last executing test programs: 5.033921515s ago: executing program 1 (id=8599): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000ff08ffff0000000000000000850000004100000085000000d000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24008095) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/257, 0x4a, 0x101, 0x6}, 0x28) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) openat$cgroup_int(r3, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) openat$cgroup_int(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) r6 = syz_clone(0x82288000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0xd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffffffff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRESOCT=r0], 0x48) 4.935771121s ago: executing program 4 (id=8600): r0 = socket$kcm(0x2c, 0x7, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000140), 0x4) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000094040007441405"], 0x48}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000440), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x97, 0xb, 0x14, 0x9, 0x0, 0x0, 0x28020, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x5}, 0x102411, 0xffffffffffffffff, 0x200, 0x0, 0x5eba, 0x13, 0x3, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) r3 = perf_event_open(&(0x7f0000000080)={0xf984e59fa3c2e5dd, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x96}, 0x107510, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff5, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xd, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1000000000000032}, 0x4000000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0xfd, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x2002, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5d31, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0x9}, 0x806, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000000), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x6, &(0x7f0000000000)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x46) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x2000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) 4.620450789s ago: executing program 2 (id=8602): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x8000080, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000800110300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 4.547367423s ago: executing program 4 (id=8604): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (fail_nth: 2) 4.42955757s ago: executing program 1 (id=8605): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 4.25570457s ago: executing program 2 (id=8606): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000004000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/17, @ANYRES32], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r1}) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, &(0x7f0000000000)=r6, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0xe, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x11, 0x78, 0x72, 0xf519, 0x0, r6, 0x0, '\x00', r7, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r3, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, r3}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r9) 3.931111449s ago: executing program 1 (id=8608): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xe08, 0x0, 0x59, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x2}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x2}, 0x50) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b9040220080006067c09e8fe55a1bc0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) 3.719920562s ago: executing program 4 (id=8609): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069003600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) gettid() r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x4008050) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0xf8, 0x7, 0xe, 0x4, 0x0, 0x3, 0x80a80, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x384, 0x200}, 0x28, 0xbba, 0x3, 0x4, 0xf72, 0x0, 0x4, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x3, r1, 0xb) socket$kcm(0xa, 0x2, 0x88) close(0xffffffffffffffff) close(r0) openat$tun(0xffffffffffffff9c, 0x0, 0x101200, 0x0) 3.719264472s ago: executing program 0 (id=8610): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0xe6, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1ff, 0x6fe}, 0x0, 0x7b, 0xfffffbff, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2003}, 0x0, 0xc, 0xffffffffffffffff, 0x9) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) close(r0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000ffffffff070000009500000000000000", @ANYRESHEX=r3], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) close(r5) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000500)=""/244, 0xf4}, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000580)="4830b7877523086ce1722ee47d66bf9e38", 0x11}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3880d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) 3.539651072s ago: executing program 1 (id=8612): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000140)=""/237, 0x0, 0xed, 0x1}, 0x28) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x110, 0xa}], 0x10}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x894a, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRESOCT=r0], 0x48) 2.468463065s ago: executing program 3 (id=8616): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x8000080, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000800110300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 2.467043665s ago: executing program 2 (id=8617): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x8000080, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000800110300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 2.360050672s ago: executing program 0 (id=8618): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.302468815s ago: executing program 4 (id=8619): r0 = socket$kcm(0xa, 0x7, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x46, &(0x7f0000000040), 0xcf) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x7, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{}, &(0x7f00000012c0), &(0x7f0000001300)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_ext={0x1c, 0xa, &(0x7f00000013c0)=@raw=[@ldst={0x2, 0x2, 0x1, 0x7, 0x8, 0xfffffffffffffff4, 0x10}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000001440)='GPL\x00', 0x5, 0x26, &(0x7f0000001480)=""/38, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000014c0)={0x5, 0xb, 0x4d0d, 0x800}, 0x10, 0xe2fb, 0xffffffffffffffff, 0x2, &(0x7f0000001500)=[0xffffffffffffffff], &(0x7f0000001540)=[{0x4, 0x4, 0x9, 0x2}, {0x2, 0x3, 0x1, 0x8}], 0x10, 0x3}, 0x94) recvmsg$kcm(r0, &(0x7f0000000980)={&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/130, 0x82}, {&(0x7f0000000300)=""/115, 0x73}, {&(0x7f0000000380)=""/204, 0xcc}, {&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/58, 0x3a}, {&(0x7f00000006c0)=""/131, 0x83}, {&(0x7f0000000780)=""/214, 0xd6}, {&(0x7f0000000600)=""/73, 0x49}], 0x9, &(0x7f0000000900)=""/15, 0xf}, 0x26c78798ccd92447) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000400000002000000000400110300000000000000000000000000000200000000020000000000000802000000000061"], 0x0, 0x44}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f00000028c0)="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", 0x7, 0xffffffffffffffff, 0x24b318d287959382}, 0x38) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r1, 0x24, 0x1, 0x6, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0]}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f00000008c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r3, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b40)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000b80)=[0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x74, &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="1c000000210081044e81f782db44b9040200000000806c0100001500", 0x1c}], 0x1}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) 2.296511555s ago: executing program 1 (id=8620): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="180600000000000000000000000000001812000078e5296949ae7b396317c0d53c18fdf7c8c44b01722d6aff67b2e5e7164250b2a3426e086cde949d7e8dbbd884ce346e6830d910718103a2c95767a30ce6b2433112cbd92f0a04a628522dd89836f0af058b647fe6feb28d5673165ef7d43626d5b5f6f5a30a82f1ace3f06c440806746d80083d026d309467288aa78d12d97d391836859dde87b99b81350114913caa7f34d772e5774cb8101b8b6ebe228cd31b4c8734c48c17565ad12fd7b663af4a6c20186d350971b0df179fdd0f0aae504ff2a3a5db22ff8f71ae", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8}, 0x2000, 0x0, 0x0, 0x0, 0x46fa, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x10c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000061b4d47900000000000000180100002020702500000000002020207b1af8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000006209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000100", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8918, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90324fc602f1b01000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd, 0x9, 0x4, 0xa, 0x0, 0x2, 0x24104, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x9, 0x6}, 0x800, 0x8af7, 0x5e92, 0x3, 0x9, 0x8, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, r0, 0x1) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0x3, 0x4, 0x0, 0x0, 0x6, 0x20202, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x4}, 0x5010, 0x102, 0x1, 0x5, 0x8, 0x100, 0x89, 0x0, 0x200, 0x0, 0x7}, 0x0, 0x3, r5, 0x9) 2.242737408s ago: executing program 3 (id=8621): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5b, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000020000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000000000000001000018", @ANYRES32=r3, @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xb, 0x0, &(0x7f0000000140)="63eced8e46dc3f2ddf33c9", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000000000000a0000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00 \x00'/12], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a2, &(0x7f0000000080)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)="296c6c6bb0ba2d10a53be11a67e2c1912e5302873f4d9bf31e34d53f9c0558591d796663d90413533f9fe4816b962d6c32338bb5ba12daf16f43", 0x3a}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffb3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x48}, 0x4008004) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000100)=0x8, 0x12) ioctl$SIOCSIFHWADDR(r9, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 2.144454534s ago: executing program 0 (id=8622): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r0, 0x20, 0x0, 0x7, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x1e, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x81}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd65, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @generic={0x66, 0x7, 0x5, 0x7f, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x7, 0x24, &(0x7f00000002c0)=""/36, 0x41000, 0x40, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=[0x1], &(0x7f0000000340)=[{0x1, 0x4, 0xc, 0x1}, {0x2, 0x2, 0xb, 0x9}, {0x0, 0x1, 0xc, 0x4}, {0x3, 0x2, 0x5, 0x5}], 0x10, 0x3}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map=r4, r3, 0x2e, 0x0, 0x0, @void, @value=r5, @void, @void, r2}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000580)={'macvlan0\x00', @local}) socketpair(0x29, 0x80000, 0xe6, &(0x7f00000005c0)) mkdirat$cgroup(r1, &(0x7f0000000600)='syz0\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000006c0)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={0x0, r9, 0x0, 0x9, &(0x7f0000000700)='macvlan0\x00', 0x0}, 0x30) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r10}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r3, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000880)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x80, 0x0, r9, 0xffffffff, '\x00', r12, r9, 0x3, 0x4, 0x2}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b40)={[{0x2b, 'cpu'}, {0x2b, 'rlimit'}, {0x2d, 'blkio'}, {0x2d, 'cpuacct'}, {0x2d, 'cpu'}]}, 0x22) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000d00)={r4, &(0x7f0000000b80)="e07416736d9d18ebf4dec00330be4b4c7ae15efe34639c231b922e0dc0a0e72f929a2b0d4c33de4b11fbd547c8e9d05bd57118cf1b5373d6b102bbc6e0511efeea985806a9a1de42c9c1366c0b9099360d8dba4aeb6f0e60179a713021e9452029943fc1221fed90200bdc420fcf01feaccf33612786af07545e4a9b00f43e3d2143ca3d931a56e2b1f0bfd4e80817a2327e821aedde223c7c66e28a7dc391a6c31ec4d45e33e95c6c9e9bec740598df6b16d69e0347e130d570b62b80ede924a31b327d806972156148a80a4a625203d3376a59491c242f06bdd44140a513", &(0x7f0000000c80)=""/115}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x5, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@map_val={0x18, 0x8, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000d80)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x70, '\x00', r12, @fallback=0x1e, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, r11, 0x2, &(0x7f0000000dc0)=[r14, r9, r9], &(0x7f0000000e00)=[{0x4, 0x4, 0x3, 0x6}, {0x3, 0x2, 0x1, 0x8}], 0x10, 0x401}, 0x94) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000f40)=@o_path={&(0x7f0000000f00)='./file0\x00', 0x0, 0x8, r7}, 0x18) (async) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@volatile={0xb, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x30, 0x30, 0x30, 0x61, 0x0, 0x61, 0x2e, 0x30]}}, &(0x7f0000000fc0)=""/141, 0x2e, 0x8d, 0x0, 0x5, 0x10000, @value=r9}, 0x28) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000010c0)={r10}, 0x4) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001100), 0x2, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0xb) socket$kcm(0x29, 0x5, 0x0) (async) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0xe, '\x00', r12, r9, 0x5, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001440)={&(0x7f0000001140)="c0d326fd533f989fac240475ce861a079b260188b69d0b50cdaf56f3f720ea55e9808a3b380d7c0fb25d042d86451d0fecc132558433090fd31a981787898ef617d5f9092d1cb6832ccd08d33a5e4fddcaef146509dce0e4a48a15c5782391210fc953afa99cf66997d8df537378ae7819c1febd449bbd49b662052ca1fe95c8810a52c1041efb249df8aac2f2ed5542f7fdb2bf9ac8fa81ba5eebf2e9592b617bf77f7e01", &(0x7f0000001200)=""/70, &(0x7f0000001280)="c9b065c984fc587a68f54a33ed55f066a911eb7f04dd82c08c05ca1951f9b274db421a8aa9fa9e9e446a4aab62e39055ae03ffafa007c45057ad803a29efa6f44c573568952a7d630fc6646bd0cb50ea9b67e2673cc524538dccb92c282b4ee01a6e1f234b926a94497e98e7551dec2c7d65b1d7d650", &(0x7f0000001300)="a7295cd029b1bf5575b00974211b062a7146fc1998fba2b87275516692f1e5d0b69272e23f93dfc5864cf9441e2a90e19b2428fb46d8da58823769dca94517f6256e3a81da80e7c47eac23cc8b216d216a962f65dda453482e73966dacc276fe652ce829d9798c441f97202c856af4a43af4317249bf43493de7af2db329890d85918e615902712df98ea5620f67", 0x9, r16, 0x4}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001480)={0x1b, 0x0, 0x0, 0x80000001, 0x0, r14, 0x6, '\x00', 0x0, r15, 0x2, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001580)={{r9}, &(0x7f0000001500), &(0x7f0000001540)=r3}, 0x20) 2.113693886s ago: executing program 2 (id=8623): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x11) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xffffffff}, 0x10810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x9, 0x8, 0x7f, 0xfa, 0x0, 0x3, 0x2020, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1a12a9cc, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x80, 0x6, 0x40000000, 0x4, 0xff, 0x7, 0x8, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4, r0, 0xb) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x4, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r5}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000004000000001800000000000001000000", @ANYRES32, @ANYBLOB="0200000000000000000003000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300"], 0x50) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x8, "fb95785b587f2fba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) 1.755935057s ago: executing program 0 (id=8624): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x2700, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.712030779s ago: executing program 2 (id=8625): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069003600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) gettid() r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x4008050) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0xf8, 0x7, 0xe, 0x4, 0x0, 0x3, 0x80a80, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x384, 0x200}, 0x28, 0xbba, 0x3, 0x4, 0xf72, 0x0, 0x4, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x3, r1, 0xb) socket$kcm(0xa, 0x2, 0x88) close(0xffffffffffffffff) close(r0) openat$tun(0xffffffffffffff9c, 0x0, 0x101200, 0x0) 1.70254262s ago: executing program 3 (id=8626): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x1020e7, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7000000000, 0x8}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x18010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x32}, 0x1}}, 0x80, 0x0}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r7}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000070000000900000000000000", @ANYRES32, @ANYBLOB="00000000008000000000000000000000fda8b23425e746f81aca176415538308d3b9218cba16f13aa2b0154b7bfe5f832b89280625", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1.408207437s ago: executing program 0 (id=8627): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380), 0x4) socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x41, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r5, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe77, 0x0, 0x8, 0xfffffffffffffffb, 0xfffffffffffffffd}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80d1) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) 1.403762527s ago: executing program 4 (id=8628): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000004000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/17, @ANYRES32], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r1}) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, &(0x7f0000000000)=r6, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0xe, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x11, 0x78, 0x72, 0xf519, 0x0, r6, 0x0, '\x00', r7, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r3, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, r3}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r9) 1.212536479s ago: executing program 2 (id=8629): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000ff08ffff0000000000000000850000004100000085000000d000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24008095) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/257, 0x4a, 0x101, 0x6}, 0x28) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) openat$cgroup_int(r3, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) openat$cgroup_int(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) r6 = syz_clone(0x82288000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0xd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffffffff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRESOCT=r0], 0x48) 1.151884202s ago: executing program 3 (id=8630): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000140)=""/237, 0x0, 0xed, 0x1}, 0x28) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x110, 0xa}], 0x10}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x894a, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 [ 1748.634004][T28204] dump_stack_lvl+0x188/0x24e [ 1748.638740][T28204] ? show_regs_print_info+0x12/0x12 [ 1748.643994][T28204] ? load_image+0x400/0x400 [ 1748.648565][T28204] ? __might_sleep+0xd0/0xd0 [ 1748.653211][T28204] ? __lock_acquire+0x7d10/0x7d10 [ 1748.658298][T28204] should_fail_ex+0x399/0x4d0 [ 1748.663051][T28204] should_failslab+0x5/0x20 [ 1748.667613][T28204] slab_pre_alloc_hook+0x59/0x310 [ 1748.672694][T28204] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1748.678470][T28204] __kmem_cache_alloc_node+0x4f/0x260 [ 1748.683897][T28204] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1748.689745][T28204] __kmalloc+0xa0/0x240 [ 1748.693959][T28204] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1748.699579][T28204] ? tomoyo_path_number_perm+0x205/0x650 [ 1748.705265][T28204] tomoyo_path_number_perm+0x22f/0x650 [ 1748.710777][T28204] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1748.716316][T28204] ? __fget_files+0x28/0x4b0 [ 1748.720947][T28204] ? __fget_files+0x28/0x4b0 [ 1748.725596][T28204] security_file_ioctl+0x6c/0xa0 [ 1748.730591][T28204] __se_sys_ioctl+0x48/0x170 [ 1748.735240][T28204] do_syscall_64+0x4c/0xa0 [ 1748.739706][T28204] ? clear_bhb_loop+0x60/0xb0 [ 1748.744423][T28204] ? clear_bhb_loop+0x60/0xb0 [ 1748.749147][T28204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1748.755093][T28204] RIP: 0033:0x7fd46cf9acb9 [ 1748.759571][T28204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1748.779221][T28204] RSP: 002b:00007fd46ded2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1748.787684][T28204] RAX: ffffffffffffffda RBX: 00007fd46d215fa0 RCX: 00007fd46cf9acb9 [ 1748.795703][T28204] RDX: 0000200000000000 RSI: 00000000400454ca RDI: 000000000000000d [ 1748.803726][T28204] RBP: 00007fd46ded2090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.811734][T28204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.819748][T28204] R13: 00007fd46d216038 R14: 00007fd46d215fa0 R15: 00007ffc1e967c78 [ 1748.827779][T28204] [ 1748.890388][T28204] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1748.999956][T28214] device syzkaller0 entered promiscuous mode [ 1753.938630][T28236] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7523'. [ 1753.947940][T28237] netlink: 'syz.1.7523': attribute type 10 has an invalid length. [ 1753.984742][T28237] device veth0_vlan left promiscuous mode [ 1754.004322][T28237] device veth0_vlan entered promiscuous mode [ 1754.024499][T28237] team0: Device veth0_vlan failed to register rx_handler [ 1755.109319][T28277] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7539'. [ 1756.460111][T28301] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7545'. [ 1756.500019][T28301] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7545'. [ 1756.530937][T28296] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7545'. [ 1756.562084][T28301] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7545'. [ 1756.583673][T28296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1756.590975][T28296] IPv6: NLM_F_CREATE should be set when creating new route [ 1756.598349][T28296] IPv6: NLM_F_CREATE should be set when creating new route [ 1756.605646][T28296] IPv6: NLM_F_CREATE should be set when creating new route [ 1757.399640][T28305] netlink: 'syz.4.7547': attribute type 10 has an invalid length. [ 1757.427887][T28305] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1758.270547][T28331] netlink: 'syz.1.7556': attribute type 10 has an invalid length. [ 1758.980244][T28344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7560'. [ 1758.999643][T28347] netlink: 'syz.4.7562': attribute type 10 has an invalid length. [ 1759.074514][T28347] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1759.144352][T28344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7560'. [ 1759.228860][T28349] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7560'. [ 1759.291762][T28351] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7560'. [ 1759.336541][T28344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1759.343883][T28344] IPv6: NLM_F_CREATE should be set when creating new route [ 1759.351196][T28344] IPv6: NLM_F_CREATE should be set when creating new route [ 1759.358501][T28344] IPv6: NLM_F_CREATE should be set when creating new route [ 1759.631948][T28360] netlink: 'syz.0.7566': attribute type 10 has an invalid length. [ 1759.692257][T28360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.699971][T28360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.886547][T28360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.893811][T28360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1759.901477][T28360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.908867][T28360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1760.083501][T28360] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1763.475359][T28395] netlink: 'syz.0.7575': attribute type 10 has an invalid length. [ 1763.530361][T28397] netlink: 'syz.4.7576': attribute type 10 has an invalid length. [ 1764.725875][T28425] netlink: 'syz.0.7587': attribute type 10 has an invalid length. [ 1764.812072][T28423] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7586'. [ 1764.905530][T28421] netlink: 'syz.0.7587': attribute type 29 has an invalid length. [ 1764.967035][T28421] netlink: 'syz.0.7587': attribute type 29 has an invalid length. [ 1765.532665][T28442] netlink: 'syz.4.7592': attribute type 10 has an invalid length. [ 1765.548737][T28442] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1767.184811][T28448] netlink: 'syz.4.7596': attribute type 10 has an invalid length. [ 1767.326665][T28448] netlink: 'syz.4.7596': attribute type 29 has an invalid length. [ 1767.365491][T28448] netlink: 'syz.4.7596': attribute type 29 has an invalid length. [ 1768.155332][T28475] netlink: 'syz.2.7601': attribute type 10 has an invalid length. [ 1768.516948][T28480] netlink: 'syz.1.7604': attribute type 7 has an invalid length. [ 1768.540229][T28483] netlink: 'syz.4.7606': attribute type 10 has an invalid length. [ 1768.573343][T28483] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1768.649948][T28489] FAULT_INJECTION: forcing a failure. [ 1768.649948][T28489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1768.690183][T28489] CPU: 0 PID: 28489 Comm: syz.0.7605 Not tainted syzkaller #0 [ 1768.697725][T28489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1768.707820][T28489] Call Trace: [ 1768.711133][T28489] [ 1768.714103][T28489] dump_stack_lvl+0x188/0x24e [ 1768.718849][T28489] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1768.725138][T28489] ? show_regs_print_info+0x12/0x12 [ 1768.730389][T28489] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1768.736637][T28489] should_fail_ex+0x399/0x4d0 [ 1768.741383][T28489] _copy_from_user+0x2c/0x170 [ 1768.746207][T28489] __sys_bpf+0x2ea/0x780 [ 1768.750510][T28489] ? bpf_link_show_fdinfo+0x380/0x380 [ 1768.755956][T28489] ? lock_chain_count+0x20/0x20 [ 1768.760862][T28489] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1768.766906][T28489] __x64_sys_bpf+0x78/0x90 [ 1768.771374][T28489] do_syscall_64+0x4c/0xa0 [ 1768.775841][T28489] ? clear_bhb_loop+0x60/0xb0 [ 1768.780545][T28489] ? clear_bhb_loop+0x60/0xb0 [ 1768.785252][T28489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1768.791168][T28489] RIP: 0033:0x7f2af359acb9 [ 1768.795632][T28489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1768.815274][T28489] RSP: 002b:00007f2af43c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1768.823734][T28489] RAX: ffffffffffffffda RBX: 00007f2af3815fa0 RCX: 00007f2af359acb9 [ 1768.831727][T28489] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1768.839714][T28489] RBP: 00007f2af43c5090 R08: 0000000000000000 R09: 0000000000000000 [ 1768.847702][T28489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.855810][T28489] R13: 00007f2af3816038 R14: 00007f2af3815fa0 R15: 00007ffe11862df8 [ 1768.863832][T28489] [ 1769.390550][T28503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1769.398080][T28503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1769.781547][T28508] validate_nla: 1 callbacks suppressed [ 1769.781567][T28508] netlink: 'syz.3.7608': attribute type 10 has an invalid length. [ 1771.063693][T28591] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7616'. [ 1771.132672][T28591] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7616'. [ 1771.161779][T28596] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7616'. [ 1771.226089][T28599] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7616'. [ 1771.265661][T28591] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1771.998104][T28615] netlink: 'syz.1.7625': attribute type 10 has an invalid length. [ 1772.374990][T28630] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7630'. [ 1772.755857][T28642] netlink: 'syz.1.7634': attribute type 10 has an invalid length. [ 1772.803135][T28642] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1772.854744][T28644] FAULT_INJECTION: forcing a failure. [ 1772.854744][T28644] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.024781][T28644] CPU: 1 PID: 28644 Comm: syz.3.7635 Not tainted syzkaller #0 [ 1773.032389][T28644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1773.042497][T28644] Call Trace: [ 1773.045867][T28644] [ 1773.048835][T28644] dump_stack_lvl+0x188/0x24e [ 1773.053565][T28644] ? show_regs_print_info+0x12/0x12 [ 1773.058823][T28644] ? load_image+0x400/0x400 [ 1773.063382][T28644] ? __might_sleep+0xd0/0xd0 [ 1773.068015][T28644] ? __lock_acquire+0x7d10/0x7d10 [ 1773.073101][T28644] should_fail_ex+0x399/0x4d0 [ 1773.077847][T28644] should_failslab+0x5/0x20 [ 1773.082408][T28644] slab_pre_alloc_hook+0x59/0x310 [ 1773.087479][T28644] ? prepend_path+0xa68/0xc20 [ 1773.092190][T28644] ? tomoyo_encode+0x27e/0x540 [ 1773.096997][T28644] __kmem_cache_alloc_node+0x4f/0x260 [ 1773.102420][T28644] ? tomoyo_encode+0x27e/0x540 [ 1773.107212][T28644] __kmalloc+0xa0/0x240 [ 1773.111579][T28644] tomoyo_encode+0x27e/0x540 [ 1773.116205][T28644] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1773.121967][T28644] ? tomoyo_path_number_perm+0x205/0x650 [ 1773.127652][T28644] tomoyo_path_number_perm+0x22f/0x650 [ 1773.133228][T28644] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1773.138726][T28644] ? ksys_write+0x1c0/0x250 [ 1773.143269][T28644] ? common_file_perm+0x171/0x1c0 [ 1773.148340][T28644] ? __fget_files+0x28/0x4b0 [ 1773.152974][T28644] ? __fget_files+0x28/0x4b0 [ 1773.157611][T28644] security_file_ioctl+0x6c/0xa0 [ 1773.162623][T28644] __se_sys_ioctl+0x48/0x170 [ 1773.167249][T28644] do_syscall_64+0x4c/0xa0 [ 1773.171694][T28644] ? clear_bhb_loop+0x60/0xb0 [ 1773.176397][T28644] ? clear_bhb_loop+0x60/0xb0 [ 1773.181096][T28644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1773.187016][T28644] RIP: 0033:0x7fd46cf9acb9 [ 1773.191464][T28644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1773.211115][T28644] RSP: 002b:00007fd46ded2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1773.219639][T28644] RAX: ffffffffffffffda RBX: 00007fd46d215fa0 RCX: 00007fd46cf9acb9 [ 1773.227630][T28644] RDX: 0000200000000000 RSI: 00000000c0189436 RDI: 0000000000000005 [ 1773.235624][T28644] RBP: 00007fd46ded2090 R08: 0000000000000000 R09: 0000000000000000 [ 1773.243620][T28644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1773.251712][T28644] R13: 00007fd46d216038 R14: 00007fd46d215fa0 R15: 00007ffc1e967c78 [ 1773.259814][T28644] [ 1774.015829][T28670] netlink: 'syz.2.7641': attribute type 7 has an invalid length. [ 1774.441358][T28644] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1776.836013][T28742] netlink: 'syz.1.7653': attribute type 1 has an invalid length. [ 1776.863365][T28745] FAULT_INJECTION: forcing a failure. [ 1776.863365][T28745] name failslab, interval 1, probability 0, space 0, times 0 [ 1776.902018][T28742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7653'. [ 1776.936435][T28745] CPU: 1 PID: 28745 Comm: syz.3.7655 Not tainted syzkaller #0 [ 1776.943997][T28745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1776.954097][T28745] Call Trace: [ 1776.957419][T28745] [ 1776.960392][T28745] dump_stack_lvl+0x188/0x24e [ 1776.965127][T28745] ? show_regs_print_info+0x12/0x12 [ 1776.970384][T28745] ? load_image+0x400/0x400 [ 1776.974946][T28745] ? __might_sleep+0xd0/0xd0 [ 1776.979589][T28745] ? __lock_acquire+0x7d10/0x7d10 [ 1776.984676][T28745] should_fail_ex+0x399/0x4d0 [ 1776.989429][T28745] should_failslab+0x5/0x20 [ 1776.993991][T28745] slab_pre_alloc_hook+0x59/0x310 [ 1776.999072][T28745] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1777.004664][T28745] __kmem_cache_alloc_node+0x4f/0x260 [ 1777.010088][T28745] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 1777.015674][T28745] __kmalloc+0xa0/0x240 [ 1777.019905][T28745] bpf_prog_test_run_skb+0x234/0x12a0 [ 1777.025322][T28745] ? __fget_files+0x28/0x4b0 [ 1777.029961][T28745] ? __fget_files+0x28/0x4b0 [ 1777.034603][T28745] ? __fget_files+0x43d/0x4b0 [ 1777.039430][T28745] ? cpu_online+0xa0/0xa0 [ 1777.043812][T28745] bpf_prog_test_run+0x31e/0x390 [ 1777.048811][T28745] __sys_bpf+0x62b/0x780 [ 1777.053110][T28745] ? bpf_link_show_fdinfo+0x380/0x380 [ 1777.058555][T28745] ? lock_chain_count+0x20/0x20 [ 1777.063485][T28745] __x64_sys_bpf+0x78/0x90 [ 1777.067954][T28745] do_syscall_64+0x4c/0xa0 [ 1777.072423][T28745] ? clear_bhb_loop+0x60/0xb0 [ 1777.077144][T28745] ? clear_bhb_loop+0x60/0xb0 [ 1777.081877][T28745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1777.087813][T28745] RIP: 0033:0x7fd46cf9acb9 [ 1777.092267][T28745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1777.111922][T28745] RSP: 002b:00007fd46ded2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1777.120394][T28745] RAX: ffffffffffffffda RBX: 00007fd46d215fa0 RCX: 00007fd46cf9acb9 [ 1777.128439][T28745] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1777.136458][T28745] RBP: 00007fd46ded2090 R08: 0000000000000000 R09: 0000000000000000 [ 1777.144464][T28745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1777.152465][T28745] R13: 00007fd46d216038 R14: 00007fd46d215fa0 R15: 00007ffc1e967c78 [ 1777.160494][T28745] [ 1777.829853][T28761] FAULT_INJECTION: forcing a failure. [ 1777.829853][T28761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1777.946916][T28761] CPU: 0 PID: 28761 Comm: syz.2.7661 Not tainted syzkaller #0 [ 1777.954484][T28761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1777.964587][T28761] Call Trace: [ 1777.967937][T28761] [ 1777.970917][T28761] dump_stack_lvl+0x188/0x24e [ 1777.975665][T28761] ? show_regs_print_info+0x12/0x12 [ 1777.980935][T28761] ? load_image+0x400/0x400 [ 1777.985520][T28761] ? __lock_acquire+0x7d10/0x7d10 [ 1777.990620][T28761] should_fail_ex+0x399/0x4d0 [ 1777.995370][T28761] _copy_from_user+0x2c/0x170 [ 1778.000113][T28761] iovec_from_user+0x143/0x360 [ 1778.004969][T28761] __import_iovec+0x6d/0x500 [ 1778.009647][T28761] import_iovec+0x6f/0xa0 [ 1778.014047][T28761] ___sys_sendmsg+0x252/0x360 [ 1778.018810][T28761] ? __sys_sendmsg+0x290/0x290 [ 1778.023678][T28761] ? __lock_acquire+0x7d10/0x7d10 [ 1778.028812][T28761] __se_sys_sendmsg+0x1bb/0x2a0 [ 1778.033761][T28761] ? __x64_sys_sendmsg+0x80/0x80 [ 1778.038798][T28761] ? lockdep_hardirqs_on+0x94/0x140 [ 1778.044073][T28761] do_syscall_64+0x4c/0xa0 [ 1778.048549][T28761] ? clear_bhb_loop+0x60/0xb0 [ 1778.053288][T28761] ? clear_bhb_loop+0x60/0xb0 [ 1778.058021][T28761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1778.063963][T28761] RIP: 0033:0x7f4189b9acb9 [ 1778.068431][T28761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1778.088524][T28761] RSP: 002b:00007f418aaab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1778.096994][T28761] RAX: ffffffffffffffda RBX: 00007f4189e15fa0 RCX: 00007f4189b9acb9 [ 1778.105018][T28761] RDX: 0000000020004800 RSI: 0000200000000080 RDI: 0000000000000004 [ 1778.113299][T28761] RBP: 00007f418aaab090 R08: 0000000000000000 R09: 0000000000000000 [ 1778.121419][T28761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1778.129448][T28761] R13: 00007f4189e16038 R14: 00007f4189e15fa0 R15: 00007ffca8318078 [ 1778.137508][T28761] [ 1778.191374][T28765] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7660'. [ 1778.226392][T28767] netlink: 'syz.0.7659': attribute type 10 has an invalid length. [ 1781.054054][T28780] netlink: 'syz.4.7663': attribute type 10 has an invalid length. [ 1781.760569][T28797] netlink: 'syz.3.7673': attribute type 10 has an invalid length. [ 1781.784582][T28799] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7672'. [ 1781.878272][T28799] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7672'. [ 1781.951508][T28799] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7672'. [ 1782.011849][T28799] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7672'. [ 1782.178061][T28805] netlink: 'syz.4.7676': attribute type 10 has an invalid length. [ 1782.217727][T28807] netlink: 'syz.3.7677': attribute type 10 has an invalid length. [ 1782.908024][T28815] netlink: 'syz.2.7679': attribute type 10 has an invalid length. [ 1782.956789][T28821] netlink: 'syz.3.7681': attribute type 10 has an invalid length. [ 1783.177838][T28829] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7683'. [ 1783.231024][T28829] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7683'. [ 1783.322187][T28837] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7683'. [ 1783.478480][T28832] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7683'. [ 1783.491659][T28829] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1783.499005][T28829] IPv6: NLM_F_CREATE should be set when creating new route [ 1783.506405][T28829] IPv6: NLM_F_CREATE should be set when creating new route [ 1783.513736][T28829] IPv6: NLM_F_CREATE should be set when creating new route [ 1783.644382][T28839] netlink: 'syz.0.7687': attribute type 10 has an invalid length. [ 1783.930160][T28849] netlink: 'syz.2.7692': attribute type 10 has an invalid length. [ 1783.988319][T28852] netlink: 'syz.1.7695': attribute type 10 has an invalid length. [ 1784.203338][T28861] netlink: 'syz.0.7697': attribute type 10 has an invalid length. [ 1784.883700][T28876] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7704'. [ 1784.947653][T28876] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7704'. [ 1785.010123][T28880] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7704'. [ 1785.034192][T28883] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7704'. [ 1785.086154][T28876] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1785.115457][T28879] netlink: 'syz.0.7705': attribute type 10 has an invalid length. [ 1786.135017][T28902] netlink: 'syz.3.7713': attribute type 10 has an invalid length. [ 1786.762980][T28926] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1790.097735][T28971] validate_nla: 2 callbacks suppressed [ 1790.097759][T28971] netlink: 'syz.0.7736': attribute type 10 has an invalid length. [ 1790.146898][T28971] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1790.348866][T28975] FAULT_INJECTION: forcing a failure. [ 1790.348866][T28975] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.414878][T28975] CPU: 0 PID: 28975 Comm: syz.3.7740 Not tainted syzkaller #0 [ 1790.422447][T28975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1790.432540][T28975] Call Trace: [ 1790.435854][T28975] [ 1790.438821][T28975] dump_stack_lvl+0x188/0x24e [ 1790.443548][T28975] ? show_regs_print_info+0x12/0x12 [ 1790.448822][T28975] ? load_image+0x400/0x400 [ 1790.453374][T28975] ? __might_sleep+0xd0/0xd0 [ 1790.458025][T28975] ? __lock_acquire+0x7d10/0x7d10 [ 1790.463106][T28975] should_fail_ex+0x399/0x4d0 [ 1790.467849][T28975] should_failslab+0x5/0x20 [ 1790.472408][T28975] slab_pre_alloc_hook+0x59/0x310 [ 1790.477477][T28975] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1790.483684][T28975] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1790.489632][T28975] __kmem_cache_alloc_node+0x4f/0x260 [ 1790.495059][T28975] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1790.501020][T28975] kmalloc_trace+0x26/0xe0 [ 1790.505529][T28975] sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1790.511306][T28975] sctp_association_new+0x15e5/0x25d0 [ 1790.516738][T28975] sctp_connect_new_asoc+0x2da/0x6a0 [ 1790.522086][T28975] ? __sctp_connect+0xd80/0xd80 [ 1790.526995][T28975] ? _local_bh_enable+0xa0/0xa0 [ 1790.531902][T28975] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1790.537792][T28975] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1790.543654][T28975] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1790.549414][T28975] ? security_sctp_bind_connect+0x85/0xb0 [ 1790.555179][T28975] sctp_sendmsg+0x15b0/0x2940 [ 1790.559935][T28975] ? aa_sk_perm+0x7e1/0x950 [ 1790.564512][T28975] ? sctp_getsockopt+0x8a0/0x8a0 [ 1790.569507][T28975] ? __might_fault+0xa6/0x120 [ 1790.574233][T28975] ? aa_af_perm+0x340/0x340 [ 1790.578786][T28975] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1790.585257][T28975] ? inet_sendmsg+0x78/0x2f0 [ 1790.589899][T28975] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1790.595234][T28975] ? security_socket_sendmsg+0x7c/0xa0 [ 1790.600754][T28975] ? inet_send_prepare+0x260/0x260 [ 1790.605926][T28975] ____sys_sendmsg+0x5be/0x970 [ 1790.610760][T28975] ? __sys_sendmsg_sock+0x30/0x30 [ 1790.615823][T28975] ? __import_iovec+0x315/0x500 [ 1790.620712][T28975] ? import_iovec+0x6f/0xa0 [ 1790.625253][T28975] ___sys_sendmsg+0x2a2/0x360 [ 1790.629988][T28975] ? __sys_sendmsg+0x290/0x290 [ 1790.634816][T28975] ? ktime_get_real_ts64+0x440/0x440 [ 1790.640167][T28975] __se_sys_sendmsg+0x1bb/0x2a0 [ 1790.645075][T28975] ? __x64_sys_sendmsg+0x80/0x80 [ 1790.650077][T28975] ? lockdep_hardirqs_on+0x94/0x140 [ 1790.655313][T28975] do_syscall_64+0x4c/0xa0 [ 1790.659771][T28975] ? clear_bhb_loop+0x60/0xb0 [ 1790.664511][T28975] ? clear_bhb_loop+0x60/0xb0 [ 1790.669229][T28975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1790.675244][T28975] RIP: 0033:0x7fd46cf9acb9 [ 1790.679689][T28975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1790.699324][T28975] RSP: 002b:00007fd46ded2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1790.707795][T28975] RAX: ffffffffffffffda RBX: 00007fd46d215fa0 RCX: 00007fd46cf9acb9 [ 1790.715797][T28975] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 1790.723795][T28975] RBP: 00007fd46ded2090 R08: 0000000000000000 R09: 0000000000000000 [ 1790.731817][T28975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1790.739826][T28975] R13: 00007fd46d216038 R14: 00007fd46d215fa0 R15: 00007ffc1e967c78 [ 1790.747863][T28975] [ 1791.237195][T28999] FAULT_INJECTION: forcing a failure. [ 1791.237195][T28999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1791.293768][T28999] CPU: 1 PID: 28999 Comm: syz.4.7748 Not tainted syzkaller #0 [ 1791.301324][T28999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1791.311425][T28999] Call Trace: [ 1791.314744][T28999] [ 1791.317712][T28999] dump_stack_lvl+0x188/0x24e [ 1791.322448][T28999] ? show_regs_print_info+0x12/0x12 [ 1791.327698][T28999] ? load_image+0x400/0x400 [ 1791.332249][T28999] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1791.338456][T28999] ? lockdep_hardirqs_on+0x94/0x140 [ 1791.343717][T28999] should_fail_ex+0x399/0x4d0 [ 1791.348458][T28999] copyin+0x1b/0x120 [ 1791.352410][T28999] _copy_from_iter+0x447/0x1130 [ 1791.357415][T28999] ? copyout_mc+0x110/0x110 [ 1791.361986][T28999] ? __virt_addr_valid+0x188/0x540 [ 1791.367148][T28999] ? __virt_addr_valid+0x188/0x540 [ 1791.372311][T28999] ? __virt_addr_valid+0x465/0x540 [ 1791.377479][T28999] ? __check_object_size+0x500/0xa40 [ 1791.382832][T28999] netlink_sendmsg+0x755/0xbd0 [ 1791.387662][T28999] ? lockdep_hardirqs_on+0x94/0x140 [ 1791.392922][T28999] ? netlink_getsockopt+0x550/0x550 [ 1791.398172][T28999] ? security_socket_sendmsg+0x77/0xa0 [ 1791.403675][T28999] ? security_socket_sendmsg+0x7c/0xa0 [ 1791.409185][T28999] ? netlink_getsockopt+0x550/0x550 [ 1791.414434][T28999] ____sys_sendmsg+0x5be/0x970 [ 1791.419273][T28999] ? __sys_sendmsg_sock+0x30/0x30 [ 1791.424353][T28999] ? __import_iovec+0x315/0x500 [ 1791.429268][T28999] ? import_iovec+0x6f/0xa0 [ 1791.433920][T28999] ___sys_sendmsg+0x2a2/0x360 [ 1791.438659][T28999] ? __sys_sendmsg+0x290/0x290 [ 1791.443499][T28999] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1791.449553][T28999] __se_sys_sendmsg+0x1bb/0x2a0 [ 1791.454465][T28999] ? __x64_sys_sendmsg+0x80/0x80 [ 1791.459476][T28999] do_syscall_64+0x4c/0xa0 [ 1791.463935][T28999] ? clear_bhb_loop+0x60/0xb0 [ 1791.468651][T28999] ? clear_bhb_loop+0x60/0xb0 [ 1791.473376][T28999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1791.479324][T28999] RIP: 0033:0x7f61b119acb9 [ 1791.483803][T28999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1791.503462][T28999] RSP: 002b:00007f61b1fea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1791.511935][T28999] RAX: ffffffffffffffda RBX: 00007f61b1416090 RCX: 00007f61b119acb9 [ 1791.519956][T28999] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000007 [ 1791.527963][T28999] RBP: 00007f61b1fea090 R08: 0000000000000000 R09: 0000000000000000 [ 1791.535981][T28999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1791.544005][T28999] R13: 00007f61b1416128 R14: 00007f61b1416090 R15: 00007ffd1c399988 [ 1791.552039][T28999] [ 1791.666294][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.683171][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.057562][T29021] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7754'. [ 1792.092704][T29021] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7754'. [ 1792.121781][T29023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7754'. [ 1792.154978][T29021] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7754'. [ 1792.222391][T29021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1794.712679][T29027] netlink: 'syz.4.7755': attribute type 13 has an invalid length. [ 1794.727002][T29027] netlink: 160 bytes leftover after parsing attributes in process `syz.4.7755'. [ 1794.859867][T29036] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7768'. [ 1795.013507][T29036] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7768'. [ 1795.071989][T29040] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7768'. [ 1795.147395][T29042] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7768'. [ 1795.202710][T29036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1795.210043][T29036] IPv6: NLM_F_CREATE should be set when creating new route [ 1795.217418][T29036] IPv6: NLM_F_CREATE should be set when creating new route [ 1795.224731][T29036] IPv6: NLM_F_CREATE should be set when creating new route [ 1795.511520][T29046] team0: Port device team_slave_0 removed [ 1795.538322][T29046] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1797.447665][T29058] netlink: 'syz.0.7765': attribute type 29 has an invalid length. [ 1797.565326][T29058] netlink: 'syz.0.7765': attribute type 29 has an invalid length. [ 1797.586432][T29061] netlink: 'syz.0.7765': attribute type 29 has an invalid length. [ 1797.601915][T29062] netlink: 'syz.0.7765': attribute type 29 has an invalid length. [ 1797.619711][T29058] netlink: 'syz.0.7765': attribute type 29 has an invalid length. [ 1797.806302][T29069] netlink: 'syz.1.7770': attribute type 10 has an invalid length. [ 1797.842767][T29069] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1797.970895][T29073] netlink: 'syz.0.7772': attribute type 25 has an invalid length. [ 1800.093678][T29092] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7775'. [ 1800.208258][T29092] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7775'. [ 1800.552373][T29093] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7775'. [ 1800.568654][T29092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1800.598006][T29099] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7775'. [ 1800.846639][T29114] netlink: 'syz.0.7785': attribute type 10 has an invalid length. [ 1800.861848][T29114] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1801.001959][T29120] netlink: 'syz.3.7784': attribute type 10 has an invalid length. [ 1801.153631][T29124] netlink: 'syz.2.7788': attribute type 10 has an invalid length. [ 1801.280003][T29124] team0: Device ipvlan1 failed to register rx_handler [ 1803.070292][T29129] team0: Port device team_slave_0 removed [ 1803.078040][T29129] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1803.507418][T29158] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7798'. [ 1803.533244][T29158] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7798'. [ 1803.584338][T29159] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7798'. [ 1803.595440][T29158] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7798'. [ 1803.606965][T29158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1803.850910][T29162] netlink: 'syz.2.7802': attribute type 10 has an invalid length. [ 1803.932332][T29167] netlink: 'syz.4.7803': attribute type 10 has an invalid length. [ 1803.967342][T29167] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1803.991598][T29172] netlink: 'syz.1.7804': attribute type 21 has an invalid length. [ 1804.004325][T29172] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7804'. [ 1804.017717][T29172] netlink: 'syz.1.7804': attribute type 2 has an invalid length. [ 1804.137801][T29174] device team_slave_0 left promiscuous mode [ 1806.876507][T29174] team0: Port device team_slave_0 removed [ 1806.910372][T29174] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1807.181529][T29178] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7806'. [ 1807.896529][T29206] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7815'. [ 1807.949870][T29206] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7815'. [ 1807.998293][T29207] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7815'. [ 1808.052500][T29207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1808.141939][T29206] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7815'. [ 1808.167294][T29209] netlink: 'syz.0.7816': attribute type 10 has an invalid length. [ 1808.186371][T29209] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1808.667645][T29221] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7820'. [ 1808.707639][T29221] netlink: 'syz.3.7820': attribute type 21 has an invalid length. [ 1808.722004][T29221] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7820'. [ 1808.804565][T29231] netlink: 'syz.0.7824': attribute type 2 has an invalid length. [ 1808.825602][T29231] device 0 entered promiscuous mode [ 1808.832025][T29221] netlink: 'syz.3.7820': attribute type 12 has an invalid length. [ 1808.853882][T29231] netlink: 'syz.0.7824': attribute type 2 has an invalid length. [ 1808.900247][T29221] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7820'. [ 1808.935947][T29236] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.7824'. [ 1809.366750][T29250] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7830'. [ 1809.783444][T29258] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1810.404842][T29281] netlink: 'syz.1.7839': attribute type 29 has an invalid length. [ 1810.441645][T29281] netlink: 'syz.1.7839': attribute type 29 has an invalid length. [ 1810.506082][T29281] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1810.575027][T29288] netlink: 'syz.1.7839': attribute type 29 has an invalid length. [ 1810.588124][T29290] netlink: 'syz.4.7842': attribute type 29 has an invalid length. [ 1810.614095][T29281] netlink: 'syz.1.7839': attribute type 29 has an invalid length. [ 1810.633351][T29290] netlink: 'syz.4.7842': attribute type 29 has an invalid length. [ 1810.646443][T29281] netlink: 'syz.1.7839': attribute type 29 has an invalid length. [ 1810.688960][T29290] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1810.798676][T29291] netlink: 'syz.4.7842': attribute type 29 has an invalid length. [ 1810.884427][T29290] netlink: 'syz.4.7842': attribute type 29 has an invalid length. [ 1811.335356][T29313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1811.480058][T29319] FAULT_INJECTION: forcing a failure. [ 1811.480058][T29319] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.531458][T29319] CPU: 1 PID: 29319 Comm: syz.4.7851 Not tainted syzkaller #0 [ 1811.539095][T29319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1811.549199][T29319] Call Trace: [ 1811.552518][T29319] [ 1811.555515][T29319] dump_stack_lvl+0x188/0x24e [ 1811.560263][T29319] ? show_regs_print_info+0x12/0x12 [ 1811.565607][T29319] ? load_image+0x400/0x400 [ 1811.570160][T29319] ? __might_sleep+0xd0/0xd0 [ 1811.574795][T29319] ? __lock_acquire+0x7d10/0x7d10 [ 1811.579881][T29319] ? lock_chain_count+0x20/0x20 [ 1811.584801][T29319] should_fail_ex+0x399/0x4d0 [ 1811.589540][T29319] should_failslab+0x5/0x20 [ 1811.594097][T29319] slab_pre_alloc_hook+0x59/0x310 [ 1811.599174][T29319] kmem_cache_alloc+0x56/0x2f0 [ 1811.604006][T29319] ? getname_flags+0xb7/0x500 [ 1811.608738][T29319] getname_flags+0xb7/0x500 [ 1811.613315][T29319] do_sys_openat2+0xdd/0x4b0 [ 1811.617970][T29319] ? ct_nmi_exit+0x145/0x1c0 [ 1811.622601][T29319] ? ct_irq_exit_irqson+0x113/0x170 [ 1811.627841][T29319] ? do_sys_open+0xe0/0xe0 [ 1811.632320][T29319] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1811.638360][T29319] ? lock_chain_count+0x20/0x20 [ 1811.643268][T29319] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1811.649294][T29319] __x64_sys_openat+0x135/0x160 [ 1811.654179][T29319] do_syscall_64+0x4c/0xa0 [ 1811.658633][T29319] ? clear_bhb_loop+0x60/0xb0 [ 1811.663339][T29319] ? clear_bhb_loop+0x60/0xb0 [ 1811.668041][T29319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1811.673983][T29319] RIP: 0033:0x7f61b115b58e [ 1811.678433][T29319] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1811.698078][T29319] RSP: 002b:00007f61b200aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1811.706523][T29319] RAX: ffffffffffffffda RBX: 00007f61b200b6c0 RCX: 00007f61b115b58e [ 1811.714526][T29319] RDX: 0000000000000002 RSI: 00007f61b200af90 RDI: ffffffffffffff9c [ 1811.722527][T29319] RBP: 00007f61b200b090 R08: 0000000000000000 R09: 0000000000000000 [ 1811.730517][T29319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1811.738519][T29319] R13: 00007f61b1416038 R14: 00007f61b1415fa0 R15: 00007ffd1c399988 [ 1811.746531][T29319] [ 1812.636039][T29355] __nla_validate_parse: 10 callbacks suppressed [ 1812.636061][T29355] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7864'. [ 1812.793327][T29357] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.7866'. [ 1812.820229][T29357] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7866'. [ 1812.952129][T29366] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7868'. [ 1813.000199][T29366] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7868'. [ 1813.030129][T29368] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7868'. [ 1813.071108][T29366] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7868'. [ 1813.104453][T29366] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1813.325166][T29375] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.7871'. [ 1813.504547][T29385] device macvtap0 entered promiscuous mode [ 1813.533048][T29385] macvtap0: refused to change device tx_queue_len [ 1817.606222][T29418] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7883'. [ 1818.361466][T29432] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7887'. [ 1818.427033][T29432] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7887'. [ 1818.463987][T29435] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7887'. [ 1818.555716][T29436] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7887'. [ 1818.611189][T29432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1819.278421][T29444] validate_nla: 6 callbacks suppressed [ 1819.278441][T29444] netlink: 'syz.0.7888': attribute type 2 has an invalid length. [ 1819.590601][T29444] netlink: 'syz.0.7888': attribute type 8 has an invalid length. [ 1819.689567][T29444] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7888'. [ 1819.801566][T29449] netlink: 160 bytes leftover after parsing attributes in process `syz.1.7892'. [ 1820.189840][T29449] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1820.261702][T29453] netlink: 'syz.2.7893': attribute type 10 has an invalid length. [ 1820.992490][T29484] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7903'. [ 1823.730814][T29484] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7903'. [ 1823.746216][T29488] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7903'. [ 1823.771121][T29481] netlink: 'syz.1.7902': attribute type 10 has an invalid length. [ 1823.784331][T29492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1823.851973][T29495] netlink: 'syz.2.7905': attribute type 10 has an invalid length. [ 1824.264974][T29505] FAULT_INJECTION: forcing a failure. [ 1824.264974][T29505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1824.311787][T29505] CPU: 0 PID: 29505 Comm: syz.3.7909 Not tainted syzkaller #0 [ 1824.319339][T29505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1824.329447][T29505] Call Trace: [ 1824.332775][T29505] [ 1824.335744][T29505] dump_stack_lvl+0x188/0x24e [ 1824.340482][T29505] ? show_regs_print_info+0x12/0x12 [ 1824.345733][T29505] ? load_image+0x400/0x400 [ 1824.350291][T29505] ? __lock_acquire+0x7d10/0x7d10 [ 1824.355391][T29505] ? perf_trace_lock_acquire+0x100/0x3e0 [ 1824.361078][T29505] should_fail_ex+0x399/0x4d0 [ 1824.365798][T29505] strncpy_from_user+0x32/0x350 [ 1824.370687][T29505] bpf_prog_load+0x1f3/0x1560 [ 1824.375445][T29505] ? lock_chain_count+0x20/0x20 [ 1824.380364][T29505] ? map_freeze+0x390/0x390 [ 1824.384916][T29505] ? __sys_bpf+0x360/0x780 [ 1824.389372][T29505] ? __sanitizer_cov_trace_switch+0x4f/0xe0 [ 1824.395307][T29505] __sys_bpf+0x5b8/0x780 [ 1824.399591][T29505] ? bpf_link_show_fdinfo+0x380/0x380 [ 1824.405038][T29505] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1824.411257][T29505] __x64_sys_bpf+0x78/0x90 [ 1824.415726][T29505] do_syscall_64+0x4c/0xa0 [ 1824.420174][T29505] ? clear_bhb_loop+0x60/0xb0 [ 1824.424882][T29505] ? clear_bhb_loop+0x60/0xb0 [ 1824.429618][T29505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1824.435539][T29505] RIP: 0033:0x7fd46cf9acb9 [ 1824.439983][T29505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1824.459696][T29505] RSP: 002b:00007fd46ded2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1824.468134][T29505] RAX: ffffffffffffffda RBX: 00007fd46d215fa0 RCX: 00007fd46cf9acb9 [ 1824.476134][T29505] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1824.484225][T29505] RBP: 00007fd46ded2090 R08: 0000000000000000 R09: 0000000000000000 [ 1824.492217][T29505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1824.500209][T29505] R13: 00007fd46d216038 R14: 00007fd46d215fa0 R15: 00007ffc1e967c78 [ 1824.508213][T29505] [ 1824.672067][T29503] netlink: 'syz.1.7908': attribute type 10 has an invalid length. [ 1824.687388][T29508] openvswitch: netlink: Flow key attr not present in new flow. [ 1826.085698][T29540] netlink: 'syz.0.7919': attribute type 10 has an invalid length. [ 1828.471623][T29548] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7920'. [ 1828.480705][T29548] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7920'. [ 1828.533305][T29549] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7920'. [ 1828.554041][T29548] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7920'. [ 1828.595719][T29548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1828.864269][T29560] netlink: 'syz.0.7926': attribute type 10 has an invalid length. [ 1829.324397][T29565] netlink: 'syz.4.7929': attribute type 2 has an invalid length. [ 1829.334231][T29565] netlink: 'syz.4.7929': attribute type 11 has an invalid length. [ 1829.343424][T29565] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7929'. [ 1829.665856][T29570] netlink: 64967 bytes leftover after parsing attributes in process `syz.0.7932'. [ 1829.815912][T29575] netlink: 'syz.4.7931': attribute type 10 has an invalid length. [ 1830.417877][T29598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7939'. [ 1830.466590][T29598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7939'. [ 1830.520595][T29600] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7939'. [ 1830.591604][T29598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7939'. [ 1830.622355][T29600] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1831.116683][T29620] FAULT_INJECTION: forcing a failure. [ 1831.116683][T29620] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.143004][T29620] CPU: 1 PID: 29620 Comm: syz.1.7947 Not tainted syzkaller #0 [ 1831.150575][T29620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1831.160673][T29620] Call Trace: [ 1831.163994][T29620] [ 1831.166977][T29620] dump_stack_lvl+0x188/0x24e [ 1831.171720][T29620] ? show_regs_print_info+0x12/0x12 [ 1831.176987][T29620] ? load_image+0x400/0x400 [ 1831.181550][T29620] ? __might_sleep+0xd0/0xd0 [ 1831.186195][T29620] ? __lock_acquire+0x7d10/0x7d10 [ 1831.191296][T29620] should_fail_ex+0x399/0x4d0 [ 1831.196049][T29620] should_failslab+0x5/0x20 [ 1831.200632][T29620] slab_pre_alloc_hook+0x59/0x310 [ 1831.205716][T29620] kmem_cache_alloc+0x56/0x2f0 [ 1831.210546][T29620] ? _sctp_make_chunk+0x14e/0x420 [ 1831.215667][T29620] _sctp_make_chunk+0x14e/0x420 [ 1831.220583][T29620] sctp_make_datafrag_empty+0xa8/0x530 [ 1831.226115][T29620] ? sctp_user_addto_chunk+0xac/0x220 [ 1831.231588][T29620] sctp_datamsg_from_user+0x71e/0xee0 [ 1831.237050][T29620] sctp_sendmsg_to_asoc+0x107b/0x1830 [ 1831.242530][T29620] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 1831.247059][T29622] netlink: 'syz.3.7948': attribute type 10 has an invalid length. [ 1831.248401][T29620] ? __local_bh_enable_ip+0x136/0x1c0 [ 1831.248501][T29620] ? _local_bh_enable+0xa0/0xa0 [ 1831.248528][T29620] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1831.272448][T29620] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1831.278298][T29620] ? sctp_sendmsg_check_sflags+0x18d/0x2d0 [ 1831.284148][T29620] sctp_sendmsg+0x1984/0x2940 [ 1831.288866][T29620] ? trace_event_raw_event_lock+0x250/0x250 [ 1831.294806][T29620] ? aa_sk_perm+0x7e1/0x950 [ 1831.299370][T29620] ? sctp_getsockopt+0x8a0/0x8a0 [ 1831.304378][T29620] ? __might_fault+0xa6/0x120 [ 1831.309094][T29620] ? aa_af_perm+0x340/0x340 [ 1831.313634][T29620] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1831.320097][T29620] ? inet_sendmsg+0x78/0x2f0 [ 1831.324718][T29620] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1831.330022][T29620] ? security_socket_sendmsg+0x7c/0xa0 [ 1831.335532][T29620] ? inet_send_prepare+0x260/0x260 [ 1831.340685][T29620] ____sys_sendmsg+0x5be/0x970 [ 1831.345504][T29620] ? __sys_sendmsg_sock+0x30/0x30 [ 1831.350564][T29620] ? __import_iovec+0x315/0x500 [ 1831.355460][T29620] ? import_iovec+0x6f/0xa0 [ 1831.359998][T29620] ___sys_sendmsg+0x2a2/0x360 [ 1831.364743][T29620] ? __sys_sendmsg+0x290/0x290 [ 1831.369582][T29620] ? __lock_acquire+0x7d10/0x7d10 [ 1831.374681][T29620] __se_sys_sendmsg+0x1bb/0x2a0 [ 1831.379573][T29620] ? __x64_sys_sendmsg+0x80/0x80 [ 1831.384567][T29620] ? lockdep_hardirqs_on+0x94/0x140 [ 1831.389820][T29620] do_syscall_64+0x4c/0xa0 [ 1831.394268][T29620] ? clear_bhb_loop+0x60/0xb0 [ 1831.398972][T29620] ? clear_bhb_loop+0x60/0xb0 [ 1831.403686][T29620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1831.409615][T29620] RIP: 0033:0x7fb8a819acb9 [ 1831.414054][T29620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1831.433690][T29620] RSP: 002b:00007fb8a9129028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1831.442223][T29620] RAX: ffffffffffffffda RBX: 00007fb8a8415fa0 RCX: 00007fb8a819acb9 [ 1831.450219][T29620] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1831.458238][T29620] RBP: 00007fb8a9129090 R08: 0000000000000000 R09: 0000000000000000 [ 1831.466234][T29620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1831.474229][T29620] R13: 00007fb8a8416038 R14: 00007fb8a8415fa0 R15: 00007ffe626b3918 [ 1831.482261][T29620] [ 1832.209757][T29634] netlink: 'syz.1.7953': attribute type 10 has an invalid length. [ 1832.891865][T24205] syzkaller0: tun_net_xmit 76 [ 1832.896883][T24205] syzkaller0: tun_net_xmit 48 [ 1832.921531][ T128] syzkaller0: tun_net_xmit 76 [ 1832.944178][T29645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7955'. [ 1833.024698][T29645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7955'. [ 1833.505252][ T4346] syzkaller0: tun_net_xmit 76 [ 1833.591368][T29647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7955'. [ 1833.602855][ T128] syzkaller0: tun_net_xmit 76 [ 1833.638341][T29645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1834.002701][T29664] FAULT_INJECTION: forcing a failure. [ 1834.002701][T29664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1834.024646][T29664] CPU: 0 PID: 29664 Comm: syz.0.7959 Not tainted syzkaller #0 [ 1834.032192][T29664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1834.042304][T29664] Call Trace: [ 1834.045618][T29664] [ 1834.048591][T29664] dump_stack_lvl+0x188/0x24e [ 1834.053349][T29664] ? show_regs_print_info+0x12/0x12 [ 1834.058621][T29664] ? load_image+0x400/0x400 [ 1834.063179][T29664] ? __lock_acquire+0x7d10/0x7d10 [ 1834.068253][T29664] ? __virt_addr_valid+0x188/0x540 [ 1834.073398][T29664] should_fail_ex+0x399/0x4d0 [ 1834.078118][T29664] _copy_from_user+0x2c/0x170 [ 1834.082833][T29664] bpf_test_init+0xde/0x140 [ 1834.087372][T29664] bpf_prog_test_run_xdp+0x484/0xf10 [ 1834.092696][T29664] ? lock_chain_count+0x20/0x20 [ 1834.097599][T29664] ? dev_put+0x80/0x80 [ 1834.101707][T29664] ? dev_put+0x80/0x80 [ 1834.105806][T29664] bpf_prog_test_run+0x31e/0x390 [ 1834.110776][T29664] __sys_bpf+0x62b/0x780 [ 1834.115051][T29664] ? bpf_link_show_fdinfo+0x380/0x380 [ 1834.120471][T29664] __x64_sys_bpf+0x78/0x90 [ 1834.124916][T29664] do_syscall_64+0x4c/0xa0 [ 1834.129386][T29664] ? clear_bhb_loop+0x60/0xb0 [ 1834.134093][T29664] ? clear_bhb_loop+0x60/0xb0 [ 1834.138793][T29664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1834.144718][T29664] RIP: 0033:0x7f2af359acb9 [ 1834.149172][T29664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1834.168811][T29664] RSP: 002b:00007f2af43c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1834.177262][T29664] RAX: ffffffffffffffda RBX: 00007f2af3815fa0 RCX: 00007f2af359acb9 [ 1834.185263][T29664] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1834.193269][T29664] RBP: 00007f2af43c5090 R08: 0000000000000000 R09: 0000000000000000 [ 1834.201270][T29664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1834.209284][T29664] R13: 00007f2af3816038 R14: 00007f2af3815fa0 R15: 00007ffe11862df8 [ 1834.217298][T29664] [ 1838.798148][T29648] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7955'. [ 1838.807687][T29667] netlink: 'syz.4.7960': attribute type 10 has an invalid length. [ 1838.816439][T29676] netlink: 160 bytes leftover after parsing attributes in process `syz.0.7962'. [ 1838.909037][T29676] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1839.095768][T29684] netlink: 'syz.4.7966': attribute type 10 has an invalid length. [ 1839.122946][T29684] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1839.217161][T29686] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.7967'. [ 1840.641841][T29694] netlink: 'syz.1.7968': attribute type 10 has an invalid length. [ 1840.990970][T29714] FAULT_INJECTION: forcing a failure. [ 1840.990970][T29714] name failslab, interval 1, probability 0, space 0, times 0 [ 1841.004172][T29714] CPU: 0 PID: 29714 Comm: syz.2.7976 Not tainted syzkaller #0 [ 1841.011675][T29714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1841.021785][T29714] Call Trace: [ 1841.025113][T29714] [ 1841.028087][T29714] dump_stack_lvl+0x188/0x24e [ 1841.032821][T29714] ? show_regs_print_info+0x12/0x12 [ 1841.038075][T29714] ? load_image+0x400/0x400 [ 1841.042649][T29714] should_fail_ex+0x399/0x4d0 [ 1841.047397][T29714] should_failslab+0x5/0x20 [ 1841.051959][T29714] slab_pre_alloc_hook+0x59/0x310 [ 1841.057037][T29714] ? ___neigh_create+0x6ce/0x24c0 [ 1841.062132][T29714] __kmem_cache_alloc_node+0x4f/0x260 [ 1841.067560][T29714] ? ___neigh_create+0x6ce/0x24c0 [ 1841.072644][T29714] __kmalloc+0xa0/0x240 [ 1841.076858][T29714] ___neigh_create+0x6ce/0x24c0 [ 1841.081777][T29714] ? __ipv6_neigh_lookup_noref+0x5b9/0x7d0 [ 1841.087745][T29714] ? ip6_finish_output2+0x58f/0x15d0 [ 1841.093086][T29714] ip6_finish_output2+0x1525/0x15d0 [ 1841.098349][T29714] ? ip6_finish_output2+0x58f/0x15d0 [ 1841.103692][T29714] ? ip6_mtu+0x79/0x3f0 [ 1841.107910][T29714] ? nf_hook+0x390/0x390 [ 1841.112208][T29714] ? ip6_finish_output+0x577/0x820 [ 1841.117377][T29714] ndisc_send_skb+0xbf1/0x14e0 [ 1841.122187][T29714] ? ndisc_send_skb+0x1fa/0x14e0 [ 1841.127163][T29714] ? ndisc_mc_map+0x810/0x810 [ 1841.131883][T29714] ? ndisc_alloc_skb+0xa6/0x450 [ 1841.136772][T29714] ? skb_dst+0xd0/0xd0 [ 1841.140872][T29714] ? ndisc_ns_create+0x48c/0x620 [ 1841.145849][T29714] ndisc_solicit+0x36b/0x660 [ 1841.150581][T29714] ? __neigh_event_send+0xec1/0x15f0 [ 1841.155901][T29714] ? ndisc_cleanup+0x30/0x30 [ 1841.160531][T29714] ? ndisc_cleanup+0x30/0x30 [ 1841.165240][T29714] __neigh_event_send+0xf22/0x15f0 [ 1841.170398][T29714] ? ___neigh_create+0x1e06/0x24c0 [ 1841.175555][T29714] neigh_resolve_output+0x197/0x730 [ 1841.180812][T29714] ip6_finish_output2+0xdd6/0x15d0 [ 1841.185965][T29714] ? ip6_mtu+0x79/0x3f0 [ 1841.190169][T29714] ? ip6_finish_output2+0x58f/0x15d0 [ 1841.195490][T29714] ? ip6_mtu+0x79/0x3f0 [ 1841.199677][T29714] ? nf_hook+0x390/0x390 [ 1841.203951][T29714] ? ip6_finish_output+0x577/0x820 [ 1841.209175][T29714] ? ip6_send_skb+0x10b/0x380 [ 1841.213904][T29714] ip6_send_skb+0x1d1/0x380 [ 1841.218439][T29714] rawv6_push_pending_frames+0x6e3/0x8d0 [ 1841.224109][T29714] ? ip6_append_data+0x1ea/0x3e0 [ 1841.229069][T29714] ? raw6_getfrag+0x300/0x300 [ 1841.233774][T29714] ? rawv6_send_hdrinc+0x16c0/0x16c0 [ 1841.239091][T29714] rawv6_sendmsg+0x1293/0x1700 [ 1841.243903][T29714] ? compat_rawv6_ioctl+0x60/0x60 [ 1841.248969][T29714] ? aa_sk_perm+0x81f/0x950 [ 1841.253503][T29714] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 1841.259948][T29714] ? inet_sendmsg+0x78/0x2f0 [ 1841.264567][T29714] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1841.269877][T29714] ? security_socket_sendmsg+0x7c/0xa0 [ 1841.275365][T29714] ? inet_send_prepare+0x260/0x260 [ 1841.280504][T29714] ____sys_sendmsg+0x5be/0x970 [ 1841.285306][T29714] ? __sys_sendmsg_sock+0x30/0x30 [ 1841.290365][T29714] ? __import_iovec+0x315/0x500 [ 1841.295251][T29714] ? import_iovec+0x6f/0xa0 [ 1841.299774][T29714] ___sys_sendmsg+0x2a2/0x360 [ 1841.304488][T29714] ? __sys_sendmsg+0x290/0x290 [ 1841.309293][T29714] ? trace_call_bpf+0xbf/0x6b0 [ 1841.314203][T29714] __se_sys_sendmsg+0x1bb/0x2a0 [ 1841.319080][T29714] ? __x64_sys_sendmsg+0x80/0x80 [ 1841.324161][T29714] ? lockdep_hardirqs_on+0x94/0x140 [ 1841.329386][T29714] do_syscall_64+0x4c/0xa0 [ 1841.333817][T29714] ? clear_bhb_loop+0x60/0xb0 [ 1841.338529][T29714] ? clear_bhb_loop+0x60/0xb0 [ 1841.343243][T29714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1841.349150][T29714] RIP: 0033:0x7f4189b9acb9 [ 1841.353594][T29714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1841.373226][T29714] RSP: 002b:00007f418aaab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1841.381658][T29714] RAX: ffffffffffffffda RBX: 00007f4189e15fa0 RCX: 00007f4189b9acb9 [ 1841.389646][T29714] RDX: 0000000024040080 RSI: 0000200000000480 RDI: 0000000000000007 [ 1841.397643][T29714] RBP: 00007f418aaab090 R08: 0000000000000000 R09: 0000000000000000 [ 1841.405718][T29714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1841.413706][T29714] R13: 00007f4189e16038 R14: 00007f4189e15fa0 R15: 00007ffca8318078 [ 1841.421708][T29714] [ 1841.870446][T29731] netlink: 'syz.4.7981': attribute type 10 has an invalid length. [ 1841.879502][T29731] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1842.960038][T29764] netlink: 160 bytes leftover after parsing attributes in process `syz.4.7990'. [ 1843.095273][T29764] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1850.257946][T29854] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8010'. [ 1850.308764][T29854] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8010'. [ 1850.369280][T29856] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8010'. [ 1850.391833][T29854] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8010'. [ 1850.464123][T29856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1851.128738][T29882] FAULT_INJECTION: forcing a failure. [ 1851.128738][T29882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1851.173516][T29882] CPU: 0 PID: 29882 Comm: syz.4.8031 Not tainted syzkaller #0 [ 1851.181065][T29882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1851.191167][T29882] Call Trace: [ 1851.194490][T29882] [ 1851.197465][T29882] dump_stack_lvl+0x188/0x24e [ 1851.202204][T29882] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1851.208417][T29882] ? show_regs_print_info+0x12/0x12 [ 1851.213664][T29882] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1851.219868][T29882] ? dump_stack+0x5/0x12 [ 1851.224188][T29882] should_fail_ex+0x399/0x4d0 [ 1851.228924][T29882] copyin+0x1b/0x120 [ 1851.232879][T29882] _copy_from_iter+0x447/0x1130 [ 1851.237775][T29882] ? lockdep_hardirqs_on+0x94/0x140 [ 1851.243037][T29882] ? copyout_mc+0x110/0x110 [ 1851.247611][T29882] ? __virt_addr_valid+0x188/0x540 [ 1851.252775][T29882] ? __virt_addr_valid+0x188/0x540 [ 1851.257928][T29882] ? __virt_addr_valid+0x465/0x540 [ 1851.263090][T29882] ? __check_object_size+0x500/0xa40 [ 1851.268425][T29882] netlink_sendmsg+0x755/0xbd0 [ 1851.273267][T29882] ? netlink_getsockopt+0x550/0x550 [ 1851.278524][T29882] ? aa_sock_msg_perm+0x94/0x150 [ 1851.283510][T29882] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1851.288848][T29882] ? security_socket_sendmsg+0x7c/0xa0 [ 1851.294362][T29882] ? netlink_getsockopt+0x550/0x550 [ 1851.299603][T29882] ____sys_sendmsg+0x5be/0x970 [ 1851.304426][T29882] ? __sys_sendmsg_sock+0x30/0x30 [ 1851.309499][T29882] ? __import_iovec+0x315/0x500 [ 1851.314412][T29882] ? import_iovec+0x6f/0xa0 [ 1851.318958][T29882] ___sys_sendmsg+0x2a2/0x360 [ 1851.323720][T29882] ? __sys_sendmsg+0x290/0x290 [ 1851.328555][T29882] ? ktime_get_real_ts64+0x440/0x440 [ 1851.333909][T29882] __se_sys_sendmsg+0x1bb/0x2a0 [ 1851.338814][T29882] ? __x64_sys_sendmsg+0x80/0x80 [ 1851.343817][T29882] do_syscall_64+0x4c/0xa0 [ 1851.348309][T29882] ? clear_bhb_loop+0x60/0xb0 [ 1851.353043][T29882] ? clear_bhb_loop+0x60/0xb0 [ 1851.357787][T29882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1851.363723][T29882] RIP: 0033:0x7f61b119acb9 [ 1851.368172][T29882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1851.387823][T29882] RSP: 002b:00007f61b200b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1851.396306][T29882] RAX: ffffffffffffffda RBX: 00007f61b1415fa0 RCX: 00007f61b119acb9 [ 1851.404333][T29882] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 000000000000000a [ 1851.412353][T29882] RBP: 00007f61b200b090 R08: 0000000000000000 R09: 0000000000000000 [ 1851.420376][T29882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1851.428397][T29882] R13: 00007f61b1416038 R14: 00007f61b1415fa0 R15: 00007ffd1c399988 [ 1851.436437][T29882] [ 1851.603352][T29890] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8033'. [ 1851.717521][T29894] FAULT_INJECTION: forcing a failure. [ 1851.717521][T29894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1851.773336][T29894] CPU: 0 PID: 29894 Comm: syz.1.8035 Not tainted syzkaller #0 [ 1851.780884][T29894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1851.790998][T29894] Call Trace: [ 1851.794312][T29894] [ 1851.797267][T29894] dump_stack_lvl+0x188/0x24e [ 1851.801985][T29894] ? show_regs_print_info+0x12/0x12 [ 1851.807252][T29894] ? load_image+0x400/0x400 [ 1851.811775][T29894] ? __lock_acquire+0x7d10/0x7d10 [ 1851.816846][T29894] should_fail_ex+0x399/0x4d0 [ 1851.821565][T29894] _copy_from_user+0x2c/0x170 [ 1851.826275][T29894] iovec_from_user+0x143/0x360 [ 1851.831091][T29894] __import_iovec+0x6d/0x500 [ 1851.835726][T29894] import_iovec+0x6f/0xa0 [ 1851.840111][T29894] ___sys_sendmsg+0x252/0x360 [ 1851.844929][T29894] ? __sys_sendmsg+0x290/0x290 [ 1851.849833][T29894] ? __lock_acquire+0x7d10/0x7d10 [ 1851.855081][T29894] __se_sys_sendmsg+0x1bb/0x2a0 [ 1851.859989][T29894] ? __x64_sys_sendmsg+0x80/0x80 [ 1851.864990][T29894] ? lockdep_hardirqs_on+0x94/0x140 [ 1851.870247][T29894] do_syscall_64+0x4c/0xa0 [ 1851.874696][T29894] ? clear_bhb_loop+0x60/0xb0 [ 1851.879397][T29894] ? clear_bhb_loop+0x60/0xb0 [ 1851.884113][T29894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1851.890070][T29894] RIP: 0033:0x7fb8a819acb9 [ 1851.894507][T29894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1851.914133][T29894] RSP: 002b:00007fb8a9129028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1851.922580][T29894] RAX: ffffffffffffffda RBX: 00007fb8a8415fa0 RCX: 00007fb8a819acb9 [ 1851.930572][T29894] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1851.938562][T29894] RBP: 00007fb8a9129090 R08: 0000000000000000 R09: 0000000000000000 [ 1851.946552][T29894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1851.954571][T29894] R13: 00007fb8a8416038 R14: 00007fb8a8415fa0 R15: 00007ffe626b3918 [ 1851.962607][T29894] [ 1852.152096][T29905] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8040'. [ 1852.181411][T29905] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8040'. [ 1852.225816][T29909] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8040'. [ 1852.272695][T29905] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8040'. [ 1852.387893][T29905] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1852.517638][T29911] bond0: (slave bridge0): Error: Slave device does not support XDP [ 1853.105836][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.112578][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.202780][T29965] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8055'. [ 1854.272909][T29965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1855.296045][T29995] netlink: 'syz.2.8065': attribute type 29 has an invalid length. [ 1855.311642][T29995] netlink: 'syz.2.8065': attribute type 29 has an invalid length. [ 1856.394290][T30018] __nla_validate_parse: 3 callbacks suppressed [ 1856.394311][T30018] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8073'. [ 1856.563177][T30018] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8073'. [ 1856.702169][T30021] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8073'. [ 1856.751812][T30028] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8073'. [ 1856.762275][T30018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1857.354878][T30040] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1857.726413][T30048] FAULT_INJECTION: forcing a failure. [ 1857.726413][T30048] name failslab, interval 1, probability 0, space 0, times 0 [ 1857.803504][T30048] CPU: 0 PID: 30048 Comm: syz.1.8082 Not tainted syzkaller #0 [ 1857.811052][T30048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1857.821174][T30048] Call Trace: [ 1857.824490][T30048] [ 1857.827459][T30048] dump_stack_lvl+0x188/0x24e [ 1857.832285][T30048] ? show_regs_print_info+0x12/0x12 [ 1857.837581][T30048] ? load_image+0x400/0x400 [ 1857.842146][T30048] ? verify_lock_unused+0x140/0x140 [ 1857.847408][T30048] should_fail_ex+0x399/0x4d0 [ 1857.852146][T30048] should_failslab+0x5/0x20 [ 1857.856694][T30048] slab_pre_alloc_hook+0x59/0x310 [ 1857.861828][T30048] kmem_cache_alloc+0x56/0x2f0 [ 1857.866643][T30048] ? skb_clone+0x1e7/0x370 [ 1857.871123][T30048] skb_clone+0x1e7/0x370 [ 1857.875426][T30048] __netlink_deliver_tap+0x3ed/0x800 [ 1857.880791][T30048] ? netlink_deliver_tap+0x2e/0x1b0 [ 1857.886047][T30048] netlink_deliver_tap+0x19c/0x1b0 [ 1857.891186][T30048] netlink_unicast+0x728/0x8d0 [ 1857.895987][T30048] netlink_sendmsg+0x8ad/0xbd0 [ 1857.900795][T30048] ? netlink_getsockopt+0x550/0x550 [ 1857.906026][T30048] ? aa_sock_msg_perm+0x94/0x150 [ 1857.911004][T30048] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1857.916324][T30048] ? security_socket_sendmsg+0x7c/0xa0 [ 1857.922016][T30048] ? netlink_getsockopt+0x550/0x550 [ 1857.927253][T30048] ____sys_sendmsg+0x5be/0x970 [ 1857.932076][T30048] ? __sys_sendmsg_sock+0x30/0x30 [ 1857.937150][T30048] ? __import_iovec+0x315/0x500 [ 1857.942027][T30048] ? import_iovec+0x6f/0xa0 [ 1857.946556][T30048] ___sys_sendmsg+0x2a2/0x360 [ 1857.951292][T30048] ? __sys_sendmsg+0x290/0x290 [ 1857.956104][T30048] ? __lock_acquire+0x7d10/0x7d10 [ 1857.961192][T30048] __se_sys_sendmsg+0x1bb/0x2a0 [ 1857.966088][T30048] ? __x64_sys_sendmsg+0x80/0x80 [ 1857.971071][T30048] ? lockdep_hardirqs_on+0x94/0x140 [ 1857.976307][T30048] do_syscall_64+0x4c/0xa0 [ 1857.980762][T30048] ? clear_bhb_loop+0x60/0xb0 [ 1857.985462][T30048] ? clear_bhb_loop+0x60/0xb0 [ 1857.990165][T30048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1857.996078][T30048] RIP: 0033:0x7fb8a819acb9 [ 1858.000522][T30048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1858.020238][T30048] RSP: 002b:00007fb8a9129028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1858.028678][T30048] RAX: ffffffffffffffda RBX: 00007fb8a8415fa0 RCX: 00007fb8a819acb9 [ 1858.036672][T30048] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1858.044675][T30048] RBP: 00007fb8a9129090 R08: 0000000000000000 R09: 0000000000000000 [ 1858.052672][T30048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1858.060661][T30048] R13: 00007fb8a8416038 R14: 00007fb8a8415fa0 R15: 00007ffe626b3918 [ 1858.068677][T30048] [ 1858.122712][T30048] netlink: 'syz.1.8082': attribute type 10 has an invalid length. [ 1858.153893][T30048] bridge0: port 4(dummy0) entered blocking state [ 1858.160397][T30048] bridge0: port 4(dummy0) entered forwarding state [ 1858.167298][T30048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1858.174503][T30048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1858.181975][T30048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1858.189170][T30048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1858.290130][T30048] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1859.021182][T30073] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8089'. [ 1859.090824][T30073] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8089'. [ 1859.128750][T30078] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8089'. [ 1859.209991][T30081] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8089'. [ 1859.245185][T30073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1861.281928][T30122] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.8104'. [ 1862.986455][T30163] mac80211_hwsim hwsim82 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1863.963378][T30183] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.8124'. [ 1864.364335][T30196] netlink: 'syz.1.8128': attribute type 3 has an invalid length. [ 1864.391362][T30196] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8128'. [ 1865.566215][T30212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1865.573611][T30212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.900729][T30224] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.8138'. [ 1867.481059][T30237] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.8142'. [ 1868.671799][T30273] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.8153'. [ 1871.532956][T30329] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.8169'. [ 1871.592580][T30330] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8167'. [ 1872.458810][T30349] netlink: 'syz.0.8176': attribute type 10 has an invalid length. [ 1872.501298][T30349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8176'. [ 1872.562738][T30349] device team0 entered promiscuous mode [ 1872.568389][T30349] device team_slave_0 entered promiscuous mode [ 1872.620314][T30349] device team_slave_1 entered promiscuous mode [ 1872.651134][T30349] device wlan1 entered promiscuous mode [ 1872.673888][T30349] bridge0: port 3(team0) entered blocking state [ 1872.707697][T30349] bridge0: port 3(team0) entered disabled state [ 1872.973636][T30357] FAULT_INJECTION: forcing a failure. [ 1872.973636][T30357] name failslab, interval 1, probability 0, space 0, times 0 [ 1872.987189][T30357] CPU: 0 PID: 30357 Comm: syz.1.8180 Not tainted syzkaller #0 [ 1872.994703][T30357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1873.004809][T30357] Call Trace: [ 1873.008136][T30357] [ 1873.011103][T30357] dump_stack_lvl+0x188/0x24e [ 1873.015867][T30357] ? show_regs_print_info+0x12/0x12 [ 1873.021130][T30357] ? load_image+0x400/0x400 [ 1873.025705][T30357] should_fail_ex+0x399/0x4d0 [ 1873.030460][T30357] should_failslab+0x5/0x20 [ 1873.035032][T30357] slab_pre_alloc_hook+0x59/0x310 [ 1873.040118][T30357] kmem_cache_alloc+0x56/0x2f0 [ 1873.044946][T30357] ? sctp_get_port_local+0x6d7/0x1510 [ 1873.050393][T30357] sctp_get_port_local+0x6d7/0x1510 [ 1873.055681][T30357] ? sctp_do_bind+0x990/0x990 [ 1873.060421][T30357] ? sctp_bind_addr_match+0x2c/0x2a0 [ 1873.065778][T30357] sctp_do_bind+0x555/0x990 [ 1873.070363][T30357] sctp_connect_new_asoc+0x266/0x6a0 [ 1873.075716][T30357] ? __sctp_connect+0xd80/0xd80 [ 1873.080640][T30357] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1873.086245][T30357] ? security_sctp_bind_connect+0x85/0xb0 [ 1873.092017][T30357] sctp_sendmsg+0x15b0/0x2940 [ 1873.096772][T30357] ? aa_sk_perm+0x7e1/0x950 [ 1873.101432][T30357] ? sctp_getsockopt+0x8a0/0x8a0 [ 1873.106434][T30357] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1873.112667][T30357] ? aa_af_perm+0x340/0x340 [ 1873.117240][T30357] ? inet_sendmsg+0xe5/0x2f0 [ 1873.121893][T30357] ? inet_send_prepare+0x260/0x260 [ 1873.127070][T30357] ____sys_sendmsg+0x5be/0x970 [ 1873.131920][T30357] ? __sys_sendmsg_sock+0x30/0x30 [ 1873.137106][T30357] ? __import_iovec+0x315/0x500 [ 1873.142020][T30357] ? import_iovec+0x6f/0xa0 [ 1873.146584][T30357] ___sys_sendmsg+0x2a2/0x360 [ 1873.151331][T30357] ? __sys_sendmsg+0x290/0x290 [ 1873.156214][T30357] ? ktime_get_real_ts64+0x440/0x440 [ 1873.161593][T30357] __se_sys_sendmsg+0x1bb/0x2a0 [ 1873.166528][T30357] ? __x64_sys_sendmsg+0x80/0x80 [ 1873.171556][T30357] ? lockdep_hardirqs_on+0x94/0x140 [ 1873.176827][T30357] do_syscall_64+0x4c/0xa0 [ 1873.181307][T30357] ? clear_bhb_loop+0x60/0xb0 [ 1873.186051][T30357] ? clear_bhb_loop+0x60/0xb0 [ 1873.190792][T30357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1873.196752][T30357] RIP: 0033:0x7fb8a819acb9 [ 1873.201221][T30357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1873.220888][T30357] RSP: 002b:00007fb8a9129028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1873.229384][T30357] RAX: ffffffffffffffda RBX: 00007fb8a8415fa0 RCX: 00007fb8a819acb9 [ 1873.237408][T30357] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000015 [ 1873.245431][T30357] RBP: 00007fb8a9129090 R08: 0000000000000000 R09: 0000000000000000 [ 1873.253454][T30357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1873.261478][T30357] R13: 00007fb8a8416038 R14: 00007fb8a8415fa0 R15: 00007ffe626b3918 [ 1873.269522][T30357] [ 1874.105765][T30389] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.8192'. [ 1875.020722][T30419] netlink: 'syz.1.8203': attribute type 2 has an invalid length. [ 1875.069894][T30419] netlink: 'syz.1.8203': attribute type 8 has an invalid length. [ 1875.097173][T30419] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8203'. [ 1875.258825][T30431] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.8206'. [ 1876.407801][T30465] netlink: 'syz.3.8219': attribute type 2 has an invalid length. [ 1876.422744][T30465] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8219'. [ 1876.728810][T30472] netlink: 'syz.0.8221': attribute type 25 has an invalid length. [ 1876.829947][T30476] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.8222'. [ 1877.191171][T30483] netlink: 'syz.0.8225': attribute type 10 has an invalid length. [ 1878.387497][T30497] netlink: 'syz.0.8228': attribute type 10 has an invalid length. [ 1878.768687][T30514] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.8234'. [ 1879.540712][T30531] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.8239'. [ 1880.627083][T30546] FAULT_INJECTION: forcing a failure. [ 1880.627083][T30546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1880.675086][T30546] CPU: 0 PID: 30546 Comm: syz.4.8244 Not tainted syzkaller #0 [ 1880.682666][T30546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1880.692783][T30546] Call Trace: [ 1880.696161][T30546] [ 1880.699155][T30546] dump_stack_lvl+0x188/0x24e [ 1880.704010][T30546] ? show_regs_print_info+0x12/0x12 [ 1880.709284][T30546] ? load_image+0x400/0x400 [ 1880.713876][T30546] ? __lock_acquire+0x7d10/0x7d10 [ 1880.719004][T30546] should_fail_ex+0x399/0x4d0 [ 1880.723776][T30546] _copy_from_user+0x2c/0x170 [ 1880.728533][T30546] iovec_from_user+0x143/0x360 [ 1880.733390][T30546] __import_iovec+0x6d/0x500 [ 1880.738082][T30546] import_iovec+0x6f/0xa0 [ 1880.742581][T30546] ___sys_sendmsg+0x252/0x360 [ 1880.747525][T30546] ? __sys_sendmsg+0x290/0x290 [ 1880.752424][T30546] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1880.758728][T30546] __se_sys_sendmsg+0x1bb/0x2a0 [ 1880.763670][T30546] ? __x64_sys_sendmsg+0x80/0x80 [ 1880.768732][T30546] ? lockdep_hardirqs_on+0x94/0x140 [ 1880.774021][T30546] do_syscall_64+0x4c/0xa0 [ 1880.778513][T30546] ? clear_bhb_loop+0x60/0xb0 [ 1880.783253][T30546] ? clear_bhb_loop+0x60/0xb0 [ 1880.788035][T30546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1880.794092][T30546] RIP: 0033:0x7f61b119acb9 [ 1880.798583][T30546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1880.818341][T30546] RSP: 002b:00007f61b200b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1880.826834][T30546] RAX: ffffffffffffffda RBX: 00007f61b1415fa0 RCX: 00007f61b119acb9 [ 1880.835004][T30546] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000e [ 1880.843129][T30546] RBP: 00007f61b200b090 R08: 0000000000000000 R09: 0000000000000000 [ 1880.851170][T30546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1880.859216][T30546] R13: 00007f61b1416038 R14: 00007f61b1415fa0 R15: 00007ffd1c399988 [ 1880.867385][T30546] [ 1881.460700][T30563] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8248'. [ 1881.506189][T30563] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8248'. [ 1881.547658][T30563] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8248'. [ 1881.611427][T30564] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1881.836904][T30575] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.8253'. [ 1882.304439][T30580] device syzkaller0 entered promiscuous mode [ 1885.111832][T30610] delete_channel: no stack [ 1888.375775][T30628] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8267'. [ 1890.209111][T30678] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8285'. [ 1890.264731][T30682] netlink: 65043 bytes leftover after parsing attributes in process `syz.0.8288'. [ 1890.638236][T30693] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8291'. [ 1890.763225][T30692] netlink: 'syz.4.8291': attribute type 2 has an invalid length. [ 1890.809924][T30692] device .*! entered promiscuous mode [ 1891.304203][T30712] FAULT_INJECTION: forcing a failure. [ 1891.304203][T30712] name failslab, interval 1, probability 0, space 0, times 0 [ 1891.341394][T30712] CPU: 1 PID: 30712 Comm: syz.1.8296 Not tainted syzkaller #0 [ 1891.348930][T30712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1891.359011][T30712] Call Trace: [ 1891.362319][T30712] [ 1891.365273][T30712] dump_stack_lvl+0x188/0x24e [ 1891.369984][T30712] ? sctp_sendmsg+0x15b0/0x2940 [ 1891.374870][T30712] ? ___sys_sendmsg+0x2a2/0x360 [ 1891.379754][T30712] ? show_regs_print_info+0x12/0x12 [ 1891.385000][T30712] ? load_image+0x400/0x400 [ 1891.389558][T30712] should_fail_ex+0x399/0x4d0 [ 1891.394364][T30712] should_failslab+0x5/0x20 [ 1891.398916][T30712] slab_pre_alloc_hook+0x59/0x310 [ 1891.403972][T30712] ? sctp_add_bind_addr+0x89/0x350 [ 1891.409115][T30712] __kmem_cache_alloc_node+0x4f/0x260 [ 1891.414519][T30712] ? sctp_add_bind_addr+0x89/0x350 [ 1891.419668][T30712] kmalloc_trace+0x26/0xe0 [ 1891.424120][T30712] sctp_add_bind_addr+0x89/0x350 [ 1891.429087][T30712] sctp_copy_local_addr_list+0x311/0x4e0 [ 1891.434750][T30712] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 1891.440496][T30712] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1891.446600][T30712] ? sctp_v4_is_any+0x31/0x50 [ 1891.451297][T30712] ? sctp_copy_one_addr+0x93/0x660 [ 1891.456446][T30712] sctp_bind_addr_copy+0xaf/0x3c0 [ 1891.461491][T30712] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1891.467857][T30712] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1891.473175][T30712] ? __sctp_connect+0xd80/0xd80 [ 1891.478050][T30712] ? __local_bh_enable_ip+0x136/0x1c0 [ 1891.483439][T30712] ? _local_bh_enable+0xa0/0xa0 [ 1891.488312][T30712] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1891.494150][T30712] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1891.499993][T30712] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1891.505575][T30712] ? security_sctp_bind_connect+0x85/0xb0 [ 1891.511346][T30712] sctp_sendmsg+0x15b0/0x2940 [ 1891.516064][T30712] ? aa_sk_perm+0x7e1/0x950 [ 1891.520603][T30712] ? sctp_getsockopt+0x8a0/0x8a0 [ 1891.525596][T30712] ? __might_fault+0xa6/0x120 [ 1891.530315][T30712] ? aa_af_perm+0x340/0x340 [ 1891.534863][T30712] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1891.541322][T30712] ? inet_sendmsg+0x78/0x2f0 [ 1891.545943][T30712] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1891.551302][T30712] ? security_socket_sendmsg+0x7c/0xa0 [ 1891.556794][T30712] ? inet_send_prepare+0x260/0x260 [ 1891.561933][T30712] ____sys_sendmsg+0x5be/0x970 [ 1891.566744][T30712] ? __sys_sendmsg_sock+0x30/0x30 [ 1891.571823][T30712] ? __import_iovec+0x315/0x500 [ 1891.576699][T30712] ? import_iovec+0x6f/0xa0 [ 1891.581237][T30712] ___sys_sendmsg+0x2a2/0x360 [ 1891.585968][T30712] ? __sys_sendmsg+0x290/0x290 [ 1891.590779][T30712] ? __lock_acquire+0x7d10/0x7d10 [ 1891.595848][T30712] __se_sys_sendmsg+0x1bb/0x2a0 [ 1891.600733][T30712] ? __x64_sys_sendmsg+0x80/0x80 [ 1891.605718][T30712] ? lockdep_hardirqs_on+0x94/0x140 [ 1891.610949][T30712] do_syscall_64+0x4c/0xa0 [ 1891.615393][T30712] ? clear_bhb_loop+0x60/0xb0 [ 1891.620093][T30712] ? clear_bhb_loop+0x60/0xb0 [ 1891.624789][T30712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1891.630705][T30712] RIP: 0033:0x7fb8a819acb9 [ 1891.635150][T30712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1891.654786][T30712] RSP: 002b:00007fb8a90e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1891.663336][T30712] RAX: ffffffffffffffda RBX: 00007fb8a8416180 RCX: 00007fb8a819acb9 [ 1891.671332][T30712] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1891.679317][T30712] RBP: 00007fb8a90e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1891.687329][T30712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1891.695328][T30712] R13: 00007fb8a8416218 R14: 00007fb8a8416180 R15: 00007ffe626b3918 [ 1891.703331][T30712] [ 1891.799856][T30719] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.8300'. [ 1893.678634][T30750] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8308'. [ 1894.013974][T30756] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.8312'. [ 1894.079207][T30762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1894.140893][T30765] FAULT_INJECTION: forcing a failure. [ 1894.140893][T30765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1894.182493][T30765] CPU: 1 PID: 30765 Comm: syz.3.8314 Not tainted syzkaller #0 [ 1894.190069][T30765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1894.200174][T30765] Call Trace: [ 1894.203494][T30765] [ 1894.206465][T30765] dump_stack_lvl+0x188/0x24e [ 1894.211206][T30765] ? show_regs_print_info+0x12/0x12 [ 1894.216454][T30765] ? load_image+0x400/0x400 [ 1894.221002][T30765] ? __lock_acquire+0x7d10/0x7d10 [ 1894.226076][T30765] ? snprintf+0xe5/0x140 [ 1894.230372][T30765] should_fail_ex+0x399/0x4d0 [ 1894.235113][T30765] _copy_to_user+0x2c/0x130 [ 1894.239661][T30765] simple_read_from_buffer+0xe3/0x150 [ 1894.245093][T30765] proc_fail_nth_read+0x1a6/0x220 [ 1894.250167][T30765] ? proc_fault_inject_write+0x310/0x310 [ 1894.255846][T30765] ? fsnotify_perm+0x248/0x550 [ 1894.260658][T30765] ? proc_fault_inject_write+0x310/0x310 [ 1894.266337][T30765] vfs_read+0x2de/0xa00 [ 1894.270555][T30765] ? kernel_read+0x1e0/0x1e0 [ 1894.275199][T30765] ? __fget_files+0x28/0x4b0 [ 1894.279841][T30765] ? __fget_files+0x28/0x4b0 [ 1894.284476][T30765] ? __fget_files+0x43d/0x4b0 [ 1894.289217][T30765] ? __fdget_pos+0x2ae/0x360 [ 1894.293851][T30765] ? ksys_read+0x71/0x250 [ 1894.298224][T30765] ksys_read+0x14c/0x250 [ 1894.302541][T30765] ? vfs_write+0xa30/0xa30 [ 1894.307009][T30765] ? lockdep_hardirqs_on+0x94/0x140 [ 1894.312258][T30765] do_syscall_64+0x4c/0xa0 [ 1894.316735][T30765] ? clear_bhb_loop+0x60/0xb0 [ 1894.321449][T30765] ? clear_bhb_loop+0x60/0xb0 [ 1894.326194][T30765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1894.332129][T30765] RIP: 0033:0x7fd46cf5b58e [ 1894.336580][T30765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1894.356237][T30765] RSP: 002b:00007fd46ded1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1894.364711][T30765] RAX: ffffffffffffffda RBX: 00007fd46ded26c0 RCX: 00007fd46cf5b58e [ 1894.372718][T30765] RDX: 000000000000000f RSI: 00007fd46ded20a0 RDI: 0000000000000007 [ 1894.380727][T30765] RBP: 00007fd46ded2090 R08: 0000000000000000 R09: 0000000000000000 [ 1894.388734][T30765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1894.396741][T30765] R13: 00007fd46d216038 R14: 00007fd46d215fa0 R15: 00007ffc1e967c78 [ 1894.404770][T30765] [ 1894.664246][T30770] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.8316'. [ 1895.803459][T30791] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.8325'. [ 1895.921034][T30793] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.8325'. [ 1896.092441][T30800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1896.214238][T30805] netlink: 'syz.4.8329': attribute type 2 has an invalid length. [ 1896.235145][T30805] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8329'. [ 1896.695206][T30815] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.8332'. [ 1897.298108][T30824] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.8333'. [ 1897.759996][T30838] netlink: 'syz.4.8340': attribute type 2 has an invalid length. [ 1897.785985][T30838] FAULT_INJECTION: forcing a failure. [ 1897.785985][T30838] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.801201][T30838] CPU: 0 PID: 30838 Comm: syz.4.8340 Not tainted syzkaller #0 [ 1897.809096][T30838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1897.819202][T30838] Call Trace: [ 1897.822540][T30838] [ 1897.825519][T30838] dump_stack_lvl+0x188/0x24e [ 1897.830268][T30838] ? show_regs_print_info+0x12/0x12 [ 1897.835529][T30838] ? load_image+0x400/0x400 [ 1897.840115][T30838] ? __might_sleep+0xd0/0xd0 [ 1897.844761][T30838] ? __lock_acquire+0x7d10/0x7d10 [ 1897.849873][T30838] should_fail_ex+0x399/0x4d0 [ 1897.854632][T30838] should_failslab+0x5/0x20 [ 1897.859195][T30838] slab_pre_alloc_hook+0x59/0x310 [ 1897.864286][T30838] kmem_cache_alloc_node+0x5a/0x320 [ 1897.869570][T30838] ? __alloc_skb+0xfc/0x7e0 [ 1897.874159][T30838] __alloc_skb+0xfc/0x7e0 [ 1897.878564][T30838] netlink_ack+0x372/0x1170 [ 1897.883126][T30838] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1897.888922][T30838] ? perf_trace_lock+0x301/0x390 [ 1897.893936][T30838] ? __copy_skb_header+0x3ba/0x4f0 [ 1897.899120][T30838] ? netlink_dump+0xd00/0xd00 [ 1897.903871][T30838] ? __skb_clone+0x480/0x790 [ 1897.908543][T30838] netlink_rcv_skb+0x280/0x450 [ 1897.913398][T30838] ? rtnetlink_bind+0x80/0x80 [ 1897.918250][T30838] ? netlink_ack+0x1170/0x1170 [ 1897.923112][T30838] ? netlink_deliver_tap+0x2e/0x1b0 [ 1897.928394][T30838] netlink_unicast+0x74d/0x8d0 [ 1897.933260][T30838] netlink_sendmsg+0x8ad/0xbd0 [ 1897.938108][T30838] ? netlink_getsockopt+0x550/0x550 [ 1897.943396][T30838] ? aa_sock_msg_perm+0x94/0x150 [ 1897.948406][T30838] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1897.953795][T30838] ? security_socket_sendmsg+0x7c/0xa0 [ 1897.959337][T30838] ? netlink_getsockopt+0x550/0x550 [ 1897.964706][T30838] ____sys_sendmsg+0x5be/0x970 [ 1897.969562][T30838] ? __sys_sendmsg_sock+0x30/0x30 [ 1897.974653][T30838] ? __import_iovec+0x315/0x500 [ 1897.979583][T30838] ? import_iovec+0x6f/0xa0 [ 1897.984152][T30838] ___sys_sendmsg+0x2a2/0x360 [ 1897.988927][T30838] ? __sys_sendmsg+0x290/0x290 [ 1897.993802][T30838] ? __lock_acquire+0x7d10/0x7d10 [ 1897.998937][T30838] __se_sys_sendmsg+0x1bb/0x2a0 [ 1898.003865][T30838] ? __x64_sys_sendmsg+0x80/0x80 [ 1898.008909][T30838] ? lockdep_hardirqs_on+0x94/0x140 [ 1898.014181][T30838] do_syscall_64+0x4c/0xa0 [ 1898.018656][T30838] ? clear_bhb_loop+0x60/0xb0 [ 1898.023389][T30838] ? clear_bhb_loop+0x60/0xb0 [ 1898.028141][T30838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1898.034094][T30838] RIP: 0033:0x7f61b119acb9 [ 1898.038642][T30838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1898.058309][T30838] RSP: 002b:00007f61b200b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1898.066804][T30838] RAX: ffffffffffffffda RBX: 00007f61b1415fa0 RCX: 00007f61b119acb9 [ 1898.074842][T30838] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1898.082913][T30838] RBP: 00007f61b200b090 R08: 0000000000000000 R09: 0000000000000000 [ 1898.090939][T30838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1898.098968][T30838] R13: 00007f61b1416038 R14: 00007f61b1415fa0 R15: 00007ffd1c399988 [ 1898.107049][T30838] [ 1898.144965][T30848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1898.399275][T30857] FAULT_INJECTION: forcing a failure. [ 1898.399275][T30857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1898.421574][T30857] CPU: 0 PID: 30857 Comm: syz.3.8346 Not tainted syzkaller #0 [ 1898.429113][T30857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1898.439237][T30857] Call Trace: [ 1898.442562][T30857] [ 1898.445530][T30857] dump_stack_lvl+0x188/0x24e [ 1898.450265][T30857] ? show_regs_print_info+0x12/0x12 [ 1898.455531][T30857] ? load_image+0x400/0x400 [ 1898.460084][T30857] ? __lock_acquire+0x7d10/0x7d10 [ 1898.465163][T30857] ? __bpf_prog_test_run_raw_tp+0x2a6/0x430 [ 1898.471101][T30857] should_fail_ex+0x399/0x4d0 [ 1898.475814][T30857] _copy_to_user+0x2c/0x130 [ 1898.480349][T30857] bpf_prog_test_run_raw_tp+0x4c6/0x660 [ 1898.485934][T30857] ? trace_bpf_test_finish+0x220/0x220 [ 1898.491433][T30857] ? trace_bpf_test_finish+0x220/0x220 [ 1898.496929][T30857] bpf_prog_test_run+0x31e/0x390 [ 1898.501906][T30857] __sys_bpf+0x62b/0x780 [ 1898.506271][T30857] ? bpf_link_show_fdinfo+0x380/0x380 [ 1898.511788][T30857] ? lock_chain_count+0x20/0x20 [ 1898.516672][T30857] __x64_sys_bpf+0x78/0x90 [ 1898.521118][T30857] do_syscall_64+0x4c/0xa0 [ 1898.525563][T30857] ? clear_bhb_loop+0x60/0xb0 [ 1898.530307][T30857] ? clear_bhb_loop+0x60/0xb0 [ 1898.535041][T30857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1898.540964][T30857] RIP: 0033:0x7fd46cf9acb9 [ 1898.545490][T30857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1898.565205][T30857] RSP: 002b:00007fd46ded2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1898.573658][T30857] RAX: ffffffffffffffda RBX: 00007fd46d215fa0 RCX: 00007fd46cf9acb9 [ 1898.581655][T30857] RDX: 000000000000000c RSI: 0000200000000280 RDI: 000000000000000a [ 1898.589654][T30857] RBP: 00007fd46ded2090 R08: 0000000000000000 R09: 0000000000000000 [ 1898.597649][T30857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1898.605647][T30857] R13: 00007fd46d216038 R14: 00007fd46d215fa0 R15: 00007ffc1e967c78 [ 1898.613653][T30857] [ 1898.715856][T30864] FAULT_INJECTION: forcing a failure. [ 1898.715856][T30864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1898.757221][T30864] CPU: 1 PID: 30864 Comm: syz.1.8347 Not tainted syzkaller #0 [ 1898.764760][T30864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1898.774867][T30864] Call Trace: [ 1898.778182][T30864] [ 1898.781146][T30864] dump_stack_lvl+0x188/0x24e [ 1898.785885][T30864] ? show_regs_print_info+0x12/0x12 [ 1898.791135][T30864] ? load_image+0x400/0x400 [ 1898.795682][T30864] ? __lock_acquire+0x7d10/0x7d10 [ 1898.800761][T30864] should_fail_ex+0x399/0x4d0 [ 1898.805522][T30864] _copy_from_user+0x2c/0x170 [ 1898.810261][T30864] ___sys_sendmsg+0x1c3/0x360 [ 1898.815016][T30864] ? __sys_sendmsg+0x290/0x290 [ 1898.819854][T30864] ? __lock_acquire+0x7d10/0x7d10 [ 1898.824988][T30864] __se_sys_sendmsg+0x1bb/0x2a0 [ 1898.829908][T30864] ? __x64_sys_sendmsg+0x80/0x80 [ 1898.834964][T30864] ? lockdep_hardirqs_on+0x94/0x140 [ 1898.840232][T30864] do_syscall_64+0x4c/0xa0 [ 1898.844721][T30864] ? clear_bhb_loop+0x60/0xb0 [ 1898.849484][T30864] ? clear_bhb_loop+0x60/0xb0 [ 1898.854216][T30864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1898.860157][T30864] RIP: 0033:0x7fb8a819acb9 [ 1898.864633][T30864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1898.884316][T30864] RSP: 002b:00007fb8a9108028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1898.892781][T30864] RAX: ffffffffffffffda RBX: 00007fb8a8416090 RCX: 00007fb8a819acb9 [ 1898.900915][T30864] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000004 [ 1898.908944][T30864] RBP: 00007fb8a9108090 R08: 0000000000000000 R09: 0000000000000000 [ 1898.916969][T30864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1898.924968][T30864] R13: 00007fb8a8416128 R14: 00007fb8a8416090 R15: 00007ffe626b3918 [ 1898.933000][T30864] [ 1898.982676][T30867] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.8348'. [ 1899.473991][T30885] FAULT_INJECTION: forcing a failure. [ 1899.473991][T30885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1899.542398][T30885] CPU: 0 PID: 30885 Comm: syz.2.8359 Not tainted syzkaller #0 [ 1899.549956][T30885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1899.560073][T30885] Call Trace: [ 1899.563406][T30885] [ 1899.566380][T30885] dump_stack_lvl+0x188/0x24e [ 1899.571122][T30885] ? show_regs_print_info+0x12/0x12 [ 1899.576388][T30885] ? load_image+0x400/0x400 [ 1899.580944][T30885] ? __lock_acquire+0x7d10/0x7d10 [ 1899.586042][T30885] should_fail_ex+0x399/0x4d0 [ 1899.590795][T30885] _copy_from_user+0x2c/0x170 [ 1899.595529][T30885] sk_setsockopt+0x2f1/0x28a0 [ 1899.600257][T30885] ? __fget_files+0x28/0x4b0 [ 1899.604899][T30885] ? sockopt_capable+0x60/0x60 [ 1899.609732][T30885] ? aa_sk_perm+0x81f/0x950 [ 1899.614295][T30885] ? aa_af_perm+0x340/0x340 [ 1899.618948][T30885] ? __fget_files+0x43d/0x4b0 [ 1899.623675][T30885] ? aa_sock_opt_perm+0x74/0x100 [ 1899.628683][T30885] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 1899.634274][T30885] ? security_socket_setsockopt+0x7a/0xa0 [ 1899.640057][T30885] __sys_setsockopt+0x2f6/0x3d0 [ 1899.644979][T30885] __x64_sys_setsockopt+0xb1/0xc0 [ 1899.650071][T30885] do_syscall_64+0x4c/0xa0 [ 1899.654544][T30885] ? clear_bhb_loop+0x60/0xb0 [ 1899.659264][T30885] ? clear_bhb_loop+0x60/0xb0 [ 1899.664000][T30885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1899.669948][T30885] RIP: 0033:0x7f4189b9acb9 [ 1899.674409][T30885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1899.694062][T30885] RSP: 002b:00007f418aaab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1899.702536][T30885] RAX: ffffffffffffffda RBX: 00007f4189e15fa0 RCX: 00007f4189b9acb9 [ 1899.710557][T30885] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000004 [ 1899.718657][T30885] RBP: 00007f418aaab090 R08: 0000000000000004 R09: 0000000000000000 [ 1899.726703][T30885] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1899.734726][T30885] R13: 00007f4189e16038 R14: 00007f4189e15fa0 R15: 00007ffca8318078 [ 1899.742751][T30885] [ 1899.800667][T30889] FAULT_INJECTION: forcing a failure. [ 1899.800667][T30889] name failslab, interval 1, probability 0, space 0, times 0 [ 1899.851451][T30889] CPU: 1 PID: 30889 Comm: syz.4.8357 Not tainted syzkaller #0 [ 1899.859097][T30889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1899.869217][T30889] Call Trace: [ 1899.872537][T30889] [ 1899.875505][T30889] dump_stack_lvl+0x188/0x24e [ 1899.880244][T30889] ? show_regs_print_info+0x12/0x12 [ 1899.885499][T30889] ? load_image+0x400/0x400 [ 1899.890047][T30889] ? __might_sleep+0xd0/0xd0 [ 1899.894680][T30889] ? __lock_acquire+0x7d10/0x7d10 [ 1899.899785][T30889] should_fail_ex+0x399/0x4d0 [ 1899.904534][T30889] should_failslab+0x5/0x20 [ 1899.909094][T30889] slab_pre_alloc_hook+0x59/0x310 [ 1899.914161][T30889] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1899.920350][T30889] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1899.926277][T30889] __kmem_cache_alloc_node+0x4f/0x260 [ 1899.931675][T30889] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1899.937601][T30889] kmalloc_trace+0x26/0xe0 [ 1899.942047][T30889] sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1899.947799][T30889] sctp_association_new+0x15e5/0x25d0 [ 1899.953215][T30889] sctp_connect_new_asoc+0x2da/0x6a0 [ 1899.958541][T30889] ? __sctp_connect+0xd80/0xd80 [ 1899.963431][T30889] ? security_sctp_bind_connect+0xf/0xb0 [ 1899.969088][T30889] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1899.974659][T30889] ? security_sctp_bind_connect+0x85/0xb0 [ 1899.980404][T30889] sctp_sendmsg+0x15b0/0x2940 [ 1899.985122][T30889] ? aa_sk_perm+0x7e1/0x950 [ 1899.989653][T30889] ? sctp_getsockopt+0x8a0/0x8a0 [ 1899.994619][T30889] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1900.000804][T30889] ? aa_af_perm+0x340/0x340 [ 1900.005335][T30889] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1900.011983][T30889] ? inet_sendmsg+0x78/0x2f0 [ 1900.016595][T30889] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1900.021920][T30889] ? security_socket_sendmsg+0x7c/0xa0 [ 1900.027419][T30889] ? inet_send_prepare+0x260/0x260 [ 1900.032548][T30889] ____sys_sendmsg+0x5be/0x970 [ 1900.037337][T30889] ? __sys_sendmsg_sock+0x30/0x30 [ 1900.042383][T30889] ? __import_iovec+0x315/0x500 [ 1900.047261][T30889] ? import_iovec+0x6f/0xa0 [ 1900.051792][T30889] ___sys_sendmsg+0x2a2/0x360 [ 1900.056515][T30889] ? __sys_sendmsg+0x290/0x290 [ 1900.061328][T30889] ? ktime_get_real_ts64+0x440/0x440 [ 1900.066672][T30889] __se_sys_sendmsg+0x1bb/0x2a0 [ 1900.071550][T30889] ? ct_nmi_exit+0x145/0x1c0 [ 1900.076162][T30889] ? __x64_sys_sendmsg+0x80/0x80 [ 1900.081164][T30889] ? lockdep_hardirqs_on+0x94/0x140 [ 1900.086422][T30889] do_syscall_64+0x4c/0xa0 [ 1900.090876][T30889] ? clear_bhb_loop+0x60/0xb0 [ 1900.095575][T30889] ? clear_bhb_loop+0x60/0xb0 [ 1900.100286][T30889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1900.106281][T30889] RIP: 0033:0x7f61b119acb9 [ 1900.110725][T30889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1900.130353][T30889] RSP: 002b:00007f61b200b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1900.138794][T30889] RAX: ffffffffffffffda RBX: 00007f61b1415fa0 RCX: 00007f61b119acb9 [ 1900.146797][T30889] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 1900.154789][T30889] RBP: 00007f61b200b090 R08: 0000000000000000 R09: 0000000000000000 [ 1900.162942][T30889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1900.170938][T30889] R13: 00007f61b1416038 R14: 00007f61b1415fa0 R15: 00007ffd1c399988 [ 1900.179032][T30889] [ 1900.687631][T30911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1900.961986][T30918] FAULT_INJECTION: forcing a failure. [ 1900.961986][T30918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1900.975612][T30918] CPU: 0 PID: 30918 Comm: syz.0.8367 Not tainted syzkaller #0 [ 1900.983120][T30918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1900.993314][T30918] Call Trace: [ 1900.996625][T30918] [ 1900.999587][T30918] dump_stack_lvl+0x188/0x24e [ 1901.004322][T30918] ? show_regs_print_info+0x12/0x12 [ 1901.009576][T30918] ? load_image+0x400/0x400 [ 1901.014125][T30918] ? __lock_acquire+0x7d10/0x7d10 [ 1901.019201][T30918] should_fail_ex+0x399/0x4d0 [ 1901.023934][T30918] _copy_from_user+0x2c/0x170 [ 1901.028669][T30918] ____sys_sendmsg+0x30a/0x970 [ 1901.033496][T30918] ? __sys_sendmsg_sock+0x30/0x30 [ 1901.038567][T30918] ? __import_iovec+0x315/0x500 [ 1901.043468][T30918] ? import_iovec+0x6f/0xa0 [ 1901.048021][T30918] ___sys_sendmsg+0x2a2/0x360 [ 1901.052778][T30918] ? __sys_sendmsg+0x290/0x290 [ 1901.057606][T30918] ? __lock_acquire+0x7d10/0x7d10 [ 1901.062714][T30918] __se_sys_sendmsg+0x1bb/0x2a0 [ 1901.067631][T30918] ? __x64_sys_sendmsg+0x80/0x80 [ 1901.072632][T30918] ? lockdep_hardirqs_on+0x94/0x140 [ 1901.077893][T30918] do_syscall_64+0x4c/0xa0 [ 1901.082365][T30918] ? clear_bhb_loop+0x60/0xb0 [ 1901.087082][T30918] ? clear_bhb_loop+0x60/0xb0 [ 1901.091829][T30918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1901.097759][T30918] RIP: 0033:0x7f2af359acb9 [ 1901.102208][T30918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1901.121867][T30918] RSP: 002b:00007f2af43c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1901.130321][T30918] RAX: ffffffffffffffda RBX: 00007f2af3815fa0 RCX: 00007f2af359acb9 [ 1901.138331][T30918] RDX: 0000000000004840 RSI: 0000200000000380 RDI: 0000000000000004 [ 1901.146342][T30918] RBP: 00007f2af43c5090 R08: 0000000000000000 R09: 0000000000000000 [ 1901.154356][T30918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1901.162366][T30918] R13: 00007f2af3816038 R14: 00007f2af3815fa0 R15: 00007ffe11862df8 [ 1901.170396][T30918] [ 1901.247924][T30920] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.8368'. [ 1901.753119][T30935] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1901.761185][T30935] IPv6: NLM_F_CREATE should be set when creating new route [ 1901.927906][T30937] netlink: 'syz.0.8374': attribute type 41 has an invalid length. [ 1901.938888][T30937] netlink: 'syz.0.8374': attribute type 41 has an invalid length. [ 1902.329066][T30943] netlink: 'syz.2.8375': attribute type 41 has an invalid length. [ 1902.371619][T30943] netlink: 'syz.2.8375': attribute type 41 has an invalid length. [ 1902.420098][T30947] FAULT_INJECTION: forcing a failure. [ 1902.420098][T30947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1902.487753][T30947] CPU: 1 PID: 30947 Comm: syz.0.8377 Not tainted syzkaller #0 [ 1902.495308][T30947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1902.505418][T30947] Call Trace: [ 1902.508746][T30947] [ 1902.511725][T30947] dump_stack_lvl+0x188/0x24e [ 1902.516447][T30947] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1902.522643][T30947] ? show_regs_print_info+0x12/0x12 [ 1902.527934][T30947] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1902.534156][T30947] should_fail_ex+0x399/0x4d0 [ 1902.538888][T30947] _copy_from_user+0x2c/0x170 [ 1902.543650][T30947] ___sys_sendmsg+0x1c3/0x360 [ 1902.548427][T30947] ? __sys_sendmsg+0x290/0x290 [ 1902.553275][T30947] __se_sys_sendmsg+0x1bb/0x2a0 [ 1902.558182][T30947] ? __x64_sys_sendmsg+0x80/0x80 [ 1902.563166][T30947] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1902.569088][T30947] do_syscall_64+0x4c/0xa0 [ 1902.573528][T30947] ? clear_bhb_loop+0x60/0xb0 [ 1902.578242][T30947] ? clear_bhb_loop+0x60/0xb0 [ 1902.582969][T30947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1902.588924][T30947] RIP: 0033:0x7f2af359acb9 [ 1902.593359][T30947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1902.612979][T30947] RSP: 002b:00007f2af43c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1902.621410][T30947] RAX: ffffffffffffffda RBX: 00007f2af3815fa0 RCX: 00007f2af359acb9 [ 1902.629402][T30947] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 1902.637394][T30947] RBP: 00007f2af43c5090 R08: 0000000000000000 R09: 0000000000000000 [ 1902.645577][T30947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1902.653748][T30947] R13: 00007f2af3816038 R14: 00007f2af3815fa0 R15: 00007ffe11862df8 [ 1902.661758][T30947] [ 1903.840636][T30983] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8387'. [ 1903.873047][T30983] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1904.092135][T30986] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8387'. [ 1904.103385][T30986] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1904.305885][T31004] netlink: 'syz.1.8396': attribute type 21 has an invalid length. [ 1904.330049][T31004] netlink: 'syz.1.8396': attribute type 1 has an invalid length. [ 1904.394871][T31004] netlink: 'syz.1.8396': attribute type 10 has an invalid length. [ 1904.502872][T31004] device geneve1 entered promiscuous mode [ 1904.532143][T31004] team0: Port device geneve1 added [ 1904.555724][T31013] FAULT_INJECTION: forcing a failure. [ 1904.555724][T31013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1904.591755][T31013] CPU: 0 PID: 31013 Comm: syz.2.8398 Not tainted syzkaller #0 [ 1904.599323][T31013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1904.609437][T31013] Call Trace: [ 1904.612754][T31013] [ 1904.615727][T31013] dump_stack_lvl+0x188/0x24e [ 1904.620476][T31013] ? show_regs_print_info+0x12/0x12 [ 1904.625745][T31013] ? load_image+0x400/0x400 [ 1904.630317][T31013] ? __lock_acquire+0x7d10/0x7d10 [ 1904.635404][T31013] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1904.641204][T31013] should_fail_ex+0x399/0x4d0 [ 1904.645966][T31013] _copy_from_user+0x2c/0x170 [ 1904.650708][T31013] ___sys_sendmsg+0x1c3/0x360 [ 1904.655449][T31013] ? __sys_sendmsg+0x290/0x290 [ 1904.660348][T31013] ? __lock_acquire+0x7d10/0x7d10 [ 1904.665518][T31013] __se_sys_sendmsg+0x1bb/0x2a0 [ 1904.670426][T31013] ? __x64_sys_sendmsg+0x80/0x80 [ 1904.675432][T31013] ? lockdep_hardirqs_on+0x94/0x140 [ 1904.680680][T31013] do_syscall_64+0x4c/0xa0 [ 1904.685132][T31013] ? clear_bhb_loop+0x60/0xb0 [ 1904.689843][T31013] ? clear_bhb_loop+0x60/0xb0 [ 1904.694633][T31013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1904.700554][T31013] RIP: 0033:0x7f4189b9acb9 [ 1904.705010][T31013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1904.724675][T31013] RSP: 002b:00007f418aaab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1904.733144][T31013] RAX: ffffffffffffffda RBX: 00007f4189e15fa0 RCX: 00007f4189b9acb9 [ 1904.741330][T31013] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000005 [ 1904.749346][T31013] RBP: 00007f418aaab090 R08: 0000000000000000 R09: 0000000000000000 [ 1904.757343][T31013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1904.765342][T31013] R13: 00007f4189e16038 R14: 00007f4189e15fa0 R15: 00007ffca8318078 [ 1904.773456][T31013] [ 1904.959612][T31020] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8402'. [ 1905.759204][T31047] FAULT_INJECTION: forcing a failure. [ 1905.759204][T31047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1905.777842][T31047] CPU: 0 PID: 31047 Comm: syz.4.8412 Not tainted syzkaller #0 [ 1905.785380][T31047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1905.795487][T31047] Call Trace: [ 1905.798809][T31047] [ 1905.801781][T31047] dump_stack_lvl+0x188/0x24e [ 1905.806508][T31047] ? show_regs_print_info+0x12/0x12 [ 1905.811771][T31047] ? load_image+0x400/0x400 [ 1905.816406][T31047] ? __lock_acquire+0x7d10/0x7d10 [ 1905.821497][T31047] ? __virt_addr_valid+0x44f/0x540 [ 1905.826662][T31047] should_fail_ex+0x399/0x4d0 [ 1905.831392][T31047] _copy_from_user+0x2c/0x170 [ 1905.836131][T31047] ____sys_sendmsg+0x30a/0x970 [ 1905.840973][T31047] ? __sys_sendmsg_sock+0x30/0x30 [ 1905.846047][T31047] ? __import_iovec+0x315/0x500 [ 1905.851037][T31047] ? import_iovec+0x6f/0xa0 [ 1905.855590][T31047] ___sys_sendmsg+0x2a2/0x360 [ 1905.860338][T31047] ? migrate_enable+0x148/0x220 [ 1905.865255][T31047] ? __sys_sendmsg+0x290/0x290 [ 1905.870147][T31047] __se_sys_sendmsg+0x1bb/0x2a0 [ 1905.875066][T31047] ? __x64_sys_sendmsg+0x80/0x80 [ 1905.880088][T31047] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1905.886038][T31047] do_syscall_64+0x4c/0xa0 [ 1905.890510][T31047] ? clear_bhb_loop+0x60/0xb0 [ 1905.895240][T31047] ? clear_bhb_loop+0x60/0xb0 [ 1905.899978][T31047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1905.905969][T31047] RIP: 0033:0x7f61b119acb9 [ 1905.910424][T31047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1905.930083][T31047] RSP: 002b:00007f61b200b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1905.938548][T31047] RAX: ffffffffffffffda RBX: 00007f61b1415fa0 RCX: 00007f61b119acb9 [ 1905.946653][T31047] RDX: 7e8166965e22236a RSI: 0000200000007940 RDI: 000000000000000c [ 1905.954666][T31047] RBP: 00007f61b200b090 R08: 0000000000000000 R09: 0000000000000000 [ 1905.962683][T31047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1905.970738][T31047] R13: 00007f61b1416038 R14: 00007f61b1415fa0 R15: 00007ffd1c399988 [ 1905.978788][T31047] [ 1906.095155][T31051] netlink: 'syz.2.8414': attribute type 10 has an invalid length. [ 1906.707507][T31076] netlink: 'syz.4.8421': attribute type 21 has an invalid length. [ 1906.718606][T31076] netlink: 'syz.4.8421': attribute type 1 has an invalid length. [ 1906.942680][T31076] team0: Port device geneve1 added [ 1907.457562][T31090] validate_nla: 1 callbacks suppressed [ 1907.457670][T31090] netlink: 'syz.3.8426': attribute type 10 has an invalid length. [ 1907.905110][T31108] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.8433'. [ 1909.191687][T31137] netlink: 'syz.0.8443': attribute type 10 has an invalid length. [ 1909.224373][T31137] device wlan1 left promiscuous mode [ 1909.266358][T31137] team0: Port device wlan1 removed [ 1909.339852][T31137] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1909.694847][T31144] netlink: 'syz.2.8444': attribute type 10 has an invalid length. [ 1909.965461][T31150] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.8445'. [ 1910.271970][T31153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1910.279416][T31153] IPv6: NLM_F_CREATE should be set when creating new route [ 1913.015980][T31198] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.8461'. [ 1914.544646][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.551151][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.655458][T31238] netlink: 'syz.1.8470': attribute type 25 has an invalid length. [ 1915.732347][T31238] netlink: 'syz.1.8470': attribute type 1 has an invalid length. [ 1915.792794][T31238] bridge0: port 1(bridge_slave_0) entered learning state [ 1916.697162][T31258] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8476'. [ 1919.554595][T31290] netlink: 'syz.1.8482': attribute type 21 has an invalid length. [ 1919.578311][T31290] IPv6: NLM_F_CREATE should be specified when creating new route [ 1920.819395][T31313] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8496'. [ 1921.293502][T31328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1921.300874][T31328] IPv6: NLM_F_CREATE should be set when creating new route [ 1921.353331][T31337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1921.710921][T31348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1922.266211][T31362] FAULT_INJECTION: forcing a failure. [ 1922.266211][T31362] name failslab, interval 1, probability 0, space 0, times 0 [ 1922.279787][T31362] CPU: 1 PID: 31362 Comm: syz.3.8511 Not tainted syzkaller #0 [ 1922.287289][T31362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1922.297411][T31362] Call Trace: [ 1922.300732][T31362] [ 1922.303695][T31362] dump_stack_lvl+0x188/0x24e [ 1922.308425][T31362] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1922.314630][T31362] ? show_regs_print_info+0x12/0x12 [ 1922.319888][T31362] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1922.326121][T31362] should_fail_ex+0x399/0x4d0 [ 1922.330876][T31362] should_failslab+0x5/0x20 [ 1922.335429][T31362] slab_pre_alloc_hook+0x59/0x310 [ 1922.340515][T31362] kmem_cache_alloc+0x56/0x2f0 [ 1922.345323][T31362] ? skb_clone+0x1e7/0x370 [ 1922.349803][T31362] skb_clone+0x1e7/0x370 [ 1922.354093][T31362] ? packet_rcv+0x476/0x13d0 [ 1922.358741][T31362] packet_rcv+0x5d9/0x13d0 [ 1922.363218][T31362] ? packet_sock_destruct+0x160/0x160 [ 1922.368648][T31362] dev_queue_xmit_nit+0x5f2/0xbb0 [ 1922.373713][T31362] ? dev_queue_xmit_nit+0x29/0xbb0 [ 1922.378883][T31362] dev_hard_start_xmit+0x154/0x870 [ 1922.384060][T31362] __dev_queue_xmit+0x1a7f/0x37f0 [ 1922.389126][T31362] ? lock_chain_count+0x20/0x20 [ 1922.394144][T31362] ? __dev_queue_xmit+0x26b/0x37f0 [ 1922.399308][T31362] ? netdev_core_pick_tx+0x340/0x340 [ 1922.404657][T31362] ? __copy_skb_header+0x3ba/0x4f0 [ 1922.409823][T31362] ? memcpy+0x3c/0x60 [ 1922.413864][T31362] ? __copy_skb_header+0x3ba/0x4f0 [ 1922.419043][T31362] ? __skb_clone+0x480/0x790 [ 1922.423796][T31362] ? skb_clone+0x21b/0x370 [ 1922.428267][T31362] __netlink_deliver_tap+0x580/0x800 [ 1922.433622][T31362] ? netlink_deliver_tap+0x2e/0x1b0 [ 1922.438877][T31362] netlink_deliver_tap+0x19c/0x1b0 [ 1922.444048][T31362] netlink_unicast+0x728/0x8d0 [ 1922.448873][T31362] netlink_sendmsg+0x8ad/0xbd0 [ 1922.453700][T31362] ? netlink_getsockopt+0x550/0x550 [ 1922.458996][T31362] ? aa_sock_msg_perm+0x94/0x150 [ 1922.463983][T31362] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1922.469307][T31362] ? security_socket_sendmsg+0x7c/0xa0 [ 1922.474914][T31362] ? netlink_getsockopt+0x550/0x550 [ 1922.480183][T31362] ____sys_sendmsg+0x5be/0x970 [ 1922.485017][T31362] ? __sys_sendmsg_sock+0x30/0x30 [ 1922.490094][T31362] ? __import_iovec+0x315/0x500 [ 1922.494989][T31362] ? import_iovec+0x6f/0xa0 [ 1922.499537][T31362] ___sys_sendmsg+0x2a2/0x360 [ 1922.504355][T31362] ? __sys_sendmsg+0x290/0x290 [ 1922.509217][T31362] __se_sys_sendmsg+0x1bb/0x2a0 [ 1922.514124][T31362] ? ct_nmi_exit+0x145/0x1c0 [ 1922.518852][T31362] ? __x64_sys_sendmsg+0x80/0x80 [ 1922.523861][T31362] ? lockdep_hardirqs_on+0x94/0x140 [ 1922.529116][T31362] do_syscall_64+0x4c/0xa0 [ 1922.533586][T31362] ? clear_bhb_loop+0x60/0xb0 [ 1922.538405][T31362] ? clear_bhb_loop+0x60/0xb0 [ 1922.543156][T31362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1922.549127][T31362] RIP: 0033:0x7fd46cf9acb9 [ 1922.553584][T31362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1922.573232][T31362] RSP: 002b:00007fd46ded2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1922.581697][T31362] RAX: ffffffffffffffda RBX: 00007fd46d215fa0 RCX: 00007fd46cf9acb9 [ 1922.589712][T31362] RDX: 0000000000000880 RSI: 0000200000000200 RDI: 0000000000000006 [ 1922.597741][T31362] RBP: 00007fd46ded2090 R08: 0000000000000000 R09: 0000000000000000 [ 1922.605749][T31362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1922.613759][T31362] R13: 00007fd46d216038 R14: 00007fd46d215fa0 R15: 00007ffc1e967c78 [ 1922.621788][T31362] [ 1922.813246][T31367] netlink: 188 bytes leftover after parsing attributes in process `syz.1.8513'. [ 1923.747933][T31387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1923.801915][T31388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1923.852162][T31389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1924.175313][T31398] FAULT_INJECTION: forcing a failure. [ 1924.175313][T31398] name failslab, interval 1, probability 0, space 0, times 0 [ 1924.204535][T31398] CPU: 0 PID: 31398 Comm: syz.4.8524 Not tainted syzkaller #0 [ 1924.212087][T31398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1924.222187][T31398] Call Trace: [ 1924.225510][T31398] [ 1924.228477][T31398] dump_stack_lvl+0x188/0x24e [ 1924.233196][T31398] ? sctp_sendmsg+0x15b0/0x2940 [ 1924.238134][T31398] ? ___sys_sendmsg+0x2a2/0x360 [ 1924.243054][T31398] ? show_regs_print_info+0x12/0x12 [ 1924.248283][T31398] ? load_image+0x400/0x400 [ 1924.252833][T31398] should_fail_ex+0x399/0x4d0 [ 1924.257551][T31398] should_failslab+0x5/0x20 [ 1924.262086][T31398] slab_pre_alloc_hook+0x59/0x310 [ 1924.267234][T31398] ? sctp_add_bind_addr+0x89/0x350 [ 1924.272385][T31398] __kmem_cache_alloc_node+0x4f/0x260 [ 1924.277786][T31398] ? sctp_add_bind_addr+0x89/0x350 [ 1924.282930][T31398] kmalloc_trace+0x26/0xe0 [ 1924.287387][T31398] sctp_add_bind_addr+0x89/0x350 [ 1924.292357][T31398] sctp_copy_local_addr_list+0x311/0x4e0 [ 1924.298026][T31398] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 1924.303791][T31398] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1924.309907][T31398] ? sctp_v4_is_any+0x31/0x50 [ 1924.314616][T31398] ? sctp_copy_one_addr+0x93/0x660 [ 1924.319757][T31398] sctp_bind_addr_copy+0xaf/0x3c0 [ 1924.324826][T31398] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1924.331196][T31398] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1924.336523][T31398] ? __sctp_connect+0xd80/0xd80 [ 1924.341403][T31398] ? __local_bh_enable_ip+0x136/0x1c0 [ 1924.346806][T31398] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1924.352379][T31398] ? security_sctp_bind_connect+0x85/0xb0 [ 1924.358126][T31398] sctp_sendmsg+0x15b0/0x2940 [ 1924.362847][T31398] ? aa_sk_perm+0x7e1/0x950 [ 1924.367385][T31398] ? sctp_getsockopt+0x8a0/0x8a0 [ 1924.372374][T31398] ? lockdep_hardirqs_on+0x94/0x140 [ 1924.377627][T31398] ? aa_af_perm+0x340/0x340 [ 1924.382194][T31398] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1924.388672][T31398] ? inet_sendmsg+0xe5/0x2f0 [ 1924.393313][T31398] ? inet_send_prepare+0x260/0x260 [ 1924.398466][T31398] ____sys_sendmsg+0x5be/0x970 [ 1924.403276][T31398] ? __sys_sendmsg_sock+0x30/0x30 [ 1924.408328][T31398] ? __import_iovec+0x315/0x500 [ 1924.413211][T31398] ? import_iovec+0x6f/0xa0 [ 1924.417736][T31398] ___sys_sendmsg+0x2a2/0x360 [ 1924.422445][T31398] ? __sys_sendmsg+0x290/0x290 [ 1924.427250][T31398] ? __lock_acquire+0x7d10/0x7d10 [ 1924.432338][T31398] __se_sys_sendmsg+0x1bb/0x2a0 [ 1924.437226][T31398] ? __x64_sys_sendmsg+0x80/0x80 [ 1924.442275][T31398] ? lockdep_hardirqs_on+0x94/0x140 [ 1924.447508][T31398] do_syscall_64+0x4c/0xa0 [ 1924.451951][T31398] ? clear_bhb_loop+0x60/0xb0 [ 1924.456650][T31398] ? clear_bhb_loop+0x60/0xb0 [ 1924.461364][T31398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1924.467279][T31398] RIP: 0033:0x7f61b119acb9 [ 1924.471713][T31398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1924.491426][T31398] RSP: 002b:00007f61b200b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1924.499860][T31398] RAX: ffffffffffffffda RBX: 00007f61b1415fa0 RCX: 00007f61b119acb9 [ 1924.507851][T31398] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1924.515841][T31398] RBP: 00007f61b200b090 R08: 0000000000000000 R09: 0000000000000000 [ 1924.523833][T31398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1924.531830][T31398] R13: 00007f61b1416038 R14: 00007f61b1415fa0 R15: 00007ffd1c399988 [ 1924.539842][T31398] [ 1925.042842][T31415] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8528'. [ 1925.809575][T31426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1928.501430][T31448] netlink: 'syz.0.8540': attribute type 10 has an invalid length. [ 1928.543441][T31448] bond0: (slave wlan1): Releasing backup interface [ 1928.565512][T31448] device wlan1 entered promiscuous mode [ 1928.585339][T31448] team0: Port device wlan1 added [ 1929.581540][T31471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1929.588970][T31471] IPv6: NLM_F_CREATE should be set when creating new route [ 1929.640059][T31469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1933.280717][T31495] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8557'. [ 1934.473336][T31519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1934.731221][T31526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1934.738784][T31526] IPv6: NLM_F_CREATE should be set when creating new route [ 1935.325563][T31547] device wlan0 entered promiscuous mode [ 1935.709240][T31562] netlink: 'syz.3.8578': attribute type 6 has an invalid length. [ 1935.730450][T31563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1935.748052][T31562] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.8578'. [ 1936.106048][T31572] netlink: 'syz.0.8584': attribute type 10 has an invalid length. [ 1936.175493][T31572] device veth0_vlan left promiscuous mode [ 1936.217478][T31572] device veth0_vlan entered promiscuous mode [ 1936.262973][T31572] team0: Device veth0_vlan failed to register rx_handler [ 1936.389772][T31574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1937.105807][T31603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1937.218217][T31607] FAULT_INJECTION: forcing a failure. [ 1937.218217][T31607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1937.234103][T31607] CPU: 0 PID: 31607 Comm: syz.0.8595 Not tainted syzkaller #0 [ 1937.241644][T31607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1937.251747][T31607] Call Trace: [ 1937.255085][T31607] [ 1937.258064][T31607] dump_stack_lvl+0x188/0x24e [ 1937.262815][T31607] ? show_regs_print_info+0x12/0x12 [ 1937.268062][T31607] ? load_image+0x400/0x400 [ 1937.272621][T31607] ? __lock_acquire+0x7d10/0x7d10 [ 1937.277707][T31607] ? __rcu_read_unlock+0x78/0xd0 [ 1937.282696][T31607] should_fail_ex+0x399/0x4d0 [ 1937.287441][T31607] _copy_to_user+0x2c/0x130 [ 1937.292011][T31607] bpf_test_finish+0x198/0x600 [ 1937.296839][T31607] ? convert___skb_to_skb+0x580/0x580 [ 1937.302266][T31607] ? convert_skb_to___skb+0x420/0x420 [ 1937.307684][T31607] ? __build_skb+0x257/0x3c0 [ 1937.312337][T31607] bpf_prog_test_run_skb+0xc99/0x12a0 [ 1937.317797][T31607] ? cpu_online+0xa0/0xa0 [ 1937.322215][T31607] bpf_prog_test_run+0x31e/0x390 [ 1937.327216][T31607] __sys_bpf+0x62b/0x780 [ 1937.331520][T31607] ? bpf_link_show_fdinfo+0x380/0x380 [ 1937.336975][T31607] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1937.343199][T31607] __x64_sys_bpf+0x78/0x90 [ 1937.347680][T31607] do_syscall_64+0x4c/0xa0 [ 1937.352149][T31607] ? clear_bhb_loop+0x60/0xb0 [ 1937.356888][T31607] ? clear_bhb_loop+0x60/0xb0 [ 1937.361624][T31607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1937.367569][T31607] RIP: 0033:0x7f2af359acb9 [ 1937.372035][T31607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1937.391701][T31607] RSP: 002b:00007f2af43c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1937.400185][T31607] RAX: ffffffffffffffda RBX: 00007f2af3815fa0 RCX: 00007f2af359acb9 [ 1937.408200][T31607] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1937.416220][T31607] RBP: 00007f2af43c5090 R08: 0000000000000000 R09: 0000000000000000 [ 1937.424234][T31607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1937.432245][T31607] R13: 00007f2af3816038 R14: 00007f2af3815fa0 R15: 00007ffe11862df8 [ 1937.440290][T31607] [ 1938.339753][T31633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1938.423609][T31637] FAULT_INJECTION: forcing a failure. [ 1938.423609][T31637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1938.477513][T31637] CPU: 1 PID: 31637 Comm: syz.4.8604 Not tainted syzkaller #0 [ 1938.485090][T31637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1938.495193][T31637] Call Trace: [ 1938.498511][T31637] [ 1938.501490][T31637] dump_stack_lvl+0x188/0x24e [ 1938.506224][T31637] ? show_regs_print_info+0x12/0x12 [ 1938.511474][T31637] ? load_image+0x400/0x400 [ 1938.516022][T31637] ? __lock_acquire+0x7d10/0x7d10 [ 1938.521110][T31637] should_fail_ex+0x399/0x4d0 [ 1938.525865][T31637] strncpy_from_user+0x32/0x350 [ 1938.530777][T31637] bpf_prog_load+0x1f3/0x1560 [ 1938.535528][T31637] ? map_freeze+0x390/0x390 [ 1938.540099][T31637] ? __might_fault+0xa6/0x120 [ 1938.544864][T31637] ? lockdep_hardirqs_on+0x94/0x140 [ 1938.550139][T31637] ? __might_fault+0xa6/0x120 [ 1938.554859][T31637] ? __might_fault+0xc2/0x120 [ 1938.559592][T31637] ? __might_fault+0xa6/0x120 [ 1938.564317][T31637] ? bpf_lsm_bpf+0x5/0x10 [ 1938.568698][T31637] ? security_bpf+0x7a/0xa0 [ 1938.573246][T31637] __sys_bpf+0x5b8/0x780 [ 1938.577542][T31637] ? bpf_link_show_fdinfo+0x380/0x380 [ 1938.583004][T31637] ? lock_chain_count+0x20/0x20 [ 1938.587898][T31637] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1938.593918][T31637] __x64_sys_bpf+0x78/0x90 [ 1938.598365][T31637] do_syscall_64+0x4c/0xa0 [ 1938.602810][T31637] ? clear_bhb_loop+0x60/0xb0 [ 1938.607512][T31637] ? clear_bhb_loop+0x60/0xb0 [ 1938.612213][T31637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1938.618156][T31637] RIP: 0033:0x7f61b119acb9 [ 1938.622586][T31637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1938.642213][T31637] RSP: 002b:00007f61b200b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1938.650654][T31637] RAX: ffffffffffffffda RBX: 00007f61b1415fa0 RCX: 00007f61b119acb9 [ 1938.658670][T31637] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 1938.666660][T31637] RBP: 00007f61b200b090 R08: 0000000000000000 R09: 0000000000000000 [ 1938.674649][T31637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1938.682638][T31637] R13: 00007f61b1416038 R14: 00007f61b1415fa0 R15: 00007ffd1c399988 [ 1938.690637][T31637] [ 1939.017316][T31646] netlink: 'syz.1.8608': attribute type 21 has an invalid length. [ 1939.202632][T31653] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.8610'. [ 1940.450185][T31667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1940.479500][T31669] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1940.717469][T31673] Ÿë: port 1(gretap0) entered blocking state [ 1940.726717][T31673] Ÿë: port 1(gretap0) entered disabled state [ 1940.746460][T31673] device gretap0 entered promiscuous mode [ 1940.805649][T31685] Ÿë: port 2(veth0_to_team) entered blocking state [ 1940.826077][T31685] Ÿë: port 2(veth0_to_team) entered disabled state [ 1940.863605][T31685] device veth0_to_team entered promiscuous mode [ 1940.897282][T31678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1940.965645][T31687] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.8620'. [ 1941.044877][T31687] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.8620'. [ 1942.960574][T31714] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1942.968461][T31714] #PF: supervisor instruction fetch in kernel mode [ 1942.975013][T31714] #PF: error_code(0x0010) - not-present page [ 1942.981058][T31714] PGD 5b89d067 P4D 5b89d067 PUD 0 [ 1942.986229][T31714] Oops: 0010 [#1] PREEMPT SMP KASAN [ 1942.991481][T31714] CPU: 0 PID: 31714 Comm: syz.1.8631 Not tainted syzkaller #0 [ 1942.998976][T31714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1943.009075][T31714] RIP: 0010:0x0 [ 1943.012583][T31714] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1943.019985][T31714] RSP: 0018:ffffc900043a7458 EFLAGS: 00010246 [ 1943.026143][T31714] RAX: 1ffffffff17339d7 RBX: 1ffff92000874e9c RCX: 0000000000000001 [ 1943.034164][T31714] RDX: ffffc900043a7500 RSI: 0000000000000001 RDI: ffff888023b68000 [ 1943.042178][T31714] RBP: ffffc900043a7570 R08: ffff888023b6803f R09: 1ffff1100476d007 [ 1943.050198][T31714] R10: dffffc0000000000 R11: ffffed100476d008 R12: ffffe8ffffc66dd0 [ 1943.058303][T31714] R13: ffffffff8b99ceb8 R14: 0000000000000000 R15: ffff888023b68000 [ 1943.066318][T31714] FS: 00007fb8a91296c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1943.075278][T31714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1943.081895][T31714] CR2: ffffffffffffffd6 CR3: 000000005ca3b000 CR4: 00000000003506f0 [ 1943.090001][T31714] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1943.098011][T31714] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1943.106016][T31714] Call Trace: [ 1943.109316][T31714] [ 1943.112269][T31714] bond_xdp_xmit+0x31e/0x550 [ 1943.116978][T31714] ? bond_xdp_xmit+0x94/0x550 [ 1943.121687][T31714] ? bond_xdp+0x850/0x850 [ 1943.126041][T31714] ? __schedule+0x11d9/0x40e0 [ 1943.130745][T31714] bq_xmit_all+0xd3f/0x11b0 [ 1943.135295][T31714] ? __dev_flush+0x1b0/0x1b0 [ 1943.140179][T31714] ? preempt_schedule+0xbc/0xd0 [ 1943.145054][T31714] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 1943.150630][T31714] ? preempt_schedule_common+0xa5/0xd0 [ 1943.156123][T31714] ? schedule_preempt_disabled+0x20/0x20 [ 1943.161785][T31714] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1943.167872][T31714] ? lockdep_softirqs_on+0x580/0x580 [ 1943.173200][T31714] ? bq_enqueue+0x2ee/0x3d0 [ 1943.177738][T31714] ? rcu_is_watching+0x11/0xa0 [ 1943.182731][T31714] ? trace_xdp_redirect+0xb3/0x2b0 [ 1943.187867][T31714] __dev_flush+0xbf/0x1b0 [ 1943.192229][T31714] xdp_do_flush+0xa/0x20 [ 1943.196491][T31714] bpf_test_run_xdp_live+0x1545/0x1a90 [ 1943.201978][T31714] ? 0xffffffffa0004440 [ 1943.206157][T31714] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 1943.211726][T31714] ? xdp_convert_md_to_buff+0x330/0x330 [ 1943.217311][T31714] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1943.223607][T31714] ? bpf_test_init+0x119/0x140 [ 1943.228395][T31714] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1943.233878][T31714] bpf_prog_test_run_xdp+0x736/0xf10 [ 1943.239194][T31714] ? dev_put+0x80/0x80 [ 1943.243290][T31714] ? dev_put+0x80/0x80 [ 1943.247376][T31714] bpf_prog_test_run+0x31e/0x390 [ 1943.252340][T31714] __sys_bpf+0x62b/0x780 [ 1943.256650][T31714] ? bpf_link_show_fdinfo+0x380/0x380 [ 1943.262076][T31714] ? lock_chain_count+0x20/0x20 [ 1943.266978][T31714] __x64_sys_bpf+0x78/0x90 [ 1943.271422][T31714] do_syscall_64+0x4c/0xa0 [ 1943.275881][T31714] ? clear_bhb_loop+0x60/0xb0 [ 1943.280593][T31714] ? clear_bhb_loop+0x60/0xb0 [ 1943.285297][T31714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1943.291217][T31714] RIP: 0033:0x7fb8a819acb9 [ 1943.295661][T31714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1943.315293][T31714] RSP: 002b:00007fb8a9129028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1943.323737][T31714] RAX: ffffffffffffffda RBX: 00007fb8a8415fa0 RCX: 00007fb8a819acb9 [ 1943.331734][T31714] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1943.339725][T31714] RBP: 00007fb8a8208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1943.347762][T31714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1943.355757][T31714] R13: 00007fb8a8416038 R14: 00007fb8a8415fa0 R15: 00007ffe626b3918 [ 1943.363764][T31714] [ 1943.366851][T31714] Modules linked in: [ 1943.370805][T31714] CR2: 0000000000000000 [ 1943.375022][T31714] ---[ end trace 0000000000000000 ]--- [ 1943.380516][T31714] RIP: 0010:0x0 [ 1943.384104][T31714] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1943.391693][T31714] RSP: 0018:ffffc900043a7458 EFLAGS: 00010246 [ 1943.397789][T31714] RAX: 1ffffffff17339d7 RBX: 1ffff92000874e9c RCX: 0000000000000001 [ 1943.405787][T31714] RDX: ffffc900043a7500 RSI: 0000000000000001 RDI: ffff888023b68000 [ 1943.413871][T31714] RBP: ffffc900043a7570 R08: ffff888023b6803f R09: 1ffff1100476d007 [ 1943.421861][T31714] R10: dffffc0000000000 R11: ffffed100476d008 R12: ffffe8ffffc66dd0 [ 1943.429945][T31714] R13: ffffffff8b99ceb8 R14: 0000000000000000 R15: ffff888023b68000 [ 1943.437936][T31714] FS: 00007fb8a91296c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1943.446908][T31714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1943.453517][T31714] CR2: ffffffffffffffd6 CR3: 000000005ca3b000 CR4: 00000000003506f0 [ 1943.461511][T31714] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1943.469599][T31714] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1943.477594][T31714] Kernel panic - not syncing: Fatal exception in interrupt [ 1943.485379][T31714] Kernel Offset: disabled [ 1943.489723][T31714] Rebooting in 86400 seconds..