last executing test programs: 4.959423005s ago: executing program 3 (id=2350): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408) socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x2, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000500)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 4.071229406s ago: executing program 3 (id=2352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x20, 0xe, 0x1, 0xfffff030}, {0x6, 0x5, 0x4, 0x8}]}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x68}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) 3.789367222s ago: executing program 3 (id=2357): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) 3.44394296s ago: executing program 2 (id=2361): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000010000000000c0000000c0000000200000007f700000000000604000000000052295a2a79480dbbaf773f0a7eefbd26957b620e27e7ce8b64c599a9865b66130f2fbdc11551f13c8949570117008fceccc5a3c8ee28f116"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x1}, 0x90) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004840) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r6], 0x128}, 0x20008840) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0xffffffffffffffbb, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76e2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94) socket$kcm(0x10, 0x3, 0x10) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r11}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r12}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r11, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.108534978s ago: executing program 4 (id=2365): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) openat$ppp(0xffffffffffffff9c, 0x0, 0x8000, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'bridge_slave_0\x00', @random="2b2000004ec6"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r11) 2.872838313s ago: executing program 0 (id=2366): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0xfffffffffffffffd, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x5, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8], 0x9a) 2.676811338s ago: executing program 0 (id=2367): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x9, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x19}, 0x0, 0xc8, 0x6, 0x0, 0x3, 0x0, 0x400, 0x0, 0xffffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400d70006"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020259049e0e0000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000400)={&(0x7f0000000040)="a6451bb817b4d2458f171d096d", &(0x7f0000000140)=""/220, &(0x7f0000000240)="95700ab22986b85aeca4acbcf9046e4380d777eb8ddd3e3afbabee4a", &(0x7f0000000280)="be9d75b72fb0774aaddcf6aadcbfd2cbc07694d889e910029c8682edc68ed1dcac64430d62ae36ad385b0b51775866aab5d597ae493f9f3297fc361224d152e3147fd80035", 0x1, r2, 0x4}, 0x38) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000040) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) 2.675726378s ago: executing program 1 (id=2368): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r0, 0x58, &(0x7f0000000340)}, 0x10) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 2.487318442s ago: executing program 1 (id=2369): close(0xffffffffffffffff) socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r4}, &(0x7f0000002480), &(0x7f00000024c0)=r3, 0x2}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r7}, 0x38) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.487044122s ago: executing program 0 (id=2370): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0xb, 0x0, 0x0, 0x0, 0x0, 0x801ac, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0x6}, 0x1000, 0x14, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a00000000000000080a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a8b29b911ac473c5fa02bb0e24e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594d7a6edc9d1270a7819fc0c597fdfb4d7842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e6405000000be9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578ead8ec76b17acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022e2731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d652"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) 2.425146013s ago: executing program 2 (id=2371): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) 2.296798247s ago: executing program 2 (id=2372): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) (async) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000140), 0x4d) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r3) (async) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xb}, 0x48) (rerun: 32) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/16], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) (async) r9 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4360000008c5f3a0ce63d000000dd0a00000500000073013700000000009500"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r8}, 0x94) (async) sendmsg$kcm(r9, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) r10 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r10, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000300e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) (async) recvmsg$kcm(r9, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x12000) recvmsg$kcm(r9, &(0x7f0000000a80)={&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x40000002) (async) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.251401938s ago: executing program 1 (id=2373): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000200)=""/73}, 0x20) 2.065138642s ago: executing program 1 (id=2374): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x4080b000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000800)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}, 0x4c081) syz_clone(0x50205100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x84, 0x400000, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000100) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4108, 0x100c}], 0x1}, 0x2002) r2 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89ed, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c02, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/284], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000500)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socketpair(0x22, 0x2, 0x2, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 2.037590363s ago: executing program 2 (id=2375): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x4}, 0x40, 0x0, 0x9, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='/dev/ppp\x00') sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r1, 0x0, 0x10008014) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047452, 0xf0ff1f00000000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a000f00fe00000003600e12080005007f3704d373000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d1684683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x14040800) 1.990979654s ago: executing program 4 (id=2376): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000040), 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000000100)=""/148, 0x94}], 0x2}, 0x10001) socketpair(0x6, 0x6, 0x6, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc9c, 0x0, 0x0, 0x0, 0xf19a}, [@alu={0x0, 0x1, 0xc, 0x2, 0x0, 0xfffffffffffffff8, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='GPL\x00', 0x7fffffff, 0xbe, &(0x7f0000000340)=""/190, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xd, 0x0, 0x91e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async, rerun: 32) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x8}, 0x18) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r2, 0x14, 0x1, 0xff, &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0x1a, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @ldst={0x2, 0x1, 0x3, 0x4, 0xa, 0x6, 0xffffffffffffffe0}, @alu={0x7, 0x0, 0xc, 0x1, 0x5, 0xfffffffffffffffc, 0x8}, @alu={0x4, 0x1, 0xc, 0x3, 0x0, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='syzkaller\x00', 0x81, 0x27, &(0x7f0000000880)=""/39, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0x4, 0x0, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@cgroup, r3, 0xb, 0x1, r4, @void, @value=r7, @void, @void, r6}, 0x20) (async, rerun: 32) recvmsg(r5, &(0x7f0000001dc0)={&(0x7f0000000a40)=@nfc_llcp, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000ac0)=""/171, 0xab}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/119, 0x77}, {&(0x7f0000001c00)=""/13, 0xd}, {&(0x7f0000001c40)=""/70, 0x46}], 0x5, &(0x7f0000001d40)=""/85, 0x55}, 0x10000) (async, rerun: 32) recvmsg$kcm(r2, &(0x7f0000002100)={&(0x7f0000001e00)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001e80)=""/210, 0xd2}, {&(0x7f0000001f80)=""/31, 0x1f}, {&(0x7f0000001fc0)=""/71, 0x47}], 0x3, &(0x7f0000002080)=""/100, 0x64}, 0x12040) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000021c0)={{r5, 0xffffffffffffffff}, &(0x7f0000002140), &(0x7f0000002180)=r5}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={r3, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000002340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002380)=[0x0, 0x0], 0x0, 0x5d, &(0x7f00000023c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000002480)}}, 0x10) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002680)=@bloom_filter={0x1e, 0x1c, 0x200, 0xb0, 0x2080, r5, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x2}, 0x50) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x2b, 0xb, &(0x7f0000002200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000002280)='GPL\x00', 0x8c, 0x3, &(0x7f00000022c0)=""/3, 0x41000, 0x40, '\x00', r9, 0x0, r5, 0x8, &(0x7f0000002600)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000002640)={0x4, 0x7, 0x49c, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000002700)=[r5, r11, r4], &(0x7f0000002740)=[{0x2, 0x1, 0xb, 0xc}, {0x5, 0x1, 0x7}, {0x2, 0x5, 0xd, 0x6}, {0x4, 0x3, 0x9, 0xa}, {0x0, 0x5, 0x10, 0x8}, {0x5, 0x5, 0x5, 0x3}], 0x10, 0xdd7}, 0x94) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002880)={r5, r7, 0x0, r4}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000028c0)={r5, r5, 0x4, r1}, 0x10) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000002900)=r12, 0x4) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0xf, &(0x7f0000002940)=@raw=[@ldst={0x2, 0x2, 0x4, 0x6, 0x7, 0xfffffffffffffff0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @alu={0x4, 0x1, 0xa, 0x9, 0x3, 0xffffffffffffffff, 0xfffffffffffffffc}, @generic={0x2, 0x3, 0x6, 0x9, 0xb}, @map_val={0x18, 0xa, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0xa, 0x1, 0x0, r7}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @generic={0xfb, 0xf, 0x2, 0x6, 0xfffffffd}], &(0x7f00000029c0)='syzkaller\x00', 0x1, 0xb5, &(0x7f0000002a00)=""/181, 0x40f00, 0x90, '\x00', r9, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002ac0)={0x1, 0xa, 0x2ec, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002b00)=[r5, r11, r8, r5, r11, r8, r5, r5], &(0x7f0000002b40)=[{0x0, 0x5, 0x0, 0x2}], 0x10, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000002c40)={0xffffffffffffffff, r13}) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003180)={r7, 0xe0, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002ec0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000002f00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002f40)=[0x0, 0x0, 0x0], 0x0, 0xaa, &(0x7f0000002f80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002fc0), &(0x7f0000003000), 0x8, 0x73, 0x8, 0x8, &(0x7f0000003040)}}, 0x10) (rerun: 64) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000003240)={0x8, 0x15, &(0x7f0000002c80)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @alu={0x7, 0x0, 0xa, 0x7, 0x7, 0x20, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @generic={0x7f, 0x9, 0x8, 0x2, 0x8001}], &(0x7f0000002d40)='syzkaller\x00', 0xfffffffe, 0x96, &(0x7f0000002d80)=""/150, 0x41000, 0x8, '\x00', r9, @fallback=0x37, r5, 0x8, &(0x7f0000002e40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000002e80)={0x5, 0x3, 0x8001, 0x4}, 0x10, r15, r5, 0x2, &(0x7f00000031c0), &(0x7f0000003200)=[{0x1, 0x3, 0x6, 0x1}, {0x3, 0x5, 0xf, 0x9}], 0x10, 0xc}, 0x94) (async) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003300)={0x1b, 0x0, 0x0, 0x7, 0x0, r5, 0xffff, '\x00', r14, r5, 0x4, 0x3, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003840)={r16, 0xe0, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000003580)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000035c0)=[0x0], &(0x7f0000003600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa9, &(0x7f0000003640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000003680), &(0x7f00000036c0), 0x8, 0x44, 0x8, 0x8, &(0x7f0000003700)}}, 0x10) (async) r19 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000038c0)={0xffffffffffffffff, 0xfffffffd, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000039c0)={0x12, 0x18, &(0x7f0000003380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xace5}, @jmp={0x5, 0x0, 0x1, 0x0, 0x6, 0xfffffffffffffffc}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x3c}, @map_val={0x18, 0x1, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0xb76}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r17}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000003440)='syzkaller\x00', 0xffff0c1b, 0xe1, &(0x7f0000003480)=""/225, 0x40f00, 0x20, '\x00', r18, @fallback=0x1c, r5, 0x8, &(0x7f0000003880)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, r10, r3, 0x6, &(0x7f0000003900)=[r8, r19, r1, r11, r8, r8, r11, r8], &(0x7f0000003940)=[{0x4, 0x4, 0x8, 0x9}, {0x0, 0x5, 0x5, 0x30ec02c7b6bd9328}, {0x1, 0x1, 0x7, 0x3}, {0x2, 0x4, 0x9, 0xa}, {0x5, 0x1, 0xf, 0x3}, {0x1, 0x4, 0xd, 0x6}], 0x10, 0x5}, 0x94) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003a80)='./cgroup/syz1\x00', 0x200002, 0x0) r20 = gettid() perf_event_open(&(0x7f0000003ac0)={0x2, 0x80, 0x8, 0x3, 0x7, 0x9a, 0x0, 0xffffffff, 0x21000, 0x7, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff80000001, 0x7fff}, 0x8a0, 0x100, 0x6, 0x2, 0x6, 0x3f1, 0x40, 0x0, 0x759847d6, 0x0, 0x8001}, r20, 0x2, r5, 0x9) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000004d00)={&(0x7f0000003b40)="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", &(0x7f0000004b40)=""/71, &(0x7f0000004bc0)="1f1c78974217fe7938bb9c4df14cd793dd7616c3e8512b2d683dfb750d5a9e23fd6ae806423d03609cdf6d0ec1692fed9fdb2d2faea142ff55a7fcd5df240561c2413335b9a9ce7337b0e814917596f1a88dcdbdb36ca6060569fdd605f6abff892b39519a6facda5d1b6ae9654df50e19432db0c81a58bbbe8fe7b3195606a6d305ba745adb8e8770da59f3ca545237ff3c44d759730eab0a2f3213e969a4afe93b7064fd53705510cb8d8c34", &(0x7f0000004c80)="c626877b41a9588a6c4fc4924aacf6d436b16e161f9b796b061378f8b7192ee634cf907ef71cf647356592d857af1e3ebac5f770af577f3f31577eaeef66440f70e387a496251513bba601a7286988fa6cdd938d82aa779b", 0x8, r11, 0x4}, 0x38) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005ec0)={0x6, 0x4, &(0x7f0000004d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000004d80)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000004dc0)=""/4096, 0x41100, 0x2b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000005dc0)={0x4, 0x3, 0x9, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000005e00)=[r17, r11], &(0x7f0000005e40)=[{0x1, 0x5, 0x10, 0xc}, {0x5, 0x3, 0x10, 0xb}, {0x5, 0x4, 0x10, 0x8}, {0x5, 0x3, 0x5, 0x6}, {0x2, 0x2, 0xd, 0x8}, {0x0, 0x4, 0x9, 0x5}], 0x10, 0x1}, 0x94) (rerun: 64) 1.857707017s ago: executing program 4 (id=2377): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0xfffffffffffffffd, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x5, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8], 0x9a) 1.612936812s ago: executing program 4 (id=2378): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x208, 0xac5d, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) r1 = socket$kcm(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5d31, 0x12240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x3}, 0x10050, 0x6, 0x0, 0x0, 0x0, 0x9, 0x7fff}, 0x0, 0x6, 0xffffffffffffffff, 0x8) getpid() socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES8=r1, @ANYBLOB="d267cd587245e8a17614", @ANYRES64=r1, @ANYBLOB="00000059a40200000000000000e342bafa77e0ab304937abb13f75d495e319de70f18133643ad158524fc6f4"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) write$cgroup_int(r4, &(0x7f0000000040)=0x2c, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 566.541886ms ago: executing program 2 (id=2379): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r0, 0x58, &(0x7f0000000340)}, 0x10) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 565.863196ms ago: executing program 3 (id=2380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0xa, 0x4, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x300, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 495.439578ms ago: executing program 0 (id=2381): socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="11f0000000000000004003000100000800000000000000001c00000000000000000f00d143639efd", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a005000000000000000000002400000000000000000000000700000094040000441088000000000000000000000000000000000011000000000000000000000001"], 0x98}, 0x0) 467.625829ms ago: executing program 4 (id=2382): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) 379.502471ms ago: executing program 2 (id=2383): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2ba, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) (async) r0 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r4 = socket$kcm(0x2, 0x1, 0x84) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f00000001c0)={r8, r3}) (async, rerun: 64) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) (rerun: 64) 378.717281ms ago: executing program 3 (id=2384): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x8010, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000003, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x8, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a80)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES32=r2], 0x9a) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0xa, 0x10, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r5}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000f0ffffff7a0af0ff0020000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26ffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c1f860d050d694cc7806d294d3665016a7b29da0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d40887c58559b7dcb98a6273b8c651e57f727041c62cea5b7bd24d9f679e4fbe948dfb4cc4a389469608241630459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b83720eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb89872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebed161980f2fde4f9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc3600040543a34b195c6a8fc054282cd41b264906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e4bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af41000000000000007f5ab0d534b8d63e4ca3be71f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733097f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99e85b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5359dbdfbf31a562395020becaf3fd1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4b28288e78980c1184d8223edbc4bf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b5524642c248aa813edaa626f0000000000000000000000000000000003ba5bac34b611569a451564d3a5400f9097ffe7a37e765bc652be71ee24250d6d9cf19878dd62c53062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89ad07963acbd4dd4dc5b4552591edde7a22ad06f7567e6fec2f65011b579bf609d61a3ff4d6f490824bb035995449fc34106ae6889f036d67b6aaee784f855ebc746ac871b5d2031ac0a252ac1f86e93e245f3793cea80b6de773899d49d11d3b1ed79163b111c976cf840a2ef6214a43338fba8c9edb6be26e68fcc5d47ed74a66ce8aba726ab955b9b32ab1890e84a5e2d7476252af25e5c95c5a8b2b1b5c8a2645b017d23c0f169d6ab529cc889bb07889d9e155114cf3e26a50c527ec6d4021cd2cacfea6d7e41e39e26b3967cad65c648b170f12ea9cc69dcee64be0c27b1f4f7f5ce3e62c35602c9d2921326891901661c85b9ee4a0a0b9636bef4c23788494f094abb91ed813b42828aa93105896e0aee851a8087e169a1d69e841257d9053d0cdc3a6ac4f12084cc6470abebe8b344b1f56690a2687b428686c854c21831da277e8b8a21b7b91a46d22ba083eca7b1f8268048cde7d6f237dca42035881b29ca9c8c2937971821b613894297ff6f7796053a4de1fd77e180cc22b205d43bb4a1b59962c1f605ea1b74587100e8d579f157cb45561c357f9976cec6a43388b3049a0d9c171ff6145266ba119d00000000001ef3794a930eb12f3a6215c510bf0bca70c127e9c70cc7bef921249a7f18a0034ce3264a9e96656b47233e2ed7c76520e649c3fd550bdafd77c5cd72b4446d3e157ddd97e7622a6891fb739acd3b2cdaf65ac78490f0641be6e8c6f55bf3d228786895ff5fd5970faacd8a5025aca0aa1931f477ba06aa60051298c8bf7f3b399194f98dc3f4e8513ad06da09dc393c1284515986b8c70ac69512f6c0c04f42edb3a097a11f2ab480e3e391abffae097752300576337c6dd24c4a98280684aa1fe8c7b43ee8bce05fe979b34da18cdb44dbb030b8009cd3b3b44fd8e7b534acd3f1839cb54817668ab446d3d47848429ea831a57f26c8b05dedddceb24483f8f998b05c3ddf85c3799c9000000000000000000000000001e57cf839eb3150d6a076fb7b86fae98dbb46014f483aecb4ec4f0877371bcae8912c78aff857c669760f0e55041563c5c3e8ee4a0eef885fd43fe34a1febc82370d1d07fdfe705ada4764320889000000000000000000000000000000a790af4fc17872b55b10db99e212d18193235659df45627da300959eafc8bfb44f70d250f8f2e86532700254c9a8b14999f59c8b9034c4bb2448eaeff5db21d4a7f3d974790d4c3cba7c402f50585b9289d86400679e5c2bcacb2841ca074d51fdb4a29e84d72b6c996cfbee06aa52cd632e82ba068e8e1572ef2eb414ba5fccfc3c03e64df6a9cc3936c604aa2c0e2ec7b777475023f29b146af003472ce146a5ff997ba53c51026c0096154f9280a34bbf21d66f57a250b5397766122fc86950ce5252e96868cd04df54764cf2082153d6cedd8aaf9700c734aa4a1cb33a2e0a13c5687be4de327511bff9816d13c3219dac1c1535f10243db6f96960ea6a621f5e1b7babbedf0a6bf0cf74123d2e78d01be2b048883a2459eec630fb0293d28d9799fd3a792caff693fd9f002f14c43fb5a1051cc686b7f114d7927eed559bdf2e8ddea3e61d5d942b63fe90230b2e1948fc563ef94d437281671d2fe5032d2a091fa842b0af2e116ba"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff6f, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x19, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_val={0x18, 0x9, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0x3, 0x1, 0x0, r7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000580)='GPL\x00', 0xfffffffe, 0x27, &(0x7f00000005c0)=""/39, 0x40f00, 0x40, '\x00', r9, 0x0, r3, 0x8, &(0x7f0000000600)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x5, 0x8, 0x4}, 0x5ea48498032498b6, 0x0, 0x0, 0x3, &(0x7f0000000680)=[r3, r6, r3, r1, r3, r3], &(0x7f00000006c0)=[{0x5, 0x2, 0x7, 0x4}, {0x0, 0x4, 0x5, 0xc}, {0x2, 0x4, 0x10, 0x1}], 0x10, 0xfffffbff}, 0x94) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="140000002f000b6c8cff00380529fc60077678cf", 0x14}], 0x1}, 0x4884) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r11}, 0xc) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000180)) 309.559262ms ago: executing program 0 (id=2385): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000200)=""/73}, 0x20) 309.181032ms ago: executing program 1 (id=2386): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xbf}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000500"}) 308.671512ms ago: executing program 4 (id=2387): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x120, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x1040c0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000fcffffff000000002a0cffff85000000a80000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008009b3e5c98657f34c5ccc866c6d30000b70300000500000085000000060000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000006a00008500000005"], 0x0, 0x7, 0x0, 0x0, 0x100, 0x1c}, 0x94) perf_event_open(0x0, 0x0, 0xffeffffffffffffb, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000010006bcc9e3be3206e17aa31076b876c1d0000007ea60864160af36504001a00040002000c0002009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb9864f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x900000000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x19188, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, @perf_config_ext={0xfff, 0x4}, 0x4523, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x420, 0x4000000000000c8, 0x0, 0x5, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0x200000001159f0ff}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 83.532887ms ago: executing program 3 (id=2388): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0xfffffffffffffffd, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x5, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8], 0x9a) 83.154707ms ago: executing program 1 (id=2389): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=2390): r0 = syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000005c0)={r1}, 0x8) unlink(&(0x7f0000000380)='.\x00') close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x8, &(0x7f0000000000), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x2, 0x4000000, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={0x0, 0x0, 0x18}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="c00e02003c000b05d25a806f8c6394f90324fc602f00000009000100053582c137153e3702480180000c0000d1bd", 0x2e}], 0x1}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000bc0)={&(0x7f0000000400)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000480)="047afd2c13e60684a85c0b7b3571e220f5d9b87876c3ff692be7eea347d912cd76b57ec1f453e62d5aaa720283cf236b6cc46a7f46851eaba026d5be30770f77b3bf8103837b843739f388cc271af55e22ed205748cdc21a9f5c3b62", 0x5c}, {&(0x7f0000000600)="21484a8a907363da214af3a8bb01a27a2fc27d2838ac84b8f2ca282c82293f4189fd828b1775b11f370c45d68231bc0f01126ed9cefc6e16ad7a9211d7113cd632bfe53640f6d1806c23886555640365b3863209954d3899e20f519a2131cc978689d666e13f8973af6a11c8998f1cf916b665eff926f3d7edb7a2888994fd5fa7d2b64b13c7fc7a4203ea73436db98bd9e4a6974a3f3bd95b8ec9057ebe8eac39ca7c7a779b4fca0d69e0029444be3d317523d1", 0xb4}, {&(0x7f00000006c0)="dbf99e4e86b3ec667675039a4a1f13b1186ac5ac3d5fc495b7b3de75eb4145098cedb6ad69cda52e30f108bac318bc964808cf281773b93b13c0b7bfefd797b65f328292cfd924866d5499530f44998fcdbf1aeddfdad45e21b8a6691d406d770f39fffbfcc1d600a3fdfb45affd585ac67ee142e00fc2809dee37eaf7b9478e5effb23d2ea83a3c291c0a4e6a6f2868680ebff932da29ca9aaaf53c2946347e9a5e8868b32e3432ae733c188927f820763fe2ad54438300588dc6860e9c1b8279a604e9b7f74c5082b561", 0xcb}, {&(0x7f00000007c0)="b61602a735c9a0a8d44bdf4a3f8199a811df73b29a410dadd50ba95a436ac57c694660d3f34c6a01c97b6479589ecd6e97be676505076536b6190287eb96c272cb16e10c0785620c8c267d9368857b47a20a783680f2a2451b92f6bdbdecc3c221a966e7", 0x64}, {&(0x7f0000000840)="5edaa320eb139246a72ab9b4cf9f79b821e95597183bb5eb02be9e3a078e8d0e044b07a6622e52cc850899f8f9a6099027b3e62c986d252a129454a56ae371fd7f91f96b10c266c5f582760666a4b7011087d2f850aeb8ee7b34cbc598f23b0956c3309a4c092aa5b33ceb82076bfa5b07eaddece2f47fcd9ca90ea0e4513024b5d0ae6170f0655136acb1", 0x8b}, {&(0x7f0000000a40)="0f2f7e83c48a550f529d844e3bb986ebda6be9b35b5294243aa5c3d3ccc47c3947a1b1e4aa7e9f2f76c18f7a914c963aff9672b03abf308c4cff12b503286f258e6d9cce6001ed50bf800df80b6ed277cea0f452b030b9ecdb90e865a30398af900ff60aecce504a", 0x68}, {&(0x7f0000000ac0)="431d4c7c20f4350ffea66bdb64543702fdfb04f5b160cf49ed86dcea688d09e2f6f4c61dafa10efde026860d3b0d4c80cd9997d8561441fa6bc17daafd7871e0362104", 0x43}], 0x7}, 0x20000800) kernel console output (not intermixed with test programs): 7] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 279.268849][ T7765] netlink: 'syz.1.1206': attribute type 27 has an invalid length. [ 279.281922][ T7765] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1206'. [ 285.341871][ T7776] netlink: 'syz.1.1212': attribute type 21 has an invalid length. [ 285.363910][ T7776] netlink: 'syz.1.1212': attribute type 12 has an invalid length. [ 285.402037][ T7776] netlink: 'syz.1.1212': attribute type 13 has an invalid length. [ 285.409898][ T7776] netlink: 'syz.1.1212': attribute type 14 has an invalid length. [ 285.431788][ T7776] netlink: 'syz.1.1212': attribute type 15 has an invalid length. [ 285.439643][ T7776] netlink: 'syz.1.1212': attribute type 16 has an invalid length. [ 285.471728][ T7776] netlink: 12926 bytes leftover after parsing attributes in process `syz.1.1212'. [ 285.484403][ T7799] netlink: 'syz.0.1221': attribute type 10 has an invalid length. [ 285.530929][ T7803] netlink: 'syz.4.1222': attribute type 11 has an invalid length. [ 285.565610][ T7805] netlink: 'syz.3.1223': attribute type 10 has an invalid length. [ 285.574281][ T7803] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1222'. [ 285.587304][ T7802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.811213][ T7812] netlink: 'syz.3.1223': attribute type 1 has an invalid length. [ 285.910468][ T7812] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.1223'. [ 286.171482][ T7805] team0: Device gre0 is of different type [ 286.675732][ T7833] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1233'. [ 286.707701][ T7833] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1233'. [ 286.839365][ T7838] netlink: 'syz.1.1234': attribute type 3 has an invalid length. [ 286.846144][ T7833] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1233'. [ 286.865303][ T7833] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1233'. [ 290.092663][ T7889] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.1253'. [ 290.266652][ T7887] device gre0 entered promiscuous mode [ 290.294359][ T7887] team0: Device gre0 is of different type [ 290.413654][ T7899] FAULT_INJECTION: forcing a failure. [ 290.413654][ T7899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.529529][ T7899] CPU: 1 PID: 7899 Comm: syz.4.1257 Not tainted syzkaller #0 [ 290.536962][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 290.547029][ T7899] Call Trace: [ 290.550320][ T7899] [ 290.553263][ T7899] dump_stack_lvl+0x188/0x24e [ 290.557964][ T7899] ? show_regs_print_info+0x12/0x12 [ 290.563182][ T7899] ? load_image+0x410/0x410 [ 290.567705][ T7899] ? __lock_acquire+0x7ea0/0x7ea0 [ 290.572747][ T7899] ? snprintf+0xe5/0x140 [ 290.577003][ T7899] should_fail_ex+0x390/0x4c0 [ 290.581701][ T7899] _copy_to_user+0x2c/0x130 [ 290.586219][ T7899] simple_read_from_buffer+0xe3/0x150 [ 290.591604][ T7899] proc_fail_nth_read+0x1a6/0x220 [ 290.596654][ T7899] ? proc_fault_inject_write+0x310/0x310 [ 290.602306][ T7899] ? fsnotify_perm+0x248/0x550 [ 290.607085][ T7899] ? proc_fault_inject_write+0x310/0x310 [ 290.612729][ T7899] vfs_read+0x2db/0x960 [ 290.616909][ T7899] ? kernel_read+0x1e0/0x1e0 [ 290.621515][ T7899] ? __fget_files+0x28/0x460 [ 290.626121][ T7899] ? __fget_files+0x3fc/0x460 [ 290.630825][ T7899] ? __fdget_pos+0x2ae/0x360 [ 290.635426][ T7899] ? ksys_read+0x70/0x260 [ 290.639770][ T7899] ksys_read+0x14d/0x260 [ 290.644033][ T7899] ? vfs_write+0x9a0/0x9a0 [ 290.648476][ T7899] ? lockdep_hardirqs_on+0x94/0x140 [ 290.653697][ T7899] do_syscall_64+0x4c/0xa0 [ 290.658127][ T7899] ? clear_bhb_loop+0x60/0xb0 [ 290.662814][ T7899] ? clear_bhb_loop+0x60/0xb0 [ 290.667510][ T7899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.673413][ T7899] RIP: 0033:0x7f9ec575ea0e [ 290.677843][ T7899] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 290.697460][ T7899] RSP: 002b:00007f9ec658efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.705883][ T7899] RAX: ffffffffffffffda RBX: 00007f9ec658f6c0 RCX: 00007f9ec575ea0e [ 290.713870][ T7899] RDX: 000000000000000f RSI: 00007f9ec658f0a0 RDI: 0000000000000005 [ 290.721854][ T7899] RBP: 00007f9ec658f090 R08: 0000000000000000 R09: 0000000000000000 [ 290.729831][ T7899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.737810][ T7899] R13: 00007f9ec5a26038 R14: 00007f9ec5a25fa0 R15: 00007ffd7bf66308 [ 290.745810][ T7899] [ 291.019227][ T7898] validate_nla: 3 callbacks suppressed [ 291.019244][ T7898] netlink: 'syz.3.1258': attribute type 10 has an invalid length. [ 291.082844][ T7898] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1258'. [ 291.122646][ T7898] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 291.182648][ T7898] batman_adv: batadv0: Removing interface: veth0_vlan [ 291.258877][ T7898] bridge0: port 3(veth0_vlan) entered blocking state [ 291.271127][ T7898] bridge0: port 3(veth0_vlan) entered disabled state [ 291.295485][ T7898] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 293.208708][ T7952] netlink: 'syz.2.1272': attribute type 10 has an invalid length. [ 293.300685][ T7952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1272'. [ 293.391565][ T7952] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 293.446693][ T7952] batman_adv: batadv0: Removing interface: veth0_vlan [ 293.569634][ T7952] bridge0: port 3(veth0_vlan) entered blocking state [ 293.585284][ T7952] bridge0: port 3(veth0_vlan) entered disabled state [ 293.652865][ T7952] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 293.701208][ T7954] netlink: 'syz.0.1274': attribute type 46 has an invalid length. [ 293.741839][ T7954] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1274'. [ 293.771466][ T7956] netlink: 'syz.1.1275': attribute type 10 has an invalid length. [ 294.307908][ T7958] netlink: 'syz.1.1275': attribute type 1 has an invalid length. [ 294.405780][ T7958] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.1275'. [ 295.014843][ T7956] device gre0 entered promiscuous mode [ 295.021143][ T7956] team0: Device gre0 is of different type [ 295.843351][ T4285] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 299.163654][ T8009] netlink: 'syz.4.1289': attribute type 10 has an invalid length. [ 299.171517][ T8009] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1289'. [ 299.201983][ T8009] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 299.209243][ T8009] batman_adv: batadv0: Removing interface: veth0_vlan [ 299.266465][ T8009] bridge0: port 3(veth0_vlan) entered blocking state [ 299.296978][ T8009] bridge0: port 3(veth0_vlan) entered disabled state [ 299.319576][ T8009] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 300.355814][ T8036] FAULT_INJECTION: forcing a failure. [ 300.355814][ T8036] name failslab, interval 1, probability 0, space 0, times 0 [ 300.380102][ T8036] CPU: 1 PID: 8036 Comm: syz.3.1297 Not tainted syzkaller #0 [ 300.387526][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 300.397607][ T8036] Call Trace: [ 300.400896][ T8036] [ 300.403839][ T8036] dump_stack_lvl+0x188/0x24e [ 300.408550][ T8036] ? show_regs_print_info+0x12/0x12 [ 300.413771][ T8036] ? load_image+0x410/0x410 [ 300.418300][ T8036] ? __might_sleep+0xd0/0xd0 [ 300.422909][ T8036] ? __lock_acquire+0x7ea0/0x7ea0 [ 300.427962][ T8036] should_fail_ex+0x390/0x4c0 [ 300.432667][ T8036] should_failslab+0x5/0x20 [ 300.437212][ T8036] slab_pre_alloc_hook+0x59/0x300 [ 300.442309][ T8036] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 300.448050][ T8036] __kmem_cache_alloc_node+0x4f/0x270 [ 300.453443][ T8036] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 300.459184][ T8036] __kmalloc+0xa3/0x240 [ 300.463358][ T8036] tomoyo_realpath_from_path+0xe2/0x5c0 [ 300.468932][ T8036] ? tomoyo_domain+0xd2/0x120 [ 300.473636][ T8036] ? tomoyo_path_number_perm+0x205/0x650 [ 300.479289][ T8036] tomoyo_path_number_perm+0x22f/0x650 [ 300.484770][ T8036] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 300.491383][ T8036] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 300.496860][ T8036] ? ksys_write+0x1ce/0x260 [ 300.501383][ T8036] ? common_file_perm+0x171/0x1c0 [ 300.506470][ T8036] ? __fget_files+0x28/0x460 [ 300.511105][ T8036] security_file_ioctl+0x6c/0xa0 [ 300.516063][ T8036] __se_sys_ioctl+0x48/0x170 [ 300.520675][ T8036] do_syscall_64+0x4c/0xa0 [ 300.525095][ T8036] ? clear_bhb_loop+0x60/0xb0 [ 300.529766][ T8036] ? clear_bhb_loop+0x60/0xb0 [ 300.534442][ T8036] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.540326][ T8036] RIP: 0033:0x7f0dd099e1d9 [ 300.544734][ T8036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.564343][ T8036] RSP: 002b:00007f0dd188e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.572760][ T8036] RAX: ffffffffffffffda RBX: 00007f0dd0c25fa0 RCX: 00007f0dd099e1d9 [ 300.580730][ T8036] RDX: 0000200000000000 RSI: 0000000000008b32 RDI: 0000000000000003 [ 300.588701][ T8036] RBP: 00007f0dd188e090 R08: 0000000000000000 R09: 0000000000000000 [ 300.596684][ T8036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.604659][ T8036] R13: 00007f0dd0c26038 R14: 00007f0dd0c25fa0 R15: 00007ffe6effe328 [ 300.612638][ T8036] [ 300.648189][ T8036] ERROR: Out of memory at tomoyo_realpath_from_path. [ 300.661780][ T4285] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 300.964462][ T4285] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 300.982826][ T8049] netlink: 'syz.2.1300': attribute type 10 has an invalid length. [ 301.605117][ T8049] team0: Device gre0 is of different type [ 301.704380][ T8054] netlink: 'syz.2.1300': attribute type 1 has an invalid length. [ 301.724187][ T8054] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.1300'. [ 301.768927][ T8064] FAULT_INJECTION: forcing a failure. [ 301.768927][ T8064] name failslab, interval 1, probability 0, space 0, times 0 [ 301.822601][ T8064] CPU: 0 PID: 8064 Comm: syz.1.1304 Not tainted syzkaller #0 [ 301.830045][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 301.840125][ T8064] Call Trace: [ 301.843517][ T8064] [ 301.846469][ T8064] dump_stack_lvl+0x188/0x24e [ 301.851179][ T8064] ? show_regs_print_info+0x12/0x12 [ 301.856404][ T8064] ? load_image+0x410/0x410 [ 301.860938][ T8064] ? verify_lock_unused+0x140/0x140 [ 301.866173][ T8064] ? perf_trace_lock_acquire+0x101/0x3f0 [ 301.871855][ T8064] should_fail_ex+0x390/0x4c0 [ 301.876586][ T8064] should_failslab+0x5/0x20 [ 301.881119][ T8064] slab_pre_alloc_hook+0x59/0x300 [ 301.886183][ T8064] kmem_cache_alloc+0x56/0x2f0 [ 301.890968][ T8064] ? skb_clone+0x1e7/0x370 [ 301.895418][ T8064] skb_clone+0x1e7/0x370 [ 301.899693][ T8064] __netlink_deliver_tap+0x3e4/0x7e0 [ 301.905027][ T8064] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.910254][ T8064] netlink_deliver_tap+0x19c/0x1b0 [ 301.915392][ T8064] netlink_unicast+0x777/0x920 [ 301.920200][ T8064] netlink_sendmsg+0x8ad/0xbd0 [ 301.925001][ T8064] ? netlink_getsockopt+0x550/0x550 [ 301.930228][ T8064] ? apparmor_socket_sendmsg+0x8a/0x330 [ 301.935807][ T8064] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 301.941115][ T8064] ? security_socket_sendmsg+0x7c/0xa0 [ 301.946605][ T8064] ? netlink_getsockopt+0x550/0x550 [ 301.951848][ T8064] ____sys_sendmsg+0x5ed/0x9a0 [ 301.956670][ T8064] ? __sys_sendmsg_sock+0x30/0x30 [ 301.961718][ T8064] ? __import_iovec+0x306/0x510 [ 301.966620][ T8064] ? import_iovec+0x6f/0xa0 [ 301.971173][ T8064] ___sys_sendmsg+0x2a2/0x360 [ 301.975889][ T8064] ? __sys_sendmsg+0x2a0/0x2a0 [ 301.980719][ T8064] ? __lock_acquire+0x7ea0/0x7ea0 [ 301.985820][ T8064] __se_sys_sendmsg+0x1c3/0x2b0 [ 301.990700][ T8064] ? __x64_sys_sendmsg+0x80/0x80 [ 301.995696][ T8064] ? lockdep_hardirqs_on+0x94/0x140 [ 302.000940][ T8064] do_syscall_64+0x4c/0xa0 [ 302.005383][ T8064] ? clear_bhb_loop+0x60/0xb0 [ 302.010081][ T8064] ? clear_bhb_loop+0x60/0xb0 [ 302.014789][ T8064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.020715][ T8064] RIP: 0033:0x7fc91c99e1d9 [ 302.025152][ T8064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.044785][ T8064] RSP: 002b:00007fc91d788028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.053242][ T8064] RAX: ffffffffffffffda RBX: 00007fc91cc25fa0 RCX: 00007fc91c99e1d9 [ 302.061241][ T8064] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 302.069246][ T8064] RBP: 00007fc91d788090 R08: 0000000000000000 R09: 0000000000000000 [ 302.077242][ T8064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.085249][ T8064] R13: 00007fc91cc26038 R14: 00007fc91cc25fa0 R15: 00007fffe0475ba8 [ 302.093287][ T8064] [ 303.571828][ T8090] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1310'. [ 305.901855][ T4285] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 306.589204][ T8123] netlink: 'syz.1.1324': attribute type 39 has an invalid length. [ 306.813386][ T8125] FAULT_INJECTION: forcing a failure. [ 306.813386][ T8125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.876115][ T8125] CPU: 0 PID: 8125 Comm: syz.2.1325 Not tainted syzkaller #0 [ 306.883537][ T8125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 306.893603][ T8125] Call Trace: [ 306.896891][ T8125] [ 306.899838][ T8125] dump_stack_lvl+0x188/0x24e [ 306.904536][ T8125] ? show_regs_print_info+0x12/0x12 [ 306.909752][ T8125] ? load_image+0x410/0x410 [ 306.914271][ T8125] ? __lock_acquire+0x7ea0/0x7ea0 [ 306.919310][ T8125] ? __lock_acquire+0x7ea0/0x7ea0 [ 306.924353][ T8125] should_fail_ex+0x390/0x4c0 [ 306.929056][ T8125] _copy_from_user+0x2c/0x170 [ 306.933753][ T8125] bpf_copy_from_user+0x49/0xa0 [ 306.938621][ T8125] bpf_prog_e681e3b758b7be64+0x3a/0x3c [ 306.944092][ T8125] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 306.949486][ T8125] bpf_prog_test_run_syscall+0x31c/0x4b0 [ 306.955136][ T8125] ? sock_gen_cookie+0x60/0x60 [ 306.959922][ T8125] ? sock_gen_cookie+0x60/0x60 [ 306.964701][ T8125] bpf_prog_test_run+0x31c/0x390 [ 306.969668][ T8125] __sys_bpf+0x62b/0x780 [ 306.973933][ T8125] ? bpf_link_show_fdinfo+0x380/0x380 [ 306.979338][ T8125] ? lock_chain_count+0x20/0x20 [ 306.984212][ T8125] __x64_sys_bpf+0x78/0x90 [ 306.988642][ T8125] do_syscall_64+0x4c/0xa0 [ 306.993073][ T8125] ? clear_bhb_loop+0x60/0xb0 [ 306.997761][ T8125] ? clear_bhb_loop+0x60/0xb0 [ 307.002567][ T8125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.008477][ T8125] RIP: 0033:0x7f342939e1d9 [ 307.012901][ T8125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.032520][ T8125] RSP: 002b:00007f342a283028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 307.040953][ T8125] RAX: ffffffffffffffda RBX: 00007f3429625fa0 RCX: 00007f342939e1d9 [ 307.048936][ T8125] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 307.056915][ T8125] RBP: 00007f342a283090 R08: 0000000000000000 R09: 0000000000000000 [ 307.064894][ T8125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.072880][ T8125] R13: 00007f3429626038 R14: 00007f3429625fa0 R15: 00007ffd0fb7e7c8 [ 307.080881][ T8125] [ 307.495341][ T8136] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 307.796833][ T4285] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 308.933399][ T8178] netlink: 'syz.0.1344': attribute type 10 has an invalid length. [ 308.949857][ T8178] netlink: 'syz.0.1344': attribute type 11 has an invalid length. [ 308.981763][ T8178] netlink: 5145 bytes leftover after parsing attributes in process `syz.0.1344'. [ 309.276848][ T4285] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 309.550384][ T8186] device syzkaller0 entered promiscuous mode [ 309.641917][ T5273] wlan1: Trigger new scan to find an IBSS to join [ 309.758836][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1352'. [ 312.684219][ T7373] wlan1: Trigger new scan to find an IBSS to join [ 313.263277][ T4285] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 313.541712][ T8249] netlink: 'syz.1.1366': attribute type 3 has an invalid length. [ 313.558311][ T8249] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1366'. [ 314.813630][ T4285] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 315.642408][ T7373] wlan1: Creating new IBSS network, BSSID 02:20:10:66:a6:dd [ 316.720419][ T8282] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1377'. [ 316.763606][ T8286] FAULT_INJECTION: forcing a failure. [ 316.763606][ T8286] name failslab, interval 1, probability 0, space 0, times 0 [ 316.791225][ T8286] CPU: 1 PID: 8286 Comm: syz.4.1379 Not tainted syzkaller #0 [ 316.798643][ T8286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 316.808719][ T8286] Call Trace: [ 316.812014][ T8286] [ 316.814956][ T8286] dump_stack_lvl+0x188/0x24e [ 316.819656][ T8286] ? show_regs_print_info+0x12/0x12 [ 316.824871][ T8286] ? load_image+0x410/0x410 [ 316.829391][ T8286] ? __might_sleep+0xd0/0xd0 [ 316.834004][ T8286] ? __lock_acquire+0x7ea0/0x7ea0 [ 316.839056][ T8286] ? rcu_read_unlock_special+0xf9/0x510 [ 316.844622][ T8286] should_fail_ex+0x390/0x4c0 [ 316.849325][ T8286] should_failslab+0x5/0x20 [ 316.853839][ T8286] slab_pre_alloc_hook+0x59/0x300 [ 316.858869][ T8286] ? ip6_setup_cork+0x1d0/0xff0 [ 316.863722][ T8286] __kmem_cache_alloc_node+0x4f/0x270 [ 316.869101][ T8286] ? ip6_setup_cork+0x1d0/0xff0 [ 316.873956][ T8286] kmalloc_trace+0x26/0xe0 [ 316.878373][ T8286] ip6_setup_cork+0x1d0/0xff0 [ 316.883053][ T8286] ip6_make_skb+0x1de/0x520 [ 316.887557][ T8286] ? ip_skb_dst_mtu+0x870/0x870 [ 316.892405][ T8286] ? __ip6_flush_pending_frames+0x3a0/0x3a0 [ 316.898331][ T8286] ? ip_skb_dst_mtu+0x870/0x870 [ 316.903181][ T8286] udpv6_sendmsg+0x1b5a/0x22c0 [ 316.907946][ T8286] ? ip_skb_dst_mtu+0x870/0x870 [ 316.912797][ T8286] ? udp_v6_early_demux+0xf00/0xf00 [ 316.917995][ T8286] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 316.923987][ T8286] ? __local_bh_enable_ip+0x136/0x1c0 [ 316.929350][ T8286] ? _local_bh_enable+0xa0/0xa0 [ 316.934212][ T8286] ? inet_send_prepare+0x1aa/0x250 [ 316.939322][ T8286] ? inet_send_prepare+0x1aa/0x250 [ 316.944432][ T8286] ? inet6_sendmsg+0x5b/0xd0 [ 316.949024][ T8286] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 316.954226][ T8286] ____sys_sendmsg+0x5ed/0x9a0 [ 316.958991][ T8286] ? __lock_acquire+0x7ea0/0x7ea0 [ 316.964017][ T8286] ? __sys_sendmsg_sock+0x30/0x30 [ 316.969031][ T8286] ? __import_iovec+0x306/0x510 [ 316.973900][ T8286] ? import_iovec+0x6f/0xa0 [ 316.978402][ T8286] ___sys_sendmsg+0x2a2/0x360 [ 316.983076][ T8286] ? __sys_sendmsg+0x2a0/0x2a0 [ 316.987849][ T8286] ? __lock_acquire+0x7ea0/0x7ea0 [ 316.992889][ T8286] __se_sys_sendmsg+0x1c3/0x2b0 [ 316.997747][ T8286] ? ct_nmi_exit+0x145/0x1c0 [ 317.002337][ T8286] ? __x64_sys_sendmsg+0x80/0x80 [ 317.007280][ T8286] ? lockdep_hardirqs_on+0x94/0x140 [ 317.012477][ T8286] do_syscall_64+0x4c/0xa0 [ 317.016891][ T8286] ? clear_bhb_loop+0x60/0xb0 [ 317.021560][ T8286] ? clear_bhb_loop+0x60/0xb0 [ 317.026232][ T8286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.032116][ T8286] RIP: 0033:0x7f9ec579e1d9 [ 317.036572][ T8286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.056188][ T8286] RSP: 002b:00007f9ec658f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.064620][ T8286] RAX: ffffffffffffffda RBX: 00007f9ec5a25fa0 RCX: 00007f9ec579e1d9 [ 317.072586][ T8286] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 317.080552][ T8286] RBP: 00007f9ec658f090 R08: 0000000000000000 R09: 0000000000000000 [ 317.088516][ T8286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.096479][ T8286] R13: 00007f9ec5a26038 R14: 00007f9ec5a25fa0 R15: 00007ffd7bf66308 [ 317.104471][ T8286] [ 317.137148][ T8282] netlink: 'syz.3.1377': attribute type 12 has an invalid length. [ 317.142684][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.151356][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.160428][ T8282] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1377'. [ 317.173011][ T8292] netlink: 'syz.1.1382': attribute type 10 has an invalid length. [ 317.668005][ T4285] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 318.184966][ T8333] netlink: 'syz.3.1392': attribute type 10 has an invalid length. [ 319.336731][ T8355] netlink: 'syz.0.1399': attribute type 12 has an invalid length. [ 319.358716][ T8355] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1399'. [ 319.508001][ T4285] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 319.747947][ T8367] netlink: 'syz.1.1405': attribute type 16 has an invalid length. [ 319.771385][ T8367] netlink: 'syz.1.1405': attribute type 3 has an invalid length. [ 319.792761][ T8367] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1405'. [ 319.826272][ T8367] netlink: 'syz.1.1405': attribute type 4 has an invalid length. [ 320.000908][ T8370] netlink: 'syz.1.1405': attribute type 3 has an invalid length. [ 320.004471][ T8367] device syzkaller0 entered promiscuous mode [ 320.046827][ T8377] netlink: 'syz.0.1408': attribute type 10 has an invalid length. [ 320.085537][ T8370] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1405'. [ 320.120583][ T8377] device team0 left promiscuous mode [ 320.150070][ T8377] device team_slave_0 left promiscuous mode [ 320.164028][ T8377] device team_slave_1 left promiscuous mode [ 320.189349][ T8377] device geneve1 left promiscuous mode [ 320.202417][ T8377] ¥: port 1(team0) entered disabled state [ 320.293381][ T8377] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.338003][ T8377] bond0: (slave team0): Enslaving as an active interface with an up link [ 320.406950][ T8384] netlink: 'syz.2.1410': attribute type 19 has an invalid length. [ 320.836874][ T4285] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 321.226197][ T8408] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1418'. [ 324.804075][ T8423] FAULT_INJECTION: forcing a failure. [ 324.804075][ T8423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.837155][ T8423] CPU: 1 PID: 8423 Comm: syz.0.1419 Not tainted syzkaller #0 [ 324.844573][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 324.854644][ T8423] Call Trace: [ 324.857931][ T8423] [ 324.860877][ T8423] dump_stack_lvl+0x188/0x24e [ 324.865582][ T8423] ? show_regs_print_info+0x12/0x12 [ 324.870801][ T8423] ? load_image+0x410/0x410 [ 324.875326][ T8423] ? __lock_acquire+0x7ea0/0x7ea0 [ 324.880379][ T8423] should_fail_ex+0x390/0x4c0 [ 324.885092][ T8423] _copy_to_user+0x2c/0x130 [ 324.889616][ T8423] map_lookup_elem+0x481/0x600 [ 324.894412][ T8423] __sys_bpf+0x546/0x780 [ 324.898684][ T8423] ? bpf_link_show_fdinfo+0x380/0x380 [ 324.904098][ T8423] ? lock_chain_count+0x20/0x20 [ 324.908965][ T8423] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 324.914975][ T8423] __x64_sys_bpf+0x78/0x90 [ 324.919413][ T8423] do_syscall_64+0x4c/0xa0 [ 324.923865][ T8423] ? clear_bhb_loop+0x60/0xb0 [ 324.928560][ T8423] ? clear_bhb_loop+0x60/0xb0 [ 324.933255][ T8423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.939157][ T8423] RIP: 0033:0x7f4fb419e1d9 [ 324.943573][ T8423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.963175][ T8423] RSP: 002b:00007f4fb5121028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.971583][ T8423] RAX: ffffffffffffffda RBX: 00007f4fb4425fa0 RCX: 00007f4fb419e1d9 [ 324.979544][ T8423] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000001 [ 324.987508][ T8423] RBP: 00007f4fb5121090 R08: 0000000000000000 R09: 0000000000000000 [ 324.995478][ T8423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.003441][ T8423] R13: 00007f4fb4426038 R14: 00007f4fb4425fa0 R15: 00007ffcf3fc2908 [ 325.011414][ T8423] [ 325.083728][ T8433] FAULT_INJECTION: forcing a failure. [ 325.083728][ T8433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.113562][ T8433] CPU: 1 PID: 8433 Comm: syz.3.1421 Not tainted syzkaller #0 [ 325.120983][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 325.131064][ T8433] Call Trace: [ 325.134357][ T8433] [ 325.137297][ T8433] dump_stack_lvl+0x188/0x24e [ 325.142001][ T8433] ? show_regs_print_info+0x12/0x12 [ 325.147207][ T8433] ? load_image+0x410/0x410 [ 325.151710][ T8433] ? __lock_acquire+0x7ea0/0x7ea0 [ 325.156730][ T8433] ? __might_sleep+0xd0/0xd0 [ 325.161315][ T8433] should_fail_ex+0x390/0x4c0 [ 325.166004][ T8433] _copy_from_user+0x2c/0x170 [ 325.170682][ T8433] generic_map_update_batch+0x4dc/0x7f0 [ 325.176230][ T8433] ? rcu_read_unlock+0xa0/0xa0 [ 325.180991][ T8433] ? __fdget+0x17c/0x200 [ 325.185228][ T8433] ? rcu_read_unlock+0xa0/0xa0 [ 325.189988][ T8433] bpf_map_do_batch+0x475/0x5f0 [ 325.194838][ T8433] ? bpf_lsm_audit_rule_known+0x10/0x10 [ 325.200380][ T8433] __sys_bpf+0x6f7/0x780 [ 325.204625][ T8433] ? bpf_link_show_fdinfo+0x380/0x380 [ 325.210005][ T8433] ? lock_chain_count+0x20/0x20 [ 325.214858][ T8433] __x64_sys_bpf+0x78/0x90 [ 325.219271][ T8433] do_syscall_64+0x4c/0xa0 [ 325.223680][ T8433] ? clear_bhb_loop+0x60/0xb0 [ 325.228351][ T8433] ? clear_bhb_loop+0x60/0xb0 [ 325.233024][ T8433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.238911][ T8433] RIP: 0033:0x7f0dd099e1d9 [ 325.243327][ T8433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.262928][ T8433] RSP: 002b:00007f0dd188e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.271345][ T8433] RAX: ffffffffffffffda RBX: 00007f0dd0c25fa0 RCX: 00007f0dd099e1d9 [ 325.279311][ T8433] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 325.287271][ T8433] RBP: 00007f0dd188e090 R08: 0000000000000000 R09: 0000000000000000 [ 325.295254][ T8433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.303218][ T8433] R13: 00007f0dd0c26038 R14: 00007f0dd0c25fa0 R15: 00007ffe6effe328 [ 325.311194][ T8433] [ 325.641559][ T4285] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 325.729836][ T8451] netlink: 'syz.1.1430': attribute type 10 has an invalid length. [ 325.872880][ T8451] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 326.149707][ T8464] netlink: 'syz.3.1432': attribute type 10 has an invalid length. [ 326.173508][ T8464] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1432'. [ 326.471960][ T8471] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1434'. [ 326.561078][ T8469] netlink: 'syz.4.1433': attribute type 10 has an invalid length. [ 326.641943][ T8469] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1433'. [ 326.803228][ T8469] batman_adv: batadv0: Adding interface: vlan1 [ 326.820285][ T8469] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.920949][ T8469] batman_adv: batadv0: Interface activated: vlan1 [ 327.655037][ T8490] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1440'. [ 327.680949][ T8492] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1441'. [ 327.701017][ T8490] bridge_slave_1: default FDB implementation only supports local addresses [ 328.093530][ T4285] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 328.401391][ T8512] netlink: 'syz.4.1448': attribute type 28 has an invalid length. [ 329.251600][ T8531] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1454'. [ 329.356989][ T8534] FAULT_INJECTION: forcing a failure. [ 329.356989][ T8534] name failslab, interval 1, probability 0, space 0, times 0 [ 329.433396][ T8534] CPU: 0 PID: 8534 Comm: syz.0.1456 Not tainted syzkaller #0 [ 329.440825][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 329.450905][ T8534] Call Trace: [ 329.454214][ T8534] [ 329.457158][ T8534] dump_stack_lvl+0x188/0x24e [ 329.461862][ T8534] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 329.468034][ T8534] ? show_regs_print_info+0x12/0x12 [ 329.473257][ T8534] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 329.479443][ T8534] should_fail_ex+0x390/0x4c0 [ 329.484155][ T8534] should_failslab+0x5/0x20 [ 329.488678][ T8534] slab_pre_alloc_hook+0x59/0x300 [ 329.493723][ T8534] ? lockdep_hardirqs_on+0x94/0x140 [ 329.498948][ T8534] kmem_cache_alloc_node+0x5a/0x310 [ 329.504164][ T8534] ? __alloc_skb+0xf9/0x7d0 [ 329.508678][ T8534] __alloc_skb+0xf9/0x7d0 [ 329.513024][ T8534] netlink_sendmsg+0x654/0xbd0 [ 329.517820][ T8534] ? netlink_getsockopt+0x550/0x550 [ 329.523019][ T8534] ? apparmor_socket_sendmsg+0x8a/0x330 [ 329.528574][ T8534] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 329.533862][ T8534] ? security_socket_sendmsg+0x7c/0xa0 [ 329.539313][ T8534] ? netlink_getsockopt+0x550/0x550 [ 329.544506][ T8534] ____sys_sendmsg+0x5ed/0x9a0 [ 329.549270][ T8534] ? __sys_sendmsg_sock+0x30/0x30 [ 329.554282][ T8534] ? __import_iovec+0x306/0x510 [ 329.559134][ T8534] ? import_iovec+0x6f/0xa0 [ 329.563645][ T8534] ___sys_sendmsg+0x2a2/0x360 [ 329.568337][ T8534] ? __sys_sendmsg+0x2a0/0x2a0 [ 329.573097][ T8534] ? ct_nmi_exit+0x145/0x1c0 [ 329.577686][ T8534] ? ct_irq_exit_irqson+0x113/0x170 [ 329.582914][ T8534] ? __se_sys_sendmsg+0xb0/0x2b0 [ 329.587846][ T8534] __se_sys_sendmsg+0x1c3/0x2b0 [ 329.592699][ T8534] ? __x64_sys_sendmsg+0x80/0x80 [ 329.597639][ T8534] ? syscall_enter_from_user_mode+0x2a/0x80 [ 329.603534][ T8534] do_syscall_64+0x4c/0xa0 [ 329.607941][ T8534] ? clear_bhb_loop+0x60/0xb0 [ 329.612610][ T8534] ? clear_bhb_loop+0x60/0xb0 [ 329.617279][ T8534] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.623164][ T8534] RIP: 0033:0x7f4fb419e1d9 [ 329.627573][ T8534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.647169][ T8534] RSP: 002b:00007f4fb5121028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.655586][ T8534] RAX: ffffffffffffffda RBX: 00007f4fb4425fa0 RCX: 00007f4fb419e1d9 [ 329.663547][ T8534] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 329.671504][ T8534] RBP: 00007f4fb5121090 R08: 0000000000000000 R09: 0000000000000000 [ 329.679465][ T8534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.687426][ T8534] R13: 00007f4fb4426038 R14: 00007f4fb4425fa0 R15: 00007ffcf3fc2908 [ 329.695403][ T8534] [ 330.870879][ T4285] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 331.880814][ T8559] netlink: 'syz.2.1462': attribute type 41 has an invalid length. [ 332.751094][ T8575] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1469'. [ 332.805317][ T8574] netlink: 'syz.1.1479': attribute type 1 has an invalid length. [ 332.811854][ T8578] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1470'. [ 332.844279][ T8574] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.1479'. [ 332.861966][ T8578] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1470'. [ 332.962000][ T8582] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1470'. [ 332.991902][ T8583] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1470'. [ 333.271306][ T8585] netlink: 'syz.0.1472': attribute type 3 has an invalid length. [ 333.314128][ T8585] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1472'. [ 333.587749][ T8598] tun0: tun_chr_ioctl cmd 1074812118 [ 333.977000][ T8599] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1476'. [ 334.055676][ T8599] netlink: 'syz.4.1476': attribute type 10 has an invalid length. [ 334.562205][ T8599] device geneve1 entered promiscuous mode [ 334.595898][ T8599] team0: Port device geneve1 added [ 334.674246][ T8613] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1480'. [ 334.897041][ T8621] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1482'. [ 335.903246][ T4285] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 336.247094][ T8649] netlink: 'syz.2.1489': attribute type 3 has an invalid length. [ 336.470807][ T8657] netlink: 'syz.3.1496': attribute type 12 has an invalid length. [ 337.349903][ T8675] debugfs: Directory '!!!ý5‚Á7>7H€' with parent 'ieee80211' already present! [ 338.161568][ T8683] netlink: 'syz.4.1505': attribute type 3 has an invalid length. [ 338.209928][ T8683] __nla_validate_parse: 5 callbacks suppressed [ 338.209943][ T8683] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1505'. [ 339.311543][ T8752] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1515'. [ 339.384279][ T8752] debugfs: Directory '!!!ý5‚Á7>7H€' with parent 'ieee80211' already present! [ 339.466032][ T8764] FAULT_INJECTION: forcing a failure. [ 339.466032][ T8764] name failslab, interval 1, probability 0, space 0, times 0 [ 339.479804][ T8764] CPU: 0 PID: 8764 Comm: syz.1.1517 Not tainted syzkaller #0 [ 339.487223][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 339.497302][ T8764] Call Trace: [ 339.500595][ T8764] [ 339.503546][ T8764] dump_stack_lvl+0x188/0x24e [ 339.508249][ T8764] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 339.514436][ T8764] ? show_regs_print_info+0x12/0x12 [ 339.519661][ T8764] ? load_image+0x410/0x410 [ 339.524197][ T8764] should_fail_ex+0x390/0x4c0 [ 339.528912][ T8764] should_failslab+0x5/0x20 [ 339.533433][ T8764] slab_pre_alloc_hook+0x59/0x300 [ 339.538478][ T8764] ? security_sk_alloc+0x47/0x130 [ 339.543533][ T8764] __kmem_cache_alloc_node+0x4f/0x270 [ 339.548933][ T8764] ? security_sk_alloc+0x47/0x130 [ 339.553982][ T8764] __kmalloc+0xa3/0x240 [ 339.558152][ T8764] ? sk_prot_alloc+0xe7/0x210 [ 339.562856][ T8764] security_sk_alloc+0x47/0x130 [ 339.567731][ T8764] sk_prot_alloc+0x101/0x210 [ 339.572344][ T8764] ? sk_alloc+0x20/0x330 [ 339.576610][ T8764] sk_alloc+0x36/0x330 [ 339.580696][ T8764] ? bpf_ctx_init+0x154/0x190 [ 339.585771][ T8764] bpf_prog_test_run_skb+0x36d/0x18e0 [ 339.591167][ T8764] ? lockdep_hardirqs_on+0x94/0x140 [ 339.596407][ T8764] ? cpu_online+0xa0/0xa0 [ 339.600760][ T8764] bpf_prog_test_run+0x31c/0x390 [ 339.605729][ T8764] __sys_bpf+0x62b/0x780 [ 339.609994][ T8764] ? bpf_link_show_fdinfo+0x380/0x380 [ 339.615415][ T8764] __x64_sys_bpf+0x78/0x90 [ 339.619852][ T8764] do_syscall_64+0x4c/0xa0 [ 339.624290][ T8764] ? clear_bhb_loop+0x60/0xb0 [ 339.628989][ T8764] ? clear_bhb_loop+0x60/0xb0 [ 339.633692][ T8764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.639604][ T8764] RIP: 0033:0x7fc91c99e1d9 [ 339.644036][ T8764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.663654][ T8764] RSP: 002b:00007fc91d788028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 339.672085][ T8764] RAX: ffffffffffffffda RBX: 00007fc91cc25fa0 RCX: 00007fc91c99e1d9 [ 339.680074][ T8764] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 339.688057][ T8764] RBP: 00007fc91d788090 R08: 0000000000000000 R09: 0000000000000000 [ 339.696048][ T8764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.704040][ T8764] R13: 00007fc91cc26038 R14: 00007fc91cc25fa0 R15: 00007fffe0475ba8 [ 339.712045][ T8764] [ 340.880752][ T8795] netlink: 192852 bytes leftover after parsing attributes in process `syz.0.1521'. [ 340.912177][ T8797] FAULT_INJECTION: forcing a failure. [ 340.912177][ T8797] name failslab, interval 1, probability 0, space 0, times 0 [ 340.934754][ T8794] netlink: 192852 bytes leftover after parsing attributes in process `syz.0.1521'. [ 340.959665][ T8795] netlink: get zone limit has 4 unknown bytes [ 340.969145][ T8794] netlink: get zone limit has 4 unknown bytes [ 340.975880][ T8797] CPU: 0 PID: 8797 Comm: syz.4.1523 Not tainted syzkaller #0 [ 340.983276][ T8797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 340.993343][ T8797] Call Trace: [ 340.996633][ T8797] [ 340.999584][ T8797] dump_stack_lvl+0x188/0x24e [ 341.004289][ T8797] ? sctp_sendmsg+0x1686/0x2940 [ 341.009160][ T8797] ? ___sys_sendmsg+0x2a2/0x360 [ 341.014038][ T8797] ? show_regs_print_info+0x12/0x12 [ 341.019263][ T8797] ? load_image+0x410/0x410 [ 341.023797][ T8797] should_fail_ex+0x390/0x4c0 [ 341.028504][ T8797] should_failslab+0x5/0x20 [ 341.033020][ T8797] slab_pre_alloc_hook+0x59/0x300 [ 341.038065][ T8797] ? sctp_add_bind_addr+0x89/0x350 [ 341.043178][ T8797] __kmem_cache_alloc_node+0x4f/0x270 [ 341.048553][ T8797] ? sctp_add_bind_addr+0x89/0x350 [ 341.053665][ T8797] kmalloc_trace+0x26/0xe0 [ 341.058086][ T8797] sctp_add_bind_addr+0x89/0x350 [ 341.063025][ T8797] sctp_copy_local_addr_list+0x317/0x4d0 [ 341.068662][ T8797] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 341.074384][ T8797] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 341.080454][ T8797] ? sctp_v4_is_any+0x31/0x50 [ 341.085126][ T8797] ? sctp_copy_one_addr+0x93/0x660 [ 341.090235][ T8797] sctp_bind_addr_copy+0xaf/0x3c0 [ 341.095263][ T8797] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 341.101587][ T8797] sctp_connect_new_asoc+0x2f5/0x6a0 [ 341.106881][ T8797] ? __sctp_connect+0xd80/0xd80 [ 341.111727][ T8797] ? __local_bh_enable_ip+0x136/0x1c0 [ 341.117093][ T8797] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 341.122635][ T8797] ? security_sctp_bind_connect+0x85/0xb0 [ 341.128361][ T8797] sctp_sendmsg+0x1686/0x2940 [ 341.133048][ T8797] ? sctp_getsockopt+0x8a0/0x8a0 [ 341.137981][ T8797] ? aa_sock_msg_perm+0x94/0x150 [ 341.142923][ T8797] ? inet_sendmsg+0xca/0x2a0 [ 341.147506][ T8797] ? inet_send_prepare+0x250/0x250 [ 341.152613][ T8797] ____sys_sendmsg+0x5ed/0x9a0 [ 341.157378][ T8797] ? __sys_sendmsg_sock+0x30/0x30 [ 341.162393][ T8797] ? __import_iovec+0x306/0x510 [ 341.167251][ T8797] ? import_iovec+0x6f/0xa0 [ 341.171758][ T8797] ___sys_sendmsg+0x2a2/0x360 [ 341.176434][ T8797] ? __sys_sendmsg+0x2a0/0x2a0 [ 341.181208][ T8797] ? ktime_get+0x7b/0x270 [ 341.185555][ T8797] __se_sys_sendmsg+0x1c3/0x2b0 [ 341.190404][ T8797] ? __x64_sys_sendmsg+0x80/0x80 [ 341.195348][ T8797] ? lockdep_hardirqs_on+0x94/0x140 [ 341.200546][ T8797] do_syscall_64+0x4c/0xa0 [ 341.204956][ T8797] ? clear_bhb_loop+0x60/0xb0 [ 341.209625][ T8797] ? clear_bhb_loop+0x60/0xb0 [ 341.214298][ T8797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.220184][ T8797] RIP: 0033:0x7f9ec579e1d9 [ 341.224590][ T8797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.244194][ T8797] RSP: 002b:00007f9ec658f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.252601][ T8797] RAX: ffffffffffffffda RBX: 00007f9ec5a25fa0 RCX: 00007f9ec579e1d9 [ 341.260566][ T8797] RDX: 0000000004000040 RSI: 00002000000010c0 RDI: 0000000000000005 [ 341.268532][ T8797] RBP: 00007f9ec658f090 R08: 0000000000000000 R09: 0000000000000000 [ 341.276496][ T8797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 341.284476][ T8797] R13: 00007f9ec5a26038 R14: 00007f9ec5a25fa0 R15: 00007ffd7bf66308 [ 341.292457][ T8797] [ 343.582094][ T8865] netlink: 'syz.4.1544': attribute type 8 has an invalid length. [ 343.628112][ T8865] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1544'. [ 343.637080][ T8866] netlink: 'syz.4.1544': attribute type 10 has an invalid length. [ 344.346820][ T8881] netlink: 'syz.2.1548': attribute type 3 has an invalid length. [ 344.409036][ T8881] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1548'. [ 344.775835][ T4285] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 344.919955][ T8885] netlink: 'syz.3.1550': attribute type 10 has an invalid length. [ 344.985601][ T8885] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1550'. [ 345.033049][ T8885] device dummy0 entered promiscuous mode [ 345.073384][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 345.139822][ T8885] bridge0: port 3(dummy0) entered blocking state [ 345.191438][ T8885] bridge0: port 3(dummy0) entered disabled state [ 345.328010][ T8885] bridge0: port 3(dummy0) entered blocking state [ 345.335952][ T8885] bridge0: port 3(dummy0) entered forwarding state [ 345.453599][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 345.867384][ T8906] netlink: 'syz.3.1557': attribute type 9 has an invalid length. [ 345.974161][ T8906] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1557'. [ 346.245739][ T8910] netlink: 'syz.1.1559': attribute type 3 has an invalid length. [ 346.341970][ T8911] netlink: 'syz.2.1556': attribute type 10 has an invalid length. [ 346.362204][ T8910] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1559'. [ 346.860752][ T8911] team0: Port device macvlan0 added [ 346.900219][ T8751] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 347.173068][ T4285] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 347.647685][ T8944] netlink: 'syz.0.1569': attribute type 1 has an invalid length. [ 347.707139][ T8946] netlink: 'syz.4.1570': attribute type 2 has an invalid length. [ 347.781809][ T8946] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1570'. [ 348.260330][ T8954] netlink: 'syz.2.1573': attribute type 3 has an invalid length. [ 348.463842][ T8954] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1573'. [ 348.883221][ T8967] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1577'. [ 349.256991][ T4285] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 350.148961][ T8988] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1587'. [ 350.639037][ T9001] netlink: 'syz.2.1588': attribute type 2 has an invalid length. [ 350.688357][ T9001] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1588'. [ 354.611176][ T9085] netlink: 'syz.4.1614': attribute type 9 has an invalid length. [ 354.701990][ T9085] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.1614'. [ 355.017489][ T9089] netlink: 'syz.0.1615': attribute type 21 has an invalid length. [ 355.057957][ T9089] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1615'. [ 355.097411][ T9089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1615'. [ 355.822913][ T9105] netlink: 'syz.4.1621': attribute type 3 has an invalid length. [ 355.830909][ T9105] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1621'. [ 356.125494][ T9112] netlink: 'syz.1.1622': attribute type 4 has an invalid length. [ 356.173879][ T9112] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1622'. [ 358.744285][ T9126] netlink: 'syz.3.1626': attribute type 21 has an invalid length. [ 359.104967][ T9136] netlink: 'syz.4.1630': attribute type 4 has an invalid length. [ 359.124042][ T9136] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1630'. [ 359.146674][ T9136] netlink: 'syz.4.1630': attribute type 1 has an invalid length. [ 359.175908][ T9136] netlink: 118232 bytes leftover after parsing attributes in process `syz.4.1630'. [ 361.196231][ T9185] device syzkaller0 entered promiscuous mode [ 361.820929][ T9194] device syzkaller0 entered promiscuous mode [ 362.851282][ T9237] netlink: 'syz.2.1659': attribute type 7 has an invalid length. [ 368.019240][ T9234] netlink: 'syz.2.1659': attribute type 4 has an invalid length. [ 368.029340][ T9234] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1659'. [ 368.144427][ T9252] netlink: 'syz.0.1665': attribute type 10 has an invalid length. [ 368.184402][ T9252] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1665'. [ 368.458776][ T9280] device veth1_macvtap left promiscuous mode [ 368.561949][ T9286] device veth1_macvtap entered promiscuous mode [ 368.602013][ T9286] device macsec0 entered promiscuous mode [ 369.370259][ T9309] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 369.985897][ T9328] netlink: 'syz.4.1683': attribute type 10 has an invalid length. [ 370.018325][ T9328] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1683'. [ 370.056359][ T9328] bridge0: port 3(veth0_vlan) entered blocking state [ 370.082091][ T9328] bridge0: port 3(veth0_vlan) entered disabled state [ 370.142246][ T9328] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 371.850849][ T9339] device veth1_macvtap left promiscuous mode [ 371.936554][ T9344] device veth1_macvtap entered promiscuous mode [ 371.981914][ T9344] device macsec0 entered promiscuous mode [ 371.990675][ T8751] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 372.263900][ T9356] netlink: 'syz.1.1694': attribute type 10 has an invalid length. [ 372.430328][ T4285] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 372.657221][ T9371] FAULT_INJECTION: forcing a failure. [ 372.657221][ T9371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.689601][ T9371] CPU: 1 PID: 9371 Comm: syz.4.1702 Not tainted syzkaller #0 [ 372.697037][ T9371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 372.707116][ T9371] Call Trace: [ 372.710389][ T9371] [ 372.713324][ T9371] dump_stack_lvl+0x188/0x24e [ 372.718019][ T9371] ? show_regs_print_info+0x12/0x12 [ 372.723216][ T9371] ? load_image+0x410/0x410 [ 372.727715][ T9371] ? __lock_acquire+0x7ea0/0x7ea0 [ 372.732759][ T9371] should_fail_ex+0x390/0x4c0 [ 372.737466][ T9371] _copy_from_user+0x2c/0x170 [ 372.742167][ T9371] __sys_bpf+0x2ea/0x780 [ 372.746432][ T9371] ? bpf_link_show_fdinfo+0x380/0x380 [ 372.751818][ T9371] ? lock_chain_count+0x20/0x20 [ 372.756698][ T9371] __x64_sys_bpf+0x78/0x90 [ 372.761133][ T9371] do_syscall_64+0x4c/0xa0 [ 372.765549][ T9371] ? clear_bhb_loop+0x60/0xb0 [ 372.770226][ T9371] ? clear_bhb_loop+0x60/0xb0 [ 372.774912][ T9371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.780833][ T9371] RIP: 0033:0x7f9ec579e1d9 [ 372.785240][ T9371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.804847][ T9371] RSP: 002b:00007f9ec658f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 372.813286][ T9371] RAX: ffffffffffffffda RBX: 00007f9ec5a25fa0 RCX: 00007f9ec579e1d9 [ 372.821270][ T9371] RDX: 000000000000000c RSI: 0000200000000500 RDI: 000000000000000a [ 372.829245][ T9371] RBP: 00007f9ec658f090 R08: 0000000000000000 R09: 0000000000000000 [ 372.837229][ T9371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.845220][ T9371] R13: 00007f9ec5a26038 R14: 00007f9ec5a25fa0 R15: 00007ffd7bf66308 [ 372.853224][ T9371] [ 374.086195][ T9379] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1705'. [ 374.305309][ T9386] device veth1_macvtap left promiscuous mode [ 374.371416][ T9386] device veth1_macvtap entered promiscuous mode [ 374.381269][ T9386] device macsec0 entered promiscuous mode [ 374.597077][ T9404] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1714'. [ 374.626628][ T9404] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1714'. [ 374.683829][ T9404] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 374.977156][ T9422] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1719'. [ 375.031332][ T9425] FAULT_INJECTION: forcing a failure. [ 375.031332][ T9425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.084425][ T9425] CPU: 0 PID: 9425 Comm: syz.0.1721 Not tainted syzkaller #0 [ 375.091847][ T9425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 375.101903][ T9425] Call Trace: [ 375.105180][ T9425] [ 375.108105][ T9425] dump_stack_lvl+0x188/0x24e [ 375.112785][ T9425] ? show_regs_print_info+0x12/0x12 [ 375.117978][ T9425] ? load_image+0x410/0x410 [ 375.122491][ T9425] ? __lock_acquire+0x7ea0/0x7ea0 [ 375.127529][ T9425] should_fail_ex+0x390/0x4c0 [ 375.132217][ T9425] _copy_from_user+0x2c/0x170 [ 375.136905][ T9425] iovec_from_user+0x143/0x360 [ 375.141679][ T9425] __import_iovec+0x6c/0x510 [ 375.146286][ T9425] import_iovec+0x6f/0xa0 [ 375.150620][ T9425] ___sys_sendmsg+0x252/0x360 [ 375.155299][ T9425] ? __sys_sendmsg+0x2a0/0x2a0 [ 375.160073][ T9425] ? __lock_acquire+0x7ea0/0x7ea0 [ 375.165111][ T9425] __se_sys_sendmsg+0x1c3/0x2b0 [ 375.169967][ T9425] ? __x64_sys_sendmsg+0x80/0x80 [ 375.174917][ T9425] ? lockdep_hardirqs_on+0x94/0x140 [ 375.180113][ T9425] do_syscall_64+0x4c/0xa0 [ 375.184525][ T9425] ? clear_bhb_loop+0x60/0xb0 [ 375.189219][ T9425] ? clear_bhb_loop+0x60/0xb0 [ 375.193889][ T9425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.199777][ T9425] RIP: 0033:0x7f4fb419e1d9 [ 375.204190][ T9425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.223794][ T9425] RSP: 002b:00007f4fb5121028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.232205][ T9425] RAX: ffffffffffffffda RBX: 00007f4fb4425fa0 RCX: 00007f4fb419e1d9 [ 375.240173][ T9425] RDX: 0000000024000008 RSI: 0000200000000300 RDI: 0000000000000003 [ 375.248144][ T9425] RBP: 00007f4fb5121090 R08: 0000000000000000 R09: 0000000000000000 [ 375.256109][ T9425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.264070][ T9425] R13: 00007f4fb4426038 R14: 00007f4fb4425fa0 R15: 00007ffcf3fc2908 [ 375.272047][ T9425] [ 375.385523][ T9434] FAULT_INJECTION: forcing a failure. [ 375.385523][ T9434] name failslab, interval 1, probability 0, space 0, times 0 [ 375.471709][ T9434] CPU: 1 PID: 9434 Comm: syz.3.1725 Not tainted syzkaller #0 [ 375.479137][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 375.489209][ T9434] Call Trace: [ 375.492506][ T9434] [ 375.495453][ T9434] dump_stack_lvl+0x188/0x24e [ 375.500163][ T9434] ? show_regs_print_info+0x12/0x12 [ 375.505391][ T9434] ? load_image+0x410/0x410 [ 375.509915][ T9434] ? __might_sleep+0xd0/0xd0 [ 375.514522][ T9434] ? __lock_acquire+0x7ea0/0x7ea0 [ 375.519563][ T9434] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 375.525572][ T9434] should_fail_ex+0x390/0x4c0 [ 375.530279][ T9434] should_failslab+0x5/0x20 [ 375.534798][ T9434] slab_pre_alloc_hook+0x59/0x300 [ 375.539850][ T9434] kmem_cache_alloc_node+0x5a/0x310 [ 375.545091][ T9434] ? __alloc_skb+0xf9/0x7d0 [ 375.549706][ T9434] __alloc_skb+0xf9/0x7d0 [ 375.554056][ T9434] __ip_append_data+0x26d7/0x38d0 [ 375.559100][ T9434] ? ip_route_output_key_hash+0x139/0x330 [ 375.564830][ T9434] ? raw_send_hdrinc+0x1130/0x1130 [ 375.569949][ T9434] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 375.575933][ T9434] ? ip_setup_cork+0x850/0x850 [ 375.580692][ T9434] ? ipv4_mtu+0x30c/0x420 [ 375.585018][ T9434] ? ip_setup_cork+0x528/0x850 [ 375.589778][ T9434] ip_append_data+0x132/0x1a0 [ 375.594560][ T9434] ? raw_send_hdrinc+0x1130/0x1130 [ 375.599688][ T9434] raw_sendmsg+0x12c8/0x1940 [ 375.604300][ T9434] ? compat_raw_ioctl+0x60/0x60 [ 375.609163][ T9434] ? aa_sk_perm+0x81f/0x950 [ 375.613678][ T9434] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 375.620089][ T9434] ? aa_sock_msg_perm+0x94/0x150 [ 375.625032][ T9434] ? sock_rps_record_flow+0x19/0x3f0 [ 375.630316][ T9434] ? inet_sendmsg+0x7a/0x2a0 [ 375.634906][ T9434] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 375.640186][ T9434] ? inet_send_prepare+0x250/0x250 [ 375.645300][ T9434] ____sys_sendmsg+0x5ed/0x9a0 [ 375.650065][ T9434] ? __sys_sendmsg_sock+0x30/0x30 [ 375.655089][ T9434] ? __import_iovec+0x306/0x510 [ 375.659948][ T9434] ? import_iovec+0x6f/0xa0 [ 375.664453][ T9434] ___sys_sendmsg+0x2a2/0x360 [ 375.669135][ T9434] ? __sys_sendmsg+0x2a0/0x2a0 [ 375.673921][ T9434] ? __lock_acquire+0x7ea0/0x7ea0 [ 375.678962][ T9434] __se_sys_sendmsg+0x1c3/0x2b0 [ 375.683815][ T9434] ? __x64_sys_sendmsg+0x80/0x80 [ 375.688760][ T9434] ? lockdep_hardirqs_on+0x94/0x140 [ 375.693964][ T9434] do_syscall_64+0x4c/0xa0 [ 375.698376][ T9434] ? clear_bhb_loop+0x60/0xb0 [ 375.703051][ T9434] ? clear_bhb_loop+0x60/0xb0 [ 375.707722][ T9434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.713611][ T9434] RIP: 0033:0x7f0dd099e1d9 [ 375.718018][ T9434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.737619][ T9434] RSP: 002b:00007f0dd188e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.746031][ T9434] RAX: ffffffffffffffda RBX: 00007f0dd0c25fa0 RCX: 00007f0dd099e1d9 [ 375.753994][ T9434] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 375.761959][ T9434] RBP: 00007f0dd188e090 R08: 0000000000000000 R09: 0000000000000000 [ 375.769920][ T9434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.777894][ T9434] R13: 00007f0dd0c26038 R14: 00007f0dd0c25fa0 R15: 00007ffe6effe328 [ 375.785875][ T9434] [ 376.218572][ T9449] device veth1_macvtap left promiscuous mode [ 376.300565][ T9450] device veth1_macvtap entered promiscuous mode [ 376.347694][ T9450] device macsec0 entered promiscuous mode [ 376.639536][ T9464] FAULT_INJECTION: forcing a failure. [ 376.639536][ T9464] name failslab, interval 1, probability 0, space 0, times 0 [ 376.688592][ T9464] CPU: 1 PID: 9464 Comm: syz.0.1733 Not tainted syzkaller #0 [ 376.696035][ T9464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 376.706123][ T9464] Call Trace: [ 376.709427][ T9464] [ 376.712386][ T9464] dump_stack_lvl+0x188/0x24e [ 376.717108][ T9464] ? show_regs_print_info+0x12/0x12 [ 376.722341][ T9464] ? load_image+0x410/0x410 [ 376.726882][ T9464] ? __might_sleep+0xd0/0xd0 [ 376.731502][ T9464] ? __lock_acquire+0x7ea0/0x7ea0 [ 376.736573][ T9464] should_fail_ex+0x390/0x4c0 [ 376.741296][ T9464] should_failslab+0x5/0x20 [ 376.745830][ T9464] slab_pre_alloc_hook+0x59/0x300 [ 376.750898][ T9464] kmem_cache_alloc_node+0x5a/0x310 [ 376.756123][ T9464] ? __alloc_skb+0xf9/0x7d0 [ 376.760667][ T9464] __alloc_skb+0xf9/0x7d0 [ 376.765037][ T9464] netlink_ack+0x373/0x1160 [ 376.769603][ T9464] ? genl_bind+0x360/0x360 [ 376.774055][ T9464] ? netlink_dump+0xcd0/0xcd0 [ 376.778756][ T9464] ? wg_get_device_dump+0x1c10/0x1c10 [ 376.784188][ T9464] netlink_rcv_skb+0x26d/0x440 [ 376.788988][ T9464] ? genl_bind+0x360/0x360 [ 376.793445][ T9464] ? netlink_ack+0x1160/0x1160 [ 376.798263][ T9464] ? down_read+0x1a8/0x2d0 [ 376.802722][ T9464] genl_rcv+0x24/0x40 [ 376.806735][ T9464] netlink_unicast+0x7ad/0x920 [ 376.811553][ T9464] netlink_sendmsg+0x8ad/0xbd0 [ 376.816378][ T9464] ? netlink_getsockopt+0x550/0x550 [ 376.821611][ T9464] ? apparmor_socket_sendmsg+0x8a/0x330 [ 376.827196][ T9464] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 376.832961][ T9464] ? security_socket_sendmsg+0x7c/0xa0 [ 376.838460][ T9464] ? netlink_getsockopt+0x550/0x550 [ 376.843703][ T9464] ____sys_sendmsg+0x5ed/0x9a0 [ 376.848515][ T9464] ? __sys_sendmsg_sock+0x30/0x30 [ 376.853580][ T9464] ? __import_iovec+0x306/0x510 [ 376.858495][ T9464] ? import_iovec+0x6f/0xa0 [ 376.863043][ T9464] ___sys_sendmsg+0x2a2/0x360 [ 376.867770][ T9464] ? __sys_sendmsg+0x2a0/0x2a0 [ 376.872606][ T9464] ? __lock_acquire+0x7ea0/0x7ea0 [ 376.877721][ T9464] __se_sys_sendmsg+0x1c3/0x2b0 [ 376.882613][ T9464] ? __x64_sys_sendmsg+0x80/0x80 [ 376.887608][ T9464] ? lockdep_hardirqs_on+0x94/0x140 [ 376.892846][ T9464] do_syscall_64+0x4c/0xa0 [ 376.897290][ T9464] ? clear_bhb_loop+0x60/0xb0 [ 376.902002][ T9464] ? clear_bhb_loop+0x60/0xb0 [ 376.906716][ T9464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.912645][ T9464] RIP: 0033:0x7f4fb419e1d9 [ 376.917092][ T9464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.936729][ T9464] RSP: 002b:00007f4fb5121028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.945192][ T9464] RAX: ffffffffffffffda RBX: 00007f4fb4425fa0 RCX: 00007f4fb419e1d9 [ 376.953197][ T9464] RDX: 0000000000004080 RSI: 0000200000000040 RDI: 0000000000000004 [ 376.961200][ T9464] RBP: 00007f4fb5121090 R08: 0000000000000000 R09: 0000000000000000 [ 376.969204][ T9464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.977206][ T9464] R13: 00007f4fb4426038 R14: 00007f4fb4425fa0 R15: 00007ffcf3fc2908 [ 376.985239][ T9464] [ 377.731601][ T9486] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1741'. [ 377.999060][ T9490] netlink: 'syz.1.1743': attribute type 9 has an invalid length. [ 378.023720][ T9490] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1743'. [ 378.027910][ T8773] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 378.391998][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.398338][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.135403][ T9520] netlink: 'syz.0.1754': attribute type 1 has an invalid length. [ 379.181887][ T9520] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1754'. [ 379.370587][ T9532] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1756'. [ 379.434846][ T9532] netlink: 'syz.1.1756': attribute type 10 has an invalid length. [ 379.468577][ T9532] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 379.469221][ T9534] sctp: [Deprecated]: syz.3.1758 (pid 9534) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.469221][ T9534] Use struct sctp_sack_info instead [ 383.020582][ T9566] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1765'. [ 383.224671][ T9573] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.1767'. [ 383.480469][ T9582] FAULT_INJECTION: forcing a failure. [ 383.480469][ T9582] name failslab, interval 1, probability 0, space 0, times 0 [ 383.525342][ T9582] CPU: 1 PID: 9582 Comm: syz.0.1771 Not tainted syzkaller #0 [ 383.532767][ T9582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 383.542844][ T9582] Call Trace: [ 383.546130][ T9582] [ 383.549072][ T9582] dump_stack_lvl+0x188/0x24e [ 383.553780][ T9582] ? show_regs_print_info+0x12/0x12 [ 383.558999][ T9582] ? load_image+0x410/0x410 [ 383.563515][ T9582] ? mark_lock+0x94/0x320 [ 383.567868][ T9582] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 383.573872][ T9582] should_fail_ex+0x390/0x4c0 [ 383.578555][ T9582] should_failslab+0x5/0x20 [ 383.583055][ T9582] slab_pre_alloc_hook+0x59/0x300 [ 383.588109][ T9582] ? nsim_fib_event_nb+0xd8/0x1040 [ 383.593249][ T9582] __kmem_cache_alloc_node+0x4f/0x270 [ 383.598643][ T9582] ? nsim_fib_event_nb+0xd8/0x1040 [ 383.603775][ T9582] kmalloc_trace+0x26/0xe0 [ 383.608212][ T9582] nsim_fib_event_nb+0xd8/0x1040 [ 383.613170][ T9582] ? lockdep_hardirqs_on+0x94/0x140 [ 383.618394][ T9582] atomic_notifier_call_chain+0x17a/0x2b0 [ 383.624135][ T9582] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 383.629965][ T9582] call_fib_notifiers+0x2d/0x60 [ 383.634837][ T9582] call_fib6_multipath_entry_notifiers+0xf2/0x160 [ 383.641262][ T9582] ? call_fib6_entry_notifiers+0x150/0x150 [ 383.647088][ T9582] ? inet6_rtm_newroute+0x1313/0x1ca0 [ 383.652457][ T9582] inet6_rtm_newroute+0x181f/0x1ca0 [ 383.657662][ T9582] ? ipv6_route_sysctl_init+0x270/0x270 [ 383.663217][ T9582] ? trace_contention_end+0x5f/0x170 [ 383.668523][ T9582] ? ipv6_route_sysctl_init+0x270/0x270 [ 383.674062][ T9582] rtnetlink_rcv_msg+0x863/0xfb0 [ 383.678996][ T9582] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 383.684107][ T9582] ? rtnetlink_bind+0x80/0x80 [ 383.688784][ T9582] ? __local_bh_enable_ip+0x13e/0x1c0 [ 383.694148][ T9582] ? _local_bh_enable+0xa0/0xa0 [ 383.698992][ T9582] ? __dev_queue_xmit+0x281/0x3810 [ 383.704098][ T9582] ? __dev_queue_xmit+0x281/0x3810 [ 383.709203][ T9582] ? __dev_queue_xmit+0x1d84/0x3810 [ 383.714399][ T9582] ? __dev_queue_xmit+0x281/0x3810 [ 383.719513][ T9582] ? ref_tracker_free+0x682/0x830 [ 383.724535][ T9582] ? refcount_inc+0x70/0x70 [ 383.729035][ T9582] ? memcpy+0x3c/0x60 [ 383.733009][ T9582] ? __copy_skb_header+0x3ba/0x4f0 [ 383.738112][ T9582] ? __skb_clone+0x446/0x6c0 [ 383.742694][ T9582] netlink_rcv_skb+0x1ef/0x440 [ 383.747449][ T9582] ? rtnetlink_bind+0x80/0x80 [ 383.752121][ T9582] ? netlink_ack+0x1160/0x1160 [ 383.756883][ T9582] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.762079][ T9582] netlink_unicast+0x7ad/0x920 [ 383.766845][ T9582] netlink_sendmsg+0x8ad/0xbd0 [ 383.771603][ T9582] ? aa_sock_msg_perm+0x94/0x150 [ 383.776547][ T9582] ? netlink_getsockopt+0x550/0x550 [ 383.781739][ T9582] ? apparmor_socket_sendmsg+0x8a/0x330 [ 383.787287][ T9582] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 383.792564][ T9582] ? security_socket_sendmsg+0x7c/0xa0 [ 383.798017][ T9582] ? netlink_getsockopt+0x550/0x550 [ 383.803208][ T9582] ____sys_sendmsg+0x5ed/0x9a0 [ 383.807970][ T9582] ? __sys_sendmsg_sock+0x30/0x30 [ 383.812986][ T9582] ? __import_iovec+0x306/0x510 [ 383.817841][ T9582] ? import_iovec+0x6f/0xa0 [ 383.822348][ T9582] ___sys_sendmsg+0x2a2/0x360 [ 383.827024][ T9582] ? __sys_sendmsg+0x2a0/0x2a0 [ 383.831789][ T9582] ? irqentry_enter+0x33/0x50 [ 383.836493][ T9582] __se_sys_sendmsg+0x1c3/0x2b0 [ 383.841338][ T9582] ? __x64_sys_sendmsg+0x80/0x80 [ 383.846280][ T9582] ? syscall_enter_from_user_mode+0x2a/0x80 [ 383.852175][ T9582] do_syscall_64+0x4c/0xa0 [ 383.856582][ T9582] ? clear_bhb_loop+0x60/0xb0 [ 383.861253][ T9582] ? clear_bhb_loop+0x60/0xb0 [ 383.865929][ T9582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.871815][ T9582] RIP: 0033:0x7f4fb419e1d9 [ 383.876220][ T9582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.895816][ T9582] RSP: 002b:00007f4fb5121028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.904227][ T9582] RAX: ffffffffffffffda RBX: 00007f4fb4425fa0 RCX: 00007f4fb419e1d9 [ 383.912192][ T9582] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 383.920153][ T9582] RBP: 00007f4fb5121090 R08: 0000000000000000 R09: 0000000000000000 [ 383.928118][ T9582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 383.936082][ T9582] R13: 00007f4fb4426038 R14: 00007f4fb4425fa0 R15: 00007ffcf3fc2908 [ 383.944063][ T9582] [ 383.997181][ T9596] netlink: 'syz.4.1774': attribute type 1 has an invalid length. [ 384.004998][ T9596] netlink: 16142 bytes leftover after parsing attributes in process `syz.4.1774'. [ 384.304093][ T9603] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1780'. [ 384.416236][ T9609] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1782'. [ 384.788736][ T9620] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1787'. [ 384.822787][ T9620] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 384.830687][ T9631] netlink: 'syz.4.1787': attribute type 3 has an invalid length. [ 384.853468][ T9620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.890138][ T9631] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1787'. [ 385.222597][ T9626] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1787'. [ 385.736057][ T9646] device netdevsim0 entered promiscuous mode [ 385.761141][ T9646] netlink: 'syz.1.1795': attribute type 29 has an invalid length. [ 385.798335][ T9646] netlink: 'syz.1.1795': attribute type 29 has an invalid length. [ 385.804996][ T9648] FAULT_INJECTION: forcing a failure. [ 385.804996][ T9648] name failslab, interval 1, probability 0, space 0, times 0 [ 385.827550][ T9648] CPU: 1 PID: 9648 Comm: syz.4.1796 Not tainted syzkaller #0 [ 385.834962][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 385.845031][ T9648] Call Trace: [ 385.848314][ T9648] [ 385.851254][ T9648] dump_stack_lvl+0x188/0x24e [ 385.855958][ T9648] ? show_regs_print_info+0x12/0x12 [ 385.861180][ T9648] ? load_image+0x410/0x410 [ 385.865699][ T9648] ? verify_lock_unused+0x140/0x140 [ 385.870930][ T9648] should_fail_ex+0x390/0x4c0 [ 385.875641][ T9648] should_failslab+0x5/0x20 [ 385.880169][ T9648] slab_pre_alloc_hook+0x59/0x300 [ 385.883508][ T9649] netlink: 'syz.1.1795': attribute type 29 has an invalid length. [ 385.885203][ T9648] kmem_cache_alloc+0x56/0x2f0 [ 385.897752][ T9648] ? skb_clone+0x1e7/0x370 [ 385.902193][ T9648] skb_clone+0x1e7/0x370 [ 385.906455][ T9648] __netlink_deliver_tap+0x3e4/0x7e0 [ 385.911769][ T9648] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.916983][ T9648] netlink_deliver_tap+0x19c/0x1b0 [ 385.922112][ T9648] netlink_unicast+0x777/0x920 [ 385.926900][ T9648] netlink_sendmsg+0x8ad/0xbd0 [ 385.931688][ T9648] ? netlink_getsockopt+0x550/0x550 [ 385.936899][ T9648] ? apparmor_socket_sendmsg+0x8a/0x330 [ 385.942463][ T9648] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 385.947761][ T9648] ? security_socket_sendmsg+0x7c/0xa0 [ 385.953240][ T9648] ? netlink_getsockopt+0x550/0x550 [ 385.958452][ T9648] ____sys_sendmsg+0x5ed/0x9a0 [ 385.963021][ T9646] netlink: 'syz.1.1795': attribute type 29 has an invalid length. [ 385.963226][ T9648] ? __sys_sendmsg_sock+0x30/0x30 [ 385.976037][ T9648] ? __import_iovec+0x306/0x510 [ 385.980919][ T9648] ? import_iovec+0x6f/0xa0 [ 385.985448][ T9648] ___sys_sendmsg+0x2a2/0x360 [ 385.990141][ T9648] ? __sys_sendmsg+0x2a0/0x2a0 [ 385.994937][ T9648] ? __lock_acquire+0x7ea0/0x7ea0 [ 386.000006][ T9648] __se_sys_sendmsg+0x1c3/0x2b0 [ 386.003133][ T9646] netlink: 'syz.1.1795': attribute type 29 has an invalid length. [ 386.004860][ T9648] ? __x64_sys_sendmsg+0x80/0x80 [ 386.017604][ T9648] ? lockdep_hardirqs_on+0x94/0x140 [ 386.022831][ T9648] do_syscall_64+0x4c/0xa0 [ 386.027267][ T9648] ? clear_bhb_loop+0x60/0xb0 [ 386.031961][ T9648] ? clear_bhb_loop+0x60/0xb0 [ 386.036661][ T9648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.042573][ T9648] RIP: 0033:0x7f9ec579e1d9 [ 386.047005][ T9648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.066632][ T9648] RSP: 002b:00007f9ec658f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.075072][ T9648] RAX: ffffffffffffffda RBX: 00007f9ec5a25fa0 RCX: 00007f9ec579e1d9 [ 386.083058][ T9648] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 386.091052][ T9648] RBP: 00007f9ec658f090 R08: 0000000000000000 R09: 0000000000000000 [ 386.099038][ T9648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.107034][ T9648] R13: 00007f9ec5a26038 R14: 00007f9ec5a25fa0 R15: 00007ffd7bf66308 [ 386.115034][ T9648] [ 386.472352][ T9665] netlink: 'syz.2.1799': attribute type 22 has an invalid length. [ 386.758324][ T9676] tipc: Started in network mode [ 386.771879][ T9676] tipc: Node identity 9215a268, cluster identity 4711 [ 386.793709][ T9676] tipc: Node number set to 2450891368 [ 389.419063][ T9747] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1831'. [ 389.793503][ T9756] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1833'. [ 390.598298][ T9776] tipc: Started in network mode [ 390.623746][ T9776] tipc: Node identity 9215a268, cluster identity 4711 [ 390.630832][ T9776] tipc: Node number set to 2450891368 [ 390.727596][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1846'. [ 394.142403][ T9825] netlink: 'syz.1.1857': attribute type 10 has an invalid length. [ 394.151404][ T9825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1857'. [ 394.168848][ T9825] device dummy0 entered promiscuous mode [ 394.178732][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 394.202212][ T9825] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 394.372715][ T9836] FAULT_INJECTION: forcing a failure. [ 394.372715][ T9836] name failslab, interval 1, probability 0, space 0, times 0 [ 394.409482][ T9836] CPU: 1 PID: 9836 Comm: syz.4.1862 Not tainted syzkaller #0 [ 394.416905][ T9836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 394.426980][ T9836] Call Trace: [ 394.430274][ T9836] [ 394.433220][ T9836] dump_stack_lvl+0x188/0x24e [ 394.437915][ T9836] ? show_regs_print_info+0x12/0x12 [ 394.443140][ T9836] ? load_image+0x410/0x410 [ 394.447665][ T9836] ? __might_sleep+0xd0/0xd0 [ 394.452275][ T9836] ? __lock_acquire+0x7ea0/0x7ea0 [ 394.457327][ T9836] should_fail_ex+0x390/0x4c0 [ 394.462034][ T9836] should_failslab+0x5/0x20 [ 394.466554][ T9836] slab_pre_alloc_hook+0x59/0x300 [ 394.471594][ T9836] kmem_cache_alloc_node+0x5a/0x310 [ 394.476802][ T9836] ? __alloc_skb+0xf9/0x7d0 [ 394.481314][ T9836] __alloc_skb+0xf9/0x7d0 [ 394.485649][ T9836] netlink_ack+0x373/0x1160 [ 394.490177][ T9836] ? ref_tracker_free+0x682/0x830 [ 394.495227][ T9836] ? refcount_inc+0x70/0x70 [ 394.499748][ T9836] ? netlink_dump+0xcd0/0xcd0 [ 394.504445][ T9836] ? __copy_skb_header+0x3ba/0x4f0 [ 394.509563][ T9836] ? __skb_clone+0x446/0x6c0 [ 394.514160][ T9836] netlink_rcv_skb+0x26d/0x440 [ 394.518947][ T9836] ? rtnetlink_bind+0x80/0x80 [ 394.523661][ T9836] ? netlink_ack+0x1160/0x1160 [ 394.528455][ T9836] ? netlink_deliver_tap+0x2e/0x1b0 [ 394.533681][ T9836] netlink_unicast+0x7ad/0x920 [ 394.538473][ T9836] netlink_sendmsg+0x8ad/0xbd0 [ 394.543265][ T9836] ? netlink_getsockopt+0x550/0x550 [ 394.548484][ T9836] ? apparmor_socket_sendmsg+0x8a/0x330 [ 394.554053][ T9836] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 394.559353][ T9836] ? security_socket_sendmsg+0x7c/0xa0 [ 394.564834][ T9836] ? netlink_getsockopt+0x550/0x550 [ 394.570054][ T9836] ____sys_sendmsg+0x5ed/0x9a0 [ 394.574842][ T9836] ? __sys_sendmsg_sock+0x30/0x30 [ 394.579883][ T9836] ? __import_iovec+0x306/0x510 [ 394.584778][ T9836] ? import_iovec+0x6f/0xa0 [ 394.589303][ T9836] ___sys_sendmsg+0x2a2/0x360 [ 394.594010][ T9836] ? __sys_sendmsg+0x2a0/0x2a0 [ 394.598808][ T9836] ? __lock_acquire+0x7ea0/0x7ea0 [ 394.603884][ T9836] __se_sys_sendmsg+0x1c3/0x2b0 [ 394.608751][ T9836] ? __x64_sys_sendmsg+0x80/0x80 [ 394.613730][ T9836] ? lockdep_hardirqs_on+0x94/0x140 [ 394.618957][ T9836] do_syscall_64+0x4c/0xa0 [ 394.623389][ T9836] ? clear_bhb_loop+0x60/0xb0 [ 394.628092][ T9836] ? clear_bhb_loop+0x60/0xb0 [ 394.632789][ T9836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.638699][ T9836] RIP: 0033:0x7f9ec579e1d9 [ 394.643127][ T9836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.662748][ T9836] RSP: 002b:00007f9ec658f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.671186][ T9836] RAX: ffffffffffffffda RBX: 00007f9ec5a25fa0 RCX: 00007f9ec579e1d9 [ 394.679180][ T9836] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000004 [ 394.687174][ T9836] RBP: 00007f9ec658f090 R08: 0000000000000000 R09: 0000000000000000 [ 394.695159][ T9836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.703146][ T9836] R13: 00007f9ec5a26038 R14: 00007f9ec5a25fa0 R15: 00007ffd7bf66308 [ 394.711153][ T9836] [ 394.962515][ T9857] FAULT_INJECTION: forcing a failure. [ 394.962515][ T9857] name failslab, interval 1, probability 0, space 0, times 0 [ 394.999744][ T9857] CPU: 0 PID: 9857 Comm: syz.3.1869 Not tainted syzkaller #0 [ 395.007158][ T9857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 395.017217][ T9857] Call Trace: [ 395.020498][ T9857] [ 395.023436][ T9857] dump_stack_lvl+0x188/0x24e [ 395.028120][ T9857] ? show_regs_print_info+0x12/0x12 [ 395.033314][ T9857] ? load_image+0x410/0x410 [ 395.037814][ T9857] ? __might_sleep+0xd0/0xd0 [ 395.042397][ T9857] ? __lock_acquire+0x7ea0/0x7ea0 [ 395.047466][ T9857] should_fail_ex+0x390/0x4c0 [ 395.052271][ T9857] should_failslab+0x5/0x20 [ 395.056776][ T9857] slab_pre_alloc_hook+0x59/0x300 [ 395.061801][ T9857] ? mark_lock+0x94/0x320 [ 395.066140][ T9857] kmem_cache_alloc_node+0x5a/0x310 [ 395.071336][ T9857] ? __alloc_skb+0xf9/0x7d0 [ 395.075838][ T9857] __alloc_skb+0xf9/0x7d0 [ 395.080171][ T9857] alloc_skb_with_frags+0xa7/0x710 [ 395.085291][ T9857] sock_alloc_send_pskb+0x87f/0x9a0 [ 395.090506][ T9857] ? sock_kzfree_s+0x50/0x50 [ 395.095104][ T9857] tun_get_user+0x815/0x3be0 [ 395.099703][ T9857] ? rcu_read_unlock+0xa0/0xa0 [ 395.104470][ T9857] ? tun_get+0x1c/0x2e0 [ 395.108626][ T9857] ? __lock_acquire+0x7ea0/0x7ea0 [ 395.113651][ T9857] ? tun_get+0x1c/0x2e0 [ 395.117811][ T9857] tun_chr_write_iter+0x112/0x1f0 [ 395.122835][ T9857] vfs_write+0x482/0x9a0 [ 395.127084][ T9857] ? file_end_write+0x250/0x250 [ 395.131933][ T9857] ? __fget_files+0x3fc/0x460 [ 395.136611][ T9857] ? __fdget_pos+0x1d4/0x360 [ 395.141194][ T9857] ? ksys_write+0x70/0x260 [ 395.145608][ T9857] ksys_write+0x14d/0x260 [ 395.149936][ T9857] ? __ia32_sys_read+0x80/0x80 [ 395.154704][ T9857] ? lockdep_hardirqs_on+0x94/0x140 [ 395.159903][ T9857] do_syscall_64+0x4c/0xa0 [ 395.164315][ T9857] ? clear_bhb_loop+0x60/0xb0 [ 395.168986][ T9857] ? clear_bhb_loop+0x60/0xb0 [ 395.173658][ T9857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.179554][ T9857] RIP: 0033:0x7f0dd099e1d9 [ 395.183962][ T9857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.203558][ T9857] RSP: 002b:00007f0dd188e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 395.211967][ T9857] RAX: ffffffffffffffda RBX: 00007f0dd0c25fa0 RCX: 00007f0dd099e1d9 [ 395.219927][ T9857] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 395.227889][ T9857] RBP: 00007f0dd188e090 R08: 0000000000000000 R09: 0000000000000000 [ 395.235849][ T9857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.243814][ T9857] R13: 00007f0dd0c26038 R14: 00007f0dd0c25fa0 R15: 00007ffe6effe328 [ 395.251792][ T9857] [ 395.821565][ T9882] netlink: 'syz.0.1876': attribute type 4 has an invalid length. [ 395.871567][ T9882] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1876'. [ 396.318065][ T9881] device syzkaller0 entered promiscuous mode [ 396.883759][ T9900] netlink: 'syz.0.1884': attribute type 3 has an invalid length. [ 396.894835][ T9901] delete_channel: no stack [ 396.909610][ T9901] delete_channel: no stack [ 396.947047][ T9900] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 397.009046][ T9900] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1884'. [ 397.428082][ T9915] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.1887'. [ 397.445068][ T9915] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 398.658964][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1887'. [ 398.908595][ T9930] netlink: 'syz.0.1890': attribute type 10 has an invalid length. [ 398.952014][ T9930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.986945][ T9930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.987574][ T9938] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1892'. [ 399.024849][ T9930] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 399.058652][ T9941] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 399.157347][ T9943] netlink: 'syz.1.1896': attribute type 4 has an invalid length. [ 399.247519][ T9943] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1896'. [ 399.501212][ T9955] netlink: 'syz.2.1900': attribute type 3 has an invalid length. [ 399.519575][ T9955] netlink: 'syz.2.1900': attribute type 1 has an invalid length. [ 399.563293][ T9955] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1900'. [ 399.901024][ T9972] netlink: 'syz.2.1906': attribute type 1 has an invalid length. [ 399.931022][ T9972] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1906'. [ 402.301015][ T9994] netlink: 'syz.2.1917': attribute type 4 has an invalid length. [ 402.310544][ T9994] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1917'. [ 402.376741][ T9996] netlink: 'syz.4.1918': attribute type 3 has an invalid length. [ 402.415204][ T9996] netlink: 'syz.4.1918': attribute type 1 has an invalid length. [ 402.437409][ T9996] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1918'. [ 402.607718][T10001] netlink: 'syz.3.1920': attribute type 10 has an invalid length. [ 402.640024][T10005] FAULT_INJECTION: forcing a failure. [ 402.640024][T10005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.686943][T10005] CPU: 1 PID: 10005 Comm: syz.4.1922 Not tainted syzkaller #0 [ 402.694544][T10005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 402.704616][T10005] Call Trace: [ 402.707905][T10005] [ 402.710845][T10005] dump_stack_lvl+0x188/0x24e [ 402.715545][T10005] ? show_regs_print_info+0x12/0x12 [ 402.720760][T10005] ? load_image+0x410/0x410 [ 402.725288][T10005] ? __lock_acquire+0x7ea0/0x7ea0 [ 402.730342][T10005] should_fail_ex+0x390/0x4c0 [ 402.735041][T10005] _copy_from_user+0x2c/0x170 [ 402.739714][T10005] csum_and_copy_from_iter+0x492/0x1380 [ 402.745265][T10005] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 402.750903][T10005] ip_generic_getfrag+0x150/0x2e0 [ 402.755923][T10005] ? ip_skb_dst_mtu+0x870/0x870 [ 402.760795][T10005] ? raw6_getfrag+0xe6/0x300 [ 402.765388][T10005] ? __alloc_skb+0x4e6/0x7d0 [ 402.769965][T10005] ? skb_put+0x10e/0x200 [ 402.774200][T10005] __ip6_append_data+0x2ee1/0x3e30 [ 402.779324][T10005] ? rawv6_send_hdrinc+0x16a0/0x16a0 [ 402.784610][T10005] ? ip6_setup_cork+0xff0/0xff0 [ 402.789451][T10005] ? ip6_setup_cork+0xa4a/0xff0 [ 402.794298][T10005] ip6_append_data+0x1c8/0x3d0 [ 402.799057][T10005] ? rawv6_send_hdrinc+0x16a0/0x16a0 [ 402.804338][T10005] rawv6_sendmsg+0x1221/0x1710 [ 402.809108][T10005] ? compat_rawv6_ioctl+0x60/0x60 [ 402.814141][T10005] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 402.820549][T10005] ? aa_sock_msg_perm+0x94/0x150 [ 402.825483][T10005] ? inet_sendmsg+0x7a/0x2a0 [ 402.830063][T10005] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 402.835337][T10005] ? inet_send_prepare+0x250/0x250 [ 402.840441][T10005] ____sys_sendmsg+0x5ed/0x9a0 [ 402.845201][T10005] ? __sys_sendmsg_sock+0x30/0x30 [ 402.850214][T10005] ? __import_iovec+0x306/0x510 [ 402.855066][T10005] ? import_iovec+0x6f/0xa0 [ 402.859570][T10005] ___sys_sendmsg+0x2a2/0x360 [ 402.864243][T10005] ? __sys_sendmsg+0x2a0/0x2a0 [ 402.869012][T10005] ? __lock_acquire+0x7ea0/0x7ea0 [ 402.874047][T10005] __se_sys_sendmsg+0x1c3/0x2b0 [ 402.878888][T10005] ? __x64_sys_sendmsg+0x80/0x80 [ 402.883828][T10005] ? lockdep_hardirqs_on+0x94/0x140 [ 402.889027][T10005] do_syscall_64+0x4c/0xa0 [ 402.893434][T10005] ? clear_bhb_loop+0x60/0xb0 [ 402.898101][T10005] ? clear_bhb_loop+0x60/0xb0 [ 402.902776][T10005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.908657][T10005] RIP: 0033:0x7f9ec579e1d9 [ 402.913064][T10005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.932661][T10005] RSP: 002b:00007f9ec658f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.941064][T10005] RAX: ffffffffffffffda RBX: 00007f9ec5a25fa0 RCX: 00007f9ec579e1d9 [ 402.949026][T10005] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 402.956985][T10005] RBP: 00007f9ec658f090 R08: 0000000000000000 R09: 0000000000000000 [ 402.964949][T10005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 402.972908][T10005] R13: 00007f9ec5a26038 R14: 00007f9ec5a25fa0 R15: 00007ffd7bf66308 [ 402.980883][T10005] [ 403.021358][T10001] team0: Port device wlan1 added [ 403.168335][T10017] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1923'. [ 403.221273][T10017] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1923'. [ 403.223149][T10025] netlink: 'syz.1.1923': attribute type 2 has an invalid length. [ 403.255118][T10025] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1923'. [ 403.277680][T10017] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1923'. [ 407.802681][T10086] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1949'. [ 409.524207][T10142] FAULT_INJECTION: forcing a failure. [ 409.524207][T10142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.581972][T10142] CPU: 0 PID: 10142 Comm: syz.3.1966 Not tainted syzkaller #0 [ 409.589484][T10142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 409.599556][T10142] Call Trace: [ 409.602846][T10142] [ 409.605785][T10142] dump_stack_lvl+0x188/0x24e [ 409.610483][T10142] ? show_regs_print_info+0x12/0x12 [ 409.615704][T10142] ? load_image+0x410/0x410 [ 409.620237][T10142] ? __lock_acquire+0x7ea0/0x7ea0 [ 409.625290][T10142] should_fail_ex+0x390/0x4c0 [ 409.629993][T10142] _copy_from_user+0x2c/0x170 [ 409.634690][T10142] __sys_bpf+0x2ea/0x780 [ 409.638952][T10142] ? bpf_link_show_fdinfo+0x380/0x380 [ 409.644350][T10142] ? lock_chain_count+0x20/0x20 [ 409.649207][T10142] __x64_sys_bpf+0x78/0x90 [ 409.653621][T10142] do_syscall_64+0x4c/0xa0 [ 409.658034][T10142] ? clear_bhb_loop+0x60/0xb0 [ 409.662709][T10142] ? clear_bhb_loop+0x60/0xb0 [ 409.667384][T10142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.673274][T10142] RIP: 0033:0x7f0dd099e1d9 [ 409.677683][T10142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.697280][T10142] RSP: 002b:00007f0dd188e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 409.705688][T10142] RAX: ffffffffffffffda RBX: 00007f0dd0c25fa0 RCX: 00007f0dd099e1d9 [ 409.713649][T10142] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 409.721616][T10142] RBP: 00007f0dd188e090 R08: 0000000000000000 R09: 0000000000000000 [ 409.729577][T10142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.737550][T10142] R13: 00007f0dd0c26038 R14: 00007f0dd0c25fa0 R15: 00007ffe6effe328 [ 409.745530][T10142] [ 409.955599][T10146] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1969'. [ 410.036735][T10148] netlink: 'syz.4.1968': attribute type 21 has an invalid length. [ 410.072036][T10148] IPv6: NLM_F_CREATE should be specified when creating new route [ 410.147645][T10149] netlink: 'syz.4.1968': attribute type 1 has an invalid length. [ 410.178646][T10148] IPv6: Can't replace route, no match found [ 410.216578][T10157] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.1973'. [ 410.228300][T10149] netlink: 13439 bytes leftover after parsing attributes in process `syz.4.1968'. [ 410.243538][T10157] openvswitch: netlink: Message has 48126 unknown bytes. [ 410.714121][T10176] netlink: 15478 bytes leftover after parsing attributes in process `syz.2.1978'. [ 411.591161][T10182] device syzkaller0 entered promiscuous mode [ 412.741713][ T8767] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 414.514600][T10194] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1982'. [ 414.527956][T10197] netlink: 'syz.3.1982': attribute type 10 has an invalid length. [ 414.537051][T10197] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1982'. [ 414.547548][T10197] device team0 entered promiscuous mode [ 414.553374][T10197] device team_slave_0 entered promiscuous mode [ 414.559796][T10197] device team_slave_1 entered promiscuous mode [ 414.568632][T10197] device geneve1 entered promiscuous mode [ 414.574885][T10197] device wlan1 entered promiscuous mode [ 414.592460][T10197] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.599926][T10197] bridge0: port 4(team0) entered blocking state [ 414.606740][T10197] bridge0: port 4(team0) entered disabled state [ 414.615065][T10197] bridge0: port 4(team0) entered blocking state [ 414.621391][T10197] bridge0: port 4(team0) entered forwarding state [ 414.629185][T10199] netlink: 'syz.3.1982': attribute type 12 has an invalid length. [ 414.649660][T10199] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1982'. [ 415.126381][T10203] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1983'. [ 415.461982][T10237] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1994'. [ 415.509999][T10237] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 415.611405][ T8767] bridge0: port 4(team0) entered disabled state [ 415.621370][T10245] netlink: 'syz.2.1996': attribute type 21 has an invalid length. [ 415.644160][T10245] IPv6: NLM_F_CREATE should be specified when creating new route [ 416.187425][T10250] device syzkaller0 entered promiscuous mode [ 416.736316][T10276] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2003'. [ 419.172331][T10276] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2003'. [ 419.181436][T10277] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2004'. [ 419.349779][T10284] netlink: 'syz.0.2008': attribute type 10 has an invalid length. [ 419.433904][T10284] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 419.540144][T10285] netlink: 'syz.0.2008': attribute type 10 has an invalid length. [ 420.357227][T10322] FAULT_INJECTION: forcing a failure. [ 420.357227][T10322] name failslab, interval 1, probability 0, space 0, times 0 [ 420.411476][T10322] CPU: 1 PID: 10322 Comm: syz.2.2016 Not tainted syzkaller #0 [ 420.418989][T10322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 420.429053][T10322] Call Trace: [ 420.432337][T10322] [ 420.435281][T10322] dump_stack_lvl+0x188/0x24e [ 420.439980][T10322] ? show_regs_print_info+0x12/0x12 [ 420.445195][T10322] ? load_image+0x410/0x410 [ 420.449708][T10322] ? __might_sleep+0xd0/0xd0 [ 420.454306][T10322] ? __lock_acquire+0x7ea0/0x7ea0 [ 420.459352][T10322] should_fail_ex+0x390/0x4c0 [ 420.464051][T10322] should_failslab+0x5/0x20 [ 420.468569][T10322] slab_pre_alloc_hook+0x59/0x300 [ 420.473609][T10322] ? tomoyo_encode+0x28a/0x550 [ 420.478398][T10322] __kmem_cache_alloc_node+0x4f/0x270 [ 420.483800][T10322] ? tomoyo_encode+0x28a/0x550 [ 420.488579][T10322] __kmalloc+0xa3/0x240 [ 420.492763][T10322] tomoyo_encode+0x28a/0x550 [ 420.497382][T10322] tomoyo_realpath_from_path+0x578/0x5c0 [ 420.503065][T10322] ? tomoyo_domain+0xd2/0x120 [ 420.507743][T10322] ? tomoyo_path_number_perm+0x205/0x650 [ 420.513360][T10322] tomoyo_path_number_perm+0x22f/0x650 [ 420.518811][T10322] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 420.525395][T10322] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 420.530843][T10322] ? ksys_write+0x1ce/0x260 [ 420.535340][T10322] ? common_file_perm+0x171/0x1c0 [ 420.540371][T10322] ? __fget_files+0x28/0x460 [ 420.544960][T10322] security_file_ioctl+0x6c/0xa0 [ 420.549898][T10322] __se_sys_ioctl+0x48/0x170 [ 420.554495][T10322] do_syscall_64+0x4c/0xa0 [ 420.558930][T10322] ? clear_bhb_loop+0x60/0xb0 [ 420.563634][T10322] ? clear_bhb_loop+0x60/0xb0 [ 420.568328][T10322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.574230][T10322] RIP: 0033:0x7f342939e1d9 [ 420.578655][T10322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.598262][T10322] RSP: 002b:00007f342a283028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.606684][T10322] RAX: ffffffffffffffda RBX: 00007f3429625fa0 RCX: 00007f342939e1d9 [ 420.614668][T10322] RDX: 0000200000000000 RSI: 0000000000008b32 RDI: 0000000000000003 [ 420.622629][T10322] RBP: 00007f342a283090 R08: 0000000000000000 R09: 0000000000000000 [ 420.630590][T10322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.638550][T10322] R13: 00007f3429626038 R14: 00007f3429625fa0 R15: 00007ffd0fb7e7c8 [ 420.646539][T10322] [ 420.668243][T10322] ERROR: Out of memory at tomoyo_realpath_from_path. [ 421.063165][T10344] FAULT_INJECTION: forcing a failure. [ 421.063165][T10344] name failslab, interval 1, probability 0, space 0, times 0 [ 421.088852][T10344] CPU: 1 PID: 10344 Comm: syz.1.2020 Not tainted syzkaller #0 [ 421.096375][T10344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 421.106454][T10344] Call Trace: [ 421.109752][T10344] [ 421.112698][T10344] dump_stack_lvl+0x188/0x24e [ 421.117410][T10344] ? show_regs_print_info+0x12/0x12 [ 421.122638][T10344] ? load_image+0x410/0x410 [ 421.127161][T10344] ? __might_sleep+0xd0/0xd0 [ 421.131857][T10344] ? __lock_acquire+0x7ea0/0x7ea0 [ 421.136911][T10344] should_fail_ex+0x390/0x4c0 [ 421.141613][T10344] should_failslab+0x5/0x20 [ 421.146121][T10344] slab_pre_alloc_hook+0x59/0x300 [ 421.151162][T10344] kmem_cache_alloc_node+0x5a/0x310 [ 421.156373][T10344] ? __alloc_skb+0xf9/0x7d0 [ 421.160899][T10344] __alloc_skb+0xf9/0x7d0 [ 421.165258][T10344] netlink_ack+0x373/0x1160 [ 421.169794][T10344] ? genl_bind+0x360/0x360 [ 421.174227][T10344] ? netlink_dump+0xcd0/0xcd0 [ 421.178920][T10344] ? wg_get_device_dump+0x1c10/0x1c10 [ 421.184325][T10344] netlink_rcv_skb+0x26d/0x440 [ 421.189106][T10344] ? genl_bind+0x360/0x360 [ 421.193544][T10344] ? netlink_ack+0x1160/0x1160 [ 421.198342][T10344] ? down_read+0x1a8/0x2d0 [ 421.202785][T10344] genl_rcv+0x24/0x40 [ 421.206789][T10344] netlink_unicast+0x7ad/0x920 [ 421.211584][T10344] netlink_sendmsg+0x8ad/0xbd0 [ 421.216378][T10344] ? netlink_getsockopt+0x550/0x550 [ 421.221580][T10344] ? apparmor_socket_sendmsg+0x8a/0x330 [ 421.227138][T10344] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 421.232421][T10344] ? security_socket_sendmsg+0x7c/0xa0 [ 421.237884][T10344] ? netlink_getsockopt+0x550/0x550 [ 421.243082][T10344] ____sys_sendmsg+0x5ed/0x9a0 [ 421.247850][T10344] ? __sys_sendmsg_sock+0x30/0x30 [ 421.252864][T10344] ? __import_iovec+0x306/0x510 [ 421.257736][T10344] ? import_iovec+0x6f/0xa0 [ 421.262239][T10344] ___sys_sendmsg+0x2a2/0x360 [ 421.266915][T10344] ? __sys_sendmsg+0x2a0/0x2a0 [ 421.271692][T10344] ? __lock_acquire+0x7ea0/0x7ea0 [ 421.276733][T10344] __se_sys_sendmsg+0x1c3/0x2b0 [ 421.281578][T10344] ? ct_nmi_exit+0x145/0x1c0 [ 421.286173][T10344] ? __x64_sys_sendmsg+0x80/0x80 [ 421.291118][T10344] ? lockdep_hardirqs_on+0x94/0x140 [ 421.296342][T10344] do_syscall_64+0x4c/0xa0 [ 421.300753][T10344] ? clear_bhb_loop+0x60/0xb0 [ 421.305431][T10344] ? clear_bhb_loop+0x60/0xb0 [ 421.310104][T10344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.315994][T10344] RIP: 0033:0x7fc91c99e1d9 [ 421.320404][T10344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.340015][T10344] RSP: 002b:00007fc91d788028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.348430][T10344] RAX: ffffffffffffffda RBX: 00007fc91cc25fa0 RCX: 00007fc91c99e1d9 [ 421.356398][T10344] RDX: 0000000000004080 RSI: 0000200000000040 RDI: 0000000000000004 [ 421.364386][T10344] RBP: 00007fc91d788090 R08: 0000000000000000 R09: 0000000000000000 [ 421.372356][T10344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.380320][T10344] R13: 00007fc91cc26038 R14: 00007fc91cc25fa0 R15: 00007fffe0475ba8 [ 421.388300][T10344] [ 421.394634][T10331] device syzkaller0 entered promiscuous mode [ 421.419759][T10347] tap0: tun_chr_ioctl cmd 1074025675 [ 421.435982][T10347] tap0: persist disabled [ 423.424924][T10378] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2035'. [ 423.601176][T10390] netlink: 'syz.0.2040': attribute type 2 has an invalid length. [ 423.919051][T10401] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 424.415684][T10421] FAULT_INJECTION: forcing a failure. [ 424.415684][T10421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.461436][T10407] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2046'. [ 424.476783][T10421] CPU: 0 PID: 10421 Comm: syz.2.2048 Not tainted syzkaller #0 [ 424.484282][T10421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 424.494353][T10421] Call Trace: [ 424.497643][T10421] [ 424.500581][T10421] dump_stack_lvl+0x188/0x24e [ 424.505277][T10421] ? show_regs_print_info+0x12/0x12 [ 424.510491][T10421] ? load_image+0x410/0x410 [ 424.515007][T10421] ? __lock_acquire+0x7ea0/0x7ea0 [ 424.520057][T10421] should_fail_ex+0x390/0x4c0 [ 424.524771][T10421] _copy_to_user+0x2c/0x130 [ 424.529302][T10421] bpf_prog_test_run_syscall+0x33b/0x4b0 [ 424.534971][T10421] ? sock_gen_cookie+0x60/0x60 [ 424.539773][T10421] ? sock_gen_cookie+0x60/0x60 [ 424.544557][T10421] bpf_prog_test_run+0x31c/0x390 [ 424.549515][T10421] __sys_bpf+0x62b/0x780 [ 424.553783][T10421] ? bpf_link_show_fdinfo+0x380/0x380 [ 424.559193][T10421] ? lock_chain_count+0x20/0x20 [ 424.564074][T10421] __x64_sys_bpf+0x78/0x90 [ 424.568513][T10421] do_syscall_64+0x4c/0xa0 [ 424.572944][T10421] ? clear_bhb_loop+0x60/0xb0 [ 424.577639][T10421] ? clear_bhb_loop+0x60/0xb0 [ 424.582346][T10421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.588251][T10421] RIP: 0033:0x7f342939e1d9 [ 424.592685][T10421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.612305][T10421] RSP: 002b:00007f342a283028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 424.620742][T10421] RAX: ffffffffffffffda RBX: 00007f3429625fa0 RCX: 00007f342939e1d9 [ 424.628725][T10421] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 424.636710][T10421] RBP: 00007f342a283090 R08: 0000000000000000 R09: 0000000000000000 [ 424.644696][T10421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.652688][T10421] R13: 00007f3429626038 R14: 00007f3429625fa0 R15: 00007ffd0fb7e7c8 [ 424.660695][T10421] [ 424.712650][T10423] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2049'. [ 426.425551][T10497] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2076'. [ 426.651239][T10497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.700044][T10497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.766159][T10497] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 426.822752][T10497] bond0 (unregistering): Released all slaves [ 426.901053][T10506] netlink: 'syz.2.2078': attribute type 7 has an invalid length. [ 427.798819][T10536] device syzkaller0 entered promiscuous mode [ 430.807258][T10587] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2099'. [ 432.406420][T10607] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.2108'. [ 432.980343][T10611] netlink: 17861 bytes leftover after parsing attributes in process `syz.0.2107'. [ 433.025565][T10611] netlink: 17861 bytes leftover after parsing attributes in process `syz.0.2107'. [ 435.175623][T10673] netlink: 'syz.3.2113': attribute type 10 has an invalid length. [ 435.198141][T10673] device veth0_macvtap left promiscuous mode [ 435.676017][T10687] FAULT_INJECTION: forcing a failure. [ 435.676017][T10687] name failslab, interval 1, probability 0, space 0, times 0 [ 435.696852][T10687] CPU: 1 PID: 10687 Comm: syz.1.2117 Not tainted syzkaller #0 [ 435.704374][T10687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 435.714455][T10687] Call Trace: [ 435.717766][T10687] [ 435.720731][T10687] dump_stack_lvl+0x188/0x24e [ 435.725460][T10687] ? show_regs_print_info+0x12/0x12 [ 435.730696][T10687] ? load_image+0x410/0x410 [ 435.735258][T10687] ? __might_sleep+0xd0/0xd0 [ 435.739895][T10687] ? __lock_acquire+0x7ea0/0x7ea0 [ 435.744979][T10687] should_fail_ex+0x390/0x4c0 [ 435.749717][T10687] should_failslab+0x5/0x20 [ 435.754250][T10687] slab_pre_alloc_hook+0x59/0x300 [ 435.759324][T10687] ? ip6_setup_cork+0x62b/0xff0 [ 435.764224][T10687] __kmem_cache_alloc_node+0x4f/0x270 [ 435.769661][T10687] ? ip6_setup_cork+0x62b/0xff0 [ 435.774548][T10687] __kmalloc_node_track_caller+0xa0/0x240 [ 435.780325][T10687] kmemdup+0x27/0x60 [ 435.784256][T10687] ip6_setup_cork+0x62b/0xff0 [ 435.788975][T10687] ip6_make_skb+0x1de/0x520 [ 435.793496][T10687] ? ip_skb_dst_mtu+0x870/0x870 [ 435.798365][T10687] ? __ip6_flush_pending_frames+0x3a0/0x3a0 [ 435.804323][T10687] udpv6_sendmsg+0x1b5a/0x22c0 [ 435.809116][T10687] ? ip_skb_dst_mtu+0x870/0x870 [ 435.813992][T10687] ? udp_v6_early_demux+0xf00/0xf00 [ 435.819218][T10687] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 435.825250][T10687] ? __local_bh_enable_ip+0x136/0x1c0 [ 435.830637][T10687] ? _local_bh_enable+0xa0/0xa0 [ 435.835507][T10687] ? inet_send_prepare+0x1aa/0x250 [ 435.840634][T10687] ? inet_send_prepare+0x1aa/0x250 [ 435.845763][T10687] ? inet6_sendmsg+0x5b/0xd0 [ 435.850357][T10687] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 435.855570][T10687] ____sys_sendmsg+0x5ed/0x9a0 [ 435.860346][T10687] ? __lock_acquire+0x7ea0/0x7ea0 [ 435.865396][T10687] ? __sys_sendmsg_sock+0x30/0x30 [ 435.870426][T10687] ? __import_iovec+0x306/0x510 [ 435.875315][T10687] ? import_iovec+0x6f/0xa0 [ 435.879842][T10687] ___sys_sendmsg+0x2a2/0x360 [ 435.884543][T10687] ? __sys_sendmsg+0x2a0/0x2a0 [ 435.889368][T10687] ? __lock_acquire+0x7ea0/0x7ea0 [ 435.894465][T10687] __se_sys_sendmsg+0x1c3/0x2b0 [ 435.899320][T10687] ? ct_nmi_exit+0x145/0x1c0 [ 435.903932][T10687] ? __x64_sys_sendmsg+0x80/0x80 [ 435.908921][T10687] ? lockdep_hardirqs_on+0x94/0x140 [ 435.914138][T10687] do_syscall_64+0x4c/0xa0 [ 435.918559][T10687] ? clear_bhb_loop+0x60/0xb0 [ 435.923261][T10687] ? clear_bhb_loop+0x60/0xb0 [ 435.927954][T10687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.933850][T10687] RIP: 0033:0x7fc91c99e1d9 [ 435.938291][T10687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.957901][T10687] RSP: 002b:00007fc91abf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.966327][T10687] RAX: ffffffffffffffda RBX: 00007fc91cc26090 RCX: 00007fc91c99e1d9 [ 435.974307][T10687] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 435.982298][T10687] RBP: 00007fc91abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 435.990281][T10687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.998261][T10687] R13: 00007fc91cc26128 R14: 00007fc91cc26090 R15: 00007fffe0475ba8 [ 436.006300][T10687] [ 436.779912][T10695] FAULT_INJECTION: forcing a failure. [ 436.779912][T10695] name failslab, interval 1, probability 0, space 0, times 0 [ 436.901991][T10695] CPU: 1 PID: 10695 Comm: syz.2.2121 Not tainted syzkaller #0 [ 436.909521][T10695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 436.919607][T10695] Call Trace: [ 436.922914][T10695] [ 436.925874][T10695] dump_stack_lvl+0x188/0x24e [ 436.930605][T10695] ? show_regs_print_info+0x12/0x12 [ 436.935846][T10695] ? load_image+0x410/0x410 [ 436.940423][T10695] should_fail_ex+0x390/0x4c0 [ 436.945165][T10695] should_failslab+0x5/0x20 [ 436.949703][T10695] slab_pre_alloc_hook+0x59/0x300 [ 436.954766][T10695] kmem_cache_alloc+0x56/0x2f0 [ 436.959568][T10695] ? skb_clone+0x1e7/0x370 [ 436.964005][T10695] skb_clone+0x1e7/0x370 [ 436.968262][T10695] bpf_clone_redirect+0x169/0x4a0 [ 436.973316][T10695] bpf_prog_6893982b85ceadf7+0x56/0x5b [ 436.978792][T10695] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 436.984782][T10695] ? __lock_acquire+0x7ea0/0x7ea0 [ 436.989817][T10695] ? lock_chain_count+0x20/0x20 [ 436.994687][T10695] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 437.000935][T10695] ? lockdep_hardirqs_on+0x94/0x140 [ 437.006148][T10695] ? ktime_get+0x7b/0x270 [ 437.010485][T10695] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 437.016734][T10695] ? ktime_get_real_ts64+0x440/0x440 [ 437.022028][T10695] ? read_lock_is_recursive+0x10/0x10 [ 437.027435][T10695] ? __cant_sleep+0x220/0x220 [ 437.032150][T10695] ? bpf_test_timer_continue+0x142/0x380 [ 437.037812][T10695] bpf_test_run+0x2b6/0x830 [ 437.042370][T10695] ? dst_hold+0xb0/0xb0 [ 437.046583][T10695] ? eth_get_headlen+0x200/0x200 [ 437.051540][T10695] ? __build_skb+0x24b/0x3b0 [ 437.056165][T10695] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 437.061599][T10695] ? cpu_online+0xa0/0xa0 [ 437.065960][T10695] bpf_prog_test_run+0x31c/0x390 [ 437.070921][T10695] __sys_bpf+0x62b/0x780 [ 437.075189][T10695] ? bpf_link_show_fdinfo+0x380/0x380 [ 437.080607][T10695] ? lock_chain_count+0x20/0x20 [ 437.085492][T10695] __x64_sys_bpf+0x78/0x90 [ 437.089924][T10695] do_syscall_64+0x4c/0xa0 [ 437.094351][T10695] ? clear_bhb_loop+0x60/0xb0 [ 437.099035][T10695] ? clear_bhb_loop+0x60/0xb0 [ 437.103725][T10695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.109623][T10695] RIP: 0033:0x7f342939e1d9 [ 437.114140][T10695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.133753][T10695] RSP: 002b:00007f342a283028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 437.142198][T10695] RAX: ffffffffffffffda RBX: 00007f3429625fa0 RCX: 00007f342939e1d9 [ 437.150175][T10695] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 437.158173][T10695] RBP: 00007f342a283090 R08: 0000000000000000 R09: 0000000000000000 [ 437.166156][T10695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 437.174136][T10695] R13: 00007f3429626038 R14: 00007f3429625fa0 R15: 00007ffd0fb7e7c8 [ 437.182155][T10695] [ 438.334290][T10714] FAULT_INJECTION: forcing a failure. [ 438.334290][T10714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.394581][T10714] CPU: 1 PID: 10714 Comm: syz.1.2128 Not tainted syzkaller #0 [ 438.402107][T10714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 438.412191][T10714] Call Trace: [ 438.415492][T10714] [ 438.418428][T10714] dump_stack_lvl+0x188/0x24e [ 438.423125][T10714] ? show_regs_print_info+0x12/0x12 [ 438.428334][T10714] ? load_image+0x410/0x410 [ 438.432851][T10714] ? __lock_acquire+0x7ea0/0x7ea0 [ 438.437889][T10714] ? memset+0x1e/0x40 [ 438.441894][T10714] should_fail_ex+0x390/0x4c0 [ 438.446598][T10714] _copy_to_user+0x2c/0x130 [ 438.451118][T10714] bpf_prog_test_run_syscall+0x33b/0x4b0 [ 438.456771][T10714] ? sock_gen_cookie+0x60/0x60 [ 438.461567][T10714] ? sock_gen_cookie+0x60/0x60 [ 438.466353][T10714] bpf_prog_test_run+0x31c/0x390 [ 438.471331][T10714] __sys_bpf+0x62b/0x780 [ 438.475589][T10714] ? bpf_link_show_fdinfo+0x380/0x380 [ 438.481012][T10714] ? lock_chain_count+0x20/0x20 [ 438.485895][T10714] __x64_sys_bpf+0x78/0x90 [ 438.490324][T10714] do_syscall_64+0x4c/0xa0 [ 438.494749][T10714] ? clear_bhb_loop+0x60/0xb0 [ 438.499435][T10714] ? clear_bhb_loop+0x60/0xb0 [ 438.504126][T10714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.510025][T10714] RIP: 0033:0x7fc91c99e1d9 [ 438.514448][T10714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.534062][T10714] RSP: 002b:00007fc91d788028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 438.542510][T10714] RAX: ffffffffffffffda RBX: 00007fc91cc25fa0 RCX: 00007fc91c99e1d9 [ 438.550493][T10714] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 438.558478][T10714] RBP: 00007fc91d788090 R08: 0000000000000000 R09: 0000000000000000 [ 438.566473][T10714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.574449][T10714] R13: 00007fc91cc26038 R14: 00007fc91cc25fa0 R15: 00007fffe0475ba8 [ 438.582482][T10714] [ 439.640779][T10730] device syzkaller0 entered promiscuous mode [ 439.805803][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.812902][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.236541][T10772] netlink: 'syz.2.2149': attribute type 10 has an invalid length. [ 442.285010][T10772] device veth0_macvtap left promiscuous mode [ 442.615690][T10780] netlink: 'syz.4.2151': attribute type 10 has an invalid length. [ 442.636058][T10781] delete_channel: no stack [ 442.640697][T10781] delete_channel: no stack [ 442.730906][T10780] device team0 left promiscuous mode [ 442.760854][T10780] device team_slave_0 left promiscuous mode [ 442.805483][T10780] device team_slave_1 left promiscuous mode [ 442.829393][T10780] device geneve1 left promiscuous mode [ 442.852207][T10780] ¥: port 1(team0) entered disabled state [ 442.939103][T10780] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.999094][T10780] bond0: (slave team0): Enslaving as an active interface with an up link [ 443.082351][T10789] FAULT_INJECTION: forcing a failure. [ 443.082351][T10789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.126043][T10789] CPU: 1 PID: 10789 Comm: syz.3.2155 Not tainted syzkaller #0 [ 443.133561][T10789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 443.143653][T10789] Call Trace: [ 443.146943][T10789] [ 443.149881][T10789] dump_stack_lvl+0x188/0x24e [ 443.154606][T10789] ? show_regs_print_info+0x12/0x12 [ 443.159830][T10789] ? load_image+0x410/0x410 [ 443.164363][T10789] ? __lock_acquire+0x7ea0/0x7ea0 [ 443.169412][T10789] ? snprintf+0xe5/0x140 [ 443.173681][T10789] should_fail_ex+0x390/0x4c0 [ 443.178383][T10789] _copy_to_user+0x2c/0x130 [ 443.182903][T10789] simple_read_from_buffer+0xe3/0x150 [ 443.188296][T10789] proc_fail_nth_read+0x1a6/0x220 [ 443.193344][T10789] ? proc_fault_inject_write+0x310/0x310 [ 443.199024][T10789] ? fsnotify_perm+0x248/0x550 [ 443.203804][T10789] ? proc_fault_inject_write+0x310/0x310 [ 443.209445][T10789] vfs_read+0x2db/0x960 [ 443.213629][T10789] ? kernel_read+0x1e0/0x1e0 [ 443.218239][T10789] ? __fget_files+0x28/0x460 [ 443.222844][T10789] ? __fget_files+0x3fc/0x460 [ 443.227553][T10789] ? __fdget_pos+0x2ae/0x360 [ 443.232152][T10789] ? ksys_read+0x70/0x260 [ 443.236500][T10789] ksys_read+0x14d/0x260 [ 443.240762][T10789] ? vfs_write+0x9a0/0x9a0 [ 443.245200][T10789] ? lockdep_hardirqs_on+0x94/0x140 [ 443.250420][T10789] do_syscall_64+0x4c/0xa0 [ 443.254844][T10789] ? clear_bhb_loop+0x60/0xb0 [ 443.259530][T10789] ? clear_bhb_loop+0x60/0xb0 [ 443.264224][T10789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.270125][T10789] RIP: 0033:0x7f0dd095ea0e [ 443.274555][T10789] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 443.294193][T10789] RSP: 002b:00007f0dd188dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 443.302620][T10789] RAX: ffffffffffffffda RBX: 00007f0dd188e6c0 RCX: 00007f0dd095ea0e [ 443.310599][T10789] RDX: 000000000000000f RSI: 00007f0dd188e0a0 RDI: 000000000000000c [ 443.318581][T10789] RBP: 00007f0dd188e090 R08: 0000000000000000 R09: 0000000000000000 [ 443.326560][T10789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.334536][T10789] R13: 00007f0dd0c26038 R14: 00007f0dd0c25fa0 R15: 00007ffe6effe328 [ 443.342572][T10789] [ 444.096662][T10800] netlink: 'syz.0.2158': attribute type 10 has an invalid length. [ 445.714670][T10824] netlink: 'syz.4.2166': attribute type 10 has an invalid length. [ 445.772556][T10828] netlink: 'syz.2.2167': attribute type 10 has an invalid length. [ 445.811108][T10828] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2167'. [ 445.894639][T10835] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.2168'. [ 446.125646][T10837] netlink: 'syz.3.2171': attribute type 9 has an invalid length. [ 446.158831][T10837] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.2171'. [ 446.240779][T10841] netlink: 'syz.4.2172': attribute type 10 has an invalid length. [ 446.270532][T10841] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2172'. [ 447.384455][T10847] FAULT_INJECTION: forcing a failure. [ 447.384455][T10847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.466690][T10847] CPU: 1 PID: 10847 Comm: syz.1.2175 Not tainted syzkaller #0 [ 447.474213][T10847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 447.484293][T10847] Call Trace: [ 447.487584][T10847] [ 447.490522][T10847] dump_stack_lvl+0x188/0x24e [ 447.495221][T10847] ? show_regs_print_info+0x12/0x12 [ 447.500427][T10847] ? load_image+0x410/0x410 [ 447.504937][T10847] ? __might_fault+0xa6/0x120 [ 447.509624][T10847] should_fail_ex+0x390/0x4c0 [ 447.514324][T10847] copyin+0x1b/0x120 [ 447.518226][T10847] _copy_from_iter+0x447/0x1130 [ 447.523094][T10847] ? copyout_mc+0x110/0x110 [ 447.527602][T10847] ? __virt_addr_valid+0x188/0x540 [ 447.532721][T10847] ? __virt_addr_valid+0x188/0x540 [ 447.537839][T10847] ? __virt_addr_valid+0x467/0x540 [ 447.542954][T10847] ? __phys_addr_symbol+0x2b/0x70 [ 447.547979][T10847] ? __check_object_size+0x4f6/0xa70 [ 447.553271][T10847] netlink_sendmsg+0x755/0xbd0 [ 447.558054][T10847] ? netlink_getsockopt+0x550/0x550 [ 447.563259][T10847] ? apparmor_socket_sendmsg+0x8a/0x330 [ 447.568819][T10847] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 447.574104][T10847] ? security_socket_sendmsg+0x7c/0xa0 [ 447.579565][T10847] ? netlink_getsockopt+0x550/0x550 [ 447.584765][T10847] ____sys_sendmsg+0x5ed/0x9a0 [ 447.589545][T10847] ? __sys_sendmsg_sock+0x30/0x30 [ 447.594568][T10847] ? __import_iovec+0x306/0x510 [ 447.599437][T10847] ? import_iovec+0x6f/0xa0 [ 447.603954][T10847] ___sys_sendmsg+0x2a2/0x360 [ 447.608643][T10847] ? __sys_sendmsg+0x2a0/0x2a0 [ 447.613437][T10847] ? __lock_acquire+0x7ea0/0x7ea0 [ 447.618523][T10847] __se_sys_sendmsg+0x1c3/0x2b0 [ 447.623380][T10847] ? __x64_sys_sendmsg+0x80/0x80 [ 447.628342][T10847] ? lockdep_hardirqs_on+0x94/0x140 [ 447.633552][T10847] do_syscall_64+0x4c/0xa0 [ 447.637969][T10847] ? clear_bhb_loop+0x60/0xb0 [ 447.642645][T10847] ? clear_bhb_loop+0x60/0xb0 [ 447.647325][T10847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.653216][T10847] RIP: 0033:0x7fc91c99e1d9 [ 447.657632][T10847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.677242][T10847] RSP: 002b:00007fc91d788028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.685658][T10847] RAX: ffffffffffffffda RBX: 00007fc91cc25fa0 RCX: 00007fc91c99e1d9 [ 447.693647][T10847] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 447.701618][T10847] RBP: 00007fc91d788090 R08: 0000000000000000 R09: 0000000000000000 [ 447.709585][T10847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.717563][T10847] R13: 00007fc91cc26038 R14: 00007fc91cc25fa0 R15: 00007fffe0475ba8 [ 447.725572][T10847] [ 448.404460][T10876] netlink: 'syz.1.2182': attribute type 10 has an invalid length. [ 449.290151][T10876] device veth0_macvtap left promiscuous mode [ 450.005936][T10911] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2196'. [ 450.069742][T10911] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 450.211737][T10925] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2200'. [ 450.281877][T10925] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2200'. [ 450.302175][T10926] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2200'. [ 450.322460][T10926] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2200'. [ 450.906180][T10944] netlink: 'syz.0.2202': attribute type 1 has an invalid length. [ 450.936847][T10930] netlink: 'syz.4.2201': attribute type 10 has an invalid length. [ 450.949149][T10944] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2202'. [ 450.953497][T10930] netlink: 'syz.4.2201': attribute type 4 has an invalid length. [ 450.999781][T10930] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2201'. [ 451.058081][T10930] bond0: (slave team0): Releasing backup interface [ 451.098349][T10930] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 451.150217][T10936] netlink: 'syz.4.2201': attribute type 19 has an invalid length. [ 451.170118][T10933] netlink: 'syz.4.2201': attribute type 19 has an invalid length. [ 453.532708][T10976] device syzkaller0 entered promiscuous mode [ 455.347925][T10988] netlink: 'syz.3.2219': attribute type 10 has an invalid length. [ 455.358805][T10988] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2219'. [ 455.369603][T10988] device hsr0 entered promiscuous mode [ 455.377347][T10988] bridge0: port 5(hsr0) entered blocking state [ 455.384757][T10988] bridge0: port 5(hsr0) entered disabled state [ 455.393705][T10988] bridge0: port 5(hsr0) entered blocking state [ 455.399982][T10988] bridge0: port 5(hsr0) entered forwarding state [ 455.424154][T11004] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2223'. [ 455.447915][T11007] netlink: 'syz.1.2223': attribute type 12 has an invalid length. [ 455.469992][T11007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2223'. [ 457.186992][T11062] netlink: 'syz.2.2240': attribute type 21 has an invalid length. [ 457.210925][T11062] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2240'. [ 457.242292][T11061] netlink: 'syz.2.2240': attribute type 21 has an invalid length. [ 457.276436][T11061] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2240'. [ 457.470717][T11076] FAULT_INJECTION: forcing a failure. [ 457.470717][T11076] name failslab, interval 1, probability 0, space 0, times 0 [ 457.522751][T11076] CPU: 1 PID: 11076 Comm: syz.4.2247 Not tainted syzkaller #0 [ 457.530271][T11076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 457.540351][T11076] Call Trace: [ 457.543644][T11076] [ 457.546587][T11076] dump_stack_lvl+0x188/0x24e [ 457.551289][T11076] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 457.557469][T11076] ? show_regs_print_info+0x12/0x12 [ 457.562679][T11076] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 457.568929][T11076] should_fail_ex+0x390/0x4c0 [ 457.573698][T11076] should_failslab+0x5/0x20 [ 457.578197][T11076] slab_pre_alloc_hook+0x59/0x300 [ 457.583223][T11076] kmem_cache_alloc+0x56/0x2f0 [ 457.587998][T11076] ? __build_skb+0x27/0x3b0 [ 457.592520][T11076] __build_skb+0x27/0x3b0 [ 457.596850][T11076] ? build_skb+0x14/0x230 [ 457.601181][T11076] build_skb+0x1e/0x230 [ 457.605339][T11076] bpf_prog_test_run_skb+0x38d/0x18e0 [ 457.610743][T11076] ? lockdep_hardirqs_on+0x94/0x140 [ 457.615945][T11076] ? cpu_online+0xa0/0xa0 [ 457.620305][T11076] ? cpu_online+0xa0/0xa0 [ 457.624654][T11076] bpf_prog_test_run+0x31c/0x390 [ 457.629593][T11076] __sys_bpf+0x62b/0x780 [ 457.633839][T11076] ? bpf_link_show_fdinfo+0x380/0x380 [ 457.639223][T11076] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 457.645383][T11076] __x64_sys_bpf+0x78/0x90 [ 457.649800][T11076] do_syscall_64+0x4c/0xa0 [ 457.654211][T11076] ? clear_bhb_loop+0x60/0xb0 [ 457.658887][T11076] ? clear_bhb_loop+0x60/0xb0 [ 457.663560][T11076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.669448][T11076] RIP: 0033:0x7f9ec579e1d9 [ 457.673861][T11076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.693460][T11076] RSP: 002b:00007f9ec658f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 457.701886][T11076] RAX: ffffffffffffffda RBX: 00007f9ec5a25fa0 RCX: 00007f9ec579e1d9 [ 457.709874][T11076] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 457.717838][T11076] RBP: 00007f9ec658f090 R08: 0000000000000000 R09: 0000000000000000 [ 457.725800][T11076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.733771][T11076] R13: 00007f9ec5a26038 R14: 00007f9ec5a25fa0 R15: 00007ffd7bf66308 [ 457.741750][T11076] [ 459.753743][T11158] FAULT_INJECTION: forcing a failure. [ 459.753743][T11158] name failslab, interval 1, probability 0, space 0, times 0 [ 459.790275][T11165] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2267'. [ 459.841978][T11158] CPU: 0 PID: 11158 Comm: syz.1.2265 Not tainted syzkaller #0 [ 459.849495][T11158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 459.859571][T11158] Call Trace: [ 459.862869][T11158] [ 459.865813][T11158] dump_stack_lvl+0x188/0x24e [ 459.870516][T11158] ? show_regs_print_info+0x12/0x12 [ 459.875740][T11158] ? load_image+0x410/0x410 [ 459.880262][T11158] ? neightbl_dump_info+0x1988/0x1b70 [ 459.885678][T11158] should_fail_ex+0x390/0x4c0 [ 459.890399][T11158] should_failslab+0x5/0x20 [ 459.894919][T11158] slab_pre_alloc_hook+0x59/0x300 [ 459.899968][T11158] kmem_cache_alloc+0x56/0x2f0 [ 459.904838][T11158] ? skb_clone+0x1e7/0x370 [ 459.909279][T11158] skb_clone+0x1e7/0x370 [ 459.913547][T11158] __netlink_deliver_tap+0x3e4/0x7e0 [ 459.918866][T11158] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.924087][T11158] netlink_deliver_tap+0x19c/0x1b0 [ 459.929222][T11158] netlink_dump+0x80f/0xcd0 [ 459.933764][T11158] ? netlink_lookup+0x200/0x200 [ 459.938642][T11158] ? netlink_recvmsg+0x5e3/0xe00 [ 459.943597][T11158] ? kmem_cache_free+0xf7/0x2a0 [ 459.948477][T11158] netlink_recvmsg+0x68f/0xe00 [ 459.953272][T11158] ? netlink_sendmsg+0xbd0/0xbd0 [ 459.958251][T11158] ? aa_af_perm+0x340/0x340 [ 459.962777][T11158] ? __might_fault+0xa6/0x120 [ 459.967518][T11158] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 459.972819][T11158] ? security_socket_recvmsg+0x85/0xb0 [ 459.978303][T11158] ? netlink_sendmsg+0xbd0/0xbd0 [ 459.983267][T11158] ____sys_recvmsg+0x2c8/0x5b0 [ 459.988064][T11158] ? __sys_recvmsg_sock+0x40/0x40 [ 459.993123][T11158] ? import_iovec+0x6f/0xa0 [ 459.997661][T11158] ___sys_recvmsg+0x210/0x590 [ 460.002368][T11158] ? __sys_recvmsg+0x2a0/0x2a0 [ 460.007155][T11158] ? common_file_perm+0x171/0x1c0 [ 460.012221][T11158] ? __fget_files+0x3fc/0x460 [ 460.016938][T11158] __x64_sys_recvmsg+0x20d/0x2e0 [ 460.021894][T11158] ? ct_nmi_exit+0x145/0x1c0 [ 460.026516][T11158] ? ___sys_recvmsg+0x590/0x590 [ 460.031412][T11158] ? lockdep_hardirqs_on+0x94/0x140 [ 460.036641][T11158] do_syscall_64+0x4c/0xa0 [ 460.041073][T11158] ? clear_bhb_loop+0x60/0xb0 [ 460.045767][T11158] ? clear_bhb_loop+0x60/0xb0 [ 460.050467][T11158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.056383][T11158] RIP: 0033:0x7fc91c99e1d9 [ 460.060814][T11158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.080450][T11158] RSP: 002b:00007fc91d788028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 460.088891][T11158] RAX: ffffffffffffffda RBX: 00007fc91cc25fa0 RCX: 00007fc91c99e1d9 [ 460.096886][T11158] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 460.104884][T11158] RBP: 00007fc91d788090 R08: 0000000000000000 R09: 0000000000000000 [ 460.112876][T11158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.120870][T11158] R13: 00007fc91cc26038 R14: 00007fc91cc25fa0 R15: 00007fffe0475ba8 [ 460.128888][T11158] [ 460.547126][T11173] netlink: 'syz.1.2269': attribute type 46 has an invalid length. [ 461.113661][T11195] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2276'. [ 461.651886][T11202] device syzkaller0 entered promiscuous mode [ 462.021283][T11206] device syzkaller0 entered promiscuous mode [ 462.041075][T11225] netlink: 'syz.2.2284': attribute type 10 has an invalid length. [ 465.782046][T11237] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2289'. [ 465.803264][T11237] bond0: (slave bond_slave_0): Releasing backup interface [ 465.824056][T11237] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 465.888087][T11240] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2290'. [ 466.188142][T11242] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2291'. [ 466.710477][T11277] netlink: 'syz.0.2303': attribute type 10 has an invalid length. [ 467.037105][T11273] device syzkaller0 entered promiscuous mode [ 467.291251][T11298] netlink: 'syz.2.2311': attribute type 29 has an invalid length. [ 468.657789][T11298] netlink: 'syz.2.2311': attribute type 29 has an invalid length. [ 468.665842][T11301] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2312'. [ 468.849478][T11305] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2314'. [ 468.874859][T11305] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 468.906749][T11312] netlink: 'syz.4.2317': attribute type 10 has an invalid length. [ 468.932057][T11314] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 468.996179][T11308] tun0: tun_chr_ioctl cmd 1074025677 [ 469.022371][T11308] tun0: linktype set to 805 [ 469.875856][T11342] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2326'. [ 470.616059][T11343] device syzkaller0 entered promiscuous mode [ 470.655693][T11360] netlink: 'syz.1.2330': attribute type 10 has an invalid length. [ 471.337479][T11368] netlink: 'syz.4.2332': attribute type 4 has an invalid length. [ 471.521509][T11368] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2332'. [ 475.467321][T11379] netlink: 'syz.4.2336': attribute type 7 has an invalid length. [ 476.092267][T11411] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.2348'. [ 476.175468][T11411] netlink: zone id is out of range [ 476.181170][T11411] netlink: zone id is out of range [ 476.214719][T11411] netlink: zone id is out of range [ 476.220233][T11411] netlink: zone id is out of range [ 476.274204][T11411] netlink: get zone limit has 8 unknown bytes [ 477.874716][T11454] netlink: 'syz.4.2363': attribute type 10 has an invalid length. [ 477.901805][T11454] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2363'. [ 478.096229][T11434] device syzkaller0 entered promiscuous mode [ 478.950279][T11479] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2372'. [ 478.960214][T11479] netlink: zone id is out of range [ 478.971322][T11479] netlink: zone id is out of range [ 478.978887][T11479] netlink: zone id is out of range [ 478.988869][T11479] netlink: zone id is out of range [ 478.994445][T11479] netlink: zone id is out of range [ 480.477600][T11494] netlink: 'syz.2.2375': attribute type 15 has an invalid length. [ 480.485717][T11494] netlink: 'syz.2.2375': attribute type 7 has an invalid length. [ 480.493608][T11494] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2375'. [ 480.846064][ T4285] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4 [ 480.907399][T11524] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 480.955997][T11523] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2387'. [ 507.641916][ T8066] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2659 jiffies s: 71457 root: 0x2/. [ 507.654454][ T8066] rcu: blocking rcu_node structures (internal RCU debug): [ 507.661629][ T8066] Sending NMI from CPU 0 to CPUs 1: [ 507.667023][ C1] NMI backtrace for cpu 1 [ 507.667034][ C1] CPU: 1 PID: 11523 Comm: syz.4.2387 Not tainted syzkaller #0 [ 507.667048][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 507.667057][ C1] RIP: 0010:unwind_next_frame+0x19b/0x1fd0 [ 507.667081][ C1] Code: ef 08 8b 35 97 e4 2d 0b 8d 46 ff 44 39 f8 0f 86 b0 16 00 00 44 89 f8 4c 8d 24 85 30 0a 20 90 4c 89 e0 48 c1 e8 03 0f b6 04 28 <84> c0 0f 85 23 18 00 00 45 8b 24 24 44 89 f8 ff c0 4c 8d 2c 85 30 [ 507.667093][ C1] RSP: 0018:ffffc900001dffc8 EFLAGS: 00000802 [ 507.667106][ C1] RAX: 0000000000000000 RBX: ffffc900001e0120 RCX: ffffffff97a3b100 [ 507.667116][ C1] RDX: ffffc900001e09f0 RSI: 000000000009607a RDI: 0000000000000001 [ 507.667126][ C1] RBP: dffffc0000000000 R08: ffffc900001e03d0 R09: ffffc900001e0170 [ 507.667136][ C1] R10: dffffc0000000000 R11: fffff5200003c030 R12: ffffffff90229e58 [ 507.667147][ C1] R13: ffffc900001e03e0 R14: ffffffff81a50a56 R15: 000000000000a50a [ 507.667157][ C1] FS: 00007f9ec658f6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 507.667170][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 507.667181][ C1] CR2: 0000000100000000 CR3: 0000000058b59000 CR4: 00000000003506e0 [ 507.667195][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 507.667203][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 507.667213][ C1] Call Trace: [ 507.667217][ C1] [ 507.667225][ C1] ? perf_event_output_forward+0x197/0x2f0 [ 507.667250][ C1] __unwind_start+0x51a/0x650 [ 507.667268][ C1] perf_callchain_kernel+0x29e/0x690 [ 507.667293][ C1] ? arch_perf_update_userpage+0x3c0/0x3c0 [ 507.667317][ C1] ? perf_event_output_forward+0x197/0x2f0 [ 507.667340][ C1] ? get_callchain_entry+0x181/0x3b0 [ 507.667361][ C1] get_perf_callchain+0x236/0x490 [ 507.667382][ C1] ? put_callchain_entry+0xb0/0xb0 [ 507.667404][ C1] ? __perf_event_header__init_id+0x421/0x530 [ 507.667426][ C1] perf_prepare_sample+0x399/0x2020 [ 507.667449][ C1] ? read_lock_is_recursive+0x10/0x10 [ 507.667469][ C1] ? perf_callchain+0x190/0x190 [ 507.667488][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 507.667512][ C1] perf_event_output_forward+0x197/0x2f0 [ 507.667533][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 507.667553][ C1] ? perf_get_page_size+0x430/0x430 [ 507.667574][ C1] ? perf_event_output_forward+0x282/0x2f0 [ 507.667595][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 507.667622][ C1] ? perf_get_page_size+0x430/0x430 [ 507.667642][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 507.667665][ C1] __perf_event_overflow+0x457/0x630 [ 507.667689][ C1] perf_swevent_event+0x315/0x570 [ 507.667711][ C1] ? perf_tp_event+0xc10/0xc10 [ 507.667732][ C1] ? perf_trace_buf_alloc+0x300/0x300 [ 507.667748][ C1] ? perf_swevent_event+0x4ba/0x570 [ 507.667772][ C1] perf_tp_event+0x36b/0xc10 [ 507.667795][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 507.667816][ C1] ? perf_tp_event+0xa8e/0xc10 [ 507.667855][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 507.667868][ C1] ? sched_clock_cpu+0x6e/0x260 [ 507.667886][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 507.667910][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 507.667931][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 507.667949][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 507.667969][ C1] ? __irq_exit_rcu+0x147/0x230 [ 507.667983][ C1] ? irq_exit_rcu+0x20/0x20 [ 507.667998][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 507.668015][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 507.668035][ C1] trace_hardirqs_on+0x24/0x40 [ 507.668052][ C1] asm_sysvec_irq_work+0x16/0x20 [ 507.668068][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 507.668083][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 68 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 507.668095][ C1] RSP: 0018:ffffc900001e0ae0 EFLAGS: 00000206 [ 507.668106][ C1] RAX: 3de9d9fc126f5e00 RBX: 1ffff9200003c164 RCX: 3de9d9fc126f5e00 [ 507.668117][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf71a0 [ 507.668128][ C1] RBP: ffffc900001e0bd0 R08: ffffffff9193433f R09: 1ffffffff2326867 [ 507.668138][ C1] R10: dffffc0000000000 R11: fffffbfff2326868 R12: 0000000000000246 [ 507.668148][ C1] R13: dffffc0000000000 R14: ffff8880b8d3bb00 R15: 0000000000000002 [ 507.668167][ C1] ? kmem_cache_free+0xe0/0x2a0 [ 507.668185][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 507.668206][ C1] __rcu_read_unlock+0x78/0xd0 [ 507.668219][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 507.668237][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 507.668255][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 507.668274][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 507.668290][ C1] __hrtimer_run_queues+0x522/0xc90 [ 507.668310][ C1] ? hw_scan_work+0xf00/0xf00 [ 507.668328][ C1] ? hrtimer_interrupt+0x980/0x980 [ 507.668349][ C1] hrtimer_run_softirq+0x173/0x290 [ 507.668367][ C1] handle_softirqs+0x291/0x910 [ 507.668383][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 507.668398][ C1] ? do_softirq+0x210/0x210 [ 507.668411][ C1] ? hrtimer_interrupt+0x775/0x980 [ 507.668431][ C1] __irq_exit_rcu+0x13b/0x230 [ 507.668444][ C1] ? irq_exit_rcu+0x20/0x20 [ 507.668463][ C1] irq_exit_rcu+0x5/0x20 [ 507.668475][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 507.668495][ C1] [ 507.668499][ C1] [ 507.668504][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 507.668521][ C1] RIP: 0010:__se_sys_perf_event_open+0x1acb/0x1ec0 [ 507.668536][ C1] Code: ec 02 00 00 48 8b 5c 24 30 48 89 df e8 ce 3a 00 00 48 89 df e8 f6 43 00 00 49 8d 7d 48 e8 0d e9 96 08 4c 89 ef e8 85 a0 fe ff <48> 8b 7c 24 30 48 83 c7 48 e8 f7 e8 96 08 80 7c 24 24 00 74 07 e8 [ 507.668547][ C1] RSP: 0018:ffffc90003defda0 EFLAGS: 00000246 [ 507.668558][ C1] RAX: 3de9d9fc126f5e00 RBX: ffff88805888e000 RCX: 0000000000000000 [ 507.668568][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: 00000000ffffffff [ 507.668578][ C1] RBP: ffffc90003deff10 R08: ffffffff9193433f R09: 1ffffffff2326867 [ 507.668588][ C1] R10: dffffc0000000000 R11: fffffbfff2326868 R12: 0000000000000000 [ 507.668598][ C1] R13: 0000000000000000 R14: ffff888076516c00 R15: 1ffff920007bdfc0 [ 507.668626][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 507.668648][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 507.668667][ C1] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 507.668682][ C1] do_syscall_64+0x4c/0xa0 [ 507.668698][ C1] ? clear_bhb_loop+0x60/0xb0 [ 507.668714][ C1] ? clear_bhb_loop+0x60/0xb0 [ 507.668732][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.668748][ C1] RIP: 0033:0x7f9ec579e1d9 [ 507.668760][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.668771][ C1] RSP: 002b:00007f9ec658f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 507.668785][ C1] RAX: ffffffffffffffda RBX: 00007f9ec5a25fa0 RCX: 00007f9ec579e1d9 [ 507.668796][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 507.668806][ C1] RBP: 00007f9ec5835888 R08: 0000000000000008 R09: 0000000000000000 [ 507.668815][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 507.668824][ C1] R13: 00007f9ec5a26038 R14: 00007f9ec5a25fa0 R15: 00007ffd7bf66308 [ 507.668842][ C1]