last executing test programs: 7.352599094s ago: executing program 0 (id=1437): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000280)={'bridge0', 0x32, 0x31}, 0xa) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x24, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e00000406207", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c000) sendmsg$sock(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[], 0x50) socket$kcm(0xa, 0x6, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x9, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r5, &(0x7f00000000c0), 0x0}, 0x20) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.807469751s ago: executing program 2 (id=1440): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e0000000400"}) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, r5, 0x4, r4, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160800000000000000001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509", 0x4e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000010c0)={0x1, 0x58, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001100)=ANY=[@ANYBLOB="9feb0100180000000000000084000000840000000400000008000000020000930c0000ffff00000008000000040000000400000042000000d85700000f000000000000100c0000000c00000006000084080000000300000003000000030000000200000004000000fe0000000b00000003000000030000000900000001000000010000000a00000004000000010000000a00000005000000a0000000005f6100"], &(0x7f0000001200)=""/222, 0xa0, 0xde, 0x1, 0x0, 0x10000, @value=r5}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001440)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', r8, r9, 0x3, 0x1, 0x5}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8914, &(0x7f0000000080)) ioctl$TUNGETVNETBE(r7, 0x800454df, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000dc0)={@ifindex, 0x5, 0x0, 0xb, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001600)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200"/12, @ANYRES32=r4, @ANYBLOB="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", @ANYRES64=r11], 0x20) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f00000008c0)=""/261, 0x105}, {&(0x7f0000003140)=""/4050, 0xfd2}, {&(0x7f00000014c0)=""/260, 0x104}, {&(0x7f0000000400)=""/183, 0xb7}, {&(0x7f0000000340)=""/166, 0xa6}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000e40)=""/16, 0x10}, {&(0x7f0000000bc0)=""/76, 0x4c}, {&(0x7f0000000780)=""/166, 0xa6}, {&(0x7f00000005c0)=""/163, 0xa3}, {&(0x7f00000002c0)=""/78, 0x4e}, {0x0}, {&(0x7f00000004c0)=""/242, 0xf2}], 0xe}, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) 6.344784066s ago: executing program 1 (id=1444): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x6, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2e, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb73d) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x36) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2400000064006bcd9e3fe3dc6e48aa31086b8703130000001f0000000000000004001400", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044000) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0xc, 0xd, &(0x7f0000002b00)=ANY=[@ANYBLOB="1801000020f3a7bb12cfc286060f626c2500160000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030057ae932a000a26000085000000060000001302fbab265d45c223a15323ba2d2aad056d7c7a27ce37425245a3a0b5f8cd7305ac0e645253e4575c5343596af41d77d760e7a091ca54ac9ab18520c60e269a0d3b19731385ba5458505d517bed88dca790c0b1654e6b15a25b421d843aea99d2c81b7e63297dd0827e43e0f0287decb261cf2e42480830b788a12d4be668ca992862f3b63b97437ff3e5a70b9920214a14b1b2eca2d720d1cc5afd653bce309114760b530895e88e16c291ab952efdae8df2edaa42141cc945f51ce45c4c53e6d7df7f766dd56ea33f54b6bdaeacf9b95f3ffff24edd5f76ec075c7057292f4f75a598cbdaa383485c4aa3fdc69d69", @ANYRES32, @ANYBLOB="000000000400000085100000faffffff186000000c0000000000000005000000"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000180)=""/4096, 0x40f00, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000011c0)={0x5, 0x4, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x10, 0x1ff}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001300)={r4, r0, 0x4, r5}, 0x10) socketpair(0x3, 0x1, 0xfffffffe, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001340)={0xffffffffffffffff}) recvmsg(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001380)=""/109, 0x6d}, {&(0x7f0000001400)=""/80, 0x50}, {&(0x7f0000001480)=""/207, 0xcf}, {&(0x7f0000001580)=""/152, 0x98}, {&(0x7f0000001640)=""/52, 0x34}, {&(0x7f0000001680)=""/149, 0x95}, {&(0x7f0000001740)=""/39, 0x27}, {&(0x7f0000001780)=""/96, 0x60}, {&(0x7f0000001800)=""/212, 0xd4}, {&(0x7f0000001900)=""/4096, 0x1000}], 0xa, &(0x7f00000029c0)=""/232, 0xe8}, 0x10100) perf_event_open(&(0x7f0000000100)={0x1, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x56df367) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x80, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'macvlan0\x00'}) 6.095105904s ago: executing program 0 (id=1446): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc", 0x5}], 0x1}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x88841, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001480)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000001900)={&(0x7f00000014c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @rand_addr=0x64010100}, 0x4, 0x4, 0x2, 0x2}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001540)="e3531f95e381e7b63dcce2353b4ada82f057d67a23e8a5d9c90340cf20643b53cc57bf93ec79b1148940e16592ed8d82f04c7ed2bfed86869697d99bc710ad9ef9e160f91f514a6f9a54fd189386ac011491748e11be5bf18851101799ce2abd92e6558440bb76d831247b1000b4c6dd28ec81061d58bc162d804e9789314e85e5310c9d48ec0f3a", 0x88}, {&(0x7f0000001600)="55651928a06ad37bd5a7bc3fe25373d642961c9f37a39cc473f52156358c9b12ccc4207f81addc59b9ff3251e7677ea85ceafcaa86", 0x35}, {&(0x7f0000001640)="26d201e684aac2e540dd79c85bf876675e6a4d91f523c0501963959504078c931f472b0092ffa63a6a7a46a2a2985e41a594297b14b0ff8889943f2a80a4325781eb7296ab86fc8bf8076b9a71f3c25fb42a39e4", 0x54}, {&(0x7f00000016c0)="a090c2e567bafca24ef31e1af68d3d2d3dcdbeb2b295c4eec3afcc024a39419d9212344d6ab8ae8596bbf692a2e05acb5382dda7caf6e098069df4525fce6069cd7f4772f6304adaa8edb79eda9c1410d26e6c74b4e85e4760fb5117f7a71ee5cfdb4d73136271fead3835778fc397caeff86ecf216e9dacde0edd8fd77d0953f4783f332e7fa519d1b69560cfb27ea8787e3928dbb923a7be8629ee8c1418e1634d6f25668a0853514471434a6e8878c062daf9e985c0f7c9ce093a014abcd372342fb455cba61fec5ba4d28ee71180a1f098ea5778b52a44ac2f25443a9c42c802f7bbc9b482373661cb1d7bd7c0f68b", 0xf1}, {&(0x7f00000017c0)="9621b51d6843e9c4cdda50128f883708b01e2591a4d3779a6d5feb0129dd7bb01c37216e42e3c2a9f53e7e2a1c8d3a3de8db64da9c5a405f2eba7c74af66bc0eb48edecc56c7fc57f5fc2eccc484956f2fae4aff2eea1edb089d9b", 0x5b}], 0x5, &(0x7f00000018c0)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}, 0x44000) socket$kcm(0x10, 0x1, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) socket$kcm(0x23, 0x2, 0x0) 5.90692774s ago: executing program 3 (id=1448): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285", 0x60}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c00"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) 3.760386909s ago: executing program 0 (id=1450): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="4bc7416d601e058bd2996f3241de1fbd0b71e79b6aeb136b512ad9ce43701a7991dac92da5e44ca243c9cfdb75224402c2b1a4fdd9cad9d67ed32fb4", @ANYRES8=0x0, @ANYRES8], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="4bc7416d601e058bd2996f3241de1fbd0b71e79b6aeb136b512ad9ce43701a7991dac92da5e44ca243c9cfdb75224402c2b1a4fdd9cad9d67ed32fb4", @ANYRES8=0x0, @ANYRES8], 0x50) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000a80), 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000a80), 0x0}, 0x20) socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x3}, 0x1048, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x3}, 0x1048, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@o_path={&(0x7f0000000b80)='./file0\x00', 0x0, 0x8, r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRESDEC, @ANYRESDEC=r3], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) (async) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a", 0x11}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x890b, &(0x7f0000000100)) (async) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x890c, &(0x7f0000000100)) (async) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x890c, &(0x7f0000000100)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) 3.754358609s ago: executing program 2 (id=1451): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x110010, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x58}, 0x40000062) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 3.74188838s ago: executing program 3 (id=1452): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x50) 3.532562566s ago: executing program 1 (id=1453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000340)="ee", &(0x7f0000000000)=""/6, 0x2}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x20048020) 3.509468997s ago: executing program 3 (id=1454): r0 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000) r4 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10e, 0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000500)={'netdevsim0\x00', 0x200}) write$cgroup_subtree(r1, 0x0, 0xfe33) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x1, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10021) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r7, 0x20, &(0x7f0000000900)={&(0x7f00000007c0)=""/112, 0x70, 0x0, &(0x7f0000000840)=""/189, 0xbd}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe9bcbcfeda0de038, 0x11, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000c08a000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="00000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000feffffff8510000002000000bf91000000000000b7020000020000008500000085000000b7000000000000009500"/112], &(0x7f0000000680)='GPL\x00', 0x8, 0x72, &(0x7f00000006c0)=""/114, 0x0, 0x5a, '\x00', 0x0, @fallback=0xb, r7, 0x8, &(0x7f0000000740)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x9, 0x400, 0x788}, 0x10, r8, r7, 0x5, &(0x7f0000000980)=[r7], &(0x7f00000009c0)=[{0x0, 0x1, 0x4, 0x2}, {0x4, 0x3, 0xb}, {0x3, 0x1, 0x5, 0x2}, {0x5, 0x2, 0xa, 0x7}, {0x1, 0x4, 0x8, 0xa}], 0x10, 0x6}, 0x94) r9 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="02", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) 3.362494272s ago: executing program 4 (id=1455): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340), 0x0, 0x0, 0x0, 0xc9e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00006a"], 0xfe33) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x22, 0x3, 0x0) close(r2) r3 = socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x7, 0x4, 0x8, 0x1, 0x200}, 0x50) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) recvmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x400020a2) socket$kcm(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8927, &(0x7f0000000100)='\xb4\xc9\xd2\x9c\x9bQK?\xbbe\x9b:y\xe9\x19\xc6\xbe\v\x8f\xce#') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000008000408000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x82, &(0x7f0000000200)=""/130, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 3.361932952s ago: executing program 1 (id=1465): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000340)="ee", &(0x7f0000000000)=""/6, 0x2}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)}], 0x1}, 0x20048020) 3.220128357s ago: executing program 3 (id=1456): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x200000000000010b, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x5, 0x0, 0x4, 0x0, 0x3, 0x8adfc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0xa, 0xd}, 0x2, 0x2, 0x6, 0x7, 0x81, 0x25, 0x3, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 3.126583839s ago: executing program 1 (id=1457): r0 = socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20004000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0x2}, 0x1302, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008000000012188eb4df783445f233fe8b03a7722059c58dbe2cac275075481b21bd15711fa3f1f421cad9fa7ea73ab48cd6045c8ac7e3d7bd8f3531fdfc255403d538d48f8a29f7bf24249ca3298861ad4140ad7"], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb9, 0x257d}, 0x0, 0x0, 0xc2b8, 0x0, 0x9, 0x2, 0x28a6, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xfffffffffeffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f00000013c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000000000000000000001801008000"/82], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYRES16=0x0], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0x123, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x214, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, &(0x7f0000000040), &(0x7f0000000100)='%pI4 \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0}}, 0x40) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="9feb10001800000000000000240000002400000002000000000000000000000203000000070000000000000c050000000000000000000002000000"], 0x0, 0x3e, 0x0, 0x1, 0x0, 0x10000, @value=r6}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) 2.310682955s ago: executing program 4 (id=1458): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x2}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5e0}, 0x2) 2.119017722s ago: executing program 4 (id=1459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x40305828, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x9, 0x14}}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000008f08000000000000850000006e0000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x100180, 0x3, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x2}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005234538ba55"], 0xfe33) 822.103573ms ago: executing program 2 (id=1460): socketpair(0x29, 0x800, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000600)="f1c519b1cd40a2bc1daf5882a35ea80551d3fc79a2ccd240262787fbb4b8ce1230522d7f41730b86fa5a0be07c4e935182a1559391a7b003d46a94be355bd49f643ceb1d900f5523074df91d3c6f5f734350455695871f5cc01592bf7aaba1fb794c3ed128da8a70c3d73bbe76dde33abf8584f5a6f634ebcc4c316d0bb88bce014cf1613c096c1e5ca83c84f120328ab8e3c089043d587e002abf7843aa2ae188b9f7fb53a4a996", 0xa8}, {&(0x7f0000000f40)="4a4ef9759748345449f6607fbea1dd839e80c9c6e418f8877c85f7c3cbe429b7fa2deb241ffe3fbb2f33b794c3f01d25e949f931811e4d44953c1e36e496132e1f45ebd48fca1b8e23fbaa11daf1eb92cecab1e9f78bfa4b71a6e5f951d1bf0f33803bba7cad1a085dbc1862a42833ff941ee37e36837ec70932edc2f7bb920089bce86ab7ad70778014f2b5f7543a36de463cf69b36795878ca62f14b9eb04f207d7dba8d35ab152faf52128b489c8e85d59e6875050e75724e457df6ca27cc2452f1314c8098aa8de09ea88a1d3dc6177885d53027bb3018cc74b669799675c646b50d50f318e2e16ec75988139cd6fcaae3c931e3495ad4d8f51c529a2dde89396d01e8f2b55fc41fa370d6ad65c60834bfeda6a8fd8206488ab5c523d0d01ab9243e8617a5aec7201ece1642ae05660257241e9a027bcfe0c921cdf26fde154acb72f2", 0x145}, {&(0x7f00000000c0)="53634bf79bb46352373ab382e3fe08aa3e1b93f1ea2b93b21ddb670ce6592eb2a2ea42a93b923490d11b", 0x2a}, {&(0x7f0000000780)="25dc2655c6fa223350e228f103a8042e64fabb4f596f39a2216f25c1e5b604dd55da5b", 0x23}, {&(0x7f00000007c0)="c0bc7e16227cc5ac9f27baead1424123afc1660980136acc33ad080f175bb5df8ba8c6912183ed9616fac312ce6a8791d6cde4dc69793237da25e968b9f3a20954d2e9922241df080b30bb5f464581eb41d251b9478df1f6fa119c472d", 0x5d}, {&(0x7f0000000840)="a1660e9ed70cc9a2ba4a11aef0d61c59dca5a7aec37cc0f7fc3259c801f10d66b1cf5ea57d8ca5caa0aa25c79ce41c61c24ea5549e554f86a1945b3f2e4d4793c1329a83d3bd51299f70705d7efcef3a9742916a3a5b250d3e63d07110eab5dfe35901f08f9524e30e552a152c1f4ae0a70ec175fdf913ad8fcde16c329901f492512d584e419f5b64", 0x89}, {&(0x7f0000000e40)="34a9f825a2288423dea294d07b44558c82b703113e4bd2749ca50259c28bd8afe53c9447f1113f1f6cb60d6c5ca3fc247e90789df84f26a2f49ea47a2257b556093498243efeeb17d7771975b573bbd8a48ee43233d247301a3ba20dc24ae9c1a4776a80ed8e916e1717e7d63df7fd0891b3513a770fd39eaaa9c9fa62186d4584b15876bc2c1ef25e611107fa384b3b6e691ac684bd2e60a6becf65a192808e444c3f07db481892fac78205495f4c034a3a64e527a7679ddb1ada47496d7885f6287b32b8e130da3e03f108bd62618e826746e96c", 0xd5}, {&(0x7f0000000a00)="afcf98444423f9e39f3030a0b473231c7eb291cef5e94616a7faeafcc99e9abbc06fa0f8a7e09ea07c652c3daf0fff4861abfeb7bd088474d4c9c7dca3d9ab03ebe8d481922bb57fdfe502fbacf3ae24abd758853cc09382ee01cf86321ca5f23c471d1a53b5d1afc769d221d88a83b6740f5f439d4734dbabcf2eba588fe11408db1f1da3196d7627fdfd1dd554426cf100f1a7eb172545d89ed52a3d6ba5b4eadcc387fdf7e1ce4ad3d700fcdd1854b21575fda86b2884a03991e41e83bd3f764cf72802be4b1aa6f5fbf194689a97dad8f6a98a8afb3a82e75593dac4da", 0xdf}, {&(0x7f0000000c00)="cf8e3605bf9248cc26a6b77961af2bcc10d458e6b4a6eb4cb21c98c77f08e707a5ac53cf1152659ec1228e13c7245b6fc794769decfbd5ad96e2701218a1a8247c32791ab0e2fac35cad4a6ef2381110f5418d0220cceec3f8ee6f4a93d206b2d49d272e650271c3035f1e3543e55f10f613e4629cc66a95c5e554ade33ebacfbb66da67d6bfa238e27695f392a3eb50f5ade734220349c85e657306e3d2f7136ac39fdd1c6885a4f4d1e2dcb3c0b69cab9a62f8a6ef2e2b0f3c69a7c9df11f459b432c3c70b816de6c63c7c8a116af849202bfa1c5f5ec270cf", 0xda}, {&(0x7f0000000d00)="0df2568f97555dc131b9385dd0e30a9a95b68fc1ac9bbd97efa88a282ec3db98b4d37ce5b8f4744ba0b1ed6843226c33f152bbb00d85330d504699069db68b170b58f5c673edc62b395844c26f49b7b9de69f80fa0e49f0b7fbb7f6545dfbd746de32bd56827f72c304714b4722b88a512682b2ac691c51dfa1d5fa98355b20c", 0x80}], 0xa}, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfff}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r3, 0x0, 0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0xa, &(0x7f0000000000), 0x4) socket$kcm(0x2, 0x48d8a2b98e7bf4f7, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000000001008510000006000000180000000000000000000000000000003f00000000000000180000000000000000000000000000009500000000000000370300000100000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) r7 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={r4}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=r7, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffffffffda6, 0x0}, 0x6004845) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) close(r6) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8927, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1b00008b00000000000000e60100000000000000379a63c1b02464ac7362a7868e784fa80bd97ba30f6111db22872bd93c833fa46f627c8bcbd822d91bea8c7da78c711973876e7e17cb00037841163b7f1a0768c06307cdd69fae51c36161647558084454f75293f2563126c3b535ac9fcdee733faf9f9e029f63dee31b9a157b691357864471d053fd4b86e9eeefc7880c74845a174f36fad1f800f3ac2796564f3da6d00887163a0afbf1be11f6b9d5921384d5401b71105e6cf862eafce311a44be5597e0f79569497253a91244d542238d88b1717376ea821c6601a94edeb24fcdcd320b16548", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) 771.683895ms ago: executing program 3 (id=1461): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc", 0x5}], 0x1}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x88841, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001480)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000001900)={&(0x7f00000014c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @rand_addr=0x64010100}, 0x4, 0x4, 0x2, 0x2}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001540)="e3531f95e381e7b63dcce2353b4ada82f057d67a23e8a5d9c90340cf20643b53cc57bf93ec79b1148940e16592ed8d82f04c7ed2bfed86869697d99bc710ad9ef9e160f91f514a6f9a54fd189386ac011491748e11be5bf18851101799ce2abd92e6558440bb76d831247b1000b4c6dd28ec81061d58bc162d804e9789314e85e5310c9d48ec0f3a", 0x88}, {&(0x7f0000001600)="55651928a06ad37bd5a7bc3fe25373d642961c9f37a39cc473f52156358c9b12ccc4207f81addc59b9ff3251e7677ea85ceafcaa86", 0x35}, {&(0x7f0000001640)="26d201e684aac2e540dd79c85bf876675e6a4d91f523c0501963959504078c931f472b0092ffa63a6a7a46a2a2985e41a594297b14b0ff8889943f2a80a4325781eb7296ab86fc8bf8076b9a71f3c25fb42a39e4", 0x54}, {&(0x7f00000016c0)="a090c2e567bafca24ef31e1af68d3d2d3dcdbeb2b295c4eec3afcc024a39419d9212344d6ab8ae8596bbf692a2e05acb5382dda7caf6e098069df4525fce6069cd7f4772f6304adaa8edb79eda9c1410d26e6c74b4e85e4760fb5117f7a71ee5cfdb4d73136271fead3835778fc397caeff86ecf216e9dacde0edd8fd77d0953f4783f332e7fa519d1b69560cfb27ea8787e3928dbb923a7be8629ee8c1418e1634d6f25668a0853514471434a6e8878c062daf9e985c0f7c9ce093a014abcd372342fb455cba61fec5ba4d28ee71180a1f098ea5778b52a44ac2f25443a9c42c802f7bbc9b482373661cb1d7bd7c0f68b", 0xf1}, {&(0x7f00000017c0)="9621b51d6843e9c4cdda50128f883708b01e2591a4d3779a6d5feb0129dd7bb01c37216e42e3c2a9f53e7e2a1c8d3a3de8db64da9c5a405f2eba7c74af66bc0eb48edecc56c7fc57f5fc2eccc484956f2fae4aff2eea1edb089d9b", 0x5b}], 0x5, &(0x7f00000018c0)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}, 0x44000) socket$kcm(0x10, 0x1, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) socket$kcm(0x23, 0x2, 0x0) 722.037906ms ago: executing program 4 (id=1462): socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, 0x0, 0x0}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x1e}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c034002000187053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x601}, 0x0) 721.726757ms ago: executing program 0 (id=1463): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285", 0x60}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c00"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) 721.210577ms ago: executing program 1 (id=1464): socket$kcm(0x29, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x88841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0xda, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x1}, 0x4002, 0x6, 0x8, 0x0, 0x4000003, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) 540.326942ms ago: executing program 4 (id=1466): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0xfefe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x76}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) socket$kcm(0x2c, 0x3, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x101, 0x0}, 0x8) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x5, 0x0, r4, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0x13, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x93162abd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x1, 0x2, 0x0, 0xe, 0x5, 0x1, 0x10}, @map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x1, 0x8, 0x5, 0x8, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x5, 0x23, &(0x7f00000006c0)=""/35, 0x41100, 0x45, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, r5, r2, 0x0, &(0x7f0000000800)=[r4, r2, r4, r6, r4], 0x0, 0x10, 0x3fea499c}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) (async) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x18}, 0x18) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r1}, 0x8) (async) close(r8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)='GPL\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 503.747034ms ago: executing program 0 (id=1467): perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x80, 0x7fd, 0x8000, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) close(r0) r2 = getpid() perf_event_open(&(0x7f0000002340)={0x1, 0x80, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x3800, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_config_ext={0x8}, 0x20, 0x100, 0x0, 0x4, 0x8000000000000001, 0x6, 0x1, 0x0, 0x8, 0x0, 0x2}, r2, 0xe, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180003000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 458.301225ms ago: executing program 2 (id=1468): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000340)="ee", &(0x7f0000000000)=""/6, 0x2}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)}], 0x1}, 0x20048020) 248.445322ms ago: executing program 2 (id=1469): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000500)="92396bc018f58c9064a3f25a17c0ea7ddc4f22caf32f703abf655226ff03b65957f199f80c2260e99196fd4c031d873424ba159d347f3e949f4a6df2902a49f11fec066e8af286d5d8c52e77a715064f9c8e11008b1f7eaceb86f76a7c8cdeb5de10021096e7def4737f9a500e77e136f2beeb5a43a240f1288e947c9343d49d3661722831129730eb247efefaef64658d8053f969a2483c3ab547", 0x9b}], 0x1}, 0x24000080) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x5, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{0x0}], 0x1}, 0x24004044) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x4, &(0x7f0000000740)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 248.153762ms ago: executing program 4 (id=1470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ccb3f8080d6cc84efb6913588946f4a229a88e4d35fae3d4637bdcaf1c7a1a77f988046bcd14b8951accb126c6e22fafcff0b621f2aee0c8fb8713c8"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r0, 0x0}, 0x20) 177.464194ms ago: executing program 3 (id=1471): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4006041) socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x5, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xf}, 0x50) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$kcm(r0, &(0x7f0000000ac0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)="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", 0xfb}], 0x2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x110}, 0x4040000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x2}, 0x10c040, 0xac5d, 0x0, 0x6, 0xfff, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400180ffff002000119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x8071, 0x3, 0x0, 0x0, 0x913, 0x200, 0x0, 0x0, 0x800000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000962ccf26ff88b2a83933a0000000000000003000000850000001300"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x0, 0x16, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e000081007e2288a8849088a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x844) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000f00)=ANY=[]) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r4, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0x17, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x907, '\x00', 0x0, r3, 0x2, 0x5}, 0x7e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002020642500000000002020207b0200ff00000000bfa100000000000007010000f9ffffffb702010008000000b7030000060000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x4, 0xe2, &(0x7f0000000240)=""/226, 0x41000, 0x21, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0xc, 0xffffff1d, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000bc0)=[0x1, r7, r8, r9], &(0x7f0000000c00)=[{0x4, 0x2, 0xb, 0xa}, {0x4000, 0x1, 0x0, 0x2}, {0x20, 0x2, 0x3}], 0x10, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 159.508775ms ago: executing program 0 (id=1472): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 591.84µs ago: executing program 1 (id=1473): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000006, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x5, 0x0, 0x3, 0x80, 0x1, 0x1}, 0x0, 0x1, r0, 0x0) ioctl$TUNGETVNETLE(r0, 0x8954, &(0x7f0000000040)) 0s ago: executing program 2 (id=1474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r1 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, 0x0, 0x40000001) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb2, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf26682b545a21562}, 0x50) socket$kcm(0x2b, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x8, 0x100, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x20000001}}}, 0x94, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x2842, 0x7, 0x1, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0xffffbffe}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000002c0)={'macvlan0\x00'}) kernel console output (not intermixed with test programs): [ T5206] netlink: 'syz.0.286': attribute type 10 has an invalid length. [ 107.694448][ T5213] netlink: 'syz.3.287': attribute type 10 has an invalid length. [ 107.702562][ T5213] __nla_validate_parse: 3 callbacks suppressed [ 107.702574][ T5213] netlink: 55 bytes leftover after parsing attributes in process `syz.3.287'. [ 107.718342][ T5221] netlink: 16278 bytes leftover after parsing attributes in process `syz.4.290'. [ 107.731030][ T5224] netlink: 14 bytes leftover after parsing attributes in process `syz.1.291'. [ 107.906509][ T5229] netlink: 14 bytes leftover after parsing attributes in process `syz.3.293'. [ 107.940939][ T5229] openvswitch: netlink: Flow key attr not present in new flow. [ 108.020481][ T5232] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.294'. [ 108.378112][ T4282] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 108.460370][ T5243] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.299'. [ 108.528182][ T5243] bridge0: port 3(veth1_to_hsr) entered blocking state [ 108.545742][ T5243] bridge0: port 3(veth1_to_hsr) entered disabled state [ 108.572940][ T5243] device veth1_to_hsr entered promiscuous mode [ 108.600208][ T5243] bridge0: port 3(veth1_to_hsr) entered blocking state [ 108.607241][ T5243] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 108.635370][ T5252] netlink: 'syz.4.303': attribute type 10 has an invalid length. [ 108.659847][ T5252] netlink: 55 bytes leftover after parsing attributes in process `syz.4.303'. [ 108.695151][ T5259] netlink: 14 bytes leftover after parsing attributes in process `syz.1.306'. [ 110.391729][ T4282] Bluetooth: hci1: command 0x2016 tx timeout [ 110.558377][ T5296] netlink: 'syz.2.319': attribute type 10 has an invalid length. [ 110.569030][ T5296] netlink: 55 bytes leftover after parsing attributes in process `syz.2.319'. [ 111.026841][ T5314] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.322'. [ 111.190020][ T5316] bridge0: port 3(veth1_to_hsr) entered blocking state [ 111.210554][ T5316] bridge0: port 3(veth1_to_hsr) entered disabled state [ 111.227976][ T5316] device veth1_to_hsr entered promiscuous mode [ 111.249219][ T5316] bridge0: port 3(veth1_to_hsr) entered blocking state [ 111.256303][ T5316] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 112.735742][ T5344] __nla_validate_parse: 1 callbacks suppressed [ 112.759288][ T5344] netlink: 14 bytes leftover after parsing attributes in process `syz.0.336'. [ 113.115980][ T5338] device syzkaller0 entered promiscuous mode [ 115.403893][ T5379] netlink: 6 bytes leftover after parsing attributes in process `syz.4.347'. [ 115.624455][ T5388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 115.661391][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.352'. [ 115.671438][ T5388] netlink: 33 bytes leftover after parsing attributes in process `syz.3.352'. [ 115.721850][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.352'. [ 115.770401][ T5388] netlink: 33 bytes leftover after parsing attributes in process `syz.3.352'. [ 115.797958][ T5396] FAULT_INJECTION: forcing a failure. [ 115.797958][ T5396] name failslab, interval 1, probability 0, space 0, times 0 [ 115.806789][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.352'. [ 115.820500][ T5396] CPU: 0 PID: 5396 Comm: syz.2.354 Not tainted syzkaller #0 [ 115.826750][ T5388] netlink: 33 bytes leftover after parsing attributes in process `syz.3.352'. [ 115.827804][ T5396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.827826][ T5396] Call Trace: [ 115.827835][ T5396] [ 115.827843][ T5396] dump_stack_lvl+0x188/0x24e [ 115.827874][ T5396] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 115.827900][ T5396] ? show_regs_print_info+0x12/0x12 [ 115.827924][ T5396] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 115.875231][ T5396] ? dump_stack+0x5/0x12 [ 115.879481][ T5396] should_fail_ex+0x399/0x4d0 [ 115.884156][ T5396] should_failslab+0x5/0x20 [ 115.888648][ T5396] slab_pre_alloc_hook+0x59/0x310 [ 115.893673][ T5396] kmem_cache_alloc+0x56/0x2f0 [ 115.898429][ T5396] ? skb_clone+0x1e7/0x370 [ 115.902847][ T5396] skb_clone+0x1e7/0x370 [ 115.907175][ T5396] __netlink_deliver_tap+0x3ed/0x800 [ 115.912470][ T5396] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.917666][ T5396] netlink_deliver_tap+0x19c/0x1b0 [ 115.922777][ T5396] netlink_unicast+0x728/0x8d0 [ 115.927546][ T5396] netlink_sendmsg+0x8ad/0xbd0 [ 115.932313][ T5396] ? netlink_getsockopt+0x550/0x550 [ 115.937514][ T5396] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 115.942793][ T5396] ? security_socket_sendmsg+0x7c/0xa0 [ 115.948260][ T5396] ? netlink_getsockopt+0x550/0x550 [ 115.953724][ T5396] ____sys_sendmsg+0x5be/0x970 [ 115.958493][ T5396] ? __sys_sendmsg_sock+0x30/0x30 [ 115.963523][ T5396] ? __import_iovec+0x315/0x500 [ 115.968395][ T5396] ? import_iovec+0x6f/0xa0 [ 115.972916][ T5396] ___sys_sendmsg+0x2a2/0x360 [ 115.977611][ T5396] ? __sys_sendmsg+0x290/0x290 [ 115.982386][ T5396] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 115.988121][ T5396] __se_sys_sendmsg+0x1bb/0x2a0 [ 115.992976][ T5396] ? __x64_sys_sendmsg+0x80/0x80 [ 115.997917][ T5396] ? lockdep_hardirqs_on+0x94/0x140 [ 116.003120][ T5396] ? __x64_sys_sendmsg+0x4f/0x80 [ 116.008061][ T5396] do_syscall_64+0x4c/0xa0 [ 116.012475][ T5396] ? clear_bhb_loop+0x60/0xb0 [ 116.017147][ T5396] ? clear_bhb_loop+0x60/0xb0 [ 116.021823][ T5396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.027709][ T5396] RIP: 0033:0x7fc20599ce59 [ 116.032114][ T5396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.051739][ T5396] RSP: 002b:00007fc20678e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.060154][ T5396] RAX: ffffffffffffffda RBX: 00007fc205c15fa0 RCX: 00007fc20599ce59 [ 116.068120][ T5396] RDX: 0200000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 116.076085][ T5396] RBP: 00007fc20678e090 R08: 0000000000000000 R09: 0000000000000000 [ 116.084047][ T5396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.092009][ T5396] R13: 00007fc205c16038 R14: 00007fc205c15fa0 R15: 00007fff96eeff38 [ 116.099987][ T5396] [ 116.167782][ T5390] netlink: 14 bytes leftover after parsing attributes in process `syz.1.350'. [ 117.032309][ T5432] FAULT_INJECTION: forcing a failure. [ 117.032309][ T5432] name failslab, interval 1, probability 0, space 0, times 0 [ 117.059445][ T5432] CPU: 1 PID: 5432 Comm: syz.3.367 Not tainted syzkaller #0 [ 117.066805][ T5432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.076862][ T5432] Call Trace: [ 117.080135][ T5432] [ 117.083060][ T5432] dump_stack_lvl+0x188/0x24e [ 117.087749][ T5432] ? show_regs_print_info+0x12/0x12 [ 117.092956][ T5432] ? load_image+0x400/0x400 [ 117.097473][ T5432] ? __might_sleep+0xd0/0xd0 [ 117.102059][ T5432] ? __lock_acquire+0x7d10/0x7d10 [ 117.107086][ T5432] should_fail_ex+0x399/0x4d0 [ 117.111773][ T5432] should_failslab+0x5/0x20 [ 117.116354][ T5432] slab_pre_alloc_hook+0x59/0x310 [ 117.121374][ T5432] ? tomoyo_encode+0x27e/0x540 [ 117.126142][ T5432] __kmem_cache_alloc_node+0x4f/0x260 [ 117.131530][ T5432] ? tomoyo_encode+0x27e/0x540 [ 117.136344][ T5432] __kmalloc+0xa0/0x240 [ 117.140510][ T5432] tomoyo_encode+0x27e/0x540 [ 117.145195][ T5432] tomoyo_realpath_from_path+0x58e/0x5d0 [ 117.150846][ T5432] ? tomoyo_path_number_perm+0x205/0x650 [ 117.156476][ T5432] tomoyo_path_number_perm+0x22f/0x650 [ 117.161932][ T5432] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 117.168521][ T5432] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 117.173979][ T5432] ? ksys_write+0x1c0/0x250 [ 117.178488][ T5432] ? common_file_perm+0x171/0x1c0 [ 117.183617][ T5432] ? __fget_files+0x28/0x4b0 [ 117.188212][ T5432] ? __fget_files+0x28/0x4b0 [ 117.192806][ T5432] security_file_ioctl+0x6c/0xa0 [ 117.197755][ T5432] __se_sys_ioctl+0x48/0x170 [ 117.202343][ T5432] do_syscall_64+0x4c/0xa0 [ 117.206759][ T5432] ? clear_bhb_loop+0x60/0xb0 [ 117.211447][ T5432] ? clear_bhb_loop+0x60/0xb0 [ 117.216135][ T5432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.222115][ T5432] RIP: 0033:0x7f58fdf9ce59 [ 117.226527][ T5432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.246142][ T5432] RSP: 002b:00007f58fedd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.254548][ T5432] RAX: ffffffffffffffda RBX: 00007f58fe215fa0 RCX: 00007f58fdf9ce59 [ 117.262527][ T5432] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000004 [ 117.270581][ T5432] RBP: 00007f58fedd8090 R08: 0000000000000000 R09: 0000000000000000 [ 117.278547][ T5432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.286599][ T5432] R13: 00007f58fe216038 R14: 00007f58fe215fa0 R15: 00007fffa8bbce28 [ 117.294578][ T5432] [ 117.309157][ T5432] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.394946][ T5427] netlink: 'syz.0.362': attribute type 2 has an invalid length. [ 117.953028][ T5447] netlink: 'syz.4.375': attribute type 10 has an invalid length. [ 117.985513][ T5447] __nla_validate_parse: 16 callbacks suppressed [ 117.985545][ T5447] netlink: 55 bytes leftover after parsing attributes in process `syz.4.375'. [ 119.965337][ T5473] netlink: 'syz.0.382': attribute type 2 has an invalid length. [ 120.018773][ T5473] netlink: 164 bytes leftover after parsing attributes in process `syz.0.382'. [ 120.195698][ T5478] netlink: 14 bytes leftover after parsing attributes in process `syz.4.385'. [ 120.412663][ T5484] netlink: 'syz.4.387': attribute type 10 has an invalid length. [ 120.424327][ T5484] netlink: 55 bytes leftover after parsing attributes in process `syz.4.387'. [ 120.438479][ T5484] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.387'. [ 121.097319][ T5505] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.394'. [ 121.725997][ T5508] device aaaaaaaaaaaaaaa entered promiscuous mode [ 121.780013][ T5511] netlink: 14 bytes leftover after parsing attributes in process `syz.1.397'. [ 121.890821][ T5512] device syzkaller0 entered promiscuous mode [ 123.736285][ T5531] netlink: 'syz.4.403': attribute type 2 has an invalid length. [ 123.746531][ T5531] netlink: 164 bytes leftover after parsing attributes in process `syz.4.403'. [ 124.153060][ T5537] device syzkaller0 entered promiscuous mode [ 124.455841][ T5542] IPv6: Can't replace route, no match found [ 124.584318][ T5548] netlink: 14 bytes leftover after parsing attributes in process `syz.2.409'. [ 124.593676][ T5552] IPv6: Can't replace route, no match found [ 126.104674][ T5560] netlink: 10 bytes leftover after parsing attributes in process `syz.2.413'. [ 126.307918][ T5563] netlink: 'syz.1.415': attribute type 10 has an invalid length. [ 126.328737][ T5566] FAULT_INJECTION: forcing a failure. [ 126.328737][ T5566] name failslab, interval 1, probability 0, space 0, times 0 [ 126.338072][ T5563] netlink: 55 bytes leftover after parsing attributes in process `syz.1.415'. [ 126.376943][ T5566] CPU: 1 PID: 5566 Comm: syz.4.416 Not tainted syzkaller #0 [ 126.384289][ T5566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.394363][ T5566] Call Trace: [ 126.397651][ T5566] [ 126.400586][ T5566] dump_stack_lvl+0x188/0x24e [ 126.405305][ T5566] ? show_regs_print_info+0x12/0x12 [ 126.410522][ T5566] ? load_image+0x400/0x400 [ 126.415043][ T5566] ? __might_sleep+0xd0/0xd0 [ 126.419640][ T5566] ? __lock_acquire+0x7d10/0x7d10 [ 126.424683][ T5566] ? verify_lock_unused+0x140/0x140 [ 126.429898][ T5566] should_fail_ex+0x399/0x4d0 [ 126.434586][ T5566] should_failslab+0x5/0x20 [ 126.439095][ T5566] slab_pre_alloc_hook+0x59/0x310 [ 126.444124][ T5566] ? sock_kmalloc+0x92/0xf0 [ 126.448643][ T5566] __kmem_cache_alloc_node+0x4f/0x260 [ 126.454027][ T5566] ? sock_kmalloc+0x92/0xf0 [ 126.458534][ T5566] __kmalloc+0xa0/0x240 [ 126.462704][ T5566] sock_kmalloc+0x92/0xf0 [ 126.467042][ T5566] ____sys_sendmsg+0x1bb/0x970 [ 126.471829][ T5566] ? __might_fault+0xa6/0x120 [ 126.476524][ T5566] ? __sys_sendmsg_sock+0x30/0x30 [ 126.481563][ T5566] ? __import_iovec+0x315/0x500 [ 126.486434][ T5566] ? import_iovec+0x6f/0xa0 [ 126.490951][ T5566] ___sys_sendmsg+0x2a2/0x360 [ 126.495648][ T5566] ? __sys_sendmsg+0x290/0x290 [ 126.500437][ T5566] ? __lock_acquire+0x7d10/0x7d10 [ 126.505490][ T5566] __se_sys_sendmsg+0x1bb/0x2a0 [ 126.510356][ T5566] ? __x64_sys_sendmsg+0x80/0x80 [ 126.515332][ T5566] ? lockdep_hardirqs_on+0x94/0x140 [ 126.520618][ T5566] do_syscall_64+0x4c/0xa0 [ 126.525181][ T5566] ? clear_bhb_loop+0x60/0xb0 [ 126.529869][ T5566] ? clear_bhb_loop+0x60/0xb0 [ 126.534576][ T5566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.540481][ T5566] RIP: 0033:0x7ff9fbb9ce59 [ 126.544911][ T5566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.564620][ T5566] RSP: 002b:00007ff9fcab7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.573041][ T5566] RAX: ffffffffffffffda RBX: 00007ff9fbe15fa0 RCX: 00007ff9fbb9ce59 [ 126.581019][ T5566] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 126.589086][ T5566] RBP: 00007ff9fcab7090 R08: 0000000000000000 R09: 0000000000000000 [ 126.597060][ T5566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.605032][ T5566] R13: 00007ff9fbe16038 R14: 00007ff9fbe15fa0 R15: 00007ffcfcdbaef8 [ 126.613110][ T5566] [ 126.772620][ T5578] netlink: 'syz.2.418': attribute type 2 has an invalid length. [ 126.789578][ T5578] netlink: 164 bytes leftover after parsing attributes in process `syz.2.418'. [ 126.811575][ T5577] netlink: 16278 bytes leftover after parsing attributes in process `syz.4.419'. [ 127.086863][ T5581] netlink: 14 bytes leftover after parsing attributes in process `syz.4.421'. [ 127.121043][ T5584] netlink: 'syz.1.423': attribute type 29 has an invalid length. [ 127.139964][ T5584] netlink: 'syz.1.423': attribute type 29 has an invalid length. [ 127.158269][ T5584] netlink: 'syz.1.423': attribute type 29 has an invalid length. [ 127.185004][ T5584] netlink: 'syz.1.423': attribute type 29 has an invalid length. [ 127.193730][ T5584] netlink: 'syz.1.423': attribute type 29 has an invalid length. [ 128.050553][ T5591] IPv6: Can't replace route, no match found [ 128.130273][ T5603] netlink: 'syz.0.430': attribute type 10 has an invalid length. [ 128.140456][ T5603] netlink: 55 bytes leftover after parsing attributes in process `syz.0.430'. [ 128.308218][ T5596] device syzkaller0 entered promiscuous mode [ 128.321086][ T5605] netlink: 16278 bytes leftover after parsing attributes in process `syz.3.431'. [ 131.035555][ T5620] netlink: 14 bytes leftover after parsing attributes in process `syz.3.436'. [ 131.048242][ T5624] netlink: 'syz.1.437': attribute type 2 has an invalid length. [ 131.081918][ T5624] netlink: 164 bytes leftover after parsing attributes in process `syz.1.437'. [ 131.107266][ T5643] IPv6: Can't replace route, no match found [ 131.225365][ T5647] netlink: 'syz.4.444': attribute type 10 has an invalid length. [ 131.261632][ T5647] netlink: 55 bytes leftover after parsing attributes in process `syz.4.444'. [ 131.505992][ T5659] netlink: 'syz.3.449': attribute type 29 has an invalid length. [ 132.321255][ T5659] netlink: 'syz.3.449': attribute type 29 has an invalid length. [ 132.355876][ T5666] IPv6: Can't replace route, no match found [ 132.374775][ T5674] netlink: 'syz.0.453': attribute type 21 has an invalid length. [ 132.399468][ T5674] netlink: 'syz.0.453': attribute type 1 has an invalid length. [ 132.431654][ T5674] netlink: 144 bytes leftover after parsing attributes in process `syz.0.453'. [ 132.478025][ T5682] netlink: 14 bytes leftover after parsing attributes in process `syz.3.455'. [ 132.633698][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.640037][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.189788][ T5693] IPv6: Can't replace route, no match found [ 133.219260][ T5694] netlink: 'syz.0.457': attribute type 2 has an invalid length. [ 133.231742][ T5694] netlink: 164 bytes leftover after parsing attributes in process `syz.0.457'. [ 133.785641][ T5710] netlink: 'syz.1.463': attribute type 28 has an invalid length. [ 133.811817][ T5708] netlink: 'syz.4.461': attribute type 10 has an invalid length. [ 133.850391][ T5708] netlink: 55 bytes leftover after parsing attributes in process `syz.4.461'. [ 133.997182][ T5716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 134.112482][ T5716] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.465'. [ 134.129313][ T5720] netlink: 14 bytes leftover after parsing attributes in process `syz.1.466'. [ 134.707889][ T5735] netlink: 'syz.3.472': attribute type 2 has an invalid length. [ 135.039152][ T5742] FAULT_INJECTION: forcing a failure. [ 135.039152][ T5742] name failslab, interval 1, probability 0, space 0, times 0 [ 135.052317][ T5742] CPU: 1 PID: 5742 Comm: syz.1.476 Not tainted syzkaller #0 [ 135.059641][ T5742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.069715][ T5742] Call Trace: [ 135.073011][ T5742] [ 135.075957][ T5742] dump_stack_lvl+0x188/0x24e [ 135.080665][ T5742] ? show_regs_print_info+0x12/0x12 [ 135.085916][ T5742] ? load_image+0x400/0x400 [ 135.090444][ T5742] ? perf_trace_buf_alloc+0x300/0x300 [ 135.095829][ T5742] ? mark_lock+0x94/0x320 [ 135.100189][ T5742] should_fail_ex+0x399/0x4d0 [ 135.104891][ T5742] should_failslab+0x5/0x20 [ 135.109408][ T5742] slab_pre_alloc_hook+0x59/0x310 [ 135.114460][ T5742] kmem_cache_alloc_node+0x5a/0x320 [ 135.119679][ T5742] ? __alloc_skb+0xfc/0x7e0 [ 135.124236][ T5742] __alloc_skb+0xfc/0x7e0 [ 135.128594][ T5742] tipc_msg_create+0x4b/0x4d0 [ 135.133292][ T5742] ? tipc_own_addr+0x45/0x2a0 [ 135.138016][ T5742] tipc_group_create_event+0x11f/0x980 [ 135.143592][ T5742] tipc_sk_proto_rcv+0x68d/0x17d0 [ 135.148641][ T5742] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 135.154817][ T5742] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 135.160995][ T5742] ? lockdep_hardirqs_on+0x94/0x140 [ 135.166216][ T5742] ? trace_tipc_sk_dump+0x280/0x280 [ 135.171439][ T5742] ? tipc_sk_filtering+0x138/0x510 [ 135.176575][ T5742] tipc_sk_filter_rcv+0x3057/0x3300 [ 135.181811][ T5742] ? verify_lock_unused+0x140/0x140 [ 135.187038][ T5742] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 135.192879][ T5742] ? mark_lock+0x94/0x320 [ 135.197232][ T5742] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 135.203231][ T5742] ? tipc_sk_publish+0x450/0x450 [ 135.208201][ T5742] ? __local_bh_enable_ip+0x136/0x1c0 [ 135.213609][ T5742] ? perf_swevent_event+0x1c6/0x570 [ 135.218848][ T5742] tipc_sk_rcv+0x8ce/0x2be0 [ 135.223394][ T5742] ? tracing_gen_ctx_irq_test+0xc9/0x150 [ 135.229062][ T5742] ? perf_swevent_event+0x1c6/0x570 [ 135.234316][ T5742] ? __skb_queue_purge+0x170/0x170 [ 135.239449][ T5742] ? memset+0x1e/0x40 [ 135.243447][ T5742] ? lockdep_init_map_type+0x98/0x8d0 [ 135.248859][ T5742] ? net_generic+0x1e/0x240 [ 135.253421][ T5742] ? __raw_spin_lock_init+0x41/0x100 [ 135.258724][ T5742] tipc_node_xmit+0x212/0xf70 [ 135.263417][ T5742] ? kasan_set_track+0x60/0x70 [ 135.268202][ T5742] ? __kmem_cache_free+0xb6/0x1f0 [ 135.273241][ T5742] ? tipc_group_delete+0x3bd/0x4c0 [ 135.278372][ T5742] ? tipc_sk_leave+0x142/0x4d0 [ 135.283505][ T5742] ? tipc_release+0x34d/0x2270 [ 135.288286][ T5742] ? tipc_node_get_linkname+0x190/0x190 [ 135.293885][ T5742] ? exit_to_user_mode_loop+0xe6/0x110 [ 135.299360][ T5742] ? exit_to_user_mode_prepare+0xee/0x180 [ 135.305143][ T5742] ? syscall_exit_to_user_mode+0x16/0x40 [ 135.310800][ T5742] ? do_syscall_64+0x58/0xa0 [ 135.315410][ T5742] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.321587][ T5742] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 135.327343][ T5742] ? mark_lock+0x94/0x320 [ 135.331707][ T5742] tipc_node_distr_xmit+0x2d2/0x3f0 [ 135.336937][ T5742] ? tipc_node_xmit_skb+0x190/0x190 [ 135.342165][ T5742] ? tipc_group_delete+0x3bd/0x4c0 [ 135.347297][ T5742] ? __kmem_cache_free+0xb6/0x1f0 [ 135.352343][ T5742] tipc_group_delete+0x3f5/0x4c0 [ 135.357319][ T5742] ? tipc_group_update_member+0x3c0/0x3c0 [ 135.363081][ T5742] ? tipc_group_self+0x22/0x1c0 [ 135.367971][ T5742] tipc_sk_leave+0x142/0x4d0 [ 135.372598][ T5742] ? __tipc_shutdown+0x1530/0x1530 [ 135.377732][ T5742] ? _local_bh_enable+0xa0/0xa0 [ 135.382608][ T5742] tipc_release+0x34d/0x2270 [ 135.387240][ T5742] ? tipc_sock_destruct+0x170/0x170 [ 135.392463][ T5742] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 135.398654][ T5742] sock_close+0xd5/0x240 [ 135.402917][ T5742] ? sock_mmap+0x90/0x90 [ 135.407220][ T5742] __fput+0x22c/0x920 [ 135.411232][ T5742] task_work_run+0x1d0/0x260 [ 135.415847][ T5742] ? task_work_cancel+0x220/0x220 [ 135.420898][ T5742] ? exit_to_user_mode_loop+0x3b/0x110 [ 135.426385][ T5742] exit_to_user_mode_loop+0xe6/0x110 [ 135.431694][ T5742] exit_to_user_mode_prepare+0xee/0x180 [ 135.437261][ T5742] syscall_exit_to_user_mode+0x16/0x40 [ 135.442741][ T5742] do_syscall_64+0x58/0xa0 [ 135.447183][ T5742] ? clear_bhb_loop+0x60/0xb0 [ 135.451893][ T5742] ? clear_bhb_loop+0x60/0xb0 [ 135.456587][ T5742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.462501][ T5742] RIP: 0033:0x7fd96059ce59 [ 135.466928][ T5742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.486543][ T5742] RSP: 002b:00007fd96140f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 135.494957][ T5742] RAX: 0000000000000000 RBX: 00007fd960815fa0 RCX: 00007fd96059ce59 [ 135.502923][ T5742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 135.510886][ T5742] RBP: 00007fd96140f090 R08: 0000000000000000 R09: 0000000000000000 [ 135.518939][ T5742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.526930][ T5742] R13: 00007fd960816038 R14: 00007fd960815fa0 R15: 00007ffe3647e688 [ 135.534905][ T5742] [ 135.576157][ T5736] IPv6: Can't replace route, no match found [ 136.981433][ T5791] validate_nla: 1 callbacks suppressed [ 136.981453][ T5791] netlink: 'syz.1.487': attribute type 2 has an invalid length. [ 137.057399][ T5791] __nla_validate_parse: 5 callbacks suppressed [ 137.057415][ T5791] netlink: 164 bytes leftover after parsing attributes in process `syz.1.487'. [ 137.837300][ T5799] netlink: 'syz.2.490': attribute type 10 has an invalid length. [ 137.857870][ T5799] netlink: 55 bytes leftover after parsing attributes in process `syz.2.490'. [ 137.885321][ T5800] IPv6: Can't replace route, no match found [ 137.911367][ T5806] netlink: 14 bytes leftover after parsing attributes in process `syz.0.491'. [ 138.854174][ T5822] netlink: 22 bytes leftover after parsing attributes in process `syz.3.497'. [ 139.331554][ T5835] FAULT_INJECTION: forcing a failure. [ 139.331554][ T5835] name failslab, interval 1, probability 0, space 0, times 0 [ 139.344477][ T5835] CPU: 1 PID: 5835 Comm: syz.2.502 Not tainted syzkaller #0 [ 139.351788][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.361858][ T5835] Call Trace: [ 139.365145][ T5835] [ 139.368077][ T5835] dump_stack_lvl+0x188/0x24e [ 139.372767][ T5835] ? show_regs_print_info+0x12/0x12 [ 139.377969][ T5835] ? load_image+0x400/0x400 [ 139.382481][ T5835] ? rcu_is_watching+0x11/0xa0 [ 139.387257][ T5835] should_fail_ex+0x399/0x4d0 [ 139.391934][ T5835] should_failslab+0x5/0x20 [ 139.396429][ T5835] slab_pre_alloc_hook+0x59/0x310 [ 139.401449][ T5835] kmem_cache_alloc_node+0x5a/0x320 [ 139.406645][ T5835] ? __alloc_skb+0xfc/0x7e0 [ 139.411146][ T5835] __alloc_skb+0xfc/0x7e0 [ 139.415476][ T5835] arp_create+0x12d/0x950 [ 139.419802][ T5835] ? arp_solicit+0x128/0xe40 [ 139.424392][ T5835] arp_send_dst+0xab/0x2a0 [ 139.428815][ T5835] arp_solicit+0xc01/0xe40 [ 139.433230][ T5835] ? arp_solicit+0x128/0xe40 [ 139.437818][ T5835] ? arp_ifdown+0x20/0x20 [ 139.442140][ T5835] ? __lock_acquire+0x7d10/0x7d10 [ 139.447158][ T5835] ? __skb_clone+0x480/0x790 [ 139.451750][ T5835] ? arp_ifdown+0x20/0x20 [ 139.456073][ T5835] __neigh_event_send+0xf22/0x15f0 [ 139.461186][ T5835] neigh_resolve_output+0x197/0x730 [ 139.466384][ T5835] ? ip_finish_output2+0x11b0/0x11b0 [ 139.471669][ T5835] ? ip_finish_output2+0x3ff/0x11b0 [ 139.476949][ T5835] ip_finish_output2+0xd05/0x11b0 [ 139.481967][ T5835] ? ip_finish_output2+0x3ff/0x11b0 [ 139.487158][ T5835] ? nf_hook+0x9e/0x390 [ 139.491305][ T5835] ? __ip_local_out+0x5d0/0x5d0 [ 139.496147][ T5835] ? nf_hook+0x9e/0x390 [ 139.500299][ T5835] ? ip_fragment+0x210/0x210 [ 139.504885][ T5835] ? ip_mc_finish_output+0x250/0x250 [ 139.510169][ T5835] ? ip_skb_dst_mtu+0x587/0x9c0 [ 139.515016][ T5835] ? ip_finish_output+0x3eb/0x4c0 [ 139.520037][ T5835] ip_output+0x2df/0x410 [ 139.524305][ T5835] ? ip_output+0x5c/0x410 [ 139.528632][ T5835] ip_send_skb+0x129/0x1c0 [ 139.533042][ T5835] udp_send_skb+0xa88/0x1580 [ 139.537635][ T5835] udp_sendmsg+0x1b33/0x23b0 [ 139.542223][ T5835] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 139.547066][ T5835] ? udp_cmsg_send+0x350/0x350 [ 139.551823][ T5835] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 139.557812][ T5835] ? lock_chain_count+0x20/0x20 [ 139.562683][ T5835] ? __local_bh_enable_ip+0x136/0x1c0 [ 139.568053][ T5835] ? _local_bh_enable+0xa0/0xa0 [ 139.572902][ T5835] ? inet_sendmsg+0x147/0x2f0 [ 139.577578][ T5835] ? inet_sendmsg+0x147/0x2f0 [ 139.582250][ T5835] ? inet_send_prepare+0x260/0x260 [ 139.587385][ T5835] ____sys_sendmsg+0x5be/0x970 [ 139.592156][ T5835] ? __sys_sendmsg_sock+0x30/0x30 [ 139.597176][ T5835] ? __import_iovec+0x315/0x500 [ 139.602026][ T5835] ? import_iovec+0x6f/0xa0 [ 139.606521][ T5835] ___sys_sendmsg+0x2a2/0x360 [ 139.611199][ T5835] ? __sys_sendmsg+0x290/0x290 [ 139.615972][ T5835] ? __lock_acquire+0x7d10/0x7d10 [ 139.621021][ T5835] __se_sys_sendmsg+0x1bb/0x2a0 [ 139.625869][ T5835] ? __x64_sys_sendmsg+0x80/0x80 [ 139.630814][ T5835] ? lockdep_hardirqs_on+0x94/0x140 [ 139.636005][ T5835] do_syscall_64+0x4c/0xa0 [ 139.640415][ T5835] ? clear_bhb_loop+0x60/0xb0 [ 139.645088][ T5835] ? clear_bhb_loop+0x60/0xb0 [ 139.649757][ T5835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.655650][ T5835] RIP: 0033:0x7fc20599ce59 [ 139.660054][ T5835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.679649][ T5835] RSP: 002b:00007fc20678e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.688060][ T5835] RAX: ffffffffffffffda RBX: 00007fc205c15fa0 RCX: 00007fc20599ce59 [ 139.696021][ T5835] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000005 [ 139.703984][ T5835] RBP: 00007fc20678e090 R08: 0000000000000000 R09: 0000000000000000 [ 139.711952][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.719910][ T5835] R13: 00007fc205c16038 R14: 00007fc205c15fa0 R15: 00007fff96eeff38 [ 139.727882][ T5835] [ 139.938471][ T5836] netlink: 130704 bytes leftover after parsing attributes in process `syz.3.500'. [ 139.953129][ T5836] netlink: zone id is out of range [ 139.977478][ T5842] netlink: 14 bytes leftover after parsing attributes in process `syz.0.504'. [ 139.994801][ T5843] netlink: 'syz.1.503': attribute type 2 has an invalid length. [ 140.014963][ T5843] netlink: 164 bytes leftover after parsing attributes in process `syz.1.503'. [ 140.072413][ T5836] netlink: zone id is out of range [ 140.093543][ T5836] netlink: zone id is out of range [ 140.115522][ T5836] netlink: zone id is out of range [ 140.121359][ T5836] netlink: zone id is out of range [ 140.133236][ T5836] netlink: zone id is out of range [ 140.138551][ T5836] netlink: zone id is out of range [ 140.150030][ T5836] netlink: zone id is out of range [ 140.158307][ T5836] netlink: zone id is out of range [ 140.167499][ T5836] netlink: zone id is out of range [ 140.206629][ T5847] netlink: 'syz.0.505': attribute type 10 has an invalid length. [ 140.218524][ T5847] netlink: 55 bytes leftover after parsing attributes in process `syz.0.505'. [ 141.370935][ T5861] netlink: 10 bytes leftover after parsing attributes in process `syz.0.510'. [ 141.717486][ T5871] netlink: 14 bytes leftover after parsing attributes in process `syz.2.515'. [ 142.000181][ T5884] netlink: 'syz.0.520': attribute type 10 has an invalid length. [ 142.176854][ T5891] netlink: 'syz.3.521': attribute type 2 has an invalid length. [ 142.177526][ T5892] FAULT_INJECTION: forcing a failure. [ 142.177526][ T5892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.219418][ T5891] device 0 entered promiscuous mode [ 142.243004][ T5892] CPU: 1 PID: 5892 Comm: syz.0.522 Not tainted syzkaller #0 [ 142.250336][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.260398][ T5892] Call Trace: [ 142.263683][ T5892] [ 142.266609][ T5892] dump_stack_lvl+0x188/0x24e [ 142.271291][ T5892] ? show_regs_print_info+0x12/0x12 [ 142.276487][ T5892] ? load_image+0x400/0x400 [ 142.281020][ T5892] ? __lock_acquire+0x7d10/0x7d10 [ 142.286044][ T5892] ? snprintf+0xe5/0x140 [ 142.290289][ T5892] should_fail_ex+0x399/0x4d0 [ 142.294966][ T5892] _copy_to_user+0x2c/0x130 [ 142.299468][ T5892] simple_read_from_buffer+0xe3/0x150 [ 142.304838][ T5892] proc_fail_nth_read+0x1a6/0x220 [ 142.309859][ T5892] ? proc_fault_inject_write+0x310/0x310 [ 142.315488][ T5892] ? fsnotify_perm+0x248/0x550 [ 142.320257][ T5892] ? proc_fault_inject_write+0x310/0x310 [ 142.325882][ T5892] vfs_read+0x2de/0xa00 [ 142.330049][ T5892] ? kernel_read+0x1e0/0x1e0 [ 142.334637][ T5892] ? __fget_files+0x28/0x4b0 [ 142.339219][ T5892] ? __fget_files+0x28/0x4b0 [ 142.343805][ T5892] ? __fget_files+0x43d/0x4b0 [ 142.348485][ T5892] ? __fdget_pos+0x2ae/0x360 [ 142.353072][ T5892] ? ksys_read+0x71/0x250 [ 142.357398][ T5892] ksys_read+0x14c/0x250 [ 142.361640][ T5892] ? vfs_write+0xa30/0xa30 [ 142.366067][ T5892] ? lockdep_hardirqs_on+0x94/0x140 [ 142.371258][ T5892] do_syscall_64+0x4c/0xa0 [ 142.375669][ T5892] ? clear_bhb_loop+0x60/0xb0 [ 142.380337][ T5892] ? clear_bhb_loop+0x60/0xb0 [ 142.385010][ T5892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.390897][ T5892] RIP: 0033:0x7fa31875d68e [ 142.395306][ T5892] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.415005][ T5892] RSP: 002b:00007fa319717fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.423478][ T5892] RAX: ffffffffffffffda RBX: 00007fa3197186c0 RCX: 00007fa31875d68e [ 142.431461][ T5892] RDX: 000000000000000f RSI: 00007fa3197180a0 RDI: 0000000000000005 [ 142.439432][ T5892] RBP: 00007fa319718090 R08: 0000000000000000 R09: 0000000000000000 [ 142.447395][ T5892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.455358][ T5892] R13: 00007fa318a16038 R14: 00007fa318a15fa0 R15: 00007ffd1fb82ed8 [ 142.463335][ T5892] [ 142.709319][ T5907] __nla_validate_parse: 2 callbacks suppressed [ 142.709336][ T5907] netlink: 14 bytes leftover after parsing attributes in process `syz.0.527'. [ 143.277339][ T5925] netlink: 'syz.3.533': attribute type 10 has an invalid length. [ 143.298821][ T5925] netlink: 55 bytes leftover after parsing attributes in process `syz.3.533'. [ 143.322356][ T5927] netlink: 16278 bytes leftover after parsing attributes in process `syz.4.535'. [ 143.647777][ T5941] netlink: 14 bytes leftover after parsing attributes in process `syz.0.540'. [ 144.046562][ T5948] FAULT_INJECTION: forcing a failure. [ 144.046562][ T5948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.067502][ T5948] CPU: 0 PID: 5948 Comm: syz.3.542 Not tainted syzkaller #0 [ 144.074818][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 144.084906][ T5948] Call Trace: [ 144.088199][ T5948] [ 144.091141][ T5948] dump_stack_lvl+0x188/0x24e [ 144.095851][ T5948] ? show_regs_print_info+0x12/0x12 [ 144.101092][ T5948] ? load_image+0x400/0x400 [ 144.105703][ T5948] ? __lock_acquire+0x7d10/0x7d10 [ 144.110753][ T5948] should_fail_ex+0x399/0x4d0 [ 144.115456][ T5948] _copy_from_user+0x2c/0x170 [ 144.120245][ T5948] generic_map_update_batch+0x4a1/0x810 [ 144.125819][ T5948] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 144.132009][ T5948] ? rcu_read_unlock+0xa0/0xa0 [ 144.136965][ T5948] ? __fdget+0x17c/0x200 [ 144.141238][ T5948] ? rcu_read_unlock+0xa0/0xa0 [ 144.146026][ T5948] bpf_map_do_batch+0x466/0x600 [ 144.150926][ T5948] __sys_bpf+0x6f7/0x780 [ 144.155206][ T5948] ? bpf_link_show_fdinfo+0x380/0x380 [ 144.160614][ T5948] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 144.166795][ T5948] __x64_sys_bpf+0x78/0x90 [ 144.171232][ T5948] do_syscall_64+0x4c/0xa0 [ 144.175669][ T5948] ? clear_bhb_loop+0x60/0xb0 [ 144.180346][ T5948] ? clear_bhb_loop+0x60/0xb0 [ 144.185029][ T5948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.190925][ T5948] RIP: 0033:0x7f58fdf9ce59 [ 144.195331][ T5948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.215021][ T5948] RSP: 002b:00007f58fedd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.223433][ T5948] RAX: ffffffffffffffda RBX: 00007f58fe215fa0 RCX: 00007f58fdf9ce59 [ 144.231392][ T5948] RDX: 0000000000000038 RSI: 0000200000000900 RDI: 000000000000001a [ 144.239351][ T5948] RBP: 00007f58fedd8090 R08: 0000000000000000 R09: 0000000000000000 [ 144.247324][ T5948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.255281][ T5948] R13: 00007f58fe216038 R14: 00007f58fe215fa0 R15: 00007fffa8bbce28 [ 144.263271][ T5948] [ 144.320048][ T5957] netlink: 'syz.0.547': attribute type 10 has an invalid length. [ 144.351977][ T5957] netlink: 55 bytes leftover after parsing attributes in process `syz.0.547'. [ 144.425590][ T5962] netlink: 16278 bytes leftover after parsing attributes in process `syz.1.548'. [ 144.741028][ T5980] netlink: 'syz.1.552': attribute type 2 has an invalid length. [ 144.759192][ T5980] netlink: 164 bytes leftover after parsing attributes in process `syz.1.552'. [ 144.777799][ T5984] netlink: 14 bytes leftover after parsing attributes in process `syz.0.555'. [ 145.179337][ T6004] netlink: 'syz.4.561': attribute type 10 has an invalid length. [ 145.216314][ T6004] netlink: 55 bytes leftover after parsing attributes in process `syz.4.561'. [ 145.264780][ T6010] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.563'. [ 145.779690][ T6035] FAULT_INJECTION: forcing a failure. [ 145.779690][ T6035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.901617][ T6035] CPU: 1 PID: 6035 Comm: syz.3.573 Not tainted syzkaller #0 [ 145.908963][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.919016][ T6035] Call Trace: [ 145.922291][ T6035] [ 145.925214][ T6035] dump_stack_lvl+0x188/0x24e [ 145.929895][ T6035] ? show_regs_print_info+0x12/0x12 [ 145.935090][ T6035] ? load_image+0x400/0x400 [ 145.939593][ T6035] ? __lock_acquire+0x7d10/0x7d10 [ 145.944615][ T6035] ? __fget_files+0x28/0x4b0 [ 145.949208][ T6035] should_fail_ex+0x399/0x4d0 [ 145.953887][ T6035] _copy_from_user+0x2c/0x170 [ 145.958592][ T6035] generic_map_update_batch+0x4f3/0x810 [ 145.964141][ T6035] ? rcu_read_unlock+0xa0/0xa0 [ 145.968900][ T6035] ? __fdget+0x17c/0x200 [ 145.973140][ T6035] ? rcu_read_unlock+0xa0/0xa0 [ 145.977897][ T6035] bpf_map_do_batch+0x466/0x600 [ 145.982747][ T6035] __sys_bpf+0x6f7/0x780 [ 145.987026][ T6035] ? bpf_link_show_fdinfo+0x380/0x380 [ 145.992403][ T6035] ? lock_chain_count+0x20/0x20 [ 145.997270][ T6035] __x64_sys_bpf+0x78/0x90 [ 146.001690][ T6035] do_syscall_64+0x4c/0xa0 [ 146.006104][ T6035] ? clear_bhb_loop+0x60/0xb0 [ 146.010775][ T6035] ? clear_bhb_loop+0x60/0xb0 [ 146.015448][ T6035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.021335][ T6035] RIP: 0033:0x7f58fdf9ce59 [ 146.025747][ T6035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.045427][ T6035] RSP: 002b:00007f58fedd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.053838][ T6035] RAX: ffffffffffffffda RBX: 00007f58fe215fa0 RCX: 00007f58fdf9ce59 [ 146.061799][ T6035] RDX: 0000000000000038 RSI: 00002000000002c0 RDI: 000000000000001a [ 146.069761][ T6035] RBP: 00007f58fedd8090 R08: 0000000000000000 R09: 0000000000000000 [ 146.077722][ T6035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.085684][ T6035] R13: 00007f58fe216038 R14: 00007f58fe215fa0 R15: 00007fffa8bbce28 [ 146.093756][ T6035] [ 146.521530][ T6051] netlink: 'syz.4.576': attribute type 10 has an invalid length. [ 146.911079][ T6075] netlink: 'syz.2.580': attribute type 2 has an invalid length. [ 147.868729][ T6101] netlink: 'syz.3.592': attribute type 10 has an invalid length. [ 147.890404][ T6101] __nla_validate_parse: 5 callbacks suppressed [ 147.890437][ T6101] netlink: 55 bytes leftover after parsing attributes in process `syz.3.592'. [ 147.915701][ T6102] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.591'. [ 147.933713][ T6102] net_ratelimit: 81 callbacks suppressed [ 147.933727][ T6102] netlink: zone id is out of range [ 147.957473][ T6102] netlink: zone id is out of range [ 147.983344][ T6102] netlink: zone id is out of range [ 148.004118][ T6107] netlink: 14 bytes leftover after parsing attributes in process `syz.4.594'. [ 148.019838][ T6101] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.592'. [ 148.071734][ T6102] netlink: zone id is out of range [ 148.078702][ T6109] netlink: 188 bytes leftover after parsing attributes in process `syz.1.596'. [ 148.091966][ T6102] netlink: zone id is out of range [ 148.131833][ T6102] netlink: zone id is out of range [ 148.172179][ T6102] netlink: zone id is out of range [ 148.211848][ T6102] netlink: zone id is out of range [ 148.257285][ T6102] netlink: zone id is out of range [ 148.309544][ T6102] netlink: zone id is out of range [ 148.802447][ T6130] netlink: 'syz.1.601': attribute type 2 has an invalid length. [ 148.825288][ T6130] netlink: 164 bytes leftover after parsing attributes in process `syz.1.601'. [ 149.235760][ T6143] netlink: 14 bytes leftover after parsing attributes in process `syz.0.607'. [ 149.449215][ T6146] netlink: 'syz.4.608': attribute type 10 has an invalid length. [ 149.482758][ T6146] netlink: 55 bytes leftover after parsing attributes in process `syz.4.608'. [ 149.537146][ T6149] netlink: 'syz.3.609': attribute type 21 has an invalid length. [ 149.557178][ T6149] netlink: 168 bytes leftover after parsing attributes in process `syz.3.609'. [ 149.650253][ T6151] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.608'. [ 150.698942][ T6184] netlink: 'syz.0.622': attribute type 29 has an invalid length. [ 150.761054][ T6184] netlink: 'syz.0.622': attribute type 29 has an invalid length. [ 150.769933][ T6190] netlink: 'syz.0.622': attribute type 29 has an invalid length. [ 150.795907][ T6191] netlink: 'syz.1.624': attribute type 10 has an invalid length. [ 150.814098][ T6192] netlink: 'syz.3.623': attribute type 2 has an invalid length. [ 151.048215][ T6199] FAULT_INJECTION: forcing a failure. [ 151.048215][ T6199] name failslab, interval 1, probability 0, space 0, times 0 [ 151.069248][ T6199] CPU: 0 PID: 6199 Comm: syz.2.627 Not tainted syzkaller #0 [ 151.076588][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 151.086663][ T6199] Call Trace: [ 151.089994][ T6199] [ 151.092945][ T6199] dump_stack_lvl+0x188/0x24e [ 151.097675][ T6199] ? show_regs_print_info+0x12/0x12 [ 151.102901][ T6199] ? load_image+0x400/0x400 [ 151.107444][ T6199] should_fail_ex+0x399/0x4d0 [ 151.112242][ T6199] should_failslab+0x5/0x20 [ 151.116765][ T6199] slab_pre_alloc_hook+0x59/0x310 [ 151.121822][ T6199] ? ref_tracker_alloc+0x14e/0x4b0 [ 151.126966][ T6199] __kmem_cache_alloc_node+0x4f/0x260 [ 151.132367][ T6199] ? ref_tracker_alloc+0x14e/0x4b0 [ 151.137509][ T6199] kmalloc_trace+0x26/0xe0 [ 151.141958][ T6199] ref_tracker_alloc+0x14e/0x4b0 [ 151.146920][ T6199] ? ref_tracker_dir_print+0x150/0x150 [ 151.152405][ T6199] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 151.158341][ T6199] ? _raw_spin_unlock+0x40/0x40 [ 151.163211][ T6199] ? __debug_object_init+0xec/0x450 [ 151.168434][ T6199] ? neigh_release+0x80/0x80 [ 151.173047][ T6199] ? init_timer_key+0x178/0x320 [ 151.177913][ T6199] ? ___neigh_create+0xbee/0x24c0 [ 151.182966][ T6199] ___neigh_create+0xc96/0x24c0 [ 151.187877][ T6199] ip_neigh_gw4+0x356/0x4d0 [ 151.192418][ T6199] ? ip_finish_output2+0x11b0/0x11b0 [ 151.197724][ T6199] ? ip_mc_finish_output+0x250/0x250 [ 151.203035][ T6199] ip_finish_output2+0xefb/0x11b0 [ 151.208084][ T6199] ? ip_finish_output2+0x3ff/0x11b0 [ 151.213301][ T6199] ? ip_mc_finish_output+0x250/0x250 [ 151.218611][ T6199] ? trace_netif_rx_exit+0x9b/0x230 [ 151.223834][ T6199] ? ip_fragment+0x210/0x210 [ 151.228441][ T6199] ? dev_loopback_xmit+0x2ec/0x430 [ 151.233753][ T6199] ? ip_skb_dst_mtu+0x587/0x9c0 [ 151.238638][ T6199] ? ip_finish_output+0x3eb/0x4c0 [ 151.244482][ T6199] ip_send_skb+0x129/0x1c0 [ 151.248920][ T6199] udp_send_skb+0xa88/0x1580 [ 151.253634][ T6199] udp_sendmsg+0x73f/0x23b0 [ 151.258171][ T6199] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 151.263041][ T6199] ? udp_cmsg_send+0x350/0x350 [ 151.267826][ T6199] ? verify_lock_unused+0x140/0x140 [ 151.273047][ T6199] ? __lock_acquire+0x12f4/0x7d10 [ 151.278108][ T6199] ? aa_sk_perm+0x81f/0x950 [ 151.282643][ T6199] ? aa_af_perm+0x340/0x340 [ 151.287172][ T6199] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 151.293610][ T6199] ? sock_rps_record_flow+0x19/0x3f0 [ 151.298907][ T6199] ? inet_sendmsg+0x78/0x2f0 [ 151.303489][ T6199] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 151.308762][ T6199] ? security_socket_sendmsg+0x7c/0xa0 [ 151.314220][ T6199] ? inet_send_prepare+0x260/0x260 [ 151.319322][ T6199] ____sys_sendmsg+0x5be/0x970 [ 151.324121][ T6199] ? __sys_sendmsg_sock+0x30/0x30 [ 151.329167][ T6199] ? __import_iovec+0x315/0x500 [ 151.334034][ T6199] ? import_iovec+0x6f/0xa0 [ 151.338550][ T6199] ___sys_sendmsg+0x2a2/0x360 [ 151.343251][ T6199] ? __sys_sendmsg+0x290/0x290 [ 151.348054][ T6199] ? __lock_acquire+0x7d10/0x7d10 [ 151.353219][ T6199] __se_sys_sendmsg+0x1bb/0x2a0 [ 151.358095][ T6199] ? __x64_sys_sendmsg+0x80/0x80 [ 151.363063][ T6199] ? lockdep_hardirqs_on+0x94/0x140 [ 151.368281][ T6199] do_syscall_64+0x4c/0xa0 [ 151.372728][ T6199] ? clear_bhb_loop+0x60/0xb0 [ 151.377426][ T6199] ? clear_bhb_loop+0x60/0xb0 [ 151.382133][ T6199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.388045][ T6199] RIP: 0033:0x7fc20599ce59 [ 151.392485][ T6199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.412098][ T6199] RSP: 002b:00007fc20678e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.420512][ T6199] RAX: ffffffffffffffda RBX: 00007fc205c15fa0 RCX: 00007fc20599ce59 [ 151.428503][ T6199] RDX: 00000000000000c0 RSI: 00002000000006c0 RDI: 0000000000000003 [ 151.436488][ T6199] RBP: 00007fc20678e090 R08: 0000000000000000 R09: 0000000000000000 [ 151.444477][ T6199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.452471][ T6199] R13: 00007fc205c16038 R14: 00007fc205c15fa0 R15: 00007fff96eeff38 [ 151.460480][ T6199] [ 151.479476][ T6199] memory allocation failure, unreliable refcount tracker. [ 152.056618][ T6223] tap0: tun_chr_ioctl cmd 1074025684 [ 152.073541][ T6217] : renamed from team_slave_1 [ 152.274564][ T6230] netlink: 'syz.0.636': attribute type 10 has an invalid length. [ 152.309149][ T6234] sctp: [Deprecated]: syz.4.637 (pid 6234) Use of int in maxseg socket option. [ 152.309149][ T6234] Use struct sctp_assoc_value instead [ 153.111747][ T6258] netlink: 'syz.1.643': attribute type 2 has an invalid length. [ 153.181780][ T6258] __nla_validate_parse: 8 callbacks suppressed [ 153.181795][ T6258] netlink: 164 bytes leftover after parsing attributes in process `syz.1.643'. [ 153.299784][ T6265] netlink: 14 bytes leftover after parsing attributes in process `syz.0.647'. [ 153.450903][ T6268] net_ratelimit: 10 callbacks suppressed [ 153.450921][ T6268] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 153.607345][ T6272] netlink: 'syz.4.650': attribute type 10 has an invalid length. [ 153.622738][ T6272] netlink: 55 bytes leftover after parsing attributes in process `syz.4.650'. [ 153.659778][ T6272] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.650'. [ 154.460703][ T6296] netlink: 14 bytes leftover after parsing attributes in process `syz.0.660'. [ 154.694613][ T6310] netlink: 'syz.2.663': attribute type 2 has an invalid length. [ 154.707856][ T6310] netlink: 164 bytes leftover after parsing attributes in process `syz.2.663'. [ 154.757505][ T6309] netlink: 'syz.0.665': attribute type 10 has an invalid length. [ 154.776211][ T6309] netlink: 55 bytes leftover after parsing attributes in process `syz.0.665'. [ 154.814111][ T6313] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.665'. [ 155.422757][ T6334] netlink: 'syz.3.673': attribute type 27 has an invalid length. [ 155.758597][ T6334] bond0: (slave bond_slave_0): Releasing backup interface [ 155.999366][ T6342] netlink: 14 bytes leftover after parsing attributes in process `syz.2.675'. [ 156.021806][ T6353] netlink: 'syz.1.680': attribute type 2 has an invalid length. [ 156.038283][ T6353] netlink: 'syz.1.680': attribute type 8 has an invalid length. [ 156.076031][ T6353] netlink: 132 bytes leftover after parsing attributes in process `syz.1.680'. [ 156.134627][ T6350] netlink: 'syz.1.680': attribute type 2 has an invalid length. [ 156.167136][ T6350] netlink: 'syz.1.680': attribute type 8 has an invalid length. [ 156.575837][ T6370] netlink: 'syz.1.687': attribute type 2 has an invalid length. [ 158.539453][ T6417] team0: Port device team_slave_0 removed [ 158.557659][ T6422] validate_nla: 3 callbacks suppressed [ 158.557678][ T6422] netlink: 'syz.3.707': attribute type 2 has an invalid length. [ 158.591526][ T6422] __nla_validate_parse: 9 callbacks suppressed [ 158.591542][ T6422] netlink: 164 bytes leftover after parsing attributes in process `syz.3.707'. [ 158.824328][ T6429] netlink: 16278 bytes leftover after parsing attributes in process `syz.4.710'. [ 159.761744][ T6448] netlink: 14 bytes leftover after parsing attributes in process `syz.2.717'. [ 159.794690][ T6444] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.714'. [ 159.950895][ T6456] FAULT_INJECTION: forcing a failure. [ 159.950895][ T6456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.001977][ T6456] CPU: 0 PID: 6456 Comm: syz.0.719 Not tainted syzkaller #0 [ 160.009359][ T6456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.019439][ T6456] Call Trace: [ 160.022766][ T6456] [ 160.025738][ T6456] dump_stack_lvl+0x188/0x24e [ 160.030450][ T6456] ? show_regs_print_info+0x12/0x12 [ 160.035693][ T6456] ? load_image+0x400/0x400 [ 160.040254][ T6456] ? __lock_acquire+0x7d10/0x7d10 [ 160.045427][ T6456] should_fail_ex+0x399/0x4d0 [ 160.050169][ T6456] _copy_from_user+0x2c/0x170 [ 160.054914][ T6456] iovec_from_user+0x143/0x360 [ 160.059729][ T6456] __import_iovec+0x6d/0x500 [ 160.064366][ T6456] ? __might_fault+0xa6/0x120 [ 160.069072][ T6456] import_iovec+0x6f/0xa0 [ 160.073522][ T6456] ___sys_recvmsg+0x4b6/0x590 [ 160.078295][ T6456] ? __sys_recvmsg+0x290/0x290 [ 160.083117][ T6456] ? common_file_perm+0x171/0x1c0 [ 160.088211][ T6456] ? __fget_files+0x43d/0x4b0 [ 160.093137][ T6456] __x64_sys_recvmsg+0x205/0x2e0 [ 160.098118][ T6456] ? ___sys_recvmsg+0x590/0x590 [ 160.103029][ T6456] ? lockdep_hardirqs_on+0x94/0x140 [ 160.108597][ T6456] do_syscall_64+0x4c/0xa0 [ 160.113018][ T6456] ? clear_bhb_loop+0x60/0xb0 [ 160.117694][ T6456] ? clear_bhb_loop+0x60/0xb0 [ 160.122382][ T6456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.128275][ T6456] RIP: 0033:0x7fa31879ce59 [ 160.132703][ T6456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.152945][ T6456] RSP: 002b:00007fa319718028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 160.161396][ T6456] RAX: ffffffffffffffda RBX: 00007fa318a15fa0 RCX: 00007fa31879ce59 [ 160.169404][ T6456] RDX: 0000000000000020 RSI: 0000200000000d40 RDI: 0000000000000003 [ 160.177389][ T6456] RBP: 00007fa319718090 R08: 0000000000000000 R09: 0000000000000000 [ 160.185361][ T6456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.193351][ T6456] R13: 00007fa318a16038 R14: 00007fa318a15fa0 R15: 00007ffd1fb82ed8 [ 160.201383][ T6456] [ 160.335868][ T6466] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.721'. [ 160.624413][ T6479] netlink: 'syz.3.722': attribute type 2 has an invalid length. [ 160.660877][ T6479] netlink: 164 bytes leftover after parsing attributes in process `syz.3.722'. [ 160.836133][ T6478] sock: sock_set_timeout: `syz.0.725' (pid 6478) tries to set negative timeout [ 161.508861][ T6503] netlink: 14 bytes leftover after parsing attributes in process `syz.3.731'. [ 162.302719][ T6528] netlink: 22 bytes leftover after parsing attributes in process `syz.3.738'. [ 162.351677][ T6528] openvswitch: netlink: Flow key attr not present in new flow. [ 162.395890][ T6535] netlink: 'syz.4.741': attribute type 2 has an invalid length. [ 162.451747][ T6535] netlink: 164 bytes leftover after parsing attributes in process `syz.4.741'. [ 162.562619][ T6544] netlink: 14 bytes leftover after parsing attributes in process `syz.0.745'. [ 162.652510][ T6546] netlink: 'syz.1.748': attribute type 4 has an invalid length. [ 162.750819][ T6550] netlink: 'syz.3.750': attribute type 21 has an invalid length. [ 162.780070][ T6550] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.818764][ T6550] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.826172][ T6550] IPv6: NLM_F_CREATE should be set when creating new route [ 162.833619][ T6550] IPv6: NLM_F_CREATE should be set when creating new route [ 162.840912][ T6550] IPv6: NLM_F_CREATE should be set when creating new route [ 165.232490][ T6595] netlink: 'syz.3.764': attribute type 13 has an invalid length. [ 165.233778][ T6593] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.765'. [ 165.240659][ T6595] netlink: 152 bytes leftover after parsing attributes in process `syz.3.764'. [ 166.167844][ T6619] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.771'. [ 166.412892][ T6595] erspan0: refused to change device tx_queue_len [ 166.448271][ T6595] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 166.493215][ T6593] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 166.515534][ T6619] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 166.538395][ T6593] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 166.587015][ T6593] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 166.878530][ T6630] netlink: 132 bytes leftover after parsing attributes in process `syz.3.773'. [ 167.710247][ T6650] FAULT_INJECTION: forcing a failure. [ 167.710247][ T6650] name failslab, interval 1, probability 0, space 0, times 0 [ 167.777997][ T6650] CPU: 1 PID: 6650 Comm: syz.2.778 Not tainted syzkaller #0 [ 167.785360][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.795445][ T6650] Call Trace: [ 167.798739][ T6650] [ 167.801684][ T6650] dump_stack_lvl+0x188/0x24e [ 167.806391][ T6650] ? show_regs_print_info+0x12/0x12 [ 167.811628][ T6650] ? load_image+0x400/0x400 [ 167.816165][ T6650] ? __might_sleep+0xd0/0xd0 [ 167.820778][ T6650] ? __lock_acquire+0x7d10/0x7d10 [ 167.825836][ T6650] ? perf_trace_lock+0xf8/0x390 [ 167.830718][ T6650] should_fail_ex+0x399/0x4d0 [ 167.835436][ T6650] should_failslab+0x5/0x20 [ 167.839965][ T6650] slab_pre_alloc_hook+0x59/0x310 [ 167.845105][ T6650] ? __get_vm_area_node+0x122/0x330 [ 167.850331][ T6650] __kmem_cache_alloc_node+0x4f/0x260 [ 167.855733][ T6650] ? __get_vm_area_node+0x122/0x330 [ 167.860962][ T6650] kmalloc_node_trace+0x22/0xe0 [ 167.865855][ T6650] __get_vm_area_node+0x122/0x330 [ 167.870914][ T6650] __vmalloc_node_range+0x357/0x13b0 [ 167.876241][ T6650] ? netlink_sendmsg+0x5ec/0xbd0 [ 167.881250][ T6650] ? free_vm_area+0x50/0x50 [ 167.885786][ T6650] ? aa_file_perm+0x112/0xf00 [ 167.890497][ T6650] ? netlink_sendmsg+0x5ec/0xbd0 [ 167.895556][ T6650] vmalloc+0x75/0x80 [ 167.899478][ T6650] ? netlink_sendmsg+0x5ec/0xbd0 [ 167.904533][ T6650] netlink_sendmsg+0x5ec/0xbd0 [ 167.909344][ T6650] ? netlink_getsockopt+0x550/0x550 [ 167.914576][ T6650] ? aa_file_perm+0x3ea/0xf00 [ 167.919266][ T6650] ? aa_file_perm+0x112/0xf00 [ 167.923956][ T6650] ? aa_sock_msg_perm+0x94/0x150 [ 167.928915][ T6650] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 167.934225][ T6650] ? security_socket_sendmsg+0x7c/0xa0 [ 167.939722][ T6650] sock_write_iter+0x2d9/0x3e0 [ 167.944512][ T6650] ? sock_read_iter+0x3a0/0x3a0 [ 167.949397][ T6650] ? common_file_perm+0x171/0x1c0 [ 167.954474][ T6650] vfs_write+0x4b1/0xa30 [ 167.958753][ T6650] ? file_end_write+0x250/0x250 [ 167.963637][ T6650] ? __fget_files+0x43d/0x4b0 [ 167.968376][ T6650] ? __fdget_pos+0x1d4/0x360 [ 167.973083][ T6650] ? ksys_write+0x71/0x250 [ 167.977527][ T6650] ksys_write+0x14c/0x250 [ 167.981886][ T6650] ? __ia32_sys_read+0x80/0x80 [ 167.986690][ T6650] ? lockdep_hardirqs_on+0x94/0x140 [ 167.991927][ T6650] do_syscall_64+0x4c/0xa0 [ 167.996373][ T6650] ? clear_bhb_loop+0x60/0xb0 [ 168.001081][ T6650] ? clear_bhb_loop+0x60/0xb0 [ 168.005789][ T6650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.011708][ T6650] RIP: 0033:0x7fc20599ce59 [ 168.016143][ T6650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.035773][ T6650] RSP: 002b:00007fc20678e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.044214][ T6650] RAX: ffffffffffffffda RBX: 00007fc205c15fa0 RCX: 00007fc20599ce59 [ 168.052220][ T6650] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000004 [ 168.060212][ T6650] RBP: 00007fc20678e090 R08: 0000000000000000 R09: 0000000000000000 [ 168.068296][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.076548][ T6650] R13: 00007fc205c16038 R14: 00007fc205c15fa0 R15: 00007fff96eeff38 [ 168.084554][ T6650] [ 168.261918][ T6650] syz.2.778: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 168.306526][ T6650] CPU: 0 PID: 6650 Comm: syz.2.778 Not tainted syzkaller #0 [ 168.313869][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.323954][ T6650] Call Trace: [ 168.327258][ T6650] [ 168.330207][ T6650] dump_stack_lvl+0x188/0x24e [ 168.334923][ T6650] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 168.341370][ T6650] ? show_regs_print_info+0x12/0x12 [ 168.346594][ T6650] ? load_image+0x400/0x400 [ 168.351126][ T6650] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 168.357572][ T6650] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 168.364103][ T6650] warn_alloc+0x242/0x330 [ 168.368457][ T6650] ? __get_vm_area_node+0x122/0x330 [ 168.373682][ T6650] ? zone_watermark_ok_safe+0x270/0x270 [ 168.379258][ T6650] ? rcu_is_watching+0x11/0xa0 [ 168.384057][ T6650] ? __get_vm_area_node+0x318/0x330 [ 168.389291][ T6650] __vmalloc_node_range+0x37c/0x13b0 [ 168.394633][ T6650] ? free_vm_area+0x50/0x50 [ 168.399169][ T6650] ? aa_file_perm+0x112/0xf00 [ 168.403869][ T6650] ? netlink_sendmsg+0x5ec/0xbd0 [ 168.408829][ T6650] vmalloc+0x75/0x80 [ 168.412747][ T6650] ? netlink_sendmsg+0x5ec/0xbd0 [ 168.417712][ T6650] netlink_sendmsg+0x5ec/0xbd0 [ 168.422509][ T6650] ? netlink_getsockopt+0x550/0x550 [ 168.427732][ T6650] ? aa_file_perm+0x3ea/0xf00 [ 168.432438][ T6650] ? aa_file_perm+0x112/0xf00 [ 168.437135][ T6650] ? aa_sock_msg_perm+0x94/0x150 [ 168.442088][ T6650] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 168.447477][ T6650] ? security_socket_sendmsg+0x7c/0xa0 [ 168.452964][ T6650] sock_write_iter+0x2d9/0x3e0 [ 168.457750][ T6650] ? sock_read_iter+0x3a0/0x3a0 [ 168.462629][ T6650] ? common_file_perm+0x171/0x1c0 [ 168.467676][ T6650] vfs_write+0x4b1/0xa30 [ 168.471946][ T6650] ? file_end_write+0x250/0x250 [ 168.476830][ T6650] ? __fget_files+0x43d/0x4b0 [ 168.481545][ T6650] ? __fdget_pos+0x1d4/0x360 [ 168.486154][ T6650] ? ksys_write+0x71/0x250 [ 168.490591][ T6650] ksys_write+0x14c/0x250 [ 168.494947][ T6650] ? __ia32_sys_read+0x80/0x80 [ 168.499734][ T6650] ? lockdep_hardirqs_on+0x94/0x140 [ 168.504956][ T6650] do_syscall_64+0x4c/0xa0 [ 168.509392][ T6650] ? clear_bhb_loop+0x60/0xb0 [ 168.514091][ T6650] ? clear_bhb_loop+0x60/0xb0 [ 168.518796][ T6650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.524724][ T6650] RIP: 0033:0x7fc20599ce59 [ 168.529160][ T6650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.548799][ T6650] RSP: 002b:00007fc20678e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.557241][ T6650] RAX: ffffffffffffffda RBX: 00007fc205c15fa0 RCX: 00007fc20599ce59 [ 168.565584][ T6650] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000004 [ 168.573575][ T6650] RBP: 00007fc20678e090 R08: 0000000000000000 R09: 0000000000000000 [ 168.581565][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.589562][ T6650] R13: 00007fc205c16038 R14: 00007fc205c15fa0 R15: 00007fff96eeff38 [ 168.597580][ T6650] [ 169.147245][ T6650] Mem-Info: [ 169.150519][ T6650] active_anon:10838 inactive_anon:0 isolated_anon:0 [ 169.150519][ T6650] active_file:18134 inactive_file:39992 isolated_file:0 [ 169.150519][ T6650] unevictable:768 dirty:282 writeback:0 [ 169.150519][ T6650] slab_reclaimable:20903 slab_unreclaimable:94888 [ 169.150519][ T6650] mapped:34313 shmem:6305 pagetables:690 [ 169.150519][ T6650] sec_pagetables:0 bounce:0 [ 169.150519][ T6650] kernel_misc_reclaimable:0 [ 169.150519][ T6650] free:1317811 free_pcp:9217 free_cma:0 [ 169.287238][ T6650] Node 0 active_anon:46852kB inactive_anon:0kB active_file:72536kB inactive_file:159768kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140652kB dirty:1124kB writeback:0kB shmem:27084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10196kB pagetables:2760kB sec_pagetables:0kB all_unreclaimable? no [ 169.412817][ T6650] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 169.457481][ T6650] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 169.485163][ T6650] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 169.491348][ T6650] Node 0 DMA32 free:1347332kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:51352kB inactive_anon:0kB active_file:72536kB inactive_file:159768kB unevictable:1536kB writepending:1124kB present:3129332kB managed:2592964kB mlocked:0kB bounce:0kB free_pcp:22508kB local_pcp:20772kB free_cma:0kB [ 169.531678][ T6650] lowmem_reserve[]: 0 0 1 1 1 [ 169.582528][ T6650] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 169.634426][ T6650] lowmem_reserve[]: 0 0 0 0 0 [ 169.639219][ T6650] Node 1 Normal free:3899984kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:14784kB local_pcp:8192kB free_cma:0kB [ 169.668737][ T6650] lowmem_reserve[]: 0 0 0 0 0 [ 169.699696][ T6650] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 169.731601][ T6650] Node 0 DMA32: 1144*4kB (UME) 625*8kB (UE) 103*16kB (UE) 1017*32kB (UME) 246*64kB (UME) 74*128kB (UME) 36*256kB (UM) 15*512kB (ME) 10*1024kB (M) 5*2048kB (UM) 308*4096kB (M) = 1367928kB [ 169.811753][ T6650] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 169.942561][ T6650] Node 1 Normal: 216*4kB (UM) 42*8kB (UME) 28*16kB (UME) 41*32kB (UME) 21*64kB (UE) 15*128kB (UME) 6*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3899984kB [ 170.045605][ T6650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.077802][ T6650] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 170.156206][ T6650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.170242][ T6650] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 170.192690][ T6650] 68707 total pagecache pages [ 170.197414][ T6650] 0 pages in swap cache [ 170.245907][ T6650] Free swap = 124996kB [ 170.250113][ T6650] Total swap = 124996kB [ 170.263392][ T6650] 2097051 pages RAM [ 170.267317][ T6650] 0 pages HighMem/MovableOnly [ 170.273472][ T6650] 415209 pages reserved [ 170.277907][ T6650] 0 pages cma reserved [ 170.620010][ T6687] netlink: 'syz.3.789': attribute type 10 has an invalid length. [ 170.836760][ T6687] batman_adv: batadv0: Adding interface: netdevsim0 [ 170.862178][ T6687] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.893513][ T6687] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 170.949537][ T6695] netlink: 16278 bytes leftover after parsing attributes in process `syz.1.793'. [ 170.972662][ T6696] netlink: 132 bytes leftover after parsing attributes in process `syz.4.794'. [ 171.557066][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 171.646454][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 171.656247][ T6714] netlink: 33 bytes leftover after parsing attributes in process `syz.4.801'. [ 171.667560][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 171.677380][ T6714] netlink: 33 bytes leftover after parsing attributes in process `syz.4.801'. [ 171.692811][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 171.702428][ T6714] netlink: 33 bytes leftover after parsing attributes in process `syz.4.801'. [ 172.468725][ T6749] netlink: 'syz.0.811': attribute type 29 has an invalid length. [ 172.518745][ T6749] netlink: 'syz.0.811': attribute type 29 has an invalid length. [ 172.817991][ T6759] netlink: 'syz.2.814': attribute type 2 has an invalid length. [ 172.854105][ T6759] netlink: 164 bytes leftover after parsing attributes in process `syz.2.814'. [ 173.377979][ T6771] netlink: 'syz.1.820': attribute type 21 has an invalid length. [ 173.408191][ T6771] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 173.427530][ T6773] FAULT_INJECTION: forcing a failure. [ 173.427530][ T6773] name failslab, interval 1, probability 0, space 0, times 0 [ 173.476841][ T6773] CPU: 0 PID: 6773 Comm: syz.3.821 Not tainted syzkaller #0 [ 173.484192][ T6773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.494276][ T6773] Call Trace: [ 173.497574][ T6773] [ 173.500523][ T6773] dump_stack_lvl+0x188/0x24e [ 173.505222][ T6773] ? sctp_sendmsg+0x15b0/0x2940 [ 173.510089][ T6773] ? ___sys_sendmsg+0x2a2/0x360 [ 173.514967][ T6773] ? show_regs_print_info+0x12/0x12 [ 173.520192][ T6773] ? load_image+0x400/0x400 [ 173.524735][ T6773] should_fail_ex+0x399/0x4d0 [ 173.529433][ T6773] should_failslab+0x5/0x20 [ 173.533940][ T6773] slab_pre_alloc_hook+0x59/0x310 [ 173.538965][ T6773] ? sctp_add_bind_addr+0x89/0x350 [ 173.544077][ T6773] __kmem_cache_alloc_node+0x4f/0x260 [ 173.549447][ T6773] ? sctp_add_bind_addr+0x89/0x350 [ 173.554559][ T6773] kmalloc_trace+0x26/0xe0 [ 173.558983][ T6773] sctp_add_bind_addr+0x89/0x350 [ 173.563924][ T6773] sctp_copy_local_addr_list+0x311/0x4e0 [ 173.569561][ T6773] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 173.575281][ T6773] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 173.581354][ T6773] ? sctp_v6_is_any+0x60/0x70 [ 173.586030][ T6773] ? sctp_copy_one_addr+0x93/0x660 [ 173.591179][ T6773] sctp_bind_addr_copy+0xaf/0x3c0 [ 173.596258][ T6773] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 173.602604][ T6773] sctp_connect_new_asoc+0x2f5/0x6a0 [ 173.607892][ T6773] ? __sctp_connect+0xd80/0xd80 [ 173.612826][ T6773] ? __local_bh_enable_ip+0x136/0x1c0 [ 173.618198][ T6773] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 173.623739][ T6773] ? security_sctp_bind_connect+0x85/0xb0 [ 173.629455][ T6773] sctp_sendmsg+0x15b0/0x2940 [ 173.634146][ T6773] ? sctp_getsockopt+0x8a0/0x8a0 [ 173.639085][ T6773] ? __lock_acquire+0x7d10/0x7d10 [ 173.644116][ T6773] ? aa_af_perm+0x340/0x340 [ 173.648613][ T6773] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 173.655040][ T6773] ? inet_sendmsg+0xe5/0x2f0 [ 173.659627][ T6773] ? inet_send_prepare+0x260/0x260 [ 173.664735][ T6773] ____sys_sendmsg+0x5be/0x970 [ 173.669605][ T6773] ? __sys_sendmsg_sock+0x30/0x30 [ 173.674645][ T6773] ? __import_iovec+0x315/0x500 [ 173.679501][ T6773] ? import_iovec+0x6f/0xa0 [ 173.684014][ T6773] ___sys_sendmsg+0x2a2/0x360 [ 173.688787][ T6773] ? __sys_sendmsg+0x290/0x290 [ 173.694114][ T6773] ? __lock_acquire+0x7d10/0x7d10 [ 173.699161][ T6773] __se_sys_sendmsg+0x1bb/0x2a0 [ 173.704027][ T6773] ? ct_nmi_exit+0x145/0x1c0 [ 173.708961][ T6773] ? __x64_sys_sendmsg+0x80/0x80 [ 173.714024][ T6773] ? lockdep_hardirqs_on+0x94/0x140 [ 173.719312][ T6773] do_syscall_64+0x4c/0xa0 [ 173.723830][ T6773] ? clear_bhb_loop+0x60/0xb0 [ 173.728523][ T6773] ? clear_bhb_loop+0x60/0xb0 [ 173.733258][ T6773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.739164][ T6773] RIP: 0033:0x7f58fdf9ce59 [ 173.743579][ T6773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.763269][ T6773] RSP: 002b:00007f58fedd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.771677][ T6773] RAX: ffffffffffffffda RBX: 00007f58fe215fa0 RCX: 00007f58fdf9ce59 [ 173.779644][ T6773] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 173.787611][ T6773] RBP: 00007f58fedd8090 R08: 0000000000000000 R09: 0000000000000000 [ 173.795576][ T6773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.803537][ T6773] R13: 00007f58fe216038 R14: 00007f58fe215fa0 R15: 00007fffa8bbce28 [ 173.811514][ T6773] [ 174.520143][ T6798] netlink: 'syz.3.829': attribute type 2 has an invalid length. [ 176.013637][ T6839] netlink: 'syz.1.846': attribute type 2 has an invalid length. [ 176.043165][ T6839] __nla_validate_parse: 8 callbacks suppressed [ 176.043183][ T6839] netlink: 164 bytes leftover after parsing attributes in process `syz.1.846'. [ 176.282436][ T6846] netlink: 16278 bytes leftover after parsing attributes in process `syz.3.847'. [ 176.549111][ T6850] netlink: 14 bytes leftover after parsing attributes in process `syz.1.849'. [ 176.683265][ T6860] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.851'. [ 177.095052][ T6867] netlink: 105084 bytes leftover after parsing attributes in process `syz.4.855'. [ 177.130700][ T6867] netlink: 31 bytes leftover after parsing attributes in process `syz.4.855'. [ 177.239801][ T6874] netlink: 14 bytes leftover after parsing attributes in process `syz.3.858'. [ 177.506661][ T6880] netlink: 'syz.3.861': attribute type 2 has an invalid length. [ 177.551205][ T6880] netlink: 164 bytes leftover after parsing attributes in process `syz.3.861'. [ 177.650997][ T6883] netlink: 16278 bytes leftover after parsing attributes in process `syz.4.862'. [ 178.066145][ T6893] netlink: 14 bytes leftover after parsing attributes in process `syz.0.866'. [ 178.208862][ T6896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.813922][ T6916] netlink: 'syz.0.875': attribute type 10 has an invalid length. [ 178.861391][ T6916] device team0 entered promiscuous mode [ 178.898307][ T6916] device team_slave_0 entered promiscuous mode [ 178.918127][ T6916] device team_slave_1 entered promiscuous mode [ 178.934456][ T6916] bridge0: port 4(team0) entered blocking state [ 178.948745][ T6916] bridge0: port 4(team0) entered disabled state [ 178.979209][ T6916] bridge0: port 4(team0) entered blocking state [ 178.985681][ T6916] bridge0: port 4(team0) entered forwarding state [ 179.045490][ T6928] netlink: 'syz.2.874': attribute type 2 has an invalid length. [ 179.994840][ T6949] netlink: 'syz.4.884': attribute type 10 has an invalid length. [ 180.151097][ T6953] netlink: 'syz.3.886': attribute type 3 has an invalid length. [ 180.791807][ T4272] Bluetooth: hci0: command 0x0406 tx timeout [ 180.791945][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 180.797879][ T4272] Bluetooth: hci2: command 0x0406 tx timeout [ 180.803972][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 180.809946][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 182.178138][ T6976] __nla_validate_parse: 6 callbacks suppressed [ 182.178157][ T6976] netlink: 168 bytes leftover after parsing attributes in process `syz.4.902'. [ 183.015998][ T7003] netlink: 16278 bytes leftover after parsing attributes in process `syz.4.903'. [ 183.440720][ T7012] netlink: 156 bytes leftover after parsing attributes in process `syz.0.905'. [ 184.246437][ T7018] netlink: 168 bytes leftover after parsing attributes in process `syz.3.909'. [ 184.308127][ T7020] netlink: 'syz.2.911': attribute type 10 has an invalid length. [ 184.337437][ T7020] netlink: 55 bytes leftover after parsing attributes in process `syz.2.911'. [ 184.388038][ T7025] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.911'. [ 184.692197][ T7031] netlink: 'syz.2.915': attribute type 10 has an invalid length. [ 184.730733][ T7031] netlink: 55 bytes leftover after parsing attributes in process `syz.2.915'. [ 184.830957][ T7034] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.915'. [ 185.120498][ T7037] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.917'. [ 187.631034][ T7042] netlink: 'syz.2.918': attribute type 1 has an invalid length. [ 187.651069][ T7042] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.918'. [ 187.671314][ T7047] netlink: 'syz.2.918': attribute type 29 has an invalid length. [ 187.707830][ T7047] netlink: 'syz.2.918': attribute type 29 has an invalid length. [ 188.290179][ T7053] bridge0: port 3(veth1_to_hsr) entered disabled state [ 188.297570][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.305597][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.332740][ T7054] device veth1_to_hsr left promiscuous mode [ 188.356005][ T7054] bridge0: port 3(veth1_to_hsr) entered disabled state [ 188.408108][ T7054] device bridge_slave_1 left promiscuous mode [ 188.455311][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.522325][ T7054] device bridge_slave_0 left promiscuous mode [ 188.528610][ T7054] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.630087][ T7058] netlink: 156 bytes leftover after parsing attributes in process `syz.2.924'. [ 188.900753][ T7071] netlink: 'syz.1.928': attribute type 33 has an invalid length. [ 188.936520][ T7071] netlink: 152 bytes leftover after parsing attributes in process `syz.1.928'. [ 189.112335][ T7081] netlink: 'syz.2.932': attribute type 3 has an invalid length. [ 189.141646][ T7081] netlink: 132 bytes leftover after parsing attributes in process `syz.2.932'. [ 189.205468][ T7081] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.932'. [ 189.216180][ T7081] netlink: zone id is out of range [ 189.228244][ T7081] netlink: zone id is out of range [ 189.234985][ T7081] netlink: zone id is out of range [ 189.266026][ T7081] netlink: get zone limit has 8 unknown bytes [ 189.299587][ T7085] netlink: 'syz.3.934': attribute type 10 has an invalid length. [ 189.322097][ T7085] netlink: 55 bytes leftover after parsing attributes in process `syz.3.934'. [ 189.343375][ T7085] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.934'. [ 189.408906][ T7089] FAULT_INJECTION: forcing a failure. [ 189.408906][ T7089] name failslab, interval 1, probability 0, space 0, times 0 [ 189.447687][ T7089] CPU: 0 PID: 7089 Comm: syz.4.936 Not tainted syzkaller #0 [ 189.455123][ T7089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 189.465189][ T7089] Call Trace: [ 189.468469][ T7089] [ 189.471402][ T7089] dump_stack_lvl+0x188/0x24e [ 189.476088][ T7089] ? show_regs_print_info+0x12/0x12 [ 189.481287][ T7089] ? load_image+0x400/0x400 [ 189.485790][ T7089] ? __might_sleep+0xd0/0xd0 [ 189.490371][ T7089] ? __lock_acquire+0x7d10/0x7d10 [ 189.495412][ T7089] ? aa_file_perm+0x3ea/0xf00 [ 189.500090][ T7089] should_fail_ex+0x399/0x4d0 [ 189.504767][ T7089] should_failslab+0x5/0x20 [ 189.509264][ T7089] slab_pre_alloc_hook+0x59/0x310 [ 189.514283][ T7089] ? kernfs_fop_write_iter+0x155/0x520 [ 189.519737][ T7089] __kmem_cache_alloc_node+0x4f/0x260 [ 189.525120][ T7089] ? kernfs_fop_write_iter+0x155/0x520 [ 189.530581][ T7089] __kmalloc+0xa0/0x240 [ 189.534739][ T7089] kernfs_fop_write_iter+0x155/0x520 [ 189.540031][ T7089] vfs_write+0x4b1/0xa30 [ 189.544275][ T7089] ? file_end_write+0x250/0x250 [ 189.549128][ T7089] ? __fget_files+0x43d/0x4b0 [ 189.553985][ T7089] ? __fdget_pos+0x2ae/0x360 [ 189.558578][ T7089] ? ksys_write+0x71/0x250 [ 189.562994][ T7089] ksys_write+0x14c/0x250 [ 189.567327][ T7089] ? __ia32_sys_read+0x80/0x80 [ 189.572106][ T7089] ? lockdep_hardirqs_on+0x94/0x140 [ 189.577302][ T7089] do_syscall_64+0x4c/0xa0 [ 189.581717][ T7089] ? clear_bhb_loop+0x60/0xb0 [ 189.586394][ T7089] ? clear_bhb_loop+0x60/0xb0 [ 189.591067][ T7089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.596955][ T7089] RIP: 0033:0x7ff9fbb9ce59 [ 189.601374][ T7089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.621064][ T7089] RSP: 002b:00007ff9fcab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 189.629481][ T7089] RAX: ffffffffffffffda RBX: 00007ff9fbe15fa0 RCX: 00007ff9fbb9ce59 [ 189.637449][ T7089] RDX: 000000000000002f RSI: 0000200000000080 RDI: 0000000000000009 [ 189.645413][ T7089] RBP: 00007ff9fcab7090 R08: 0000000000000000 R09: 0000000000000000 [ 189.653469][ T7089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.661430][ T7089] R13: 00007ff9fbe16038 R14: 00007ff9fbe15fa0 R15: 00007ffcfcdbaef8 [ 189.669414][ T7089] [ 190.036411][ T7102] netlink: 'syz.2.940': attribute type 13 has an invalid length. [ 190.069034][ T7102] netlink: 152 bytes leftover after parsing attributes in process `syz.2.940'. [ 190.086196][ T7105] FAULT_INJECTION: forcing a failure. [ 190.086196][ T7105] name failslab, interval 1, probability 0, space 0, times 0 [ 190.108748][ T7102] syz_tun: refused to change device tx_queue_len [ 190.116656][ T7102] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 190.130527][ T7105] CPU: 0 PID: 7105 Comm: syz.3.943 Not tainted syzkaller #0 [ 190.139535][ T7105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.149617][ T7105] Call Trace: [ 190.152860][ T7110] netlink: 'syz.2.940': attribute type 10 has an invalid length. [ 190.152893][ T7105] [ 190.163549][ T7105] dump_stack_lvl+0x188/0x24e [ 190.168346][ T7105] ? show_regs_print_info+0x12/0x12 [ 190.173568][ T7105] ? load_image+0x400/0x400 [ 190.178093][ T7105] ? __might_sleep+0xd0/0xd0 [ 190.182701][ T7105] ? __lock_acquire+0x7d10/0x7d10 [ 190.187755][ T7105] should_fail_ex+0x399/0x4d0 [ 190.192457][ T7105] should_failslab+0x5/0x20 [ 190.196966][ T7105] slab_pre_alloc_hook+0x59/0x310 [ 190.201982][ T7105] ? is_bpf_text_address+0x22/0x2a0 [ 190.207171][ T7105] kmem_cache_alloc+0x56/0x2f0 [ 190.211923][ T7105] ? __alloc_file+0x25/0x230 [ 190.216506][ T7105] __alloc_file+0x25/0x230 [ 190.220918][ T7105] alloc_empty_file+0x90/0x180 [ 190.225665][ T7105] path_openat+0x10f/0x2ee0 [ 190.230164][ T7105] ? verify_lock_unused+0x140/0x140 [ 190.235361][ T7105] ? kasan_set_track+0x60/0x70 [ 190.240119][ T7105] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 190.245834][ T7105] ? do_filp_open+0x430/0x430 [ 190.250501][ T7105] ? ct_nmi_exit+0x145/0x1c0 [ 190.255082][ T7105] ? ct_irq_exit_irqson+0x113/0x170 [ 190.260282][ T7105] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 190.266259][ T7105] do_filp_open+0x1f1/0x430 [ 190.270764][ T7105] ? vfs_tmpfile+0x480/0x480 [ 190.275360][ T7105] ? _raw_spin_unlock+0x24/0x40 [ 190.280219][ T7105] ? alloc_fd+0x58f/0x630 [ 190.284559][ T7105] do_sys_openat2+0x150/0x4b0 [ 190.289248][ T7105] ? do_sys_open+0xe0/0xe0 [ 190.293670][ T7105] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 190.299832][ T7105] __x64_sys_openat+0x135/0x160 [ 190.304767][ T7105] do_syscall_64+0x4c/0xa0 [ 190.309183][ T7105] ? clear_bhb_loop+0x60/0xb0 [ 190.313852][ T7105] ? clear_bhb_loop+0x60/0xb0 [ 190.318523][ T7105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.324413][ T7105] RIP: 0033:0x7f58fdf9ce59 [ 190.328815][ T7105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.348426][ T7105] RSP: 002b:00007f58fedd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 190.356861][ T7105] RAX: ffffffffffffffda RBX: 00007f58fe215fa0 RCX: 00007f58fdf9ce59 [ 190.364848][ T7105] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 190.372812][ T7105] RBP: 00007f58fedd8090 R08: 0000000000000000 R09: 0000000000000000 [ 190.380777][ T7105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.388749][ T7105] R13: 00007f58fe216038 R14: 00007f58fe215fa0 R15: 00007fffa8bbce28 [ 190.396719][ T7105] [ 190.426673][ T7109] netlink: 14 bytes leftover after parsing attributes in process `syz.4.941'. [ 190.442616][ T7106] netlink: 156 bytes leftover after parsing attributes in process `syz.1.942'. [ 190.596753][ T7116] netlink: 'syz.3.945': attribute type 33 has an invalid length. [ 190.893625][ T7131] FAULT_INJECTION: forcing a failure. [ 190.893625][ T7131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.939952][ T7131] CPU: 1 PID: 7131 Comm: syz.3.950 Not tainted syzkaller #0 [ 190.947297][ T7131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.957378][ T7131] Call Trace: [ 190.960673][ T7131] [ 190.963619][ T7131] dump_stack_lvl+0x188/0x24e [ 190.968327][ T7131] ? show_regs_print_info+0x12/0x12 [ 190.973562][ T7131] ? load_image+0x400/0x400 [ 190.978098][ T7131] ? __lock_acquire+0x7d10/0x7d10 [ 190.983150][ T7131] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 190.989337][ T7131] should_fail_ex+0x399/0x4d0 [ 190.994037][ T7131] _copy_from_user+0x2c/0x170 [ 190.998725][ T7131] ___sys_recvmsg+0x172/0x590 [ 191.003412][ T7131] ? __sys_recvmsg+0x290/0x290 [ 191.008178][ T7131] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 191.014426][ T7131] ? __fget_files+0x43d/0x4b0 [ 191.019108][ T7131] __x64_sys_recvmsg+0x205/0x2e0 [ 191.024054][ T7131] ? perf_trace_preemptirq_template+0x268/0x320 [ 191.030295][ T7131] ? ___sys_recvmsg+0x590/0x590 [ 191.035151][ T7131] ? lockdep_hardirqs_on+0x94/0x140 [ 191.040346][ T7131] do_syscall_64+0x4c/0xa0 [ 191.044759][ T7131] ? clear_bhb_loop+0x60/0xb0 [ 191.049430][ T7131] ? clear_bhb_loop+0x60/0xb0 [ 191.054101][ T7131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.059986][ T7131] RIP: 0033:0x7f58fdf9ce59 [ 191.064396][ T7131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.084000][ T7131] RSP: 002b:00007f58fedb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 191.092424][ T7131] RAX: ffffffffffffffda RBX: 00007f58fe216090 RCX: 00007f58fdf9ce59 [ 191.100408][ T7131] RDX: 0000000000012000 RSI: 0000200000000100 RDI: 0000000000000005 [ 191.108399][ T7131] RBP: 00007f58fedb7090 R08: 0000000000000000 R09: 0000000000000000 [ 191.116391][ T7131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.124373][ T7131] R13: 00007f58fe216128 R14: 00007f58fe216090 R15: 00007fffa8bbce28 [ 191.132364][ T7131] [ 191.725646][ T7157] netlink: 'syz.0.960': attribute type 33 has an invalid length. [ 192.234263][ T7175] FAULT_INJECTION: forcing a failure. [ 192.234263][ T7175] name failslab, interval 1, probability 0, space 0, times 0 [ 192.282225][ T7175] CPU: 1 PID: 7175 Comm: syz.2.968 Not tainted syzkaller #0 [ 192.289567][ T7175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.299643][ T7175] Call Trace: [ 192.302948][ T7175] [ 192.305899][ T7175] dump_stack_lvl+0x188/0x24e [ 192.310689][ T7175] ? show_regs_print_info+0x12/0x12 [ 192.315907][ T7175] ? load_image+0x400/0x400 [ 192.320433][ T7175] ? __might_sleep+0xd0/0xd0 [ 192.325044][ T7175] ? __lock_acquire+0x7d10/0x7d10 [ 192.330104][ T7175] should_fail_ex+0x399/0x4d0 [ 192.334803][ T7175] should_failslab+0x5/0x20 [ 192.339314][ T7175] slab_pre_alloc_hook+0x59/0x310 [ 192.344346][ T7175] ? __lock_acquire+0x7d10/0x7d10 [ 192.349395][ T7175] ? kvmalloc_node+0x6c/0x180 [ 192.354093][ T7175] __kmem_cache_alloc_node+0x4f/0x260 [ 192.359478][ T7175] ? schedule_delayed_monitor_work+0x160/0x160 [ 192.365653][ T7175] ? kvmalloc_node+0x6c/0x180 [ 192.370345][ T7175] __kmalloc_node+0xa0/0x240 [ 192.374956][ T7175] kvmalloc_node+0x6c/0x180 [ 192.379475][ T7175] bpf_test_run_xdp_live+0x1dd/0x1a90 [ 192.384869][ T7175] ? 0xffffffffa0004440 [ 192.389059][ T7175] ? text_poke_copy+0x79/0x90 [ 192.393756][ T7175] ? 0xffffffffa0004440 [ 192.397919][ T7175] ? 0xffffffffa0004440 [ 192.402082][ T7175] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 192.408008][ T7175] ? 0xffffffffa0004440 [ 192.412178][ T7175] ? xdp_convert_md_to_buff+0x330/0x330 [ 192.417761][ T7175] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 192.424020][ T7175] ? bpf_test_init+0x119/0x140 [ 192.428798][ T7175] ? xdp_convert_md_to_buff+0x5b/0x330 [ 192.434265][ T7175] bpf_prog_test_run_xdp+0x736/0xf10 [ 192.439578][ T7175] ? dev_put+0x80/0x80 [ 192.443659][ T7175] ? bpf_prog_test_run+0x312/0x390 [ 192.448779][ T7175] ? dev_put+0x80/0x80 [ 192.452858][ T7175] bpf_prog_test_run+0x31e/0x390 [ 192.457818][ T7175] __sys_bpf+0x62b/0x780 [ 192.462069][ T7175] ? bpf_link_show_fdinfo+0x380/0x380 [ 192.467458][ T7175] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 192.473628][ T7175] __x64_sys_bpf+0x78/0x90 [ 192.478065][ T7175] do_syscall_64+0x4c/0xa0 [ 192.482499][ T7175] ? clear_bhb_loop+0x60/0xb0 [ 192.487184][ T7175] ? clear_bhb_loop+0x60/0xb0 [ 192.491874][ T7175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.497779][ T7175] RIP: 0033:0x7fc20599ce59 [ 192.502204][ T7175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.521818][ T7175] RSP: 002b:00007fc20678e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.530242][ T7175] RAX: ffffffffffffffda RBX: 00007fc205c15fa0 RCX: 00007fc20599ce59 [ 192.538220][ T7175] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 192.546194][ T7175] RBP: 00007fc20678e090 R08: 0000000000000000 R09: 0000000000000000 [ 192.554168][ T7175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.562141][ T7175] R13: 00007fc205c16038 R14: 00007fc205c15fa0 R15: 00007fff96eeff38 [ 192.570126][ T7175] [ 192.617354][ T7182] netlink: 'syz.1.972': attribute type 10 has an invalid length. [ 192.894191][ T7188] netlink: 'syz.4.974': attribute type 33 has an invalid length. [ 192.922525][ T7188] __nla_validate_parse: 7 callbacks suppressed [ 192.922558][ T7188] netlink: 152 bytes leftover after parsing attributes in process `syz.4.974'. [ 192.970565][ T7194] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.975'. [ 193.831780][ T7214] netlink: 14 bytes leftover after parsing attributes in process `syz.1.984'. [ 193.846522][ T7217] netlink: 'syz.2.985': attribute type 10 has an invalid length. [ 193.857012][ T7217] netlink: 55 bytes leftover after parsing attributes in process `syz.2.985'. [ 193.889018][ T7217] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.985'. [ 194.079973][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.086347][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.218305][ T7219] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.986'. [ 194.836338][ T7246] netlink: 'syz.2.997': attribute type 10 has an invalid length. [ 194.859965][ T7246] netlink: 55 bytes leftover after parsing attributes in process `syz.2.997'. [ 194.900571][ T7246] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.997'. [ 195.246818][ T7264] netlink: 'syz.4.1002': attribute type 12 has an invalid length. [ 195.268235][ T7264] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1002'. [ 196.382331][ T7289] IPv6: Can't replace route, no match found [ 196.450926][ T7295] netlink: 'syz.1.1012': attribute type 10 has an invalid length. [ 196.546317][ T7295] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1012'. [ 199.308990][ T7321] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 199.581763][ T7331] __nla_validate_parse: 2 callbacks suppressed [ 199.581779][ T7331] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1023'. [ 199.776326][ T7341] FAULT_INJECTION: forcing a failure. [ 199.776326][ T7341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.797315][ T7341] CPU: 0 PID: 7341 Comm: syz.3.1025 Not tainted syzkaller #0 [ 199.804730][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.814804][ T7341] Call Trace: [ 199.818096][ T7341] [ 199.821036][ T7341] dump_stack_lvl+0x188/0x24e [ 199.825746][ T7341] ? show_regs_print_info+0x12/0x12 [ 199.830971][ T7341] ? load_image+0x400/0x400 [ 199.835506][ T7341] ? __lock_acquire+0x7d10/0x7d10 [ 199.840564][ T7341] should_fail_ex+0x399/0x4d0 [ 199.845264][ T7341] _copy_from_user+0x2c/0x170 [ 199.849972][ T7341] iovec_from_user+0x143/0x360 [ 199.854762][ T7341] __import_iovec+0x6d/0x500 [ 199.859370][ T7341] ? __might_fault+0xc2/0x120 [ 199.864079][ T7341] import_iovec+0x6f/0xa0 [ 199.868429][ T7341] ___sys_sendmsg+0x252/0x360 [ 199.873137][ T7341] ? __sys_sendmsg+0x290/0x290 [ 199.878091][ T7341] ? __lock_acquire+0x7d10/0x7d10 [ 199.879270][ T7344] netlink: 'syz.2.1026': attribute type 21 has an invalid length. [ 199.883148][ T7341] __se_sys_sendmsg+0x1bb/0x2a0 [ 199.883178][ T7341] ? __x64_sys_sendmsg+0x80/0x80 [ 199.883213][ T7341] ? lockdep_hardirqs_on+0x94/0x140 [ 199.905960][ T7341] do_syscall_64+0x4c/0xa0 [ 199.907531][ T7344] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1026'. [ 199.910379][ T7341] ? clear_bhb_loop+0x60/0xb0 [ 199.910403][ T7341] ? clear_bhb_loop+0x60/0xb0 [ 199.928755][ T7341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.934666][ T7341] RIP: 0033:0x7f58fdf9ce59 [ 199.939093][ T7341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.958720][ T7341] RSP: 002b:00007f58fedd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.967163][ T7341] RAX: ffffffffffffffda RBX: 00007f58fe215fa0 RCX: 00007f58fdf9ce59 [ 199.975152][ T7341] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 199.983141][ T7341] RBP: 00007f58fedd8090 R08: 0000000000000000 R09: 0000000000000000 [ 199.991218][ T7341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.999210][ T7341] R13: 00007f58fe216038 R14: 00007f58fe215fa0 R15: 00007fffa8bbce28 [ 200.007223][ T7341] [ 200.064781][ T7347] netlink: 'syz.1.1027': attribute type 10 has an invalid length. [ 200.077539][ T7347] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1027'. [ 200.096091][ T7347] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1027'. [ 200.908415][ T7372] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1036'. [ 200.944937][ T7370] netlink: 'syz.2.1037': attribute type 10 has an invalid length. [ 201.323022][ T7386] netlink: 'syz.2.1043': attribute type 29 has an invalid length. [ 201.348826][ T7386] netlink: 'syz.2.1043': attribute type 29 has an invalid length. [ 201.416475][ T7388] netlink: 16278 bytes leftover after parsing attributes in process `syz.4.1044'. [ 202.495272][ T7426] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.1058'. [ 203.605481][ T7467] netlink: 16278 bytes leftover after parsing attributes in process `syz.1.1071'. [ 205.006557][ T7497] netlink: 16278 bytes leftover after parsing attributes in process `syz.1.1083'. [ 205.075388][ T7498] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1080'. [ 207.732184][ T7493] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 208.458985][ T7525] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.1092'. [ 208.493587][ T7525] netlink: zone id is out of range [ 208.514915][ T7525] netlink: zone id is out of range [ 208.624498][ T7525] netlink: zone id is out of range [ 208.644434][ T7525] netlink: zone id is out of range [ 208.649998][ T7525] netlink: zone id is out of range [ 208.656351][ T7525] netlink: zone id is out of range [ 208.663815][ T7525] netlink: zone id is out of range [ 208.671847][ T7525] netlink: zone id is out of range [ 208.688201][ T7525] netlink: zone id is out of range [ 208.721086][ T7532] device syzkaller0 entered promiscuous mode [ 208.756026][ T7536] netlink: 'syz.0.1097': attribute type 1 has an invalid length. [ 209.359189][ T7555] FAULT_INJECTION: forcing a failure. [ 209.359189][ T7555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.380427][ T7555] CPU: 1 PID: 7555 Comm: syz.0.1104 Not tainted syzkaller #0 [ 209.387854][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.397926][ T7555] Call Trace: [ 209.401216][ T7555] [ 209.404164][ T7555] dump_stack_lvl+0x188/0x24e [ 209.408886][ T7555] ? show_regs_print_info+0x12/0x12 [ 209.414114][ T7555] ? load_image+0x400/0x400 [ 209.418659][ T7555] ? __lock_acquire+0x7d10/0x7d10 [ 209.423718][ T7555] should_fail_ex+0x399/0x4d0 [ 209.428417][ T7555] _copy_from_user+0x2c/0x170 [ 209.433117][ T7555] __sys_bpf+0x2ea/0x780 [ 209.437386][ T7555] ? bpf_link_show_fdinfo+0x380/0x380 [ 209.442796][ T7555] ? lock_chain_count+0x20/0x20 [ 209.447675][ T7555] __x64_sys_bpf+0x78/0x90 [ 209.452108][ T7555] do_syscall_64+0x4c/0xa0 [ 209.456542][ T7555] ? clear_bhb_loop+0x60/0xb0 [ 209.461237][ T7555] ? clear_bhb_loop+0x60/0xb0 [ 209.465931][ T7555] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.471838][ T7555] RIP: 0033:0x7fa31879ce59 [ 209.476267][ T7555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.496030][ T7555] RSP: 002b:00007fa319718028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.504461][ T7555] RAX: ffffffffffffffda RBX: 00007fa318a15fa0 RCX: 00007fa31879ce59 [ 209.512449][ T7555] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 209.520437][ T7555] RBP: 00007fa319718090 R08: 0000000000000000 R09: 0000000000000000 [ 209.528431][ T7555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.536420][ T7555] R13: 00007fa318a16038 R14: 00007fa318a15fa0 R15: 00007ffd1fb82ed8 [ 209.544421][ T7555] [ 213.637712][ T7557] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.1105'. [ 214.317511][ T7580] delete_channel: no stack [ 214.377896][ T7598] netlink: 16278 bytes leftover after parsing attributes in process `syz.1.1118'. [ 214.593019][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1120'. [ 215.226940][ T7624] netlink: 'syz.2.1129': attribute type 12 has an invalid length. [ 215.244633][ T7624] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1129'. [ 215.460072][ T7635] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.1134'. [ 215.633155][ T7639] netlink: 'syz.3.1136': attribute type 21 has an invalid length. [ 216.493686][ T7658] netlink: 'syz.0.1142': attribute type 10 has an invalid length. [ 216.557704][ T7658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.577084][ T7658] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 217.110629][ T7673] netlink: 16278 bytes leftover after parsing attributes in process `syz.3.1148'. [ 217.293614][ T7679] netlink: 'syz.3.1151': attribute type 29 has an invalid length. [ 217.301960][ T7679] netlink: 'syz.3.1151': attribute type 29 has an invalid length. [ 217.312219][ T7679] netlink: 'syz.3.1151': attribute type 29 has an invalid length. [ 218.435855][ T7710] netlink: 16278 bytes leftover after parsing attributes in process `syz.3.1161'. [ 218.556881][ T7714] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1164'. [ 218.719513][ T7716] netlink: 'syz.4.1166': attribute type 2 has an invalid length. [ 218.753647][ T7716] netlink: 'syz.4.1166': attribute type 8 has an invalid length. [ 218.766155][ T7716] netlink: 'syz.4.1166': attribute type 9 has an invalid length. [ 218.781869][ T7716] netlink: 'syz.4.1166': attribute type 10 has an invalid length. [ 218.800078][ T7716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1166'. [ 219.641401][ T7745] netlink: 16278 bytes leftover after parsing attributes in process `syz.1.1175'. [ 219.808504][ T7759] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1176'. [ 219.954232][ T7763] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1180'. [ 220.112754][ T7768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1182'. [ 221.204387][ T7785] device syzkaller0 entered promiscuous mode [ 221.226704][ T7797] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.1191'. [ 222.811653][ T7799] FAULT_INJECTION: forcing a failure. [ 222.811653][ T7799] name failslab, interval 1, probability 0, space 0, times 0 [ 222.824573][ T7799] CPU: 1 PID: 7799 Comm: syz.1.1193 Not tainted syzkaller #0 [ 222.831975][ T7799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.842046][ T7799] Call Trace: [ 222.845332][ T7799] [ 222.848260][ T7799] dump_stack_lvl+0x188/0x24e [ 222.852935][ T7799] ? show_regs_print_info+0x12/0x12 [ 222.858147][ T7799] ? load_image+0x400/0x400 [ 222.862655][ T7799] ? __might_sleep+0xd0/0xd0 [ 222.867245][ T7799] ? __lock_acquire+0x7d10/0x7d10 [ 222.872276][ T7799] should_fail_ex+0x399/0x4d0 [ 222.876970][ T7799] should_failslab+0x5/0x20 [ 222.882166][ T7799] slab_pre_alloc_hook+0x59/0x310 [ 222.887197][ T7799] ? __schedule+0x119d/0x40e0 [ 222.891880][ T7799] ? rtnl_newlink+0x10c/0x20a0 [ 222.896653][ T7799] __kmem_cache_alloc_node+0x4f/0x260 [ 222.902026][ T7799] ? rtnl_newlink+0x10c/0x20a0 [ 222.906795][ T7799] kmalloc_trace+0x26/0xe0 [ 222.911200][ T7799] ? rtnl_setlink+0x510/0x510 [ 222.915964][ T7799] rtnl_newlink+0x10c/0x20a0 [ 222.920553][ T7799] ? __schedule+0x11d9/0x40e0 [ 222.925248][ T7799] ? __mutex_lock+0x806/0xaf0 [ 222.929937][ T7799] ? __lock_acquire+0x7d10/0x7d10 [ 222.935040][ T7799] ? do_raw_spin_lock+0x128/0x2f0 [ 222.940053][ T7799] ? rtnl_setlink+0x510/0x510 [ 222.944731][ T7799] ? __rwlock_init+0x140/0x140 [ 222.949501][ T7799] ? do_raw_spin_unlock+0x11d/0x230 [ 222.954691][ T7799] ? __mutex_lock+0x810/0xaf0 [ 222.959358][ T7799] ? __mutex_lock+0x3b2/0xaf0 [ 222.964040][ T7799] ? rtnetlink_rcv_msg+0x824/0xfc0 [ 222.969166][ T7799] ? mutex_lock_nested+0x10/0x10 [ 222.974099][ T7799] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 222.979201][ T7799] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 222.984393][ T7799] ? rtnl_setlink+0x510/0x510 [ 222.989074][ T7799] rtnetlink_rcv_msg+0x87c/0xfc0 [ 222.994021][ T7799] ? rtnetlink_bind+0x80/0x80 [ 222.998708][ T7799] ? __local_bh_enable_ip+0x13e/0x1c0 [ 223.004077][ T7799] ? _local_bh_enable+0xa0/0xa0 [ 223.008929][ T7799] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 223.014642][ T7799] ? perf_trace_preemptirq_template+0x268/0x320 [ 223.020872][ T7799] ? irqentry_enter+0x33/0x50 [ 223.025555][ T7799] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 223.031548][ T7799] ? lock_chain_count+0x20/0x20 [ 223.036405][ T7799] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 223.042567][ T7799] ? lockdep_hardirqs_on+0x94/0x140 [ 223.047774][ T7799] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 223.053922][ T7799] netlink_rcv_skb+0x1fb/0x450 [ 223.058678][ T7799] ? rtnetlink_bind+0x80/0x80 [ 223.063356][ T7799] ? netlink_ack+0x1170/0x1170 [ 223.068132][ T7799] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.073325][ T7799] netlink_unicast+0x74d/0x8d0 [ 223.078084][ T7799] netlink_sendmsg+0x8ad/0xbd0 [ 223.082855][ T7799] ? netlink_getsockopt+0x550/0x550 [ 223.088066][ T7799] ? aa_sock_msg_perm+0x94/0x150 [ 223.092987][ T7799] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 223.098346][ T7799] ? security_socket_sendmsg+0x7c/0xa0 [ 223.103815][ T7799] ? netlink_getsockopt+0x550/0x550 [ 223.109034][ T7799] ____sys_sendmsg+0x5be/0x970 [ 223.113799][ T7799] ? __sys_sendmsg_sock+0x30/0x30 [ 223.118822][ T7799] ? ___sys_sendmsg+0x287/0x360 [ 223.123680][ T7799] ___sys_sendmsg+0x2a2/0x360 [ 223.128370][ T7799] ? __sys_sendmsg+0x290/0x290 [ 223.133148][ T7799] __se_sys_sendmsg+0x1bb/0x2a0 [ 223.137989][ T7799] ? __x64_sys_sendmsg+0x80/0x80 [ 223.142939][ T7799] ? lockdep_hardirqs_on+0x94/0x140 [ 223.148143][ T7799] do_syscall_64+0x4c/0xa0 [ 223.152558][ T7799] ? clear_bhb_loop+0x60/0xb0 [ 223.157243][ T7799] ? clear_bhb_loop+0x60/0xb0 [ 223.161927][ T7799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.167828][ T7799] RIP: 0033:0x7fd96059ce59 [ 223.172236][ T7799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.191979][ T7799] RSP: 002b:00007fd96140f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.200407][ T7799] RAX: ffffffffffffffda RBX: 00007fd960815fa0 RCX: 00007fd96059ce59 [ 223.208372][ T7799] RDX: 0200000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 223.216331][ T7799] RBP: 00007fd96140f090 R08: 0000000000000000 R09: 0000000000000000 [ 223.224302][ T7799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.232291][ T7799] R13: 00007fd960816038 R14: 00007fd960815fa0 R15: 00007ffe3647e688 [ 223.240278][ T7799] [ 223.244870][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1192'. [ 223.261303][ T7801] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1192'. [ 223.280564][ T7801] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1192'. [ 223.313843][ T7801] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1192'. [ 223.960217][ T7821] validate_nla: 9 callbacks suppressed [ 223.960238][ T7821] netlink: 'syz.3.1200': attribute type 10 has an invalid length. [ 224.300978][ T7833] FAULT_INJECTION: forcing a failure. [ 224.300978][ T7833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.329781][ T7833] CPU: 1 PID: 7833 Comm: syz.1.1202 Not tainted syzkaller #0 [ 224.337212][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 224.347288][ T7833] Call Trace: [ 224.350582][ T7833] [ 224.353525][ T7833] dump_stack_lvl+0x188/0x24e [ 224.358229][ T7833] ? show_regs_print_info+0x12/0x12 [ 224.363450][ T7833] ? load_image+0x400/0x400 [ 224.367978][ T7833] ? __lock_acquire+0x7d10/0x7d10 [ 224.373023][ T7833] ? snprintf+0xe5/0x140 [ 224.377286][ T7833] should_fail_ex+0x399/0x4d0 [ 224.382000][ T7833] _copy_to_user+0x2c/0x130 [ 224.386531][ T7833] simple_read_from_buffer+0xe3/0x150 [ 224.391923][ T7833] proc_fail_nth_read+0x1a6/0x220 [ 224.396972][ T7833] ? proc_fault_inject_write+0x310/0x310 [ 224.402626][ T7833] ? fsnotify_perm+0x248/0x550 [ 224.407397][ T7833] ? proc_fault_inject_write+0x310/0x310 [ 224.413027][ T7833] vfs_read+0x2de/0xa00 [ 224.417182][ T7833] ? kernel_read+0x1e0/0x1e0 [ 224.421767][ T7833] ? __fget_files+0x28/0x4b0 [ 224.426352][ T7833] ? __fget_files+0x28/0x4b0 [ 224.430934][ T7833] ? __fget_files+0x43d/0x4b0 [ 224.435610][ T7833] ? __fdget_pos+0x2ae/0x360 [ 224.440192][ T7833] ? ksys_read+0x71/0x250 [ 224.444517][ T7833] ksys_read+0x14c/0x250 [ 224.448756][ T7833] ? vfs_write+0xa30/0xa30 [ 224.453173][ T7833] ? lockdep_hardirqs_on+0x94/0x140 [ 224.458363][ T7833] do_syscall_64+0x4c/0xa0 [ 224.462784][ T7833] ? clear_bhb_loop+0x60/0xb0 [ 224.467452][ T7833] ? clear_bhb_loop+0x60/0xb0 [ 224.472128][ T7833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.478013][ T7833] RIP: 0033:0x7fd96055d68e [ 224.482426][ T7833] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 224.502027][ T7833] RSP: 002b:00007fd96140efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 224.510429][ T7833] RAX: ffffffffffffffda RBX: 00007fd96140f6c0 RCX: 00007fd96055d68e [ 224.518392][ T7833] RDX: 000000000000000f RSI: 00007fd96140f0a0 RDI: 0000000000000007 [ 224.526361][ T7833] RBP: 00007fd96140f090 R08: 0000000000000000 R09: 0000000000000000 [ 224.534319][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.542276][ T7833] R13: 00007fd960816038 R14: 00007fd960815fa0 R15: 00007ffe3647e688 [ 224.550249][ T7833] [ 224.643457][ T7821] team0 (unregistering): Port device team_slave_0 removed [ 224.687265][ T7821] team0 (unregistering): Port device team_slave_1 removed [ 224.800770][ T7844] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1205'. [ 225.144416][ T7855] netlink: 'syz.2.1209': attribute type 2 has an invalid length. [ 225.244239][ T7855] netlink: 'syz.2.1209': attribute type 8 has an invalid length. [ 225.341301][ T7855] netlink: 'syz.2.1209': attribute type 9 has an invalid length. [ 225.412557][ T7855] netlink: 'syz.2.1209': attribute type 10 has an invalid length. [ 225.463483][ T7855] netlink: 'syz.2.1209': attribute type 11 has an invalid length. [ 225.495511][ T7855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1209'. [ 225.937719][ T7867] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1212'. [ 226.143970][ T7877] netlink: 'syz.4.1216': attribute type 2 has an invalid length. [ 226.296759][ T7881] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1217'. [ 226.883875][ T7887] netlink: 'syz.3.1220': attribute type 2 has an invalid length. [ 226.892056][ T7887] netlink: 'syz.3.1220': attribute type 9 has an invalid length. [ 226.899917][ T7887] netlink: 'syz.3.1220': attribute type 10 has an invalid length. [ 226.908418][ T7887] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1220'. [ 227.104902][ T7891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1223'. [ 227.315205][ T7899] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1225'. [ 227.335141][ T7899] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1225'. [ 227.560316][ T7910] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1228'. [ 227.745210][ T7920] FAULT_INJECTION: forcing a failure. [ 227.745210][ T7920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.746890][ T7918] device syzkaller0 entered promiscuous mode [ 227.762621][ T7920] CPU: 1 PID: 7920 Comm: syz.2.1233 Not tainted syzkaller #0 [ 227.771941][ T7920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.782006][ T7920] Call Trace: [ 227.785291][ T7920] [ 227.788232][ T7920] dump_stack_lvl+0x188/0x24e [ 227.792919][ T7920] ? show_regs_print_info+0x12/0x12 [ 227.798129][ T7920] ? load_image+0x400/0x400 [ 227.802629][ T7920] ? __might_fault+0xa6/0x120 [ 227.807303][ T7920] should_fail_ex+0x399/0x4d0 [ 227.812072][ T7920] copyin+0x1b/0x120 [ 227.815963][ T7920] _copy_from_iter+0x447/0x1130 [ 227.820852][ T7920] ? copyout_mc+0x110/0x110 [ 227.825355][ T7920] ? __virt_addr_valid+0x188/0x540 [ 227.830557][ T7920] ? __virt_addr_valid+0x188/0x540 [ 227.835668][ T7920] ? __virt_addr_valid+0x465/0x540 [ 227.840779][ T7920] ? __check_object_size+0x500/0xa40 [ 227.846074][ T7920] netlink_sendmsg+0x755/0xbd0 [ 227.850853][ T7920] ? netlink_getsockopt+0x550/0x550 [ 227.856049][ T7920] ? aa_sock_msg_perm+0x94/0x150 [ 227.861008][ T7920] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 227.866286][ T7920] ? security_socket_sendmsg+0x7c/0xa0 [ 227.871754][ T7920] ? netlink_getsockopt+0x550/0x550 [ 227.876956][ T7920] ____sys_sendmsg+0x5be/0x970 [ 227.881724][ T7920] ? __sys_sendmsg_sock+0x30/0x30 [ 227.886741][ T7920] ? __import_iovec+0x315/0x500 [ 227.891589][ T7920] ? import_iovec+0x6f/0xa0 [ 227.896086][ T7920] ___sys_sendmsg+0x2a2/0x360 [ 227.900768][ T7920] ? __sys_sendmsg+0x290/0x290 [ 227.905561][ T7920] ? __lock_acquire+0x7d10/0x7d10 [ 227.910600][ T7920] __se_sys_sendmsg+0x1bb/0x2a0 [ 227.915457][ T7920] ? __x64_sys_sendmsg+0x80/0x80 [ 227.920402][ T7920] ? lockdep_hardirqs_on+0x94/0x140 [ 227.925594][ T7920] do_syscall_64+0x4c/0xa0 [ 227.930005][ T7920] ? clear_bhb_loop+0x60/0xb0 [ 227.934674][ T7920] ? clear_bhb_loop+0x60/0xb0 [ 227.939349][ T7920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.945234][ T7920] RIP: 0033:0x7fc20599ce59 [ 227.949645][ T7920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.969248][ T7920] RSP: 002b:00007fc20678e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.977753][ T7920] RAX: ffffffffffffffda RBX: 00007fc205c15fa0 RCX: 00007fc20599ce59 [ 227.985735][ T7920] RDX: 0000000001000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 227.993695][ T7920] RBP: 00007fc20678e090 R08: 0000000000000000 R09: 0000000000000000 [ 228.001688][ T7920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.009646][ T7920] R13: 00007fc205c16038 R14: 00007fc205c15fa0 R15: 00007fff96eeff38 [ 228.017622][ T7920] [ 228.071832][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 228.072866][ T7918] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1232'. [ 228.162443][ T7921] net_ratelimit: 3661 callbacks suppressed [ 228.162458][ T7921] syzkaller0: mtu less than device minimum [ 228.203537][ T7918] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 228.853378][ T7932] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 228.971204][ T7948] FAULT_INJECTION: forcing a failure. [ 228.971204][ T7948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.998660][ T7948] CPU: 0 PID: 7948 Comm: syz.1.1238 Not tainted syzkaller #0 [ 229.006088][ T7948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 229.016161][ T7948] Call Trace: [ 229.019575][ T7948] [ 229.024016][ T7948] dump_stack_lvl+0x188/0x24e [ 229.029426][ T7948] ? show_regs_print_info+0x12/0x12 [ 229.034658][ T7948] ? load_image+0x400/0x400 [ 229.039327][ T7948] ? __lock_acquire+0x7d10/0x7d10 [ 229.044382][ T7948] should_fail_ex+0x399/0x4d0 [ 229.049076][ T7948] _copy_from_user+0x2c/0x170 [ 229.053777][ T7948] ____sys_sendmsg+0x30a/0x970 [ 229.058564][ T7948] ? __sys_sendmsg_sock+0x30/0x30 [ 229.063695][ T7948] ? __import_iovec+0x315/0x500 [ 229.068571][ T7948] ? import_iovec+0x6f/0xa0 [ 229.073094][ T7948] ___sys_sendmsg+0x2a2/0x360 [ 229.077810][ T7948] ? __sys_sendmsg+0x290/0x290 [ 229.082601][ T7948] ? __lock_acquire+0x7d10/0x7d10 [ 229.087835][ T7948] __se_sys_sendmsg+0x1bb/0x2a0 [ 229.092682][ T7948] ? __x64_sys_sendmsg+0x80/0x80 [ 229.097615][ T7948] ? lockdep_hardirqs_on+0x94/0x140 [ 229.102815][ T7948] do_syscall_64+0x4c/0xa0 [ 229.107249][ T7948] ? clear_bhb_loop+0x60/0xb0 [ 229.111935][ T7948] ? clear_bhb_loop+0x60/0xb0 [ 229.116601][ T7948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.122516][ T7948] RIP: 0033:0x7fd96059ce59 [ 229.126927][ T7948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.146540][ T7948] RSP: 002b:00007fd96140f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.154958][ T7948] RAX: ffffffffffffffda RBX: 00007fd960815fa0 RCX: 00007fd96059ce59 [ 229.162946][ T7948] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 229.168772][ T7954] validate_nla: 8 callbacks suppressed [ 229.168818][ T7954] netlink: 'syz.4.1239': attribute type 10 has an invalid length. [ 229.170919][ T7948] RBP: 00007fd96140f090 R08: 0000000000000000 R09: 0000000000000000 [ 229.170936][ T7948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.170947][ T7948] R13: 00007fd960816038 R14: 00007fd960815fa0 R15: 00007ffe3647e688 [ 229.170973][ T7948] [ 229.830467][ T7974] netlink: 'syz.2.1247': attribute type 21 has an invalid length. [ 229.879923][ T7974] netlink: 'syz.2.1247': attribute type 11 has an invalid length. [ 229.963002][ T7985] netlink: 'syz.0.1250': attribute type 2 has an invalid length. [ 229.997530][ T7985] netlink: 'syz.0.1250': attribute type 8 has an invalid length. [ 230.020623][ T7985] netlink: 'syz.0.1250': attribute type 9 has an invalid length. [ 230.044782][ T7985] netlink: 'syz.0.1250': attribute type 10 has an invalid length. [ 230.058092][ T7985] netlink: 'syz.0.1250': attribute type 11 has an invalid length. [ 230.066573][ T7985] __nla_validate_parse: 4 callbacks suppressed [ 230.066588][ T7985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1250'. [ 230.083924][ T7989] device wlan1 entered promiscuous mode [ 230.796538][ T7997] netlink: 'syz.0.1255': attribute type 10 has an invalid length. [ 230.831851][ T7997] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1255'. [ 230.847482][ T7999] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1256'. [ 230.865036][ T7997] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1255'. [ 234.489129][ T8034] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1271'. [ 234.588646][ T8035] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1272'. [ 234.843155][ T8048] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1277'. [ 235.789300][ T8066] netlink: 'syz.1.1285': attribute type 3 has an invalid length. [ 235.849586][ T8066] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1285'. [ 235.963031][ T8074] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1287'. [ 236.390471][ T8082] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1291'. [ 236.757506][ T8095] netlink: 'syz.3.1295': attribute type 13 has an invalid length. [ 236.784737][ T8095] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1295'. [ 236.840860][ T8095] erspan0: refused to change device tx_queue_len [ 236.856071][ T8095] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 237.117543][ T8097] IPv6: Can't replace route, no match found [ 237.124935][ T8106] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1299'. [ 237.585681][ T8124] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1305'. [ 237.858844][ T8132] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1308'. [ 237.901686][ T8132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.961345][ T8134] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1311'. [ 238.033037][ T8132] IPv6: Can't replace route, no match found [ 238.818246][ T8162] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1319'. [ 239.502954][ T8190] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1330'. [ 239.587011][ T8192] netlink: 'syz.3.1330': attribute type 17 has an invalid length. [ 239.660598][ T8192] netlink: 'syz.3.1330': attribute type 16 has an invalid length. [ 240.426000][ T8216] netlink: 'syz.1.1341': attribute type 6 has an invalid length. [ 240.658266][ T8223] netlink: 'syz.3.1342': attribute type 10 has an invalid length. [ 242.020441][ T8261] netlink: 'syz.0.1357': attribute type 10 has an invalid length. [ 242.047567][ T8261] __nla_validate_parse: 4 callbacks suppressed [ 242.047606][ T8261] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1357'. [ 242.131541][ T8268] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1357'. [ 243.857715][ T8291] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1366'. [ 243.886113][ T8291] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 243.896990][ T8291] CPU: 1 PID: 8291 Comm: syz.1.1366 Not tainted syzkaller #0 [ 243.904418][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.914511][ T8291] Call Trace: [ 243.917808][ T8291] [ 243.920756][ T8291] dump_stack_lvl+0x188/0x24e [ 243.925473][ T8291] ? show_regs_print_info+0x12/0x12 [ 243.930703][ T8291] ? load_image+0x400/0x400 [ 243.935248][ T8291] sysfs_warn_dup+0x8a/0xa0 [ 243.939782][ T8291] sysfs_do_create_link_sd+0xc0/0x110 [ 243.945191][ T8291] device_add+0x7ed/0xfb0 [ 243.949560][ T8291] wiphy_register+0x1d9f/0x2ac0 [ 243.954553][ T8291] ? cfg80211_event_work+0x40/0x40 [ 243.959699][ T8291] ? minstrel_ht_alloc+0x894/0xa20 [ 243.964853][ T8291] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 243.970952][ T8291] ieee80211_register_hw+0x2d00/0x39f0 [ 243.976458][ T8291] ? ieee80211_register_hw+0xf41/0x39f0 [ 243.982036][ T8291] ? ieee80211_register_hw+0xe41/0x39f0 [ 243.987625][ T8291] ? ieee80211_tasklet_handler+0x20/0x20 [ 243.993310][ T8291] ? memset+0x1e/0x40 [ 243.997327][ T8291] ? __hrtimer_init+0x186/0x270 [ 244.002216][ T8291] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 244.007989][ T8291] hwsim_new_radio_nl+0xafa/0xce0 [ 244.013062][ T8291] genl_family_rcv_msg_doit+0x22a/0x330 [ 244.018632][ T8291] ? end_current_label_crit_section+0x170/0x170 [ 244.024909][ T8291] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 244.030839][ T8291] ? bpf_lsm_capable+0x5/0x10 [ 244.035542][ T8291] ? security_capable+0x85/0xb0 [ 244.040428][ T8291] genl_rcv_msg+0x604/0x790 [ 244.044976][ T8291] ? genl_bind+0x360/0x360 [ 244.049409][ T8291] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 244.055783][ T8291] netlink_rcv_skb+0x1fb/0x450 [ 244.060582][ T8291] ? genl_bind+0x360/0x360 [ 244.065037][ T8291] ? netlink_ack+0x1170/0x1170 [ 244.069842][ T8291] ? down_read+0x1a8/0x2d0 [ 244.074294][ T8291] genl_rcv+0x24/0x40 [ 244.078326][ T8291] netlink_unicast+0x74d/0x8d0 [ 244.083140][ T8291] netlink_sendmsg+0x8ad/0xbd0 [ 244.087944][ T8291] ? netlink_getsockopt+0x550/0x550 [ 244.093181][ T8291] ? aa_sock_msg_perm+0x94/0x150 [ 244.098165][ T8291] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 244.103479][ T8291] ? security_socket_sendmsg+0x7c/0xa0 [ 244.108975][ T8291] ? netlink_getsockopt+0x550/0x550 [ 244.114212][ T8291] ____sys_sendmsg+0x5be/0x970 [ 244.119017][ T8291] ? __sys_sendmsg_sock+0x30/0x30 [ 244.124083][ T8291] ? __import_iovec+0x315/0x500 [ 244.128968][ T8291] ? import_iovec+0x6f/0xa0 [ 244.133514][ T8291] ___sys_sendmsg+0x2a2/0x360 [ 244.138224][ T8291] ? try_to_wake_up+0x67c/0x1080 [ 244.143195][ T8291] ? __sys_sendmsg+0x290/0x290 [ 244.148040][ T8291] __se_sys_sendmsg+0x1bb/0x2a0 [ 244.152927][ T8291] ? __x64_sys_sendmsg+0x80/0x80 [ 244.157911][ T8291] ? lockdep_hardirqs_on+0x94/0x140 [ 244.163146][ T8291] do_syscall_64+0x4c/0xa0 [ 244.167590][ T8291] ? clear_bhb_loop+0x60/0xb0 [ 244.172305][ T8291] ? clear_bhb_loop+0x60/0xb0 [ 244.177017][ T8291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.182932][ T8291] RIP: 0033:0x7fd96059ce59 [ 244.187364][ T8291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.206999][ T8291] RSP: 002b:00007fd96140f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.215447][ T8291] RAX: ffffffffffffffda RBX: 00007fd960815fa0 RCX: 00007fd96059ce59 [ 244.223439][ T8291] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 244.231438][ T8291] RBP: 00007fd960632d6f R08: 0000000000000000 R09: 0000000000000000 [ 244.239430][ T8291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.247421][ T8291] R13: 00007fd960816038 R14: 00007fd960815fa0 R15: 00007ffe3647e688 [ 244.255432][ T8291] [ 246.576257][ T8340] FAULT_INJECTION: forcing a failure. [ 246.576257][ T8340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.704170][ T8340] CPU: 0 PID: 8340 Comm: syz.3.1380 Not tainted syzkaller #0 [ 246.711594][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.721667][ T8340] Call Trace: [ 246.724965][ T8340] [ 246.727903][ T8340] dump_stack_lvl+0x188/0x24e [ 246.732604][ T8340] ? show_regs_print_info+0x12/0x12 [ 246.737825][ T8340] ? load_image+0x400/0x400 [ 246.742361][ T8340] ? __lock_acquire+0x7d10/0x7d10 [ 246.747406][ T8340] should_fail_ex+0x399/0x4d0 [ 246.752097][ T8340] _copy_to_user+0x2c/0x130 [ 246.756622][ T8340] generic_map_lookup_batch+0x7cf/0xc00 [ 246.762201][ T8340] ? bpf_map_update_value+0x670/0x670 [ 246.767595][ T8340] ? __fdget+0x17c/0x200 [ 246.771857][ T8340] ? bpf_map_update_value+0x670/0x670 [ 246.777248][ T8340] bpf_map_do_batch+0x2c8/0x600 [ 246.782125][ T8340] ? bpf_lsm_bpf+0x5/0x10 [ 246.786476][ T8340] ? security_bpf+0x7a/0xa0 [ 246.791007][ T8340] __sys_bpf+0x6f7/0x780 [ 246.795271][ T8340] ? bpf_link_show_fdinfo+0x380/0x380 [ 246.800671][ T8340] ? lock_chain_count+0x20/0x20 [ 246.805532][ T8340] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 246.811538][ T8340] __x64_sys_bpf+0x78/0x90 [ 246.815965][ T8340] do_syscall_64+0x4c/0xa0 [ 246.820397][ T8340] ? clear_bhb_loop+0x60/0xb0 [ 246.825069][ T8340] ? clear_bhb_loop+0x60/0xb0 [ 246.829744][ T8340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.835630][ T8340] RIP: 0033:0x7f58fdf9ce59 [ 246.840036][ T8340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.859631][ T8340] RSP: 002b:00007f58fedd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.868037][ T8340] RAX: ffffffffffffffda RBX: 00007f58fe215fa0 RCX: 00007f58fdf9ce59 [ 246.876002][ T8340] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 246.883960][ T8340] RBP: 00007f58fedd8090 R08: 0000000000000000 R09: 0000000000000000 [ 246.891919][ T8340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.899881][ T8340] R13: 00007f58fe216038 R14: 00007f58fe215fa0 R15: 00007fffa8bbce28 [ 246.907856][ T8340] [ 247.228172][ T8346] netlink: 'syz.3.1383': attribute type 1 has an invalid length. [ 247.249383][ T8346] netlink: 'syz.3.1383': attribute type 4 has an invalid length. [ 247.271993][ T8346] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1383'. [ 248.022336][ T8364] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1391'. [ 248.247077][ T8359] netlink: 'syz.1.1389': attribute type 10 has an invalid length. [ 249.050845][ T8359] team0 (unregistering): Port device team_slave_1 removed [ 249.241065][ T8382] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 249.278126][ T8382] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 249.352411][ T8382] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 249.364011][ T8382] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 249.375119][ T8382] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 249.385477][ T8382] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 249.397921][ T8382] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 249.428152][ T8382] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 249.438984][ T8382] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 249.449914][ T8382] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 252.166967][ T8413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1404'. [ 254.593537][ T8401] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1402'. [ 254.604723][ T8413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1404'. [ 254.823236][ T8437] netlink: 'syz.2.1410': attribute type 3 has an invalid length. [ 254.860415][ T8437] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1410'. [ 255.118844][ T8444] netlink: 'syz.1.1414': attribute type 21 has an invalid length. [ 255.459066][ T8455] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1418'. [ 255.521047][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.527828][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.568809][ T8454] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1417'. [ 255.658362][ T8454] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 255.765684][ T8466] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1422'. [ 255.849668][ T8466] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1422'. [ 255.890497][ T8473] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1422'. [ 256.662353][ T8499] netlink: 16278 bytes leftover after parsing attributes in process `syz.0.1433'. [ 256.929229][ T8510] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1436'. [ 257.988116][ T8530] device syzkaller0 entered promiscuous mode [ 258.288355][ T8552] netlink: 'syz.4.1447': attribute type 10 has an invalid length. [ 260.329304][ T8557] __nla_validate_parse: 2 callbacks suppressed [ 260.329316][ T8557] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1447'. [ 260.349049][ T8559] netlink: 16278 bytes leftover after parsing attributes in process `syz.3.1448'. [ 260.500154][ T8542] device syzkaller0 entered promiscuous mode [ 260.597312][ T8562] sctp: [Deprecated]: syz.4.1449 (pid 8562) Use of int in maxseg socket option. [ 260.597312][ T8562] Use struct sctp_assoc_value instead [ 263.362196][ T8593] netlink: 7874 bytes leftover after parsing attributes in process `syz.4.1459'. [ 263.555697][ T8595] netlink: 'syz.2.1460': attribute type 10 has an invalid length. [ 263.581953][ T8595] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1460'. [ 263.603226][ T8601] netlink: 16278 bytes leftover after parsing attributes in process `syz.0.1463'. [ 263.615883][ T8604] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1460'. [ 263.843001][ T8603] net_ratelimit: 33018 callbacks suppressed [ 263.843018][ T8603] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 264.016147][ T8619] netlink: 'syz.2.1469': attribute type 33 has an invalid length. [ 264.045215][ T8619] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1469'. [ 264.096228][ T8623] tipc: Started in network mode [ 264.101221][ T8623] tipc: Node identity 9215a268, cluster identity 4711 [ 264.149567][ T8623] tipc: Node number set to 2450891368 [ 264.205889][ T8625] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 264.213740][ T8625] #PF: supervisor instruction fetch in kernel mode [ 264.220252][ T8625] #PF: error_code(0x0010) - not-present page [ 264.226251][ T8625] PGD 1d712067 P4D 1d712067 PUD 0 [ 264.231487][ T8625] Oops: 0010 [#1] PREEMPT SMP KASAN [ 264.236682][ T8625] CPU: 0 PID: 8625 Comm: syz.0.1472 Not tainted syzkaller #0 [ 264.244053][ T8625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 264.254200][ T8625] RIP: 0010:0x0 [ 264.257676][ T8625] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 264.265041][ T8625] RSP: 0018:ffffc90003327458 EFLAGS: 00010246 [ 264.271112][ T8625] RAX: 1ffffffff175c437 RBX: 1ffff92000664e9c RCX: 0000000000000001 [ 264.279076][ T8625] RDX: ffffc90003327500 RSI: 0000000000000001 RDI: ffff88807dc58000 [ 264.287042][ T8625] RBP: ffffc90003327570 R08: ffff88807dc5803f R09: 1ffff1100fb8b007 [ 264.295005][ T8625] R10: dffffc0000000000 R11: ffffed100fb8b008 R12: ffffe8ffffc49578 [ 264.302969][ T8625] R13: ffffffff8bae21b8 R14: 0000000000000000 R15: ffff88807dc58000 [ 264.310931][ T8625] FS: 00007fa3197186c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 264.319852][ T8625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.326427][ T8625] CR2: ffffffffffffffd6 CR3: 00000000542cb000 CR4: 00000000003506f0 [ 264.334395][ T8625] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 264.342360][ T8625] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 264.350318][ T8625] Call Trace: [ 264.353587][ T8625] [ 264.356504][ T8625] bond_xdp_xmit+0x31e/0x550 [ 264.361096][ T8625] ? bond_xdp_xmit+0x94/0x550 [ 264.365767][ T8625] ? bond_xdp+0x850/0x850 [ 264.370089][ T8625] bq_xmit_all+0xd3f/0x11b0 [ 264.374590][ T8625] ? perf_trace_preemptirq_template+0x268/0x320 [ 264.380824][ T8625] ? irqentry_enter+0x33/0x50 [ 264.385578][ T8625] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 264.391551][ T8625] ? lock_chain_count+0x20/0x20 [ 264.396394][ T8625] ? __dev_flush+0x1b0/0x1b0 [ 264.400983][ T8625] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 264.407132][ T8625] ? lockdep_hardirqs_on+0x94/0x140 [ 264.412328][ T8625] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 264.418476][ T8625] ? bq_enqueue+0x2ee/0x3d0 [ 264.422975][ T8625] ? rcu_is_watching+0x11/0xa0 [ 264.427732][ T8625] ? trace_xdp_redirect+0xb3/0x2b0 [ 264.432838][ T8625] __dev_flush+0xbf/0x1b0 [ 264.437165][ T8625] xdp_do_flush+0xa/0x20 [ 264.441402][ T8625] bpf_test_run_xdp_live+0x1545/0x1a90 [ 264.446855][ T8625] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 264.452391][ T8625] ? xdp_convert_md_to_buff+0x330/0x330 [ 264.457945][ T8625] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 264.464192][ T8625] ? bpf_test_init+0x119/0x140 [ 264.468946][ T8625] ? xdp_convert_md_to_buff+0x5b/0x330 [ 264.474485][ T8625] bpf_prog_test_run_xdp+0x736/0xf10 [ 264.479773][ T8625] ? dev_put+0x80/0x80 [ 264.483837][ T8625] ? dev_put+0x80/0x80 [ 264.487894][ T8625] bpf_prog_test_run+0x31e/0x390 [ 264.492825][ T8625] __sys_bpf+0x62b/0x780 [ 264.497060][ T8625] ? bpf_link_show_fdinfo+0x380/0x380 [ 264.502431][ T8625] ? lock_chain_count+0x20/0x20 [ 264.507282][ T8625] __x64_sys_bpf+0x78/0x90 [ 264.511697][ T8625] do_syscall_64+0x4c/0xa0 [ 264.516110][ T8625] ? clear_bhb_loop+0x60/0xb0 [ 264.520780][ T8625] ? clear_bhb_loop+0x60/0xb0 [ 264.525459][ T8625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.531347][ T8625] RIP: 0033:0x7fa31879ce59 [ 264.535751][ T8625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.555357][ T8625] RSP: 002b:00007fa319718028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 264.563767][ T8625] RAX: ffffffffffffffda RBX: 00007fa318a15fa0 RCX: 00007fa31879ce59 [ 264.571729][ T8625] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 264.579687][ T8625] RBP: 00007fa318832d6f R08: 0000000000000000 R09: 0000000000000000 [ 264.587733][ T8625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.595693][ T8625] R13: 00007fa318a16038 R14: 00007fa318a15fa0 R15: 00007ffd1fb82ed8 [ 264.603659][ T8625] [ 264.606675][ T8625] Modules linked in: [ 264.610565][ T8625] CR2: 0000000000000000 [ 264.614714][ T8625] ---[ end trace 0000000000000000 ]--- [ 264.620150][ T8625] RIP: 0010:0x0 [ 264.623605][ T8625] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 264.630952][ T8625] RSP: 0018:ffffc90003327458 EFLAGS: 00010246 [ 264.637016][ T8625] RAX: 1ffffffff175c437 RBX: 1ffff92000664e9c RCX: 0000000000000001 [ 264.644975][ T8625] RDX: ffffc90003327500 RSI: 0000000000000001 RDI: ffff88807dc58000 [ 264.652934][ T8625] RBP: ffffc90003327570 R08: ffff88807dc5803f R09: 1ffff1100fb8b007 [ 264.660892][ T8625] R10: dffffc0000000000 R11: ffffed100fb8b008 R12: ffffe8ffffc49578 [ 264.668850][ T8625] R13: ffffffff8bae21b8 R14: 0000000000000000 R15: ffff88807dc58000 [ 264.676810][ T8625] FS: 00007fa3197186c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 264.685729][ T8625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.692298][ T8625] CR2: ffffffffffffffd6 CR3: 00000000542cb000 CR4: 00000000003506f0 [ 264.700266][ T8625] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 264.708223][ T8625] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 264.716185][ T8625] Kernel panic - not syncing: Fatal exception in interrupt [ 264.723702][ T8625] Kernel Offset: disabled [ 264.728010][ T8625] Rebooting in 86400 seconds..