #1 (&port_lock_key){-...}-{2:2}: [ 424.253366][T10594] _raw_spin_lock_irqsave+0xa4/0xf0 [ 424.253387][T10594] serial8250_console_write+0x169/0x17a0 [ 424.253402][T10594] console_emit_next_record+0x947/0xc90 [ 424.253424][T10594] console_unlock+0x223/0x630 [ 424.253441][T10594] vprintk_emit+0x489/0x680 [ 424.253461][T10594] _printk+0xcc/0x110 [ 424.253479][T10594] register_console+0x6c6/0x9c0 [ 424.253498][T10594] univ8250_console_init+0x41/0x43 [ 424.253515][T10594] console_init+0x1bc/0x78e [ 424.253534][T10594] start_kernel+0x303/0x539 [ 424.253555][T10594] secondary_startup_64_no_verify+0xcf/0xdb [ 424.253575][T10594] [ 424.253575][T10594] -> #0 (console_owner){-...}-{0:0}: [ 424.253594][T10594] __lock_acquire+0x2cf8/0x7c50 [ 424.253614][T10594] lock_acquire+0x1b4/0x490 [ 424.253632][T10594] console_emit_next_record+0x84c/0xc90 [ 424.253653][T10594] console_unlock+0x223/0x630 [ 424.253672][T10594] vprintk_emit+0x489/0x680 [ 424.253689][T10594] _printk+0xcc/0x110 [ 424.253708][T10594] should_fail_ex+0x37a/0x4d0 [ 424.253728][T10594] strncpy_from_user+0x32/0x350 [ 424.253746][T10594] strncpy_from_user_nofault+0x6d/0x140 [ 424.253760][T10594] bpf_probe_read_user_str+0x26/0x70 [ 424.253781][T10594] bpf_prog_bc7c5c6b9645592f+0x35/0x37 [ 424.253800][T10594] bpf_trace_run4+0x1f5/0x420 [ 424.253821][T10594] __traceiter_sched_switch+0x8f/0xc0 [ 424.253842][T10594] __schedule+0x1d18/0x40b0 [ 424.253856][T10594] preempt_schedule_irq+0xb1/0x150 [ 424.253872][T10594] irqentry_exit+0x63/0x70 [ 424.253889][T10594] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 424.253904][T10594] bsearch+0x67/0xb0 [ 424.253925][T10594] search_extable+0x8c/0xd0 [ 424.253940][T10594] search_exception_tables+0x36/0x60 [ 424.253958][T10594] fixup_exception+0xaa/0x1c40 [ 424.253984][T10594] kernelmode_fixup_or_oops+0x6c/0xd0 [ 424.254001][T10594] __bad_area_nosemaphore+0x118/0x740 [ 424.254020][T10594] exc_page_fault+0x60/0x100 [ 424.254035][T10594] asm_exc_page_fault+0x22/0x30 [ 424.254057][T10594] copy_user_short_string+0x22/0x40 [ 424.254072][T10594] _copy_from_user+0xf4/0x170 [ 424.254086][T10594] ____sys_sendmsg+0x2d5/0x970 [ 424.254104][T10594] ___sys_sendmsg+0x21c/0x290 [ 424.254122][T10594] __se_sys_sendmsg+0x19e/0x270 [ 424.254137][T10594] do_syscall_64+0x4c/0xa0 [ 424.254152][T10594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.254174][T10594] [ 424.254174][T10594] other info that might help us debug this: [ 424.254174][T10594] [ 424.254178][T10594] Chain exists of: [ 424.254178][T10594] console_owner --> &p->pi_lock --> &rq->__lock [ 424.254178][T10594] [ 424.254203][T10594] Possible unsafe locking scenario: [ 424.254203][T10594] [ 424.254207][T10594] CPU0 CPU1 [ 424.254211][T10594] ---- ---- [ 424.254216][T10594] lock(&rq->__lock); [ 424.254225][T10594] lock(&p->pi_lock); [ 424.254236][T10594] lock(&rq->__lock); [ 424.254247][T10594] lock(console_owner); [ 424.254257][T10594] [ 424.254257][T10594] *** DEADLOCK *** [ 424.254257][T10594] [ 424.254260][T10594] 3 locks held by syz.0.2037/10594: [ 424.254269][T10594] #0: ffff8880b8e3aa98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 424.254311][T10594] #1: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xf9/0x420 [ 424.254355][T10594] #2: ffffffff8cb1f0a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcc/0x110 [ 424.254396][T10594] [ 424.254396][T10594] stack backtrace: [ 424.254400][T10594] CPU: 0 PID: 10594 Comm: syz.0.2037 Not tainted 6.1.147-syzkaller #0 [ 424.254416][T10594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 424.254425][T10594] Call Trace: [ 424.254430][T10594] [ 424.254438][T10594] dump_stack_lvl+0x168/0x22e [ 424.254458][T10594] ? load_image+0x3b0/0x3b0 [ 424.254482][T10594] ? show_regs_print_info+0x12/0x12 [ 424.254521][T10594] ? print_circular_bug+0x12b/0x1a0 [ 424.254554][T10594] check_noncircular+0x274/0x310 [ 424.254584][T10594] ? add_chain_block+0x940/0x940 [ 424.254604][T10594] ? lockdep_lock+0xdc/0x1e0 [ 424.254645][T10594] ? _find_first_zero_bit+0xcf/0x100 [ 424.254677][T10594] __lock_acquire+0x2cf8/0x7c50 [ 424.254754][T10594] ? verify_lock_unused+0x140/0x140 [ 424.254824][T10594] lock_acquire+0x1b4/0x490 [ 424.254844][T10594] ? console_emit_next_record+0x82d/0xc90 [ 424.254883][T10594] ? __lock_acquire+0x7c50/0x7c50 [ 424.254903][T10594] ? do_raw_spin_lock+0x11d/0x280 [ 424.254927][T10594] ? read_lock_is_recursive+0x10/0x10 [ 424.254954][T10594] ? __rwlock_init+0x140/0x140 [ 424.254985][T10594] ? memcpy+0x3c/0x60 [ 424.255017][T10594] ? do_raw_spin_unlock+0x11d/0x230 [ 424.255042][T10594] ? console_emit_next_record+0x82d/0xc90 [ 424.255071][T10594] console_emit_next_record+0x84c/0xc90 [ 424.255093][T10594] ? console_emit_next_record+0x82d/0xc90 [ 424.255129][T10594] ? __lock_acquire+0x7c50/0x7c50 [ 424.255159][T10594] ? info_print_prefix+0x300/0x300 [ 424.255189][T10594] ? do_raw_spin_unlock+0x11d/0x230 [ 424.255219][T10594] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 424.255244][T10594] ? _raw_spin_unlock+0x40/0x40 [ 424.255298][T10594] ? __down_trylock_console_sem+0x184/0x1e0 [ 424.255320][T10594] ? _printk+0xcc/0x110 [ 424.255344][T10594] ? _printk+0xcc/0x110 [ 424.255365][T10594] ? console_trylock+0x160/0x160 [ 424.255394][T10594] console_unlock+0x223/0x630 [ 424.255424][T10594] ? _printk+0xcc/0x110 [ 424.255451][T10594] vprintk_emit+0x489/0x680 [ 424.255479][T10594] ? printk_sprint+0x460/0x460 [ 424.255507][T10594] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 424.255542][T10594] ? verify_lock_unused+0x140/0x140 [ 424.255574][T10594] _printk+0xcc/0x110 [ 424.255596][T10594] ? trace_event_raw_event_lock+0x230/0x230 [ 424.255624][T10594] ? load_image+0x3b0/0x3b0 [ 424.255676][T10594] should_fail_ex+0x37a/0x4d0 [ 424.255709][T10594] strncpy_from_user+0x32/0x350 [ 424.255740][T10594] strncpy_from_user_nofault+0x6d/0x140 [ 424.255764][T10594] bpf_probe_read_user_str+0x26/0x70 [ 424.255792][T10594] bpf_prog_bc7c5c6b9645592f+0x35/0x37 [ 424.255815][T10594] bpf_trace_run4+0x1f5/0x420 [ 424.255839][T10594] ? bpf_trace_run4+0xf9/0x420 [ 424.255865][T10594] ? bpf_trace_run3+0x400/0x400 [ 424.255904][T10594] ? tracing_record_taskinfo_sched_switch+0x79/0x360 [ 424.255929][T10594] ? __bpf_trace_sched_wakeup_template+0x10/0x10 [ 424.255949][T10594] __traceiter_sched_switch+0x8f/0xc0 [ 424.255990][T10594] __schedule+0x1d18/0x40b0 [ 424.256031][T10594] ? ct_nmi_exit+0x145/0x1c0 [ 424.256069][T10594] ? release_firmware_map_entry+0x18a/0x18a [ 424.256091][T10594] ? lock_chain_count+0x20/0x20 [ 424.256123][T10594] ? preempt_schedule_irq+0xa6/0x150 [ 424.256150][T10594] preempt_schedule_irq+0xb1/0x150 [ 424.256170][T10594] ? preempt_schedule_notrace+0x110/0x110 [ 424.256194][T10594] ? rcu_is_watching+0x11/0xa0 [ 424.256225][T10594] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 424.256252][T10594] irqentry_exit+0x63/0x70 [ 424.256272][T10594] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 424.256288][T10594] RIP: 0010:bsearch+0x67/0xb0 [ 424.256311][T10594] Code: 89 ef 48 89 ee ff 14 24 89 c3 31 ff 89 c6 e8 70 6b 7b fd 85 db 74 31 31 ff 89 de e8 63 6b 7b fd 4c 01 f5 31 c0 85 db 0f 9f c0 <4c> 0f 4f e5 49 29 c7 49 83 ff 02 72 18 49 d1 ef e8 e4 67 7b fd eb [ 424.256327][T10594] RSP: 0018:ffffc9000d9a7560 EFLAGS: 00000202 [ 424.256341][T10594] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000000 [ 424.256351][T10594] RDX: ffff88805467d940 RSI: 0000000000000001 RDI: 0000000000000000 [ 424.256363][T10594] RBP: ffffffff8c76d190 R08: ffffffff8a01b9d0 R09: ffffed10060ece2e [ 424.256375][T10594] R10: ffffed10060ece2e R11: 1ffff110060ece2d R12: ffffffff8c76a0a0 [ 424.256388][T10594] R13: ffffc9000d9a75c0 R14: 000000000000000c R15: 0000000000000826 [ 424.256412][T10594] ? search_extable+0xd0/0xd0 [ 424.256446][T10594] ? search_extable+0xd0/0xd0 [ 424.256462][T10594] ? copy_user_short_string+0x22/0x40 [ 424.256483][T10594] search_extable+0x8c/0xd0 [ 424.256503][T10594] ? trim_init_extable+0x3b0/0x3b0 [ 424.256521][T10594] ? copy_user_short_string+0x22/0x40 [ 424.256544][T10594] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 424.256562][T10594] ? lockdep_hardirqs_on+0x94/0x140 [ 424.256582][T10594] ? copy_user_short_string+0x22/0x40 [ 424.256605][T10594] search_exception_tables+0x36/0x60 [ 424.256625][T10594] fixup_exception+0xaa/0x1c40 [ 424.256666][T10594] ? ex_get_fixup_type+0x60/0x60 [ 424.256700][T10594] ? lock_mm_and_find_vma+0x107/0x2f0 [ 424.256722][T10594] ? preempt_count_add+0x8d/0x190 [ 424.256744][T10594] ? __up_read+0x27c/0x660 [ 424.256764][T10594] ? __lock_acquire+0x7c50/0x7c50 [ 424.256788][T10594] ? up_read+0x20/0x20 [ 424.256810][T10594] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 424.256833][T10594] kernelmode_fixup_or_oops+0x6c/0xd0 [ 424.256859][T10594] __bad_area_nosemaphore+0x118/0x740 [ 424.256877][T10594] ? lock_mm_and_find_vma+0x107/0x2f0 [ 424.256919][T10594] ? bad_area_nosemaphore+0x30/0x30 [ 424.256962][T10594] exc_page_fault+0x60/0x100 [ 424.257000][T10594] asm_exc_page_fault+0x22/0x30 [ 424.257024][T10594] RIP: 0010:copy_user_short_string+0x22/0x40 [ 424.257040][T10594] Code: e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 8d 14 [ 424.257052][T10594] RSP: 0018:ffffc9000d9a7a08 EFLAGS: 00050202 [ 424.257064][T10594] RAX: ffffffff84067401 RBX: 0000000000000007 RCX: 0000000000000007 [ 424.257074][T10594] RDX: 0000000000000007 RSI: 0000000000000000 RDI: ffffc9000d9a7ac0 [ 424.257085][T10594] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff52001b34f59 [ 424.257096][T10594] R10: fffff52001b34f59 R11: 1ffff92001b34f58 R12: 00007fffffffeff9 [ 424.257108][T10594] R13: 0000000000000000 R14: ffffc9000d9a7ac0 R15: 0000000000000000 [ 424.257134][T10594] ? _copy_from_user+0xa1/0x170 [ 424.257164][T10594] _copy_from_user+0xf4/0x170 [ 424.257188][T10594] ____sys_sendmsg+0x2d5/0x970 [ 424.257210][T10594] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 424.257239][T10594] ? __sys_sendmsg_sock+0x30/0x30 [ 424.257258][T10594] ? __import_iovec+0x315/0x500 [ 424.257301][T10594] ? import_iovec+0x6f/0xa0 [ 424.257333][T10594] ___sys_sendmsg+0x21c/0x290 [ 424.257362][T10594] ? __sys_sendmsg+0x270/0x270 [ 424.257422][T10594] ? lockdep_hardirqs_on+0x94/0x140 [ 424.257482][T10594] ? __fdget+0x17c/0x200 [ 424.257511][T10594] __se_sys_sendmsg+0x19e/0x270 [ 424.257529][T10594] ? ct_nmi_exit+0x145/0x1c0 [ 424.257556][T10594] ? __x64_sys_sendmsg+0x80/0x80 [ 424.257607][T10594] ? lockdep_hardirqs_on+0x94/0x140 [ 424.257637][T10594] do_syscall_64+0x4c/0xa0 [ 424.257653][T10594] ? clear_bhb_loop+0x60/0xb0 [ 424.257668][T10594] ? clear_bhb_loop+0x60/0xb0 [ 424.257690][T10594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.257714][T10594] RIP: 0033:0x7f3777b8ebe9 [ 424.257731][T10594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.257745][T10594] RSP: 002b:00007f37789ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.257763][T10594] RAX: ffffffffffffffda RBX: 00007f3777db5fa0 RCX: 00007f3777b8ebe9 [ 424.257775][T10594] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 424.257786][T10594] RBP: 00007f37789ce090 R08: 0000000000000000 R09: 0000000000000000 [ 424.257796][T10594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.257807][T10594] R13: 00007f3777db6038 R14: 00007f3777db5fa0 R15: 00007ffd643a9548 [ 424.257850][T10594] [ 425.806518][T10594] CPU: 0 PID: 10594 Comm: syz.0.2037 Not tainted 6.1.147-syzkaller #0 [ 425.814653][T10594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.824695][T10594] Call Trace: [ 425.827958][T10594] [ 425.830874][T10594] dump_stack_lvl+0x168/0x22e [ 425.835540][T10594] ? trace_event_raw_event_lock+0x230/0x230 [ 425.841413][T10594] ? show_regs_print_info+0x12/0x12 [ 425.846592][T10594] ? load_image+0x3b0/0x3b0 [ 425.851105][T10594] should_fail_ex+0x399/0x4d0 [ 425.855778][T10594] strncpy_from_user+0x32/0x350 [ 425.860618][T10594] strncpy_from_user_nofault+0x6d/0x140 [ 425.866149][T10594] bpf_probe_read_user_str+0x26/0x70 [ 425.871419][T10594] bpf_prog_bc7c5c6b9645592f+0x35/0x37 [ 425.876862][T10594] bpf_trace_run4+0x1f5/0x420 [ 425.881536][T10594] ? bpf_trace_run4+0xf9/0x420 [ 425.886283][T10594] ? bpf_trace_run3+0x400/0x400 [ 425.891121][T10594] ? tracing_record_taskinfo_sched_switch+0x79/0x360 [ 425.897780][T10594] ? __bpf_trace_sched_wakeup_template+0x10/0x10 [ 425.904088][T10594] __traceiter_sched_switch+0x8f/0xc0 [ 425.909448][T10594] __schedule+0x1d18/0x40b0 [ 425.913940][T10594] ? ct_nmi_exit+0x145/0x1c0 [ 425.918518][T10594] ? release_firmware_map_entry+0x18a/0x18a [ 425.924396][T10594] ? lock_chain_count+0x20/0x20 [ 425.929230][T10594] ? preempt_schedule_irq+0xa6/0x150 [ 425.934590][T10594] preempt_schedule_irq+0xb1/0x150 [ 425.939695][T10594] ? preempt_schedule_notrace+0x110/0x110 [ 425.945413][T10594] ? rcu_is_watching+0x11/0xa0 [ 425.950160][T10594] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 425.955947][T10594] irqentry_exit+0x63/0x70 [ 425.960345][T10594] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 425.966309][T10594] RIP: 0010:bsearch+0x67/0xb0 [ 425.970984][T10594] Code: 89 ef 48 89 ee ff 14 24 89 c3 31 ff 89 c6 e8 70 6b 7b fd 85 db 74 31 31 ff 89 de e8 63 6b 7b fd 4c 01 f5 31 c0 85 db 0f 9f c0 <4c> 0f 4f e5 49 29 c7 49 83 ff 02 72 18 49 d1 ef e8 e4 67 7b fd eb [ 425.990575][T10594] RSP: 0018:ffffc9000d9a7560 EFLAGS: 00000202 [ 425.996644][T10594] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000000 [ 426.004599][T10594] RDX: ffff88805467d940 RSI: 0000000000000001 RDI: 0000000000000000 [ 426.012555][T10594] RBP: ffffffff8c76d190 R08: ffffffff8a01b9d0 R09: ffffed10060ece2e [ 426.020510][T10594] R10: ffffed10060ece2e R11: 1ffff110060ece2d R12: ffffffff8c76a0a0 [ 426.028468][T10594] R13: ffffc9000d9a75c0 R14: 000000000000000c R15: 0000000000000826 [ 426.036428][T10594] ? search_extable+0xd0/0xd0 [ 426.041095][T10594] ? search_extable+0xd0/0xd0 [ 426.045754][T10594] ? copy_user_short_string+0x22/0x40 [ 426.051107][T10594] search_extable+0x8c/0xd0 [ 426.055594][T10594] ? trim_init_extable+0x3b0/0x3b0 [ 426.060687][T10594] ? copy_user_short_string+0x22/0x40 [ 426.066040][T10594] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 426.072175][T10594] ? lockdep_hardirqs_on+0x94/0x140 [ 426.077355][T10594] ? copy_user_short_string+0x22/0x40 [ 426.082711][T10594] search_exception_tables+0x36/0x60 [ 426.087987][T10594] fixup_exception+0xaa/0x1c40 [ 426.092744][T10594] ? ex_get_fixup_type+0x60/0x60 [ 426.097681][T10594] ? lock_mm_and_find_vma+0x107/0x2f0 [ 426.103035][T10594] ? preempt_count_add+0x8d/0x190 [ 426.108040][T10594] ? __up_read+0x27c/0x660 [ 426.112461][T10594] ? __lock_acquire+0x7c50/0x7c50 [ 426.117486][T10594] ? up_read+0x20/0x20 [ 426.121549][T10594] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 426.127686][T10594] kernelmode_fixup_or_oops+0x6c/0xd0 [ 426.133048][T10594] __bad_area_nosemaphore+0x118/0x740 [ 426.138408][T10594] ? lock_mm_and_find_vma+0x107/0x2f0 [ 426.143779][T10594] ? bad_area_nosemaphore+0x30/0x30 [ 426.148972][T10594] exc_page_fault+0x60/0x100 [ 426.153554][T10594] asm_exc_page_fault+0x22/0x30 [ 426.158393][T10594] RIP: 0010:copy_user_short_string+0x22/0x40 [ 426.164357][T10594] Code: e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 8d 14 [ 426.183948][T10594] RSP: 0018:ffffc9000d9a7a08 EFLAGS: 00050202 [ 426.190001][T10594] RAX: ffffffff84067401 RBX: 0000000000000007 RCX: 0000000000000007 [ 426.197960][T10594] RDX: 0000000000000007 RSI: 0000000000000000 RDI: ffffc9000d9a7ac0 [ 426.205916][T10594] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff52001b34f59 [ 426.213876][T10594] R10: fffff52001b34f59 R11: 1ffff92001b34f58 R12: 00007fffffffeff9 [ 426.221833][T10594] R13: 0000000000000000 R14: ffffc9000d9a7ac0 R15: 0000000000000000 [ 426.229794][T10594] ? _copy_from_user+0xa1/0x170 [ 426.234648][T10594] _copy_from_user+0xf4/0x170 [ 426.239312][T10594] ____sys_sendmsg+0x2d5/0x970 [ 426.244082][T10594] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 426.250238][T10594] ? __sys_sendmsg_sock+0x30/0x30 [ 426.255254][T10594] ? __import_iovec+0x315/0x500 [ 426.260112][T10594] ? import_iovec+0x6f/0xa0 [ 426.264627][T10594] ___sys_sendmsg+0x21c/0x290 [ 426.269311][T10594] ? __sys_sendmsg+0x270/0x270 [ 426.274076][T10594] ? lockdep_hardirqs_on+0x94/0x140 [ 426.279289][T10594] ? __fdget+0x17c/0x200 [ 426.283521][T10594] __se_sys_sendmsg+0x19e/0x270 [ 426.288356][T10594] ? ct_nmi_exit+0x145/0x1c0 [ 426.292933][T10594] ? __x64_sys_sendmsg+0x80/0x80 [ 426.297866][T10594] ? lockdep_hardirqs_on+0x94/0x140 [ 426.303051][T10594] do_syscall_64+0x4c/0xa0 [ 426.307449][T10594] ? clear_bhb_loop+0x60/0xb0 [ 426.312113][T10594] ? clear_bhb_loop+0x60/0xb0 [ 426.316771][T10594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.322656][T10594] RIP: 0033:0x7f3777b8ebe9 [ 426.327057][T10594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.346647][T10594] RSP: 002b:00007f37789ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.355041][T10594] RAX: ffffffffffffffda RBX: 00007f3777db5fa0 RCX: 00007f3777b8ebe9 [ 426.362996][T10594] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 426.370950][T10594] RBP: 00007f37789ce090 R08: 0000000000000000 R09: 0000000000000000 [ 426.378906][T10594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.386860][T10594] R13: 00007f3777db6038 R14: 00007f3777db5fa0 R15: 00007ffd643a9548 [ 426.394912][T10594] [ 426.593594][T10591] caif:caif_disconnect_client(): nothing to disconnect [ 426.836485][T10605] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2040'.