last executing test programs: 8.020246861s ago: executing program 1 (id=14608): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x50, '\x00', r1, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000300)={0x600}, 0x8) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=r5, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f00000008c0)=ANY=[], 0xffc0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pS \x00'}, 0x20) r9 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)="5c000000120007ab9a3fe3d86e17aa0a076b876c1d0048007ea6f063160af3650400010038001500", 0x28}, {&(0x7f0000000bc0)="83d2ff5f0000319fd2898a0cc6d6703b87eb29037b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="06000000000000000000000000000000000000003efa30c03f8e9961b4b65b724897afafc9c92ef8c384cc78d17d8e9b541d89cac019b39b7aec13848058aa74aef3d50c74411577775d307822e668c90e614ee954d43671c7cd5f7117ee195eb994597b690e64b7b41552f5854862330e1912161e1705e313b335e45eeaa5e3e3138e52a4d0eeeb87aa747ad85c3d6187a4176177e618121b8844ebdccd4751fbfca5fd3fa4360972d6bff0569ea66a44ea63548f26ad57c5a4cd28e16005bd62d2bd0ed2298ffc7f55feb11858b262a5bf2810792e5819c09b8c6050c17ad55df21d9ae91b7f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xd, 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="b10000006a554e0f00000000080000009500000000007347c163000000000000edf8f28eba7f02a51d3743beee2dd320d0cc9913606a35c24ff76aabd641a429d1d52ddd944513f610722064fad48d8417c31bcb10e45c8f9b95558efcf9a75172757c08b83d71a253751c29d786df1ce7d85208f189b80c2a9dae0f12d16c96c53925153e27210c7d6f4af3f7960906334e57f49169589fdc9d9f780a33e4521882d4502161787fe961948c015e0a2e7780da4730d09ce9e4a26f7bf055d30089fd017e7ea5ffc357f88dc8feaacef9c50634768d8278dee67d0f6a331fe86d6d0115b6f35ffd92dabc51a8d4b74abde96759eaa5783c5ca3"], &(0x7f0000000600)='syzkaller\x00', 0x8000, 0x57, &(0x7f0000000640)=""/87, 0x41100, 0x20, '\x00', 0x0, @fallback=0xf, r4, 0x8, &(0x7f0000000700)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x10, 0x7, 0x5}, 0x10, r5, r2, 0x0, &(0x7f0000000a40)=[0x1, r7, r8, r10, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(r7, &(0x7f0000000c00)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000001c0)=r11, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r11, &(0x7f0000000400)="b6a478afb1b6c9abe6ebdf76b9e2e99a49d9a468a5db9083b8ab255205ef09b47e7736880caeccea6af5", &(0x7f0000000440)=""/102, 0x4}, 0x20) r12 = socket$kcm(0x10, 0x3, 0x0) sendmsg$inet(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="1800000015006b05c84e21000af32c6e0a7875f80e000000400002", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r11, 0xc008240a, &(0x7f0000000200)=ANY=[@ANYBLOB="0400000000b7c480cb00000000000000"]) 7.038570191s ago: executing program 1 (id=14622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x1c1842, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)=r2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000002", @ANYRESDEC], 0xffdd) 6.528135193s ago: executing program 3 (id=14632): perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x2}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000500)=""/4081, 0x3a, 0xff1, 0x1, 0x0, 0xa00}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000400), 0x161) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) 6.397791057s ago: executing program 3 (id=14635): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000009376, 0x2241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x6, 0xf6, 0x0, 0xd871}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xe, &(0x7f0000000840)=ANY=[], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000001100), 0x8}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xe02, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_netprio_ifpriomap(r3, 0x0, 0xd) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4004010) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f0000000280), 0x4) sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000340)=r5, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000011c0)=ANY=[], 0xfe33) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) socket$kcm(0x2b, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000740)=ANY=[], 0xfe33) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r2, r7}, 0xc) perf_event_open(&(0x7f0000000000)={0x9, 0x80, 0x1, 0x3, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680), 0x2}, 0x800, 0x6, 0x0, 0x7, 0x239, 0x0, 0x5, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b"], 0x66) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xffc0) 6.090343708s ago: executing program 3 (id=14637): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x9, 0xc, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x2) sendmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4004}, 0x20004050) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bd55, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'macsec0\x00', 0x400}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0xfe0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000340)) r5 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0xffffffffffffffff, 0x0, r4, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'ip6gre0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800dca09d223385999a00000c00000006000000030000000000000700000000006130617f00"], &(0x7f0000000740)=""/185, 0x2a, 0xb9, 0x1}, 0x28) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000001d80)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000001dc0), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000001e40)=r7, 0x4) sendmsg$unix(r9, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x2) r10 = perf_event_open$cgroup(&(0x7f0000000980)={0x3, 0x80, 0x9, 0x7, 0xb, 0xb2, 0x0, 0x4, 0x81440, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x1002, 0x2, 0x101, 0x2, 0x1, 0x3ff, 0xa0bb, 0x0, 0xde}, 0xffffffffffffffff, 0xc, r5, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r10) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a3, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03cfa400000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b0000000000ff00000000000000ac1414aa000086dd"], 0xcfa4) 4.766688593s ago: executing program 2 (id=14640): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602fe8000000a000a000f00000002800000121f", 0x2e}], 0x1}, 0x20000090) 4.765562613s ago: executing program 1 (id=14641): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x51}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xa}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a80)={0xd, 0x4, &(0x7f0000002b40)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xa0}]}, &(0x7f0000002b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002bc0)=ANY=[], 0x50) socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002c00)='cgroup.kill\x00', 0x275a, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="abb9a070a8ab23305f451119000a00000000000467c9ee472ae5c67691df506955ac9ab129bd6f92dfd763124f247056cb1085ba309b214fa7d265bb195d44ad9051d2bf9a58ec47fc0f720490bb49dc15e5aadbf79a7c6e98c6499a19320fe8e3a1f5f8c64aad2dc10c7f6e94de4875bed2a9dbc5b2", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$sock_attach_bpf(r1, 0x107, 0x2, &(0x7f0000002cc0), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002d00)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002d80), 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002dc0)) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4075, 0xfeb}], 0x1}, 0x40000140) sendmsg$sock(r0, &(0x7f0000002900)={&(0x7f0000000280)=@qipcrtr={0x2a, 0x2, 0xfffffffe}, 0x80, 0x0}, 0x4000001) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000002880)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000003040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000003080)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000003100)=""/140, 0x8c}], 0x1, &(0x7f00000031c0)=""/229, 0x11}, 0x0) close(r3) recvmsg(r0, &(0x7f0000002a40)={&(0x7f0000000140)=@generic, 0x80, &(0x7f0000002800)=[{&(0x7f0000001500)=""/207, 0xcf}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/106, 0x6a}, {&(0x7f0000002680)=""/65, 0x41}, {&(0x7f0000002700)=""/177, 0xb1}, {&(0x7f00000027c0)}], 0x6, &(0x7f0000002940)=""/248, 0xf8}, 0x140) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0x13, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="050000000000000073118a00000000008510006402000000850000007600000095000000000000009500a50500000000"], &(0x7f0000002f00)='GPL\x00', 0x5, 0x29e, &(0x7f0000002f40)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 4.692178661s ago: executing program 3 (id=14642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008000000000000", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0xff9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r5) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000330000", @ANYRESDEC], 0xffdd) 4.608825729s ago: executing program 2 (id=14643): r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4b, &(0x7f0000000000), 0x43) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x1a4e, 0x0, 0x0, 0x7, 0x0, 0xbfff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x4b, &(0x7f0000000000), 0x43) (async) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x1a4e, 0x0, 0x0, 0x7, 0x0, 0xbfff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 4.365056554s ago: executing program 2 (id=14644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000580)={'syzkaller0\x00', @random="010000006000"}) 3.847928577s ago: executing program 1 (id=14645): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000c80)='\x00', 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f00000000c0)="c00e020030000b02d25a806f8c2d94f90324fc602f1a08000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000008c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000900)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x6, 0x6, &(0x7f0000000a40)=r3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095", @ANYRES8=r3, @ANYBLOB="58c337d25ae69044c2c6b3f42ba4cd46337d12bdb57b8949ef8ae3dcf6b56876e63d68236ecf05bada4eb7014378de828e47802e00019a34d786663f2ae9dead717d78e0793a06bf2a964b30be07eb4e8d0c59e20b6ea4405f8af613d973cbd4efcd6a9dea8c3cd6b39a9de19a1a25f6eaecb17fcd57705b973d55eacef50101e6814310c258c8490dd1a0f791f25eac0d924de398882f4f27d280f4c9ba81f60f9a011a2026d895f83b4527b9e77252665476bcd08eed741241a689afc016ad0d02e8f5a030bfa0aa96b7e82d55d028666d1c4f41554a70f171a753dd83444db597e77f2a6d317a246a7cff64bf64", @ANYRES32=r4, @ANYRES16=r4, @ANYRES64=r3], &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27}, 0x94) socketpair(0x1e, 0x3, 0x0, &(0x7f0000000600)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000640)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r5], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000700)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x16, 0x0, 0x30000, 0x1}, 0x48) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e00)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0xd, 0x10, &(0x7f0000000f80)=ANY=[@ANYBLOB="180000000000000000000000000100"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0xa}, 0x94) 2.602633574s ago: executing program 4 (id=14646): r0 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x88, 0xa, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x4b40, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0x0, 0x3000000}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x37}]}, &(0x7f0000000440)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000580), 0xb5, 0x10, &(0x7f00000005c0), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 2.576638427s ago: executing program 2 (id=14647): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380), 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x7c, &(0x7f0000000440)=[{&(0x7f0000000480)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a0003fe0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r3 = openat$cgroup_devices(r1, &(0x7f00000003c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000400)=ANY=[@ANYBLOB='b *:', @ANYRESOCT=r3], 0xe) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025643a00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000b701000050000000731af8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cd000000b70000000200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 2.362672059s ago: executing program 4 (id=14649): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000006c0)=[{0x9, 0x3, 0x10000, 0x3}, {0x10401002, 0x2, 0xd, 0x5}], 0x10, 0xfffffffd}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000300), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c00)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000c80)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000d00)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) close(r4) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000007c0)=ANY=[], &(0x7f0000000800)='GPL\x00'}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x0, 0xca, 0x4f, &(0x7f0000000000)="1b1e5896363636e824e7485715ce906741d521ab51b56bf2c683384c9e7610d2de7b38cb38ed08faf8dc572eddfeb864d5f6136184af4af5a371209a16c3b322e73866368e5575391cfe53d694eff7e54c30b9194976d2189715938b24401ca10d028d587ef1aecba71d2ed3858ed8cd5f14d50af4345fd6945eab790fd18a638261e88b87963eed9eb9a807946ab098e9097ac990e50739a74e26644650f3150cc80a03c553938645d294568a7c61e1e889c22cfd9699ff526498fad3bb2af60f4e50875555c6db5d38", &(0x7f0000000100)=""/79, 0x8b4e, 0x0, 0xfa, 0x0, &(0x7f0000000180)="2f82b924e8be858c5c5391d18e1a6c84c92d566fc7abf0208f8f4aa23dbf90fb81f8842cac98dcf4186b22f16875587b2f1db8e4eb5186024b2834769fa49b6a1eb7700fdfdab49c97de65b9b65e724ec6e3113d7e67a568dd83e9afcf923bcb26310102f7da001efa2201584cef8b46b7e42f1715b3acd4d7275f5e4742274d55f7c4424d4e0b9add0cb9208be425bcd4f61a2685b43650cea8789c0270460d9bb349ccb5cf63e7c44031157a8ed9a7b924bac4e8ab41e4c9b4daa2ce2b80f0fe929e8bfc756ea8aa136bb94e3d8c2cb4cd814f9ea637188b6c0e65268f6e1cd2bc6f2843daca7cb312f62d5f380bbb1c74c439a7144d6024be", 0xfffffffffffffffe, 0x7, 0x0, 0x2}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) r7 = perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, 0x0) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000940), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000980)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x10, 0x0, 0x11) sendmsg$kcm(r6, &(0x7f0000000a80)={0x0, 0x60, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) 2.286402636s ago: executing program 0 (id=14650): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x200000, 0x1}, 0x712, 0x0, 0xc2ba, 0x8, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xdee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000002040)='GPL\x00', 0x5, 0x252, &(0x7f0000002080)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002240), 0x8, 0x10, &(0x7f0000002280), 0x10}, 0x94) perf_event_open(&(0x7f00000022c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x84) recvmsg$unix(0xffffffffffffffff, 0x0, 0x26062) recvmsg$kcm(r2, &(0x7f00000023c0)={0x0, 0x0, 0x0}, 0x160) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0xd, 0x4, 0x0, 0x0, 0x4, 0x99, &(0x7f00000024c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000002580)={0x0, 0xaa, &(0x7f00000025c0)=[{&(0x7f0000002600)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) socketpair(0x1d, 0x502d025bf4d54d9, 0xf4db, &(0x7f0000002640)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002680)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f00000026c0)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002700), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000002740)='cgroup.freeze\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000001840)={0x0, 0xffffff0a, &(0x7f0000001880)=[{&(0x7f00000018c0)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x1a, 0x0, 0x0) 1.361089751s ago: executing program 0 (id=14651): socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000020007000000441c0503e020000100230000ac1414c19200002aea"], 0x30}, 0x24040880) 1.302451006s ago: executing program 0 (id=14652): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410210000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) 418.511907ms ago: executing program 1 (id=14653): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x9, 0xc, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x2) sendmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4004}, 0x20004050) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bd55, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'macsec0\x00', 0x400}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0xfe0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000340)) r5 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0xffffffffffffffff, 0x0, r4, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'ip6gre0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800dca09d223385999a00000c00000006000000030000000000000700000000006130617f00"], &(0x7f0000000740)=""/185, 0x2a, 0xb9, 0x1}, 0x28) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b702000000000100bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000001d80)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000001dc0), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000001e40)=r7, 0x4) sendmsg$unix(r9, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x2) r10 = perf_event_open$cgroup(&(0x7f0000000980)={0x3, 0x80, 0x9, 0x7, 0xb, 0xb2, 0x0, 0x4, 0x81440, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x1002, 0x2, 0x101, 0x2, 0x1, 0x3ff, 0xa0bb, 0x0, 0xde}, 0xffffffffffffffff, 0xc, r5, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r10) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a3, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%pS \x00'}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r1, 0x0, &(0x7f0000000480)=""/81}, 0x20) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000009376, 0x2241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x6, 0xf6, 0x0, 0xd871}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xe02, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x8100, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) close(r4) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r4, &(0x7f0000000c40)={&(0x7f0000000c80)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000cc0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000d00), 0x6000}], 0x4, &(0x7f0000000d40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(r3, 0x0, 0x4004010) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x80) socket$kcm(0x10, 0x2, 0x0) close(r2) 121.265107ms ago: executing program 2 (id=14660): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext, 0x144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1f, 0x2, &(0x7f0000000a00)=@raw=[@call={0x85, 0x0, 0x0, 0x96}, @exit], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%pS \x00'}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r1, 0x0, &(0x7f0000000480)=""/81}, 0x20) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000009376, 0x2241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x6, 0xf6, 0x0, 0xd871}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xe02, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x8100, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) close(r3) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r3, &(0x7f0000000c40)={&(0x7f0000000c80)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000cc0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000d00), 0x6000}], 0x4, &(0x7f0000000d40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x80) socket$kcm(0x10, 0x2, 0x0) close(r2) 121.041207ms ago: executing program 3 (id=14661): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x20, 0xff97, 0x7, {[@rr={0x7, 0xf, 0x6, [@remote, @multicast2, @multicast2]}]}}}], 0x20}, 0x0) 100.248279ms ago: executing program 0 (id=14662): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003004000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000000500)='syzkaller\x00', 0x4, 0xd2, &(0x7f0000000840)=""/210, 0x0, 0x8}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003004000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000000500)='syzkaller\x00', 0x4, 0xd2, &(0x7f0000000840)=""/210, 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x40) perf_event_open(0x0, 0x0, 0x8, r0, 0x3) (async) perf_event_open(0x0, 0x0, 0x8, r0, 0x3) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f0000000700)=r3}, 0x20) sendmsg$sock(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="12d9ce4c7ed7e6598703f27d32315702a434a4c7d477719bc4383baa94e1376d33f59dfb95a21e20ee9ae189869209b97e663f61df43905cda535242aea499d60aaf26d6f1054bf8ce094a7141045efc1408e062835e4ce68967b726b21526a58846167c1256d2c5d905362464b7303023eb82c50f08aa0c5f7165a2b470f5ff9308fe870f2e3ffebffb0ede2b064297b0227711e819bf8a90068fa03c332539c8816767b1c123b33b08b59612d2d70fadae2bd38d0def74a576663ea13b80377bb54a1e9a6c0e", 0xc7}, {&(0x7f0000000b00)="b9ee21861ba14abe84eab6e3e18b77c7f300d1c87acba939dd02085974c11486d8760c26dd8bddd97c251f7761da25a848414e4f58f88ce1fd3b812fddd9a3f06db3d4998a391969bd379c5520c1905788ec708e65d29030d789e1d64acaf9b721ac9513f04a604da12fd0e99897705a07e9c8bff70c5cba1e1f3d55e53e7a853c2d361c02283657a0c73624d505344888978dee5b394f60fade144c", 0x9c}], 0x2, &(0x7f0000000c00)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x30}, 0x64080) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)={0x1b, 0x0, 0x0, 0x9e, 0x0, 0xffffffffffffffff, 0xd, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 22.289807ms ago: executing program 4 (id=14663): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x16, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001180), 0xffffffffffffffd2}, 0x48) 0s ago: executing program 1 (id=14664): write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000017c0), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101, 0xa6f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000001140)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r0, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000001200)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000001300)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f00000013c0), 0x0, 0x700}, 0x2c) kernel console output (not intermixed with test programs): 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2071.221396][T15278] RSP: 002b:00007ff60e990028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2071.229797][T15278] RAX: ffffffffffffffda RBX: 00007ff60de25fa0 RCX: 00007ff60dba94d9 [ 2071.237757][T15278] RDX: 0000000020000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 2071.245717][T15278] RBP: 00007ff60e990090 R08: 0000000000000000 R09: 0000000000000000 [ 2071.253677][T15278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2071.261722][T15278] R13: 00007ff60de26038 R14: 00007ff60de25fa0 R15: 00007ffc7d811828 [ 2071.269692][T15278] [ 2071.300066][T15286] netlink: 'syz.3.13471': attribute type 29 has an invalid length. [ 2071.355888][T15286] netlink: 'syz.3.13471': attribute type 3 has an invalid length. [ 2071.416092][T15286] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13471'. [ 2071.689790][T15296] rxe_eth0 speed is unknown, defaulting to 1000 [ 2071.698368][T15309] netlink: 'syz.2.13480': attribute type 19 has an invalid length. [ 2072.826705][T15334] netlink: 'syz.2.13486': attribute type 3 has an invalid length. [ 2072.896403][T15333] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13488'. [ 2072.932371][T15334] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.13486'. [ 2073.118460][T15342] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13489'. [ 2073.211333][T15342] openvswitch: netlink: Message has 6 unknown bytes. [ 2073.315603][T15344] netlink: 'syz.0.13491': attribute type 10 has an invalid length. [ 2073.324205][T15329] netlink: 'syz.2.13486': attribute type 3 has an invalid length. [ 2073.335690][T15344] netlink: 2 bytes leftover after parsing attributes in process `syz.0.13491'. [ 2073.345197][T15329] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.13486'. [ 2073.376771][T15325] rxe_eth0 speed is unknown, defaulting to 1000 [ 2073.587818][T15352] netlink: 'syz.1.13494': attribute type 21 has an invalid length. [ 2073.637707][T15352] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13494'. [ 2073.806044][T15326] rxe_eth0 speed is unknown, defaulting to 1000 [ 2074.237811][T15380] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.13505'. [ 2074.239855][T15379] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.13505'. [ 2074.308319][T15384] netlink: 'syz.2.13506': attribute type 11 has an invalid length. [ 2074.320574][T15384] netlink: 130876 bytes leftover after parsing attributes in process `syz.2.13506'. [ 2074.610070][T15393] netlink: 'syz.3.13508': attribute type 17 has an invalid length. [ 2075.358489][T15428] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.13519'. [ 2075.836106][T15431] rxe_eth0 speed is unknown, defaulting to 1000 [ 2078.184499][T15463] netlink: 'syz.2.13531': attribute type 41 has an invalid length. [ 2078.271379][T15462] rxe_eth0 speed is unknown, defaulting to 1000 [ 2078.399971][T15472] netlink: 'syz.0.13537': attribute type 10 has an invalid length. [ 2078.440052][T15472] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 2078.968150][T15479] netlink: 10 bytes leftover after parsing attributes in process `syz.3.13541'. [ 2079.030295][T15487] netlink: 'syz.0.13544': attribute type 21 has an invalid length. [ 2079.044327][T15487] netlink: 'syz.0.13544': attribute type 12 has an invalid length. [ 2079.073140][T15487] netlink: 'syz.0.13544': attribute type 13 has an invalid length. [ 2079.121659][T15487] netlink: 'syz.0.13544': attribute type 14 has an invalid length. [ 2079.157570][T15487] netlink: 'syz.0.13544': attribute type 15 has an invalid length. [ 2079.187776][T15487] netlink: 'syz.0.13544': attribute type 16 has an invalid length. [ 2079.205702][T15487] netlink: 12926 bytes leftover after parsing attributes in process `syz.0.13544'. [ 2082.486032][T15506] rxe_eth0 speed is unknown, defaulting to 1000 [ 2082.690529][T15535] netlink: 'syz.3.13559': attribute type 21 has an invalid length. [ 2082.749547][T15540] netlink: 'syz.1.13558': attribute type 41 has an invalid length. [ 2086.260702][T15550] rxe_eth0 speed is unknown, defaulting to 1000 [ 2086.460846][T15570] rxe_eth0 speed is unknown, defaulting to 1000 [ 2086.561635][T15576] device syzkaller0 entered promiscuous mode [ 2088.722054][T15593] netlink: 'syz.0.13577': attribute type 13 has an invalid length. [ 2088.730190][T15593] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13577'. [ 2088.741345][T15593] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2089.267162][T15617] netlink: 'syz.2.13584': attribute type 21 has an invalid length. [ 2089.305319][T15617] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13584'. [ 2089.324073][T15617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13584'. [ 2089.361983][T15615] netlink: 'syz.0.13583': attribute type 41 has an invalid length. [ 2090.522088][T32624] Bluetooth: hci0: command 0x0406 tx timeout [ 2090.821793][T15635] rxe_eth0 speed is unknown, defaulting to 1000 [ 2091.050850][T15645] FAULT_INJECTION: forcing a failure. [ 2091.050850][T15645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2091.140227][T15645] CPU: 1 PID: 15645 Comm: syz.3.13594 Not tainted syzkaller #0 [ 2091.147826][T15645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2091.157905][T15645] Call Trace: [ 2091.161250][T15645] [ 2091.164189][T15645] dump_stack_lvl+0x188/0x24e [ 2091.168894][T15645] ? show_regs_print_info+0x12/0x12 [ 2091.174109][T15645] ? load_image+0x410/0x410 [ 2091.178629][T15645] ? __lock_acquire+0x7ea0/0x7ea0 [ 2091.183668][T15645] ? memcpy+0x3c/0x60 [ 2091.187675][T15645] should_fail_ex+0x390/0x4c0 [ 2091.192373][T15645] _copy_to_user+0x2c/0x130 [ 2091.196902][T15645] generic_map_lookup_batch+0x7cc/0xbf0 [ 2091.202489][T15645] ? bpf_map_update_value+0x670/0x670 [ 2091.207891][T15645] ? __fdget+0x17c/0x200 [ 2091.212154][T15645] ? bpf_map_update_value+0x670/0x670 [ 2091.217540][T15645] bpf_map_do_batch+0x2e0/0x5f0 [ 2091.222408][T15645] ? bpf_lsm_bpf+0x5/0x10 [ 2091.226750][T15645] ? security_bpf+0x7a/0xa0 [ 2091.231273][T15645] __sys_bpf+0x6f7/0x780 [ 2091.235542][T15645] ? bpf_link_show_fdinfo+0x550/0x550 [ 2091.240945][T15645] ? lock_chain_count+0x20/0x20 [ 2091.245819][T15645] __x64_sys_bpf+0x78/0x90 [ 2091.250250][T15645] do_syscall_64+0x4c/0xa0 [ 2091.254686][T15645] ? clear_bhb_loop+0x60/0xb0 [ 2091.259377][T15645] ? clear_bhb_loop+0x60/0xb0 [ 2091.264085][T15645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2091.269997][T15645] RIP: 0033:0x7f7c353a94d9 [ 2091.274425][T15645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2091.294048][T15645] RSP: 002b:00007f7c335f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2091.302482][T15645] RAX: ffffffffffffffda RBX: 00007f7c35625fa0 RCX: 00007f7c353a94d9 [ 2091.310471][T15645] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 0000000000000018 [ 2091.318453][T15645] RBP: 00007f7c335f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2091.326436][T15645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2091.334421][T15645] R13: 00007f7c35626038 R14: 00007f7c35625fa0 R15: 00007ffe858ff388 [ 2091.342426][T15645] [ 2092.045454][T15672] FAULT_INJECTION: forcing a failure. [ 2092.045454][T15672] name failslab, interval 1, probability 0, space 0, times 0 [ 2092.106878][T15672] CPU: 1 PID: 15672 Comm: syz.0.13601 Not tainted syzkaller #0 [ 2092.114472][T15672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2092.124519][T15672] Call Trace: [ 2092.127789][T15672] [ 2092.130710][T15672] dump_stack_lvl+0x188/0x24e [ 2092.135393][T15672] ? show_regs_print_info+0x12/0x12 [ 2092.140597][T15672] ? load_image+0x410/0x410 [ 2092.145098][T15672] ? verify_lock_unused+0x140/0x140 [ 2092.150300][T15672] should_fail_ex+0x390/0x4c0 [ 2092.154985][T15672] should_failslab+0x5/0x20 [ 2092.159477][T15672] slab_pre_alloc_hook+0x59/0x300 [ 2092.164503][T15672] kmem_cache_alloc+0x56/0x2f0 [ 2092.169259][T15672] ? skb_clone+0x1e7/0x370 [ 2092.173711][T15672] skb_clone+0x1e7/0x370 [ 2092.177951][T15672] __netlink_deliver_tap+0x3e4/0x7e0 [ 2092.183239][T15672] ? netlink_deliver_tap+0x2e/0x1b0 [ 2092.188431][T15672] netlink_deliver_tap+0x19c/0x1b0 [ 2092.193535][T15672] netlink_unicast+0x777/0x920 [ 2092.198298][T15672] netlink_sendmsg+0x8ad/0xbd0 [ 2092.203083][T15672] ? netlink_getsockopt+0x550/0x550 [ 2092.208274][T15672] ? apparmor_socket_sendmsg+0x16c/0x330 [ 2092.213901][T15672] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2092.219179][T15672] ? security_socket_sendmsg+0x7c/0xa0 [ 2092.224655][T15672] ? netlink_getsockopt+0x550/0x550 [ 2092.229853][T15672] ____sys_sendmsg+0x5ed/0x9a0 [ 2092.234707][T15672] ? __sys_sendmsg_sock+0x30/0x30 [ 2092.239719][T15672] ? __import_iovec+0x306/0x510 [ 2092.244569][T15672] ? import_iovec+0x6f/0xa0 [ 2092.249070][T15672] ___sys_sendmsg+0x2a2/0x360 [ 2092.253742][T15672] ? __sys_sendmsg+0x2a0/0x2a0 [ 2092.258515][T15672] ? __lock_acquire+0x7ea0/0x7ea0 [ 2092.263553][T15672] __se_sys_sendmsg+0x1c3/0x2b0 [ 2092.268396][T15672] ? __x64_sys_sendmsg+0x80/0x80 [ 2092.273341][T15672] ? lockdep_hardirqs_on+0x94/0x140 [ 2092.278555][T15672] do_syscall_64+0x4c/0xa0 [ 2092.282965][T15672] ? clear_bhb_loop+0x60/0xb0 [ 2092.287636][T15672] ? clear_bhb_loop+0x60/0xb0 [ 2092.292333][T15672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2092.298222][T15672] RIP: 0033:0x7f34cfda94d9 [ 2092.302628][T15672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2092.322227][T15672] RSP: 002b:00007f34d0cb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2092.330630][T15672] RAX: ffffffffffffffda RBX: 00007f34d0025fa0 RCX: 00007f34cfda94d9 [ 2092.338677][T15672] RDX: 0000000020000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 2092.346636][T15672] RBP: 00007f34d0cb0090 R08: 0000000000000000 R09: 0000000000000000 [ 2092.354599][T15672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2092.362559][T15672] R13: 00007f34d0026038 R14: 00007f34d0025fa0 R15: 00007fffeeba14b8 [ 2092.370532][T15672] [ 2092.411996][T15672] netlink: 'syz.0.13601': attribute type 29 has an invalid length. [ 2092.420054][T15672] netlink: 'syz.0.13601': attribute type 3 has an invalid length. [ 2092.452041][T15672] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13601'. [ 2092.745120][T15656] device syzkaller0 entered promiscuous mode [ 2092.756672][T15674] netlink: 'syz.1.13598': attribute type 21 has an invalid length. [ 2092.783557][T15674] netlink: 'syz.1.13598': attribute type 12 has an invalid length. [ 2092.816129][T15674] netlink: 'syz.1.13598': attribute type 13 has an invalid length. [ 2092.824608][T15674] netlink: 'syz.1.13598': attribute type 14 has an invalid length. [ 2092.832704][T15674] netlink: 'syz.1.13598': attribute type 15 has an invalid length. [ 2092.840876][T15674] netlink: 12926 bytes leftover after parsing attributes in process `syz.1.13598'. [ 2095.920500][T15712] netlink: 10 bytes leftover after parsing attributes in process `syz.4.13612'. [ 2096.765761][T15688] validate_nla: 1 callbacks suppressed [ 2096.765779][T15688] netlink: 'syz.0.13604': attribute type 27 has an invalid length. [ 2097.245340][T15733] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13619'. [ 2098.692188][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.698562][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.565732][T15715] netlink: 'syz.0.13615': attribute type 10 has an invalid length. [ 2099.679146][T15715] team0 (unregistering): Port device team_slave_0 removed [ 2099.718617][T15715] team0 (unregistering): Port device team_slave_1 removed [ 2099.790861][T15715] team0 (unregistering): Port device geneve0 removed [ 2099.811360][T15717] netlink: 'syz.3.13613': attribute type 19 has an invalid length. [ 2099.852964][T15731] netlink: 16094 bytes leftover after parsing attributes in process `syz.1.13620'. [ 2105.220715][T15779] tipc: Started in network mode [ 2105.225745][T15779] tipc: Node identity 9215a268, cluster identity 4711 [ 2105.232564][T15779] tipc: Node number set to 2450891368 [ 2105.253892][T15812] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2105.635716][T15828] netlink: 'syz.0.13656': attribute type 10 has an invalid length. [ 2105.791814][T15834] netlink: 'syz.4.13658': attribute type 13 has an invalid length. [ 2105.888863][T15840] netlink: 'syz.0.13661': attribute type 25 has an invalid length. [ 2105.936390][T15840] netlink: 'syz.0.13661': attribute type 3 has an invalid length. [ 2105.944853][T15840] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13661'. [ 2106.049361][T15849] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13664'. [ 2106.253482][T15863] netlink: 'syz.2.13671': attribute type 2 has an invalid length. [ 2106.261734][T15863] netlink: 'syz.2.13671': attribute type 4 has an invalid length. [ 2106.282307][T15863] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13671'. [ 2106.460275][T15873] netlink: 'syz.4.13677': attribute type 10 has an invalid length. [ 2106.477158][T15873] device batadv_slave_0 left promiscuous mode [ 2106.541520][T15873] device batadv_slave_0 entered promiscuous mode [ 2106.554094][T15873] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2106.573358][T15888] netlink: 'syz.2.13675': attribute type 29 has an invalid length. [ 2106.590897][T15888] netlink: 'syz.2.13675': attribute type 29 has an invalid length. [ 2106.610760][T15884] netlink: 'syz.4.13677': attribute type 10 has an invalid length. [ 2106.635360][T15884] device hsr0 entered promiscuous mode [ 2106.667026][T15884] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2106.684455][T15884] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2106.697951][T15884] hsr0: mtu greater than device maximum [ 2106.706423][T15884] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2106.727730][T15870] device syzkaller0 entered promiscuous mode [ 2107.473450][T15911] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13687'. [ 2109.937182][T15950] FAULT_INJECTION: forcing a failure. [ 2109.937182][T15950] name failslab, interval 1, probability 0, space 0, times 0 [ 2109.968259][T15950] CPU: 0 PID: 15950 Comm: syz.1.13701 Not tainted syzkaller #0 [ 2109.975849][T15950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2109.985926][T15950] Call Trace: [ 2109.989218][T15950] [ 2109.992165][T15950] dump_stack_lvl+0x188/0x24e [ 2109.996865][T15950] ? sctp_sendmsg+0x1686/0x2940 [ 2110.001746][T15950] ? ___sys_sendmsg+0x2a2/0x360 [ 2110.006617][T15950] ? show_regs_print_info+0x12/0x12 [ 2110.011840][T15950] ? load_image+0x410/0x410 [ 2110.016372][T15950] should_fail_ex+0x390/0x4c0 [ 2110.021063][T15950] should_failslab+0x5/0x20 [ 2110.025573][T15950] slab_pre_alloc_hook+0x59/0x300 [ 2110.030612][T15950] ? sctp_add_bind_addr+0x89/0x350 [ 2110.035737][T15950] __kmem_cache_alloc_node+0x4f/0x270 [ 2110.041124][T15950] ? sctp_add_bind_addr+0x89/0x350 [ 2110.046245][T15950] kmalloc_trace+0x26/0xe0 [ 2110.050675][T15950] sctp_add_bind_addr+0x89/0x350 [ 2110.055630][T15950] sctp_copy_local_addr_list+0x317/0x4d0 [ 2110.061280][T15950] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 2110.067012][T15950] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 2110.073095][T15950] ? sctp_v4_is_any+0x31/0x50 [ 2110.077805][T15950] ? sctp_copy_one_addr+0x93/0x660 [ 2110.082934][T15950] sctp_bind_addr_copy+0xaf/0x3c0 [ 2110.087971][T15950] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 2110.094306][T15950] sctp_connect_new_asoc+0x2f5/0x6a0 [ 2110.099603][T15950] ? __sctp_connect+0xd80/0xd80 [ 2110.104464][T15950] ? __local_bh_enable_ip+0x136/0x1c0 [ 2110.109841][T15950] ? _local_bh_enable+0xa0/0xa0 [ 2110.114695][T15950] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 2110.120508][T15950] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 2110.126322][T15950] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 2110.131877][T15950] ? security_sctp_bind_connect+0x85/0xb0 [ 2110.137622][T15950] sctp_sendmsg+0x1686/0x2940 [ 2110.142324][T15950] ? sctp_getsockopt+0x8a0/0x8a0 [ 2110.147265][T15950] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2110.153254][T15950] ? __might_fault+0xa6/0x120 [ 2110.157934][T15950] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2110.164356][T15950] ? aa_sock_msg_perm+0x94/0x150 [ 2110.169303][T15950] ? inet_sendmsg+0x7a/0x2a0 [ 2110.173907][T15950] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2110.179200][T15950] ? inet_send_prepare+0x250/0x250 [ 2110.184407][T15950] ____sys_sendmsg+0x5ed/0x9a0 [ 2110.189193][T15950] ? __sys_sendmsg_sock+0x30/0x30 [ 2110.194224][T15950] ? __import_iovec+0x306/0x510 [ 2110.199088][T15950] ? import_iovec+0x6f/0xa0 [ 2110.203603][T15950] ___sys_sendmsg+0x2a2/0x360 [ 2110.208293][T15950] ? __sys_sendmsg+0x2a0/0x2a0 [ 2110.213083][T15950] ? ktime_get+0x7b/0x270 [ 2110.217457][T15950] __se_sys_sendmsg+0x1c3/0x2b0 [ 2110.222319][T15950] ? perf_trace_preemptirq_template+0x268/0x320 [ 2110.228568][T15950] ? __x64_sys_sendmsg+0x80/0x80 [ 2110.233528][T15950] ? lockdep_hardirqs_on+0x94/0x140 [ 2110.238734][T15950] do_syscall_64+0x4c/0xa0 [ 2110.243157][T15950] ? clear_bhb_loop+0x60/0xb0 [ 2110.247840][T15950] ? clear_bhb_loop+0x60/0xb0 [ 2110.252529][T15950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2110.258432][T15950] RIP: 0033:0x7f16c6ba94d9 [ 2110.262853][T15950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2110.282471][T15950] RSP: 002b:00007f16c7b44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2110.290898][T15950] RAX: ffffffffffffffda RBX: 00007f16c6e25fa0 RCX: 00007f16c6ba94d9 [ 2110.298876][T15950] RDX: 00000000000080d1 RSI: 00002000000002c0 RDI: 0000000000000006 [ 2110.306854][T15950] RBP: 00007f16c7b44090 R08: 0000000000000000 R09: 0000000000000000 [ 2110.314832][T15950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2110.322806][T15950] R13: 00007f16c6e26038 R14: 00007f16c6e25fa0 R15: 00007ffcf4eba788 [ 2110.330883][T15950] [ 2114.170508][T16009] device syzkaller0 entered promiscuous mode [ 2114.391616][T16028] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13729'. [ 2116.011305][T16026] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13728'. [ 2116.020694][T16028] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13729'. [ 2116.088995][T16019] device syzkaller0 entered promiscuous mode [ 2118.000866][T16047] device syzkaller0 entered promiscuous mode [ 2118.043207][T16059] validate_nla: 6 callbacks suppressed [ 2118.043221][T16059] netlink: 'syz.0.13736': attribute type 29 has an invalid length. [ 2118.084903][T16059] netlink: 'syz.0.13736': attribute type 3 has an invalid length. [ 2118.109687][T16059] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13736'. [ 2118.145999][T16059] FAULT_INJECTION: forcing a failure. [ 2118.145999][T16059] name failslab, interval 1, probability 0, space 0, times 0 [ 2118.177859][T16059] CPU: 0 PID: 16059 Comm: syz.0.13736 Not tainted syzkaller #0 [ 2118.185442][T16059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2118.195501][T16059] Call Trace: [ 2118.198786][T16059] [ 2118.201736][T16059] dump_stack_lvl+0x188/0x24e [ 2118.206438][T16059] ? show_regs_print_info+0x12/0x12 [ 2118.211655][T16059] ? load_image+0x410/0x410 [ 2118.216176][T16059] ? __might_sleep+0xd0/0xd0 [ 2118.220778][T16059] ? __lock_acquire+0x7ea0/0x7ea0 [ 2118.225836][T16059] should_fail_ex+0x390/0x4c0 [ 2118.230532][T16059] should_failslab+0x5/0x20 [ 2118.235044][T16059] slab_pre_alloc_hook+0x59/0x300 [ 2118.240072][T16059] kmem_cache_alloc_node+0x5a/0x310 [ 2118.245264][T16059] ? __alloc_skb+0xf9/0x7d0 [ 2118.249768][T16059] __alloc_skb+0xf9/0x7d0 [ 2118.254094][T16059] inet_rtm_getroute+0x7fb/0x2730 [ 2118.259118][T16059] ? ip_rt_multicast_event+0x80/0x80 [ 2118.264390][T16059] ? kasan_save_free_info+0x27/0x40 [ 2118.269607][T16059] ? __lock_acquire+0x7ea0/0x7ea0 [ 2118.274629][T16059] ? ip_rt_multicast_event+0x80/0x80 [ 2118.279905][T16059] ? ip_rt_multicast_event+0x80/0x80 [ 2118.285202][T16059] rtnetlink_rcv_msg+0x8b2/0xfb0 [ 2118.290136][T16059] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 2118.295243][T16059] ? rtnetlink_bind+0x80/0x80 [ 2118.299913][T16059] ? __local_bh_enable_ip+0x136/0x1c0 [ 2118.305313][T16059] ? lockdep_hardirqs_on+0x94/0x140 [ 2118.310504][T16059] ? __local_bh_enable_ip+0x136/0x1c0 [ 2118.315866][T16059] ? _local_bh_enable+0xa0/0xa0 [ 2118.320708][T16059] ? __dev_queue_xmit+0x274/0x3a70 [ 2118.325811][T16059] ? __dev_queue_xmit+0x274/0x3a70 [ 2118.330911][T16059] ? __dev_queue_xmit+0x1496/0x3a70 [ 2118.336102][T16059] ? __dev_queue_xmit+0x274/0x3a70 [ 2118.341207][T16059] ? ref_tracker_free+0x682/0x830 [ 2118.346223][T16059] ? refcount_inc+0x70/0x70 [ 2118.350714][T16059] ? memcpy+0x3c/0x60 [ 2118.354685][T16059] ? __copy_skb_header+0x3ba/0x4f0 [ 2118.359796][T16059] ? __skb_clone+0x446/0x6c0 [ 2118.364380][T16059] netlink_rcv_skb+0x1ef/0x440 [ 2118.369138][T16059] ? rtnetlink_bind+0x80/0x80 [ 2118.373813][T16059] ? netlink_ack+0x1160/0x1160 [ 2118.378574][T16059] ? netlink_deliver_tap+0x2e/0x1b0 [ 2118.383771][T16059] netlink_unicast+0x7ad/0x920 [ 2118.388540][T16059] netlink_sendmsg+0x8ad/0xbd0 [ 2118.393305][T16059] ? netlink_getsockopt+0x550/0x550 [ 2118.398499][T16059] ? apparmor_socket_sendmsg+0x16c/0x330 [ 2118.404125][T16059] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2118.409416][T16059] ? security_socket_sendmsg+0x7c/0xa0 [ 2118.414865][T16059] ? netlink_getsockopt+0x550/0x550 [ 2118.420057][T16059] ____sys_sendmsg+0x5ed/0x9a0 [ 2118.424819][T16059] ? __sys_sendmsg_sock+0x30/0x30 [ 2118.429831][T16059] ? __import_iovec+0x306/0x510 [ 2118.434679][T16059] ? import_iovec+0x6f/0xa0 [ 2118.439178][T16059] ___sys_sendmsg+0x2a2/0x360 [ 2118.443848][T16059] ? __sys_sendmsg+0x2a0/0x2a0 [ 2118.448613][T16059] ? __lock_acquire+0x7ea0/0x7ea0 [ 2118.453650][T16059] __se_sys_sendmsg+0x1c3/0x2b0 [ 2118.458494][T16059] ? __x64_sys_sendmsg+0x80/0x80 [ 2118.463434][T16059] ? lockdep_hardirqs_on+0x94/0x140 [ 2118.468625][T16059] do_syscall_64+0x4c/0xa0 [ 2118.473037][T16059] ? clear_bhb_loop+0x60/0xb0 [ 2118.477709][T16059] ? clear_bhb_loop+0x60/0xb0 [ 2118.482385][T16059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2118.488270][T16059] RIP: 0033:0x7f34cfda94d9 [ 2118.492702][T16059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2118.512302][T16059] RSP: 002b:00007f34d0cb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2118.520704][T16059] RAX: ffffffffffffffda RBX: 00007f34d0025fa0 RCX: 00007f34cfda94d9 [ 2118.528664][T16059] RDX: 0000000020000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 2118.536626][T16059] RBP: 00007f34d0cb0090 R08: 0000000000000000 R09: 0000000000000000 [ 2118.544588][T16059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2118.552551][T16059] R13: 00007f34d0026038 R14: 00007f34d0025fa0 R15: 00007fffeeba14b8 [ 2118.560523][T16059] [ 2119.775000][T16107] FAULT_INJECTION: forcing a failure. [ 2119.775000][T16107] name failslab, interval 1, probability 0, space 0, times 0 [ 2119.788017][T16107] CPU: 0 PID: 16107 Comm: syz.0.13748 Not tainted syzkaller #0 [ 2119.795591][T16107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2119.805831][T16107] Call Trace: [ 2119.809101][T16107] [ 2119.812031][T16107] dump_stack_lvl+0x188/0x24e [ 2119.816732][T16107] ? show_regs_print_info+0x12/0x12 [ 2119.821932][T16107] ? load_image+0x410/0x410 [ 2119.826446][T16107] ? __might_sleep+0xd0/0xd0 [ 2119.831042][T16107] ? __lock_acquire+0x7ea0/0x7ea0 [ 2119.836065][T16107] ? lock_chain_count+0x20/0x20 [ 2119.840946][T16107] should_fail_ex+0x390/0x4c0 [ 2119.845638][T16107] should_failslab+0x5/0x20 [ 2119.850141][T16107] slab_pre_alloc_hook+0x59/0x300 [ 2119.855160][T16107] ? lock_chain_count+0x20/0x20 [ 2119.860028][T16107] ? __get_vm_area_node+0x122/0x330 [ 2119.865221][T16107] __kmem_cache_alloc_node+0x4f/0x270 [ 2119.870586][T16107] ? __get_vm_area_node+0x122/0x330 [ 2119.875781][T16107] kmalloc_node_trace+0x22/0xe0 [ 2119.880642][T16107] __get_vm_area_node+0x122/0x330 [ 2119.885671][T16107] __vmalloc_node_range+0x357/0x1380 [ 2119.890954][T16107] ? netlink_sendmsg+0x5ec/0xbd0 [ 2119.895912][T16107] ? free_vm_area+0x50/0x50 [ 2119.900414][T16107] ? netlink_sendmsg+0x5ec/0xbd0 [ 2119.905345][T16107] vmalloc+0x75/0x80 [ 2119.909234][T16107] ? netlink_sendmsg+0x5ec/0xbd0 [ 2119.914173][T16107] netlink_sendmsg+0x5ec/0xbd0 [ 2119.918942][T16107] ? netlink_getsockopt+0x550/0x550 [ 2119.924137][T16107] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2119.929683][T16107] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2119.934966][T16107] ? security_socket_sendmsg+0x7c/0xa0 [ 2119.940416][T16107] ? netlink_getsockopt+0x550/0x550 [ 2119.945612][T16107] ____sys_sendmsg+0x5ed/0x9a0 [ 2119.950402][T16107] ? __sys_sendmsg_sock+0x30/0x30 [ 2119.955420][T16107] ? __import_iovec+0x306/0x510 [ 2119.960274][T16107] ? import_iovec+0x6f/0xa0 [ 2119.964775][T16107] ___sys_sendmsg+0x2a2/0x360 [ 2119.969451][T16107] ? __sys_sendmsg+0x2a0/0x2a0 [ 2119.974226][T16107] ? __lock_acquire+0x7ea0/0x7ea0 [ 2119.979266][T16107] __se_sys_sendmsg+0x1c3/0x2b0 [ 2119.984112][T16107] ? __x64_sys_sendmsg+0x80/0x80 [ 2119.989063][T16107] ? lockdep_hardirqs_on+0x94/0x140 [ 2119.994262][T16107] do_syscall_64+0x4c/0xa0 [ 2119.998696][T16107] ? clear_bhb_loop+0x60/0xb0 [ 2120.003366][T16107] ? clear_bhb_loop+0x60/0xb0 [ 2120.008039][T16107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2120.013928][T16107] RIP: 0033:0x7f34cfda94d9 [ 2120.018336][T16107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2120.037932][T16107] RSP: 002b:00007f34d0cb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2120.046338][T16107] RAX: ffffffffffffffda RBX: 00007f34d0025fa0 RCX: 00007f34cfda94d9 [ 2120.054302][T16107] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 2120.062264][T16107] RBP: 00007f34d0cb0090 R08: 0000000000000000 R09: 0000000000000000 [ 2120.070222][T16107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2120.078184][T16107] R13: 00007f34d0026038 R14: 00007f34d0025fa0 R15: 00007fffeeba14b8 [ 2120.086178][T16107] [ 2120.103908][T16107] syz.0.13748: vmalloc error: size 65088, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 2120.125691][T16107] CPU: 0 PID: 16107 Comm: syz.0.13748 Not tainted syzkaller #0 [ 2120.133256][T16107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2120.143298][T16107] Call Trace: [ 2120.146580][T16107] [ 2120.149499][T16107] dump_stack_lvl+0x188/0x24e [ 2120.154166][T16107] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2120.160565][T16107] ? show_regs_print_info+0x12/0x12 [ 2120.165750][T16107] ? load_image+0x410/0x410 [ 2120.170242][T16107] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2120.176644][T16107] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 2120.183139][T16107] warn_alloc+0x242/0x330 [ 2120.187461][T16107] ? __get_vm_area_node+0x122/0x330 [ 2120.192674][T16107] ? zone_watermark_ok_safe+0x270/0x270 [ 2120.198222][T16107] ? rcu_is_watching+0x11/0xa0 [ 2120.202992][T16107] ? __get_vm_area_node+0x318/0x330 [ 2120.208179][T16107] __vmalloc_node_range+0x37c/0x1380 [ 2120.213465][T16107] ? free_vm_area+0x50/0x50 [ 2120.217959][T16107] ? netlink_sendmsg+0x5ec/0xbd0 [ 2120.222891][T16107] vmalloc+0x75/0x80 [ 2120.226788][T16107] ? netlink_sendmsg+0x5ec/0xbd0 [ 2120.231721][T16107] netlink_sendmsg+0x5ec/0xbd0 [ 2120.236488][T16107] ? netlink_getsockopt+0x550/0x550 [ 2120.241682][T16107] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2120.247219][T16107] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2120.252495][T16107] ? security_socket_sendmsg+0x7c/0xa0 [ 2120.257943][T16107] ? netlink_getsockopt+0x550/0x550 [ 2120.263137][T16107] ____sys_sendmsg+0x5ed/0x9a0 [ 2120.267907][T16107] ? __sys_sendmsg_sock+0x30/0x30 [ 2120.272923][T16107] ? __import_iovec+0x306/0x510 [ 2120.277778][T16107] ? import_iovec+0x6f/0xa0 [ 2120.282278][T16107] ___sys_sendmsg+0x2a2/0x360 [ 2120.286955][T16107] ? __sys_sendmsg+0x2a0/0x2a0 [ 2120.291737][T16107] ? __lock_acquire+0x7ea0/0x7ea0 [ 2120.296780][T16107] __se_sys_sendmsg+0x1c3/0x2b0 [ 2120.301625][T16107] ? __x64_sys_sendmsg+0x80/0x80 [ 2120.306571][T16107] ? lockdep_hardirqs_on+0x94/0x140 [ 2120.311762][T16107] do_syscall_64+0x4c/0xa0 [ 2120.316174][T16107] ? clear_bhb_loop+0x60/0xb0 [ 2120.320844][T16107] ? clear_bhb_loop+0x60/0xb0 [ 2120.325532][T16107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2120.331417][T16107] RIP: 0033:0x7f34cfda94d9 [ 2120.335825][T16107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2120.355422][T16107] RSP: 002b:00007f34d0cb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2120.363825][T16107] RAX: ffffffffffffffda RBX: 00007f34d0025fa0 RCX: 00007f34cfda94d9 [ 2120.371785][T16107] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 2120.379746][T16107] RBP: 00007f34d0cb0090 R08: 0000000000000000 R09: 0000000000000000 [ 2120.387731][T16107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2120.395691][T16107] R13: 00007f34d0026038 R14: 00007f34d0025fa0 R15: 00007fffeeba14b8 [ 2120.403671][T16107] [ 2120.424150][T16107] Mem-Info: [ 2120.428629][T16107] active_anon:10488 inactive_anon:0 isolated_anon:0 [ 2120.428629][T16107] active_file:27135 inactive_file:40778 isolated_file:0 [ 2120.428629][T16107] unevictable:768 dirty:142 writeback:0 [ 2120.428629][T16107] slab_reclaimable:22127 slab_unreclaimable:101984 [ 2120.428629][T16107] mapped:38593 shmem:1364 pagetables:655 [ 2120.428629][T16107] sec_pagetables:0 bounce:0 [ 2120.428629][T16107] kernel_misc_reclaimable:0 [ 2120.428629][T16107] free:1291793 free_pcp:7382 free_cma:0 [ 2120.482621][T16107] Node 0 active_anon:41952kB inactive_anon:0kB active_file:108540kB inactive_file:162912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:154372kB dirty:568kB writeback:0kB shmem:3920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11204kB pagetables:2620kB sec_pagetables:0kB all_unreclaimable? no [ 2120.515732][T16107] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2120.546732][T16107] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2120.573985][T16107] lowmem_reserve[]: 0 2509 2510 2510 2510 [ 2120.579897][T16107] Node 0 DMA32 free:1245504kB boost:0kB min:34540kB low:43172kB high:51804kB reserved_highatomic:0KB active_anon:41952kB inactive_anon:0kB active_file:108540kB inactive_file:162912kB unevictable:1536kB writepending:568kB present:3129332kB managed:2574604kB mlocked:0kB bounce:0kB free_pcp:8880kB local_pcp:3612kB free_cma:0kB [ 2120.610555][T16107] lowmem_reserve[]: 0 0 1 1 1 [ 2120.615364][T16107] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2120.642948][T16107] lowmem_reserve[]: 0 0 0 0 0 [ 2120.647677][T16107] Node 1 Normal free:3906308kB boost:0kB min:55344kB low:69180kB high:83016kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20868kB local_pcp:11744kB free_cma:0kB [ 2120.677527][T16107] lowmem_reserve[]: 0 0 0 0 0 [ 2120.682640][T16107] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2120.695468][T16107] Node 0 DMA32: 4552*4kB (UME) 2734*8kB (UME) 2463*16kB (UME) 2184*32kB (UME) 1973*64kB (UME) 971*128kB (UME) 459*256kB (UME) 382*512kB (UME) 208*1024kB (UME) 14*2048kB (UME) 71*4096kB (M) = 1245504kB [ 2120.715289][T16107] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2120.726898][T16107] Node 1 Normal: 185*4kB (UME) 60*8kB (UME) 36*16kB (UME) 32*32kB (UE) 16*64kB (UME) 10*128kB (UME) 3*256kB (UM) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 951*4096kB (M) = 3906308kB [ 2120.744980][T16107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2120.754598][T16107] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2120.764412][T16107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2120.774034][T16107] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2120.783457][T16107] 69277 total pagecache pages [ 2120.788226][T16107] 0 pages in swap cache [ 2120.792460][T16107] Free swap = 124728kB [ 2120.796625][T16107] Total swap = 124996kB [ 2120.800783][T16107] 2097051 pages RAM [ 2120.804699][T16107] 0 pages HighMem/MovableOnly [ 2120.809374][T16107] 419799 pages reserved [ 2120.813567][T16107] 0 pages cma reserved [ 2122.208051][T16122] netlink: 196 bytes leftover after parsing attributes in process `syz.4.13753'. [ 2122.231885][T16127] netlink: 'syz.0.13754': attribute type 10 has an invalid length. [ 2122.255665][T16127] netlink: 2 bytes leftover after parsing attributes in process `syz.0.13754'. [ 2123.288633][T16166] netlink: 131088 bytes leftover after parsing attributes in process `syz.4.13769'. [ 2124.687027][T16169] netlink: 'syz.1.13770': attribute type 11 has an invalid length. [ 2124.702038][T16169] netlink: 130876 bytes leftover after parsing attributes in process `syz.1.13770'. [ 2124.915331][T16176] netlink: 'syz.2.13773': attribute type 16 has an invalid length. [ 2124.962070][T16176] netlink: 'syz.2.13773': attribute type 3 has an invalid length. [ 2125.050069][T16176] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13773'. [ 2125.169485][T16194] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13778'. [ 2126.310930][T16252] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.13798'. [ 2126.649243][T16274] netlink: 'syz.0.13805': attribute type 2 has an invalid length. [ 2126.662709][T16274] netlink: 'syz.0.13805': attribute type 4 has an invalid length. [ 2126.670778][T16274] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13805'. [ 2126.814723][T16279] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.13807'. [ 2126.877800][T16279] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.13807'. [ 2127.018493][T16287] netlink: 'syz.2.13810': attribute type 10 has an invalid length. [ 2127.067401][T16287] netlink: 'syz.2.13810': attribute type 10 has an invalid length. [ 2127.115052][T16287] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2127.148670][T16287] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2127.182530][T16287] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2127.238867][T16291] __nla_validate_parse: 1 callbacks suppressed [ 2127.238901][T16291] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.13812'. [ 2127.261995][T16287] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2127.291606][T16291] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 2127.509072][T16308] : port 1(gretap0) entered blocking state [ 2127.549381][T16317] netlink: 72 bytes leftover after parsing attributes in process `syz.4.13821'. [ 2127.558750][T16308] : port 1(gretap0) entered disabled state [ 2127.582122][T16308] device gretap0 entered promiscuous mode [ 2128.229281][T16338] netlink: 'syz.0.13829': attribute type 21 has an invalid length. [ 2128.259451][T16338] netlink: 'syz.0.13829': attribute type 1 has an invalid length. [ 2128.278891][T16340] netlink: 'syz.2.13831': attribute type 10 has an invalid length. [ 2128.290752][T16340] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13831'. [ 2128.474872][T16349] netlink: 188 bytes leftover after parsing attributes in process `syz.2.13836'. [ 2128.622375][T16357] netlink: 'syz.0.13839': attribute type 16 has an invalid length. [ 2128.649088][T16357] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13839'. [ 2128.715846][T16356] delete_channel: no stack [ 2128.956786][T16374] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.13844'. [ 2128.992664][T16374] bridge_slave_1: default FDB implementation only supports local addresses [ 2135.197196][T16406] validate_nla: 2 callbacks suppressed [ 2135.197212][T16406] netlink: 'syz.4.13854': attribute type 21 has an invalid length. [ 2135.211042][T16407] netlink: 'syz.0.13853': attribute type 12 has an invalid length. [ 2135.219228][T16407] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13853'. [ 2135.255750][T16444] device syzkaller0 entered promiscuous mode [ 2135.275959][T16444] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2135.613610][T16468] FAULT_INJECTION: forcing a failure. [ 2135.613610][T16468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2135.658346][T16468] CPU: 1 PID: 16468 Comm: syz.0.13871 Not tainted syzkaller #0 [ 2135.665931][T16468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2135.675998][T16468] Call Trace: [ 2135.679285][T16468] [ 2135.682229][T16468] dump_stack_lvl+0x188/0x24e [ 2135.686929][T16468] ? show_regs_print_info+0x12/0x12 [ 2135.692144][T16468] ? load_image+0x410/0x410 [ 2135.696664][T16468] ? __lock_acquire+0x7ea0/0x7ea0 [ 2135.701702][T16468] ? memcpy+0x3c/0x60 [ 2135.705699][T16468] should_fail_ex+0x390/0x4c0 [ 2135.710387][T16468] _copy_to_user+0x2c/0x130 [ 2135.714907][T16468] generic_map_lookup_batch+0x7cc/0xbf0 [ 2135.720482][T16468] ? bpf_map_update_value+0x670/0x670 [ 2135.725878][T16468] ? __fdget+0x17c/0x200 [ 2135.730135][T16468] ? bpf_map_update_value+0x670/0x670 [ 2135.735516][T16468] bpf_map_do_batch+0x2e0/0x5f0 [ 2135.740398][T16468] ? bpf_lsm_bpf+0x5/0x10 [ 2135.744738][T16468] ? security_bpf+0x7a/0xa0 [ 2135.749250][T16468] __sys_bpf+0x6f7/0x780 [ 2135.753493][T16468] ? bpf_link_show_fdinfo+0x550/0x550 [ 2135.758877][T16468] ? lock_chain_count+0x20/0x20 [ 2135.763731][T16468] __x64_sys_bpf+0x78/0x90 [ 2135.768139][T16468] do_syscall_64+0x4c/0xa0 [ 2135.772557][T16468] ? clear_bhb_loop+0x60/0xb0 [ 2135.777224][T16468] ? clear_bhb_loop+0x60/0xb0 [ 2135.781893][T16468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2135.787787][T16468] RIP: 0033:0x7f34cfda94d9 [ 2135.792193][T16468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2135.811792][T16468] RSP: 002b:00007f34d0cb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2135.820197][T16468] RAX: ffffffffffffffda RBX: 00007f34d0025fa0 RCX: 00007f34cfda94d9 [ 2135.828159][T16468] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 0000000000000018 [ 2135.836115][T16468] RBP: 00007f34d0cb0090 R08: 0000000000000000 R09: 0000000000000000 [ 2135.844074][T16468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2135.852037][T16468] R13: 00007f34d0026038 R14: 00007f34d0025fa0 R15: 00007fffeeba14b8 [ 2135.860010][T16468] [ 2135.938746][T16478] netlink: 'syz.4.13875': attribute type 12 has an invalid length. [ 2135.975222][T16478] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13875'. [ 2136.125320][T16491] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.13878'. [ 2136.168606][T16491] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 2139.029409][T16505] rxe_eth0 speed is unknown, defaulting to 1000 [ 2139.029526][T16515] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2139.048609][T16515] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2139.058559][T16515] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2139.265841][T16520] device vcan0 entered promiscuous mode [ 2139.282833][T16520] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2139.364082][T16529] netlink: 'syz.1.13891': attribute type 12 has an invalid length. [ 2139.386974][T16529] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13891'. [ 2139.424457][T16528] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.13892'. [ 2140.474588][T16567] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.13904'. [ 2140.477119][T16568] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.13904'. [ 2141.981626][T16556] netlink: 'syz.4.13901': attribute type 10 has an invalid length. [ 2141.989777][T16556] netlink: 55 bytes leftover after parsing attributes in process `syz.4.13901'. [ 2142.003654][T16562] netlink: 'syz.0.13900': attribute type 10 has an invalid length. [ 2142.156636][T16573] netlink: 'syz.1.13905': attribute type 19 has an invalid length. [ 2142.179471][T16575] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13906'. [ 2142.216491][T16575] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13906'. [ 2142.232248][T16579] netlink: 'syz.4.13907': attribute type 10 has an invalid length. [ 2142.250844][T16579] netlink: 2 bytes leftover after parsing attributes in process `syz.4.13907'. [ 2142.288721][T16580] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13906'. [ 2142.466256][T16587] netlink: 'syz.3.13912': attribute type 5 has an invalid length. [ 2142.498811][T16587] netlink: 156 bytes leftover after parsing attributes in process `syz.3.13912'. [ 2142.797024][T16601] FAULT_INJECTION: forcing a failure. [ 2142.797024][T16601] name failslab, interval 1, probability 0, space 0, times 0 [ 2142.836097][T16601] CPU: 1 PID: 16601 Comm: syz.2.13918 Not tainted syzkaller #0 [ 2142.843686][T16601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2142.853754][T16601] Call Trace: [ 2142.857043][T16601] [ 2142.859983][T16601] dump_stack_lvl+0x188/0x24e [ 2142.864683][T16601] ? show_regs_print_info+0x12/0x12 [ 2142.869893][T16601] ? load_image+0x410/0x410 [ 2142.874413][T16601] ? __might_sleep+0xd0/0xd0 [ 2142.879018][T16601] ? __lock_acquire+0x7ea0/0x7ea0 [ 2142.884068][T16601] ? perf_trace_lock_acquire+0x101/0x3f0 [ 2142.889717][T16601] should_fail_ex+0x390/0x4c0 [ 2142.894409][T16601] should_failslab+0x5/0x20 [ 2142.898924][T16601] slab_pre_alloc_hook+0x59/0x300 [ 2142.903965][T16601] ? fib_nl2rule+0x330/0x1bb0 [ 2142.908666][T16601] __kmem_cache_alloc_node+0x4f/0x270 [ 2142.914064][T16601] ? fib_nl2rule+0x330/0x1bb0 [ 2142.918751][T16601] __kmalloc+0xa3/0x240 [ 2142.922920][T16601] fib_nl2rule+0x330/0x1bb0 [ 2142.927437][T16601] ? __lock_acquire+0x7ea0/0x7ea0 [ 2142.932477][T16601] ? lockdep_hardirqs_on+0x94/0x140 [ 2142.937690][T16601] ? fib_nl_newrule+0x1e40/0x1e40 [ 2142.942724][T16601] ? __nla_parse+0x3c/0x50 [ 2142.947142][T16601] fib_nl_delrule+0x35f/0x1ca0 [ 2142.951914][T16601] ? __mutex_lock+0x84e/0xb40 [ 2142.956592][T16601] ? __lock_acquire+0x7ea0/0x7ea0 [ 2142.961614][T16601] ? do_raw_spin_lock+0x128/0x2f0 [ 2142.966635][T16601] ? notify_rule_change+0x210/0x210 [ 2142.971824][T16601] ? do_raw_spin_unlock+0x11d/0x230 [ 2142.977040][T16601] ? notify_rule_change+0x210/0x210 [ 2142.982231][T16601] rtnetlink_rcv_msg+0x863/0xfb0 [ 2142.987165][T16601] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 2142.992271][T16601] ? rtnetlink_bind+0x80/0x80 [ 2142.996939][T16601] ? __local_bh_enable_ip+0x136/0x1c0 [ 2143.002308][T16601] ? lockdep_hardirqs_on+0x94/0x140 [ 2143.007496][T16601] ? __local_bh_enable_ip+0x136/0x1c0 [ 2143.012858][T16601] ? _local_bh_enable+0xa0/0xa0 [ 2143.017700][T16601] ? __dev_queue_xmit+0x274/0x3a70 [ 2143.022820][T16601] ? __dev_queue_xmit+0x274/0x3a70 [ 2143.027917][T16601] ? __dev_queue_xmit+0x1496/0x3a70 [ 2143.033106][T16601] ? __dev_queue_xmit+0x274/0x3a70 [ 2143.038211][T16601] ? ref_tracker_free+0x682/0x830 [ 2143.043226][T16601] ? refcount_inc+0x70/0x70 [ 2143.047715][T16601] ? memcpy+0x3c/0x60 [ 2143.051691][T16601] ? __copy_skb_header+0x3ba/0x4f0 [ 2143.056807][T16601] ? __skb_clone+0x446/0x6c0 [ 2143.061391][T16601] netlink_rcv_skb+0x1ef/0x440 [ 2143.066147][T16601] ? rtnetlink_bind+0x80/0x80 [ 2143.070818][T16601] ? netlink_ack+0x1160/0x1160 [ 2143.075580][T16601] ? netlink_deliver_tap+0x2e/0x1b0 [ 2143.080787][T16601] netlink_unicast+0x7ad/0x920 [ 2143.085556][T16601] netlink_sendmsg+0x8ad/0xbd0 [ 2143.090318][T16601] ? netlink_getsockopt+0x550/0x550 [ 2143.095507][T16601] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2143.101051][T16601] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2143.106321][T16601] ? security_socket_sendmsg+0x7c/0xa0 [ 2143.111766][T16601] ? netlink_getsockopt+0x550/0x550 [ 2143.116957][T16601] ____sys_sendmsg+0x5ed/0x9a0 [ 2143.121717][T16601] ? __sys_sendmsg_sock+0x30/0x30 [ 2143.126730][T16601] ? __import_iovec+0x306/0x510 [ 2143.131594][T16601] ? import_iovec+0x6f/0xa0 [ 2143.136091][T16601] ___sys_sendmsg+0x2a2/0x360 [ 2143.140756][T16601] ? migrate_enable+0x148/0x220 [ 2143.145602][T16601] ? __sys_sendmsg+0x2a0/0x2a0 [ 2143.150392][T16601] __se_sys_sendmsg+0x1c3/0x2b0 [ 2143.155236][T16601] ? __x64_sys_sendmsg+0x80/0x80 [ 2143.160177][T16601] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2143.166071][T16601] do_syscall_64+0x4c/0xa0 [ 2143.170481][T16601] ? clear_bhb_loop+0x60/0xb0 [ 2143.175148][T16601] ? clear_bhb_loop+0x60/0xb0 [ 2143.179817][T16601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2143.185702][T16601] RIP: 0033:0x7ff60dba94d9 [ 2143.190111][T16601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2143.209705][T16601] RSP: 002b:00007ff60e990028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2143.218110][T16601] RAX: ffffffffffffffda RBX: 00007ff60de25fa0 RCX: 00007ff60dba94d9 [ 2143.226068][T16601] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009 [ 2143.234029][T16601] RBP: 00007ff60e990090 R08: 0000000000000000 R09: 0000000000000000 [ 2143.241993][T16601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2143.249952][T16601] R13: 00007ff60de26038 R14: 00007ff60de25fa0 R15: 00007ffc7d811828 [ 2143.257938][T16601] [ 2143.823067][T16638] netlink: 'syz.0.13928': attribute type 11 has an invalid length. [ 2143.831013][T16638] netlink: 130876 bytes leftover after parsing attributes in process `syz.0.13928'. [ 2145.720949][T16629] netlink: 'syz.3.13924': attribute type 10 has an invalid length. [ 2145.770797][T16629] team0 (unregistering): Port device team_slave_0 removed [ 2145.788203][T16629] team0 (unregistering): Port device team_slave_1 removed [ 2145.818042][T16638] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2145.837864][T16638] CPU: 0 PID: 16638 Comm: syz.0.13928 Not tainted syzkaller #0 [ 2145.845442][T16638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2145.855513][T16638] Call Trace: [ 2145.858802][T16638] [ 2145.861746][T16638] dump_stack_lvl+0x188/0x24e [ 2145.866430][T16638] ? show_regs_print_info+0x12/0x12 [ 2145.871629][T16638] ? load_image+0x410/0x410 [ 2145.876142][T16638] sysfs_warn_dup+0x8a/0xa0 [ 2145.880644][T16638] sysfs_do_create_link_sd+0xc0/0x110 [ 2145.886018][T16638] device_add+0x83b/0x1050 [ 2145.890438][T16638] wiphy_register+0x1f16/0x2c50 [ 2145.895306][T16638] ? cfg80211_event_work+0x40/0x40 [ 2145.900417][T16638] ? minstrel_ht_alloc+0x894/0xa20 [ 2145.905537][T16638] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2145.911599][T16638] ieee80211_register_hw+0x2e33/0x3b00 [ 2145.917070][T16638] ? ieee80211_register_hw+0xec1/0x3b00 [ 2145.922616][T16638] ? ieee80211_register_hw+0xec1/0x3b00 [ 2145.928171][T16638] ? ieee80211_tasklet_handler+0x20/0x20 [ 2145.933801][T16638] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2145.939714][T16638] ? __debug_object_init+0xed/0x440 [ 2145.944926][T16638] ? memset+0x1e/0x40 [ 2145.948913][T16638] ? __hrtimer_init+0x189/0x270 [ 2145.953764][T16638] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2145.959495][T16638] ? memcpy+0x3c/0x60 [ 2145.963475][T16638] hwsim_new_radio_nl+0xab7/0xc90 [ 2145.968508][T16638] genl_family_rcv_msg_doit+0x22f/0x350 [ 2145.974062][T16638] ? end_current_label_crit_section+0x170/0x170 [ 2145.980316][T16638] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2145.986224][T16638] ? bpf_lsm_capable+0x5/0x10 [ 2145.990898][T16638] ? security_capable+0x85/0xb0 [ 2145.995749][T16638] genl_rcv_msg+0x601/0x790 [ 2146.000260][T16638] ? genl_bind+0x360/0x360 [ 2146.004681][T16638] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2146.011027][T16638] netlink_rcv_skb+0x1ef/0x440 [ 2146.015787][T16638] ? genl_bind+0x360/0x360 [ 2146.020201][T16638] ? netlink_ack+0x1160/0x1160 [ 2146.024965][T16638] ? down_read+0x1a8/0x2d0 [ 2146.029375][T16638] genl_rcv+0x24/0x40 [ 2146.033350][T16638] netlink_unicast+0x7ad/0x920 [ 2146.038119][T16638] netlink_sendmsg+0x8ad/0xbd0 [ 2146.042882][T16638] ? netlink_getsockopt+0x550/0x550 [ 2146.048076][T16638] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2146.053615][T16638] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2146.058888][T16638] ? security_socket_sendmsg+0x7c/0xa0 [ 2146.064358][T16638] ? netlink_getsockopt+0x550/0x550 [ 2146.069553][T16638] ____sys_sendmsg+0x5ed/0x9a0 [ 2146.074321][T16638] ? __sys_sendmsg_sock+0x30/0x30 [ 2146.079334][T16638] ? __import_iovec+0x306/0x510 [ 2146.084182][T16638] ? import_iovec+0x6f/0xa0 [ 2146.088678][T16638] ___sys_sendmsg+0x2a2/0x360 [ 2146.093352][T16638] ? __sys_sendmsg+0x2a0/0x2a0 [ 2146.098146][T16638] __se_sys_sendmsg+0x1c3/0x2b0 [ 2146.102992][T16638] ? __x64_sys_sendmsg+0x80/0x80 [ 2146.107943][T16638] ? lockdep_hardirqs_on+0x94/0x140 [ 2146.113136][T16638] do_syscall_64+0x4c/0xa0 [ 2146.117565][T16638] ? clear_bhb_loop+0x60/0xb0 [ 2146.122238][T16638] ? clear_bhb_loop+0x60/0xb0 [ 2146.126923][T16638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2146.132807][T16638] RIP: 0033:0x7f34cfda94d9 [ 2146.137212][T16638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2146.156807][T16638] RSP: 002b:00007f34d0cb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2146.165208][T16638] RAX: ffffffffffffffda RBX: 00007f34d0025fa0 RCX: 00007f34cfda94d9 [ 2146.173173][T16638] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000003 [ 2146.181131][T16638] RBP: 00007f34cfe3804e R08: 0000000000000000 R09: 0000000000000000 [ 2146.189109][T16638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2146.197069][T16638] R13: 00007f34d0026038 R14: 00007f34d0025fa0 R15: 00007fffeeba14b8 [ 2146.205045][T16638] [ 2148.801836][T16705] netlink: 'syz.0.13947': attribute type 2 has an invalid length. [ 2148.811459][T16705] netlink: 'syz.0.13947': attribute type 4 has an invalid length. [ 2148.819373][T16705] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13947'. [ 2148.838791][T16733] netlink: 'syz.1.13955': attribute type 10 has an invalid length. [ 2148.873008][T16734] netlink: 'syz.1.13955': attribute type 10 has an invalid length. [ 2148.891462][T16734] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2148.931311][T16734] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2148.952094][T16734] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2148.990637][T16734] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2149.125083][T16750] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13961'. [ 2149.146423][T16750] bond0: (slave bond_slave_0): Releasing backup interface [ 2149.216832][T16750] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2153.231766][T16851] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13998'. [ 2153.266943][T16851] bond0: (slave bond_slave_0): Releasing backup interface [ 2153.306257][T16851] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2155.598253][T16874] netlink: 'syz.0.14005': attribute type 10 has an invalid length. [ 2155.606321][T16874] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14005'. [ 2155.615704][T16874] device batadv_slave_0 entered promiscuous mode [ 2155.623428][T16874] bond0: (slave batadv_slave_0): Releasing backup interface [ 2155.636365][T16874] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 2155.730007][T16897] device syzkaller0 entered promiscuous mode [ 2157.552494][T16919] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14016'. [ 2157.562893][T16919] bond0: (slave bond_slave_0): Releasing backup interface [ 2157.576648][T16919] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2157.978572][T16948] netlink: 'syz.1.14027': attribute type 21 has an invalid length. [ 2157.993087][T16949] netlink: 'syz.1.14027': attribute type 21 has an invalid length. [ 2159.275759][T17004] FAULT_INJECTION: forcing a failure. [ 2159.275759][T17004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2159.299305][T17004] CPU: 0 PID: 17004 Comm: syz.1.14040 Not tainted syzkaller #0 [ 2159.306888][T17004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2159.316950][T17004] Call Trace: [ 2159.320237][T17004] [ 2159.323174][T17004] dump_stack_lvl+0x188/0x24e [ 2159.327879][T17004] ? show_regs_print_info+0x12/0x12 [ 2159.333095][T17004] ? load_image+0x410/0x410 [ 2159.337618][T17004] ? __lock_acquire+0x7ea0/0x7ea0 [ 2159.342663][T17004] should_fail_ex+0x390/0x4c0 [ 2159.347370][T17004] _copy_from_user+0x2c/0x170 [ 2159.352041][T17004] ___sys_sendmsg+0x1c3/0x360 [ 2159.356735][T17004] ? __sys_sendmsg+0x2a0/0x2a0 [ 2159.361527][T17004] ? ktime_get+0x7b/0x270 [ 2159.365894][T17004] __se_sys_sendmsg+0x1c3/0x2b0 [ 2159.370756][T17004] ? ct_nmi_exit+0x145/0x1c0 [ 2159.375361][T17004] ? __x64_sys_sendmsg+0x80/0x80 [ 2159.380325][T17004] ? lockdep_hardirqs_on+0x94/0x140 [ 2159.385538][T17004] do_syscall_64+0x4c/0xa0 [ 2159.389969][T17004] ? clear_bhb_loop+0x60/0xb0 [ 2159.394661][T17004] ? clear_bhb_loop+0x60/0xb0 [ 2159.399442][T17004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2159.405343][T17004] RIP: 0033:0x7f16c6ba94d9 [ 2159.409753][T17004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2159.429351][T17004] RSP: 002b:00007f16c7b23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2159.437756][T17004] RAX: ffffffffffffffda RBX: 00007f16c6e26090 RCX: 00007f16c6ba94d9 [ 2159.445715][T17004] RDX: 000000000404a880 RSI: 0000200000000200 RDI: 0000000000000005 [ 2159.453679][T17004] RBP: 00007f16c7b23090 R08: 0000000000000000 R09: 0000000000000000 [ 2159.461635][T17004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2159.469592][T17004] R13: 00007f16c6e26128 R14: 00007f16c6e26090 R15: 00007ffcf4eba788 [ 2159.477561][T17004] [ 2160.125727][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.132085][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2163.040402][T16990] netlink: 'syz.0.14037': attribute type 12 has an invalid length. [ 2163.049756][T16990] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14037'. [ 2163.068670][T17042] netlink: 'syz.1.14055': attribute type 21 has an invalid length. [ 2163.084614][T17042] netlink: 'syz.1.14055': attribute type 12 has an invalid length. [ 2163.109382][T17042] netlink: 'syz.1.14055': attribute type 13 has an invalid length. [ 2163.133316][T17042] netlink: 'syz.1.14055': attribute type 14 has an invalid length. [ 2163.141243][T17042] netlink: 'syz.1.14055': attribute type 15 has an invalid length. [ 2163.181978][T17042] netlink: 'syz.1.14055': attribute type 16 has an invalid length. [ 2163.210987][T17042] netlink: 12926 bytes leftover after parsing attributes in process `syz.1.14055'. [ 2163.717926][T17068] device syzkaller0 entered promiscuous mode [ 2163.738214][T17073] netlink: 72 bytes leftover after parsing attributes in process `syz.1.14066'. [ 2165.934892][T17088] device hsr0 entered promiscuous mode [ 2166.065696][T17094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14075'. [ 2166.195609][T17102] netlink: 'syz.2.14078': attribute type 9 has an invalid length. [ 2166.247111][T17102] netlink: 91632 bytes leftover after parsing attributes in process `syz.2.14078'. [ 2166.299496][T17107] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.14078'. [ 2166.302119][T17103] netlink: 'syz.2.14078': attribute type 9 has an invalid length. [ 2166.339691][T17107] netlink: zone id is out of range [ 2166.387834][T17107] netlink: zone id is out of range [ 2166.428118][T17106] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.14078'. [ 2166.429828][T17107] netlink: zone id is out of range [ 2166.482641][T17103] netlink: 91632 bytes leftover after parsing attributes in process `syz.2.14078'. [ 2166.510814][T17120] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.14084'. [ 2166.532475][T17106] netlink: zone id is out of range [ 2166.537817][T17106] netlink: zone id is out of range [ 2166.565060][T17107] netlink: del zone limit has 4 unknown bytes [ 2166.602877][T17106] netlink: zone id is out of range [ 2166.706280][T17106] netlink: del zone limit has 4 unknown bytes [ 2167.001118][T17130] device syzkaller0 entered promiscuous mode [ 2167.023268][T17132] netlink: 'syz.2.14089': attribute type 2 has an invalid length. [ 2167.040368][T17132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14089'. [ 2169.001361][T17146] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 2169.036508][T17154] __nla_validate_parse: 2 callbacks suppressed [ 2169.036523][T17154] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.14095'. [ 2169.077696][T17154] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2169.101156][T17154] CPU: 0 PID: 17154 Comm: syz.4.14095 Not tainted syzkaller #0 [ 2169.108748][T17154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2169.118814][T17154] Call Trace: [ 2169.122105][T17154] [ 2169.125046][T17154] dump_stack_lvl+0x188/0x24e [ 2169.129744][T17154] ? show_regs_print_info+0x12/0x12 [ 2169.134954][T17154] ? load_image+0x410/0x410 [ 2169.139451][T17154] sysfs_warn_dup+0x8a/0xa0 [ 2169.143939][T17154] sysfs_do_create_link_sd+0xc0/0x110 [ 2169.149295][T17154] device_add+0x83b/0x1050 [ 2169.153711][T17154] wiphy_register+0x1f16/0x2c50 [ 2169.158599][T17154] ? cfg80211_event_work+0x40/0x40 [ 2169.163732][T17154] ? minstrel_ht_alloc+0x894/0xa20 [ 2169.168872][T17154] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2169.174947][T17154] ieee80211_register_hw+0x2e33/0x3b00 [ 2169.180405][T17154] ? ieee80211_register_hw+0xec1/0x3b00 [ 2169.185937][T17154] ? ieee80211_register_hw+0xec1/0x3b00 [ 2169.191471][T17154] ? ieee80211_tasklet_handler+0x20/0x20 [ 2169.197090][T17154] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2169.202995][T17154] ? __debug_object_init+0xed/0x440 [ 2169.208222][T17154] ? memset+0x1e/0x40 [ 2169.212224][T17154] ? __hrtimer_init+0x189/0x270 [ 2169.217091][T17154] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2169.222842][T17154] ? memcpy+0x3c/0x60 [ 2169.226840][T17154] hwsim_new_radio_nl+0xab7/0xc90 [ 2169.231895][T17154] genl_family_rcv_msg_doit+0x22f/0x350 [ 2169.237457][T17154] ? end_current_label_crit_section+0x170/0x170 [ 2169.243707][T17154] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2169.249609][T17154] ? bpf_lsm_capable+0x5/0x10 [ 2169.254277][T17154] ? security_capable+0x85/0xb0 [ 2169.259126][T17154] genl_rcv_msg+0x601/0x790 [ 2169.263645][T17154] ? genl_bind+0x360/0x360 [ 2169.268076][T17154] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2169.274448][T17154] netlink_rcv_skb+0x1ef/0x440 [ 2169.279232][T17154] ? genl_bind+0x360/0x360 [ 2169.283668][T17154] ? netlink_ack+0x1160/0x1160 [ 2169.288455][T17154] ? down_read+0x1a8/0x2d0 [ 2169.292883][T17154] genl_rcv+0x24/0x40 [ 2169.296883][T17154] netlink_unicast+0x7ad/0x920 [ 2169.301675][T17154] netlink_sendmsg+0x8ad/0xbd0 [ 2169.306469][T17154] ? netlink_getsockopt+0x550/0x550 [ 2169.311686][T17154] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2169.317248][T17154] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2169.322542][T17154] ? security_socket_sendmsg+0x7c/0xa0 [ 2169.328012][T17154] ? netlink_getsockopt+0x550/0x550 [ 2169.333229][T17154] ____sys_sendmsg+0x5ed/0x9a0 [ 2169.338016][T17154] ? __sys_sendmsg_sock+0x30/0x30 [ 2169.343049][T17154] ? __import_iovec+0x306/0x510 [ 2169.347918][T17154] ? import_iovec+0x6f/0xa0 [ 2169.352439][T17154] ___sys_sendmsg+0x2a2/0x360 [ 2169.357141][T17154] ? __sys_sendmsg+0x2a0/0x2a0 [ 2169.361971][T17154] __se_sys_sendmsg+0x1c3/0x2b0 [ 2169.366841][T17154] ? __x64_sys_sendmsg+0x80/0x80 [ 2169.371807][T17154] ? lockdep_hardirqs_on+0x94/0x140 [ 2169.377023][T17154] do_syscall_64+0x4c/0xa0 [ 2169.381459][T17154] ? clear_bhb_loop+0x60/0xb0 [ 2169.386141][T17154] ? clear_bhb_loop+0x60/0xb0 [ 2169.390811][T17154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2169.396689][T17154] RIP: 0033:0x7f9dab7a94d9 [ 2169.401096][T17154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2169.420717][T17154] RSP: 002b:00007f9da99d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2169.429151][T17154] RAX: ffffffffffffffda RBX: 00007f9daba26540 RCX: 00007f9dab7a94d9 [ 2169.437122][T17154] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2169.445109][T17154] RBP: 00007f9dab83804e R08: 0000000000000000 R09: 0000000000000000 [ 2169.453089][T17154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2169.461076][T17154] R13: 00007f9daba265d8 R14: 00007f9daba26540 R15: 00007ffdee31dec8 [ 2169.469070][T17154] [ 2169.542104][T17177] validate_nla: 3 callbacks suppressed [ 2169.542121][T17177] netlink: 'syz.0.14103': attribute type 10 has an invalid length. [ 2169.707048][T17177] bond0: (slave bridge_slave_1): Releasing backup interface [ 2169.860553][T17201] netlink: 'syz.3.14112': attribute type 10 has an invalid length. [ 2169.873068][T17201] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14112'. [ 2170.010117][T17210] netlink: 'syz.2.14115': attribute type 2 has an invalid length. [ 2170.061988][T17210] netlink: 'syz.2.14115': attribute type 4 has an invalid length. [ 2170.069847][T17210] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14115'. [ 2170.100588][T17213] rxe_eth0 speed is unknown, defaulting to 1000 [ 2170.148479][T17215] netlink: 'syz.4.14118': attribute type 10 has an invalid length. [ 2170.207429][T17215] netlink: 'syz.4.14118': attribute type 10 has an invalid length. [ 2170.225761][T17215] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2170.251993][T17215] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2170.278327][T17215] hsr0: mtu greater than device maximum [ 2170.284606][T17226] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2170.302009][T17215] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2170.655136][T17243] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14126'. [ 2171.657195][T17257] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.14131'. [ 2172.475371][T17237] netlink: 'syz.1.14126': attribute type 5 has an invalid length. [ 2172.521855][T17251] netlink: 'syz.3.14129': attribute type 2 has an invalid length. [ 2172.530580][T17251] netlink: 'syz.3.14129': attribute type 8 has an invalid length. [ 2172.546672][T17251] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14129'. [ 2172.557793][T17252] netlink: 'syz.3.14129': attribute type 2 has an invalid length. [ 2172.566524][T17252] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14129'. [ 2172.583170][T17257] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2176.266551][T17314] validate_nla: 3 callbacks suppressed [ 2176.266585][T17314] netlink: 'syz.4.14145': attribute type 2 has an invalid length. [ 2176.288858][T17314] netlink: 'syz.4.14145': attribute type 8 has an invalid length. [ 2176.307505][T17314] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14145'. [ 2176.324404][T17318] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14147'. [ 2176.341712][T17321] netlink: 'syz.4.14145': attribute type 2 has an invalid length. [ 2176.375251][T17321] netlink: 'syz.4.14145': attribute type 8 has an invalid length. [ 2176.383946][T17321] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14145'. [ 2176.700383][T17340] netlink: 'syz.1.14156': attribute type 29 has an invalid length. [ 2178.716222][T17383] FAULT_INJECTION: forcing a failure. [ 2178.716222][T17383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2178.733097][T17383] CPU: 0 PID: 17383 Comm: syz.4.14161 Not tainted syzkaller #0 [ 2178.740661][T17383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2178.750712][T17383] Call Trace: [ 2178.753973][T17383] [ 2178.756883][T17383] dump_stack_lvl+0x188/0x24e [ 2178.761550][T17383] ? show_regs_print_info+0x12/0x12 [ 2178.766735][T17383] ? load_image+0x410/0x410 [ 2178.771223][T17383] ? __lock_acquire+0x7ea0/0x7ea0 [ 2178.776233][T17383] ? memcpy+0x3c/0x60 [ 2178.780198][T17383] should_fail_ex+0x390/0x4c0 [ 2178.784862][T17383] _copy_to_user+0x2c/0x130 [ 2178.789616][T17383] generic_map_lookup_batch+0x7cc/0xbf0 [ 2178.795171][T17383] ? bpf_map_update_value+0x670/0x670 [ 2178.800532][T17383] ? __fdget+0x17c/0x200 [ 2178.804799][T17383] ? bpf_map_update_value+0x670/0x670 [ 2178.810153][T17383] bpf_map_do_batch+0x2e0/0x5f0 [ 2178.814988][T17383] ? bpf_lsm_bpf+0x5/0x10 [ 2178.819299][T17383] ? security_bpf+0x7a/0xa0 [ 2178.823785][T17383] __sys_bpf+0x6f7/0x780 [ 2178.828009][T17383] ? bpf_link_show_fdinfo+0x550/0x550 [ 2178.833371][T17383] ? lock_chain_count+0x20/0x20 [ 2178.838208][T17383] __x64_sys_bpf+0x78/0x90 [ 2178.842620][T17383] do_syscall_64+0x4c/0xa0 [ 2178.847029][T17383] ? clear_bhb_loop+0x60/0xb0 [ 2178.851690][T17383] ? clear_bhb_loop+0x60/0xb0 [ 2178.856351][T17383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2178.862232][T17383] RIP: 0033:0x7f9dab7a94d9 [ 2178.866624][T17383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2178.886211][T17383] RSP: 002b:00007f9dac622028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2178.894629][T17383] RAX: ffffffffffffffda RBX: 00007f9daba25fa0 RCX: 00007f9dab7a94d9 [ 2178.902603][T17383] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 0000000000000018 [ 2178.910555][T17383] RBP: 00007f9dac622090 R08: 0000000000000000 R09: 0000000000000000 [ 2178.918504][T17383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2178.926456][T17383] R13: 00007f9daba26038 R14: 00007f9daba25fa0 R15: 00007ffdee31dec8 [ 2178.934424][T17383] [ 2179.024195][T17336] device veth1_macvtap left promiscuous mode [ 2179.034849][T17340] netlink: 'syz.1.14156': attribute type 29 has an invalid length. [ 2179.340922][T17392] device syzkaller0 entered promiscuous mode [ 2179.523906][T17401] device syzkaller0 entered promiscuous mode [ 2181.322374][T17405] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2181.334983][T17405] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2181.345592][T17405] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2181.645802][T17432] netlink: 'syz.4.14177': attribute type 29 has an invalid length. [ 2183.027884][T17432] netlink: 'syz.4.14177': attribute type 29 has an invalid length. [ 2183.666914][T17465] netlink: 'syz.1.14184': attribute type 10 has an invalid length. [ 2183.855981][T17472] netlink: 'syz.4.14187': attribute type 12 has an invalid length. [ 2183.914305][T17472] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14187'. [ 2184.179030][T17484] netlink: 'syz.2.14190': attribute type 19 has an invalid length. [ 2184.207316][T17483] netlink: 'syz.0.14189': attribute type 29 has an invalid length. [ 2184.238271][T17483] netlink: 'syz.0.14189': attribute type 29 has an invalid length. [ 2184.285879][T17483] netlink: 'syz.0.14189': attribute type 29 has an invalid length. [ 2184.309698][T17483] netlink: 'syz.0.14189': attribute type 29 has an invalid length. [ 2184.359581][T17483] netlink: 'syz.0.14189': attribute type 29 has an invalid length. [ 2186.620452][T17521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14200'. [ 2186.667480][T17521] device batadv_slave_0 entered promiscuous mode [ 2186.736503][T17521] net_ratelimit: 1 callbacks suppressed [ 2186.737446][T17521] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 2186.839498][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2187.388941][T17556] FAULT_INJECTION: forcing a failure. [ 2187.388941][T17556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2187.422077][T17556] CPU: 0 PID: 17556 Comm: syz.2.14212 Not tainted syzkaller #0 [ 2187.422180][T17559] validate_nla: 3 callbacks suppressed [ 2187.422195][T17559] netlink: 'syz.0.14213': attribute type 21 has an invalid length. [ 2187.429640][T17556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2187.429651][T17556] Call Trace: [ 2187.429658][T17556] [ 2187.429665][T17556] dump_stack_lvl+0x188/0x24e [ 2187.463862][T17556] ? show_regs_print_info+0x12/0x12 [ 2187.469061][T17556] ? load_image+0x410/0x410 [ 2187.473557][T17556] ? __lock_acquire+0x7ea0/0x7ea0 [ 2187.478578][T17556] should_fail_ex+0x390/0x4c0 [ 2187.483251][T17556] _copy_from_user+0x2c/0x170 [ 2187.487923][T17556] ___sys_sendmsg+0x1c3/0x360 [ 2187.492595][T17556] ? __sys_sendmsg+0x2a0/0x2a0 [ 2187.497364][T17556] ? __lock_acquire+0x7ea0/0x7ea0 [ 2187.502397][T17556] __se_sys_sendmsg+0x1c3/0x2b0 [ 2187.507238][T17556] ? __x64_sys_sendmsg+0x80/0x80 [ 2187.512177][T17556] ? lockdep_hardirqs_on+0x94/0x140 [ 2187.517366][T17556] do_syscall_64+0x4c/0xa0 [ 2187.521772][T17556] ? clear_bhb_loop+0x60/0xb0 [ 2187.526444][T17556] ? clear_bhb_loop+0x60/0xb0 [ 2187.531112][T17556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2187.536997][T17556] RIP: 0033:0x7ff60dba94d9 [ 2187.541400][T17556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2187.560994][T17556] RSP: 002b:00007ff60e990028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2187.569397][T17556] RAX: ffffffffffffffda RBX: 00007ff60de25fa0 RCX: 00007ff60dba94d9 [ 2187.577356][T17556] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 2187.585314][T17556] RBP: 00007ff60e990090 R08: 0000000000000000 R09: 0000000000000000 [ 2187.593272][T17556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2187.601230][T17556] R13: 00007ff60de26038 R14: 00007ff60de25fa0 R15: 00007ffc7d811828 [ 2187.609199][T17556] [ 2187.749811][T17564] device veth1_macvtap left promiscuous mode [ 2187.795392][T17568] netlink: 'syz.0.14217': attribute type 3 has an invalid length. [ 2187.804288][T17568] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.14217'. [ 2187.815846][T17566] netlink: 'syz.4.14215': attribute type 21 has an invalid length. [ 2187.964594][T17580] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14221'. [ 2188.429213][T17580] device syzkaller0 entered promiscuous mode [ 2190.464021][T17621] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.14232'. [ 2190.656302][T17634] netlink: 'syz.4.14239': attribute type 11 has an invalid length. [ 2190.675567][T17634] netlink: 130876 bytes leftover after parsing attributes in process `syz.4.14239'. [ 2190.701417][T17634] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2190.742602][T17634] CPU: 0 PID: 17634 Comm: syz.4.14239 Not tainted syzkaller #0 [ 2190.750182][T17634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2190.760234][T17634] Call Trace: [ 2190.763525][T17634] [ 2190.766470][T17634] dump_stack_lvl+0x188/0x24e [ 2190.771176][T17634] ? show_regs_print_info+0x12/0x12 [ 2190.776402][T17634] ? load_image+0x410/0x410 [ 2190.780941][T17634] sysfs_warn_dup+0x8a/0xa0 [ 2190.785467][T17634] sysfs_do_create_link_sd+0xc0/0x110 [ 2190.790867][T17634] device_add+0x83b/0x1050 [ 2190.795303][T17634] wiphy_register+0x1f16/0x2c50 [ 2190.800178][T17634] ? cfg80211_event_work+0x40/0x40 [ 2190.805294][T17634] ? minstrel_ht_alloc+0x894/0xa20 [ 2190.810415][T17634] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2190.816480][T17634] ieee80211_register_hw+0x2e33/0x3b00 [ 2190.821944][T17634] ? ieee80211_register_hw+0xec1/0x3b00 [ 2190.827481][T17634] ? ieee80211_register_hw+0xec1/0x3b00 [ 2190.833030][T17634] ? ieee80211_tasklet_handler+0x20/0x20 [ 2190.838659][T17634] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2190.844557][T17634] ? __debug_object_init+0xed/0x440 [ 2190.849759][T17634] ? memset+0x1e/0x40 [ 2190.853733][T17634] ? __hrtimer_init+0x189/0x270 [ 2190.858578][T17634] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2190.864302][T17634] ? memcpy+0x3c/0x60 [ 2190.868280][T17634] hwsim_new_radio_nl+0xab7/0xc90 [ 2190.873314][T17634] genl_family_rcv_msg_doit+0x22f/0x350 [ 2190.878859][T17634] ? end_current_label_crit_section+0x170/0x170 [ 2190.885097][T17634] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2190.890993][T17634] ? bpf_lsm_capable+0x5/0x10 [ 2190.895666][T17634] ? security_capable+0x85/0xb0 [ 2190.900521][T17634] genl_rcv_msg+0x601/0x790 [ 2190.905031][T17634] ? genl_bind+0x360/0x360 [ 2190.909450][T17634] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2190.915786][T17634] netlink_rcv_skb+0x1ef/0x440 [ 2190.920547][T17634] ? genl_bind+0x360/0x360 [ 2190.924960][T17634] ? netlink_ack+0x1160/0x1160 [ 2190.929727][T17634] ? down_read+0x1a8/0x2d0 [ 2190.934143][T17634] genl_rcv+0x24/0x40 [ 2190.938127][T17634] netlink_unicast+0x7ad/0x920 [ 2190.942894][T17634] netlink_sendmsg+0x8ad/0xbd0 [ 2190.947665][T17634] ? netlink_getsockopt+0x550/0x550 [ 2190.952868][T17634] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2190.958410][T17634] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2190.963685][T17634] ? security_socket_sendmsg+0x7c/0xa0 [ 2190.969135][T17634] ? netlink_getsockopt+0x550/0x550 [ 2190.974334][T17634] ____sys_sendmsg+0x5ed/0x9a0 [ 2190.979098][T17634] ? __sys_sendmsg_sock+0x30/0x30 [ 2190.984126][T17634] ? __import_iovec+0x306/0x510 [ 2190.988978][T17634] ? import_iovec+0x6f/0xa0 [ 2190.993475][T17634] ___sys_sendmsg+0x2a2/0x360 [ 2190.998158][T17634] ? __sys_sendmsg+0x2a0/0x2a0 [ 2191.002956][T17634] __se_sys_sendmsg+0x1c3/0x2b0 [ 2191.007805][T17634] ? __x64_sys_sendmsg+0x80/0x80 [ 2191.012750][T17634] ? lockdep_hardirqs_on+0x94/0x140 [ 2191.017942][T17634] do_syscall_64+0x4c/0xa0 [ 2191.022350][T17634] ? clear_bhb_loop+0x60/0xb0 [ 2191.027019][T17634] ? clear_bhb_loop+0x60/0xb0 [ 2191.031688][T17634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2191.037575][T17634] RIP: 0033:0x7f9dab7a94d9 [ 2191.041981][T17634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2191.061577][T17634] RSP: 002b:00007f9dac622028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2191.069981][T17634] RAX: ffffffffffffffda RBX: 00007f9daba25fa0 RCX: 00007f9dab7a94d9 [ 2191.077946][T17634] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000003 [ 2191.085905][T17634] RBP: 00007f9dab83804e R08: 0000000000000000 R09: 0000000000000000 [ 2191.093863][T17634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2191.101821][T17634] R13: 00007f9daba26038 R14: 00007f9daba25fa0 R15: 00007ffdee31dec8 [ 2191.109797][T17634] [ 2191.478821][T17656] netlink: 'syz.1.14245': attribute type 21 has an invalid length. [ 2191.504260][T17656] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14245'. [ 2191.526809][T17656] netlink: 'syz.1.14245': attribute type 4 has an invalid length. [ 2191.612040][T17656] netlink: 3 bytes leftover after parsing attributes in process `syz.1.14245'. [ 2191.633468][T17665] netlink: 'syz.4.14250': attribute type 10 has an invalid length. [ 2191.691961][T17665] device bridge_slave_1 entered promiscuous mode [ 2191.712726][T17665] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 2191.815570][T17674] netlink: 'syz.2.14253': attribute type 2 has an invalid length. [ 2191.855785][T17674] netlink: 'syz.2.14253': attribute type 4 has an invalid length. [ 2191.868454][T17674] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14253'. [ 2191.904322][T17684] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2191.907893][T17678] netlink: 'syz.1.14255': attribute type 21 has an invalid length. [ 2191.910783][T17684] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2191.919495][T17678] netlink: 'syz.1.14255': attribute type 5 has an invalid length. [ 2191.933092][T17678] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14255'. [ 2191.982148][T17676] tun0: tun_chr_ioctl cmd 2148553947 [ 2191.988256][T17676] tun0: tun_chr_ioctl cmd 2147767521 [ 2192.007952][T17676] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.14254'. [ 2192.103248][T17687] device batadv_slave_0 left promiscuous mode [ 2192.173108][T17694] device hsr0 entered promiscuous mode [ 2192.240768][T17697] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14261'. [ 2192.804576][T17730] €Â: renamed from syzkaller0 [ 2192.820615][T17728] delete_channel: no stack [ 2192.957710][T17736] delete_channel: no stack [ 2193.653642][T17766] FAULT_INJECTION: forcing a failure. [ 2193.653642][T17766] name failslab, interval 1, probability 0, space 0, times 0 [ 2193.669163][T17766] CPU: 0 PID: 17766 Comm: syz.2.14287 Not tainted syzkaller #0 [ 2193.676737][T17766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2193.686800][T17766] Call Trace: [ 2193.690091][T17766] [ 2193.693034][T17766] dump_stack_lvl+0x188/0x24e [ 2193.697736][T17766] ? show_regs_print_info+0x12/0x12 [ 2193.702961][T17766] ? load_image+0x410/0x410 [ 2193.707492][T17766] ? mark_lock+0x94/0x320 [ 2193.711846][T17766] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2193.717866][T17766] should_fail_ex+0x390/0x4c0 [ 2193.722568][T17766] should_failslab+0x5/0x20 [ 2193.727075][T17766] slab_pre_alloc_hook+0x59/0x300 [ 2193.732098][T17766] ? sctp_add_bind_addr+0x89/0x350 [ 2193.737212][T17766] __kmem_cache_alloc_node+0x4f/0x270 [ 2193.742585][T17766] ? sctp_add_bind_addr+0x89/0x350 [ 2193.747691][T17766] kmalloc_trace+0x26/0xe0 [ 2193.752099][T17766] sctp_add_bind_addr+0x89/0x350 [ 2193.757035][T17766] sctp_copy_local_addr_list+0x317/0x4d0 [ 2193.762663][T17766] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 2193.768373][T17766] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 2193.774434][T17766] ? sctp_v4_is_any+0x31/0x50 [ 2193.779103][T17766] ? sctp_copy_one_addr+0x93/0x660 [ 2193.784210][T17766] sctp_bind_addr_copy+0xaf/0x3c0 [ 2193.789228][T17766] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 2193.795548][T17766] sctp_connect_new_asoc+0x2f5/0x6a0 [ 2193.800830][T17766] ? __sctp_connect+0xd80/0xd80 [ 2193.805673][T17766] ? __local_bh_enable_ip+0x136/0x1c0 [ 2193.811033][T17766] ? _local_bh_enable+0xa0/0xa0 [ 2193.815877][T17766] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 2193.821688][T17766] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 2193.827489][T17766] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 2193.833026][T17766] ? security_sctp_bind_connect+0x85/0xb0 [ 2193.838739][T17766] sctp_sendmsg+0x1686/0x2940 [ 2193.843422][T17766] ? sctp_getsockopt+0x8a0/0x8a0 [ 2193.848356][T17766] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2193.854511][T17766] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2193.860915][T17766] ? aa_sock_msg_perm+0x94/0x150 [ 2193.865855][T17766] ? inet_sendmsg+0x7a/0x2a0 [ 2193.870439][T17766] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2193.875712][T17766] ? inet_send_prepare+0x250/0x250 [ 2193.880819][T17766] ____sys_sendmsg+0x5ed/0x9a0 [ 2193.885588][T17766] ? __sys_sendmsg_sock+0x30/0x30 [ 2193.890605][T17766] ? __import_iovec+0x306/0x510 [ 2193.895454][T17766] ? import_iovec+0x6f/0xa0 [ 2193.899949][T17766] ___sys_sendmsg+0x2a2/0x360 [ 2193.904635][T17766] ? __sys_sendmsg+0x2a0/0x2a0 [ 2193.909407][T17766] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2193.915593][T17766] __se_sys_sendmsg+0x1c3/0x2b0 [ 2193.920436][T17766] ? perf_trace_preemptirq_template+0x268/0x320 [ 2193.926674][T17766] ? __x64_sys_sendmsg+0x80/0x80 [ 2193.931614][T17766] ? lockdep_hardirqs_on+0x94/0x140 [ 2193.936807][T17766] do_syscall_64+0x4c/0xa0 [ 2193.941219][T17766] ? clear_bhb_loop+0x60/0xb0 [ 2193.945887][T17766] ? clear_bhb_loop+0x60/0xb0 [ 2193.950559][T17766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2193.956443][T17766] RIP: 0033:0x7ff60dba94d9 [ 2193.960936][T17766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2193.980548][T17766] RSP: 002b:00007ff60e990028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2193.988953][T17766] RAX: ffffffffffffffda RBX: 00007ff60de25fa0 RCX: 00007ff60dba94d9 [ 2193.996916][T17766] RDX: 00000000000080d1 RSI: 00002000000002c0 RDI: 0000000000000006 [ 2194.004876][T17766] RBP: 00007ff60e990090 R08: 0000000000000000 R09: 0000000000000000 [ 2194.012836][T17766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2194.020796][T17766] R13: 00007ff60de26038 R14: 00007ff60de25fa0 R15: 00007ffc7d811828 [ 2194.028775][T17766] [ 2194.661053][T17788] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.14295'. [ 2195.070714][T17809] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14304'. [ 2195.088449][T17812] netlink: 'syz.0.14305': attribute type 11 has an invalid length. [ 2195.130035][T17812] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2195.148860][T17812] CPU: 1 PID: 17812 Comm: syz.0.14305 Not tainted syzkaller #0 [ 2195.156439][T17812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2195.166509][T17812] Call Trace: [ 2195.169808][T17812] [ 2195.172751][T17812] dump_stack_lvl+0x188/0x24e [ 2195.177466][T17812] ? show_regs_print_info+0x12/0x12 [ 2195.182690][T17812] ? load_image+0x410/0x410 [ 2195.187232][T17812] sysfs_warn_dup+0x8a/0xa0 [ 2195.191758][T17812] sysfs_do_create_link_sd+0xc0/0x110 [ 2195.197153][T17812] device_add+0x83b/0x1050 [ 2195.201587][T17812] wiphy_register+0x1f16/0x2c50 [ 2195.206457][T17812] ? cfg80211_event_work+0x40/0x40 [ 2195.211562][T17812] ? minstrel_ht_alloc+0x894/0xa20 [ 2195.216680][T17812] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2195.222744][T17812] ieee80211_register_hw+0x2e33/0x3b00 [ 2195.228211][T17812] ? ieee80211_register_hw+0xec1/0x3b00 [ 2195.233771][T17812] ? ieee80211_register_hw+0xec1/0x3b00 [ 2195.239334][T17812] ? ieee80211_tasklet_handler+0x20/0x20 [ 2195.244966][T17812] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2195.250862][T17812] ? __debug_object_init+0xed/0x440 [ 2195.256061][T17812] ? memset+0x1e/0x40 [ 2195.260034][T17812] ? __hrtimer_init+0x189/0x270 [ 2195.264881][T17812] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2195.270609][T17812] ? memcpy+0x3c/0x60 [ 2195.274587][T17812] hwsim_new_radio_nl+0xab7/0xc90 [ 2195.279623][T17812] genl_family_rcv_msg_doit+0x22f/0x350 [ 2195.285173][T17812] ? end_current_label_crit_section+0x170/0x170 [ 2195.291428][T17812] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2195.297334][T17812] ? bpf_lsm_capable+0x5/0x10 [ 2195.302005][T17812] ? security_capable+0x85/0xb0 [ 2195.306857][T17812] genl_rcv_msg+0x601/0x790 [ 2195.311366][T17812] ? genl_bind+0x360/0x360 [ 2195.315778][T17812] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2195.322113][T17812] netlink_rcv_skb+0x1ef/0x440 [ 2195.326886][T17812] ? genl_bind+0x360/0x360 [ 2195.331311][T17812] ? netlink_ack+0x1160/0x1160 [ 2195.336078][T17812] ? down_read+0x1a8/0x2d0 [ 2195.340488][T17812] genl_rcv+0x24/0x40 [ 2195.344466][T17812] netlink_unicast+0x7ad/0x920 [ 2195.349233][T17812] netlink_sendmsg+0x8ad/0xbd0 [ 2195.354002][T17812] ? netlink_getsockopt+0x550/0x550 [ 2195.359207][T17812] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2195.364750][T17812] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2195.370028][T17812] ? security_socket_sendmsg+0x7c/0xa0 [ 2195.375478][T17812] ? netlink_getsockopt+0x550/0x550 [ 2195.380675][T17812] ____sys_sendmsg+0x5ed/0x9a0 [ 2195.385453][T17812] ? __sys_sendmsg_sock+0x30/0x30 [ 2195.390472][T17812] ? __import_iovec+0x306/0x510 [ 2195.395335][T17812] ? import_iovec+0x6f/0xa0 [ 2195.399835][T17812] ___sys_sendmsg+0x2a2/0x360 [ 2195.404535][T17812] ? __sys_sendmsg+0x2a0/0x2a0 [ 2195.409351][T17812] __se_sys_sendmsg+0x1c3/0x2b0 [ 2195.414215][T17812] ? __x64_sys_sendmsg+0x80/0x80 [ 2195.419159][T17812] ? lockdep_hardirqs_on+0x94/0x140 [ 2195.424353][T17812] do_syscall_64+0x4c/0xa0 [ 2195.428767][T17812] ? clear_bhb_loop+0x60/0xb0 [ 2195.433456][T17812] ? clear_bhb_loop+0x60/0xb0 [ 2195.438134][T17812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2195.444022][T17812] RIP: 0033:0x7f34cfda94d9 [ 2195.448437][T17812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2195.468034][T17812] RSP: 002b:00007f34d0cb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2195.476445][T17812] RAX: ffffffffffffffda RBX: 00007f34d0025fa0 RCX: 00007f34cfda94d9 [ 2195.484409][T17812] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000003 [ 2195.492375][T17812] RBP: 00007f34cfe3804e R08: 0000000000000000 R09: 0000000000000000 [ 2195.500334][T17812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2195.508295][T17812] R13: 00007f34d0026038 R14: 00007f34d0025fa0 R15: 00007fffeeba14b8 [ 2195.516271][T17812] [ 2195.569200][T17820] __nla_validate_parse: 1 callbacks suppressed [ 2195.569213][T17820] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14309'. [ 2195.588175][T17820] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14309'. [ 2195.599277][T17820] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14309'. [ 2195.959029][T17837] validate_nla: 2 callbacks suppressed [ 2195.959045][T17837] netlink: 'syz.3.14316': attribute type 29 has an invalid length. [ 2195.993955][T17837] netlink: 'syz.3.14316': attribute type 29 has an invalid length. [ 2196.055656][T17843] netlink: 22 bytes leftover after parsing attributes in process `syz.2.14318'. [ 2196.179434][T17854] netlink: 'syz.3.14316': attribute type 29 has an invalid length. [ 2196.265288][T17857] netlink: 'syz.3.14316': attribute type 29 has an invalid length. [ 2196.298475][T17859] FAULT_INJECTION: forcing a failure. [ 2196.298475][T17859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2196.313408][T17854] netlink: 'syz.3.14316': attribute type 29 has an invalid length. [ 2196.362570][T17859] CPU: 0 PID: 17859 Comm: syz.1.14319 Not tainted syzkaller #0 [ 2196.370152][T17859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2196.380227][T17859] Call Trace: [ 2196.383515][T17859] [ 2196.386454][T17859] dump_stack_lvl+0x188/0x24e [ 2196.391153][T17859] ? show_regs_print_info+0x12/0x12 [ 2196.396397][T17859] ? load_image+0x410/0x410 [ 2196.400919][T17859] ? __lock_acquire+0x7ea0/0x7ea0 [ 2196.405963][T17859] ? memcpy+0x3c/0x60 [ 2196.409971][T17859] should_fail_ex+0x390/0x4c0 [ 2196.414668][T17859] _copy_to_user+0x2c/0x130 [ 2196.419193][T17859] generic_map_lookup_batch+0x829/0xbf0 [ 2196.424771][T17859] ? bpf_map_update_value+0x670/0x670 [ 2196.430172][T17859] ? __fdget+0x17c/0x200 [ 2196.434438][T17859] ? bpf_map_update_value+0x670/0x670 [ 2196.439823][T17859] bpf_map_do_batch+0x2e0/0x5f0 [ 2196.444693][T17859] ? bpf_lsm_bpf+0x5/0x10 [ 2196.449034][T17859] ? security_bpf+0x7a/0xa0 [ 2196.453557][T17859] __sys_bpf+0x6f7/0x780 [ 2196.457848][T17859] ? bpf_link_show_fdinfo+0x550/0x550 [ 2196.463252][T17859] ? lock_chain_count+0x20/0x20 [ 2196.468123][T17859] __x64_sys_bpf+0x78/0x90 [ 2196.472567][T17859] do_syscall_64+0x4c/0xa0 [ 2196.476995][T17859] ? clear_bhb_loop+0x60/0xb0 [ 2196.481690][T17859] ? clear_bhb_loop+0x60/0xb0 [ 2196.486384][T17859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2196.492296][T17859] RIP: 0033:0x7f16c6ba94d9 [ 2196.496719][T17859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2196.504778][T17864] device syzkaller0 entered promiscuous mode [ 2196.516315][T17859] RSP: 002b:00007f16c7b44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2196.516339][T17859] RAX: ffffffffffffffda RBX: 00007f16c6e25fa0 RCX: 00007f16c6ba94d9 [ 2196.516352][T17859] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 0000000000000018 [ 2196.516364][T17859] RBP: 00007f16c7b44090 R08: 0000000000000000 R09: 0000000000000000 [ 2196.516375][T17859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2196.516386][T17859] R13: 00007f16c6e26038 R14: 00007f16c6e25fa0 R15: 00007ffcf4eba788 [ 2196.516412][T17859] [ 2196.640028][T17866] device syzkaller0 entered promiscuous mode [ 2199.441720][T17899] device syzkaller0 entered promiscuous mode [ 2203.197942][T17930] netlink: 'syz.3.14341': attribute type 12 has an invalid length. [ 2203.220897][T17930] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14341'. [ 2203.477932][T17943] device syzkaller0 entered promiscuous mode [ 2203.690906][T17949] netlink: 'syz.4.14348': attribute type 21 has an invalid length. [ 2203.705848][T17949] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14348'. [ 2203.754172][T17957] FAULT_INJECTION: forcing a failure. [ 2203.754172][T17957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2203.767881][T17957] CPU: 1 PID: 17957 Comm: syz.2.14351 Not tainted syzkaller #0 [ 2203.775447][T17957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2203.785513][T17957] Call Trace: [ 2203.788800][T17957] [ 2203.791740][T17957] dump_stack_lvl+0x188/0x24e [ 2203.796441][T17957] ? show_regs_print_info+0x12/0x12 [ 2203.801667][T17957] ? load_image+0x410/0x410 [ 2203.806188][T17957] ? __lock_acquire+0x7ea0/0x7ea0 [ 2203.811233][T17957] ? snprintf+0xe5/0x140 [ 2203.815486][T17957] should_fail_ex+0x390/0x4c0 [ 2203.820182][T17957] _copy_to_user+0x2c/0x130 [ 2203.824793][T17957] simple_read_from_buffer+0xe3/0x150 [ 2203.830181][T17957] proc_fail_nth_read+0x1a6/0x220 [ 2203.835226][T17957] ? proc_fault_inject_write+0x310/0x310 [ 2203.840878][T17957] ? fsnotify_perm+0x248/0x550 [ 2203.845660][T17957] ? proc_fault_inject_write+0x310/0x310 [ 2203.851300][T17957] vfs_read+0x2db/0x960 [ 2203.855462][T17957] ? kernel_read+0x1e0/0x1e0 [ 2203.860055][T17957] ? __fget_files+0x28/0x460 [ 2203.864651][T17957] ? __fget_files+0x3fc/0x460 [ 2203.869345][T17957] ? __fdget_pos+0x2ae/0x360 [ 2203.873945][T17957] ? ksys_read+0x70/0x260 [ 2203.878278][T17957] ksys_read+0x14d/0x260 [ 2203.882524][T17957] ? vfs_write+0x9a0/0x9a0 [ 2203.886944][T17957] ? lockdep_hardirqs_on+0x94/0x140 [ 2203.892147][T17957] do_syscall_64+0x4c/0xa0 [ 2203.896591][T17957] ? clear_bhb_loop+0x60/0xb0 [ 2203.901269][T17957] ? clear_bhb_loop+0x60/0xb0 [ 2203.905949][T17957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2203.911841][T17957] RIP: 0033:0x7ff60db69d0e [ 2203.916255][T17957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2203.935861][T17957] RSP: 002b:00007ff60e98ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2203.944274][T17957] RAX: ffffffffffffffda RBX: 00007ff60e9906c0 RCX: 00007ff60db69d0e [ 2203.952240][T17957] RDX: 000000000000000f RSI: 00007ff60e9900a0 RDI: 0000000000000004 [ 2203.960209][T17957] RBP: 00007ff60e990090 R08: 0000000000000000 R09: 0000000000000000 [ 2203.968175][T17957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2203.976139][T17957] R13: 00007ff60de26038 R14: 00007ff60de25fa0 R15: 00007ffc7d811828 [ 2203.984124][T17957] [ 2204.028633][T17967] FAULT_INJECTION: forcing a failure. [ 2204.028633][T17967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2204.054194][T17967] CPU: 0 PID: 17967 Comm: syz.1.14353 Not tainted syzkaller #0 [ 2204.061781][T17967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2204.071839][T17967] Call Trace: [ 2204.075119][T17967] [ 2204.078050][T17967] dump_stack_lvl+0x188/0x24e [ 2204.082739][T17967] ? show_regs_print_info+0x12/0x12 [ 2204.087945][T17967] ? load_image+0x410/0x410 [ 2204.092450][T17967] ? __lock_acquire+0x7ea0/0x7ea0 [ 2204.097485][T17967] should_fail_ex+0x390/0x4c0 [ 2204.102167][T17967] _copy_from_user+0x2c/0x170 [ 2204.106848][T17967] iovec_from_user+0x143/0x360 [ 2204.111616][T17967] __import_iovec+0x6c/0x510 [ 2204.116214][T17967] import_iovec+0x6f/0xa0 [ 2204.120551][T17967] ___sys_sendmsg+0x252/0x360 [ 2204.125232][T17967] ? __sys_sendmsg+0x2a0/0x2a0 [ 2204.130019][T17967] ? __lock_acquire+0x7ea0/0x7ea0 [ 2204.135066][T17967] __se_sys_sendmsg+0x1c3/0x2b0 [ 2204.139918][T17967] ? __x64_sys_sendmsg+0x80/0x80 [ 2204.144870][T17967] ? lockdep_hardirqs_on+0x94/0x140 [ 2204.150072][T17967] do_syscall_64+0x4c/0xa0 [ 2204.154494][T17967] ? clear_bhb_loop+0x60/0xb0 [ 2204.159171][T17967] ? clear_bhb_loop+0x60/0xb0 [ 2204.163847][T17967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2204.169742][T17967] RIP: 0033:0x7f16c6ba94d9 [ 2204.174157][T17967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2204.193760][T17967] RSP: 002b:00007f16c7b44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2204.202176][T17967] RAX: ffffffffffffffda RBX: 00007f16c6e25fa0 RCX: 00007f16c6ba94d9 [ 2204.210143][T17967] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 2204.218113][T17967] RBP: 00007f16c7b44090 R08: 0000000000000000 R09: 0000000000000000 [ 2204.226084][T17967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2204.234053][T17967] R13: 00007f16c6e26038 R14: 00007f16c6e25fa0 R15: 00007ffcf4eba788 [ 2204.242039][T17967] [ 2206.747202][T17989] netlink: 'syz.1.14358': attribute type 10 has an invalid length. [ 2206.803817][T17989] bond0: (slave batadv_slave_0): Releasing backup interface [ 2206.882876][T17993] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.14360'. [ 2206.897730][T18002] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.14360'. [ 2207.194465][T18012] netlink: 72 bytes leftover after parsing attributes in process `syz.0.14367'. [ 2207.294170][T18022] device wlan1 entered promiscuous mode [ 2207.378532][T18030] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.14374'. [ 2207.473850][T18030] netlink: 'syz.0.14374': attribute type 10 has an invalid length. [ 2207.501392][T18030] netlink: 2 bytes leftover after parsing attributes in process `syz.0.14374'. [ 2207.636873][T18038] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.14375'. [ 2207.694850][T18038] netlink: zone id is out of range [ 2207.724807][T18038] netlink: del zone limit has 4 unknown bytes [ 2207.884577][T18047] netlink: 'syz.0.14380': attribute type 29 has an invalid length. [ 2207.912388][T18047] netlink: 'syz.0.14380': attribute type 29 has an invalid length. [ 2207.996609][T18053] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14381'. [ 2208.020671][T18027] rxe_eth0 speed is unknown, defaulting to 1000 [ 2208.059449][T18055] netlink: 'syz.1.14382': attribute type 10 has an invalid length. [ 2208.344683][T18066] netlink: 'syz.2.14384': attribute type 10 has an invalid length. [ 2208.386636][T18066] netlink: 2 bytes leftover after parsing attributes in process `syz.2.14384'. [ 2208.758159][T18085] netlink: 'syz.1.14390': attribute type 3 has an invalid length. [ 2208.782128][T18085] netlink: 'syz.1.14390': attribute type 4 has an invalid length. [ 2208.790183][T18085] netlink: 'syz.1.14390': attribute type 6 has an invalid length. [ 2208.820577][T18085] netlink: 'syz.1.14390': attribute type 15 has an invalid length. [ 2208.833392][T18085] netlink: 'syz.1.14390': attribute type 16 has an invalid length. [ 2208.843831][T18085] netlink: 'syz.1.14390': attribute type 20 has an invalid length. [ 2208.882004][T18085] netlink: 'syz.1.14390': attribute type 21 has an invalid length. [ 2208.902003][T18085] netlink: 'syz.1.14390': attribute type 23 has an invalid length. [ 2208.930261][T18085] netlink: 'syz.1.14390': attribute type 25 has an invalid length. [ 2208.972907][T18092] netlink: 'syz.2.14396': attribute type 11 has an invalid length. [ 2208.997253][T18092] netlink: 130876 bytes leftover after parsing attributes in process `syz.2.14396'. [ 2209.029120][T18092] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 2209.223151][T18098] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 2209.592676][T18111] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14403'. [ 2209.865273][T18116] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14404'. [ 2210.089961][T18123] netlink: 188 bytes leftover after parsing attributes in process `syz.2.14408'. [ 2210.268897][T18136] netlink: 164 bytes leftover after parsing attributes in process `syz.3.14411'. [ 2211.731489][T18174] FAULT_INJECTION: forcing a failure. [ 2211.731489][T18174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2211.748344][T18174] CPU: 1 PID: 18174 Comm: syz.0.14426 Not tainted syzkaller #0 [ 2211.755923][T18174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2211.765992][T18174] Call Trace: [ 2211.769283][T18174] [ 2211.772255][T18174] dump_stack_lvl+0x188/0x24e [ 2211.776955][T18174] ? show_regs_print_info+0x12/0x12 [ 2211.782165][T18174] ? load_image+0x410/0x410 [ 2211.786684][T18174] ? __lock_acquire+0x7ea0/0x7ea0 [ 2211.791716][T18174] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2211.797690][T18174] should_fail_ex+0x390/0x4c0 [ 2211.802370][T18174] _copy_from_iter+0x1c0/0x1130 [ 2211.807222][T18174] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2211.813366][T18174] ? copyout_mc+0x110/0x110 [ 2211.817851][T18174] ? __phys_addr+0xd/0x170 [ 2211.822265][T18174] ? __sanitizer_cov_trace_const_cmp4+0x80/0x80 [ 2211.828512][T18174] ? __check_object_size+0x4f6/0xa70 [ 2211.833790][T18174] skb_copy_datagram_from_iter+0xee/0x6b0 [ 2211.839520][T18174] ? skb_put+0x10e/0x200 [ 2211.843752][T18174] tun_get_user+0x1526/0x3be0 [ 2211.848438][T18174] ? rcu_read_unlock+0xa0/0xa0 [ 2211.853192][T18174] ? tun_get+0x1c/0x2e0 [ 2211.857336][T18174] ? __lock_acquire+0x7ea0/0x7ea0 [ 2211.862349][T18174] ? tun_get+0x1c/0x2e0 [ 2211.866491][T18174] tun_chr_write_iter+0x112/0x1f0 [ 2211.871504][T18174] vfs_write+0x482/0x9a0 [ 2211.875744][T18174] ? file_end_write+0x250/0x250 [ 2211.880594][T18174] ? __fget_files+0x3fc/0x460 [ 2211.885266][T18174] ? __fdget_pos+0x1d4/0x360 [ 2211.889849][T18174] ? ksys_write+0x70/0x260 [ 2211.894251][T18174] ksys_write+0x14d/0x260 [ 2211.898564][T18174] ? __ia32_sys_read+0x80/0x80 [ 2211.903312][T18174] ? lockdep_hardirqs_on+0x94/0x140 [ 2211.908495][T18174] do_syscall_64+0x4c/0xa0 [ 2211.912899][T18174] ? clear_bhb_loop+0x60/0xb0 [ 2211.917573][T18174] ? clear_bhb_loop+0x60/0xb0 [ 2211.922237][T18174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2211.928128][T18174] RIP: 0033:0x7f34cfda94d9 [ 2211.932534][T18174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2211.952140][T18174] RSP: 002b:00007f34d0cb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2211.960534][T18174] RAX: ffffffffffffffda RBX: 00007f34d0025fa0 RCX: 00007f34cfda94d9 [ 2211.968504][T18174] RDX: 000000000000ffc0 RSI: 0000200000000000 RDI: 00000000000000c8 [ 2211.976459][T18174] RBP: 00007f34d0cb0090 R08: 0000000000000000 R09: 0000000000000000 [ 2211.984412][T18174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2211.992378][T18174] R13: 00007f34d0026038 R14: 00007f34d0025fa0 R15: 00007fffeeba14b8 [ 2212.000341][T18174] [ 2213.911610][T18144] device wlan1 entered promiscuous mode [ 2213.963469][T18176] netlink: 830 bytes leftover after parsing attributes in process `syz.0.14427'. [ 2214.002028][T18176] device bond_slave_1 entered promiscuous mode [ 2214.008582][T18176] device geneve1 entered promiscuous mode [ 2214.279131][T18198] validate_nla: 10 callbacks suppressed [ 2214.279164][T18198] netlink: 'syz.4.14435': attribute type 7 has an invalid length. [ 2214.360274][T18201] FAULT_INJECTION: forcing a failure. [ 2214.360274][T18201] name failslab, interval 1, probability 0, space 0, times 0 [ 2214.392673][T18201] CPU: 1 PID: 18201 Comm: syz.1.14436 Not tainted syzkaller #0 [ 2214.400262][T18201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2214.410319][T18201] Call Trace: [ 2214.413593][T18201] [ 2214.416525][T18201] dump_stack_lvl+0x188/0x24e [ 2214.421200][T18201] ? sctp_sendmsg+0x1686/0x2940 [ 2214.426049][T18201] ? ___sys_sendmsg+0x2a2/0x360 [ 2214.430895][T18201] ? show_regs_print_info+0x12/0x12 [ 2214.436089][T18201] ? load_image+0x410/0x410 [ 2214.440594][T18201] should_fail_ex+0x390/0x4c0 [ 2214.445268][T18201] should_failslab+0x5/0x20 [ 2214.449765][T18201] slab_pre_alloc_hook+0x59/0x300 [ 2214.454782][T18201] ? sctp_add_bind_addr+0x89/0x350 [ 2214.459887][T18201] __kmem_cache_alloc_node+0x4f/0x270 [ 2214.465249][T18201] ? sctp_add_bind_addr+0x89/0x350 [ 2214.470352][T18201] kmalloc_trace+0x26/0xe0 [ 2214.474764][T18201] sctp_add_bind_addr+0x89/0x350 [ 2214.479697][T18201] sctp_copy_local_addr_list+0x317/0x4d0 [ 2214.485324][T18201] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 2214.491041][T18201] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 2214.497101][T18201] ? sctp_v4_is_any+0x31/0x50 [ 2214.501768][T18201] ? sctp_copy_one_addr+0x93/0x660 [ 2214.506874][T18201] sctp_bind_addr_copy+0xaf/0x3c0 [ 2214.511892][T18201] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 2214.518208][T18201] sctp_connect_new_asoc+0x2f5/0x6a0 [ 2214.523486][T18201] ? __sctp_connect+0xd80/0xd80 [ 2214.528330][T18201] ? bpf_lsm_sctp_assoc_request+0x10/0x10 [ 2214.534045][T18201] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 2214.539577][T18201] ? security_sctp_bind_connect+0x85/0xb0 [ 2214.545291][T18201] sctp_sendmsg+0x1686/0x2940 [ 2214.549970][T18201] ? sctp_getsockopt+0x8a0/0x8a0 [ 2214.554898][T18201] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2214.561046][T18201] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2214.567449][T18201] ? aa_sock_msg_perm+0x94/0x150 [ 2214.572388][T18201] ? inet_sendmsg+0x7a/0x2a0 [ 2214.576968][T18201] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2214.582240][T18201] ? inet_send_prepare+0x250/0x250 [ 2214.587347][T18201] ____sys_sendmsg+0x5ed/0x9a0 [ 2214.592115][T18201] ? __sys_sendmsg_sock+0x30/0x30 [ 2214.597126][T18201] ? __import_iovec+0x306/0x510 [ 2214.601974][T18201] ? import_iovec+0x6f/0xa0 [ 2214.606484][T18201] ___sys_sendmsg+0x2a2/0x360 [ 2214.611155][T18201] ? __sys_sendmsg+0x2a0/0x2a0 [ 2214.615923][T18201] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2214.621647][T18201] __se_sys_sendmsg+0x1c3/0x2b0 [ 2214.626492][T18201] ? __x64_sys_sendmsg+0x80/0x80 [ 2214.631432][T18201] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2214.637320][T18201] do_syscall_64+0x4c/0xa0 [ 2214.641731][T18201] ? clear_bhb_loop+0x60/0xb0 [ 2214.646399][T18201] ? clear_bhb_loop+0x60/0xb0 [ 2214.651067][T18201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2214.656952][T18201] RIP: 0033:0x7f16c6ba94d9 [ 2214.661362][T18201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2214.680959][T18201] RSP: 002b:00007f16c7b44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2214.689364][T18201] RAX: ffffffffffffffda RBX: 00007f16c6e25fa0 RCX: 00007f16c6ba94d9 [ 2214.697325][T18201] RDX: 00000000000080d1 RSI: 00002000000002c0 RDI: 0000000000000006 [ 2214.705290][T18201] RBP: 00007f16c7b44090 R08: 0000000000000000 R09: 0000000000000000 [ 2214.713252][T18201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2214.721209][T18201] R13: 00007f16c6e26038 R14: 00007f16c6e25fa0 R15: 00007ffcf4eba788 [ 2214.729182][T18201] [ 2215.046424][T18205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2215.065644][T18205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2215.429699][T18222] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14442'. [ 2219.047035][T18265] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14459'. [ 2219.084407][T18265] netlink: 'syz.4.14459': attribute type 12 has an invalid length. [ 2219.116821][T18265] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14459'. [ 2219.222437][T18276] device lo entered promiscuous mode [ 2219.346803][T18279] device syzkaller0 entered promiscuous mode [ 2221.564226][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.570578][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.072141][T18313] netlink: 'syz.1.14473': attribute type 12 has an invalid length. [ 2223.080080][T18313] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14473'. [ 2223.221769][T18321] device syzkaller0 entered promiscuous mode [ 2223.230789][T18327] netlink: 'syz.0.14479': attribute type 19 has an invalid length. [ 2225.886742][T18341] device syzkaller0 entered promiscuous mode [ 2225.910461][T18361] netlink: 'syz.0.14485': attribute type 10 has an invalid length. [ 2226.433869][T18389] FAULT_INJECTION: forcing a failure. [ 2226.433869][T18389] name failslab, interval 1, probability 0, space 0, times 0 [ 2226.446845][T18389] CPU: 1 PID: 18389 Comm: syz.1.14496 Not tainted syzkaller #0 [ 2226.454401][T18389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2226.464457][T18389] Call Trace: [ 2226.467733][T18389] [ 2226.470665][T18389] dump_stack_lvl+0x188/0x24e [ 2226.475358][T18389] ? show_regs_print_info+0x12/0x12 [ 2226.480568][T18389] ? load_image+0x410/0x410 [ 2226.485074][T18389] ? __might_sleep+0xd0/0xd0 [ 2226.489666][T18389] ? __lock_acquire+0x7ea0/0x7ea0 [ 2226.494699][T18389] should_fail_ex+0x390/0x4c0 [ 2226.499381][T18389] should_failslab+0x5/0x20 [ 2226.503879][T18389] slab_pre_alloc_hook+0x59/0x300 [ 2226.508907][T18389] kmem_cache_alloc_node+0x5a/0x310 [ 2226.514106][T18389] ? __alloc_skb+0xf9/0x7d0 [ 2226.518617][T18389] __alloc_skb+0xf9/0x7d0 [ 2226.522949][T18389] netlink_sendmsg+0x654/0xbd0 [ 2226.527725][T18389] ? netlink_getsockopt+0x550/0x550 [ 2226.532928][T18389] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2226.538480][T18389] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2226.543764][T18389] ? security_socket_sendmsg+0x7c/0xa0 [ 2226.549220][T18389] ? netlink_getsockopt+0x550/0x550 [ 2226.554422][T18389] ____sys_sendmsg+0x5ed/0x9a0 [ 2226.559192][T18389] ? __sys_sendmsg_sock+0x30/0x30 [ 2226.564217][T18389] ? __import_iovec+0x306/0x510 [ 2226.569076][T18389] ? import_iovec+0x6f/0xa0 [ 2226.573583][T18389] ___sys_sendmsg+0x2a2/0x360 [ 2226.578266][T18389] ? __sys_sendmsg+0x2a0/0x2a0 [ 2226.583047][T18389] ? __lock_acquire+0x7ea0/0x7ea0 [ 2226.588091][T18389] __se_sys_sendmsg+0x1c3/0x2b0 [ 2226.592946][T18389] ? __x64_sys_sendmsg+0x80/0x80 [ 2226.597899][T18389] ? lockdep_hardirqs_on+0x94/0x140 [ 2226.603100][T18389] do_syscall_64+0x4c/0xa0 [ 2226.607516][T18389] ? clear_bhb_loop+0x60/0xb0 [ 2226.612191][T18389] ? clear_bhb_loop+0x60/0xb0 [ 2226.616871][T18389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2226.622765][T18389] RIP: 0033:0x7f16c6ba94d9 [ 2226.627182][T18389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2226.647048][T18389] RSP: 002b:00007f16c7b44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2226.655458][T18389] RAX: ffffffffffffffda RBX: 00007f16c6e25fa0 RCX: 00007f16c6ba94d9 [ 2226.663426][T18389] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 2226.671391][T18389] RBP: 00007f16c7b44090 R08: 0000000000000000 R09: 0000000000000000 [ 2226.679360][T18389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2226.687326][T18389] R13: 00007f16c6e26038 R14: 00007f16c6e25fa0 R15: 00007ffcf4eba788 [ 2226.695305][T18389] [ 2228.623096][T18387] netlink: 'syz.2.14495': attribute type 10 has an invalid length. [ 2228.631123][T18387] netlink: 2 bytes leftover after parsing attributes in process `syz.2.14495'. [ 2228.717638][T18410] netlink: 'syz.4.14504': attribute type 21 has an invalid length. [ 2229.082271][T18425] netlink: 'syz.4.14508': attribute type 11 has an invalid length. [ 2229.116705][T18425] netlink: 140 bytes leftover after parsing attributes in process `syz.4.14508'. [ 2229.223897][T18434] netlink: 'syz.1.14511': attribute type 10 has an invalid length. [ 2229.796370][T18451] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14516'. [ 2230.236135][T18460] netlink: 'syz.2.14521': attribute type 29 has an invalid length. [ 2230.254943][T18460] netlink: 'syz.2.14521': attribute type 3 has an invalid length. [ 2230.271387][T18460] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14521'. [ 2230.386097][T18471] netlink: 'syz.3.14524': attribute type 10 has an invalid length. [ 2230.581755][T18480] netlink: 'syz.2.14528': attribute type 3 has an invalid length. [ 2230.593623][T18480] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.14528'. [ 2230.679149][T18486] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.14531'. [ 2230.704565][T18486] bridge_slave_1: default FDB implementation only supports local addresses [ 2231.004194][T18486] device syzkaller0 entered promiscuous mode [ 2233.109467][T18496] device syzkaller0 entered promiscuous mode [ 2233.116379][T18499] netlink: 'syz.0.14536': attribute type 10 has an invalid length. [ 2233.124388][T18499] netlink: 2 bytes leftover after parsing attributes in process `syz.0.14536'. [ 2233.147478][T18508] rxe_eth0 speed is unknown, defaulting to 1000 [ 2233.357259][T18516] netlink: 'syz.0.14543': attribute type 11 has an invalid length. [ 2233.385542][T18516] netlink: 130876 bytes leftover after parsing attributes in process `syz.0.14543'. [ 2233.445778][T18516] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2233.474574][T18516] CPU: 1 PID: 18516 Comm: syz.0.14543 Not tainted syzkaller #0 [ 2233.482162][T18516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2233.492227][T18516] Call Trace: [ 2233.495510][T18516] [ 2233.498447][T18516] dump_stack_lvl+0x188/0x24e [ 2233.503153][T18516] ? show_regs_print_info+0x12/0x12 [ 2233.508369][T18516] ? load_image+0x410/0x410 [ 2233.512905][T18516] sysfs_warn_dup+0x8a/0xa0 [ 2233.517428][T18516] sysfs_do_create_link_sd+0xc0/0x110 [ 2233.522812][T18516] device_add+0x83b/0x1050 [ 2233.527230][T18516] wiphy_register+0x1f16/0x2c50 [ 2233.532095][T18516] ? cfg80211_event_work+0x40/0x40 [ 2233.537201][T18516] ? minstrel_ht_alloc+0x894/0xa20 [ 2233.542312][T18516] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2233.548376][T18516] ieee80211_register_hw+0x2e33/0x3b00 [ 2233.553842][T18516] ? ieee80211_register_hw+0xec1/0x3b00 [ 2233.559394][T18516] ? ieee80211_register_hw+0xec1/0x3b00 [ 2233.564959][T18516] ? ieee80211_tasklet_handler+0x20/0x20 [ 2233.570591][T18516] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2233.576494][T18516] ? __debug_object_init+0xed/0x440 [ 2233.581699][T18516] ? memset+0x1e/0x40 [ 2233.585677][T18516] ? __hrtimer_init+0x189/0x270 [ 2233.590522][T18516] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2233.596250][T18516] ? memcpy+0x3c/0x60 [ 2233.600231][T18516] hwsim_new_radio_nl+0xab7/0xc90 [ 2233.605262][T18516] genl_family_rcv_msg_doit+0x22f/0x350 [ 2233.610803][T18516] ? end_current_label_crit_section+0x170/0x170 [ 2233.617046][T18516] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2233.622937][T18516] ? bpf_lsm_capable+0x5/0x10 [ 2233.627608][T18516] ? security_capable+0x85/0xb0 [ 2233.632464][T18516] genl_rcv_msg+0x601/0x790 [ 2233.636971][T18516] ? genl_bind+0x360/0x360 [ 2233.641378][T18516] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2233.647710][T18516] netlink_rcv_skb+0x1ef/0x440 [ 2233.652470][T18516] ? genl_bind+0x360/0x360 [ 2233.656896][T18516] ? netlink_ack+0x1160/0x1160 [ 2233.661673][T18516] ? down_read+0x1a8/0x2d0 [ 2233.666086][T18516] genl_rcv+0x24/0x40 [ 2233.670064][T18516] netlink_unicast+0x7ad/0x920 [ 2233.674834][T18516] netlink_sendmsg+0x8ad/0xbd0 [ 2233.679605][T18516] ? netlink_getsockopt+0x550/0x550 [ 2233.684801][T18516] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2233.690344][T18516] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2233.695623][T18516] ? security_socket_sendmsg+0x7c/0xa0 [ 2233.701073][T18516] ? netlink_getsockopt+0x550/0x550 [ 2233.706267][T18516] ____sys_sendmsg+0x5ed/0x9a0 [ 2233.711030][T18516] ? __sys_sendmsg_sock+0x30/0x30 [ 2233.716048][T18516] ? __import_iovec+0x306/0x510 [ 2233.720897][T18516] ? import_iovec+0x6f/0xa0 [ 2233.725395][T18516] ___sys_sendmsg+0x2a2/0x360 [ 2233.730068][T18516] ? __sys_sendmsg+0x2a0/0x2a0 [ 2233.734858][T18516] __se_sys_sendmsg+0x1c3/0x2b0 [ 2233.739704][T18516] ? __x64_sys_sendmsg+0x80/0x80 [ 2233.744648][T18516] ? lockdep_hardirqs_on+0x94/0x140 [ 2233.749843][T18516] do_syscall_64+0x4c/0xa0 [ 2233.754269][T18516] ? clear_bhb_loop+0x60/0xb0 [ 2233.758952][T18516] ? clear_bhb_loop+0x60/0xb0 [ 2233.763631][T18516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2233.769526][T18516] RIP: 0033:0x7f34cfda94d9 [ 2233.773933][T18516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2233.793542][T18516] RSP: 002b:00007f34d0cb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2233.801951][T18516] RAX: ffffffffffffffda RBX: 00007f34d0025fa0 RCX: 00007f34cfda94d9 [ 2233.809921][T18516] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000003 [ 2233.817882][T18516] RBP: 00007f34cfe3804e R08: 0000000000000000 R09: 0000000000000000 [ 2233.825931][T18516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2233.833890][T18516] R13: 00007f34d0026038 R14: 00007f34d0025fa0 R15: 00007fffeeba14b8 [ 2233.841878][T18516] [ 2233.884840][T18522] netlink: 'syz.2.14545': attribute type 10 has an invalid length. [ 2233.995722][T18527] netlink: 'syz.4.14549': attribute type 2 has an invalid length. [ 2234.006896][T18527] netlink: 'syz.4.14549': attribute type 4 has an invalid length. [ 2234.014906][T18527] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14549'. [ 2234.799451][T18547] device syzkaller0 entered promiscuous mode [ 2235.529396][T18577] FAULT_INJECTION: forcing a failure. [ 2235.529396][T18577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2235.553212][T18577] CPU: 0 PID: 18577 Comm: syz.0.14564 Not tainted syzkaller #0 [ 2235.560787][T18577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2235.570856][T18577] Call Trace: [ 2235.574146][T18577] [ 2235.577092][T18577] dump_stack_lvl+0x188/0x24e [ 2235.581802][T18577] ? show_regs_print_info+0x12/0x12 [ 2235.587032][T18577] ? load_image+0x410/0x410 [ 2235.591555][T18577] ? __lock_acquire+0x7ea0/0x7ea0 [ 2235.596605][T18577] should_fail_ex+0x390/0x4c0 [ 2235.601305][T18577] _copy_from_user+0x2c/0x170 [ 2235.606005][T18577] ___sys_sendmsg+0x1c3/0x360 [ 2235.610693][T18577] ? __sys_sendmsg+0x2a0/0x2a0 [ 2235.615473][T18577] ? __lock_acquire+0x7ea0/0x7ea0 [ 2235.620510][T18577] __se_sys_sendmsg+0x1c3/0x2b0 [ 2235.625359][T18577] ? __x64_sys_sendmsg+0x80/0x80 [ 2235.630296][T18577] ? lockdep_hardirqs_on+0x94/0x140 [ 2235.635489][T18577] do_syscall_64+0x4c/0xa0 [ 2235.639901][T18577] ? clear_bhb_loop+0x60/0xb0 [ 2235.644567][T18577] ? clear_bhb_loop+0x60/0xb0 [ 2235.649238][T18577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2235.655121][T18577] RIP: 0033:0x7f34cfda94d9 [ 2235.659528][T18577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2235.679127][T18577] RSP: 002b:00007f34d0cb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2235.687534][T18577] RAX: ffffffffffffffda RBX: 00007f34d0025fa0 RCX: 00007f34cfda94d9 [ 2235.695494][T18577] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 2235.703467][T18577] RBP: 00007f34d0cb0090 R08: 0000000000000000 R09: 0000000000000000 [ 2235.711433][T18577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2235.719397][T18577] R13: 00007f34d0026038 R14: 00007f34d0025fa0 R15: 00007fffeeba14b8 [ 2235.727374][T18577] [ 2235.785508][T18584] netlink: 'syz.1.14570': attribute type 10 has an invalid length. [ 2235.798230][T18584] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14570'. [ 2235.811737][T18584] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2235.889474][T18587] device syzkaller0 entered promiscuous mode [ 2235.906789][T18592] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.14573'. [ 2237.598865][T18600] netlink: 'syz.0.14576': attribute type 10 has an invalid length. [ 2237.874064][T18621] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14582'. [ 2238.027181][T18629] FAULT_INJECTION: forcing a failure. [ 2238.027181][T18629] name failslab, interval 1, probability 0, space 0, times 0 [ 2238.057179][T18636] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14587'. [ 2238.067520][T18629] CPU: 0 PID: 18629 Comm: syz.0.14586 Not tainted syzkaller #0 [ 2238.075095][T18629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2238.085157][T18629] Call Trace: [ 2238.088446][T18629] [ 2238.091382][T18629] dump_stack_lvl+0x188/0x24e [ 2238.096075][T18629] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2238.102246][T18629] ? show_regs_print_info+0x12/0x12 [ 2238.107458][T18629] ? load_image+0x410/0x410 [ 2238.111987][T18629] should_fail_ex+0x390/0x4c0 [ 2238.116677][T18629] should_failslab+0x5/0x20 [ 2238.121201][T18629] slab_pre_alloc_hook+0x59/0x300 [ 2238.126241][T18629] ? sctp_add_bind_addr+0x89/0x350 [ 2238.131362][T18629] __kmem_cache_alloc_node+0x4f/0x270 [ 2238.136722][T18629] ? sctp_add_bind_addr+0x89/0x350 [ 2238.141830][T18629] kmalloc_trace+0x26/0xe0 [ 2238.146269][T18629] sctp_add_bind_addr+0x89/0x350 [ 2238.151308][T18629] sctp_copy_local_addr_list+0x317/0x4d0 [ 2238.156962][T18629] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 2238.162697][T18629] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 2238.168786][T18629] ? sctp_v4_is_any+0x31/0x50 [ 2238.173455][T18629] ? sctp_copy_one_addr+0x93/0x660 [ 2238.178563][T18629] sctp_bind_addr_copy+0xaf/0x3c0 [ 2238.183581][T18629] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 2238.189899][T18629] sctp_connect_new_asoc+0x2f5/0x6a0 [ 2238.195189][T18629] ? __sctp_connect+0xd80/0xd80 [ 2238.200030][T18629] ? __local_bh_enable_ip+0x136/0x1c0 [ 2238.205389][T18629] ? _local_bh_enable+0xa0/0xa0 [ 2238.210225][T18629] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 2238.216024][T18629] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 2238.221827][T18629] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 2238.227368][T18629] ? security_sctp_bind_connect+0x85/0xb0 [ 2238.233082][T18629] sctp_sendmsg+0x1686/0x2940 [ 2238.237760][T18629] ? sctp_getsockopt+0x8a0/0x8a0 [ 2238.242690][T18629] ? __might_fault+0xa6/0x120 [ 2238.247358][T18629] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2238.253762][T18629] ? aa_sock_msg_perm+0x94/0x150 [ 2238.258720][T18629] ? inet_sendmsg+0x7a/0x2a0 [ 2238.263303][T18629] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2238.268583][T18629] ? inet_send_prepare+0x250/0x250 [ 2238.273689][T18629] ____sys_sendmsg+0x5ed/0x9a0 [ 2238.278450][T18629] ? __sys_sendmsg_sock+0x30/0x30 [ 2238.283464][T18629] ? __import_iovec+0x306/0x510 [ 2238.288308][T18629] ? import_iovec+0x6f/0xa0 [ 2238.292809][T18629] ___sys_sendmsg+0x2a2/0x360 [ 2238.297487][T18629] ? __sys_sendmsg+0x2a0/0x2a0 [ 2238.302269][T18629] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2238.307993][T18629] __se_sys_sendmsg+0x1c3/0x2b0 [ 2238.312842][T18629] ? __x64_sys_sendmsg+0x80/0x80 [ 2238.317783][T18629] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2238.323685][T18629] do_syscall_64+0x4c/0xa0 [ 2238.328098][T18629] ? clear_bhb_loop+0x60/0xb0 [ 2238.332768][T18629] ? clear_bhb_loop+0x60/0xb0 [ 2238.337436][T18629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2238.343338][T18629] RIP: 0033:0x7f34cfda94d9 [ 2238.347762][T18629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2238.367876][T18629] RSP: 002b:00007f34d0cb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2238.376279][T18629] RAX: ffffffffffffffda RBX: 00007f34d0025fa0 RCX: 00007f34cfda94d9 [ 2238.384240][T18629] RDX: 00000000000080d1 RSI: 00002000000002c0 RDI: 0000000000000006 [ 2238.392199][T18629] RBP: 00007f34d0cb0090 R08: 0000000000000000 R09: 0000000000000000 [ 2238.400161][T18629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2238.408119][T18629] R13: 00007f34d0026038 R14: 00007f34d0025fa0 R15: 00007fffeeba14b8 [ 2238.416091][T18629] [ 2238.622926][T18651] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.14593'. [ 2238.657664][T18651] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 2238.722372][T18652] netlink: 'syz.2.14593': attribute type 16 has an invalid length. [ 2238.739458][T18652] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14593'. [ 2239.315257][T18667] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14599'. [ 2239.325291][T18667] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14599'. [ 2239.337954][T18667] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14599'. [ 2241.617551][T18702] netlink: 'syz.2.14613': attribute type 19 has an invalid length. [ 2241.700830][T18705] netlink: 'syz.0.14615': attribute type 5 has an invalid length. [ 2241.775616][T18705] netlink: 'syz.0.14615': attribute type 3 has an invalid length. [ 2241.803306][T18705] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.14615'. [ 2242.119327][T18718] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14620'. [ 2242.132968][T18718] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14620'. [ 2242.147041][T18718] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14620'. [ 2242.392068][T18727] device syzkaller0 entered promiscuous mode [ 2242.431116][T18729] netlink: 'syz.3.14624': attribute type 10 has an invalid length. [ 2244.615075][T18776] netlink: 'syz.2.14640': attribute type 10 has an invalid length. [ 2244.665596][T18776] netlink: 2 bytes leftover after parsing attributes in process `syz.2.14640'. [ 2244.730812][T18778] device syzkaller0 entered promiscuous mode [ 2244.807122][T18779] device syzkaller0 entered promiscuous mode [ 2245.516959][T18803] netlink: 'syz.1.14645': attribute type 8 has an invalid length. [ 2245.525995][T18803] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.14645'. [ 2246.615608][T18775] device syzkaller0 entered promiscuous mode [ 2246.931158][T18811] netlink: 'syz.2.14647': attribute type 2 has an invalid length. [ 2247.251830][T18822] netlink: 'syz.0.14650': attribute type 3 has an invalid length. [ 2247.287904][T18822] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.14650'. [ 2248.838505][T18810] netlink: 'syz.2.14647': attribute type 4 has an invalid length. [ 2248.849257][T18830] netlink: 'syz.0.14652': attribute type 10 has an invalid length. [ 2249.029221][T18839] netlink: 'syz.2.14656': attribute type 29 has an invalid length. [ 2249.057590][T18839] netlink: 'syz.2.14656': attribute type 3 has an invalid length. [ 2249.083269][T18840] netlink: 'syz.3.14657': attribute type 10 has an invalid length. [ 2249.092705][T18839] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14656'. [ 2249.363452][T18853] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 2249.371292][T18853] #PF: supervisor instruction fetch in kernel mode [ 2249.377796][T18853] #PF: error_code(0x0010) - not-present page [ 2249.383817][T18853] PGD 2a7b9067 P4D 2a7b9067 PUD 0 [ 2249.388960][T18853] Oops: 0010 [#1] PREEMPT SMP KASAN [ 2249.394164][T18853] CPU: 0 PID: 18853 Comm: syz.0.14662 Not tainted syzkaller #0 [ 2249.401714][T18853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2249.411772][T18853] RIP: 0010:0x0 [ 2249.415241][T18853] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2249.422606][T18853] RSP: 0018:ffffc90003727298 EFLAGS: 00010246 [ 2249.428679][T18853] RAX: 1ffffffff166c19f RBX: 1ffff920006e4e64 RCX: 0000000000000000 [ 2249.436654][T18853] RDX: ffffc90003727340 RSI: 0000000000000001 RDI: ffff88807a8ce000 [ 2249.444625][T18853] RBP: ffffc900037273b0 R08: ffff88807a8ce03f R09: 1ffff1100f519c07 [ 2249.452603][T18853] R10: dffffc0000000000 R11: ffffed100f519c08 R12: ffffe8ffffc532c0 [ 2249.460581][T18853] R13: ffffffff8b360cf8 R14: 0000000000000000 R15: ffff88807a8ce000 [ 2249.468554][T18853] FS: 00007f34d0cb06c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 2249.477468][T18853] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2249.484037][T18853] CR2: ffffffffffffffd6 CR3: 00000000a288d000 CR4: 00000000003506f0 [ 2249.491997][T18853] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2249.499952][T18853] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2249.507907][T18853] Call Trace: [ 2249.511172][T18853] [ 2249.514090][T18853] bond_xdp_xmit+0x31e/0x550 [ 2249.518671][T18853] ? bond_xdp_xmit+0x94/0x550 [ 2249.523340][T18853] ? bond_xdp+0x8c0/0x8c0 [ 2249.527660][T18853] bq_xmit_all+0xca9/0x1120 [ 2249.532153][T18853] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2249.537858][T18853] ? __dev_flush+0x1b0/0x1b0 [ 2249.542434][T18853] ? perf_trace_preemptirq_template+0x268/0x320 [ 2249.548662][T18853] ? irqentry_enter+0x33/0x50 [ 2249.553329][T18853] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2249.559299][T18853] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2249.565003][T18853] ? lock_chain_count+0x20/0x20 [ 2249.569842][T18853] ? rcu_is_watching+0x11/0xa0 [ 2249.574617][T18853] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2249.580761][T18853] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 2249.586903][T18853] ? rcu_read_lock_bh_held+0x76/0xf0 [ 2249.592175][T18853] ? rcu_read_lock_held+0x40/0x40 [ 2249.597187][T18853] bq_enqueue+0x338/0x3d0 [ 2249.601507][T18853] dev_map_enqueue_multi+0xf89/0x10f0 [ 2249.606876][T18853] ? dev_map_enqueue+0x330/0x330 [ 2249.611795][T18853] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 2249.617937][T18853] ? rcu_read_lock_held+0x40/0x40 [ 2249.622947][T18853] ? rcu_is_watching+0x11/0xa0 [ 2249.627700][T18853] xdp_do_redirect_frame+0x477/0x650 [ 2249.632970][T18853] bpf_test_run_xdp_live+0xa8b/0x1a90 [ 2249.638330][T18853] ? 0xffffffffa0005040 [ 2249.642470][T18853] ? text_poke_copy+0x7b/0x90 [ 2249.647136][T18853] ? bpf_test_run_xdp_live+0x515/0x1a90 [ 2249.652664][T18853] ? xdp_convert_md_to_buff+0x330/0x330 [ 2249.658204][T18853] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2249.664430][T18853] ? bpf_test_init+0x119/0x140 [ 2249.669176][T18853] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2249.674709][T18853] bpf_prog_test_run_xdp+0x757/0xf80 [ 2249.679980][T18853] ? __lock_acquire+0x7ea0/0x7ea0 [ 2249.684997][T18853] ? dev_put+0x80/0x80 [ 2249.689082][T18853] ? dev_put+0x80/0x80 [ 2249.693136][T18853] bpf_prog_test_run+0x31c/0x390 [ 2249.698065][T18853] __sys_bpf+0x62b/0x780 [ 2249.702310][T18853] ? bpf_link_show_fdinfo+0x550/0x550 [ 2249.707672][T18853] ? lock_chain_count+0x20/0x20 [ 2249.712508][T18853] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2249.718480][T18853] __x64_sys_bpf+0x78/0x90 [ 2249.722891][T18853] do_syscall_64+0x4c/0xa0 [ 2249.727297][T18853] ? clear_bhb_loop+0x60/0xb0 [ 2249.731963][T18853] ? clear_bhb_loop+0x60/0xb0 [ 2249.736630][T18853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2249.742510][T18853] RIP: 0033:0x7f34cfda94d9 [ 2249.746928][T18853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2249.766521][T18853] RSP: 002b:00007f34d0cb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2249.774918][T18853] RAX: ffffffffffffffda RBX: 00007f34d0025fa0 RCX: 00007f34cfda94d9 [ 2249.782894][T18853] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 2249.790872][T18853] RBP: 00007f34cfe3804e R08: 0000000000000000 R09: 0000000000000000 [ 2249.798842][T18853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2249.806799][T18853] R13: 00007f34d0026038 R14: 00007f34d0025fa0 R15: 00007fffeeba14b8 [ 2249.814776][T18853] [ 2249.817793][T18853] Modules linked in: [ 2249.821682][T18853] CR2: 0000000000000000 [ 2249.825832][T18853] ---[ end trace 0000000000000000 ]--- [ 2249.831272][T18853] RIP: 0010:0x0 [ 2249.834753][T18853] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2249.842100][T18853] RSP: 0018:ffffc90003727298 EFLAGS: 00010246 [ 2249.848162][T18853] RAX: 1ffffffff166c19f RBX: 1ffff920006e4e64 RCX: 0000000000000000 [ 2249.856125][T18853] RDX: ffffc90003727340 RSI: 0000000000000001 RDI: ffff88807a8ce000 [ 2249.864083][T18853] RBP: ffffc900037273b0 R08: ffff88807a8ce03f R09: 1ffff1100f519c07 [ 2249.872044][T18853] R10: dffffc0000000000 R11: ffffed100f519c08 R12: ffffe8ffffc532c0 [ 2249.880002][T18853] R13: ffffffff8b360cf8 R14: 0000000000000000 R15: ffff88807a8ce000 [ 2249.887961][T18853] FS: 00007f34d0cb06c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 2249.896878][T18853] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2249.903446][T18853] CR2: ffffffffffffffd6 CR3: 00000000a288d000 CR4: 00000000003506f0 [ 2249.911407][T18853] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2249.919367][T18853] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2249.927332][T18853] Kernel panic - not syncing: Fatal exception in interrupt [ 2249.934749][T18853] Kernel Offset: disabled [ 2249.939057][T18853] Rebooting in 86400 seconds..