last executing test programs: 11m16.03560895s ago: executing program 3 (id=2849): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000008000000000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000500"/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110c5000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x2e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xa8}}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r5}, 0xc) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r1}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020754d0400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB="1100000010000000", @ANYRES32=r7, @ANYRES32=r6, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000a8fe000039110000d9c732c1e1c848dfe5561091c0f0924b06144a06439c6452b1576432c1fae1ab416f3372abfaace898ce55f8b3", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018200000", @ANYBLOB="7ac9d56b13016c5e018cb5f102702d664ef314d789cb76d3ff7201b79dcc8e5fc7f9d7f7556202f0a7d38f198df977be762682eed2896881377eb9a0efc652f4df9bb2f4f72eceb760c51af4f0b30f4314a33199e93e3b92def950d1a4929b16dd752a3ee2957a94182d2371e1ad636aac9e2d578afa38ef4cfc656743e60a4ae476ce0b95411b4b211d83a590703be8203fdc10ee799dd7e5a0305581bb68468777596199da634004e38f7f6aa5e02bd4ab13009aa86c53870809065cd7bc20b665e00d421dd0baa6413981fb0cb489fba0cba320", @ANYBLOB="0000000004000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000b40)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) 11m15.700017488s ago: executing program 3 (id=2853): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x29, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) 11m15.436047123s ago: executing program 3 (id=2858): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004880)=""/4129, 0x1021}, {&(0x7f0000000900)=""/4071, 0xfe7}, {&(0x7f0000000880)=""/93, 0x5d}], 0x3}, 0x12100) 11m15.183258569s ago: executing program 3 (id=2861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 11m12.639081235s ago: executing program 3 (id=2869): r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x21, 0x7, 0x2) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0xd}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x28}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) perf_event_open$cgroup(&(0x7f00000006c0)={0x2, 0x80, 0x0, 0x1, 0xff, 0x3, 0x0, 0x6, 0x1008, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x28, 0x9438}, 0x12, 0x3, 0x10001, 0x1, 0x100000201, 0x2, 0x1, 0x0, 0x80, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xd, r1, 0x2) setsockopt$sock_attach_bpf(r4, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r4, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e33, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000680)="d8", 0x1}], 0x1}, 0x4008054) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4) recvmsg$kcm(r4, 0x0, 0x40000002) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000980)="841fda0a298d868450fe8102cd525096033a3c633d7a316ad4cd34891d80cf82ba029cc44ba276c86cc005f698db3fb99e57fba036dfbf0cba716e38a9618399790b3d86d548678aa56bb2809be3d8659ca418460be08080969b4fe456144ad68d2d871c975a9144097cff20974fd13f6988aca8db3dbb2b97b038bf8fca37fc39d42ceb0e659415e6a82ea45f327b903f1fcda85aa40a81fcf085662fd069f0138f56d3864346f65f4bb8e4959317fb483661ecfa7e9e6cf0b24ca9cbe650a2f0be21d763022b06fe315361", 0xcc}, {&(0x7f0000000b00)="6f2b4ebb84cafca53f8b1eee25138cfef4023ffa7903bc1c0fa4763a86a0b09cf8c1b1f21547e12ee5e8769b8f7886b1eb885a412f96bac59ecde1865075cb4e3bac91f6b76c379aee3dc2765d2ea45764a3a0ae580fba329ab1711e0e83db8c94c836b99b24cad54acae8b17ead1508f6cd6ea576902b7b5b8e4875f314c1e2de03b9700210dfbe6d833854492128a47861fefc0a67c9686eaa16391630a0fd3cf3120178c48bcfa7f3c4aaa044cb1fe13117ae0526bdcbaa8c901c84b86a7fd3c60fe6e25731fa01", 0xc9}], 0x2}, 0x80) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="2e00000038000511d15a80698c63940d0224fc602f6e35530c000200681ec000370600000000000000", 0x29}], 0x1, 0x0, 0x0, 0x39c}, 0x14) 10m15.764658674s ago: executing program 3 (id=2875): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1eaa00000000000079106f501afa2e009500000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x336) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="bffa768bbf817c9a8c4c78d066596c31c56440a0fd758e7dda5edfc8363464d4bfc9186df7d206008f93792bffa12aa0beabcec33f6f811f47509d87875ab967faef0b40013699d3814d3bf52303a24b74fb2fc95db1a04aa06394b868c38a050243a95fb8ae3a548851cc90ca58397f0532ce74d5cb6cd864471d14f00a56283ea0555825116bf6d3f57bf7d45a03a4", 0x90}, {&(0x7f0000000540)="8b22ed0120734507521a6933e0805a876f8e29e84eaa87ad4f7ff33f8165e778c28f5bf33693deab8a8bc171482645934f0c1b7cf7a6fd1f10ab442d73a6bc82b93faf185191eefcf99e48c85a3a7bf2d7f9567848cfca3a3f05153cccfc0c29b39ce15cbb80dcd6dc6e6b5312b9eb4d889bb4197a81c067a1fab18e147e35dc69086fb20ba2b4b44662d7f087a0c23610788f8d0e19013b2cd0e145c96de5cd6e27c2406ea1e7c3fabb11be4c7780f5bbce405b55f127b1378417fb7cffdd6ae927115024f78adb07ec5fbe0137bca3d660c4eb6816", 0xd6}], 0x2}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1d, 0x800, 0x2, &(0x7f0000000080)) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) 10m0.331943672s ago: executing program 32 (id=2875): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1eaa00000000000079106f501afa2e009500000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x336) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="bffa768bbf817c9a8c4c78d066596c31c56440a0fd758e7dda5edfc8363464d4bfc9186df7d206008f93792bffa12aa0beabcec33f6f811f47509d87875ab967faef0b40013699d3814d3bf52303a24b74fb2fc95db1a04aa06394b868c38a050243a95fb8ae3a548851cc90ca58397f0532ce74d5cb6cd864471d14f00a56283ea0555825116bf6d3f57bf7d45a03a4", 0x90}, {&(0x7f0000000540)="8b22ed0120734507521a6933e0805a876f8e29e84eaa87ad4f7ff33f8165e778c28f5bf33693deab8a8bc171482645934f0c1b7cf7a6fd1f10ab442d73a6bc82b93faf185191eefcf99e48c85a3a7bf2d7f9567848cfca3a3f05153cccfc0c29b39ce15cbb80dcd6dc6e6b5312b9eb4d889bb4197a81c067a1fab18e147e35dc69086fb20ba2b4b44662d7f087a0c23610788f8d0e19013b2cd0e145c96de5cd6e27c2406ea1e7c3fabb11be4c7780f5bbce405b55f127b1378417fb7cffdd6ae927115024f78adb07ec5fbe0137bca3d660c4eb6816", 0xd6}], 0x2}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1d, 0x800, 0x2, &(0x7f0000000080)) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) 11.013139168s ago: executing program 4 (id=5432): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="00446916ab", 0xffef}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x7000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2, &(0x7f00000002c0), 0x4) sendmsg$inet(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c6394f90424fc602f1a09000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r8 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r9}, &(0x7f00000000c0), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000180)=ANY=[], 0x0}, 0x94) close(r8) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r7, 0x0, 0x0}, 0x10) 10.616406597s ago: executing program 4 (id=5435): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x10000}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0xd8, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00B\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB="000088"], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000001140)={[{0x2d, 'devices'}]}, 0x9) write$cgroup_devices(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="a1f15aefee7f2376deb4cccc451f79e14459c51c03e390b44767d1ca8f7baa265c46979f42cb39031a59f70eabf059dff29a001aa2d52961647068314c99c4d3b6b1d18a8662414e777f24bdd60452860dba39923664cd4df6e70a45f4edd34ca3d5f7160715502d9e28e7ba77d0321be5f2dbc136f0"], 0xffdd) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x31) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000500)=r2) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001e00)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a118000600014002020a600e41b0000900ac00040211000000160012000a00ff020048035c4c61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb7d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de61fccd40dd6e4edef3d93452a9247c47870ae1d092665c07a81ead0f98a952c795c0e9703920723f9000000008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r10, @ANYRES32=r3, @ANYRESOCT, @ANYBLOB="f84bd55a8a1a95791b429bc5982278d9c149374aa3b4327cb3e5088d13bf6c1c84344d5c800d81f9d9814be140e4", @ANYRES8=r6], 0x31) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8946, &(0x7f0000000080)) 8.310876848s ago: executing program 1 (id=5439): sendmsg$sock(0xffffffffffffffff, 0x0, 0x8800) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x5a}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9a}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.095014028s ago: executing program 1 (id=5444): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x5, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x1a, 0xffffffffffffffee, &(0x7f0000000080)="630b008646dc3f0adf398151d9000000000000000000ea1f0000", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2f) 4.943839681s ago: executing program 4 (id=5446): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c00000015006b03000000d86e6c1d000a117ea6e070d6060000000000004e23250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 4.942892621s ago: executing program 0 (id=5447): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000080)="04000000df000000428b4c6588f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x890c, &(0x7f0000000340)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\xfe\xea\xed\x1e\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x95\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f\x01\x00\x00\x00\x00\x00\x00\x00\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\x11+\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\x8a\x06\x14\xe1\xb7\xbe\xb0F;\x84\x02O\xeb\x9c\x98\xfa\xe1\xdeGy\xc4\x88\x80\xeb\xaey$\xbd:%\xbai\xcf79\x82\x96\x99]\xb7\xee!`x\x81\x14\xb3\xe9\xe5J\x98\x82\xcc_\xac\xb6\xec\xdfA\xdbz\xab\xde\xaa\xc8.\x1b\xbcw\x88\x9b\x05\xcd\xab\xea\x11\xe4\xd0?\xc2\x05\xee,yV\xee\xf8\x82\x8c\x1b\xe9M-\xf1\x04\x82\xf8\xb4t\x92k\xebam\xb69\x89\xec\xc9\xaf\xad-\xa8\x96K7\x05\xf4\f[\xe2\xbbg\x1f\xf4\xaf\\\xa0\x13\xe5\x8eA\xbaB\xa5\xde\x84\xf7\xabrV\xc7\xe9\r@\x85\xfd.\x13U\xfc\x8f4\xb2\xd0\xee|7S\x8e\xe9\x89\xed\xa9VT\x7f\xd2\x8f\x026\xf1J(\b\x15\xca9\xb4;\xf8\x90\x1a\xfc\xd6*O\xb2R\xe1\x81\xba4#cj\xff\n\r:\x94+x\xe3\xa5,\xdc\x8b\xe9-\xe2\xd6\x9f(\xe2o\x00'/1042) 4.865821683s ago: executing program 1 (id=5448): ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000080)="27030200f00f00000600002fb9088965c7297a05a2019e6bafedef4e39ffffffffe1053742e0e4650058f7000000886411001144b6000300b8bf4a31accb", 0x3e}, {&(0x7f0000002500)="4fc9316bdf97a94aa4c01a71f2b55527cb347f01679ab78becd1455755985051a9b55a7c5e6cb0a37cd9c92a4b8e06a53af164e81ae37d251ce1818e9e6973374feaab4d2422070084af233d99a2dd7106672e6520a5ab0801d45a30bc7923756426ed6029cea34be70fd52bfbde2bb1171c48961a58bc64c2dafc47263af31c8d405d712a94a8f88b4e74d1e510c60100010000000000b6d31f118703445f42717726b721981296ae4348b0767e6b67335a9da9d3d4936b861ea72bb996e01bb88357f9bed242d7c1bd6b09940e23a2f9903cd9925d22f8112f9741e5658b5e62a4b23a292c858fcb8362", 0xeb}, {&(0x7f00000001c0)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b7880d6ce92860ccd4f7d6a5f4ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426dd3cc9eddeab744f710419fde96d", 0x75}, {&(0x7f0000000880)="11b252367e48683813784895bd82eaff9d7b562ec0b21b423bbcef1578e573bf0bc0ea8e45d3738500d183b6495636baa5cb837a3d5ad6af41045fec0dc056db82ad3342f6b20b008157daa88f153fb3c51fc4ff55b965c58a11bb75ca63536f2816327da7d51f66b76ed7a55565570334842f0b54562faa5335cc88b6fddfe5d3bd04807632a2138de7747d38517f335f7ce89fbff32e93542e47ce2aae8c3dd6edcffb", 0xa4}, {0x0}, {&(0x7f0000002600)}], 0x6}, 0x60404) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x8d2142, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x0, @perf_config_ext, 0x5601, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000002c0)=r5, 0x12) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x5, 0x4, 0x6d, 0x0, 0x0, 0x64842, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x147b8, 0xfffffffffffffffc, 0x0, 0x0, 0x3ffff, 0x7}, r5, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x378f}, 0x1, 0xfffffffffffffffe, 0x4, 0x6, 0xfffffffffffffffe, 0x2080000a, 0xfffc, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0xd) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x37}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.663278018s ago: executing program 0 (id=5449): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x5, 0x4, 0x8, 0x0, 0x74e7, 0x88000, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5bc, 0x4, @perf_bp, 0x2, 0x7, 0x9, 0x9, 0x1, 0x3, 0x6, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r0, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 4.662751287s ago: executing program 4 (id=5450): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x76}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000", @ANYRESDEC], 0xffdd) 4.352150524s ago: executing program 5 (id=5452): ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000080)="27030200f00f00000600002fb9088965c7297a05a2019e6bafedef4e39ffffffffe1053742e0e4650058f7000000886411001144b6000300b8bf4a31accb", 0x3e}, {&(0x7f0000002500)="4fc9316bdf97a94aa4c01a71f2b55527cb347f01679ab78becd1455755985051a9b55a7c5e6cb0a37cd9c92a4b8e06a53af164e81ae37d251ce1818e9e6973374feaab4d2422070084af233d99a2dd7106672e6520a5ab0801d45a30bc7923756426ed6029cea34be70fd52bfbde2bb1171c48961a58bc64c2dafc47263af31c8d405d712a94a8f88b4e74d1e510c60100010000000000b6d31f118703445f42717726b721981296ae4348b0767e6b67335a9da9d3d4936b861ea72bb996e01bb88357f9bed242d7c1bd6b09940e23a2f9903cd9925d22f8112f9741e5658b5e62a4b23a292c858fcb8362", 0xeb}, {&(0x7f00000001c0)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b7880d6ce92860ccd4f7d6a5f4ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426dd3cc9eddeab744f710419fde96d", 0x75}, {&(0x7f0000000880)="11b252367e48683813784895bd82eaff9d7b562ec0b21b423bbcef1578e573bf0bc0ea8e45d3738500d183b6495636baa5cb837a3d5ad6af41045fec0dc056db82ad3342f6b20b008157daa88f153fb3c51fc4ff55b965c58a11bb75ca63536f2816327da7d51f66b76ed7a55565570334842f0b54562faa5335cc88b6fddfe5d3bd04807632a2138de7747d38517f335f7ce89fbff32e93542e47ce2aae8c3dd6edcffb", 0xa4}, {0x0}, {&(0x7f0000002600)}], 0x6}, 0x60404) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x8d2142, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x0, @perf_config_ext, 0x5601, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) r4 = getpid() write$cgroup_pid(r3, &(0x7f00000002c0)=r4, 0x12) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x5, 0x4, 0x6d, 0x0, 0x0, 0x64842, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x147b8, 0xfffffffffffffffc, 0x0, 0x0, 0x3ffff, 0x7}, r4, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x378f}, 0x1, 0xfffffffffffffffe, 0x4, 0x6, 0xfffffffffffffffe, 0x2080000a, 0xfffc, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0xd) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x48084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x37}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.893956274s ago: executing program 2 (id=5453): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x4d, 0x0, 0xffa4) 3.845961515s ago: executing program 5 (id=5454): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x1a, 0xffffffffffffffee, &(0x7f0000000080)="630b008646dc3f0adf398151d9000000000000000000ea1f0000", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2f) 3.63176619s ago: executing program 5 (id=5455): sendmsg$sock(0xffffffffffffffff, 0x0, 0x8800) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x5a}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9a}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.63117546s ago: executing program 2 (id=5456): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c042, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)="e8691a913b", 0x1718}, {0x0, 0x2900}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x38, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x38}, 0x0) write$cgroup_devices(r3, &(0x7f0000000580)=ANY=[@ANYRES16=r4, @ANYRES32, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES64=r2], 0xffffffffffffff1b) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x2300, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) recvmsg$kcm(r5, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x100) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.574218631s ago: executing program 1 (id=5457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x46a480, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x8028, 0x25, 0x6a, 0x7ffff7fc}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb53}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e000000380005ffd25a80698c63940d0300fc602f0000000b000200001ec0003715de60cfd9a1af05d81d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r5, 0x0, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x17, &(0x7f0000000200)=r6, 0x21) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r7, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e00", 0x22}], 0x1}, 0x0) 3.497788853s ago: executing program 0 (id=5458): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x5, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x1a, 0xffffffffffffffee, &(0x7f0000000080)="630b008646dc3f0adf398151d9000000000000000000ea1f0000", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2f) 1.830124489s ago: executing program 1 (id=5459): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000080)="04000000df000000428b4c6588f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x890c, &(0x7f0000000340)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\xfe\xea\xed\x1e\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x95\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f\x01\x00\x00\x00\x00\x00\x00\x00\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\x11+\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\x8a\x06\x14\xe1\xb7\xbe\xb0F;\x84\x02O\xeb\x9c\x98\xfa\xe1\xdeGy\xc4\x88\x80\xeb\xaey$\xbd:%\xbai\xcf79\x82\x96\x99]\xb7\xee!`x\x81\x14\xb3\xe9\xe5J\x98\x82\xcc_\xac\xb6\xec\xdfA\xdbz\xab\xde\xaa\xc8.\x1b\xbcw\x88\x9b\x05\xcd\xab\xea\x11\xe4\xd0?\xc2\x05\xee,yV\xee\xf8\x82\x8c\x1b\xe9M-\xf1\x04\x82\xf8\xb4t\x92k\xebam\xb69\x89\xec\xc9\xaf\xad-\xa8\x96K7\x05\xf4\f[\xe2\xbbg\x1f\xf4\xaf\\\xa0\x13\xe5\x8eA\xbaB\xa5\xde\x84\xf7\xabrV\xc7\xe9\r@\x85\xfd.\x13U\xfc\x8f4\xb2\xd0\xee|7S\x8e\xe9\x89\xed\xa9VT\x7f\xd2\x8f\x026\xf1J(\b\x15\xca9\xb4;\xf8\x90\x1a\xfc\xd6*O\xb2R\xe1\x81\xba4#cj\xff\n\r:\x94+x\xe3\xa5,\xdc\x8b\xe9-\xe2\xd6\x9f(\xe2o\x00'/1042) 1.829083s ago: executing program 0 (id=5469): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x5a, 0x753f08fd}, 0x881, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1c, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfefffffffffffffe}, 0x10d002, 0xac5a, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x19, &(0x7f0000000000), 0x8) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x0, 0x0, 0x0, 0x74000000}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[], 0x50) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000085000000070000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x7, 0x0, &(0x7f00000000c0)="61df712bc884fe", 0x0, 0x739d, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x7}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000004000000000047dc770b7b794fc100"/36], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 1.8203605s ago: executing program 2 (id=5460): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0xbb8}, 0x0) 1.80432418s ago: executing program 5 (id=5461): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, 0x0, 0x40000) 1.77310139s ago: executing program 4 (id=5462): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="00446916ab", 0xffef}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x7000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab18"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2, &(0x7f00000002c0), 0x4) sendmsg$inet(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c6394f90424fc602f1a09000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r8 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r9}, &(0x7f00000000c0), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000180)=ANY=[], 0x0}, 0x94) close(r8) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r7, 0x0, 0x0}, 0x10) 1.634728144s ago: executing program 1 (id=5463): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xe2aa, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x1, {0xa, 0x4e20, 0x7, @local, 0xf}}}, 0x80, 0x0}, 0x2004b761) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18020000010000000000000000000000c31d0000f100000095"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x82, &(0x7f0000000240)=""/130, 0x0, 0x9}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb6, 0xb6, 0x3, [@datasec={0xe, 0x7, 0x0, 0xf, 0x2, [{0x2, 0x6, 0x9}, {0x5, 0x5, 0x4}, {0x1, 0xfe6, 0xe688}, {0x4, 0x4, 0x80000001}, {0x2, 0x0, 0x8}, {0x4, 0x81, 0x1}, {0x1, 0x9f94, 0x7}], "1db7"}, @ptr={0x10, 0x0, 0x0, 0x2, 0x2}, @enum64={0x8, 0x4, 0x0, 0x13, 0x0, 0x2, [{0x6, 0x9, 0x54fd}, {0x7, 0xd, 0x2}, {0x6, 0x3, 0x8}, {0x1, 0x3, 0xa}]}, @ptr={0x8, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x2e]}}, &(0x7f0000000a00)=""/34, 0xd3, 0x22, 0x1, 0x6be, 0x10000, @value=r0}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="240000002d006bcd9e3f17aa04001b0000010000ffffffff000000000000ff7f00000002", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.467906317s ago: executing program 5 (id=5464): socket$kcm(0x2, 0x5, 0x84) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000d00000000000000000400001800000000000000100100000100"/48], 0x30}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r0], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x70) 1.467668177s ago: executing program 2 (id=5465): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x1a, 0xffffffffffffffee, &(0x7f0000000080)="630b008646dc3f0adf398151d9000000000000000000ea1f0000", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2f) 1.187099173s ago: executing program 2 (id=5466): ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000080)="27030200f00f00000600002fb9088965c7297a05a2019e6bafedef4e39ffffffffe1053742e0e4650058f7000000886411001144b6000300b8bf4a31accb", 0x3e}, {&(0x7f0000002500)="4fc9316bdf97a94aa4c01a71f2b55527cb347f01679ab78becd1455755985051a9b55a7c5e6cb0a37cd9c92a4b8e06a53af164e81ae37d251ce1818e9e6973374feaab4d2422070084af233d99a2dd7106672e6520a5ab0801d45a30bc7923756426ed6029cea34be70fd52bfbde2bb1171c48961a58bc64c2dafc47263af31c8d405d712a94a8f88b4e74d1e510c60100010000000000b6d31f118703445f42717726b721981296ae4348b0767e6b67335a9da9d3d4936b861ea72bb996e01bb88357f9bed242d7c1bd6b09940e23a2f9903cd9925d22f8112f9741e5658b5e62a4b23a292c858fcb8362", 0xeb}, {&(0x7f00000001c0)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b7880d6ce92860ccd4f7d6a5f4ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426dd3cc9eddeab744f710419fde96d", 0x75}, {&(0x7f0000000880)="11b252367e48683813784895bd82eaff9d7b562ec0b21b423bbcef1578e573bf0bc0ea8e45d3738500d183b6495636baa5cb837a3d5ad6af41045fec0dc056db82ad3342f6b20b008157daa88f153fb3c51fc4ff55b965c58a11bb75ca63536f2816327da7d51f66b76ed7a55565570334842f0b54562faa5335cc88b6fddfe5d3bd04807632a2138de7747d38517f335f7ce89fbff32e93542e47ce2aae8c3dd6edcffb", 0xa4}, {0x0}, {&(0x7f0000002600)}], 0x6}, 0x60404) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x8d2142, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x0, @perf_config_ext, 0x5601, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) r4 = getpid() write$cgroup_pid(r3, &(0x7f00000002c0)=r4, 0x12) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x5, 0x4, 0x6d, 0x0, 0x0, 0x64842, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x147b8, 0xfffffffffffffffc, 0x0, 0x0, 0x3ffff, 0x7}, r4, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x378f}, 0x1, 0xfffffffffffffffe, 0x4, 0x6, 0xfffffffffffffffe, 0x2080000a, 0xfffc, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0xd) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x48084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x37}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.182120503s ago: executing program 4 (id=5467): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x8160, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x1}, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff3b, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xe7e}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x139721279aaead8c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x6, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, 0x0) socketpair(0x3, 0x2, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r5, &(0x7f0000001ec0)=ANY=[@ANYBLOB="131200001200"], 0xfe33) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x8f00) syz_clone(0x80000800, 0x0, 0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0)="9c6b0fc64ee952") r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20023) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r4, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1a, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0x0, 0x0, &(0x7f0000000100), 0x8, 0xea, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) 1.035972577s ago: executing program 5 (id=5468): ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000080)="27030200f00f00000600002fb9088965c7297a05a2019e6bafedef4e39ffffffffe1053742e0e4650058f7000000886411001144b6000300b8bf4a31accb", 0x3e}, {&(0x7f0000002500)="4fc9316bdf97a94aa4c01a71f2b55527cb347f01679ab78becd1455755985051a9b55a7c5e6cb0a37cd9c92a4b8e06a53af164e81ae37d251ce1818e9e6973374feaab4d2422070084af233d99a2dd7106672e6520a5ab0801d45a30bc7923756426ed6029cea34be70fd52bfbde2bb1171c48961a58bc64c2dafc47263af31c8d405d712a94a8f88b4e74d1e510c60100010000000000b6d31f118703445f42717726b721981296ae4348b0767e6b67335a9da9d3d4936b861ea72bb996e01bb88357f9bed242d7c1bd6b09940e23a2f9903cd9925d22f8112f9741e5658b5e62a4b23a292c858fcb8362", 0xeb}, {&(0x7f00000001c0)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b7880d6ce92860ccd4f7d6a5f4ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426dd3cc9eddeab744f710419fde96d", 0x75}, {&(0x7f0000000880)="11b252367e48683813784895bd82eaff9d7b562ec0b21b423bbcef1578e573bf0bc0ea8e45d3738500d183b6495636baa5cb837a3d5ad6af41045fec0dc056db82ad3342f6b20b008157daa88f153fb3c51fc4ff55b965c58a11bb75ca63536f2816327da7d51f66b76ed7a55565570334842f0b54562faa5335cc88b6fddfe5d3bd04807632a2138de7747d38517f335f7ce89fbff32e93542e47ce2aae8c3dd6edcffb", 0xa4}, {0x0}, {&(0x7f0000002600)}], 0x6}, 0x60404) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x8d2142, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x0, @perf_config_ext, 0x5601, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000002c0)=r5, 0x12) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x5, 0x4, 0x6d, 0x0, 0x0, 0x64842, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x147b8, 0xfffffffffffffffc, 0x0, 0x0, 0x3ffff, 0x7}, r5, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x378f}, 0x1, 0xfffffffffffffffe, 0x4, 0x6, 0xfffffffffffffffe, 0x2080000a, 0xfffc, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0xd) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x37}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.034938947s ago: executing program 0 (id=5479): ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000080)="27030200f00f00000600002fb9088965c7297a05a2019e6bafedef4e39ffffffffe1053742e0e4650058f7000000886411001144b6000300b8bf4a31accb", 0x3e}, {&(0x7f0000002500)="4fc9316bdf97a94aa4c01a71f2b55527cb347f01679ab78becd1455755985051a9b55a7c5e6cb0a37cd9c92a4b8e06a53af164e81ae37d251ce1818e9e6973374feaab4d2422070084af233d99a2dd7106672e6520a5ab0801d45a30bc7923756426ed6029cea34be70fd52bfbde2bb1171c48961a58bc64c2dafc47263af31c8d405d712a94a8f88b4e74d1e510c60100010000000000b6d31f118703445f42717726b721981296ae4348b0767e6b67335a9da9d3d4936b861ea72bb996e01bb88357f9bed242d7c1bd6b09940e23a2f9903cd9925d22f8112f9741e5658b5e62a4b23a292c858fcb8362", 0xeb}, {&(0x7f00000001c0)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b7880d6ce92860ccd4f7d6a5f4ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426dd3cc9eddeab744f710419fde96d", 0x75}, {&(0x7f0000000880)="11b252367e48683813784895bd82eaff9d7b562ec0b21b423bbcef1578e573bf0bc0ea8e45d3738500d183b6495636baa5cb837a3d5ad6af41045fec0dc056db82ad3342f6b20b008157daa88f153fb3c51fc4ff55b965c58a11bb75ca63536f2816327da7d51f66b76ed7a55565570334842f0b54562faa5335cc88b6fddfe5d3bd04807632a2138de7747d38517f335f7ce89fbff32e93542e47ce2aae8c3dd6edcffb", 0xa4}, {0x0}, {&(0x7f0000002600)}], 0x6}, 0x60404) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 318.539632ms ago: executing program 0 (id=5470): socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000d00000000000000000400001800000000000000100100000100"/48], 0x30}, 0x800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, 0x0, &(0x7f00000001c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x70) 0s ago: executing program 2 (id=5471): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000002100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000000) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000ffff00000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000"], 0x68}, 0x0) kernel console output (not intermixed with test programs): 90887][T20734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1535.210562][T20734] RSP: 002b:00007ff0736fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1535.219042][T20734] RAX: ffffffffffffffda RBX: 00007ff072a25fa0 RCX: 00007ff07279de59 [ 1535.227085][T20734] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1535.235097][T20734] RBP: 00007ff0736fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1535.243140][T20734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1535.251159][T20734] R13: 00007ff072a26038 R14: 00007ff072a25fa0 R15: 00007ffe378ae7a8 [ 1535.259193][T20734] [ 1535.300288][T20734] netlink: 'syz.5.4060': attribute type 28 has an invalid length. [ 1535.308351][T20734] netlink: 'syz.5.4060': attribute type 3 has an invalid length. [ 1535.316560][T20734] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4060'. [ 1535.324791][T20726] device bridge_slave_1 left promiscuous mode [ 1535.457552][T20726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.674004][T20726] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1536.787058][T20785] netlink: 'syz.0.4078': attribute type 11 has an invalid length. [ 1536.823842][T20784] delete_channel: no stack [ 1537.122895][T20795] netlink: 'syz.5.4081': attribute type 29 has an invalid length. [ 1537.166526][T20795] netlink: 'syz.5.4081': attribute type 3 has an invalid length. [ 1537.186528][T20802] netlink: 'syz.2.4083': attribute type 10 has an invalid length. [ 1537.196467][T20795] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4081'. [ 1537.217635][T20802] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4083'. [ 1537.257782][T20802] device wg2 entered promiscuous mode [ 1537.269128][T20802] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1537.716199][T20818] netlink: 'syz.0.4088': attribute type 27 has an invalid length. [ 1537.752220][T20818] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4088'. [ 1537.776056][T20818] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1537.907125][T20827] netlink: 64927 bytes leftover after parsing attributes in process `syz.2.4093'. [ 1538.150373][T20833] netlink: 'syz.1.4096': attribute type 3 has an invalid length. [ 1538.170674][T20833] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4096'. [ 1538.904613][T20867] FAULT_INJECTION: forcing a failure. [ 1538.904613][T20867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1538.934912][T20868] netlink: 'syz.2.4105': attribute type 27 has an invalid length. [ 1538.943616][T20867] CPU: 1 PID: 20867 Comm: syz.4.4108 Not tainted syzkaller #0 [ 1538.951133][T20867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1538.961217][T20867] Call Trace: [ 1538.964525][T20867] [ 1538.967507][T20867] dump_stack_lvl+0x188/0x24e [ 1538.972264][T20867] ? show_regs_print_info+0x12/0x12 [ 1538.977520][T20867] ? load_image+0x410/0x410 [ 1538.982085][T20867] ? __lock_acquire+0x7c40/0x7c40 [ 1538.987172][T20867] should_fail_ex+0x390/0x4c0 [ 1538.991923][T20867] _copy_from_user+0x2c/0x170 [ 1538.996652][T20867] kstrtouint_from_user+0xda/0x170 [ 1539.001814][T20867] ? kstrtol_from_user+0x190/0x190 [ 1539.006990][T20867] proc_fail_nth_write+0x8b/0x200 [ 1539.012045][T20867] ? proc_fail_nth_read+0x220/0x220 [ 1539.017264][T20867] ? common_file_perm+0x171/0x1c0 [ 1539.022313][T20867] ? proc_fail_nth_read+0x220/0x220 [ 1539.027570][T20867] vfs_write+0x2dc/0x9a0 [ 1539.031869][T20867] ? file_end_write+0x250/0x250 [ 1539.036767][T20867] ? __fget_files+0x28/0x460 [ 1539.041401][T20867] ? __fget_files+0x3fc/0x460 [ 1539.046116][T20867] ? __fdget_pos+0x2ae/0x360 [ 1539.050731][T20867] ? ksys_write+0x70/0x260 [ 1539.055188][T20867] ksys_write+0x14d/0x260 [ 1539.059553][T20867] ? __ia32_sys_read+0x80/0x80 [ 1539.064344][T20867] ? lockdep_hardirqs_on+0x94/0x140 [ 1539.069569][T20867] do_syscall_64+0x4c/0xa0 [ 1539.074008][T20867] ? clear_bhb_loop+0x60/0xb0 [ 1539.078725][T20867] ? clear_bhb_loop+0x60/0xb0 [ 1539.083432][T20867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1539.089345][T20867] RIP: 0033:0x7f373d35e68e [ 1539.093793][T20867] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1539.113446][T20867] RSP: 002b:00007f373e25cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1539.121885][T20867] RAX: ffffffffffffffda RBX: 00007f373e25d6c0 RCX: 00007f373d35e68e [ 1539.129893][T20867] RDX: 0000000000000001 RSI: 00007f373e25d0a0 RDI: 0000000000000004 [ 1539.137888][T20867] RBP: 00007f373e25d090 R08: 0000000000000000 R09: 0000000000000000 [ 1539.145909][T20867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1539.153908][T20867] R13: 00007f373d626038 R14: 00007f373d625fa0 R15: 00007ffc3a932a78 [ 1539.161914][T20867] [ 1539.197684][T20868] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4105'. [ 1539.207785][T20868] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1539.277061][T20870] device syzkaller0 entered promiscuous mode [ 1539.292063][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1539.389330][T20877] syz.0.4111 (20877) used obsolete PPPIOCDETACH ioctl [ 1539.550275][T20883] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4113'. [ 1540.083141][T20902] device pim6reg1 entered promiscuous mode [ 1540.665579][T20914] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4123'. [ 1540.822283][T20930] netlink: 'syz.1.4126': attribute type 1 has an invalid length. [ 1540.849373][T20930] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4126'. [ 1540.931560][T20923] device syzkaller0 entered promiscuous mode [ 1541.090665][T20938] netlink: 'syz.1.4129': attribute type 10 has an invalid length. [ 1542.044491][T20954] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.4136'. [ 1542.283754][T20956] netlink: 'syz.2.4137': attribute type 29 has an invalid length. [ 1543.265870][T20956] netlink: 'syz.2.4137': attribute type 29 has an invalid length. [ 1543.421869][T20959] netlink: 'syz.1.4139': attribute type 1 has an invalid length. [ 1543.430078][T20959] netlink: 'syz.1.4139': attribute type 3 has an invalid length. [ 1543.464656][T20959] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4139'. [ 1543.542394][T20962] device syzkaller0 entered promiscuous mode [ 1543.557481][T20966] netlink: 64927 bytes leftover after parsing attributes in process `syz.0.4142'. [ 1543.990615][T20982] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4147'. [ 1545.641796][T20979] netlink: 'syz.4.4144': attribute type 10 has an invalid length. [ 1545.919884][T21001] device syzkaller0 entered promiscuous mode [ 1546.039822][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.046309][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.227233][T21019] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.4155'. [ 1546.565505][T21030] netlink: 'syz.2.4161': attribute type 29 has an invalid length. [ 1546.673545][T21032] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.4160'. [ 1548.129033][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 1548.499375][T21021] netlink: 64927 bytes leftover after parsing attributes in process `syz.4.4158'. [ 1548.508884][T21030] netlink: 'syz.2.4161': attribute type 29 has an invalid length. [ 1548.517106][T21036] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4162'. [ 1548.829811][T21047] device syzkaller0 entered promiscuous mode [ 1548.844611][T21045] netlink: 'syz.0.4166': attribute type 10 has an invalid length. [ 1548.954564][T21054] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4167'. [ 1551.024945][T21063] netlink: 175 bytes leftover after parsing attributes in process `syz.0.4172'. [ 1551.043321][T21054] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1551.051540][T21054] CPU: 1 PID: 21054 Comm: syz.4.4167 Not tainted syzkaller #0 [ 1551.059047][T21054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1551.069175][T21054] Call Trace: [ 1551.072499][T21054] [ 1551.075464][T21054] dump_stack_lvl+0x188/0x24e [ 1551.080208][T21054] ? show_regs_print_info+0x12/0x12 [ 1551.085458][T21054] ? load_image+0x410/0x410 [ 1551.090025][T21054] sysfs_warn_dup+0x8a/0xa0 [ 1551.094586][T21054] sysfs_do_create_link_sd+0xc0/0x110 [ 1551.100025][T21054] device_add+0x83b/0x1050 [ 1551.104519][T21054] wiphy_register+0x1d8b/0x2aa0 [ 1551.109446][T21054] ? cfg80211_event_work+0x40/0x40 [ 1551.114602][T21054] ? minstrel_ht_alloc+0x894/0xa20 [ 1551.119766][T21054] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1551.125897][T21054] ieee80211_register_hw+0x2d48/0x39f0 [ 1551.131433][T21054] ? ieee80211_register_hw+0xf61/0x39f0 [ 1551.137039][T21054] ? ieee80211_register_hw+0xf61/0x39f0 [ 1551.142688][T21054] ? ieee80211_tasklet_handler+0x20/0x20 [ 1551.148370][T21054] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1551.154319][T21054] ? __debug_object_init+0xed/0x440 [ 1551.159583][T21054] ? memset+0x1e/0x40 [ 1551.163617][T21054] ? __hrtimer_init+0x189/0x270 [ 1551.168520][T21054] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1551.174296][T21054] ? memcpy+0x3c/0x60 [ 1551.178323][T21054] hwsim_new_radio_nl+0xab7/0xc90 [ 1551.183482][T21054] genl_family_rcv_msg_doit+0x22f/0x350 [ 1551.189067][T21054] ? end_current_label_crit_section+0x170/0x170 [ 1551.195346][T21054] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1551.201288][T21054] ? bpf_lsm_capable+0x5/0x10 [ 1551.206004][T21054] ? security_capable+0x85/0xb0 [ 1551.210982][T21054] genl_rcv_msg+0x601/0x790 [ 1551.215529][T21054] ? genl_bind+0x360/0x360 [ 1551.219975][T21054] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1551.226349][T21054] netlink_rcv_skb+0x1ef/0x440 [ 1551.231153][T21054] ? genl_bind+0x360/0x360 [ 1551.235603][T21054] ? netlink_ack+0x1160/0x1160 [ 1551.240407][T21054] ? down_read+0x1a8/0x2d0 [ 1551.244858][T21054] genl_rcv+0x24/0x40 [ 1551.248902][T21054] netlink_unicast+0x7ad/0x920 [ 1551.253704][T21054] netlink_sendmsg+0x8ad/0xbd0 [ 1551.258510][T21054] ? netlink_getsockopt+0x550/0x550 [ 1551.263749][T21054] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1551.269358][T21054] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1551.274695][T21054] ? security_socket_sendmsg+0x7c/0xa0 [ 1551.280183][T21054] ? netlink_getsockopt+0x550/0x550 [ 1551.285419][T21054] ____sys_sendmsg+0x5ed/0x9a0 [ 1551.290220][T21054] ? __sys_sendmsg_sock+0x30/0x30 [ 1551.295275][T21054] ? __import_iovec+0x306/0x510 [ 1551.300181][T21054] ? import_iovec+0x6f/0xa0 [ 1551.304734][T21054] ___sys_sendmsg+0x2a2/0x360 [ 1551.309461][T21054] ? __sys_sendmsg+0x2a0/0x2a0 [ 1551.314418][T21054] __se_sys_sendmsg+0x1c3/0x2b0 [ 1551.319295][T21054] ? ct_nmi_exit+0x145/0x1c0 [ 1551.324082][T21054] ? __x64_sys_sendmsg+0x80/0x80 [ 1551.329058][T21054] ? lockdep_hardirqs_on+0x94/0x140 [ 1551.334291][T21054] do_syscall_64+0x4c/0xa0 [ 1551.338736][T21054] ? clear_bhb_loop+0x60/0xb0 [ 1551.343441][T21054] ? clear_bhb_loop+0x60/0xb0 [ 1551.348143][T21054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1551.354084][T21054] RIP: 0033:0x7f373d39de59 [ 1551.358526][T21054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1551.378160][T21054] RSP: 002b:00007f373e21b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1551.386604][T21054] RAX: ffffffffffffffda RBX: 00007f373d626180 RCX: 00007f373d39de59 [ 1551.394614][T21054] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1551.402609][T21054] RBP: 00007f373d433e6f R08: 0000000000000000 R09: 0000000000000000 [ 1551.410602][T21054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1551.418619][T21054] R13: 00007f373d626218 R14: 00007f373d626180 R15: 00007ffc3a932a78 [ 1551.426651][T21054] [ 1551.502440][T21061] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4171'. [ 1551.538129][T21061] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 1551.705811][T21072] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.4174'. [ 1551.774410][T21078] netlink: 'syz.1.4177': attribute type 29 has an invalid length. [ 1551.817257][ T4287] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1551.818718][T21078] netlink: 'syz.1.4177': attribute type 29 has an invalid length. [ 1551.981437][T21078] netlink: 'syz.1.4177': attribute type 29 has an invalid length. [ 1552.087216][T21087] netlink: 'syz.2.4179': attribute type 10 has an invalid length. [ 1552.128612][T21087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.146866][T21087] device bridge_slave_1 left promiscuous mode [ 1552.154302][T21087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.180581][T21087] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1552.209082][T21083] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4180'. [ 1552.905290][T21088] netlink: 'syz.4.4181': attribute type 10 has an invalid length. [ 1553.107324][T21103] device syzkaller0 entered promiscuous mode [ 1553.273485][T21113] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.4188'. [ 1553.353575][ T4287] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1553.524344][T21122] netlink: 'syz.5.4192': attribute type 29 has an invalid length. [ 1553.540106][T21123] netlink: 'syz.0.4193': attribute type 29 has an invalid length. [ 1554.376498][T21127] netlink: 'syz.1.4194': attribute type 29 has an invalid length. [ 1555.314676][T21123] netlink: 'syz.0.4193': attribute type 29 has an invalid length. [ 1555.324990][T21122] netlink: 'syz.5.4192': attribute type 29 has an invalid length. [ 1555.512976][T21132] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.4195'. [ 1555.569007][T21135] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4196'. [ 1555.626391][T21141] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4199'. [ 1556.067770][ T4287] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1556.180560][T21155] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4206'. [ 1556.232055][T21152] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4204'. [ 1556.461848][T21166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4209'. [ 1556.621340][T21168] device syzkaller0 entered promiscuous mode [ 1556.841864][T21172] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.4211'. [ 1560.031927][T21202] validate_nla: 3 callbacks suppressed [ 1560.031944][T21202] netlink: 'syz.0.4218': attribute type 10 has an invalid length. [ 1560.054111][T21202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4218'. [ 1560.076406][T21193] device syzkaller0 entered promiscuous mode [ 1560.104121][T21197] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4220'. [ 1560.130730][T21202] netlink: 'syz.0.4218': attribute type 10 has an invalid length. [ 1560.144175][T21202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4218'. [ 1560.553919][T21210] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4224'. [ 1563.129802][T21208] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4223'. [ 1565.743430][T21218] device syzkaller0 entered promiscuous mode [ 1565.898358][T21240] device syzkaller0 entered promiscuous mode [ 1569.269594][T21251] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4231'. [ 1569.278770][T21251] device hsr_slave_0 left promiscuous mode [ 1569.285182][T21251] device hsr_slave_1 left promiscuous mode [ 1569.629967][T21271] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.4237'. [ 1570.472530][T21299] device syzkaller0 entered promiscuous mode [ 1570.614732][T21307] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4249'. [ 1573.189450][T21331] device virt_wifi0 entered promiscuous mode [ 1573.583448][T21352] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4259'. [ 1573.619353][T21352] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1573.661173][T21352] CPU: 0 PID: 21352 Comm: syz.4.4259 Not tainted syzkaller #0 [ 1573.668737][T21352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1573.678851][T21352] Call Trace: [ 1573.682172][T21352] [ 1573.685140][T21352] dump_stack_lvl+0x188/0x24e [ 1573.689907][T21352] ? show_regs_print_info+0x12/0x12 [ 1573.695143][T21352] ? load_image+0x410/0x410 [ 1573.699708][T21352] sysfs_warn_dup+0x8a/0xa0 [ 1573.704245][T21352] sysfs_do_create_link_sd+0xc0/0x110 [ 1573.709654][T21352] device_add+0x83b/0x1050 [ 1573.714108][T21352] wiphy_register+0x1d8b/0x2aa0 [ 1573.719033][T21352] ? cfg80211_event_work+0x40/0x40 [ 1573.724176][T21352] ? minstrel_ht_alloc+0x894/0xa20 [ 1573.729331][T21352] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1573.735430][T21352] ieee80211_register_hw+0x2d48/0x39f0 [ 1573.740939][T21352] ? ieee80211_register_hw+0xf61/0x39f0 [ 1573.746541][T21352] ? ieee80211_register_hw+0xf61/0x39f0 [ 1573.752122][T21352] ? ieee80211_tasklet_handler+0x20/0x20 [ 1573.757804][T21352] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1573.763749][T21352] ? __debug_object_init+0xed/0x440 [ 1573.768994][T21352] ? memset+0x1e/0x40 [ 1573.773002][T21352] ? __hrtimer_init+0x189/0x270 [ 1573.777887][T21352] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1573.783649][T21352] ? memcpy+0x3c/0x60 [ 1573.787665][T21352] hwsim_new_radio_nl+0xab7/0xc90 [ 1573.792745][T21352] genl_family_rcv_msg_doit+0x22f/0x350 [ 1573.798326][T21352] ? end_current_label_crit_section+0x170/0x170 [ 1573.804606][T21352] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1573.810556][T21352] ? bpf_lsm_capable+0x5/0x10 [ 1573.815294][T21352] ? security_capable+0x85/0xb0 [ 1573.820197][T21352] genl_rcv_msg+0x601/0x790 [ 1573.824756][T21352] ? genl_bind+0x360/0x360 [ 1573.829210][T21352] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1573.835591][T21352] netlink_rcv_skb+0x1ef/0x440 [ 1573.840393][T21352] ? genl_bind+0x360/0x360 [ 1573.844846][T21352] ? netlink_ack+0x1160/0x1160 [ 1573.849662][T21352] ? down_read+0x1a8/0x2d0 [ 1573.854112][T21352] genl_rcv+0x24/0x40 [ 1573.858130][T21352] netlink_unicast+0x7ad/0x920 [ 1573.862951][T21352] netlink_sendmsg+0x8ad/0xbd0 [ 1573.867757][T21352] ? netlink_getsockopt+0x550/0x550 [ 1573.872990][T21352] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1573.878587][T21352] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1573.883905][T21352] ? security_socket_sendmsg+0x7c/0xa0 [ 1573.889396][T21352] ? netlink_getsockopt+0x550/0x550 [ 1573.894630][T21352] ____sys_sendmsg+0x5ed/0x9a0 [ 1573.899435][T21352] ? __sys_sendmsg_sock+0x30/0x30 [ 1573.904491][T21352] ? __import_iovec+0x306/0x510 [ 1573.909385][T21352] ? import_iovec+0x6f/0xa0 [ 1573.913933][T21352] ___sys_sendmsg+0x2a2/0x360 [ 1573.918649][T21352] ? __sys_sendmsg+0x2a0/0x2a0 [ 1573.923486][T21352] __se_sys_sendmsg+0x1c3/0x2b0 [ 1573.928369][T21352] ? __x64_sys_sendmsg+0x80/0x80 [ 1573.933352][T21352] ? lockdep_hardirqs_on+0x94/0x140 [ 1573.938624][T21352] do_syscall_64+0x4c/0xa0 [ 1573.943096][T21352] ? clear_bhb_loop+0x60/0xb0 [ 1573.947806][T21352] ? clear_bhb_loop+0x60/0xb0 [ 1573.952518][T21352] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1573.958442][T21352] RIP: 0033:0x7f373d39de59 [ 1573.962884][T21352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1573.982515][T21352] RSP: 002b:00007f373e1fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1573.990959][T21352] RAX: ffffffffffffffda RBX: 00007f373d626270 RCX: 00007f373d39de59 [ 1573.998958][T21352] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1574.006973][T21352] RBP: 00007f373d433e6f R08: 0000000000000000 R09: 0000000000000000 [ 1574.014971][T21352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1574.022965][T21352] R13: 00007f373d626308 R14: 00007f373d626270 R15: 00007ffc3a932a78 [ 1574.030979][T21352] [ 1574.380455][T21372] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4267'. [ 1574.399781][T21370] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4267'. [ 1574.770111][T21376] FAULT_INJECTION: forcing a failure. [ 1574.770111][T21376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1574.818193][T21376] CPU: 0 PID: 21376 Comm: syz.1.4268 Not tainted syzkaller #0 [ 1574.825716][T21376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1574.835807][T21376] Call Trace: [ 1574.839111][T21376] [ 1574.842068][T21376] dump_stack_lvl+0x188/0x24e [ 1574.846790][T21376] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1574.853073][T21376] ? show_regs_print_info+0x12/0x12 [ 1574.858307][T21376] ? load_image+0x410/0x410 [ 1574.862844][T21376] should_fail_ex+0x390/0x4c0 [ 1574.867555][T21376] _copy_to_user+0x2c/0x130 [ 1574.872106][T21376] simple_read_from_buffer+0xe3/0x150 [ 1574.877521][T21376] proc_fail_nth_read+0x1a6/0x220 [ 1574.882615][T21376] ? proc_fault_inject_write+0x310/0x310 [ 1574.888287][T21376] ? fsnotify_perm+0x248/0x550 [ 1574.893108][T21376] ? proc_fault_inject_write+0x310/0x310 [ 1574.898785][T21376] vfs_read+0x2db/0x960 [ 1574.902983][T21376] ? kernel_read+0x1e0/0x1e0 [ 1574.907621][T21376] ? __fget_files+0x28/0x460 [ 1574.912263][T21376] ? __fget_files+0x3fc/0x460 [ 1574.916981][T21376] ? __fdget_pos+0x2ae/0x360 [ 1574.921601][T21376] ? ksys_read+0x70/0x260 [ 1574.925966][T21376] ksys_read+0x14d/0x260 [ 1574.930252][T21376] ? vfs_write+0x9a0/0x9a0 [ 1574.934708][T21376] ? lockdep_hardirqs_on+0x94/0x140 [ 1574.940074][T21376] do_syscall_64+0x4c/0xa0 [ 1574.944524][T21376] ? clear_bhb_loop+0x60/0xb0 [ 1574.949226][T21376] ? clear_bhb_loop+0x60/0xb0 [ 1574.953936][T21376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1574.959855][T21376] RIP: 0033:0x7fd91ef5e68e [ 1574.964291][T21376] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1574.983926][T21376] RSP: 002b:00007fd91fd7ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1574.992370][T21376] RAX: ffffffffffffffda RBX: 00007fd91fd806c0 RCX: 00007fd91ef5e68e [ 1575.000372][T21376] RDX: 000000000000000f RSI: 00007fd91fd800a0 RDI: 0000000000000008 [ 1575.008396][T21376] RBP: 00007fd91fd80090 R08: 0000000000000000 R09: 0000000000000000 [ 1575.016417][T21376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1575.024424][T21376] R13: 00007fd91f226038 R14: 00007fd91f225fa0 R15: 00007ffd9ed9ae78 [ 1575.032437][T21376] [ 1575.196875][T21380] device syzkaller0 entered promiscuous mode [ 1578.100910][T21404] device syzkaller0 entered promiscuous mode [ 1578.202901][T21425] FAULT_INJECTION: forcing a failure. [ 1578.202901][T21425] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.228012][T21425] CPU: 1 PID: 21425 Comm: syz.5.4281 Not tainted syzkaller #0 [ 1578.235533][T21425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1578.245627][T21425] Call Trace: [ 1578.248945][T21425] [ 1578.251921][T21425] dump_stack_lvl+0x188/0x24e [ 1578.256686][T21425] ? show_regs_print_info+0x12/0x12 [ 1578.261958][T21425] ? lockdep_hardirqs_on+0x94/0x140 [ 1578.267205][T21425] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1578.273406][T21425] should_fail_ex+0x390/0x4c0 [ 1578.278140][T21425] should_failslab+0x5/0x20 [ 1578.282678][T21425] slab_pre_alloc_hook+0x59/0x300 [ 1578.287745][T21425] kmem_cache_alloc+0x56/0x2f0 [ 1578.292546][T21425] ? skb_clone+0x1e7/0x370 [ 1578.296996][T21425] skb_clone+0x1e7/0x370 [ 1578.301275][T21425] __netlink_deliver_tap+0x3e4/0x7e0 [ 1578.306593][T21425] ? netlink_deliver_tap+0x2e/0x1b0 [ 1578.311820][T21425] netlink_deliver_tap+0x19c/0x1b0 [ 1578.316990][T21425] netlink_unicast+0x777/0x920 [ 1578.321794][T21425] netlink_sendmsg+0x8ad/0xbd0 [ 1578.326589][T21425] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1578.332175][T21425] ? netlink_getsockopt+0x550/0x550 [ 1578.337398][T21425] ? __sanitizer_cov_trace_pc+0xc/0x60 [ 1578.342888][T21425] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1578.348471][T21425] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1578.353777][T21425] ? security_socket_sendmsg+0x7c/0xa0 [ 1578.359252][T21425] ? netlink_getsockopt+0x550/0x550 [ 1578.364534][T21425] ____sys_sendmsg+0x5ed/0x9a0 [ 1578.369327][T21425] ? iovec_from_user+0x29d/0x360 [ 1578.374299][T21425] ? __sys_sendmsg_sock+0x30/0x30 [ 1578.379344][T21425] ? __import_iovec+0x306/0x510 [ 1578.384227][T21425] ? import_iovec+0x6f/0xa0 [ 1578.388761][T21425] ___sys_sendmsg+0x2a2/0x360 [ 1578.393474][T21425] ? __sys_sendmsg+0x2a0/0x2a0 [ 1578.398303][T21425] __se_sys_sendmsg+0x1c3/0x2b0 [ 1578.403183][T21425] ? __x64_sys_sendmsg+0x80/0x80 [ 1578.408157][T21425] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1578.414084][T21425] do_syscall_64+0x4c/0xa0 [ 1578.418522][T21425] ? clear_bhb_loop+0x60/0xb0 [ 1578.423220][T21425] ? clear_bhb_loop+0x60/0xb0 [ 1578.427925][T21425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1578.433857][T21425] RIP: 0033:0x7ff07279de59 [ 1578.438290][T21425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1578.457942][T21425] RSP: 002b:00007ff0736fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1578.466411][T21425] RAX: ffffffffffffffda RBX: 00007ff072a25fa0 RCX: 00007ff07279de59 [ 1578.474427][T21425] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1578.482428][T21425] RBP: 00007ff0736fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1578.490425][T21425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1578.498421][T21425] R13: 00007ff072a26038 R14: 00007ff072a25fa0 R15: 00007ffe378ae7a8 [ 1578.506461][T21425] [ 1579.591443][T21434] delete_channel: no stack [ 1581.092118][T21435] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4285'. [ 1581.275818][T21456] device syzkaller0 entered promiscuous mode [ 1586.953812][T21500] FAULT_INJECTION: forcing a failure. [ 1586.953812][T21500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1587.021256][T21500] CPU: 1 PID: 21500 Comm: syz.1.4305 Not tainted syzkaller #0 [ 1587.028800][T21500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1587.038894][T21500] Call Trace: [ 1587.042207][T21500] [ 1587.045172][T21500] dump_stack_lvl+0x188/0x24e [ 1587.049904][T21500] ? show_regs_print_info+0x12/0x12 [ 1587.055164][T21500] ? load_image+0x410/0x410 [ 1587.059737][T21500] ? __might_fault+0xa6/0x120 [ 1587.064463][T21500] should_fail_ex+0x390/0x4c0 [ 1587.069221][T21500] copyin+0x1b/0x120 [ 1587.073177][T21500] _copy_from_iter+0x559/0x1130 [ 1587.078078][T21500] ? copyout_mc+0x110/0x110 [ 1587.082625][T21500] ? __virt_addr_valid+0x188/0x540 [ 1587.087791][T21500] ? __virt_addr_valid+0x188/0x540 [ 1587.092945][T21500] ? __virt_addr_valid+0x467/0x540 [ 1587.098103][T21500] ? __phys_addr_symbol+0x2b/0x70 [ 1587.103169][T21500] ? __check_object_size+0x4f6/0xa70 [ 1587.108483][T21500] netlink_sendmsg+0x755/0xbd0 [ 1587.113293][T21500] ? netlink_getsockopt+0x550/0x550 [ 1587.118528][T21500] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1587.124107][T21500] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1587.129415][T21500] ? security_socket_sendmsg+0x7c/0xa0 [ 1587.134902][T21500] ? netlink_getsockopt+0x550/0x550 [ 1587.140128][T21500] ____sys_sendmsg+0x5ed/0x9a0 [ 1587.144926][T21500] ? __sys_sendmsg_sock+0x30/0x30 [ 1587.149974][T21500] ? __import_iovec+0x306/0x510 [ 1587.154878][T21500] ? import_iovec+0x6f/0xa0 [ 1587.159417][T21500] ___sys_sendmsg+0x2a2/0x360 [ 1587.164128][T21500] ? __sys_sendmsg+0x2a0/0x2a0 [ 1587.168949][T21500] ? __lock_acquire+0x7c40/0x7c40 [ 1587.174028][T21500] __se_sys_sendmsg+0x1c3/0x2b0 [ 1587.178913][T21500] ? __x64_sys_sendmsg+0x80/0x80 [ 1587.183895][T21500] ? lockdep_hardirqs_on+0x94/0x140 [ 1587.189128][T21500] do_syscall_64+0x4c/0xa0 [ 1587.193578][T21500] ? clear_bhb_loop+0x60/0xb0 [ 1587.198284][T21500] ? clear_bhb_loop+0x60/0xb0 [ 1587.202990][T21500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1587.208919][T21500] RIP: 0033:0x7fd91ef9de59 [ 1587.213368][T21500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1587.233023][T21500] RSP: 002b:00007fd91fd80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1587.241460][T21500] RAX: ffffffffffffffda RBX: 00007fd91f225fa0 RCX: 00007fd91ef9de59 [ 1587.249453][T21500] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1587.257441][T21500] RBP: 00007fd91fd80090 R08: 0000000000000000 R09: 0000000000000000 [ 1587.265436][T21500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1587.273429][T21500] R13: 00007fd91f226038 R14: 00007fd91f225fa0 R15: 00007ffd9ed9ae78 [ 1587.281442][T21500] [ 1587.338321][T21498] device virt_wifi0 entered promiscuous mode [ 1587.538301][T21507] netlink: 'syz.2.4307': attribute type 10 has an invalid length. [ 1587.722653][T21507] team0: Port device macvlan0 added [ 1587.940816][T21518] device syzkaller0 entered promiscuous mode [ 1588.288971][T21537] FAULT_INJECTION: forcing a failure. [ 1588.288971][T21537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1588.352112][T21537] CPU: 1 PID: 21537 Comm: syz.2.4319 Not tainted syzkaller #0 [ 1588.359642][T21537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1588.369740][T21537] Call Trace: [ 1588.373066][T21537] [ 1588.376026][T21537] dump_stack_lvl+0x188/0x24e [ 1588.380730][T21537] ? show_regs_print_info+0x12/0x12 [ 1588.385953][T21537] ? load_image+0x410/0x410 [ 1588.390480][T21537] ? __lock_acquire+0x7c40/0x7c40 [ 1588.395530][T21537] should_fail_ex+0x390/0x4c0 [ 1588.400227][T21537] _copy_from_user+0x2c/0x170 [ 1588.404936][T21537] __copy_msghdr+0x384/0x560 [ 1588.409577][T21537] ___sys_sendmsg+0x210/0x360 [ 1588.414413][T21537] ? __sys_sendmsg+0x2a0/0x2a0 [ 1588.419250][T21537] ? __lock_acquire+0x7c40/0x7c40 [ 1588.424348][T21537] __se_sys_sendmsg+0x1c3/0x2b0 [ 1588.429244][T21537] ? __x64_sys_sendmsg+0x80/0x80 [ 1588.434244][T21537] ? lockdep_hardirqs_on+0x94/0x140 [ 1588.439494][T21537] do_syscall_64+0x4c/0xa0 [ 1588.443962][T21537] ? clear_bhb_loop+0x60/0xb0 [ 1588.448695][T21537] ? clear_bhb_loop+0x60/0xb0 [ 1588.453427][T21537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1588.459373][T21537] RIP: 0033:0x7f46bcd9de59 [ 1588.463809][T21537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1588.483438][T21537] RSP: 002b:00007f46bdc4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1588.491901][T21537] RAX: ffffffffffffffda RBX: 00007f46bd025fa0 RCX: 00007f46bcd9de59 [ 1588.499901][T21537] RDX: 0000000020000000 RSI: 0000200000002ec0 RDI: 0000000000000003 [ 1588.507911][T21537] RBP: 00007f46bdc4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1588.515908][T21537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1588.523943][T21537] R13: 00007f46bd026038 R14: 00007f46bd025fa0 R15: 00007fffba000a48 [ 1588.531955][T21537] [ 1590.086407][T21535] netlink: 'syz.4.4317': attribute type 10 has an invalid length. [ 1590.094398][T21539] netlink: 'syz.5.4318': attribute type 41 has an invalid length. [ 1590.221536][T21547] netlink: 'syz.2.4321': attribute type 28 has an invalid length. [ 1590.238357][T21547] netlink: 'syz.2.4321': attribute type 4 has an invalid length. [ 1590.246666][T21547] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4321'. [ 1590.376370][T21553] device virt_wifi0 entered promiscuous mode [ 1591.444140][T21577] device syzkaller0 entered promiscuous mode [ 1593.513788][T21595] netlink: 'syz.4.4336': attribute type 10 has an invalid length. [ 1593.930534][T21625] FAULT_INJECTION: forcing a failure. [ 1593.930534][T21625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1593.964431][T21625] CPU: 0 PID: 21625 Comm: syz.0.4345 Not tainted syzkaller #0 [ 1593.971965][T21625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1593.982065][T21625] Call Trace: [ 1593.985390][T21625] [ 1593.988357][T21625] dump_stack_lvl+0x188/0x24e [ 1593.993085][T21625] ? show_regs_print_info+0x12/0x12 [ 1593.998341][T21625] ? load_image+0x410/0x410 [ 1594.002888][T21625] ? __lock_acquire+0x7c40/0x7c40 [ 1594.007965][T21625] ? snprintf+0xe5/0x140 [ 1594.012245][T21625] should_fail_ex+0x390/0x4c0 [ 1594.016951][T21625] _copy_to_user+0x2c/0x130 [ 1594.021475][T21625] simple_read_from_buffer+0xe3/0x150 [ 1594.026905][T21625] proc_fail_nth_read+0x1a6/0x220 [ 1594.031954][T21625] ? proc_fault_inject_write+0x310/0x310 [ 1594.037636][T21625] ? fsnotify_perm+0x248/0x550 [ 1594.042437][T21625] ? proc_fault_inject_write+0x310/0x310 [ 1594.048097][T21625] vfs_read+0x2db/0x960 [ 1594.052291][T21625] ? kernel_read+0x1e0/0x1e0 [ 1594.056906][T21625] ? __fget_files+0x28/0x460 [ 1594.061523][T21625] ? __fget_files+0x3fc/0x460 [ 1594.066239][T21625] ? __fdget_pos+0x2ae/0x360 [ 1594.070855][T21625] ? ksys_read+0x70/0x260 [ 1594.075235][T21625] ksys_read+0x14d/0x260 [ 1594.079517][T21625] ? vfs_write+0x9a0/0x9a0 [ 1594.083962][T21625] ? lockdep_hardirqs_on+0x94/0x140 [ 1594.089185][T21625] do_syscall_64+0x4c/0xa0 [ 1594.093626][T21625] ? clear_bhb_loop+0x60/0xb0 [ 1594.098331][T21625] ? clear_bhb_loop+0x60/0xb0 [ 1594.103040][T21625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1594.108956][T21625] RIP: 0033:0x7fc92335e68e [ 1594.113389][T21625] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1594.133024][T21625] RSP: 002b:00007fc9241effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1594.141464][T21625] RAX: ffffffffffffffda RBX: 00007fc9241f06c0 RCX: 00007fc92335e68e [ 1594.149463][T21625] RDX: 000000000000000f RSI: 00007fc9241f00a0 RDI: 0000000000000007 [ 1594.157478][T21625] RBP: 00007fc9241f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.165476][T21625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.173472][T21625] R13: 00007fc923626038 R14: 00007fc923625fa0 R15: 00007ffe43b76578 [ 1594.181479][T21625] [ 1594.320310][T21634] netlink: 'syz.2.4359': attribute type 2 has an invalid length. [ 1594.584153][T21645] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4351'. [ 1594.731897][T21648] device syzkaller0 entered promiscuous mode [ 1594.745213][T21650] netlink: 'syz.0.4352': attribute type 10 has an invalid length. [ 1594.794495][T21650] team0: Port device macvlan0 added [ 1597.105932][T21684] device syzkaller0 entered promiscuous mode [ 1597.413267][T21693] device syzkaller0 entered promiscuous mode [ 1597.598025][T21700] netlink: 'syz.5.4365': attribute type 2 has an invalid length. [ 1597.617311][T21705] netlink: 'syz.2.4368': attribute type 3 has an invalid length. [ 1597.627601][T21700] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4365'. [ 1597.650904][T21705] netlink: 'syz.2.4368': attribute type 1 has an invalid length. [ 1599.572919][T21723] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4374'. [ 1599.615142][T21729] FAULT_INJECTION: forcing a failure. [ 1599.615142][T21729] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.642966][T21729] CPU: 0 PID: 21729 Comm: syz.4.4376 Not tainted syzkaller #0 [ 1599.650501][T21729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1599.660593][T21729] Call Trace: [ 1599.663900][T21729] [ 1599.666862][T21729] dump_stack_lvl+0x188/0x24e [ 1599.671587][T21729] ? stack_trace_snprint+0xe0/0xe0 [ 1599.676733][T21729] ? show_regs_print_info+0x12/0x12 [ 1599.681985][T21729] ? load_image+0x410/0x410 [ 1599.686568][T21729] ? kasan_set_track+0x60/0x70 [ 1599.691373][T21729] ? kasan_set_track+0x4b/0x70 [ 1599.696177][T21729] ? __kasan_slab_alloc+0x6b/0x80 [ 1599.701244][T21729] ? slab_post_alloc_hook+0x4b/0x490 [ 1599.706571][T21729] ? kmem_cache_alloc+0x18b/0x2f0 [ 1599.711634][T21729] ? dst_alloc+0x101/0x160 [ 1599.716100][T21729] should_fail_ex+0x390/0x4c0 [ 1599.720828][T21729] should_failslab+0x5/0x20 [ 1599.725368][T21729] slab_pre_alloc_hook+0x59/0x300 [ 1599.730437][T21729] ? ref_tracker_alloc+0x14f/0x490 [ 1599.735595][T21729] __kmem_cache_alloc_node+0x4f/0x270 [ 1599.741010][T21729] ? ref_tracker_alloc+0x14f/0x490 [ 1599.746159][T21729] kmalloc_trace+0x26/0xe0 [ 1599.750628][T21729] ref_tracker_alloc+0x14f/0x490 [ 1599.755623][T21729] ? ref_tracker_dir_print+0x150/0x150 [ 1599.761134][T21729] ? __kasan_slab_alloc+0x6b/0x80 [ 1599.766202][T21729] ? slab_post_alloc_hook+0x67/0x490 [ 1599.771536][T21729] ? slab_pre_alloc_hook+0x59/0x300 [ 1599.776786][T21729] ? rcu_is_watching+0x11/0xa0 [ 1599.781583][T21729] dst_init+0xb1/0x400 [ 1599.785685][T21729] dst_alloc+0x12a/0x160 [ 1599.789958][T21729] rt_dst_clone+0x54/0x6b0 [ 1599.794405][T21729] ip_mc_finish_output+0xe6/0x260 [ 1599.799450][T21729] ? skb_clone+0x21b/0x370 [ 1599.803896][T21729] ip_mc_output+0x299/0x5d0 [ 1599.808452][T21729] ip_send_skb+0x129/0x1c0 [ 1599.812893][T21729] udp_send_skb+0xa4f/0x13f0 [ 1599.817525][T21729] udp_sendmsg+0x1b46/0x23d0 [ 1599.822137][T21729] ? release_sock+0x2b/0x1b0 [ 1599.826751][T21729] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 1599.831628][T21729] ? udp_cmsg_send+0x350/0x350 [ 1599.836435][T21729] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1599.842441][T21729] ? lock_chain_count+0x20/0x20 [ 1599.847339][T21729] ? __local_bh_enable_ip+0x136/0x1c0 [ 1599.852731][T21729] ? _local_bh_enable+0xa0/0xa0 [ 1599.857626][T21729] ? inet_sendmsg+0x109/0x2a0 [ 1599.862349][T21729] ? inet_sendmsg+0x109/0x2a0 [ 1599.867071][T21729] ? inet_send_prepare+0x250/0x250 [ 1599.872229][T21729] ____sys_sendmsg+0x5ed/0x9a0 [ 1599.877116][T21729] ? __lock_acquire+0x7c40/0x7c40 [ 1599.882174][T21729] ? __sys_sendmsg_sock+0x30/0x30 [ 1599.887230][T21729] ? __import_iovec+0x306/0x510 [ 1599.892124][T21729] ? import_iovec+0x6f/0xa0 [ 1599.896658][T21729] ___sys_sendmsg+0x2a2/0x360 [ 1599.901370][T21729] ? __sys_sendmsg+0x2a0/0x2a0 [ 1599.906178][T21729] ? __lock_acquire+0x7c40/0x7c40 [ 1599.911250][T21729] __se_sys_sendmsg+0x1c3/0x2b0 [ 1599.916134][T21729] ? __x64_sys_sendmsg+0x80/0x80 [ 1599.921117][T21729] ? lockdep_hardirqs_on+0x94/0x140 [ 1599.926341][T21729] do_syscall_64+0x4c/0xa0 [ 1599.930801][T21729] ? clear_bhb_loop+0x60/0xb0 [ 1599.935523][T21729] ? clear_bhb_loop+0x60/0xb0 [ 1599.940225][T21729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1599.946140][T21729] RIP: 0033:0x7f373d39de59 [ 1599.950592][T21729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1599.970206][T21729] RSP: 002b:00007f373e25d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1599.978636][T21729] RAX: ffffffffffffffda RBX: 00007f373d625fa0 RCX: 00007f373d39de59 [ 1599.986639][T21729] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 1599.994630][T21729] RBP: 00007f373e25d090 R08: 0000000000000000 R09: 0000000000000000 [ 1600.002699][T21729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1600.010684][T21729] R13: 00007f373d626038 R14: 00007f373d625fa0 R15: 00007ffc3a932a78 [ 1600.018711][T21729] [ 1600.086336][T21729] memory allocation failure, unreliable refcount tracker. [ 1600.137594][T21731] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.4377'. [ 1601.911153][T21735] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4379'. [ 1602.162301][T21751] netlink: 'syz.0.4385': attribute type 10 has an invalid length. [ 1602.886489][T21751] team0 (unregistering): Port device team_slave_0 removed [ 1602.949178][T21751] team0 (unregistering): Port device team_slave_1 removed [ 1603.009450][T21751] team0 (unregistering): Port device macvlan0 removed [ 1603.366626][T21793] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.4396'. [ 1603.396541][T21793] netlink: 6328 bytes leftover after parsing attributes in process `syz.4.4396'. [ 1603.408797][T21793] tc_dump_action: action bad kind [ 1603.890130][T21811] device syzkaller0 entered promiscuous mode [ 1603.926136][T21809] netlink: 'syz.4.4404': attribute type 10 has an invalid length. [ 1604.140264][T21820] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4408'. [ 1604.169949][T21812] delete_channel: no stack [ 1604.183129][T21819] delete_channel: no stack [ 1604.333730][T21825] netlink: 'syz.1.4409': attribute type 2 has an invalid length. [ 1604.364354][T21825] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4409'. [ 1604.749652][T21836] sock: sock_timestamping_bind_phc: sock not bind to device [ 1606.752892][T21824] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1606.765309][T21843] netlink: 'syz.5.4417': attribute type 6 has an invalid length. [ 1606.790068][T21824] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1606.813161][T21824] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1607.279569][T21858] netlink: 134268 bytes leftover after parsing attributes in process `syz.5.4420'. [ 1607.495138][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.501638][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.775337][T21869] netlink: 'syz.1.4424': attribute type 10 has an invalid length. [ 1607.791999][T21875] netlink: 'syz.0.4427': attribute type 16 has an invalid length. [ 1607.830148][T21875] netlink: 'syz.0.4427': attribute type 3 has an invalid length. [ 1607.860083][T21875] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4427'. [ 1608.172490][T21869] team0 (unregistering): Port device team_slave_0 removed [ 1608.269231][T21869] team0 (unregistering): Port device team_slave_1 removed [ 1608.584908][T21888] device syzkaller0 entered promiscuous mode [ 1608.718170][T21907] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1610.550028][T21916] netlink: 'syz.4.4439': attribute type 12 has an invalid length. [ 1610.557995][T21916] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4439'. [ 1610.807204][T21928] IPv6: Can't replace route, no match found [ 1611.082559][T21931] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.4441'. [ 1611.314205][T21939] FAULT_INJECTION: forcing a failure. [ 1611.314205][T21939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1611.350443][T21939] CPU: 1 PID: 21939 Comm: syz.4.4446 Not tainted syzkaller #0 [ 1611.357967][T21939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1611.368059][T21939] Call Trace: [ 1611.371458][T21939] [ 1611.374424][T21939] dump_stack_lvl+0x188/0x24e [ 1611.379151][T21939] ? show_regs_print_info+0x12/0x12 [ 1611.384401][T21939] ? load_image+0x410/0x410 [ 1611.388951][T21939] ? __lock_acquire+0x7c40/0x7c40 [ 1611.394023][T21939] ? __kmem_cache_alloc_node+0x19d/0x270 [ 1611.399707][T21939] should_fail_ex+0x390/0x4c0 [ 1611.404473][T21939] _copy_from_user+0x2c/0x170 [ 1611.409196][T21939] ____sys_sendmsg+0x31a/0x9a0 [ 1611.414006][T21939] ? __lock_acquire+0x7c40/0x7c40 [ 1611.419078][T21939] ? __sys_sendmsg_sock+0x30/0x30 [ 1611.424161][T21939] ? __import_iovec+0x306/0x510 [ 1611.429066][T21939] ? import_iovec+0x6f/0xa0 [ 1611.433622][T21939] ___sys_sendmsg+0x2a2/0x360 [ 1611.438360][T21939] ? __sys_sendmsg+0x2a0/0x2a0 [ 1611.443199][T21939] ? __lock_acquire+0x7c40/0x7c40 [ 1611.448293][T21939] __se_sys_sendmsg+0x1c3/0x2b0 [ 1611.453186][T21939] ? ct_nmi_exit+0x145/0x1c0 [ 1611.457815][T21939] ? __x64_sys_sendmsg+0x80/0x80 [ 1611.462815][T21939] ? lockdep_hardirqs_on+0x94/0x140 [ 1611.468053][T21939] do_syscall_64+0x4c/0xa0 [ 1611.472515][T21939] ? clear_bhb_loop+0x60/0xb0 [ 1611.477237][T21939] ? clear_bhb_loop+0x60/0xb0 [ 1611.481961][T21939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1611.487897][T21939] RIP: 0033:0x7f373d39de59 [ 1611.492351][T21939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1611.511999][T21939] RSP: 002b:00007f373e23c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1611.520460][T21939] RAX: ffffffffffffffda RBX: 00007f373d626090 RCX: 00007f373d39de59 [ 1611.528470][T21939] RDX: 0000000000048800 RSI: 0000200000000640 RDI: 0000000000000004 [ 1611.536479][T21939] RBP: 00007f373e23c090 R08: 0000000000000000 R09: 0000000000000000 [ 1611.544485][T21939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1611.552488][T21939] R13: 00007f373d626128 R14: 00007f373d626090 R15: 00007ffc3a932a78 [ 1611.560510][T21939] [ 1612.069085][T21949] netlink: 'syz.2.4449': attribute type 10 has an invalid length. [ 1612.963411][T21949] team0 (unregistering): Port device team_slave_0 removed [ 1613.017270][T21949] team0 (unregistering): Port device team_slave_1 removed [ 1613.099243][T21953] delete_channel: no stack [ 1613.107088][T21949] team0 (unregistering): Port device macvlan0 removed [ 1613.147658][T21956] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4453'. [ 1613.457956][T21970] device syzkaller0 entered promiscuous mode [ 1613.466935][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1616.821507][T22000] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4468'. [ 1617.125683][T22004] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4469'. [ 1620.426891][T22040] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4483'. [ 1620.818698][T22049] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4485'. [ 1621.314149][T22057] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4498'. [ 1622.175765][T22062] netlink: 'syz.2.4488': attribute type 10 has an invalid length. [ 1622.716047][T22078] netlink: 'syz.0.4493': attribute type 29 has an invalid length. [ 1622.736935][T22078] netlink: 'syz.0.4493': attribute type 29 has an invalid length. [ 1623.398001][T22098] netlink: 'syz.0.4503': attribute type 10 has an invalid length. [ 1623.674419][T22104] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4505'. [ 1623.789659][T22108] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4507'. [ 1624.329059][T22123] netlink: 'syz.4.4513': attribute type 10 has an invalid length. [ 1624.359673][T22123] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.4513'. [ 1625.589085][T22145] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4521'. [ 1626.170839][T22174] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4534'. [ 1626.338070][T22185] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4538'. [ 1627.016172][T22191] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.4541'. [ 1627.030872][T22197] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4539'. [ 1627.530194][T22214] netlink: 'syz.1.4548': attribute type 14 has an invalid length. [ 1627.577758][T22214] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.4548'. [ 1627.885001][T22224] netlink: 'syz.5.4551': attribute type 2 has an invalid length. [ 1627.895047][T22224] netlink: 'syz.5.4551': attribute type 8 has an invalid length. [ 1627.906409][T22224] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4551'. [ 1630.784706][T22234] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.4554'. [ 1630.834507][T22238] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4557'. [ 1631.183986][T22246] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.4559'. [ 1631.960413][T22262] device sit0 entered promiscuous mode [ 1632.910014][T22271] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.4568'. [ 1633.193230][T22277] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4569'. [ 1633.731279][T22292] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.4575'. [ 1635.104953][T22313] FAULT_INJECTION: forcing a failure. [ 1635.104953][T22313] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.162206][T22313] CPU: 0 PID: 22313 Comm: syz.0.4581 Not tainted syzkaller #0 [ 1635.169747][T22313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1635.179841][T22313] Call Trace: [ 1635.183171][T22313] [ 1635.186138][T22313] dump_stack_lvl+0x188/0x24e [ 1635.190872][T22313] ? show_regs_print_info+0x12/0x12 [ 1635.196129][T22313] ? load_image+0x410/0x410 [ 1635.200704][T22313] ? __lock_acquire+0x7c40/0x7c40 [ 1635.205788][T22313] ? trace_event_raw_event_lock+0x230/0x230 [ 1635.211738][T22313] ? perf_trace_lock_acquire+0x101/0x3f0 [ 1635.217427][T22313] should_fail_ex+0x390/0x4c0 [ 1635.222172][T22313] should_failslab+0x5/0x20 [ 1635.226712][T22313] slab_pre_alloc_hook+0x59/0x300 [ 1635.231779][T22313] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1635.237365][T22313] __kmem_cache_alloc_node+0x4f/0x270 [ 1635.242780][T22313] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1635.248366][T22313] __kmalloc+0xa3/0x240 [ 1635.252584][T22313] bpf_prog_test_run_skb+0x23e/0x18e0 [ 1635.258005][T22313] ? __fget_files+0x28/0x460 [ 1635.262663][T22313] ? __fget_files+0x3fc/0x460 [ 1635.267434][T22313] ? cpu_online+0xa0/0xa0 [ 1635.271819][T22313] bpf_prog_test_run+0x31c/0x390 [ 1635.276811][T22313] __sys_bpf+0x62b/0x780 [ 1635.281151][T22313] ? bpf_link_show_fdinfo+0x380/0x380 [ 1635.286591][T22313] ? lock_chain_count+0x20/0x20 [ 1635.291485][T22313] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1635.297535][T22313] __x64_sys_bpf+0x78/0x90 [ 1635.302004][T22313] do_syscall_64+0x4c/0xa0 [ 1635.306482][T22313] ? clear_bhb_loop+0x60/0xb0 [ 1635.311203][T22313] ? clear_bhb_loop+0x60/0xb0 [ 1635.315928][T22313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1635.321868][T22313] RIP: 0033:0x7fc92339de59 [ 1635.326336][T22313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1635.346003][T22313] RSP: 002b:00007fc9241f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1635.354466][T22313] RAX: ffffffffffffffda RBX: 00007fc923625fa0 RCX: 00007fc92339de59 [ 1635.362480][T22313] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1635.370492][T22313] RBP: 00007fc9241f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1635.378501][T22313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1635.386520][T22313] R13: 00007fc923626038 R14: 00007fc923625fa0 R15: 00007ffe43b76578 [ 1635.394559][T22313] [ 1635.534562][T22317] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.4582'. [ 1637.626437][T22330] device sit0 entered promiscuous mode [ 1639.864496][T22336] netlink: 'syz.5.4586': attribute type 2 has an invalid length. [ 1639.926165][T22336] device 0 entered promiscuous mode [ 1640.095827][T22341] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4588'. [ 1640.292480][T22344] netlink: 'syz.5.4589': attribute type 2 has an invalid length. [ 1640.358378][T22344] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4589'. [ 1641.389881][T22368] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.4598'. [ 1641.791144][T22380] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4601'. [ 1642.383089][T22398] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.4607'. [ 1643.491908][T22417] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4612'. [ 1644.028384][T22427] device sit0 entered promiscuous mode [ 1644.152850][T22433] netlink: 'syz.0.4615': attribute type 2 has an invalid length. [ 1644.475212][T22433] device 1 entered promiscuous mode [ 1644.592851][T22443] FAULT_INJECTION: forcing a failure. [ 1644.592851][T22443] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.608436][T22443] CPU: 1 PID: 22443 Comm: syz.1.4619 Not tainted syzkaller #0 [ 1644.615950][T22443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1644.626044][T22443] Call Trace: [ 1644.629355][T22443] [ 1644.632315][T22443] dump_stack_lvl+0x188/0x24e [ 1644.637042][T22443] ? show_regs_print_info+0x12/0x12 [ 1644.642286][T22443] ? load_image+0x410/0x410 [ 1644.646836][T22443] ? __lock_acquire+0x7c40/0x7c40 [ 1644.651942][T22443] should_fail_ex+0x390/0x4c0 [ 1644.656703][T22443] should_failslab+0x5/0x20 [ 1644.661253][T22443] slab_pre_alloc_hook+0x59/0x300 [ 1644.666332][T22443] kmem_cache_alloc_node+0x5a/0x310 [ 1644.671576][T22443] ? perf_event_alloc+0x155/0x21e0 [ 1644.676825][T22443] perf_event_alloc+0x155/0x21e0 [ 1644.681816][T22443] ? _raw_spin_unlock+0x24/0x40 [ 1644.686797][T22443] ? find_lively_task_by_vpid+0x19/0x290 [ 1644.692469][T22443] ? find_lively_task_by_vpid+0x19/0x290 [ 1644.698147][T22443] __se_sys_perf_event_open+0x701/0x1ec0 [ 1644.703823][T22443] ? __fget_files+0x3fc/0x460 [ 1644.708555][T22443] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1644.714259][T22443] ? lockdep_hardirqs_on+0x94/0x140 [ 1644.719497][T22443] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1644.725194][T22443] do_syscall_64+0x4c/0xa0 [ 1644.729674][T22443] ? clear_bhb_loop+0x60/0xb0 [ 1644.734394][T22443] ? clear_bhb_loop+0x60/0xb0 [ 1644.739115][T22443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1644.745051][T22443] RIP: 0033:0x7fd91ef9de59 [ 1644.749518][T22443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1644.769160][T22443] RSP: 002b:00007fd91fd80028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1644.777617][T22443] RAX: ffffffffffffffda RBX: 00007fd91f225fa0 RCX: 00007fd91ef9de59 [ 1644.785625][T22443] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000080 [ 1644.793635][T22443] RBP: 00007fd91fd80090 R08: 000000000000000b R09: 0000000000000000 [ 1644.801729][T22443] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1644.809732][T22443] R13: 00007fd91f226038 R14: 00007fd91f225fa0 R15: 00007ffd9ed9ae78 [ 1644.817758][T22443] [ 1645.841057][T22460] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4626'. [ 1645.966144][T22469] netlink: 'syz.0.4629': attribute type 29 has an invalid length. [ 1645.991243][T22469] netlink: 61440 bytes leftover after parsing attributes in process `syz.0.4629'. [ 1646.020691][T22469] netlink: 'syz.0.4629': attribute type 29 has an invalid length. [ 1646.049462][T22469] netlink: 61440 bytes leftover after parsing attributes in process `syz.0.4629'. [ 1646.650130][T22483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.684307][T22486] device bridge_slave_0 left promiscuous mode [ 1646.714973][T22486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1647.210524][T22493] device sit0 entered promiscuous mode [ 1647.744356][T22504] netlink: 'syz.2.4640': attribute type 2 has an invalid length. [ 1647.810025][T22509] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4642'. [ 1648.405132][T22526] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.4647'. [ 1648.426827][T22526] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.4647'. [ 1648.593998][T22531] netlink: 'syz.5.4649': attribute type 2 has an invalid length. [ 1648.639821][T22531] device 1 entered promiscuous mode [ 1648.768489][T22538] netlink: 'syz.1.4651': attribute type 1 has an invalid length. [ 1648.826124][T22538] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.4651'. [ 1649.048989][T22550] FAULT_INJECTION: forcing a failure. [ 1649.048989][T22550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1649.097743][T22550] CPU: 0 PID: 22550 Comm: syz.5.4656 Not tainted syzkaller #0 [ 1649.105383][T22550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1649.115480][T22550] Call Trace: [ 1649.118837][T22550] [ 1649.121819][T22550] dump_stack_lvl+0x188/0x24e [ 1649.126554][T22550] ? show_regs_print_info+0x12/0x12 [ 1649.131809][T22550] ? load_image+0x410/0x410 [ 1649.136384][T22550] should_fail_ex+0x390/0x4c0 [ 1649.141139][T22550] _copy_from_user+0x2c/0x170 [ 1649.145859][T22550] iovec_from_user+0x143/0x360 [ 1649.150676][T22550] __import_iovec+0x6c/0x510 [ 1649.155336][T22550] import_iovec+0x6f/0xa0 [ 1649.159717][T22550] ___sys_sendmsg+0x252/0x360 [ 1649.164449][T22550] ? __sys_sendmsg+0x2a0/0x2a0 [ 1649.169284][T22550] ? __lock_acquire+0x7c40/0x7c40 [ 1649.174382][T22550] __se_sys_sendmsg+0x1c3/0x2b0 [ 1649.178738][T22554] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4655'. [ 1649.179264][T22550] ? __x64_sys_sendmsg+0x80/0x80 [ 1649.179355][T22550] ? lockdep_hardirqs_on+0x94/0x140 [ 1649.198808][T22550] do_syscall_64+0x4c/0xa0 [ 1649.203318][T22550] ? clear_bhb_loop+0x60/0xb0 [ 1649.208072][T22550] ? clear_bhb_loop+0x60/0xb0 [ 1649.212796][T22550] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1649.218757][T22550] RIP: 0033:0x7ff07279de59 [ 1649.223203][T22550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1649.242821][T22550] RSP: 002b:00007ff0736fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1649.242849][T22550] RAX: ffffffffffffffda RBX: 00007ff072a25fa0 RCX: 00007ff07279de59 [ 1649.242866][T22550] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1649.242881][T22550] RBP: 00007ff0736fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1649.242896][T22550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1649.242910][T22550] R13: 00007ff072a26038 R14: 00007ff072a25fa0 R15: 00007ffe378ae7a8 [ 1649.242951][T22550] [ 1649.747925][T22569] FAULT_INJECTION: forcing a failure. [ 1649.747925][T22569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1649.854119][T22569] CPU: 1 PID: 22569 Comm: syz.4.4662 Not tainted syzkaller #0 [ 1649.861703][T22569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1649.871804][T22569] Call Trace: [ 1649.875119][T22569] [ 1649.878076][T22569] dump_stack_lvl+0x188/0x24e [ 1649.882791][T22569] ? show_regs_print_info+0x12/0x12 [ 1649.888023][T22569] ? load_image+0x410/0x410 [ 1649.892551][T22569] ? __lock_acquire+0x7c40/0x7c40 [ 1649.897607][T22569] should_fail_ex+0x390/0x4c0 [ 1649.902316][T22569] _copy_from_user+0x2c/0x170 [ 1649.907021][T22569] iovec_from_user+0x143/0x360 [ 1649.911815][T22569] __import_iovec+0x6c/0x510 [ 1649.916438][T22569] import_iovec+0x6f/0xa0 [ 1649.920815][T22569] ___sys_sendmsg+0x252/0x360 [ 1649.925533][T22569] ? __sys_sendmsg+0x2a0/0x2a0 [ 1649.930336][T22569] ? __lock_acquire+0x7c40/0x7c40 [ 1649.935404][T22569] __se_sys_sendmsg+0x1c3/0x2b0 [ 1649.940296][T22569] ? __x64_sys_sendmsg+0x80/0x80 [ 1649.945379][T22569] ? lockdep_hardirqs_on+0x94/0x140 [ 1649.950617][T22569] do_syscall_64+0x4c/0xa0 [ 1649.955089][T22569] ? clear_bhb_loop+0x60/0xb0 [ 1649.959795][T22569] ? clear_bhb_loop+0x60/0xb0 [ 1649.964506][T22569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1649.970458][T22569] RIP: 0033:0x7f373d39de59 [ 1649.974894][T22569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1649.994516][T22569] RSP: 002b:00007f373e25d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1650.002953][T22569] RAX: ffffffffffffffda RBX: 00007f373d625fa0 RCX: 00007f373d39de59 [ 1650.010948][T22569] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1650.018944][T22569] RBP: 00007f373e25d090 R08: 0000000000000000 R09: 0000000000000000 [ 1650.026941][T22569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1650.034934][T22569] R13: 00007f373d626038 R14: 00007f373d625fa0 R15: 00007ffc3a932a78 [ 1650.042940][T22569] [ 1650.263798][T22580] netlink: 'syz.5.4667': attribute type 29 has an invalid length. [ 1650.295114][T22580] netlink: 196608 bytes leftover after parsing attributes in process `syz.5.4667'. [ 1650.328177][T22580] netlink: 'syz.5.4667': attribute type 29 has an invalid length. [ 1650.372716][T22580] netlink: 196608 bytes leftover after parsing attributes in process `syz.5.4667'. [ 1650.418781][T22582] netlink: 'syz.5.4667': attribute type 29 has an invalid length. [ 1650.900409][T22594] __nla_validate_parse: 1 callbacks suppressed [ 1650.900448][T22594] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.4670'. [ 1651.276980][T22603] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4675'. [ 1651.874655][T22607] device syzkaller0 entered promiscuous mode [ 1653.453466][T22640] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4685'. [ 1656.084819][T22632] netlink: 'syz.5.4683': attribute type 6 has an invalid length. [ 1656.092863][T22632] netlink: 140 bytes leftover after parsing attributes in process `syz.5.4683'. [ 1656.310577][T22659] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.4691'. [ 1656.393418][T22664] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4693'. [ 1656.535377][T22671] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.4696'. [ 1656.873980][T22681] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.4700'. [ 1657.187181][T22697] netlink: 'syz.1.4707': attribute type 29 has an invalid length. [ 1657.244954][T22699] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4708'. [ 1657.325926][T22697] netlink: 'syz.1.4707': attribute type 29 has an invalid length. [ 1657.334808][T22701] netlink: 'syz.1.4707': attribute type 29 has an invalid length. [ 1658.725136][T22708] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.4710'. [ 1658.744727][T22708] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.4710'. [ 1658.770324][T22708] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4710'. [ 1658.825591][T22712] FAULT_INJECTION: forcing a failure. [ 1658.825591][T22712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1658.887894][T22710] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4712'. [ 1658.925395][T22712] CPU: 0 PID: 22712 Comm: syz.5.4713 Not tainted syzkaller #0 [ 1658.932928][T22712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1658.943032][T22712] Call Trace: [ 1658.946347][T22712] [ 1658.949322][T22712] dump_stack_lvl+0x188/0x24e [ 1658.954039][T22712] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1658.960264][T22712] ? show_regs_print_info+0x12/0x12 [ 1658.965516][T22712] ? load_image+0x410/0x410 [ 1658.970070][T22712] should_fail_ex+0x390/0x4c0 [ 1658.974795][T22712] _copy_to_user+0x2c/0x130 [ 1658.979350][T22712] simple_read_from_buffer+0xe3/0x150 [ 1658.985194][T22712] proc_fail_nth_read+0x1a6/0x220 [ 1658.990264][T22712] ? proc_fault_inject_write+0x310/0x310 [ 1658.995927][T22712] ? fsnotify_perm+0x248/0x550 [ 1659.000711][T22712] ? proc_fault_inject_write+0x310/0x310 [ 1659.006359][T22712] vfs_read+0x2db/0x960 [ 1659.010560][T22712] ? kernel_read+0x1e0/0x1e0 [ 1659.015174][T22712] ? __rcu_read_unlock+0x2/0xd0 [ 1659.020044][T22712] ? __fget_files+0x28/0x460 [ 1659.024653][T22712] ? __fget_files+0x3fc/0x460 [ 1659.029368][T22712] ? __fdget_pos+0x2ae/0x360 [ 1659.033981][T22712] ? ksys_read+0x70/0x260 [ 1659.038341][T22712] ksys_read+0x14d/0x260 [ 1659.042622][T22712] ? vfs_write+0x9a0/0x9a0 [ 1659.047062][T22712] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1659.052986][T22712] do_syscall_64+0x4c/0xa0 [ 1659.057429][T22712] ? clear_bhb_loop+0x60/0xb0 [ 1659.062140][T22712] ? clear_bhb_loop+0x60/0xb0 [ 1659.066864][T22712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1659.072784][T22712] RIP: 0033:0x7ff07275e68e [ 1659.077218][T22712] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1659.096857][T22712] RSP: 002b:00007ff0736fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1659.105379][T22712] RAX: ffffffffffffffda RBX: 00007ff0736fe6c0 RCX: 00007ff07275e68e [ 1659.113377][T22712] RDX: 000000000000000f RSI: 00007ff0736fe0a0 RDI: 0000000000000006 [ 1659.121370][T22712] RBP: 00007ff0736fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1659.129357][T22712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1659.137340][T22712] R13: 00007ff072a26038 R14: 00007ff072a25fa0 R15: 00007ffe378ae7a8 [ 1659.145347][T22712] [ 1659.247996][T22722] netlink: 'syz.4.4716': attribute type 29 has an invalid length. [ 1659.279607][T22722] netlink: 'syz.4.4716': attribute type 29 has an invalid length. [ 1659.327709][T22718] netlink: 'syz.0.4714': attribute type 21 has an invalid length. [ 1659.391258][T22727] FAULT_INJECTION: forcing a failure. [ 1659.391258][T22727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1659.439792][T22727] CPU: 1 PID: 22727 Comm: syz.1.4717 Not tainted syzkaller #0 [ 1659.447320][T22727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1659.457436][T22727] Call Trace: [ 1659.460752][T22727] [ 1659.463750][T22727] dump_stack_lvl+0x188/0x24e [ 1659.468486][T22727] ? show_regs_print_info+0x12/0x12 [ 1659.473737][T22727] ? load_image+0x410/0x410 [ 1659.478285][T22727] ? __might_fault+0xa6/0x120 [ 1659.483006][T22727] should_fail_ex+0x390/0x4c0 [ 1659.487764][T22727] copyin+0x1b/0x120 [ 1659.491707][T22727] _copy_from_iter+0x447/0x1130 [ 1659.496594][T22727] ? copyout_mc+0x110/0x110 [ 1659.501152][T22727] ? __virt_addr_valid+0x188/0x540 [ 1659.506325][T22727] ? __virt_addr_valid+0x188/0x540 [ 1659.511487][T22727] ? __virt_addr_valid+0x467/0x540 [ 1659.516649][T22727] ? __phys_addr_symbol+0x2b/0x70 [ 1659.521726][T22727] ? __check_object_size+0x4f6/0xa70 [ 1659.527056][T22727] netlink_sendmsg+0x755/0xbd0 [ 1659.531874][T22727] ? netlink_getsockopt+0x550/0x550 [ 1659.537121][T22727] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1659.542732][T22727] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1659.548054][T22727] ? security_socket_sendmsg+0x7c/0xa0 [ 1659.553551][T22727] ? netlink_getsockopt+0x550/0x550 [ 1659.558788][T22727] ____sys_sendmsg+0x5ed/0x9a0 [ 1659.563618][T22727] ? __sys_sendmsg_sock+0x30/0x30 [ 1659.568679][T22727] ? __import_iovec+0x306/0x510 [ 1659.573580][T22727] ? import_iovec+0x6f/0xa0 [ 1659.578126][T22727] ___sys_sendmsg+0x2a2/0x360 [ 1659.582861][T22727] ? __sys_sendmsg+0x2a0/0x2a0 [ 1659.587675][T22727] ? __lock_acquire+0x7c40/0x7c40 [ 1659.592768][T22727] __se_sys_sendmsg+0x1c3/0x2b0 [ 1659.597665][T22727] ? __x64_sys_sendmsg+0x80/0x80 [ 1659.602661][T22727] ? lockdep_hardirqs_on+0x94/0x140 [ 1659.607905][T22727] do_syscall_64+0x4c/0xa0 [ 1659.612371][T22727] ? clear_bhb_loop+0x60/0xb0 [ 1659.617097][T22727] ? clear_bhb_loop+0x60/0xb0 [ 1659.621842][T22727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1659.627783][T22727] RIP: 0033:0x7fd91ef9de59 [ 1659.632246][T22727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1659.652324][T22727] RSP: 002b:00007fd91fd80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1659.660804][T22727] RAX: ffffffffffffffda RBX: 00007fd91f225fa0 RCX: 00007fd91ef9de59 [ 1659.668825][T22727] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 1659.676831][T22727] RBP: 00007fd91fd80090 R08: 0000000000000000 R09: 0000000000000000 [ 1659.684840][T22727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1659.692855][T22727] R13: 00007fd91f226038 R14: 00007fd91f225fa0 R15: 00007ffd9ed9ae78 [ 1659.700906][T22727] [ 1660.094346][T22752] netlink: 'syz.2.4723': attribute type 25 has an invalid length. [ 1660.112717][T22752] netlink: 'syz.2.4723': attribute type 29 has an invalid length. [ 1661.486395][T22799] __nla_validate_parse: 3 callbacks suppressed [ 1661.486418][T22799] netlink: 180 bytes leftover after parsing attributes in process `syz.5.4742'. [ 1661.650050][T22801] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4743'. [ 1662.235361][T22804] FAULT_INJECTION: forcing a failure. [ 1662.235361][T22804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1662.339564][T22804] CPU: 0 PID: 22804 Comm: syz.1.4744 Not tainted syzkaller #0 [ 1662.347130][T22804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1662.357248][T22804] Call Trace: [ 1662.360619][T22804] [ 1662.363626][T22804] dump_stack_lvl+0x188/0x24e [ 1662.368393][T22804] ? show_regs_print_info+0x12/0x12 [ 1662.373671][T22804] ? load_image+0x410/0x410 [ 1662.378280][T22804] ? __lock_acquire+0x7c40/0x7c40 [ 1662.383412][T22804] should_fail_ex+0x390/0x4c0 [ 1662.388185][T22804] _copy_from_user+0x2c/0x170 [ 1662.392936][T22804] restore_altstack+0xab/0x4e0 [ 1662.397793][T22804] ? __lock_acquire+0x7c40/0x7c40 [ 1662.402894][T22804] ? __ia32_sys_sigaltstack+0x2a0/0x2a0 [ 1662.408525][T22804] ? __might_fault+0xc2/0x120 [ 1662.413263][T22804] ? __might_fault+0xa6/0x120 [ 1662.418048][T22804] __ia32_sys_rt_sigreturn+0x624/0x750 [ 1662.423620][T22804] ? load_gs_index+0x130/0x130 [ 1662.428552][T22804] ? lock_chain_count+0x20/0x20 [ 1662.433523][T22804] ? lockdep_hardirqs_on+0x94/0x140 [ 1662.438815][T22804] do_syscall_64+0x4c/0xa0 [ 1662.443307][T22804] ? clear_bhb_loop+0x60/0xb0 [ 1662.448053][T22804] ? clear_bhb_loop+0x60/0xb0 [ 1662.452902][T22804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1662.458864][T22804] RIP: 0033:0x7fd91ef9de59 [ 1662.463349][T22804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1662.483045][T22804] RSP: 002b:00007fd91fd80028 EFLAGS: 00000246 [ 1662.489275][T22804] RAX: 0000000000000000 RBX: 00007fd91f225fa0 RCX: 00007fd91ef9de59 [ 1662.497428][T22804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1662.505463][T22804] RBP: 00007fd91fd80090 R08: 0000000000000000 R09: 0000000000000000 [ 1662.513498][T22804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1662.521562][T22804] R13: 00007fd91f226038 R14: 00007fd91f225fa0 R15: 00007ffd9ed9ae78 [ 1662.529651][T22804] [ 1662.736031][T22819] netlink: 'syz.2.4749': attribute type 2 has an invalid length. [ 1662.756824][T22819] netlink: 'syz.2.4749': attribute type 1 has an invalid length. [ 1662.783590][T22819] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.4749'. [ 1665.161938][T22838] FAULT_INJECTION: forcing a failure. [ 1665.161938][T22838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1665.223996][T22838] CPU: 1 PID: 22838 Comm: syz.2.4751 Not tainted syzkaller #0 [ 1665.231527][T22838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1665.241789][T22838] Call Trace: [ 1665.245119][T22838] [ 1665.248082][T22838] dump_stack_lvl+0x188/0x24e [ 1665.252814][T22838] ? show_regs_print_info+0x12/0x12 [ 1665.258067][T22838] ? load_image+0x410/0x410 [ 1665.262619][T22838] ? __might_fault+0xa6/0x120 [ 1665.267353][T22838] should_fail_ex+0x390/0x4c0 [ 1665.272079][T22838] copyin+0x1b/0x120 [ 1665.276031][T22838] _copy_from_iter+0x559/0x1130 [ 1665.280936][T22838] ? copyout_mc+0x110/0x110 [ 1665.285489][T22838] ? __virt_addr_valid+0x188/0x540 [ 1665.290646][T22838] ? __virt_addr_valid+0x188/0x540 [ 1665.295806][T22838] ? __virt_addr_valid+0x467/0x540 [ 1665.300968][T22838] ? __phys_addr_symbol+0x2b/0x70 [ 1665.306040][T22838] ? __check_object_size+0x4f6/0xa70 [ 1665.311373][T22838] netlink_sendmsg+0x755/0xbd0 [ 1665.316196][T22838] ? netlink_getsockopt+0x550/0x550 [ 1665.321470][T22838] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1665.327057][T22838] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1665.332373][T22838] ? security_socket_sendmsg+0x7c/0xa0 [ 1665.337878][T22838] ? netlink_getsockopt+0x550/0x550 [ 1665.343126][T22838] ____sys_sendmsg+0x5ed/0x9a0 [ 1665.347949][T22838] ? __sys_sendmsg_sock+0x30/0x30 [ 1665.353020][T22838] ? __import_iovec+0x306/0x510 [ 1665.357931][T22838] ? import_iovec+0x6f/0xa0 [ 1665.362484][T22838] ___sys_sendmsg+0x2a2/0x360 [ 1665.367214][T22838] ? __sys_sendmsg+0x2a0/0x2a0 [ 1665.372040][T22838] ? __lock_acquire+0x7c40/0x7c40 [ 1665.377134][T22838] __se_sys_sendmsg+0x1c3/0x2b0 [ 1665.382035][T22838] ? __x64_sys_sendmsg+0x80/0x80 [ 1665.387035][T22838] ? lockdep_hardirqs_on+0x94/0x140 [ 1665.392278][T22838] do_syscall_64+0x4c/0xa0 [ 1665.396742][T22838] ? clear_bhb_loop+0x60/0xb0 [ 1665.401461][T22838] ? clear_bhb_loop+0x60/0xb0 [ 1665.406196][T22838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1665.412139][T22838] RIP: 0033:0x7f46bcd9de59 [ 1665.416593][T22838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1665.436245][T22838] RSP: 002b:00007f46bdc2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1665.444704][T22838] RAX: ffffffffffffffda RBX: 00007f46bd026090 RCX: 00007f46bcd9de59 [ 1665.452712][T22838] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 000000000000000b [ 1665.460723][T22838] RBP: 00007f46bdc2b090 R08: 0000000000000000 R09: 0000000000000000 [ 1665.468736][T22838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1665.476741][T22838] R13: 00007f46bd026128 R14: 00007f46bd026090 R15: 00007fffba000a48 [ 1665.484784][T22838] [ 1666.804372][T22890] netlink: 16211 bytes leftover after parsing attributes in process `syz.5.4773'. [ 1667.474948][T22899] device veth0_vlan left promiscuous mode [ 1667.489445][T22899] device veth0_vlan entered promiscuous mode [ 1667.555847][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1667.566946][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1667.587077][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1667.944077][T22905] device syzkaller0 entered promiscuous mode [ 1668.173400][T22927] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.4786'. [ 1668.206028][T22926] netlink: 'syz.1.4787': attribute type 21 has an invalid length. [ 1668.233708][T22926] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4787'. [ 1668.457122][T22937] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.4798'. [ 1668.925159][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.937937][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.130514][T22932] netlink: 'syz.1.4787': attribute type 27 has an invalid length. [ 1670.138543][T22932] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4787'. [ 1670.148328][T22932] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1670.165902][T22935] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4788'. [ 1670.391022][T22951] FAULT_INJECTION: forcing a failure. [ 1670.391022][T22951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1670.456361][T22950] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4792'. [ 1670.483040][T22951] CPU: 1 PID: 22951 Comm: syz.4.4791 Not tainted syzkaller #0 [ 1670.490583][T22951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1670.500679][T22951] Call Trace: [ 1670.503988][T22951] [ 1670.506957][T22951] dump_stack_lvl+0x188/0x24e [ 1670.511704][T22951] ? show_regs_print_info+0x12/0x12 [ 1670.516969][T22951] ? load_image+0x410/0x410 [ 1670.521513][T22951] ? __might_fault+0xa6/0x120 [ 1670.526234][T22951] should_fail_ex+0x390/0x4c0 [ 1670.530962][T22951] copyin+0x1b/0x120 [ 1670.534919][T22951] _copy_from_iter+0x447/0x1130 [ 1670.539869][T22951] ? copyout_mc+0x110/0x110 [ 1670.544433][T22951] ? __virt_addr_valid+0x188/0x540 [ 1670.549592][T22951] ? __virt_addr_valid+0x188/0x540 [ 1670.554748][T22951] ? __virt_addr_valid+0x467/0x540 [ 1670.559908][T22951] ? __phys_addr_symbol+0x2b/0x70 [ 1670.564981][T22951] ? __check_object_size+0x4f6/0xa70 [ 1670.570318][T22951] netlink_sendmsg+0x755/0xbd0 [ 1670.575136][T22951] ? netlink_getsockopt+0x550/0x550 [ 1670.580391][T22951] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1670.585983][T22951] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1670.591399][T22951] ? security_socket_sendmsg+0x7c/0xa0 [ 1670.596896][T22951] ? netlink_getsockopt+0x550/0x550 [ 1670.602138][T22951] ____sys_sendmsg+0x5ed/0x9a0 [ 1670.606958][T22951] ? __sys_sendmsg_sock+0x30/0x30 [ 1670.612045][T22951] ? __import_iovec+0x306/0x510 [ 1670.617048][T22951] ? import_iovec+0x6f/0xa0 [ 1670.621605][T22951] ___sys_sendmsg+0x2a2/0x360 [ 1670.626332][T22951] ? __sys_sendmsg+0x2a0/0x2a0 [ 1670.631167][T22951] ? __lock_acquire+0x7c40/0x7c40 [ 1670.636281][T22951] __se_sys_sendmsg+0x1c3/0x2b0 [ 1670.641193][T22951] ? __x64_sys_sendmsg+0x80/0x80 [ 1670.646196][T22951] ? lockdep_hardirqs_on+0x94/0x140 [ 1670.651440][T22951] do_syscall_64+0x4c/0xa0 [ 1670.655904][T22951] ? clear_bhb_loop+0x60/0xb0 [ 1670.660631][T22951] ? clear_bhb_loop+0x60/0xb0 [ 1670.665363][T22951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1670.671307][T22951] RIP: 0033:0x7f373d39de59 [ 1670.675762][T22951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1670.695425][T22951] RSP: 002b:00007f373e25d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1670.703888][T22951] RAX: ffffffffffffffda RBX: 00007f373d625fa0 RCX: 00007f373d39de59 [ 1670.711921][T22951] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 1670.719924][T22951] RBP: 00007f373e25d090 R08: 0000000000000000 R09: 0000000000000000 [ 1670.727933][T22951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1670.735943][T22951] R13: 00007f373d626038 R14: 00007f373d625fa0 R15: 00007ffc3a932a78 [ 1670.744054][T22951] [ 1671.116348][T22971] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.4800'. [ 1671.433203][T22981] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4804'. [ 1674.035377][T22984] device veth0_vlan left promiscuous mode [ 1674.081633][T22984] device veth0_vlan entered promiscuous mode [ 1674.172046][T22991] bridge0: port 2(batadv0) entered blocking state [ 1674.179115][T22991] bridge0: port 2(batadv0) entered disabled state [ 1674.188149][T22991] device batadv0 entered promiscuous mode [ 1674.195725][T22991] bridge0: port 2(batadv0) entered blocking state [ 1674.202368][T22991] bridge0: port 2(batadv0) entered forwarding state [ 1674.389961][ T4327] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1674.399683][ T4327] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1676.193104][T23020] netlink: 'syz.5.4817': attribute type 49 has an invalid length. [ 1676.366982][T23021] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.4818'. [ 1676.564328][T23020] netlink: 'syz.5.4817': attribute type 49 has an invalid length. [ 1677.993176][T23047] device veth0_vlan left promiscuous mode [ 1678.004511][T23047] device veth0_vlan entered promiscuous mode [ 1678.021084][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1678.052124][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1678.085029][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1678.263857][T23064] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4830'. [ 1678.406377][T23072] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.4832'. [ 1678.474625][T23076] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1678.497722][T23076] dvmrp1: linktype set to 768 [ 1678.830095][T23087] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.4837'. [ 1678.863205][T23090] netlink: 'syz.5.4838': attribute type 29 has an invalid length. [ 1681.580065][T23090] netlink: 'syz.5.4838': attribute type 29 has an invalid length. [ 1681.590811][T23089] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4839'. [ 1683.611343][T23113] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.4846'. [ 1683.778943][T23122] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4851'. [ 1683.901450][ T4287] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 1683.986739][T23125] mac80211_hwsim hwsim235 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1684.206003][T23125] ref_ctr_offset mismatch. inode: 0x6b8 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1684.425708][T23151] netlink: 'syz.1.4856': attribute type 2 has an invalid length. [ 1684.504905][T23151] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4856'. [ 1687.498250][T23166] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.4862'. [ 1687.808227][T23176] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.4866'. [ 1688.469649][T23204] netlink: 'syz.5.4875': attribute type 2 has an invalid length. [ 1688.621539][T23204] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4875'. [ 1690.956698][T23213] batman_adv: batadv0: adding TT local entry ba:a7:8f:6a:ff:ff to non-existent VLAN 815 [ 1691.176334][T23215] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.4880'. [ 1691.400798][T23226] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4887'. [ 1691.540221][T23234] netlink: 'syz.4.4888': attribute type 10 has an invalid length. [ 1691.556547][T23234] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4888'. [ 1691.566505][T23234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1691.911623][T23248] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.4893'. [ 1694.900711][T23257] netlink: 'syz.0.4894': attribute type 2 has an invalid length. [ 1694.920043][T23257] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4894'. [ 1694.992410][T23262] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.4898'. [ 1695.390952][T23272] tap0: tun_chr_ioctl cmd 1074025675 [ 1695.414472][T23272] tap0: persist enabled [ 1695.460879][T23275] tap0: tun_chr_ioctl cmd 1074025675 [ 1695.477753][T23275] tap0: persist disabled [ 1695.518223][T23271] delete_channel: no stack [ 1696.121906][T23286] can: request_module (can-proto-0) failed. [ 1698.990932][T23314] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4912'. [ 1700.422595][T23354] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.4928'. [ 1703.487930][T23369] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4934'. [ 1704.152388][T23387] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.4942'. [ 1704.408317][T23396] netlink: 'syz.0.4945': attribute type 21 has an invalid length. [ 1704.458639][T23396] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4945'. [ 1704.549903][T23396] netlink: 'syz.0.4945': attribute type 4 has an invalid length. [ 1704.692449][T23396] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4945'. [ 1707.201891][T23405] ref_ctr_offset mismatch. inode: 0x595 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1707.836291][T23427] mac80211_hwsim hwsim243 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1707.902528][T23427] netlink: 'syz.2.4954': attribute type 10 has an invalid length. [ 1707.942556][T23427] bridge0: port 3(veth0_to_hsr) entered disabled state [ 1707.963324][T23433] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4956'. [ 1708.325247][T23441] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.4958'. [ 1708.363894][T23441] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1708.394589][T23441] dvmrp1: linktype set to 768 [ 1709.337737][T23468] netlink: 'syz.5.4967': attribute type 3 has an invalid length. [ 1709.368816][T23468] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4967'. [ 1712.766027][T23495] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.4976'. [ 1712.799318][T23495] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1712.849251][T23495] dvmrp1: linktype set to 768 [ 1713.185419][T23508] ref_ctr_offset mismatch. inode: 0x7d0 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1713.244425][T23506] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.4970'. [ 1716.244321][T23521] netlink: 154020 bytes leftover after parsing attributes in process `syz.5.4985'. [ 1716.257812][T23521] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1716.621211][T23545] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4988'. [ 1717.612807][T23557] netlink: 'syz.5.4995': attribute type 27 has an invalid length. [ 1717.672859][T23560] sctp: [Deprecated]: syz.5.4995 (pid 23560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1717.672859][T23560] Use struct sctp_sack_info instead [ 1717.988594][T23557] bond0: (slave bond_slave_0): Releasing backup interface [ 1718.299396][T23567] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4999'. [ 1719.377194][T23572] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.5001'. [ 1719.481888][T23572] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1719.955787][T23600] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.5007'. [ 1719.974299][T23600] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1719.985029][T23600] CPU: 1 PID: 23600 Comm: syz.2.5007 Not tainted syzkaller #0 [ 1719.992645][T23600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1720.002748][T23600] Call Trace: [ 1720.006093][T23600] [ 1720.009069][T23600] dump_stack_lvl+0x188/0x24e [ 1720.013818][T23600] ? show_regs_print_info+0x12/0x12 [ 1720.019077][T23600] ? load_image+0x410/0x410 [ 1720.023660][T23600] sysfs_warn_dup+0x8a/0xa0 [ 1720.028229][T23600] sysfs_do_create_link_sd+0xc0/0x110 [ 1720.033660][T23600] device_add+0x83b/0x1050 [ 1720.038151][T23600] wiphy_register+0x1d8b/0x2aa0 [ 1720.043086][T23600] ? cfg80211_event_work+0x40/0x40 [ 1720.048259][T23600] ? minstrel_ht_alloc+0x894/0xa20 [ 1720.053464][T23600] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1720.059588][T23600] ieee80211_register_hw+0x2d48/0x39f0 [ 1720.065118][T23600] ? ieee80211_register_hw+0xf61/0x39f0 [ 1720.070733][T23600] ? ieee80211_register_hw+0xf61/0x39f0 [ 1720.076357][T23600] ? ieee80211_tasklet_handler+0x20/0x20 [ 1720.082057][T23600] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1720.088020][T23600] ? __debug_object_init+0xed/0x440 [ 1720.093290][T23600] ? memset+0x1e/0x40 [ 1720.097321][T23600] ? __hrtimer_init+0x189/0x270 [ 1720.102230][T23600] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1720.108025][T23600] ? memcpy+0x3c/0x60 [ 1720.112066][T23600] hwsim_new_radio_nl+0xab7/0xc90 [ 1720.117168][T23600] genl_family_rcv_msg_doit+0x22f/0x350 [ 1720.122811][T23600] ? end_current_label_crit_section+0x170/0x170 [ 1720.129118][T23600] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1720.135073][T23600] ? bpf_lsm_capable+0x5/0x10 [ 1720.139801][T23600] ? security_capable+0x85/0xb0 [ 1720.144714][T23600] genl_rcv_msg+0x601/0x790 [ 1720.149292][T23600] ? genl_bind+0x360/0x360 [ 1720.153774][T23600] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1720.160177][T23600] netlink_rcv_skb+0x1ef/0x440 [ 1720.165001][T23600] ? genl_bind+0x360/0x360 [ 1720.169485][T23600] ? netlink_ack+0x1160/0x1160 [ 1720.174347][T23600] ? down_read+0x1a8/0x2d0 [ 1720.178831][T23600] genl_rcv+0x24/0x40 [ 1720.182871][T23600] netlink_unicast+0x7ad/0x920 [ 1720.187712][T23600] netlink_sendmsg+0x8ad/0xbd0 [ 1720.192554][T23600] ? netlink_getsockopt+0x550/0x550 [ 1720.197812][T23600] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1720.203426][T23600] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1720.208794][T23600] ? security_socket_sendmsg+0x7c/0xa0 [ 1720.214324][T23600] ? netlink_getsockopt+0x550/0x550 [ 1720.219608][T23600] ____sys_sendmsg+0x5ed/0x9a0 [ 1720.224450][T23600] ? __sys_sendmsg_sock+0x30/0x30 [ 1720.229526][T23600] ? __import_iovec+0x306/0x510 [ 1720.234438][T23600] ? import_iovec+0x6f/0xa0 [ 1720.238997][T23600] ___sys_sendmsg+0x2a2/0x360 [ 1720.243753][T23600] ? __sys_sendmsg+0x2a0/0x2a0 [ 1720.248670][T23600] __se_sys_sendmsg+0x1c3/0x2b0 [ 1720.253586][T23600] ? __x64_sys_sendmsg+0x80/0x80 [ 1720.258593][T23600] ? lockdep_hardirqs_on+0x94/0x140 [ 1720.263862][T23600] do_syscall_64+0x4c/0xa0 [ 1720.268339][T23600] ? clear_bhb_loop+0x60/0xb0 [ 1720.273088][T23600] ? clear_bhb_loop+0x60/0xb0 [ 1720.277819][T23600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1720.283762][T23600] RIP: 0033:0x7f46bcd9de59 [ 1720.288223][T23600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1720.308047][T23600] RSP: 002b:00007f46bdc0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1720.316523][T23600] RAX: ffffffffffffffda RBX: 00007f46bd026180 RCX: 00007f46bcd9de59 [ 1720.324541][T23600] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1720.332555][T23600] RBP: 00007f46bce33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1720.340574][T23600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1720.348618][T23600] R13: 00007f46bd026218 R14: 00007f46bd026180 R15: 00007fffba000a48 [ 1720.356659][T23600] [ 1720.430637][T23614] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5009'. [ 1720.448547][T23611] netlink: 92148 bytes leftover after parsing attributes in process `syz.5.5009'. [ 1720.477972][T23609] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5009'. [ 1720.858100][T23624] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.5014'. [ 1720.883880][T23623] device syzkaller0 entered promiscuous mode [ 1722.346823][T23654] sctp: [Deprecated]: syz.4.5021 (pid 23654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1722.346823][T23654] Use struct sctp_sack_info instead [ 1723.409161][T23653] netlink: 'syz.4.5021': attribute type 27 has an invalid length. [ 1723.529227][T23653] bond0: (slave bond_slave_0): Releasing backup interface [ 1723.582220][T23658] FAULT_INJECTION: forcing a failure. [ 1723.582220][T23658] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.631039][T23658] CPU: 1 PID: 23658 Comm: syz.0.5023 Not tainted syzkaller #0 [ 1723.638573][T23658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1723.648659][T23658] Call Trace: [ 1723.651974][T23658] [ 1723.654929][T23658] dump_stack_lvl+0x188/0x24e [ 1723.659649][T23658] ? show_regs_print_info+0x12/0x12 [ 1723.664888][T23658] ? load_image+0x410/0x410 [ 1723.669422][T23658] ? __lock_acquire+0x7c40/0x7c40 [ 1723.674482][T23658] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1723.680243][T23658] should_fail_ex+0x390/0x4c0 [ 1723.684959][T23658] should_failslab+0x5/0x20 [ 1723.689485][T23658] slab_pre_alloc_hook+0x59/0x300 [ 1723.694545][T23658] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1723.700837][T23658] __kmem_cache_alloc_node+0x4f/0x270 [ 1723.706245][T23658] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1723.712521][T23658] __kmalloc+0xa3/0x240 [ 1723.716717][T23658] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1723.722908][T23658] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1723.729014][T23658] genl_start+0x2a6/0x490 [ 1723.733390][T23658] __netlink_dump_start+0x3f0/0x6f0 [ 1723.738715][T23658] genl_family_rcv_msg_dumpit+0x228/0x3c0 [ 1723.744472][T23658] ? genl_rcv_msg+0x790/0x790 [ 1723.749190][T23658] ? genl_family_rcv_msg_doit+0x350/0x350 [ 1723.754944][T23658] ? genl_start+0x490/0x490 [ 1723.759485][T23658] ? genl_lock_dumpit+0x90/0x90 [ 1723.764378][T23658] ? lockdep_hardirqs_on+0x94/0x140 [ 1723.769601][T23658] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1723.775813][T23658] ? genl_get_cmd+0xe4/0x8b0 [ 1723.780437][T23658] ? memcpy+0x3c/0x60 [ 1723.784442][T23658] ? genl_get_cmd+0x518/0x8b0 [ 1723.789152][T23658] genl_rcv_msg+0x5c8/0x790 [ 1723.793701][T23658] ? genl_bind+0x360/0x360 [ 1723.798162][T23658] ? smc_stats_exit+0x80/0x80 [ 1723.802881][T23658] ? netlink_rcv_skb+0x112/0x440 [ 1723.807869][T23658] ? kasan_check_range+0xc/0x290 [ 1723.812852][T23658] netlink_rcv_skb+0x1ef/0x440 [ 1723.817655][T23658] ? genl_bind+0x360/0x360 [ 1723.822111][T23658] ? netlink_ack+0x1160/0x1160 [ 1723.826920][T23658] ? down_read+0x1a8/0x2d0 [ 1723.831374][T23658] genl_rcv+0x24/0x40 [ 1723.835404][T23658] netlink_unicast+0x7ad/0x920 [ 1723.840214][T23658] netlink_sendmsg+0x8ad/0xbd0 [ 1723.845034][T23658] ? lockdep_hardirqs_on+0x94/0x140 [ 1723.850264][T23658] ? netlink_getsockopt+0x550/0x550 [ 1723.855501][T23658] ? security_socket_sendmsg+0x41/0xa0 [ 1723.860990][T23658] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1723.866301][T23658] ? security_socket_sendmsg+0x7c/0xa0 [ 1723.871793][T23658] ? netlink_getsockopt+0x550/0x550 [ 1723.877029][T23658] ____sys_sendmsg+0x5ed/0x9a0 [ 1723.881834][T23658] ? __sys_sendmsg_sock+0x30/0x30 [ 1723.886889][T23658] ? __import_iovec+0x306/0x510 [ 1723.891777][T23658] ? import_iovec+0x6f/0xa0 [ 1723.896333][T23658] ___sys_sendmsg+0x2a2/0x360 [ 1723.901053][T23658] ? __sys_sendmsg+0x2a0/0x2a0 [ 1723.905889][T23658] __se_sys_sendmsg+0x1c3/0x2b0 [ 1723.910770][T23658] ? __x64_sys_sendmsg+0x80/0x80 [ 1723.915778][T23658] do_syscall_64+0x4c/0xa0 [ 1723.920229][T23658] ? clear_bhb_loop+0x60/0xb0 [ 1723.924962][T23658] ? clear_bhb_loop+0x60/0xb0 [ 1723.929672][T23658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1723.935594][T23658] RIP: 0033:0x7fc92339de59 [ 1723.940036][T23658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1723.959672][T23658] RSP: 002b:00007fc9241f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1723.968115][T23658] RAX: ffffffffffffffda RBX: 00007fc923625fa0 RCX: 00007fc92339de59 [ 1723.976108][T23658] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1723.984107][T23658] RBP: 00007fc9241f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.992118][T23658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1724.000149][T23658] R13: 00007fc923626038 R14: 00007fc923625fa0 R15: 00007ffe43b76578 [ 1724.008159][T23658] [ 1724.432650][T23669] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5029'. [ 1724.851365][T23683] device syzkaller0 entered promiscuous mode [ 1724.875552][T23684] netlink: 'syz.2.5032': attribute type 10 has an invalid length. [ 1725.176502][ T4287] Bluetooth: hci5: unexpected subevent 0x05 length: 150 > 12 [ 1727.240716][ T4287] Bluetooth: hci5: command 0x201b tx timeout [ 1727.771309][T23738] FAULT_INJECTION: forcing a failure. [ 1727.771309][T23738] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.847533][T23738] CPU: 1 PID: 23738 Comm: syz.1.5045 Not tainted syzkaller #0 [ 1727.855114][T23738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1727.865218][T23738] Call Trace: [ 1727.868541][T23738] [ 1727.871514][T23738] dump_stack_lvl+0x188/0x24e [ 1727.876251][T23738] ? show_regs_print_info+0x12/0x12 [ 1727.881539][T23738] ? load_image+0x410/0x410 [ 1727.886080][T23738] ? verify_lock_unused+0x140/0x140 [ 1727.891319][T23738] should_fail_ex+0x390/0x4c0 [ 1727.896033][T23738] should_failslab+0x5/0x20 [ 1727.900566][T23738] slab_pre_alloc_hook+0x59/0x300 [ 1727.905627][T23738] kmem_cache_alloc+0x56/0x2f0 [ 1727.910435][T23738] ? skb_clone+0x1e7/0x370 [ 1727.914895][T23738] skb_clone+0x1e7/0x370 [ 1727.919177][T23738] __netlink_deliver_tap+0x3e4/0x7e0 [ 1727.924508][T23738] ? netlink_deliver_tap+0x2e/0x1b0 [ 1727.929739][T23738] netlink_deliver_tap+0x19c/0x1b0 [ 1727.934895][T23738] netlink_unicast+0x777/0x920 [ 1727.939721][T23738] netlink_sendmsg+0x8ad/0xbd0 [ 1727.944523][T23738] ? netlink_getsockopt+0x550/0x550 [ 1727.949756][T23738] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1727.955330][T23738] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1727.960679][T23738] ? security_socket_sendmsg+0x7c/0xa0 [ 1727.966167][T23738] ? netlink_getsockopt+0x550/0x550 [ 1727.971398][T23738] ____sys_sendmsg+0x5ed/0x9a0 [ 1727.976197][T23738] ? __sys_sendmsg_sock+0x30/0x30 [ 1727.981251][T23738] ? __import_iovec+0x306/0x510 [ 1727.986139][T23738] ? import_iovec+0x6f/0xa0 [ 1727.990789][T23738] ___sys_sendmsg+0x2a2/0x360 [ 1727.995505][T23738] ? __sys_sendmsg+0x2a0/0x2a0 [ 1728.000321][T23738] ? __lock_acquire+0x7c40/0x7c40 [ 1728.005399][T23738] __se_sys_sendmsg+0x1c3/0x2b0 [ 1728.010287][T23738] ? __x64_sys_sendmsg+0x80/0x80 [ 1728.015359][T23738] ? lockdep_hardirqs_on+0x94/0x140 [ 1728.020590][T23738] do_syscall_64+0x4c/0xa0 [ 1728.025039][T23738] ? clear_bhb_loop+0x60/0xb0 [ 1728.029749][T23738] ? clear_bhb_loop+0x60/0xb0 [ 1728.034462][T23738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1728.040390][T23738] RIP: 0033:0x7fd91ef9de59 [ 1728.044835][T23738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1728.064466][T23738] RSP: 002b:00007fd91fd80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1728.072997][T23738] RAX: ffffffffffffffda RBX: 00007fd91f225fa0 RCX: 00007fd91ef9de59 [ 1728.081090][T23738] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1728.089093][T23738] RBP: 00007fd91fd80090 R08: 0000000000000000 R09: 0000000000000000 [ 1728.097093][T23738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1728.105109][T23738] R13: 00007fd91f226038 R14: 00007fd91f225fa0 R15: 00007ffd9ed9ae78 [ 1728.113129][T23738] [ 1728.558852][T23753] FAULT_INJECTION: forcing a failure. [ 1728.558852][T23753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1728.667849][T23753] CPU: 0 PID: 23753 Comm: syz.0.5051 Not tainted syzkaller #0 [ 1728.675388][T23753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1728.685579][T23753] Call Trace: [ 1728.688899][T23753] [ 1728.691869][T23753] dump_stack_lvl+0x188/0x24e [ 1728.696609][T23753] ? show_regs_print_info+0x12/0x12 [ 1728.701862][T23753] ? load_image+0x410/0x410 [ 1728.706425][T23753] ? __lock_acquire+0x7c40/0x7c40 [ 1728.711510][T23753] ? snprintf+0xe5/0x140 [ 1728.715798][T23753] should_fail_ex+0x390/0x4c0 [ 1728.720620][T23753] _copy_to_user+0x2c/0x130 [ 1728.725170][T23753] simple_read_from_buffer+0xe3/0x150 [ 1728.730601][T23753] proc_fail_nth_read+0x1a6/0x220 [ 1728.735670][T23753] ? proc_fault_inject_write+0x310/0x310 [ 1728.741336][T23753] ? fsnotify_perm+0x248/0x550 [ 1728.746136][T23753] ? proc_fault_inject_write+0x310/0x310 [ 1728.751792][T23753] vfs_read+0x2db/0x960 [ 1728.755996][T23753] ? kernel_read+0x1e0/0x1e0 [ 1728.760623][T23753] ? __fget_files+0x28/0x460 [ 1728.765246][T23753] ? __fget_files+0x3fc/0x460 [ 1728.769988][T23753] ? __fdget_pos+0x2ae/0x360 [ 1728.774609][T23753] ? ksys_read+0x70/0x260 [ 1728.778979][T23753] ksys_read+0x14d/0x260 [ 1728.783260][T23753] ? vfs_write+0x9a0/0x9a0 [ 1728.787719][T23753] ? lockdep_hardirqs_on+0x94/0x140 [ 1728.792952][T23753] do_syscall_64+0x4c/0xa0 [ 1728.797404][T23753] ? clear_bhb_loop+0x60/0xb0 [ 1728.802121][T23753] ? clear_bhb_loop+0x60/0xb0 [ 1728.806838][T23753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1728.812758][T23753] RIP: 0033:0x7fc92335e68e [ 1728.817289][T23753] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1728.836919][T23753] RSP: 002b:00007fc9241effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1728.845359][T23753] RAX: ffffffffffffffda RBX: 00007fc9241f06c0 RCX: 00007fc92335e68e [ 1728.853377][T23753] RDX: 000000000000000f RSI: 00007fc9241f00a0 RDI: 0000000000000004 [ 1728.861395][T23753] RBP: 00007fc9241f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1728.869399][T23753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1728.877412][T23753] R13: 00007fc923626038 R14: 00007fc923625fa0 R15: 00007ffe43b76578 [ 1728.885432][T23753] [ 1729.371630][T23767] netlink: 'syz.0.5055': attribute type 21 has an invalid length. [ 1729.405011][T23765] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5053'. [ 1730.503909][T23788] FAULT_INJECTION: forcing a failure. [ 1730.503909][T23788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1730.520479][T23788] CPU: 0 PID: 23788 Comm: syz.2.5061 Not tainted syzkaller #0 [ 1730.527988][T23788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1730.538082][T23788] Call Trace: [ 1730.541396][T23788] [ 1730.544375][T23788] dump_stack_lvl+0x188/0x24e [ 1730.549111][T23788] ? show_regs_print_info+0x12/0x12 [ 1730.554360][T23788] ? load_image+0x410/0x410 [ 1730.558911][T23788] ? __lock_acquire+0x7c40/0x7c40 [ 1730.563989][T23788] should_fail_ex+0x390/0x4c0 [ 1730.568774][T23788] _copy_from_user+0x2c/0x170 [ 1730.573497][T23788] __sys_bpf+0x2ea/0x780 [ 1730.577793][T23788] ? bpf_link_show_fdinfo+0x380/0x380 [ 1730.583231][T23788] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1730.589447][T23788] __x64_sys_bpf+0x78/0x90 [ 1730.593922][T23788] do_syscall_64+0x4c/0xa0 [ 1730.598447][T23788] ? clear_bhb_loop+0x60/0xb0 [ 1730.603179][T23788] ? clear_bhb_loop+0x60/0xb0 [ 1730.607902][T23788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1730.613842][T23788] RIP: 0033:0x7f46bcd9de59 [ 1730.618294][T23788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1730.637974][T23788] RSP: 002b:00007f46bdc2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1730.646449][T23788] RAX: ffffffffffffffda RBX: 00007f46bd026090 RCX: 00007f46bcd9de59 [ 1730.654460][T23788] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1730.662465][T23788] RBP: 00007f46bdc2b090 R08: 0000000000000000 R09: 0000000000000000 [ 1730.670474][T23788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1730.671618][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.678462][T23788] R13: 00007f46bd026128 R14: 00007f46bd026090 R15: 00007fffba000a48 [ 1730.678499][T23788] [ 1730.684875][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.215287][T23802] netlink: 'syz.1.5066': attribute type 10 has an invalid length. [ 1731.288668][T23802] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.390316][T23802] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.480897][T23802] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.501188][T23802] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.583438][T23810] FAULT_INJECTION: forcing a failure. [ 1731.583438][T23810] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.628009][T23810] CPU: 1 PID: 23810 Comm: syz.2.5068 Not tainted syzkaller #0 [ 1731.635586][T23810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1731.645692][T23810] Call Trace: [ 1731.649010][T23810] [ 1731.651976][T23810] dump_stack_lvl+0x188/0x24e [ 1731.656716][T23810] ? show_regs_print_info+0x12/0x12 [ 1731.661966][T23810] ? load_image+0x410/0x410 [ 1731.666516][T23810] ? __might_sleep+0xd0/0xd0 [ 1731.671166][T23810] ? __lock_acquire+0x7c40/0x7c40 [ 1731.676247][T23810] should_fail_ex+0x390/0x4c0 [ 1731.680981][T23810] should_failslab+0x5/0x20 [ 1731.685513][T23810] slab_pre_alloc_hook+0x59/0x300 [ 1731.690571][T23810] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 1731.695976][T23810] __kmem_cache_alloc_node+0x4f/0x270 [ 1731.701384][T23810] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 1731.706783][T23810] kmalloc_trace+0x26/0xe0 [ 1731.711235][T23810] tcp_sendmsg_fastopen+0x1d5/0x600 [ 1731.716474][T23810] tcp_sendmsg_locked+0x356b/0x39e0 [ 1731.721729][T23810] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1731.728350][T23810] ? is_bpf_text_address+0x22/0x2a0 [ 1731.733585][T23810] ? mark_lock+0x94/0x320 [ 1731.737965][T23810] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1731.743985][T23810] ? lock_chain_count+0x20/0x20 [ 1731.748903][T23810] ? tcp_set_state+0x520/0x520 [ 1731.753730][T23810] tcp_sendmsg+0x2b/0x40 [ 1731.758007][T23810] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 1731.763242][T23810] ____sys_sendmsg+0x5ed/0x9a0 [ 1731.768038][T23810] ? __lock_acquire+0x7c40/0x7c40 [ 1731.773098][T23810] ? __sys_sendmsg_sock+0x30/0x30 [ 1731.778171][T23810] ? __import_iovec+0x306/0x510 [ 1731.783061][T23810] ? import_iovec+0x6f/0xa0 [ 1731.787601][T23810] ___sys_sendmsg+0x2a2/0x360 [ 1731.792319][T23810] ? __sys_sendmsg+0x2a0/0x2a0 [ 1731.797217][T23810] ? __lock_acquire+0x7c40/0x7c40 [ 1731.802297][T23810] __se_sys_sendmsg+0x1c3/0x2b0 [ 1731.807181][T23810] ? __x64_sys_sendmsg+0x80/0x80 [ 1731.812185][T23810] ? lockdep_hardirqs_on+0x94/0x140 [ 1731.817420][T23810] do_syscall_64+0x4c/0xa0 [ 1731.821869][T23810] ? clear_bhb_loop+0x60/0xb0 [ 1731.826584][T23810] ? clear_bhb_loop+0x60/0xb0 [ 1731.831292][T23810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1731.837216][T23810] RIP: 0033:0x7f46bcd9de59 [ 1731.841664][T23810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1731.861298][T23810] RSP: 002b:00007f46bdc4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1731.869745][T23810] RAX: ffffffffffffffda RBX: 00007f46bd025fa0 RCX: 00007f46bcd9de59 [ 1731.877748][T23810] RDX: 0000000020000000 RSI: 0000200000002ec0 RDI: 0000000000000003 [ 1731.885753][T23810] RBP: 00007f46bdc4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1731.893922][T23810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1731.901918][T23810] R13: 00007f46bd026038 R14: 00007f46bd025fa0 R15: 00007fffba000a48 [ 1731.910022][T23810] [ 1732.506745][T23827] netlink: 'syz.2.5074': attribute type 28 has an invalid length. [ 1732.565053][T23827] netlink: 'syz.2.5074': attribute type 4 has an invalid length. [ 1732.590972][T23827] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5074'. [ 1733.612263][T23855] netlink: 'syz.0.5084': attribute type 10 has an invalid length. [ 1733.687920][T23855] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5084'. [ 1735.163220][T23895] device syzkaller0 entered promiscuous mode [ 1735.193203][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1737.663747][T23949] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5117'. [ 1737.766635][T23950] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.5118'. [ 1738.181429][T23955] device syzkaller0 entered promiscuous mode [ 1738.614303][T23971] device syzkaller0 entered promiscuous mode [ 1738.855581][T23982] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.5130'. [ 1739.085063][T23988] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5132'. [ 1741.162720][T23995] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5135'. [ 1742.035654][T24019] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.5146'. [ 1742.182095][T24026] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5144'. [ 1742.584059][T24022] bridge0: port 2(ip6gretap0) entered blocking state [ 1742.597911][T24022] bridge0: port 2(ip6gretap0) entered disabled state [ 1742.609478][T24022] device ip6gretap0 entered promiscuous mode [ 1742.625191][T24025] device ip6gretap0 left promiscuous mode [ 1742.631441][T24025] bridge0: port 2(ip6gretap0) entered disabled state [ 1744.995533][T24031] device syzkaller0 entered promiscuous mode [ 1745.055061][T24038] FAULT_INJECTION: forcing a failure. [ 1745.055061][T24038] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.129243][T24038] CPU: 1 PID: 24038 Comm: syz.1.5147 Not tainted syzkaller #0 [ 1745.136792][T24038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1745.146888][T24038] Call Trace: [ 1745.150202][T24038] [ 1745.153174][T24038] dump_stack_lvl+0x188/0x24e [ 1745.157912][T24038] ? show_regs_print_info+0x12/0x12 [ 1745.163165][T24038] ? load_image+0x410/0x410 [ 1745.167760][T24038] ? __might_sleep+0xd0/0xd0 [ 1745.172405][T24038] ? __lock_acquire+0x7c40/0x7c40 [ 1745.177494][T24038] should_fail_ex+0x390/0x4c0 [ 1745.182230][T24038] should_failslab+0x5/0x20 [ 1745.186778][T24038] slab_pre_alloc_hook+0x59/0x300 [ 1745.191900][T24038] ? sctp_association_new+0x86/0x2520 [ 1745.197311][T24038] __kmem_cache_alloc_node+0x4f/0x270 [ 1745.202726][T24038] ? sctp_association_new+0x86/0x2520 [ 1745.208147][T24038] kmalloc_trace+0x26/0xe0 [ 1745.212599][T24038] sctp_association_new+0x86/0x2520 [ 1745.217842][T24038] sctp_connect_new_asoc+0x2da/0x6a0 [ 1745.223178][T24038] ? __sctp_connect+0xd80/0xd80 [ 1745.228072][T24038] ? __local_bh_enable_ip+0x136/0x1c0 [ 1745.233471][T24038] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1745.239041][T24038] ? security_sctp_bind_connect+0x85/0xb0 [ 1745.244849][T24038] sctp_sendmsg+0x1686/0x2940 [ 1745.249595][T24038] ? sctp_getsockopt+0x8a0/0x8a0 [ 1745.254569][T24038] ? __might_fault+0xa6/0x120 [ 1745.259272][T24038] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1745.265713][T24038] ? aa_sock_msg_perm+0x94/0x150 [ 1745.270685][T24038] ? inet_sendmsg+0xca/0x2a0 [ 1745.275324][T24038] ? inet_send_prepare+0x250/0x250 [ 1745.280501][T24038] ____sys_sendmsg+0x5ed/0x9a0 [ 1745.285316][T24038] ? __sys_sendmsg_sock+0x30/0x30 [ 1745.290376][T24038] ? __import_iovec+0x306/0x510 [ 1745.295266][T24038] ? import_iovec+0x6f/0xa0 [ 1745.299805][T24038] ___sys_sendmsg+0x2a2/0x360 [ 1745.304538][T24038] ? __sys_sendmsg+0x2a0/0x2a0 [ 1745.309347][T24038] ? __lock_acquire+0x7c40/0x7c40 [ 1745.314426][T24038] __se_sys_sendmsg+0x1c3/0x2b0 [ 1745.319325][T24038] ? __x64_sys_sendmsg+0x80/0x80 [ 1745.324310][T24038] ? lockdep_hardirqs_on+0x94/0x140 [ 1745.329576][T24038] do_syscall_64+0x4c/0xa0 [ 1745.334026][T24038] ? clear_bhb_loop+0x60/0xb0 [ 1745.338737][T24038] ? clear_bhb_loop+0x60/0xb0 [ 1745.343445][T24038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1745.349487][T24038] RIP: 0033:0x7fd91ef9de59 [ 1745.353944][T24038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1745.373582][T24038] RSP: 002b:00007fd91fd80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1745.382045][T24038] RAX: ffffffffffffffda RBX: 00007fd91f225fa0 RCX: 00007fd91ef9de59 [ 1745.390049][T24038] RDX: 0000000020000040 RSI: 0000200000000e80 RDI: 0000000000000003 [ 1745.398079][T24038] RBP: 00007fd91fd80090 R08: 0000000000000000 R09: 0000000000000000 [ 1745.406087][T24038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1745.414107][T24038] R13: 00007fd91f226038 R14: 00007fd91f225fa0 R15: 00007ffd9ed9ae78 [ 1745.422124][T24038] [ 1747.247570][T24040] netlink: 763 bytes leftover after parsing attributes in process `syz.5.5148'. [ 1747.256787][T24044] device wlan1 entered promiscuous mode [ 1747.272655][T24047] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5150'. [ 1747.435048][T24049] device syzkaller0 entered promiscuous mode [ 1747.684887][T24058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5155'. [ 1747.926783][T24065] FAULT_INJECTION: forcing a failure. [ 1747.926783][T24065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1747.964111][T24065] CPU: 1 PID: 24065 Comm: syz.1.5159 Not tainted syzkaller #0 [ 1747.971663][T24065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1747.981766][T24065] Call Trace: [ 1747.985070][T24065] [ 1747.988057][T24065] dump_stack_lvl+0x188/0x24e [ 1747.992771][T24065] ? show_regs_print_info+0x12/0x12 [ 1747.998005][T24065] ? load_image+0x410/0x410 [ 1748.002540][T24065] ? __lock_acquire+0x7c40/0x7c40 [ 1748.007635][T24065] should_fail_ex+0x390/0x4c0 [ 1748.012346][T24065] _copy_from_user+0x2c/0x170 [ 1748.017053][T24065] __sys_bpf+0x2ea/0x780 [ 1748.021331][T24065] ? bpf_link_show_fdinfo+0x380/0x380 [ 1748.026760][T24065] ? lock_chain_count+0x20/0x20 [ 1748.031651][T24065] __x64_sys_bpf+0x78/0x90 [ 1748.036101][T24065] do_syscall_64+0x4c/0xa0 [ 1748.040569][T24065] ? clear_bhb_loop+0x60/0xb0 [ 1748.045277][T24065] ? clear_bhb_loop+0x60/0xb0 [ 1748.050000][T24065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1748.055932][T24065] RIP: 0033:0x7fd91ef9de59 [ 1748.060368][T24065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1748.080002][T24065] RSP: 002b:00007fd91fd80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1748.088445][T24065] RAX: ffffffffffffffda RBX: 00007fd91f225fa0 RCX: 00007fd91ef9de59 [ 1748.096466][T24065] RDX: 0000000000000094 RSI: 0000200000002c80 RDI: 0000000000000005 [ 1748.104504][T24065] RBP: 00007fd91fd80090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.112507][T24065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.120506][T24065] R13: 00007fd91f226038 R14: 00007fd91f225fa0 R15: 00007ffd9ed9ae78 [ 1748.128526][T24065] [ 1748.210615][T24067] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.5158'. [ 1750.893227][T24097] device syzkaller0 entered promiscuous mode [ 1750.979791][T24103] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5173'. [ 1751.582217][T24115] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5178'. [ 1753.739842][T24125] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.5182'. [ 1753.755906][T24129] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5184'. [ 1753.765152][T24128] netdevsim netdevsim1: Direct firmware load for Ö failed with error -2 [ 1753.791150][T24128] netdevsim netdevsim1: Falling back to sysfs fallback for: Ö [ 1754.075564][T24135] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5187'. [ 1754.210662][T24144] netlink: 'syz.1.5188': attribute type 1 has an invalid length. [ 1754.243378][T24144] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.5188'. [ 1754.265634][T24139] mac80211_hwsim hwsim249 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1754.423567][T24152] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.5193'. [ 1755.275370][T24165] device syzkaller0 entered promiscuous mode [ 1755.841792][T24177] netlink: 'syz.0.5199': attribute type 28 has an invalid length. [ 1755.932772][T24177] netlink: 'syz.0.5199': attribute type 4 has an invalid length. [ 1755.989224][T24177] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5199'. [ 1756.314364][T24188] netlink: 'syz.0.5201': attribute type 4 has an invalid length. [ 1756.354967][T24188] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5201'. [ 1756.439752][T24192] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.5202'. [ 1756.932718][ T4326] wlan1: Trigger new scan to find an IBSS to join [ 1757.828456][T24209] netlink: 'syz.4.5208': attribute type 2 has an invalid length. [ 1757.836632][T24209] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5208'. [ 1758.765493][T24205] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1758.804935][T24205] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1758.830268][T24205] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1759.092771][T24220] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5210'. [ 1759.334334][T24225] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.5214'. [ 1759.957581][ T4342] wlan1: Trigger new scan to find an IBSS to join [ 1760.161541][T24240] device syzkaller0 entered promiscuous mode [ 1761.020137][T24268] FAULT_INJECTION: forcing a failure. [ 1761.020137][T24268] name failslab, interval 1, probability 0, space 0, times 0 [ 1761.036358][T24268] CPU: 0 PID: 24268 Comm: syz.0.5230 Not tainted syzkaller #0 [ 1761.043894][T24268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1761.054009][T24268] Call Trace: [ 1761.057320][T24268] [ 1761.060298][T24268] dump_stack_lvl+0x188/0x24e [ 1761.065044][T24268] ? show_regs_print_info+0x12/0x12 [ 1761.070291][T24268] ? load_image+0x410/0x410 [ 1761.074843][T24268] ? __might_sleep+0xd0/0xd0 [ 1761.079487][T24268] ? __lock_acquire+0x7c40/0x7c40 [ 1761.084542][T24268] should_fail_ex+0x390/0x4c0 [ 1761.089252][T24268] should_failslab+0x5/0x20 [ 1761.093800][T24268] slab_pre_alloc_hook+0x59/0x300 [ 1761.098867][T24268] ? __lock_acquire+0x138a/0x7c40 [ 1761.103921][T24268] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1761.109708][T24268] __kmem_cache_alloc_node+0x4f/0x270 [ 1761.115112][T24268] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1761.120884][T24268] __kmalloc+0xa3/0x240 [ 1761.125076][T24268] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1761.130671][T24268] ? tomoyo_domain+0xd2/0x120 [ 1761.135414][T24268] ? tomoyo_path_number_perm+0x205/0x650 [ 1761.141135][T24268] tomoyo_path_number_perm+0x22f/0x650 [ 1761.146676][T24268] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1761.152209][T24268] ? ksys_write+0x1ce/0x260 [ 1761.156776][T24268] ? common_file_perm+0x171/0x1c0 [ 1761.161925][T24268] ? __fget_files+0x28/0x460 [ 1761.166563][T24268] security_file_ioctl+0x6c/0xa0 [ 1761.171562][T24268] __se_sys_ioctl+0x48/0x170 [ 1761.176210][T24268] do_syscall_64+0x4c/0xa0 [ 1761.180646][T24268] ? clear_bhb_loop+0x60/0xb0 [ 1761.185386][T24268] ? clear_bhb_loop+0x60/0xb0 [ 1761.190116][T24268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1761.196035][T24268] RIP: 0033:0x7fc92339de59 [ 1761.200516][T24268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1761.220143][T24268] RSP: 002b:00007fc9241f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1761.228580][T24268] RAX: ffffffffffffffda RBX: 00007fc923625fa0 RCX: 00007fc92339de59 [ 1761.236588][T24268] RDX: 00007ffffffff000 RSI: 00000000c004743e RDI: 0000000000000004 [ 1761.244617][T24268] RBP: 00007fc9241f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1761.252627][T24268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1761.260635][T24268] R13: 00007fc923626038 R14: 00007fc923625fa0 R15: 00007ffe43b76578 [ 1761.268647][T24268] [ 1761.282238][T24268] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1762.542882][T24270] netlink: 'syz.0.5231': attribute type 2 has an invalid length. [ 1762.595166][T24270] netlink: 'syz.0.5231': attribute type 8 has an invalid length. [ 1762.613987][T24270] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5231'. [ 1762.786694][T24275] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.5232'. [ 1762.998701][ T46] wlan1: Trigger new scan to find an IBSS to join [ 1765.793010][ T5031] wlan1: Creating new IBSS network, BSSID 5a:b2:0a:6e:5b:88 [ 1765.805734][T24299] netlink: 'syz.0.5240': attribute type 12 has an invalid length. [ 1765.844886][T24299] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5240'. [ 1766.436809][T24311] device syzkaller0 entered promiscuous mode [ 1767.426791][T24335] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5252'. [ 1769.432561][T24326] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5248'. [ 1769.861824][T24363] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5259'. [ 1770.045872][T24366] device syzkaller0 entered promiscuous mode [ 1770.055365][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1770.177320][T24373] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5264'. [ 1770.199587][T24366] netlink: 'syz.2.5263': attribute type 10 has an invalid length. [ 1770.481664][T24382] device syzkaller0 entered promiscuous mode [ 1771.528513][T24409] netlink: 'syz.5.5277': attribute type 3 has an invalid length. [ 1771.550879][T24409] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5277'. [ 1772.955544][T24401] netlink: 'syz.4.5275': attribute type 2 has an invalid length. [ 1772.963570][T24403] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5275'. [ 1773.042192][T24407] netlink: 'syz.4.5275': attribute type 10 has an invalid length. [ 1773.051562][T24407] bond0: (slave bridge_slave_1): Releasing backup interface [ 1773.277141][T24416] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5280'. [ 1773.517591][T24426] netlink: 'syz.4.5282': attribute type 29 has an invalid length. [ 1773.572371][T24426] netlink: 'syz.4.5282': attribute type 29 has an invalid length. [ 1777.205239][T24444] device syzkaller0 entered promiscuous mode [ 1777.711331][T24460] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5297'. [ 1778.076366][T24468] netlink: 'syz.2.5300': attribute type 3 has an invalid length. [ 1778.102495][T24468] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5300'. [ 1781.154618][T24473] netlink: 'syz.2.5300': attribute type 1 has an invalid length. [ 1782.101608][T24514] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5316'. [ 1782.301040][T24523] netlink: 'syz.5.5319': attribute type 29 has an invalid length. [ 1782.854162][T24523] netlink: 'syz.5.5319': attribute type 29 has an invalid length. [ 1782.873855][T24525] netlink: 'syz.5.5319': attribute type 29 has an invalid length. [ 1783.083309][T24532] device syzkaller0 entered promiscuous mode [ 1787.326234][T24569] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.5330'. [ 1789.696597][T24606] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5345'. [ 1790.550776][T24612] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5357'. [ 1791.800652][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.807077][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.674476][T24623] bond0: (slave bridge_slave_1): Error: Slave has XDP program loaded, please unload before enslaving [ 1792.758116][T24624] netlink: 'syz.1.5348': attribute type 10 has an invalid length. [ 1794.736204][T24677] netlink: 'syz.2.5369': attribute type 8 has an invalid length. [ 1794.752095][T24677] netlink: 'syz.2.5369': attribute type 9 has an invalid length. [ 1794.762817][T24677] netlink: 'syz.2.5369': attribute type 10 has an invalid length. [ 1794.794001][T24677] netlink: 'syz.2.5369': attribute type 11 has an invalid length. [ 1794.837027][T24677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5369'. [ 1794.892175][T24677] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.5369'. [ 1795.007085][T24680] device syzkaller0 entered promiscuous mode [ 1795.860451][ T4326] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1801.792343][T24701] netlink: 'syz.2.5374': attribute type 22 has an invalid length. [ 1801.800688][T24701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5374'. [ 1803.896176][T24760] netlink: 63219 bytes leftover after parsing attributes in process `syz.4.5396'. [ 1803.931575][T24760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5396'. [ 1804.193866][T24763] device syzkaller0 entered promiscuous mode [ 1806.314687][T24789] delete_channel: no stack [ 1808.233210][T24812] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5417'. [ 1808.983411][T24832] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.5423'. [ 1809.188958][T24823] delete_channel: no stack [ 1809.505896][T24841] device syzkaller0 entered promiscuous mode [ 1809.691861][T24853] netlink: 'syz.0.5429': attribute type 7 has an invalid length. [ 1809.906532][T24858] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.5432'. [ 1813.124854][T24875] netlink: 'syz.4.5435': attribute type 6 has an invalid length. [ 1813.133127][T24875] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5435'. [ 1813.171136][T24873] device syzkaller0 entered promiscuous mode [ 1815.599708][T24901] netlink: 'syz.0.5443': attribute type 2 has an invalid length. [ 1815.612236][T24901] netlink: 'syz.0.5443': attribute type 8 has an invalid length. [ 1815.630633][T24901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5443'. [ 1816.044896][T24907] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.5445'. [ 1816.386685][T24915] device syzkaller0 entered promiscuous mode [ 1819.262215][T24951] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.5462'. [ 1819.361993][T24957] device aaaaaaaaaaaaaaa entered promiscuous mode [ 1846.857605][T11795] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2631 jiffies s: 452241 root: 0x2/. [ 1846.872309][T11795] rcu: blocking rcu_node structures (internal RCU debug): [ 1846.879508][T11795] Sending NMI from CPU 0 to CPUs 1: [ 1846.884753][ C1] NMI backtrace for cpu 1 [ 1846.884764][ C1] CPU: 1 PID: 24966 Comm: syz.4.5467 Not tainted syzkaller #0 [ 1846.884781][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1846.884792][ C1] RIP: 0010:preempt_count_sub+0x2/0x160 [ 1846.884820][ C1] Code: c1 68 56 21 8e 80 e1 07 80 c1 03 38 c1 0f 8c 6e ff ff ff 48 c7 c7 68 56 21 8e e8 49 89 7a 00 89 df e9 5b ff ff ff 66 90 55 53 <48> bb 00 00 00 00 00 fc ff df 48 c7 c0 40 71 c1 96 48 c1 e8 03 0f [ 1846.884835][ C1] RSP: 0018:ffffc900001dfce8 EFLAGS: 00000086 [ 1846.884850][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: a9534bba6d17e900 [ 1846.884862][ C1] RDX: 0000000000000100 RSI: ffffffff8a81e5e0 RDI: 0000000000000001 [ 1846.884874][ C1] RBP: ffffc900001dfe88 R08: ffffffff8e2121af R09: 1ffffffff1c42435 [ 1846.884887][ C1] R10: dffffc0000000000 R11: fffffbfff1c42436 R12: ffffc9000c367f58 [ 1846.884900][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc900001dfe00 [ 1846.884913][ C1] FS: 00007f373e25d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1846.884929][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1846.884941][ C1] CR2: 00007f373e23cd58 CR3: 0000000073d80000 CR4: 00000000003506e0 [ 1846.884957][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 1846.884968][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1846.884980][ C1] Call Trace: [ 1846.884986][ C1] [ 1846.884992][ C1] kvm_guest_state+0x36/0xf0 [ 1846.885014][ C1] perf_callchain_user+0x1e/0x13c0 [ 1846.885044][ C1] ? get_callchain_entry+0x181/0x3b0 [ 1846.885070][ C1] get_perf_callchain+0x39e/0x490 [ 1846.885095][ C1] ? put_callchain_entry+0xb0/0xb0 [ 1846.885122][ C1] ? __perf_event_header__init_id+0x421/0x530 [ 1846.885150][ C1] perf_prepare_sample+0x399/0x2020 [ 1846.885178][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1846.885203][ C1] ? perf_callchain+0x190/0x190 [ 1846.885232][ C1] perf_event_output_forward+0x197/0x2f0 [ 1846.885257][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 1846.885288][ C1] ? perf_get_page_size+0x430/0x430 [ 1846.885319][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 1846.885346][ C1] __perf_event_overflow+0x457/0x630 [ 1846.885375][ C1] perf_swevent_event+0x315/0x570 [ 1846.885402][ C1] ? perf_tp_event+0xc10/0xc10 [ 1846.885427][ C1] ? perf_trace_buf_alloc+0x300/0x300 [ 1846.885445][ C1] ? __perf_event_overflow+0x50a/0x630 [ 1846.885510][ C1] perf_tp_event+0x36b/0xc10 [ 1846.885536][ C1] ? mark_lock+0x94/0x320 [ 1846.885560][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1846.885585][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1846.885633][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 1846.885649][ C1] ? sched_clock_cpu+0x6e/0x260 [ 1846.885671][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1846.885699][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 1846.885725][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 1846.885748][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1846.885773][ C1] ? __irq_exit_rcu+0x147/0x230 [ 1846.885790][ C1] ? irq_exit_rcu+0x20/0x20 [ 1846.885807][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 1846.885830][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 1846.885855][ C1] trace_hardirqs_on+0x24/0x40 [ 1846.885876][ C1] asm_sysvec_irq_work+0x16/0x20 [ 1846.885897][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1846.885916][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 52 82 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1846.885930][ C1] RSP: 0018:ffffc900001e06c0 EFLAGS: 00000206 [ 1846.885944][ C1] RAX: a9534bba6d17e900 RBX: 1ffff9200003c0e0 RCX: a9534bba6d17e900 [ 1846.885957][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 1846.885970][ C1] RBP: ffffc900001e07c0 R08: ffffffff90b1030f R09: 1ffffffff2162061 [ 1846.885983][ C1] R10: dffffc0000000000 R11: fffffbfff2162062 R12: 0000000000000246 [ 1846.885997][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 1846.886021][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1846.886040][ C1] ? nf_hook+0x390/0x390 [ 1846.886062][ C1] ? ip6_mtu+0x31a/0x3f0 [ 1846.886088][ C1] ? ip6_finish_output+0x563/0x7f0 [ 1846.886112][ C1] __rcu_read_unlock+0x78/0xd0 [ 1846.886130][ C1] ndisc_send_skb+0xdc2/0x1520 [ 1846.886151][ C1] ? ndisc_send_skb+0x1f0/0x1520 [ 1846.886174][ C1] ? ndisc_mc_map+0x800/0x800 [ 1846.886194][ C1] ? skb_dst+0xd0/0xd0 [ 1846.886211][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1846.886241][ C1] ? ndisc_ns_create+0x48c/0x620 [ 1846.886264][ C1] ndisc_solicit+0x36b/0x660 [ 1846.886283][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1846.886307][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1846.886324][ C1] ? ndisc_cleanup+0x30/0x30 [ 1846.886349][ C1] ? preempt_count_sub+0x1/0x160 [ 1846.886369][ C1] ? ndisc_cleanup+0x30/0x30 [ 1846.886388][ C1] neigh_timer_handler+0xaba/0x1090 [ 1846.886410][ C1] call_timer_fn+0x1ac/0x670 [ 1846.886427][ C1] ? neigh_release+0x80/0x80 [ 1846.886445][ C1] ? call_timer_fn+0xcf/0x670 [ 1846.886461][ C1] ? __run_timers+0x810/0x810 [ 1846.886490][ C1] ? neigh_release+0x80/0x80 [ 1846.886508][ C1] __run_timers+0x56c/0x810 [ 1846.886525][ C1] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1846.886557][ C1] ? detach_timer+0x350/0x350 [ 1846.886578][ C1] ? lock_chain_count+0x20/0x20 [ 1846.886604][ C1] run_timer_softirq+0x63/0xf0 [ 1846.886621][ C1] handle_softirqs+0x291/0x910 [ 1846.886639][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1846.886669][ C1] ? do_softirq+0x210/0x210 [ 1846.886683][ C1] ? hrtimer_interrupt+0x775/0x980 [ 1846.886703][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1846.886721][ C1] __irq_exit_rcu+0x13b/0x230 [ 1846.886736][ C1] ? irq_exit_rcu+0x20/0x20 [ 1846.886757][ C1] irq_exit_rcu+0x5/0x20 [ 1846.886770][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1846.886787][ C1] [ 1846.886791][ C1] [ 1846.886797][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1846.886819][ C1] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 1846.886844][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 b5 cf 1f f7 e8 b0 99 4f f7 fb bf 01 00 00 00 25 ba ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 1846.886857][ C1] RSP: 0018:ffffc9000c367da0 EFLAGS: 00000286 [ 1846.886870][ C1] RAX: a9534bba6d17e900 RBX: 0000000000000000 RCX: a9534bba6d17e900 [ 1846.886881][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: 0000000000000001 [ 1846.886893][ C1] RBP: ffffc9000c367e50 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 1846.886905][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000 [ 1846.886917][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200186cfb4 [ 1846.886937][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 1846.886962][ C1] ? rcu_is_watching+0x11/0xa0 [ 1846.886989][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 1846.887014][ C1] irqentry_exit+0x63/0x70 [ 1846.887029][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1846.887051][ C1] RIP: 0010:__x64_sys_bpf+0x0/0x90 [ 1846.887073][ C1] Code: 31 f6 48 c7 c7 c0 e5 b9 8c e8 ac 69 aa 08 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <41> 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff df e8 87 [ 1846.887086][ C1] RSP: 0018:ffffc9000c367f18 EFLAGS: 00000293 [ 1846.887098][ C1] RAX: 0000000000000141 RBX: ffffc9000c367f20 RCX: a9534bba6d17e900 [ 1846.887109][ C1] RDX: dffffc0000000000 RSI: 0000000000000141 RDI: ffffc9000c367f58 [ 1846.887121][ C1] RBP: ffffc9000c367f48 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 1846.887133][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000 [ 1846.887144][ C1] R13: 0000000000000000 R14: ffffc9000c367f58 R15: 0000000000000141 [ 1846.887163][ C1] do_syscall_64+0x4c/0xa0 [ 1846.887185][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1846.887206][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1846.887228][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1846.887249][ C1] RIP: 0033:0x7f373d39de59 [ 1846.887263][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1846.887276][ C1] RSP: 002b:00007f373e25d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1846.887291][ C1] RAX: ffffffffffffffda RBX: 00007f373d625fa0 RCX: 00007f373d39de59 [ 1846.887303][ C1] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 1846.887315][ C1] RBP: 00007f373d433e6f R08: 0000000000000000 R09: 0000000000000000 [ 1846.887326][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1846.887338][ C1] R13: 00007f373d626038 R14: 00007f373d625fa0 R15: 00007ffc3a932a78 [ 1846.887357][ C1] [ 1851.358799][ T4327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)