last executing test programs: 3.088420253s ago: executing program 3 (id=17006): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x4, 0xc2ba, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x2160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.86698705s ago: executing program 3 (id=17010): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r2}, 0xc) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90424fc60", 0x14}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x1f4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x0, 0x3, 0xe, 0x0, 0x0, 0x10, 0x5a0f9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb072f1dde9a2678f, @perf_config_ext={0x0, 0xffff}, 0x4116, 0x7fffffff, 0x3, 0x1, 0x0, 0xffff0000, 0x80, 0x0, 0x5ff}, 0x0, 0x0, r0, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0xfffe}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) sendmsg$kcm(r8, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d80000003e0081064e81ff83db4cb9040a1d080006007c09e8fc55a10a0015040400142603600e1208000f00000004bcb3d26f000800024004000000035c0461c1d67f6f94007134cf9df359d4aae88a22dab59e7a8f46236efb8000a007a264cf6ad4161f3e4e7ce06bbace8017cbec4c2ee5a7cef4090000001fb71b27d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ea37b00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffff05c1c9b6278754ca397c388b0dd6e4edef3d93", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r7, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB="6000004869421efa6d03e42f19c8840014000000efff0400000000000000000085b65ee72737a92b596b8434a3b9202a5aee00000000000000fb6b7c65a26bfd5476a2f7db87f42111a61973ab8374df74d67ec2a1568ffd6eb97a2230887b707b348fc5873f5b2f36d4921cbfc3d1494d3657b6565fa643a41f568f3e534addfa960d3c8b68f231c3a70000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r12}, &(0x7f0000000340), &(0x7f0000000140)=r11}, 0x20) sendmsg$sock(r11, &(0x7f0000000c00)={&(0x7f0000000a80)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x3, {0xa, 0x4e22, 0x9e53, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe0000}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b00)="b22ed0bf1c16a4e4d4187f1c8bdbb52af7202c569330b3cdcdee9f53edc8caf500652826a18b48ebbe88c527d2ff3d3744bf7109fa7efc39e6e6e0712c34d101615cfcc34922d9ca7cb1190c52b143d2d2d4aa5ae0eab6b45c51f3f1e22ab8ac1b612c12060cae08e6209052db14557d5dd8417b23b25ded8ca6994bca4eb365b633066536b92db79ebc5771a7d8648118e5d374036547b57080714bce6dd377277ea2dfe66368916783629bdf80675c73b84f912f8acfc4e44437082e557a", 0xbf}], 0x1}, 0x8881) 2.632155237s ago: executing program 2 (id=17015): bpf$ENABLE_STATS(0x20, &(0x7f0000000700), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@bloom_filter={0x1e, 0xff, 0x3, 0x7fff, 0x800, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x7}, 0x50) socketpair(0x1e, 0x800, 0x3, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r1, &(0x7f0000000440)}, 0x20) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.412227884s ago: executing program 3 (id=17017): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c00a, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x100) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000600000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a80)="1400000036000b63717a3c4a0e1e02f30ccefc77", 0x14}], 0x1}, 0x40000) 2.386893475s ago: executing program 2 (id=17018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pimreg\x00', 0x200}) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) (rerun: 64) r5 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) (async, rerun: 32) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) (async, rerun: 32) r6 = socket$kcm(0x10, 0x2, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='\x00') r7 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x4, 0x80, 0x23, 0x8, 0x6, 0xd6, 0x0, 0x2, 0x10200, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000280)}, 0x1100, 0x1, 0x6, 0x1, 0xb05, 0x7c, 0x8000, 0x0, 0x4, 0x0, 0x5}, r7, 0x5, r3, 0x7) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x80000000}, 0x48) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x1000, 0x4, 0x8, 0x3}]}) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)={r2}) (rerun: 64) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r1}) 2.159006872s ago: executing program 4 (id=17020): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x4, 0xc2ba, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x2160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.048397536s ago: executing program 2 (id=17022): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600d001141090005000400000037153e370248038011000000d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, r1, 0x2, 0x5, 0x2}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000200)='./file0\x00', r3, 0x4000, r2}, 0x18) sendmsg$kcm(r2, 0x0, 0x44000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.942466259s ago: executing program 4 (id=17023): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0001000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="00000300"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.764292265s ago: executing program 0 (id=17025): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002280)={r0, 0x0, 0xfffffffffffffffd}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000004000031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4004000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.438001325s ago: executing program 1 (id=17027): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 1.437484635s ago: executing program 1 (id=17028): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.352462098s ago: executing program 4 (id=17029): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1.351731898s ago: executing program 0 (id=17030): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209001800030004", 0x2b}], 0x1}, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x8, 0x8}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000001d711849000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000780)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) r5 = getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x1b, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000e3a5000000008a5500050000007c740300540000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000580)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x2, 0x7fff, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r1, r6, r1, r3], 0x0, 0x10, 0x9}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef02"], 0x33fe0) 1.230113331s ago: executing program 4 (id=17031): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x2080, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.031780118s ago: executing program 3 (id=17032): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/237, 0x1a, 0xed, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xd, r1, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x891b, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@float={0x3, 0x0, 0x0, 0x10, 0x8}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x3}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x2}]}]}, {0x0, [0x61, 0x61, 0x2e]}}, 0x0, 0x51}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x20007, 0x10001, 0x9, 0x11}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 1.031513948s ago: executing program 4 (id=17033): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x4, 0xc2ba, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x2160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 980.495999ms ago: executing program 1 (id=17034): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0xff97, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xa100) 979.929119ms ago: executing program 2 (id=17035): r0 = socket$kcm(0x21, 0x2, 0x2) (async) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64) r4 = socket$kcm(0xa, 0x2, 0x73) (rerun: 64) setsockopt$sock_attach_bpf(r4, 0x29, 0x19, 0x0, 0xfcd8) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r5, 0x9) (async, rerun: 64) r6 = syz_clone(0x0, &(0x7f0000000040)="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", 0xff, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="99ddb0945c0e2fe0d640addbbd") (rerun: 64) write$cgroup_pid(r5, &(0x7f0000000280)=r6, 0x12) (async) r7 = socket$kcm(0x2, 0x2, 0x73) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) recvmsg$unix(r8, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) (async) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) (async, rerun: 32) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 32) sendmsg$kcm(r7, &(0x7f0000000400)={&(0x7f0000000580)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000001cc0)}, 0x12) (async, rerun: 64) r11 = socket$kcm(0xa, 0x5, 0x0) (async, rerun: 64) r12 = perf_event_open$cgroup(&(0x7f0000001ec0)={0x3, 0x80, 0x93, 0xff, 0x59, 0x9, 0x0, 0x0, 0x800, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000001e80), 0x6}, 0x20, 0xffffffff, 0x62, 0x4, 0x288f, 0x79, 0x97, 0x0, 0x0, 0x0, 0x6}, r5, 0x8, r1, 0x3) sendmsg$unix(r5, &(0x7f0000002000)={&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000000840)="0cc8432953389a6ac6e97699a66963dae87d9e76c3bc1be7c7ff8731e242acdf928a792a6a5e4ad88b1b448203bfd88afbbbf9b192a3b9ba131df71050f4cec77d9996d31e5ce81e7cf0331c4c73ed8d8b21efd1173b8e7cc4cb390de5a404f1bd7b60b353ec48afa82ebdf2086d43f1ac0dd59aeabdca98b53b923e38bb9fe78bbbc8f1ea29f7cb5f0f8b2e93f404fdfa41bd2cec0e34ecc112a1b5b369ef02e02a8a08aec9538e9d1a46a4b2a46f04b9bc9aa6bc084f77c53a048ae4ee0496042b4d9761c09a2f1090b32931", 0xcd}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="aa1acc178a130190d6cbe59fa947458bd3e00d211e64ec3e05edc36c1a3b60fec1bde326df48f360e96f71003c28180689e7d46e07a88956fc425d52c814fd844d4fd7fb22d692690786081917520ebd9591f892c1fec72962ff29106da1588cb3fd07bf61d7c9238df7f63e4dcc7ccf436e540afdfb010d93a4beadeec97a6db427baaced8422fc4bda18c5bb8ccb91109517ac848e19db0e6d4077d3768a1d269e1fefe21dc307bc71e44f3b200ef6e73efb84de0952dc483219cff40d714b22e9a10f5cb836107c28e79ce328ec42fa809bb8a1f2a91339534dc3c332ecca541157fb2b795b8ec2e9386c20", 0xed}, {&(0x7f0000001d40)="58b722f7f7cd96865edb94982edc8fd1d8cfd478efcf5d718212f71af723159a4ccd1ea94f78dd22662eeb0a002982c888a3b88f2616ce93196a579ec8deb6461f788a329acfe56157a1a0820890a6d70a4a8c95ada16bc965ecfbe17164338cafda6288da7a4eb9746cc8774856009073fdd22a06ad6daee83efa6001dc209517fb64d7b4d5b773bab1309ccfc32a7cb54b527127275e38b66583005db48c0929482b9cb3d762d79f74fd0baf5c8c98b8786e9d306c82fbba4f03f80ef316ace17bacd51bcf33f0f85584533b44d1a8f7f8a8e816a2df2b9bd65d1568493085d0a42134e21ec71af97482b4b25b3357", 0xf0}], 0x4, &(0x7f0000001f40)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r10, r3, r12]}}, @rights={{0x28, 0x1, 0x1, [r10, r5, r9, r1, r4, r8]}}, @rights={{0x28, 0x1, 0x1, [r3, r10, r1, r9, r0, r11]}}, @rights={{0x2c, 0x1, 0x1, [r3, r11, r5, r3, r0, r8, r2]}}], 0xc0, 0x40800}, 0x8001) r13 = socket$kcm(0xa, 0x2, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) close(r13) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) 967.58443ms ago: executing program 0 (id=17036): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'batadv_slave_1\x00', @random="0100002010c3"}) 828.717474ms ago: executing program 1 (id=17037): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) (fail_nth: 3) 700.541328ms ago: executing program 0 (id=17038): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000000822"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0x0, &(0x7f0000000240)="ff410800b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 497.714274ms ago: executing program 4 (id=17039): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000400)=0x9) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0x3, 0x7, 0x8, 0xffffffffffffff9c, 0xffffffffffffffff}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x4, 0xc1, &(0x7f0000000440)=""/193, 0x41000, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x7, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x1], &(0x7f00000006c0)=[{0x2, 0x5, 0x0, 0x7}, {0x2, 0x1, 0xc, 0xa}, {0x3, 0x2, 0x8, 0x1}, {0x1, 0x2, 0xc, 0xb}], 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000840)=r1, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000700000700000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000a500f4fffcffffff18000000060000000000000009000000bd90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x100f, &(0x7f0000001cc0)=""/4111, 0x41100, 0x2}, 0x94) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24040084) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 443.719656ms ago: executing program 1 (id=17040): socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20004, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0xb, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@llc={0x1a, 0x303, 0xc5, 0x8, 0x3, 0x40, @local}, 0x80, &(0x7f0000000640)}, 0x0) socket$kcm(0xa, 0x3, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="d8000000180081034ef0f206b74cb9040a1d080006007c06e8fc55a10a0015000600142603600e1208000f0000000401a8000100df80ffff0000003f035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b31627ffe06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a468eb4edbb57a5025ccca9e00360db798262f3dcace0d0bdb8e73ece0b42a9ecbee12cf1de59bf09ebc62e9b6e6bf545de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 437.532076ms ago: executing program 3 (id=17041): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 348.506999ms ago: executing program 0 (id=17042): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000600002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 345.388109ms ago: executing program 2 (id=17043): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010", @ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB, @ANYRESDEC=r1], 0x10b8}, 0x44001) close(r1) 177.035344ms ago: executing program 3 (id=17044): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff6ed1, 0x1, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a990053", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000040000001200000002000000", @ANYRES32, @ANYBLOB="00000000000000310000000046ab7bb100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&'], 0x10) sendmsg$inet(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x19, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 171.018855ms ago: executing program 0 (id=17045): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8983, &(0x7f0000000080)) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f00000001c0), 0x4) sendmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4060019}, 0x20000841) r4 = perf_event_open(0x0, 0x0, 0x2000000002, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x1, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x3, 0x0, 0x0, 0x400, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb, 0x7}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[@ANYRES8=r6, @ANYBLOB="3ee901"], 0x9a) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 249.55µs ago: executing program 1 (id=17046): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r1, 0x0, 0x7}, 0x38) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x13) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x15, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_clone(0x402200, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000380)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x4, 0x1, 0xb, 0x1, {0xa, 0x4e21, 0x9, @remote, 0x7}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000880)="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", 0x171}], 0x1, &(0x7f00000003c0)=[{0x30, 0x10e, 0x2, "11ac17db295ee7a678a138a4ba90a77db6310a223a7d68ea26a4cf5af60989"}], 0x30}, 0x80c0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2d, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000016000b63d25a73b02886188a33f7cbb40bce8d702c3b89397498562a1a59e5dd34539b62ef321c628a1ae8f04ca3d8ceeedba55e81d9fb32c20c91d7146a2c24fbcf2e8bba7dc4dc8ba5ede78bbc081c5c5fddc2ef93877b35acbc95d092eb41becf10319c9b7b83d3dbfa58c743e7109e375de96a26e2d0d339640a613d372477ca230d41647e3aa06585a2540ee420b551ceeee8cd73eac28863798a17241bcc114875fcb87bf1c65da5f4481795ca378e61501ab9d7f1a82164c6ef9bb9598ab1dffc84edd1838a22a65a2f77cb682aebe30e3e6e5e1c4e10ea05", 0x14}], 0x1}, 0x40800) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="800000000000006e6d9520baad967dc17c924458004feaf7e089dfafea53e414a3e447000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x14, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd1, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0xfffffffffffffdf1, &(0x7f00000004c0), &(0x7f0000000240), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=r7, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="03000000040000000000", @ANYRES32=r5, @ANYBLOB='\a\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="00000000010000000100"/28], 0x50) 0s ago: executing program 2 (id=17047): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x104046, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7fffffffffffffff) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xa) kernel console output (not intermixed with test programs): [T22310] netlink: 'syz.4.15975': attribute type 21 has an invalid length. [ 3347.314563][T22310] netlink: 164 bytes leftover after parsing attributes in process `syz.4.15975'. [ 3347.645577][T22324] FAULT_INJECTION: forcing a failure. [ 3347.645577][T22324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3347.717770][T22324] CPU: 0 PID: 22324 Comm: syz.1.15980 Not tainted syzkaller #0 [ 3347.725450][T22324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3347.735572][T22324] Call Trace: [ 3347.738907][T22324] [ 3347.741908][T22324] dump_stack_lvl+0x188/0x24e [ 3347.746680][T22324] ? show_regs_print_info+0x12/0x12 [ 3347.751962][T22324] ? load_image+0x400/0x400 [ 3347.756550][T22324] ? __lock_acquire+0x7d10/0x7d10 [ 3347.761654][T22324] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 3347.768006][T22324] should_fail_ex+0x399/0x4d0 [ 3347.772787][T22324] _copy_from_user+0x2c/0x170 [ 3347.777563][T22324] __sys_bpf+0x2ea/0x780 [ 3347.781891][T22324] ? bpf_link_show_fdinfo+0x380/0x380 [ 3347.787374][T22324] ? lock_chain_count+0x20/0x20 [ 3347.792269][T22324] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3347.798319][T22324] __x64_sys_bpf+0x78/0x90 [ 3347.802789][T22324] do_syscall_64+0x4c/0xa0 [ 3347.807239][T22324] ? clear_bhb_loop+0x60/0xb0 [ 3347.811965][T22324] ? clear_bhb_loop+0x60/0xb0 [ 3347.816692][T22324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3347.822633][T22324] RIP: 0033:0x7fd90bd9ce59 [ 3347.827087][T22324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3347.846730][T22324] RSP: 002b:00007fd90cb7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3347.855194][T22324] RAX: ffffffffffffffda RBX: 00007fd90c015fa0 RCX: 00007fd90bd9ce59 [ 3347.863221][T22324] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 3347.871231][T22324] RBP: 00007fd90cb7b090 R08: 0000000000000000 R09: 0000000000000000 [ 3347.879234][T22324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3347.887230][T22324] R13: 00007fd90c016038 R14: 00007fd90c015fa0 R15: 00007ffde3459a18 [ 3347.895289][T22324] [ 3348.871600][T22361] netlink: 'syz.4.15993': attribute type 1 has an invalid length. [ 3348.917416][T22361] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.15993'. [ 3349.605651][T22372] netlink: 172 bytes leftover after parsing attributes in process `syz.2.15996'. [ 3350.161929][T22386] raw_sendmsg: syz.1.16001 forgot to set AF_INET. Fix it! [ 3350.416698][T22397] netlink: 'syz.1.16006': attribute type 21 has an invalid length. [ 3350.430471][T22397] netlink: 'syz.1.16006': attribute type 6 has an invalid length. [ 3350.444991][T22397] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16006'. [ 3350.473641][T22392] netlink: 'syz.3.16004': attribute type 29 has an invalid length. [ 3350.499208][T22392] netlink: 'syz.3.16004': attribute type 29 has an invalid length. [ 3353.375862][T22398] netlink: 'syz.3.16004': attribute type 29 has an invalid length. [ 3353.944267][T22430] netlink: 172 bytes leftover after parsing attributes in process `syz.4.16012'. [ 3354.710543][T22460] netlink: 'syz.4.16026': attribute type 10 has an invalid length. [ 3355.993284][T22476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3356.032990][T22476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3356.067250][T22476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3356.093256][T22478] FAULT_INJECTION: forcing a failure. [ 3356.093256][T22478] name failslab, interval 1, probability 0, space 0, times 0 [ 3356.138318][T22476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3356.190489][T22478] CPU: 1 PID: 22478 Comm: syz.1.16032 Not tainted syzkaller #0 [ 3356.198149][T22478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3356.208246][T22478] Call Trace: [ 3356.211559][T22478] [ 3356.214530][T22478] dump_stack_lvl+0x188/0x24e [ 3356.219256][T22478] ? show_regs_print_info+0x12/0x12 [ 3356.224500][T22478] ? load_image+0x400/0x400 [ 3356.229052][T22478] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3356.235254][T22478] should_fail_ex+0x399/0x4d0 [ 3356.239964][T22478] should_failslab+0x5/0x20 [ 3356.244489][T22478] slab_pre_alloc_hook+0x59/0x310 [ 3356.249540][T22478] kmem_cache_alloc+0x56/0x2f0 [ 3356.254339][T22478] ? __build_skb+0x2a/0x3c0 [ 3356.258883][T22478] __build_skb+0x2a/0x3c0 [ 3356.263253][T22478] build_skb+0x1e/0x230 [ 3356.267453][T22478] bpf_prog_test_run_skb+0x37e/0x12a0 [ 3356.272862][T22478] ? __fget_files+0x28/0x4b0 [ 3356.277491][T22478] ? __fget_files+0x43d/0x4b0 [ 3356.282211][T22478] ? cpu_online+0xa0/0xa0 [ 3356.286580][T22478] bpf_prog_test_run+0x31e/0x390 [ 3356.291555][T22478] __sys_bpf+0x62b/0x780 [ 3356.295834][T22478] ? bpf_link_show_fdinfo+0x380/0x380 [ 3356.301247][T22478] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3356.307446][T22478] __x64_sys_bpf+0x78/0x90 [ 3356.311897][T22478] do_syscall_64+0x4c/0xa0 [ 3356.316339][T22478] ? clear_bhb_loop+0x60/0xb0 [ 3356.321051][T22478] ? clear_bhb_loop+0x60/0xb0 [ 3356.325759][T22478] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3356.331687][T22478] RIP: 0033:0x7fd90bd9ce59 [ 3356.336124][T22478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3356.355755][T22478] RSP: 002b:00007fd90cb7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3356.364200][T22478] RAX: ffffffffffffffda RBX: 00007fd90c015fa0 RCX: 00007fd90bd9ce59 [ 3356.372200][T22478] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 3356.380200][T22478] RBP: 00007fd90cb7b090 R08: 0000000000000000 R09: 0000000000000000 [ 3356.388196][T22478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3356.396193][T22478] R13: 00007fd90c016038 R14: 00007fd90c015fa0 R15: 00007ffde3459a18 [ 3356.404202][T22478] [ 3356.599160][T22476] bond0: (slave batadv0): Releasing backup interface [ 3357.353869][T22501] netlink: 172 bytes leftover after parsing attributes in process `syz.3.16036'. [ 3357.641748][T22512] netlink: 763 bytes leftover after parsing attributes in process `syz.4.16040'. [ 3357.675775][T22512] netlink: 'syz.4.16040': attribute type 2 has an invalid length. [ 3357.698926][T22512] netlink: 'syz.4.16040': attribute type 8 has an invalid length. [ 3357.727007][T22512] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16040'. [ 3357.754208][T22518] netlink: 'syz.4.16040': attribute type 21 has an invalid length. [ 3357.794486][T22514] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16041'. [ 3357.828860][T22514] bond0: (slave bond_slave_0): Releasing backup interface [ 3357.901865][T22514] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 3358.534539][T22533] netlink: 'syz.3.16047': attribute type 3 has an invalid length. [ 3358.557784][T22533] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16047'. [ 3358.582957][T22533] netlink: 'syz.3.16047': attribute type 7 has an invalid length. [ 3358.601420][T22533] sock: sock_timestamping_bind_phc: sock not bind to device [ 3358.846924][T22541] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16050'. [ 3358.873229][T22540] netlink: 188 bytes leftover after parsing attributes in process `syz.3.16051'. [ 3358.901052][T22540] ksmbd: Unknown IPC event: 10, ignore. [ 3359.142129][T22549] FAULT_INJECTION: forcing a failure. [ 3359.142129][T22549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3359.212219][T22549] CPU: 1 PID: 22549 Comm: syz.3.16055 Not tainted syzkaller #0 [ 3359.219856][T22549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3359.229965][T22549] Call Trace: [ 3359.233276][T22549] [ 3359.236235][T22549] dump_stack_lvl+0x188/0x24e [ 3359.240961][T22549] ? show_regs_print_info+0x12/0x12 [ 3359.246214][T22549] ? load_image+0x400/0x400 [ 3359.250767][T22549] ? __lock_acquire+0x7d10/0x7d10 [ 3359.255836][T22549] ? lockdep_hardirqs_on+0x94/0x140 [ 3359.261080][T22549] should_fail_ex+0x399/0x4d0 [ 3359.265814][T22549] _copy_from_user+0x2c/0x170 [ 3359.270538][T22549] __sys_bpf+0x2ea/0x780 [ 3359.274836][T22549] ? bpf_link_show_fdinfo+0x380/0x380 [ 3359.280283][T22549] ? lock_chain_count+0x20/0x20 [ 3359.285189][T22549] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3359.291224][T22549] __x64_sys_bpf+0x78/0x90 [ 3359.295684][T22549] do_syscall_64+0x4c/0xa0 [ 3359.300185][T22549] ? clear_bhb_loop+0x60/0xb0 [ 3359.304915][T22549] ? clear_bhb_loop+0x60/0xb0 [ 3359.309640][T22549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3359.315583][T22549] RIP: 0033:0x7fb9cf99ce59 [ 3359.320035][T22549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3359.339675][T22549] RSP: 002b:00007fb9d07fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3359.348143][T22549] RAX: ffffffffffffffda RBX: 00007fb9cfc15fa0 RCX: 00007fb9cf99ce59 [ 3359.356152][T22549] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 3359.364166][T22549] RBP: 00007fb9d07fb090 R08: 0000000000000000 R09: 0000000000000000 [ 3359.372170][T22549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3359.380195][T22549] R13: 00007fb9cfc16038 R14: 00007fb9cfc15fa0 R15: 00007fff9925fe78 [ 3359.388221][T22549] [ 3359.933107][T22550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3359.955928][T22550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3359.991971][T22550] batman_adv: batadv0: Interface deactivated: macvlan1 [ 3360.014993][T22550] batman_adv: batadv0: Removing interface: macvlan1 [ 3360.099900][T22550] bond0: (slave batadv0): Releasing backup interface [ 3360.115791][T12282] tipc: Subscription rejected, illegal request [ 3360.210940][T22559] netlink: 168 bytes leftover after parsing attributes in process `syz.0.16056'. [ 3362.092322][T22601] netlink: 'syz.1.16069': attribute type 2 has an invalid length. [ 3362.143456][T22601] netlink: 'syz.1.16069': attribute type 10 has an invalid length. [ 3362.156093][T22601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3362.328924][T22601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3362.870477][T22618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3362.908611][T22618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3362.940086][T22618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3362.982858][T22618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3363.101096][T22627] FAULT_INJECTION: forcing a failure. [ 3363.101096][T22627] name failslab, interval 1, probability 0, space 0, times 0 [ 3363.166590][T22627] CPU: 1 PID: 22627 Comm: syz.1.16079 Not tainted syzkaller #0 [ 3363.174258][T22627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3363.184391][T22627] Call Trace: [ 3363.187756][T22627] [ 3363.190764][T22627] dump_stack_lvl+0x188/0x24e [ 3363.195515][T22627] ? sctp_sendmsg+0x15b0/0x2940 [ 3363.200446][T22627] ? ___sys_sendmsg+0x2a2/0x360 [ 3363.205376][T22627] ? show_regs_print_info+0x12/0x12 [ 3363.210650][T22627] ? load_image+0x400/0x400 [ 3363.215291][T22627] should_fail_ex+0x399/0x4d0 [ 3363.220063][T22627] should_failslab+0x5/0x20 [ 3363.224640][T22627] slab_pre_alloc_hook+0x59/0x310 [ 3363.229758][T22627] ? sctp_add_bind_addr+0x89/0x350 [ 3363.234963][T22627] __kmem_cache_alloc_node+0x4f/0x260 [ 3363.240423][T22627] ? sctp_add_bind_addr+0x89/0x350 [ 3363.245620][T22627] kmalloc_trace+0x26/0xe0 [ 3363.250141][T22627] sctp_add_bind_addr+0x89/0x350 [ 3363.255180][T22627] sctp_copy_local_addr_list+0x311/0x4e0 [ 3363.260908][T22627] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 3363.266713][T22627] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 3363.272864][T22627] ? sctp_v6_is_any+0x60/0x70 [ 3363.277629][T22627] ? sctp_copy_one_addr+0x93/0x660 [ 3363.282851][T22627] sctp_bind_addr_copy+0xaf/0x3c0 [ 3363.287961][T22627] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 3363.294372][T22627] sctp_connect_new_asoc+0x2f5/0x6a0 [ 3363.299736][T22627] ? __sctp_connect+0xd80/0xd80 [ 3363.304641][T22627] ? __local_bh_enable_ip+0x136/0x1c0 [ 3363.310108][T22627] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 3363.315711][T22627] ? security_sctp_bind_connect+0x85/0xb0 [ 3363.321543][T22627] sctp_sendmsg+0x15b0/0x2940 [ 3363.326354][T22627] ? aa_sk_perm+0x811/0x950 [ 3363.330959][T22627] ? sctp_getsockopt+0x8a0/0x8a0 [ 3363.335970][T22627] ? __might_fault+0xa6/0x120 [ 3363.340743][T22627] ? aa_af_perm+0x340/0x340 [ 3363.345316][T22627] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 3363.351864][T22627] ? inet_sendmsg+0xe5/0x2f0 [ 3363.356542][T22627] ? inet_send_prepare+0x260/0x260 [ 3363.361719][T22627] ____sys_sendmsg+0x5be/0x970 [ 3363.366581][T22627] ? __sys_sendmsg_sock+0x30/0x30 [ 3363.371669][T22627] ? __import_iovec+0x315/0x500 [ 3363.376620][T22627] ? import_iovec+0x6f/0xa0 [ 3363.381212][T22627] ___sys_sendmsg+0x2a2/0x360 [ 3363.385989][T22627] ? __sys_sendmsg+0x290/0x290 [ 3363.390910][T22627] ? __lock_acquire+0x7d10/0x7d10 [ 3363.396120][T22627] __se_sys_sendmsg+0x1bb/0x2a0 [ 3363.401040][T22627] ? ct_nmi_exit+0x145/0x1c0 [ 3363.405812][T22627] ? __x64_sys_sendmsg+0x80/0x80 [ 3363.410887][T22627] ? lockdep_hardirqs_on+0x94/0x140 [ 3363.416175][T22627] do_syscall_64+0x4c/0xa0 [ 3363.420668][T22627] ? clear_bhb_loop+0x60/0xb0 [ 3363.425415][T22627] ? clear_bhb_loop+0x60/0xb0 [ 3363.430179][T22627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3363.436151][T22627] RIP: 0033:0x7fd90bd9ce59 [ 3363.440633][T22627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3363.460308][T22627] RSP: 002b:00007fd90cb7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3363.468797][T22627] RAX: ffffffffffffffda RBX: 00007fd90c015fa0 RCX: 00007fd90bd9ce59 [ 3363.476827][T22627] RDX: 0000000000040000 RSI: 00002000000024c0 RDI: 0000000000000003 [ 3363.484880][T22627] RBP: 00007fd90cb7b090 R08: 0000000000000000 R09: 0000000000000000 [ 3363.492920][T22627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3363.500933][T22627] R13: 00007fd90c016038 R14: 00007fd90c015fa0 R15: 00007ffde3459a18 [ 3363.508976][T22627] [ 3363.641616][T22621] netlink: 168 bytes leftover after parsing attributes in process `syz.4.16075'. [ 3364.217858][T22639] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.16083'. [ 3364.526099][T22648] netlink: 'syz.4.16085': attribute type 3 has an invalid length. [ 3364.610541][T22648] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.16085'. [ 3364.651827][T22650] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16086'. [ 3365.149044][T22663] netlink: 'syz.0.16091': attribute type 2 has an invalid length. [ 3365.156968][T22663] netlink: 137528 bytes leftover after parsing attributes in process `syz.0.16091'. [ 3365.296628][T22670] device syzkaller0 entered promiscuous mode [ 3365.455067][T22675] FAULT_INJECTION: forcing a failure. [ 3365.455067][T22675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3365.471412][T22675] CPU: 1 PID: 22675 Comm: syz.3.16096 Not tainted syzkaller #0 [ 3365.479034][T22675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3365.489144][T22675] Call Trace: [ 3365.492481][T22675] [ 3365.495454][T22675] dump_stack_lvl+0x188/0x24e [ 3365.500181][T22675] ? show_regs_print_info+0x12/0x12 [ 3365.505427][T22675] ? load_image+0x400/0x400 [ 3365.509997][T22675] should_fail_ex+0x399/0x4d0 [ 3365.514744][T22675] strncpy_from_user+0x32/0x350 [ 3365.519652][T22675] strncpy_from_user_nofault+0x6d/0x140 [ 3365.525343][T22675] bpf_probe_read_user_str+0x26/0x70 [ 3365.530685][T22675] bpf_prog_b2480876d9be08d7+0x38/0x3f [ 3365.536184][T22675] bpf_prog_run_pin_on_cpu+0xaa/0x150 [ 3365.541622][T22675] bpf_prog_test_run_syscall+0x313/0x4a0 [ 3365.547322][T22675] ? sock_gen_cookie+0x60/0x60 [ 3365.552178][T22675] ? sock_gen_cookie+0x60/0x60 [ 3365.557001][T22675] bpf_prog_test_run+0x31e/0x390 [ 3365.562005][T22675] __sys_bpf+0x62b/0x780 [ 3365.566313][T22675] ? bpf_link_show_fdinfo+0x380/0x380 [ 3365.571762][T22675] ? lock_chain_count+0x20/0x20 [ 3365.576674][T22675] __x64_sys_bpf+0x78/0x90 [ 3365.581144][T22675] do_syscall_64+0x4c/0xa0 [ 3365.585610][T22675] ? clear_bhb_loop+0x60/0xb0 [ 3365.590351][T22675] ? clear_bhb_loop+0x60/0xb0 [ 3365.595085][T22675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3365.601034][T22675] RIP: 0033:0x7fb9cf99ce59 [ 3365.605493][T22675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3365.625153][T22675] RSP: 002b:00007fb9d07fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3365.633623][T22675] RAX: ffffffffffffffda RBX: 00007fb9cfc15fa0 RCX: 00007fb9cf99ce59 [ 3365.634924][T22680] netlink: 168 bytes leftover after parsing attributes in process `syz.0.16095'. [ 3365.641620][T22675] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 3365.641655][T22675] RBP: 00007fb9d07fb090 R08: 0000000000000000 R09: 0000000000000000 [ 3365.641670][T22675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3365.641683][T22675] R13: 00007fb9cfc16038 R14: 00007fb9cfc15fa0 R15: 00007fff9925fe78 [ 3365.641715][T22675] [ 3366.306038][T22693] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16100'. [ 3366.389129][T22693] bond0: (slave bond_slave_0): Releasing backup interface [ 3366.505808][T22693] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 3366.745388][T22706] netlink: 'syz.3.16105': attribute type 3 has an invalid length. [ 3366.761577][T22706] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16105'. [ 3367.035491][ T4273] Bluetooth: hci4: Unknown advertising packet type: 0x9800 [ 3367.035628][ T4273] Bluetooth: hci4: Unknown advertising packet type: 0x8700 [ 3367.044369][ T4273] Bluetooth: hci4: Malformed LE Event: 0x0d [ 3367.223109][T22720] netlink: 763 bytes leftover after parsing attributes in process `syz.3.16109'. [ 3367.283826][T22722] netlink: 'syz.3.16109': attribute type 2 has an invalid length. [ 3367.301006][T22722] netlink: 'syz.3.16109': attribute type 8 has an invalid length. [ 3367.321437][T22722] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16109'. [ 3367.372490][T22720] netlink: 'syz.3.16109': attribute type 21 has an invalid length. [ 3367.994134][T22744] sctp: [Deprecated]: syz.0.16120 (pid 22744) Use of int in maxseg socket option. [ 3367.994134][T22744] Use struct sctp_assoc_value instead [ 3368.856021][T22767] delete_channel: no stack [ 3368.899643][T22767] delete_channel: no stack [ 3369.433041][T22770] netlink: 'syz.3.16127': attribute type 2 has an invalid length. [ 3369.548688][T22770] netlink: 'syz.3.16127': attribute type 10 has an invalid length. [ 3369.973876][T22784] __nla_validate_parse: 1 callbacks suppressed [ 3369.973896][T22784] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16131'. [ 3371.261350][T22821] netlink: 'syz.1.16143': attribute type 29 has an invalid length. [ 3371.293856][T22821] netlink: 'syz.1.16143': attribute type 29 has an invalid length. [ 3371.348812][T22823] netlink: 'syz.1.16143': attribute type 29 has an invalid length. [ 3371.373853][T22828] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16147'. [ 3371.655409][T22833] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16149'. [ 3371.721509][T22833] netlink: 'syz.3.16149': attribute type 2 has an invalid length. [ 3371.849935][T22833] device 0 entered promiscuous mode [ 3372.070228][T22843] netlink: 'syz.0.16153': attribute type 2 has an invalid length. [ 3372.251014][T22851] netlink: 'syz.2.16157': attribute type 11 has an invalid length. [ 3372.304281][T22851] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.16157'. [ 3372.699024][T22864] netlink: 168 bytes leftover after parsing attributes in process `syz.1.16161'. [ 3373.092006][T22850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3373.431181][T22878] netlink: 168 bytes leftover after parsing attributes in process `syz.2.16166'. [ 3373.492949][T22878] netlink: 'syz.2.16166': attribute type 2 has an invalid length. [ 3373.609664][T22878] device 0 entered promiscuous mode [ 3373.728600][T22884] netlink: 'syz.3.16170': attribute type 10 has an invalid length. [ 3373.811992][T22884] team0: Port device wlan1 added [ 3373.912438][T22892] netlink: 168 bytes leftover after parsing attributes in process `syz.4.16173'. [ 3374.130839][T22899] FAULT_INJECTION: forcing a failure. [ 3374.130839][T22899] name failslab, interval 1, probability 0, space 0, times 0 [ 3374.156419][T22899] CPU: 0 PID: 22899 Comm: syz.4.16176 Not tainted syzkaller #0 [ 3374.164050][T22899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3374.174176][T22899] Call Trace: [ 3374.177495][T22899] [ 3374.180457][T22899] dump_stack_lvl+0x188/0x24e [ 3374.185185][T22899] ? show_regs_print_info+0x12/0x12 [ 3374.190428][T22899] ? load_image+0x400/0x400 [ 3374.194992][T22899] should_fail_ex+0x399/0x4d0 [ 3374.199714][T22899] should_failslab+0x5/0x20 [ 3374.204244][T22899] slab_pre_alloc_hook+0x59/0x310 [ 3374.209304][T22899] kmem_cache_alloc+0x56/0x2f0 [ 3374.214091][T22899] ? __build_skb+0x2a/0x3c0 [ 3374.218627][T22899] __build_skb+0x2a/0x3c0 [ 3374.222987][T22899] build_skb+0x1e/0x230 [ 3374.227178][T22899] bpf_prog_test_run_skb+0x37e/0x12a0 [ 3374.232586][T22899] ? __fget_files+0x28/0x4b0 [ 3374.237227][T22899] ? __fget_files+0x43d/0x4b0 [ 3374.241959][T22899] ? cpu_online+0xa0/0xa0 [ 3374.246323][T22899] bpf_prog_test_run+0x31e/0x390 [ 3374.251298][T22899] __sys_bpf+0x62b/0x780 [ 3374.255570][T22899] ? bpf_link_show_fdinfo+0x380/0x380 [ 3374.260983][T22899] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3374.267172][T22899] __x64_sys_bpf+0x78/0x90 [ 3374.271623][T22899] do_syscall_64+0x4c/0xa0 [ 3374.276068][T22899] ? clear_bhb_loop+0x60/0xb0 [ 3374.280775][T22899] ? clear_bhb_loop+0x60/0xb0 [ 3374.285473][T22899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3374.291392][T22899] RIP: 0033:0x7f1b51f9ce59 [ 3374.295836][T22899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3374.315462][T22899] RSP: 002b:00007f1b52ed8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3374.323894][T22899] RAX: ffffffffffffffda RBX: 00007f1b52215fa0 RCX: 00007f1b51f9ce59 [ 3374.331893][T22899] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 3374.339899][T22899] RBP: 00007f1b52ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 3374.347925][T22899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3374.355933][T22899] R13: 00007f1b52216038 R14: 00007f1b52215fa0 R15: 00007fff9f630018 [ 3374.363952][T22899] [ 3374.636219][T22915] FAULT_INJECTION: forcing a failure. [ 3374.636219][T22915] name failslab, interval 1, probability 0, space 0, times 0 [ 3374.652860][T22915] CPU: 1 PID: 22915 Comm: syz.1.16183 Not tainted syzkaller #0 [ 3374.660466][T22915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3374.670557][T22915] Call Trace: [ 3374.673877][T22915] [ 3374.676845][T22915] dump_stack_lvl+0x188/0x24e [ 3374.681569][T22915] ? show_regs_print_info+0x12/0x12 [ 3374.686807][T22915] ? load_image+0x400/0x400 [ 3374.691387][T22915] should_fail_ex+0x399/0x4d0 [ 3374.696108][T22915] should_failslab+0x5/0x20 [ 3374.700700][T22915] slab_pre_alloc_hook+0x59/0x310 [ 3374.705782][T22915] kmem_cache_alloc+0x56/0x2f0 [ 3374.710594][T22915] ? skb_clone+0x1e7/0x370 [ 3374.715058][T22915] skb_clone+0x1e7/0x370 [ 3374.719339][T22915] bpf_clone_redirect+0x163/0x4a0 [ 3374.724425][T22915] bpf_prog_c9d58f5b8698340d+0x56/0x5b [ 3374.729945][T22915] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3374.735988][T22915] ? lock_chain_count+0x20/0x20 [ 3374.740886][T22915] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 3374.747174][T22915] ? lockdep_hardirqs_on+0x94/0x140 [ 3374.752425][T22915] ? ktime_get+0x7b/0x270 [ 3374.756811][T22915] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 3374.763140][T22915] ? ktime_get_real_ts64+0x440/0x440 [ 3374.768487][T22915] ? read_lock_is_recursive+0x10/0x10 [ 3374.773916][T22915] ? __cant_sleep+0x220/0x220 [ 3374.778642][T22915] ? bpf_test_timer_continue+0x142/0x380 [ 3374.784338][T22915] bpf_test_run+0x2b6/0x830 [ 3374.788917][T22915] ? convert___skb_to_skb+0x580/0x580 [ 3374.794350][T22915] ? eth_get_headlen+0x200/0x200 [ 3374.799378][T22915] ? __build_skb+0x257/0x3c0 [ 3374.804021][T22915] ? convert___skb_to_skb+0x3d/0x580 [ 3374.809388][T22915] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 3374.814837][T22915] ? cpu_online+0xa0/0xa0 [ 3374.819241][T22915] bpf_prog_test_run+0x31e/0x390 [ 3374.824246][T22915] __sys_bpf+0x62b/0x780 [ 3374.828547][T22915] ? bpf_link_show_fdinfo+0x380/0x380 [ 3374.833987][T22915] ? lock_chain_count+0x20/0x20 [ 3374.838910][T22915] __x64_sys_bpf+0x78/0x90 [ 3374.843380][T22915] do_syscall_64+0x4c/0xa0 [ 3374.847833][T22915] ? clear_bhb_loop+0x60/0xb0 [ 3374.852551][T22915] ? clear_bhb_loop+0x60/0xb0 [ 3374.857277][T22915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3374.863231][T22915] RIP: 0033:0x7fd90bd9ce59 [ 3374.867684][T22915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3374.887348][T22915] RSP: 002b:00007fd90cb7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3374.895815][T22915] RAX: ffffffffffffffda RBX: 00007fd90c015fa0 RCX: 00007fd90bd9ce59 [ 3374.903829][T22915] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 3374.911841][T22915] RBP: 00007fd90cb7b090 R08: 0000000000000000 R09: 0000000000000000 [ 3374.919864][T22915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3374.927873][T22915] R13: 00007fd90c016038 R14: 00007fd90c015fa0 R15: 00007ffde3459a18 [ 3374.935896][T22915] [ 3376.130281][T22925] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16186'. [ 3376.340101][T22937] netlink: 'syz.0.16191': attribute type 2 has an invalid length. [ 3376.370342][T22937] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.16191'. [ 3376.470545][T22941] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.16193'. [ 3376.497916][T22941] netlink: zone id is out of range [ 3376.503452][T22941] netlink: zone id is out of range [ 3376.568422][T22941] netlink: zone id is out of range [ 3376.576265][T22941] netlink: get zone limit has 8 unknown bytes [ 3376.605989][T22944] netlink: 'syz.4.16193': attribute type 21 has an invalid length. [ 3376.777005][T22952] netlink: 168 bytes leftover after parsing attributes in process `syz.1.16196'. [ 3376.869752][T22952] netlink: 'syz.1.16196': attribute type 2 has an invalid length. [ 3376.890239][T22953] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 3376.964915][T22953] device syzkaller0 entered promiscuous mode [ 3377.063702][T22952] device 0 entered promiscuous mode [ 3383.236455][T22977] netlink: 'syz.1.16205': attribute type 3 has an invalid length. [ 3383.635348][T23015] netlink: 'syz.2.16219': attribute type 25 has an invalid length. [ 3383.671824][T23015] netlink: 'syz.2.16219': attribute type 29 has an invalid length. [ 3383.709548][T23018] netlink: 5 bytes leftover after parsing attributes in process `syz.2.16219'. [ 3383.734914][T23019] netlink: 5 bytes leftover after parsing attributes in process `syz.2.16219'. [ 3383.753891][T23021] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.16221'. [ 3383.785777][T23021] netlink: zone id is out of range [ 3383.834921][T23021] netlink: zone id is out of range [ 3383.841281][T23021] netlink: zone id is out of range [ 3383.852344][T23022] netlink: 'syz.3.16221': attribute type 21 has an invalid length. [ 3383.862218][T23021] netlink: get zone limit has 8 unknown bytes [ 3384.529510][T23040] netlink: 'syz.3.16227': attribute type 3 has an invalid length. [ 3384.773010][T23048] device wlan1 entered promiscuous mode [ 3386.555381][T23094] netlink: 'syz.0.16249': attribute type 10 has an invalid length. [ 3386.571987][T23100] FAULT_INJECTION: forcing a failure. [ 3386.571987][T23100] name failslab, interval 1, probability 0, space 0, times 0 [ 3386.661239][T23100] CPU: 1 PID: 23100 Comm: syz.1.16252 Not tainted syzkaller #0 [ 3386.668896][T23100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3386.679009][T23100] Call Trace: [ 3386.682341][T23100] [ 3386.685313][T23100] dump_stack_lvl+0x188/0x24e [ 3386.690059][T23100] ? show_regs_print_info+0x12/0x12 [ 3386.695310][T23100] ? load_image+0x400/0x400 [ 3386.699892][T23100] ? __might_sleep+0xd0/0xd0 [ 3386.704535][T23100] ? __lock_acquire+0x7d10/0x7d10 [ 3386.709634][T23100] should_fail_ex+0x399/0x4d0 [ 3386.714394][T23100] should_failslab+0x5/0x20 [ 3386.718946][T23100] slab_pre_alloc_hook+0x59/0x310 [ 3386.724022][T23100] ? tomoyo_encode+0x27e/0x540 [ 3386.728875][T23100] __kmem_cache_alloc_node+0x4f/0x260 [ 3386.734294][T23100] ? tomoyo_encode+0x27e/0x540 [ 3386.739107][T23100] __kmalloc+0xa0/0x240 [ 3386.743319][T23100] tomoyo_encode+0x27e/0x540 [ 3386.747984][T23100] tomoyo_realpath_from_path+0x58e/0x5d0 [ 3386.753729][T23100] ? tomoyo_path_number_perm+0x205/0x650 [ 3386.759419][T23100] tomoyo_path_number_perm+0x22f/0x650 [ 3386.764944][T23100] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 3386.771590][T23100] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3386.777099][T23100] ? ksys_write+0x1c0/0x250 [ 3386.781666][T23100] ? common_file_perm+0x171/0x1c0 [ 3386.786779][T23100] ? __fget_files+0x28/0x4b0 [ 3386.791421][T23100] ? __fget_files+0x28/0x4b0 [ 3386.796093][T23100] security_file_ioctl+0x6c/0xa0 [ 3386.801105][T23100] __se_sys_ioctl+0x48/0x170 [ 3386.805766][T23100] do_syscall_64+0x4c/0xa0 [ 3386.810251][T23100] ? clear_bhb_loop+0x60/0xb0 [ 3386.814973][T23100] ? clear_bhb_loop+0x60/0xb0 [ 3386.819712][T23100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3386.825668][T23100] RIP: 0033:0x7fd90bd9ce59 [ 3386.830129][T23100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3386.849788][T23100] RSP: 002b:00007fd90cb7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3386.858257][T23100] RAX: ffffffffffffffda RBX: 00007fd90c015fa0 RCX: 00007fd90bd9ce59 [ 3386.866274][T23100] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000004 [ 3386.874291][T23100] RBP: 00007fd90cb7b090 R08: 0000000000000000 R09: 0000000000000000 [ 3386.882312][T23100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3386.890329][T23100] R13: 00007fd90c016038 R14: 00007fd90c015fa0 R15: 00007ffde3459a18 [ 3386.898369][T23100] [ 3386.969255][T23100] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3387.003371][T23106] netlink: 'syz.3.16254': attribute type 21 has an invalid length. [ 3387.033772][T23106] IPv6: NLM_F_CREATE should be specified when creating new route [ 3387.048356][T23106] IPv6: Can't replace route, no match found [ 3387.275014][T23116] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16258'. [ 3388.326966][T23135] netlink: 'syz.1.16265': attribute type 39 has an invalid length. [ 3389.049412][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.055823][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.287153][T23167] netlink: 'syz.4.16276': attribute type 21 has an invalid length. [ 3389.367596][T23167] netlink: 156 bytes leftover after parsing attributes in process `syz.4.16276'. [ 3390.136590][T23187] netlink: 'syz.2.16283': attribute type 10 has an invalid length. [ 3390.172513][T23187] netlink: 55 bytes leftover after parsing attributes in process `syz.2.16283'. [ 3390.436555][T23196] sctp: [Deprecated]: syz.0.16286 (pid 23196) Use of int in max_burst socket option deprecated. [ 3390.436555][T23196] Use struct sctp_assoc_value instead [ 3390.920308][T23199] netlink: 128 bytes leftover after parsing attributes in process `syz.0.16286'. [ 3390.939712][T23199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3390.979453][T23203] netlink: 128 bytes leftover after parsing attributes in process `syz.3.16287'. [ 3391.006520][T23203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3391.025278][T23207] netlink: 'syz.4.16289': attribute type 7 has an invalid length. [ 3391.304922][T23226] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16295'. [ 3391.419689][T23227] netlink: 144 bytes leftover after parsing attributes in process `syz.2.16294'. [ 3391.590142][T23234] netlink: 'syz.0.16299': attribute type 3 has an invalid length. [ 3391.637524][T23234] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.16299'. [ 3392.233664][T23253] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 3392.276816][T23257] netlink: 168 bytes leftover after parsing attributes in process `syz.4.16308'. [ 3393.116803][T23282] netlink: 'syz.1.16317': attribute type 10 has an invalid length. [ 3393.671524][T23294] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16320'. [ 3395.771589][T23289] netlink: 168 bytes leftover after parsing attributes in process `syz.2.16321'. [ 3395.788256][T23294] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16320'. [ 3396.670611][T23339] netlink: 168 bytes leftover after parsing attributes in process `syz.2.16334'. [ 3396.771733][T23334] netlink: 'syz.4.16332': attribute type 39 has an invalid length. [ 3397.218963][T23347] FAULT_INJECTION: forcing a failure. [ 3397.218963][T23347] name failslab, interval 1, probability 0, space 0, times 0 [ 3397.235269][T23347] CPU: 1 PID: 23347 Comm: syz.3.16327 Not tainted syzkaller #0 [ 3397.242882][T23347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3397.252985][T23347] Call Trace: [ 3397.256312][T23347] [ 3397.259290][T23347] dump_stack_lvl+0x188/0x24e [ 3397.264009][T23347] ? show_regs_print_info+0x12/0x12 [ 3397.269253][T23347] ? load_image+0x400/0x400 [ 3397.273804][T23347] ? __might_sleep+0xd0/0xd0 [ 3397.278437][T23347] ? __lock_acquire+0x7d10/0x7d10 [ 3397.283524][T23347] ? ct_irq_exit_irqson+0x113/0x170 [ 3397.288778][T23347] should_fail_ex+0x399/0x4d0 [ 3397.293516][T23347] should_failslab+0x5/0x20 [ 3397.298057][T23347] slab_pre_alloc_hook+0x59/0x310 [ 3397.303128][T23347] ? exc_page_fault+0x88/0x100 [ 3397.307937][T23347] ? sk_prot_alloc+0xe7/0x210 [ 3397.312668][T23347] __kmem_cache_alloc_node+0x4f/0x260 [ 3397.318083][T23347] ? exc_page_fault+0x88/0x100 [ 3397.322913][T23347] ? sk_prot_alloc+0xe7/0x210 [ 3397.327636][T23347] __kmalloc+0xa0/0x240 [ 3397.331845][T23347] sk_prot_alloc+0xe7/0x210 [ 3397.336416][T23347] ? sk_alloc+0x20/0x340 [ 3397.340706][T23347] sk_alloc+0x36/0x340 [ 3397.344810][T23347] ? bpf_ctx_init+0x163/0x1a0 [ 3397.349532][T23347] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 3397.355120][T23347] bpf_prog_test_run_skb+0x35e/0x12a0 [ 3397.360539][T23347] ? __fget_files+0x28/0x4b0 [ 3397.365173][T23347] ? __fget_files+0x43d/0x4b0 [ 3397.369925][T23347] ? cpu_online+0xa0/0xa0 [ 3397.374304][T23347] bpf_prog_test_run+0x31e/0x390 [ 3397.379302][T23347] __sys_bpf+0x62b/0x780 [ 3397.383591][T23347] ? bpf_link_show_fdinfo+0x380/0x380 [ 3397.389027][T23347] ? lock_chain_count+0x20/0x20 [ 3397.393939][T23347] __x64_sys_bpf+0x78/0x90 [ 3397.398405][T23347] do_syscall_64+0x4c/0xa0 [ 3397.402856][T23347] ? clear_bhb_loop+0x60/0xb0 [ 3397.407576][T23347] ? clear_bhb_loop+0x60/0xb0 [ 3397.412302][T23347] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3397.418240][T23347] RIP: 0033:0x7fb9cf99ce59 [ 3397.422686][T23347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3397.442354][T23347] RSP: 002b:00007fb9d07fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3397.450816][T23347] RAX: ffffffffffffffda RBX: 00007fb9cfc15fa0 RCX: 00007fb9cf99ce59 [ 3397.458826][T23347] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 3397.466848][T23347] RBP: 00007fb9d07fb090 R08: 0000000000000000 R09: 0000000000000000 [ 3397.474870][T23347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3397.482879][T23347] R13: 00007fb9cfc16038 R14: 00007fb9cfc15fa0 R15: 00007fff9925fe78 [ 3397.490921][T23347] [ 3397.626682][T23351] netlink: 'syz.3.16337': attribute type 10 has an invalid length. [ 3397.680002][T23351] device macvlan0 entered promiscuous mode [ 3397.846936][T23355] netlink: 'syz.2.16338': attribute type 11 has an invalid length. [ 3397.879858][T23355] netlink: 140 bytes leftover after parsing attributes in process `syz.2.16338'. [ 3397.894212][T23354] netlink: 'syz.2.16338': attribute type 11 has an invalid length. [ 3397.906203][T23354] netlink: 140 bytes leftover after parsing attributes in process `syz.2.16338'. [ 3398.337614][T23363] device syzkaller0 entered promiscuous mode [ 3398.822692][T23384] FAULT_INJECTION: forcing a failure. [ 3398.822692][T23384] name failslab, interval 1, probability 0, space 0, times 0 [ 3398.836405][T23384] CPU: 1 PID: 23384 Comm: syz.1.16347 Not tainted syzkaller #0 [ 3398.844014][T23384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3398.854118][T23384] Call Trace: [ 3398.857429][T23384] [ 3398.860403][T23384] dump_stack_lvl+0x188/0x24e [ 3398.865128][T23384] ? show_regs_print_info+0x12/0x12 [ 3398.870372][T23384] ? load_image+0x400/0x400 [ 3398.874932][T23384] ? __might_sleep+0xd0/0xd0 [ 3398.879580][T23384] ? __lock_acquire+0x7d10/0x7d10 [ 3398.884658][T23384] should_fail_ex+0x399/0x4d0 [ 3398.889383][T23384] should_failslab+0x5/0x20 [ 3398.893919][T23384] slab_pre_alloc_hook+0x59/0x310 [ 3398.898992][T23384] kmem_cache_alloc+0x56/0x2f0 [ 3398.903804][T23384] ? security_file_alloc+0x30/0x110 [ 3398.909058][T23384] security_file_alloc+0x30/0x110 [ 3398.914147][T23384] __alloc_file+0xc2/0x230 [ 3398.918609][T23384] alloc_empty_file+0x90/0x180 [ 3398.923427][T23384] path_openat+0x10f/0x2ee0 [ 3398.927990][T23384] ? verify_lock_unused+0x140/0x140 [ 3398.933251][T23384] ? kasan_set_track+0x60/0x70 [ 3398.938076][T23384] ? verify_lock_unused+0x140/0x140 [ 3398.943322][T23384] ? do_sys_openat2+0xdd/0x4b0 [ 3398.948142][T23384] ? __x64_sys_openat+0x135/0x160 [ 3398.953211][T23384] ? do_syscall_64+0x4c/0xa0 [ 3398.957851][T23384] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3398.963967][T23384] ? do_filp_open+0x430/0x430 [ 3398.968700][T23384] do_filp_open+0x1f1/0x430 [ 3398.973255][T23384] ? vfs_tmpfile+0x480/0x480 [ 3398.977908][T23384] ? _raw_spin_unlock+0x24/0x40 [ 3398.982798][T23384] ? alloc_fd+0x58f/0x630 [ 3398.987188][T23384] do_sys_openat2+0x150/0x4b0 [ 3398.991929][T23384] ? atomic_notifier_call_chain+0x282/0x2b0 [ 3398.997872][T23384] ? perf_trace_preemptirq_template+0xa8/0x320 [ 3399.004085][T23384] ? do_sys_open+0xe0/0xe0 [ 3399.008603][T23384] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3399.014650][T23384] ? lock_chain_count+0x20/0x20 [ 3399.019556][T23384] __x64_sys_openat+0x135/0x160 [ 3399.024469][T23384] do_syscall_64+0x4c/0xa0 [ 3399.028932][T23384] ? clear_bhb_loop+0x60/0xb0 [ 3399.033657][T23384] ? clear_bhb_loop+0x60/0xb0 [ 3399.038385][T23384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3399.044323][T23384] RIP: 0033:0x7fd90bd5d68e [ 3399.048784][T23384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3399.068438][T23384] RSP: 002b:00007fd90cb7aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3399.076902][T23384] RAX: ffffffffffffffda RBX: 00007fd90cb7b6c0 RCX: 00007fd90bd5d68e [ 3399.084970][T23384] RDX: 0000000000000002 RSI: 00007fd90cb7af90 RDI: ffffffffffffff9c [ 3399.092990][T23384] RBP: 00007fd90cb7b090 R08: 0000000000000000 R09: 0000000000000000 [ 3399.101055][T23384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3399.109074][T23384] R13: 00007fd90c016038 R14: 00007fd90c015fa0 R15: 00007ffde3459a18 [ 3399.117108][T23384] [ 3401.423106][T23358] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16339'. [ 3401.433769][T23377] netlink: 'syz.2.16344': attribute type 1 has an invalid length. [ 3401.443182][T23388] netlink: 168 bytes leftover after parsing attributes in process `syz.0.16346'. [ 3401.718253][T23395] netlink: 'syz.0.16351': attribute type 39 has an invalid length. [ 3402.332978][T23399] mac80211_hwsim hwsim94 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3402.362344][T23402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16352'. [ 3402.567354][T23413] netlink: 'syz.3.16357': attribute type 2 has an invalid length. [ 3402.630143][T23413] netlink: 'syz.3.16357': attribute type 1 has an invalid length. [ 3402.639018][T23413] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.16357'. [ 3402.741542][T23419] netlink: 'syz.1.16358': attribute type 2 has an invalid length. [ 3402.884421][T23426] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16361'. [ 3402.987867][T23423] netlink: 'syz.2.16360': attribute type 2 has an invalid length. [ 3404.177295][T23446] netlink: 'syz.0.16369': attribute type 28 has an invalid length. [ 3404.381589][T23451] mac80211_hwsim hwsim106 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3404.400788][T23446] netlink: 'syz.0.16369': attribute type 10 has an invalid length. [ 3404.817062][T23446] team0: Device veth1_vlan failed to register rx_handler [ 3404.960223][T23451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16371'. [ 3405.178752][T23457] netlink: 168 bytes leftover after parsing attributes in process `syz.1.16373'. [ 3405.196300][T23459] netlink: 'syz.2.16374': attribute type 10 has an invalid length. [ 3405.780587][T23482] netlink: 'syz.4.16382': attribute type 2 has an invalid length. [ 3406.807658][T17899] wlan1: Trigger new scan to find an IBSS to join [ 3407.952891][T23497] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16388'. [ 3408.283374][T23510] netlink: 'syz.1.16391': attribute type 8 has an invalid length. [ 3408.303306][T23510] netlink: 'syz.1.16391': attribute type 4 has an invalid length. [ 3408.315114][T23510] netlink: 'syz.1.16391': attribute type 7 has an invalid length. [ 3408.324796][T23510] netlink: 'syz.1.16391': attribute type 8 has an invalid length. [ 3408.346890][T23510] netlink: 'syz.1.16391': attribute type 7 has an invalid length. [ 3408.377657][T23510] netlink: 125876 bytes leftover after parsing attributes in process `syz.1.16391'. [ 3408.695972][T23530] netlink: 168 bytes leftover after parsing attributes in process `syz.1.16400'. [ 3408.866182][T23535] netlink: 'syz.1.16401': attribute type 2 has an invalid length. [ 3409.326706][T23555] netlink: 168 bytes leftover after parsing attributes in process `syz.2.16412'. [ 3410.115850][T23587] netlink: 168 bytes leftover after parsing attributes in process `syz.0.16427'. [ 3410.214236][T23589] FAULT_INJECTION: forcing a failure. [ 3410.214236][T23589] name failslab, interval 1, probability 0, space 0, times 0 [ 3410.236156][T23589] CPU: 1 PID: 23589 Comm: syz.4.16428 Not tainted syzkaller #0 [ 3410.243783][T23589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3410.253871][T23589] Call Trace: [ 3410.257183][T23589] [ 3410.260211][T23589] dump_stack_lvl+0x188/0x24e [ 3410.264937][T23589] ? show_regs_print_info+0x12/0x12 [ 3410.270191][T23589] ? load_image+0x400/0x400 [ 3410.274748][T23589] ? __might_sleep+0xd0/0xd0 [ 3410.279374][T23589] ? __lock_acquire+0x7d10/0x7d10 [ 3410.284453][T23589] ? __lock_acquire+0x13cf/0x7d10 [ 3410.289526][T23589] should_fail_ex+0x399/0x4d0 [ 3410.294245][T23589] should_failslab+0x5/0x20 [ 3410.298810][T23589] slab_pre_alloc_hook+0x59/0x310 [ 3410.303878][T23589] ? __scm_send+0x6a9/0x1310 [ 3410.308518][T23589] __kmem_cache_alloc_node+0x4f/0x260 [ 3410.313937][T23589] ? __scm_send+0x6a9/0x1310 [ 3410.318578][T23589] kmalloc_trace+0x26/0xe0 [ 3410.323039][T23589] __scm_send+0x6a9/0x1310 [ 3410.327533][T23589] unix_dgram_sendmsg+0x164/0x16e0 [ 3410.332714][T23589] ? aa_sk_perm+0x81f/0x950 [ 3410.337264][T23589] ? __might_fault+0xa6/0x120 [ 3410.342001][T23589] ? __lock_acquire+0x7d10/0x7d10 [ 3410.347077][T23589] ? unix_dgram_poll+0x680/0x680 [ 3410.352067][T23589] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 3410.358545][T23589] ? __might_fault+0xa6/0x120 [ 3410.363268][T23589] ? aa_sock_msg_perm+0x94/0x150 [ 3410.368253][T23589] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3410.373580][T23589] ? security_socket_sendmsg+0x7c/0xa0 [ 3410.379111][T23589] ? unix_dgram_poll+0x680/0x680 [ 3410.384103][T23589] ____sys_sendmsg+0x5be/0x970 [ 3410.388926][T23589] ? __sys_sendmsg_sock+0x30/0x30 [ 3410.393992][T23589] ? __import_iovec+0x315/0x500 [ 3410.398897][T23589] ? import_iovec+0x6f/0xa0 [ 3410.403446][T23589] ___sys_sendmsg+0x2a2/0x360 [ 3410.408169][T23589] ? __sys_sendmsg+0x290/0x290 [ 3410.413003][T23589] ? __lock_acquire+0x7d10/0x7d10 [ 3410.418110][T23589] __se_sys_sendmsg+0x1bb/0x2a0 [ 3410.423009][T23589] ? ct_nmi_exit+0x145/0x1c0 [ 3410.427645][T23589] ? __x64_sys_sendmsg+0x80/0x80 [ 3410.432635][T23589] ? lockdep_hardirqs_on+0x94/0x140 [ 3410.437897][T23589] do_syscall_64+0x4c/0xa0 [ 3410.442362][T23589] ? clear_bhb_loop+0x60/0xb0 [ 3410.447089][T23589] ? clear_bhb_loop+0x60/0xb0 [ 3410.451822][T23589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3410.457766][T23589] RIP: 0033:0x7f1b51f9ce59 [ 3410.462221][T23589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3410.481865][T23589] RSP: 002b:00007f1b52ed8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3410.490331][T23589] RAX: ffffffffffffffda RBX: 00007f1b52215fa0 RCX: 00007f1b51f9ce59 [ 3410.498350][T23589] RDX: 0000000000040800 RSI: 0000200000007040 RDI: 0000000000000004 [ 3410.506364][T23589] RBP: 00007f1b52ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 3410.514376][T23589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3410.522384][T23589] R13: 00007f1b52216038 R14: 00007f1b52215fa0 R15: 00007fff9f630018 [ 3410.530408][T23589] [ 3410.729842][T23596] mac80211_hwsim hwsim104 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3410.764456][T23598] FAULT_INJECTION: forcing a failure. [ 3410.764456][T23598] name failslab, interval 1, probability 0, space 0, times 0 [ 3410.778108][T23598] CPU: 1 PID: 23598 Comm: syz.4.16432 Not tainted syzkaller #0 [ 3410.785711][T23598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3410.795826][T23598] Call Trace: [ 3410.799141][T23598] [ 3410.802107][T23598] dump_stack_lvl+0x188/0x24e [ 3410.806841][T23598] ? show_regs_print_info+0x12/0x12 [ 3410.812084][T23598] ? load_image+0x400/0x400 [ 3410.816645][T23598] ? percpu_ref_put+0x12/0x100 [ 3410.821471][T23598] should_fail_ex+0x399/0x4d0 [ 3410.826205][T23598] should_failslab+0x5/0x20 [ 3410.830754][T23598] slab_pre_alloc_hook+0x59/0x310 [ 3410.835879][T23598] kmem_cache_alloc+0x56/0x2f0 [ 3410.840698][T23598] ? inet_bind2_bucket_create+0x32/0x2f0 [ 3410.846380][T23598] inet_bind2_bucket_create+0x32/0x2f0 [ 3410.851899][T23598] ? inet_bind_bucket_create+0x17b/0x230 [ 3410.857583][T23598] inet_csk_get_port+0x107c/0x1840 [ 3410.862766][T23598] ? inet_csk_get_port+0x341/0x1840 [ 3410.868020][T23598] inet_sendmsg+0x1e8/0x2f0 [ 3410.872639][T23598] ? inet_send_prepare+0x260/0x260 [ 3410.877776][T23598] ____sys_sendmsg+0x5be/0x970 [ 3410.882568][T23598] ? __sys_sendmsg_sock+0x30/0x30 [ 3410.887611][T23598] ? __import_iovec+0x315/0x500 [ 3410.892517][T23598] ? import_iovec+0x6f/0xa0 [ 3410.897070][T23598] ___sys_sendmsg+0x2a2/0x360 [ 3410.901785][T23598] ? migrate_enable+0x148/0x220 [ 3410.906670][T23598] ? __sys_sendmsg+0x290/0x290 [ 3410.911499][T23598] __se_sys_sendmsg+0x1bb/0x2a0 [ 3410.916372][T23598] ? __x64_sys_sendmsg+0x80/0x80 [ 3410.921346][T23598] ? syscall_enter_from_user_mode+0x2a/0x80 [ 3410.927284][T23598] do_syscall_64+0x4c/0xa0 [ 3410.931725][T23598] ? clear_bhb_loop+0x60/0xb0 [ 3410.936451][T23598] ? clear_bhb_loop+0x60/0xb0 [ 3410.941165][T23598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3410.947094][T23598] RIP: 0033:0x7f1b51f9ce59 [ 3410.951533][T23598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3410.971162][T23598] RSP: 002b:00007f1b52ed8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3410.979603][T23598] RAX: ffffffffffffffda RBX: 00007f1b52215fa0 RCX: 00007f1b51f9ce59 [ 3410.987608][T23598] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 3410.995623][T23598] RBP: 00007f1b52ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 3411.003623][T23598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3411.011621][T23598] R13: 00007f1b52216038 R14: 00007f1b52215fa0 R15: 00007fff9f630018 [ 3411.019642][T23598] [ 3411.040758][T23596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16431'. [ 3411.275178][T23607] netlink: 'syz.2.16435': attribute type 2 has an invalid length. [ 3411.300362][T23607] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.16435'. [ 3411.769706][T21761] wlan1: Trigger new scan to find an IBSS to join [ 3411.864410][T12284] wlan1: Creating new IBSS network, BSSID 16:96:2d:3a:26:76 [ 3411.926844][T23610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16436'. [ 3412.012778][T12284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3412.215824][T23625] netlink: 168 bytes leftover after parsing attributes in process `syz.1.16440'. [ 3413.150673][T23656] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16451'. [ 3413.855630][T23686] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16463'. [ 3414.322857][T23705] netlink: 192 bytes leftover after parsing attributes in process `syz.0.16469'. [ 3414.390917][T23710] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16471'. [ 3414.417563][T23710] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16471'. [ 3414.431410][T23710] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16471'. [ 3414.704904][T23719] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16475'. [ 3414.807983][T12284] wlan1: Trigger new scan to find an IBSS to join [ 3415.341631][T23745] netlink: 'syz.4.16485': attribute type 2 has an invalid length. [ 3415.376947][T23745] device 0 entered promiscuous mode [ 3415.648866][T23757] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16488'. [ 3415.883348][T23759] netlink: 'syz.3.16491': attribute type 11 has an invalid length. [ 3416.284697][T23783] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16501'. [ 3417.072197][T23812] netlink: 172 bytes leftover after parsing attributes in process `syz.2.16513'. [ 3417.748241][T23843] FAULT_INJECTION: forcing a failure. [ 3417.748241][T23843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3417.763508][T23843] CPU: 0 PID: 23843 Comm: syz.1.16524 Not tainted syzkaller #0 [ 3417.771125][T23843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3417.781204][T23843] Call Trace: [ 3417.784515][T23843] [ 3417.787484][T23843] dump_stack_lvl+0x188/0x24e [ 3417.792203][T23843] ? show_regs_print_info+0x12/0x12 [ 3417.797443][T23843] ? load_image+0x400/0x400 [ 3417.801990][T23843] ? __lock_acquire+0x7d10/0x7d10 [ 3417.807056][T23843] ? snprintf+0xe5/0x140 [ 3417.811342][T23843] should_fail_ex+0x399/0x4d0 [ 3417.816036][T23843] _copy_to_user+0x2c/0x130 [ 3417.820574][T23843] simple_read_from_buffer+0xe3/0x150 [ 3417.825468][T12284] wlan1: Creating new IBSS network, BSSID fa:1b:f8:7e:60:2d [ 3417.826005][T23843] proc_fail_nth_read+0x1a6/0x220 [ 3417.826039][T23843] ? proc_fault_inject_write+0x310/0x310 [ 3417.844053][T23843] ? fsnotify_perm+0x248/0x550 [ 3417.848874][T23843] ? proc_fault_inject_write+0x310/0x310 [ 3417.854559][T23843] vfs_read+0x2de/0xa00 [ 3417.858763][T23843] ? kernel_read+0x1e0/0x1e0 [ 3417.863422][T23843] ? __fget_files+0x28/0x4b0 [ 3417.868087][T23843] ? __fget_files+0x28/0x4b0 [ 3417.872741][T23843] ? __fget_files+0x43d/0x4b0 [ 3417.877485][T23843] ? __fdget_pos+0x2ae/0x360 [ 3417.882136][T23843] ? ksys_read+0x71/0x250 [ 3417.886526][T23843] ksys_read+0x14c/0x250 [ 3417.890836][T23843] ? vfs_write+0xa30/0xa30 [ 3417.895313][T23843] ? lockdep_hardirqs_on+0x94/0x140 [ 3417.900565][T23843] do_syscall_64+0x4c/0xa0 [ 3417.905064][T23843] ? clear_bhb_loop+0x60/0xb0 [ 3417.909831][T23843] ? clear_bhb_loop+0x60/0xb0 [ 3417.914562][T23843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3417.920507][T23843] RIP: 0033:0x7fd90bd5d68e [ 3417.924963][T23843] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3417.944614][T23843] RSP: 002b:00007fd90cb7afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3417.953065][T23843] RAX: ffffffffffffffda RBX: 00007fd90cb7b6c0 RCX: 00007fd90bd5d68e [ 3417.961072][T23843] RDX: 000000000000000f RSI: 00007fd90cb7b0a0 RDI: 0000000000000003 [ 3417.969096][T23843] RBP: 00007fd90cb7b090 R08: 0000000000000000 R09: 0000000000000000 [ 3417.977114][T23843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3417.985128][T23843] R13: 00007fd90c016038 R14: 00007fd90c015fa0 R15: 00007ffde3459a18 [ 3417.993160][T23843] [ 3418.122815][T23847] netlink: 'syz.0.16525': attribute type 27 has an invalid length. [ 3418.129133][T23849] FAULT_INJECTION: forcing a failure. [ 3418.129133][T23849] name failslab, interval 1, probability 0, space 0, times 0 [ 3418.152617][T23849] CPU: 0 PID: 23849 Comm: syz.1.16527 Not tainted syzkaller #0 [ 3418.160249][T23849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3418.170349][T23849] Call Trace: [ 3418.173667][T23849] [ 3418.176640][T23849] dump_stack_lvl+0x188/0x24e [ 3418.181362][T23849] ? sctp_sendmsg+0x15b0/0x2940 [ 3418.186279][T23849] ? ___sys_sendmsg+0x2a2/0x360 [ 3418.191180][T23849] ? show_regs_print_info+0x12/0x12 [ 3418.196424][T23849] ? load_image+0x400/0x400 [ 3418.200999][T23849] should_fail_ex+0x399/0x4d0 [ 3418.205739][T23849] should_failslab+0x5/0x20 [ 3418.210292][T23849] slab_pre_alloc_hook+0x59/0x310 [ 3418.215365][T23849] ? sctp_add_bind_addr+0x89/0x350 [ 3418.220533][T23849] __kmem_cache_alloc_node+0x4f/0x260 [ 3418.225963][T23849] ? sctp_add_bind_addr+0x89/0x350 [ 3418.231129][T23849] kmalloc_trace+0x26/0xe0 [ 3418.235599][T23849] sctp_add_bind_addr+0x89/0x350 [ 3418.240601][T23849] sctp_copy_local_addr_list+0x311/0x4e0 [ 3418.246297][T23849] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 3418.252073][T23849] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 3418.258198][T23849] ? sctp_v4_is_any+0x31/0x50 [ 3418.262896][T23849] ? sctp_copy_one_addr+0x93/0x660 [ 3418.268056][T23849] sctp_bind_addr_copy+0xaf/0x3c0 [ 3418.273125][T23849] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 3418.279477][T23849] sctp_connect_new_asoc+0x2f5/0x6a0 [ 3418.284797][T23849] ? __sctp_connect+0xd80/0xd80 [ 3418.289689][T23849] ? __local_bh_enable_ip+0x136/0x1c0 [ 3418.295086][T23849] ? _local_bh_enable+0xa0/0xa0 [ 3418.299961][T23849] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 3418.305808][T23849] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 3418.311645][T23849] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 3418.317214][T23849] ? security_sctp_bind_connect+0x85/0xb0 [ 3418.322953][T23849] sctp_sendmsg+0x15b0/0x2940 [ 3418.327668][T23849] ? aa_sk_perm+0x811/0x950 [ 3418.332222][T23849] ? sctp_getsockopt+0x8a0/0x8a0 [ 3418.337179][T23849] ? __might_fault+0xa6/0x120 [ 3418.341879][T23849] ? aa_af_perm+0x340/0x340 [ 3418.346407][T23849] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 3418.352863][T23849] ? inet_sendmsg+0x78/0x2f0 [ 3418.357477][T23849] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3418.362781][T23849] ? security_socket_sendmsg+0x7c/0xa0 [ 3418.368277][T23849] ? inet_send_prepare+0x260/0x260 [ 3418.373429][T23849] ____sys_sendmsg+0x5be/0x970 [ 3418.378225][T23849] ? __sys_sendmsg_sock+0x30/0x30 [ 3418.383270][T23849] ? __import_iovec+0x315/0x500 [ 3418.388146][T23849] ? import_iovec+0x6f/0xa0 [ 3418.392689][T23849] ___sys_sendmsg+0x2a2/0x360 [ 3418.397390][T23849] ? __sys_sendmsg+0x290/0x290 [ 3418.402198][T23849] ? __lock_acquire+0x7d10/0x7d10 [ 3418.407277][T23849] __se_sys_sendmsg+0x1bb/0x2a0 [ 3418.412152][T23849] ? ct_nmi_exit+0x145/0x1c0 [ 3418.416771][T23849] ? __x64_sys_sendmsg+0x80/0x80 [ 3418.421747][T23849] ? lockdep_hardirqs_on+0x94/0x140 [ 3418.426987][T23849] do_syscall_64+0x4c/0xa0 [ 3418.431438][T23849] ? clear_bhb_loop+0x60/0xb0 [ 3418.436149][T23849] ? clear_bhb_loop+0x60/0xb0 [ 3418.440864][T23849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3418.446797][T23849] RIP: 0033:0x7fd90bd9ce59 [ 3418.451242][T23849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3418.470869][T23849] RSP: 002b:00007fd90cb7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3418.479303][T23849] RAX: ffffffffffffffda RBX: 00007fd90c015fa0 RCX: 00007fd90bd9ce59 [ 3418.487289][T23849] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 3418.495292][T23849] RBP: 00007fd90cb7b090 R08: 0000000000000000 R09: 0000000000000000 [ 3418.503280][T23849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3418.511273][T23849] R13: 00007fd90c016038 R14: 00007fd90c015fa0 R15: 00007ffde3459a18 [ 3418.519305][T23849] [ 3419.080768][T23867] FAULT_INJECTION: forcing a failure. [ 3419.080768][T23867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3419.094352][T23867] CPU: 0 PID: 23867 Comm: syz.1.16533 Not tainted syzkaller #0 [ 3419.101984][T23867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3419.112094][T23867] Call Trace: [ 3419.115407][T23867] [ 3419.118368][T23867] dump_stack_lvl+0x188/0x24e [ 3419.123093][T23867] ? show_regs_print_info+0x12/0x12 [ 3419.128329][T23867] ? load_image+0x400/0x400 [ 3419.132893][T23867] ? __might_fault+0xa6/0x120 [ 3419.137624][T23867] should_fail_ex+0x399/0x4d0 [ 3419.142346][T23867] copyin+0x1b/0x120 [ 3419.146284][T23867] _copy_from_iter+0x447/0x1130 [ 3419.151185][T23867] ? copyout_mc+0x110/0x110 [ 3419.155750][T23867] ? __virt_addr_valid+0x188/0x540 [ 3419.160928][T23867] ? __virt_addr_valid+0x188/0x540 [ 3419.166068][T23867] ? __virt_addr_valid+0x465/0x540 [ 3419.171209][T23867] ? __check_object_size+0x500/0xa40 [ 3419.176522][T23867] netlink_sendmsg+0x755/0xbd0 [ 3419.181319][T23867] ? netlink_getsockopt+0x550/0x550 [ 3419.186544][T23867] ? aa_sock_msg_perm+0x94/0x150 [ 3419.191511][T23867] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3419.196833][T23867] ? security_socket_sendmsg+0x7c/0xa0 [ 3419.202328][T23867] ? netlink_getsockopt+0x550/0x550 [ 3419.207552][T23867] ____sys_sendmsg+0x5be/0x970 [ 3419.212359][T23867] ? __sys_sendmsg_sock+0x30/0x30 [ 3419.217405][T23867] ? __import_iovec+0x315/0x500 [ 3419.222288][T23867] ? import_iovec+0x6f/0xa0 [ 3419.226838][T23867] ___sys_sendmsg+0x2a2/0x360 [ 3419.231541][T23867] ? __sys_sendmsg+0x290/0x290 [ 3419.236349][T23867] ? __lock_acquire+0x7d10/0x7d10 [ 3419.241418][T23867] __se_sys_sendmsg+0x1bb/0x2a0 [ 3419.246287][T23867] ? ct_nmi_exit+0x145/0x1c0 [ 3419.250913][T23867] ? __x64_sys_sendmsg+0x80/0x80 [ 3419.255890][T23867] ? lockdep_hardirqs_on+0x94/0x140 [ 3419.261117][T23867] do_syscall_64+0x4c/0xa0 [ 3419.265557][T23867] ? clear_bhb_loop+0x60/0xb0 [ 3419.270264][T23867] ? clear_bhb_loop+0x60/0xb0 [ 3419.274974][T23867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3419.280893][T23867] RIP: 0033:0x7fd90bd9ce59 [ 3419.285327][T23867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3419.304953][T23867] RSP: 002b:00007fd90cb7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3419.313394][T23867] RAX: ffffffffffffffda RBX: 00007fd90c015fa0 RCX: 00007fd90bd9ce59 [ 3419.321388][T23867] RDX: 0000000000080054 RSI: 00002000000000c0 RDI: 0000000000000005 [ 3419.329386][T23867] RBP: 00007fd90cb7b090 R08: 0000000000000000 R09: 0000000000000000 [ 3419.337379][T23867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3419.345381][T23867] R13: 00007fd90c016038 R14: 00007fd90c015fa0 R15: 00007ffde3459a18 [ 3419.353392][T23867] [ 3419.605796][T23874] __nla_validate_parse: 5 callbacks suppressed [ 3419.605815][T23874] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.16535'. [ 3419.643478][T23874] netlink: zone id is out of range [ 3419.660214][T23874] netlink: zone id is out of range [ 3419.665531][T23874] netlink: zone id is out of range [ 3419.697833][T23874] netlink: zone id is out of range [ 3419.713720][T23874] netlink: zone id is out of range [ 3419.729409][T23874] netlink: zone id is out of range [ 3419.734678][T23874] netlink: zone id is out of range [ 3419.780229][T23874] netlink: zone id is out of range [ 3419.785433][T23874] netlink: zone id is out of range [ 3419.810751][T23882] netlink: 172 bytes leftover after parsing attributes in process `syz.4.16538'. [ 3419.815875][T23874] netlink: zone id is out of range [ 3421.244441][T23922] FAULT_INJECTION: forcing a failure. [ 3421.244441][T23922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3421.282371][T23922] CPU: 1 PID: 23922 Comm: syz.1.16555 Not tainted syzkaller #0 [ 3421.290013][T23922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3421.300112][T23922] Call Trace: [ 3421.303445][T23922] [ 3421.306432][T23922] dump_stack_lvl+0x188/0x24e [ 3421.311154][T23922] ? show_regs_print_info+0x12/0x12 [ 3421.316395][T23922] ? load_image+0x400/0x400 [ 3421.320980][T23922] ? __lock_acquire+0x7d10/0x7d10 [ 3421.326047][T23922] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3421.332087][T23922] should_fail_ex+0x399/0x4d0 [ 3421.336824][T23922] _copy_to_user+0x2c/0x130 [ 3421.341392][T23922] bpf_test_finish+0x198/0x600 [ 3421.346212][T23922] ? convert_skb_to___skb+0x420/0x420 [ 3421.351651][T23922] bpf_prog_test_run_flow_dissector+0x4c5/0x640 [ 3421.357956][T23922] ? xdp_convert_buff_to_md+0x200/0x200 [ 3421.363553][T23922] ? __fget_files+0x28/0x4b0 [ 3421.368206][T23922] ? __fget_files+0x28/0x4b0 [ 3421.372858][T23922] ? xdp_convert_buff_to_md+0x200/0x200 [ 3421.378450][T23922] bpf_prog_test_run+0x31e/0x390 [ 3421.383453][T23922] __sys_bpf+0x62b/0x780 [ 3421.387748][T23922] ? bpf_link_show_fdinfo+0x380/0x380 [ 3421.393186][T23922] ? lock_chain_count+0x20/0x20 [ 3421.398089][T23922] __x64_sys_bpf+0x78/0x90 [ 3421.402550][T23922] do_syscall_64+0x4c/0xa0 [ 3421.407025][T23922] ? clear_bhb_loop+0x60/0xb0 [ 3421.411758][T23922] ? clear_bhb_loop+0x60/0xb0 [ 3421.416488][T23922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3421.422432][T23922] RIP: 0033:0x7fd90bd9ce59 [ 3421.426881][T23922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3421.446535][T23922] RSP: 002b:00007fd90cb7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3421.455003][T23922] RAX: ffffffffffffffda RBX: 00007fd90c015fa0 RCX: 00007fd90bd9ce59 [ 3421.463017][T23922] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 3421.471037][T23922] RBP: 00007fd90cb7b090 R08: 0000000000000000 R09: 0000000000000000 [ 3421.479060][T23922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3421.487069][T23922] R13: 00007fd90c016038 R14: 00007fd90c015fa0 R15: 00007ffde3459a18 [ 3421.495104][T23922] [ 3422.134484][T23953] netlink: 14 bytes leftover after parsing attributes in process `syz.0.16564'. [ 3422.205362][T23954] netlink: 'syz.2.16565': attribute type 1 has an invalid length. [ 3422.227815][T23954] netlink: 'syz.2.16565': attribute type 4 has an invalid length. [ 3422.235729][T23954] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.16565'. [ 3422.427048][T23964] FAULT_INJECTION: forcing a failure. [ 3422.427048][T23964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3422.452095][T23964] CPU: 0 PID: 23964 Comm: syz.1.16570 Not tainted syzkaller #0 [ 3422.459764][T23964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3422.469988][T23964] Call Trace: [ 3422.473331][T23964] [ 3422.476333][T23964] dump_stack_lvl+0x188/0x24e [ 3422.481108][T23964] ? show_regs_print_info+0x12/0x12 [ 3422.486394][T23964] ? load_image+0x400/0x400 [ 3422.491009][T23964] ? __lock_acquire+0x7d10/0x7d10 [ 3422.496124][T23964] ? perf_trace_lock+0xf8/0x390 [ 3422.501105][T23964] should_fail_ex+0x399/0x4d0 [ 3422.505903][T23964] _copy_from_user+0x2c/0x170 [ 3422.510678][T23964] ___sys_recvmsg+0x172/0x590 [ 3422.515456][T23964] ? __sys_recvmsg+0x290/0x290 [ 3422.520342][T23964] ? common_file_perm+0x171/0x1c0 [ 3422.525514][T23964] ? __fget_files+0x43d/0x4b0 [ 3422.530346][T23964] __x64_sys_recvmsg+0x205/0x2e0 [ 3422.535384][T23964] ? ___sys_recvmsg+0x590/0x590 [ 3422.540403][T23964] ? lockdep_hardirqs_on+0x94/0x140 [ 3422.545716][T23964] do_syscall_64+0x4c/0xa0 [ 3422.550233][T23964] ? clear_bhb_loop+0x60/0xb0 [ 3422.554997][T23964] ? clear_bhb_loop+0x60/0xb0 [ 3422.559779][T23964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3422.565787][T23964] RIP: 0033:0x7fd90bd9ce59 [ 3422.570307][T23964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3422.589993][T23964] RSP: 002b:00007fd90cb7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 3422.598492][T23964] RAX: ffffffffffffffda RBX: 00007fd90c015fa0 RCX: 00007fd90bd9ce59 [ 3422.606537][T23964] RDX: 0000000040000000 RSI: 0000200000000700 RDI: 0000000000000007 [ 3422.614599][T23964] RBP: 00007fd90cb7b090 R08: 0000000000000000 R09: 0000000000000000 [ 3422.622640][T23964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3422.630683][T23964] R13: 00007fd90c016038 R14: 00007fd90c015fa0 R15: 00007ffde3459a18 [ 3422.638797][T23964] [ 3422.675713][T23965] delete_channel: no stack [ 3422.805155][T23963] delete_channel: no stack [ 3422.811950][T23966] delete_channel: no stack [ 3423.234306][T23985] netlink: 'syz.4.16577': attribute type 6 has an invalid length. [ 3423.536386][T23992] netlink: 'syz.0.16580': attribute type 2 has an invalid length. [ 3423.717231][T24005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16585'. [ 3424.112190][T24024] netlink: 14 bytes leftover after parsing attributes in process `syz.0.16592'. [ 3424.265741][T24024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3424.323902][T24024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3424.353840][T24024] bond0 (unregistering): Released all slaves [ 3424.387911][T24032] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.16595'. [ 3424.571071][T24033] netlink: 'syz.4.16595': attribute type 10 has an invalid length. [ 3424.616955][T24035] netlink: 'syz.0.16596': attribute type 2 has an invalid length. [ 3424.753831][T24033] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 3424.860580][T24035] device 0 entered promiscuous mode [ 3425.011995][T24042] netlink: 172 bytes leftover after parsing attributes in process `syz.3.16598'. [ 3425.543130][T24058] device syzkaller0 entered promiscuous mode [ 3428.468439][T24085] netlink: 'syz.4.16612': attribute type 10 has an invalid length. [ 3428.670438][T24091] netlink: 'syz.4.16615': attribute type 10 has an invalid length. [ 3428.707378][T24093] netlink: 172 bytes leftover after parsing attributes in process `syz.0.16614'. [ 3429.826373][T24114] netlink: 'syz.1.16622': attribute type 13 has an invalid length. [ 3429.887858][T24114] netlink: 14581 bytes leftover after parsing attributes in process `syz.1.16622'. [ 3430.068411][T24121] FAULT_INJECTION: forcing a failure. [ 3430.068411][T24121] name failslab, interval 1, probability 0, space 0, times 0 [ 3430.117078][T24121] CPU: 1 PID: 24121 Comm: syz.3.16625 Not tainted syzkaller #0 [ 3430.124806][T24121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3430.134903][T24121] Call Trace: [ 3430.138223][T24121] [ 3430.141196][T24121] dump_stack_lvl+0x188/0x24e [ 3430.145937][T24121] ? show_regs_print_info+0x12/0x12 [ 3430.151195][T24121] ? load_image+0x400/0x400 [ 3430.155759][T24121] ? __might_sleep+0xd0/0xd0 [ 3430.160421][T24121] ? __lock_acquire+0x7d10/0x7d10 [ 3430.165513][T24121] should_fail_ex+0x399/0x4d0 [ 3430.170245][T24121] should_failslab+0x5/0x20 [ 3430.174793][T24121] slab_pre_alloc_hook+0x59/0x310 [ 3430.179888][T24121] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 3430.185671][T24121] __kmem_cache_alloc_node+0x4f/0x260 [ 3430.191114][T24121] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 3430.196898][T24121] __kmalloc+0xa0/0x240 [ 3430.201141][T24121] tomoyo_realpath_from_path+0xdf/0x5d0 [ 3430.206775][T24121] ? tomoyo_path_number_perm+0x205/0x650 [ 3430.212469][T24121] tomoyo_path_number_perm+0x22f/0x650 [ 3430.218002][T24121] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 3430.224656][T24121] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3430.230174][T24121] ? ksys_write+0x1c0/0x250 [ 3430.234734][T24121] ? common_file_perm+0x171/0x1c0 [ 3430.239886][T24121] ? __fget_files+0x28/0x4b0 [ 3430.244538][T24121] ? __fget_files+0x28/0x4b0 [ 3430.249208][T24121] security_file_ioctl+0x6c/0xa0 [ 3430.254230][T24121] __se_sys_ioctl+0x48/0x170 [ 3430.258891][T24121] do_syscall_64+0x4c/0xa0 [ 3430.263354][T24121] ? clear_bhb_loop+0x60/0xb0 [ 3430.268088][T24121] ? clear_bhb_loop+0x60/0xb0 [ 3430.272827][T24121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3430.278775][T24121] RIP: 0033:0x7fb9cf99ce59 [ 3430.283239][T24121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3430.302900][T24121] RSP: 002b:00007fb9d07fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3430.311373][T24121] RAX: ffffffffffffffda RBX: 00007fb9cfc15fa0 RCX: 00007fb9cf99ce59 [ 3430.319394][T24121] RDX: 0000200000000480 RSI: 00000000400454d9 RDI: 0000000000000003 [ 3430.327417][T24121] RBP: 00007fb9d07fb090 R08: 0000000000000000 R09: 0000000000000000 [ 3430.335438][T24121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3430.343469][T24121] R13: 00007fb9cfc16038 R14: 00007fb9cfc15fa0 R15: 00007fff9925fe78 [ 3430.351531][T24121] [ 3430.368545][T24121] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3430.692640][ T4273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3430.709238][ T4273] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3430.726582][ T4273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3430.734707][ T4273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3430.742510][ T4273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3430.749847][ T4273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3430.803370][T24126] netlink: 128 bytes leftover after parsing attributes in process `syz.0.16627'. [ 3430.826851][T24126] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3430.881367][T24126] net_ratelimit: 3542 callbacks suppressed [ 3430.881385][T24126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3431.471350][T24143] netlink: 172 bytes leftover after parsing attributes in process `syz.1.16630'. [ 3431.573507][T12282] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3431.676412][T12282] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3431.827716][T12282] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3432.106297][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 3432.629368][T12282] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3432.646331][T24135] chnl_net:caif_netlink_parms(): no params data found [ 3432.663348][T24161] netlink: 'syz.1.16637': attribute type 21 has an invalid length. [ 3432.677916][T24161] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16637'. [ 3432.807965][ T1091] Bluetooth: hci4: command 0x0409 tx timeout [ 3432.880073][T24135] bridge0: port 1(bridge_slave_0) entered blocking state [ 3432.894661][T24135] bridge0: port 1(bridge_slave_0) entered disabled state [ 3432.903413][T24135] device bridge_slave_0 entered promiscuous mode [ 3432.913413][T12282] device 0 left promiscuous mode [ 3432.971120][T24135] bridge0: port 2(bridge_slave_1) entered blocking state [ 3432.982522][T24135] bridge0: port 2(bridge_slave_1) entered disabled state [ 3432.998928][T24135] device bridge_slave_1 entered promiscuous mode [ 3433.017665][T24171] netlink: 'syz.3.16639': attribute type 7 has an invalid length. [ 3433.031464][T12282] device 0 left promiscuous mode [ 3433.162645][T24135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3433.200624][T24135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3433.462800][T24184] netlink: 172 bytes leftover after parsing attributes in process `syz.1.16642'. [ 3433.550066][T24135] team0: Port device team_slave_0 added [ 3433.570675][T24135] team0: Port device team_slave_1 added [ 3433.661417][T24135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3433.695801][T24135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3433.787645][T24135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3433.907542][T24135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3433.914673][T24135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3433.969473][T24135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3434.190248][T24200] netlink: 172 bytes leftover after parsing attributes in process `syz.1.16654'. [ 3434.422255][T24215] FAULT_INJECTION: forcing a failure. [ 3434.422255][T24215] name failslab, interval 1, probability 0, space 0, times 0 [ 3434.457652][T24215] CPU: 1 PID: 24215 Comm: syz.0.16648 Not tainted syzkaller #0 [ 3434.465320][T24215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3434.475433][T24215] Call Trace: [ 3434.478742][T24215] [ 3434.481710][T24215] dump_stack_lvl+0x188/0x24e [ 3434.486413][T24215] ? show_regs_print_info+0x12/0x12 [ 3434.491641][T24215] ? load_image+0x400/0x400 [ 3434.496183][T24215] ? __might_sleep+0xd0/0xd0 [ 3434.500814][T24215] ? __lock_acquire+0x7d10/0x7d10 [ 3434.505880][T24215] should_fail_ex+0x399/0x4d0 [ 3434.510593][T24215] should_failslab+0x5/0x20 [ 3434.515114][T24215] slab_pre_alloc_hook+0x59/0x310 [ 3434.520159][T24215] kmem_cache_alloc_node+0x5a/0x320 [ 3434.525377][T24215] ? __alloc_skb+0xfc/0x7e0 [ 3434.529907][T24215] __alloc_skb+0xfc/0x7e0 [ 3434.534269][T24215] netlink_dump+0x1ee/0xd00 [ 3434.538806][T24215] ? lockdep_hardirqs_on+0x94/0x140 [ 3434.544052][T24215] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3434.550241][T24215] ? netlink_lookup+0x200/0x200 [ 3434.555126][T24215] ? __inet_diag_dump_start+0x805/0x970 [ 3434.560716][T24215] __netlink_dump_start+0x537/0x6f0 [ 3434.565946][T24215] inet_diag_rcv_msg_compat+0x207/0x420 [ 3434.571526][T24215] ? __inet_diag_dump+0x380/0x380 [ 3434.576599][T24215] ? sock_diag_rcv_msg+0x142/0x5f0 [ 3434.581752][T24215] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 3434.587532][T24215] ? inet_diag_dump_start_compat+0x20/0x20 [ 3434.593400][T24215] ? inet_diag_dump+0x50/0x50 [ 3434.598116][T24215] ? __inet_diag_dump+0x380/0x380 [ 3434.603180][T24215] sock_diag_rcv_msg+0x3cc/0x5f0 [ 3434.608158][T24215] netlink_rcv_skb+0x1fb/0x450 [ 3434.612949][T24215] ? sock_diag_bind+0xa0/0xa0 [ 3434.617668][T24215] ? netlink_ack+0x1170/0x1170 [ 3434.622452][T24215] ? lockdep_hardirqs_on+0x94/0x140 [ 3434.627688][T24215] sock_diag_rcv+0x26/0x40 [ 3434.632127][T24215] netlink_unicast+0x74d/0x8d0 [ 3434.636927][T24215] netlink_sendmsg+0x8ad/0xbd0 [ 3434.641723][T24215] ? netlink_getsockopt+0x550/0x550 [ 3434.646958][T24215] ? aa_sock_msg_perm+0x94/0x150 [ 3434.651919][T24215] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3434.657231][T24215] ? security_socket_sendmsg+0x7c/0xa0 [ 3434.662733][T24215] ? netlink_getsockopt+0x550/0x550 [ 3434.667962][T24215] ____sys_sendmsg+0x5be/0x970 [ 3434.672766][T24215] ? __sys_sendmsg_sock+0x30/0x30 [ 3434.677813][T24215] ? __import_iovec+0x315/0x500 [ 3434.682705][T24215] ? import_iovec+0x6f/0xa0 [ 3434.687242][T24215] ___sys_sendmsg+0x2a2/0x360 [ 3434.691958][T24215] ? __sys_sendmsg+0x290/0x290 [ 3434.696780][T24215] ? ktime_get_real_ts64+0x440/0x440 [ 3434.702200][T24215] __se_sys_sendmsg+0x1bb/0x2a0 [ 3434.707078][T24215] ? ct_nmi_exit+0x145/0x1c0 [ 3434.711706][T24215] ? __x64_sys_sendmsg+0x80/0x80 [ 3434.716700][T24215] ? lockdep_hardirqs_on+0x94/0x140 [ 3434.721942][T24215] do_syscall_64+0x4c/0xa0 [ 3434.726391][T24215] ? clear_bhb_loop+0x60/0xb0 [ 3434.731104][T24215] ? clear_bhb_loop+0x60/0xb0 [ 3434.735829][T24215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3434.741773][T24215] RIP: 0033:0x7fe9f9d9ce59 [ 3434.746238][T24215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3434.765875][T24215] RSP: 002b:00007fe9fac12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3434.774314][T24215] RAX: ffffffffffffffda RBX: 00007fe9fa015fa0 RCX: 00007fe9f9d9ce59 [ 3434.782309][T24215] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 3434.790393][T24215] RBP: 00007fe9fac12090 R08: 0000000000000000 R09: 0000000000000000 [ 3434.798394][T24215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3434.806468][T24215] R13: 00007fe9fa016038 R14: 00007fe9fa015fa0 R15: 00007ffe259e7c28 [ 3434.814472][T24215] [ 3434.861425][T24135] device hsr_slave_0 entered promiscuous mode [ 3434.896012][ T1091] Bluetooth: hci4: command 0x041b tx timeout [ 3435.243045][T24135] device hsr_slave_1 entered promiscuous mode [ 3435.270669][T24135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3435.280631][T24135] Cannot create hsr debugfs directory [ 3436.150738][T12282] team0: Port device wlan1 removed [ 3436.221655][T24250] netlink: 172 bytes leftover after parsing attributes in process `syz.1.16658'. [ 3436.800932][T24240] delete_channel: no stack [ 3436.967819][ T1091] Bluetooth: hci4: command 0x040f tx timeout [ 3437.202374][T12282] device hsr_slave_0 left promiscuous mode [ 3437.283796][T12282] device hsr_slave_1 left promiscuous mode [ 3437.317666][T12282] device bridge_slave_1 left promiscuous mode [ 3437.329131][T12282] bridge0: port 2(bridge_slave_1) entered disabled state [ 3437.359479][T12282] device bridge_slave_0 left promiscuous mode [ 3437.386193][T12282] bridge0: port 1(bridge_slave_0) entered disabled state [ 3437.497044][T12282] device veth0_macvtap left promiscuous mode [ 3437.949872][T12282] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 3438.369427][T12282] team0 (unregistering): Port device team_slave_1 removed [ 3438.456671][T12282] team0 (unregistering): Port device team_slave_0 removed [ 3438.529132][T12282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3438.858347][T12282] team0 (unregistering): Port device bridge0 removed [ 3438.892565][T12282] bond0 (unregistering): Released all slaves [ 3439.000721][T24277] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.16663'. [ 3439.014624][T24290] netlink: 'syz.4.16665': attribute type 21 has an invalid length. [ 3439.023176][T24290] IPv6: NLM_F_CREATE should be specified when creating new route [ 3439.031980][T24300] netlink: 'syz.1.16668': attribute type 7 has an invalid length. [ 3439.047490][ T1091] Bluetooth: hci4: command 0x0419 tx timeout [ 3439.248605][T24308] netlink: 172 bytes leftover after parsing attributes in process `syz.3.16669'. [ 3439.385597][T24312] netlink: 'syz.0.16671': attribute type 3 has an invalid length. [ 3439.427532][T24312] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16671'. [ 3439.480581][T24135] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3439.546843][T24135] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3439.564047][T24316] netlink: 'syz.3.16672': attribute type 3 has an invalid length. [ 3439.585044][T24135] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3439.595820][T24316] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16672'. [ 3439.622597][T24135] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3439.997329][T24325] netlink: 'syz.0.16674': attribute type 29 has an invalid length. [ 3440.015570][T24135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3440.044809][T24325] netlink: 'syz.0.16674': attribute type 29 has an invalid length. [ 3440.078094][T24327] netlink: 'syz.0.16674': attribute type 29 has an invalid length. [ 3440.116241][T21758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3440.135078][T21758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3440.169674][T24135] 8021q: adding VLAN 0 to HW filter on device team0 [ 3440.188587][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3440.201274][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3440.213404][T12282] bridge0: port 1(bridge_slave_0) entered blocking state [ 3440.220619][T12282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3440.241146][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3440.256324][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3440.267179][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3440.283755][T12282] bridge0: port 2(bridge_slave_1) entered blocking state [ 3440.290953][T12282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3440.307301][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3440.329758][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3440.340998][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3440.351275][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3440.360540][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3440.370582][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3440.386890][T24135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3440.404798][T24135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3440.418419][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3440.432394][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3440.446522][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3440.457231][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3440.469551][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3440.489423][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3440.808802][T24347] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.16678'. [ 3440.909211][T24351] sock: sock_timestamping_bind_phc: sock not bind to device [ 3441.106957][T24358] netlink: 172 bytes leftover after parsing attributes in process `syz.0.16681'. [ 3441.242217][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3441.258213][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3441.303952][T24135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3441.423271][T12292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3441.452736][T12292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3441.547102][T12292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3441.576528][T12292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3441.611700][T24135] device veth0_vlan entered promiscuous mode [ 3441.631949][T24376] netlink: 'syz.1.16685': attribute type 39 has an invalid length. [ 3442.089598][T12292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3442.100742][T12292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3442.163676][T24135] device veth1_vlan entered promiscuous mode [ 3442.202634][T12292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3442.355948][T21758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3442.373789][T21758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3442.409926][T24135] device veth0_macvtap entered promiscuous mode [ 3442.445679][T24135] device veth1_macvtap entered promiscuous mode [ 3442.568615][T24135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3442.617787][T24135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3442.670124][T24135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3442.707959][T21758] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3442.736160][T21758] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3442.774208][T21758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3442.821212][T21758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3442.852660][T24135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3442.887650][T24135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3442.912977][T24135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3442.962582][T24135] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3442.992640][T24135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3443.023189][T24135] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3443.067579][T24135] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3443.153371][T17899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3443.173181][T17899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3443.639308][T17899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3443.648945][T17899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3443.781116][T21758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3443.837392][T21758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3443.850713][T21758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3443.891376][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3445.922994][T21761] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3447.185259][T24440] netlink: 172 bytes leftover after parsing attributes in process `syz.3.16696'. [ 3449.620744][T24480] netlink: 'syz.0.16707': attribute type 27 has an invalid length. [ 3449.645785][T24480] netlink: 164 bytes leftover after parsing attributes in process `syz.0.16707'. [ 3450.344386][T24491] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16710'. [ 3450.656475][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.663340][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 3450.749166][T17899] wlan1: Trigger new scan to find an IBSS to join [ 3451.235830][T24500] netlink: 'syz.3.16709': attribute type 13 has an invalid length. [ 3451.279437][T24500] netlink: 'syz.3.16709': attribute type 58 has an invalid length. [ 3451.354196][T24500] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16709'. [ 3451.459255][T24498] netlink: 172 bytes leftover after parsing attributes in process `syz.0.16712'. [ 3454.727638][T12282] wlan1: Trigger new scan to find an IBSS to join [ 3454.898485][T24531] syz.3.16721[24531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3455.284286][T24538] netlink: 172 bytes leftover after parsing attributes in process `syz.2.16725'. [ 3455.811706][T24543] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.16726'. [ 3455.889401][T24543] netlink: zone id is out of range [ 3455.896034][T24543] netlink: zone id is out of range [ 3455.951895][T24543] netlink: zone id is out of range [ 3455.987144][T24543] netlink: zone id is out of range [ 3455.994061][T24543] netlink: zone id is out of range [ 3456.001166][T24543] netlink: zone id is out of range [ 3456.007244][T24543] netlink: zone id is out of range [ 3456.035292][T24543] netlink: zone id is out of range [ 3456.066016][T24543] netlink: zone id is out of range [ 3456.108212][T24543] netlink: zone id is out of range [ 3456.478674][T24559] FAULT_INJECTION: forcing a failure. [ 3456.478674][T24559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3456.527943][T24559] CPU: 1 PID: 24559 Comm: syz.0.16731 Not tainted syzkaller #0 [ 3456.535596][T24559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3456.545707][T24559] Call Trace: [ 3456.549043][T24559] [ 3456.552033][T24559] dump_stack_lvl+0x188/0x24e [ 3456.556817][T24559] ? show_regs_print_info+0x12/0x12 [ 3456.562095][T24559] ? load_image+0x400/0x400 [ 3456.566691][T24559] ? __lock_acquire+0x7d10/0x7d10 [ 3456.571890][T24559] ? snprintf+0xe5/0x140 [ 3456.576217][T24559] should_fail_ex+0x399/0x4d0 [ 3456.580978][T24559] _copy_to_user+0x2c/0x130 [ 3456.585559][T24559] simple_read_from_buffer+0xe3/0x150 [ 3456.591008][T24559] proc_fail_nth_read+0x1a6/0x220 [ 3456.596110][T24559] ? proc_fault_inject_write+0x310/0x310 [ 3456.601834][T24559] ? fsnotify_perm+0x248/0x550 [ 3456.606687][T24559] ? proc_fault_inject_write+0x310/0x310 [ 3456.612395][T24559] vfs_read+0x2de/0xa00 [ 3456.616664][T24559] ? kernel_read+0x1e0/0x1e0 [ 3456.621327][T24559] ? __fget_files+0x28/0x4b0 [ 3456.625963][T24559] ? __fget_files+0x28/0x4b0 [ 3456.630605][T24559] ? __fget_files+0x43d/0x4b0 [ 3456.635340][T24559] ? __fdget_pos+0x2ae/0x360 [ 3456.639985][T24559] ? ksys_read+0x71/0x250 [ 3456.644376][T24559] ksys_read+0x14c/0x250 [ 3456.648685][T24559] ? vfs_write+0xa30/0xa30 [ 3456.653178][T24559] ? lockdep_hardirqs_on+0x94/0x140 [ 3456.658435][T24559] do_syscall_64+0x4c/0xa0 [ 3456.662883][T24559] ? clear_bhb_loop+0x60/0xb0 [ 3456.667602][T24559] ? clear_bhb_loop+0x60/0xb0 [ 3456.672335][T24559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3456.678276][T24559] RIP: 0033:0x7fe9f9d5d68e [ 3456.682736][T24559] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3456.702386][T24559] RSP: 002b:00007fe9fabf0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3456.710843][T24559] RAX: ffffffffffffffda RBX: 00007fe9fabf16c0 RCX: 00007fe9f9d5d68e [ 3456.718849][T24559] RDX: 000000000000000f RSI: 00007fe9fabf10a0 RDI: 0000000000000007 [ 3456.726858][T24559] RBP: 00007fe9fabf1090 R08: 0000000000000000 R09: 0000000000000000 [ 3456.734863][T24559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3456.742885][T24559] R13: 00007fe9fa016128 R14: 00007fe9fa016090 R15: 00007ffe259e7c28 [ 3456.750940][T24559] [ 3456.808052][T17899] wlan1: Creating new IBSS network, BSSID 1e:71:96:b1:10:f7 [ 3457.039422][T24565] netlink: 'syz.2.16733': attribute type 21 has an invalid length. [ 3457.216450][T24568] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.16734'. [ 3457.384130][T24570] netlink: 'syz.1.16734': attribute type 10 has an invalid length. [ 3457.581291][T24570] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 3457.581782][T24569] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16734'. [ 3458.700570][T24588] netlink: 172 bytes leftover after parsing attributes in process `syz.1.16740'. [ 3459.279217][T24598] netlink: 'syz.1.16743': attribute type 2 has an invalid length. [ 3459.317802][T24598] netlink: 'syz.1.16743': attribute type 1 has an invalid length. [ 3459.348026][T24598] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16743'. [ 3460.138551][T24618] netlink: 'syz.1.16749': attribute type 29 has an invalid length. [ 3460.171898][T24618] netlink: 'syz.1.16749': attribute type 29 has an invalid length. [ 3460.198736][T24617] netlink: 'syz.1.16749': attribute type 29 has an invalid length. [ 3460.213927][T24619] netlink: 'syz.1.16749': attribute type 29 has an invalid length. [ 3460.392210][T24625] netlink: 172 bytes leftover after parsing attributes in process `syz.2.16753'. [ 3460.479255][T24628] netlink: 'syz.3.16751': attribute type 1 has an invalid length. [ 3460.503121][T24628] netlink: 'syz.3.16751': attribute type 4 has an invalid length. [ 3460.512728][T24628] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.16751'. [ 3461.095342][T24654] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16763'. [ 3461.128388][T24654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3461.157724][T24654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3461.178346][T24654] device batadv_slave_1 entered promiscuous mode [ 3461.214532][T24657] netlink: 172 bytes leftover after parsing attributes in process `syz.4.16764'. [ 3461.946862][T24687] device wlan1 left promiscuous mode [ 3462.059228][T24693] netlink: 172 bytes leftover after parsing attributes in process `syz.2.16778'. [ 3462.299044][T24707] FAULT_INJECTION: forcing a failure. [ 3462.299044][T24707] name failslab, interval 1, probability 0, space 0, times 0 [ 3462.327480][T24707] CPU: 1 PID: 24707 Comm: syz.3.16783 Not tainted syzkaller #0 [ 3462.335115][T24707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3462.345263][T24707] Call Trace: [ 3462.348582][T24707] [ 3462.351557][T24707] dump_stack_lvl+0x188/0x24e [ 3462.356283][T24707] ? sctp_sendmsg+0x15b0/0x2940 [ 3462.361185][T24707] ? ___sys_sendmsg+0x2a2/0x360 [ 3462.366084][T24707] ? show_regs_print_info+0x12/0x12 [ 3462.371333][T24707] ? load_image+0x400/0x400 [ 3462.375897][T24707] should_fail_ex+0x399/0x4d0 [ 3462.380623][T24707] should_failslab+0x5/0x20 [ 3462.385165][T24707] slab_pre_alloc_hook+0x59/0x310 [ 3462.390242][T24707] ? sctp_add_bind_addr+0x89/0x350 [ 3462.395402][T24707] __kmem_cache_alloc_node+0x4f/0x260 [ 3462.400820][T24707] ? sctp_add_bind_addr+0x89/0x350 [ 3462.405992][T24707] kmalloc_trace+0x26/0xe0 [ 3462.410473][T24707] sctp_add_bind_addr+0x89/0x350 [ 3462.415471][T24707] sctp_copy_local_addr_list+0x311/0x4e0 [ 3462.421159][T24707] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 3462.426921][T24707] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 3462.433039][T24707] ? sctp_v4_is_any+0x31/0x50 [ 3462.437744][T24707] ? sctp_copy_one_addr+0x93/0x660 [ 3462.442887][T24707] sctp_bind_addr_copy+0xaf/0x3c0 [ 3462.447940][T24707] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 3462.454290][T24707] sctp_connect_new_asoc+0x2f5/0x6a0 [ 3462.459593][T24707] ? __sctp_connect+0xd80/0xd80 [ 3462.464460][T24707] ? __local_bh_enable_ip+0x136/0x1c0 [ 3462.469882][T24707] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 3462.475496][T24707] ? security_sctp_bind_connect+0x85/0xb0 [ 3462.481259][T24707] sctp_sendmsg+0x15b0/0x2940 [ 3462.485990][T24707] ? aa_sk_perm+0x811/0x950 [ 3462.490532][T24707] ? sctp_getsockopt+0x8a0/0x8a0 [ 3462.495497][T24707] ? __might_fault+0xa6/0x120 [ 3462.500206][T24707] ? aa_af_perm+0x340/0x340 [ 3462.504752][T24707] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 3462.511213][T24707] ? inet_sendmsg+0xe5/0x2f0 [ 3462.515854][T24707] ? inet_send_prepare+0x260/0x260 [ 3462.520988][T24707] ____sys_sendmsg+0x5be/0x970 [ 3462.525781][T24707] ? __sys_sendmsg_sock+0x30/0x30 [ 3462.530825][T24707] ? __import_iovec+0x315/0x500 [ 3462.535709][T24707] ? import_iovec+0x6f/0xa0 [ 3462.540272][T24707] ___sys_sendmsg+0x2a2/0x360 [ 3462.544983][T24707] ? __sys_sendmsg+0x290/0x290 [ 3462.549779][T24707] ? __lock_acquire+0x7d10/0x7d10 [ 3462.554847][T24707] __se_sys_sendmsg+0x1bb/0x2a0 [ 3462.559721][T24707] ? __x64_sys_sendmsg+0x80/0x80 [ 3462.564696][T24707] ? lockdep_hardirqs_on+0x94/0x140 [ 3462.569938][T24707] do_syscall_64+0x4c/0xa0 [ 3462.574371][T24707] ? clear_bhb_loop+0x60/0xb0 [ 3462.579072][T24707] ? clear_bhb_loop+0x60/0xb0 [ 3462.583794][T24707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3462.589746][T24707] RIP: 0033:0x7fb9cf99ce59 [ 3462.594214][T24707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3462.613859][T24707] RSP: 002b:00007fb9d07fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3462.622391][T24707] RAX: ffffffffffffffda RBX: 00007fb9cfc15fa0 RCX: 00007fb9cf99ce59 [ 3462.630409][T24707] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 3462.638400][T24707] RBP: 00007fb9d07fb090 R08: 0000000000000000 R09: 0000000000000000 [ 3462.646388][T24707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3462.654466][T24707] R13: 00007fb9cfc16038 R14: 00007fb9cfc15fa0 R15: 00007fff9925fe78 [ 3462.662474][T24707] [ 3463.320938][T24735] validate_nla: 1 callbacks suppressed [ 3463.320980][T24735] netlink: 'syz.3.16794': attribute type 3 has an invalid length. [ 3463.361439][T24735] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.16794'. [ 3463.865277][T24731] netlink: 172 bytes leftover after parsing attributes in process `syz.2.16792'. [ 3463.877635][T24738] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16794'. [ 3464.382743][T24759] FAULT_INJECTION: forcing a failure. [ 3464.382743][T24759] name failslab, interval 1, probability 0, space 0, times 0 [ 3464.445065][T24759] CPU: 0 PID: 24759 Comm: syz.1.16801 Not tainted syzkaller #0 [ 3464.452717][T24759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3464.462816][T24759] Call Trace: [ 3464.466143][T24759] [ 3464.469138][T24759] dump_stack_lvl+0x188/0x24e [ 3464.473862][T24759] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3464.480074][T24759] ? show_regs_print_info+0x12/0x12 [ 3464.485310][T24759] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3464.491536][T24759] ? dump_stack+0x5/0x12 [ 3464.495842][T24759] should_fail_ex+0x399/0x4d0 [ 3464.500586][T24759] should_failslab+0x5/0x20 [ 3464.505128][T24759] slab_pre_alloc_hook+0x59/0x310 [ 3464.510201][T24759] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 3464.515980][T24759] __kmem_cache_alloc_node+0x4f/0x260 [ 3464.521431][T24759] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 3464.527225][T24759] __kmalloc+0xa0/0x240 [ 3464.531441][T24759] tomoyo_realpath_from_path+0xdf/0x5d0 [ 3464.537059][T24759] ? tomoyo_path_number_perm+0x205/0x650 [ 3464.542749][T24759] tomoyo_path_number_perm+0x22f/0x650 [ 3464.548260][T24759] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3464.553764][T24759] ? irqentry_enter+0x33/0x50 [ 3464.558539][T24759] ? __fget_files+0x28/0x4b0 [ 3464.563201][T24759] ? __fget_files+0x28/0x4b0 [ 3464.567856][T24759] security_file_ioctl+0x6c/0xa0 [ 3464.572852][T24759] __se_sys_ioctl+0x48/0x170 [ 3464.577495][T24759] do_syscall_64+0x4c/0xa0 [ 3464.581959][T24759] ? clear_bhb_loop+0x60/0xb0 [ 3464.586693][T24759] ? clear_bhb_loop+0x60/0xb0 [ 3464.591426][T24759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3464.597367][T24759] RIP: 0033:0x7fd90bd9ce59 [ 3464.601823][T24759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3464.621478][T24759] RSP: 002b:00007fd90cb7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3464.629950][T24759] RAX: ffffffffffffffda RBX: 00007fd90c015fa0 RCX: 00007fd90bd9ce59 [ 3464.637963][T24759] RDX: 0000200000000080 RSI: 000000000000541b RDI: 0000000000000005 [ 3464.645970][T24759] RBP: 00007fd90cb7b090 R08: 0000000000000000 R09: 0000000000000000 [ 3464.653981][T24759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3464.661992][T24759] R13: 00007fd90c016038 R14: 00007fd90c015fa0 R15: 00007ffde3459a18 [ 3464.670023][T24759] [ 3464.738067][T24759] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3465.003865][T24770] netlink: 172 bytes leftover after parsing attributes in process `syz.1.16806'. [ 3468.773571][T24804] netlink: 172 bytes leftover after parsing attributes in process `syz.2.16819'. [ 3470.466922][T24840] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.16828'. [ 3470.775700][T24837] netlink: 'syz.2.16828': attribute type 10 has an invalid length. [ 3470.869412][T24841] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16828'. [ 3470.931182][T24837] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 3471.010363][T24853] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16834'. [ 3471.022220][T24848] netlink: 172 bytes leftover after parsing attributes in process `syz.4.16833'. [ 3471.072056][T24852] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16834'. [ 3471.116767][T24853] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16834'. [ 3472.073770][T24863] netlink: 128 bytes leftover after parsing attributes in process `syz.1.16837'. [ 3472.104495][T24863] net_ratelimit: 3654 callbacks suppressed [ 3472.104590][T24863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3474.617185][T24890] netlink: 168 bytes leftover after parsing attributes in process `syz.4.16846'. [ 3475.140643][T24898] netlink: 'syz.4.16848': attribute type 2 has an invalid length. [ 3475.223746][T24902] netlink: 'syz.4.16848': attribute type 10 has an invalid length. [ 3475.409222][T24902] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 3476.103296][T24915] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.16855'. [ 3476.220499][T24918] netlink: 'syz.4.16855': attribute type 10 has an invalid length. [ 3476.280220][T24918] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 3476.387151][T24924] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16855'. [ 3476.459317][T24922] netlink: 168 bytes leftover after parsing attributes in process `syz.1.16858'. [ 3476.523242][T24931] netlink: 'syz.0.16860': attribute type 1 has an invalid length. [ 3476.535369][T24931] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16860'. [ 3476.959550][T24944] FAULT_INJECTION: forcing a failure. [ 3476.959550][T24944] name failslab, interval 1, probability 0, space 0, times 0 [ 3477.034592][T24944] CPU: 1 PID: 24944 Comm: syz.4.16863 Not tainted syzkaller #0 [ 3477.042238][T24944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3477.052338][T24944] Call Trace: [ 3477.055654][T24944] [ 3477.058627][T24944] dump_stack_lvl+0x188/0x24e [ 3477.063340][T24944] ? sctp_sendmsg+0x15b0/0x2940 [ 3477.068218][T24944] ? ___sys_sendmsg+0x2a2/0x360 [ 3477.073129][T24944] ? show_regs_print_info+0x12/0x12 [ 3477.078359][T24944] ? load_image+0x400/0x400 [ 3477.082903][T24944] should_fail_ex+0x399/0x4d0 [ 3477.087622][T24944] should_failslab+0x5/0x20 [ 3477.092163][T24944] slab_pre_alloc_hook+0x59/0x310 [ 3477.097245][T24944] ? sctp_add_bind_addr+0x89/0x350 [ 3477.102423][T24944] __kmem_cache_alloc_node+0x4f/0x260 [ 3477.107850][T24944] ? sctp_add_bind_addr+0x89/0x350 [ 3477.113016][T24944] kmalloc_trace+0x26/0xe0 [ 3477.117497][T24944] sctp_add_bind_addr+0x89/0x350 [ 3477.122506][T24944] sctp_copy_local_addr_list+0x311/0x4e0 [ 3477.128200][T24944] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 3477.133976][T24944] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 3477.140114][T24944] ? sctp_v6_is_any+0x60/0x70 [ 3477.144836][T24944] ? sctp_copy_one_addr+0x93/0x660 [ 3477.150003][T24944] sctp_bind_addr_copy+0xaf/0x3c0 [ 3477.155119][T24944] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 3477.161490][T24944] sctp_connect_new_asoc+0x2f5/0x6a0 [ 3477.166802][T24944] ? __sctp_connect+0xd80/0xd80 [ 3477.171663][T24944] ? __local_bh_enable_ip+0x136/0x1c0 [ 3477.177075][T24944] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 3477.182639][T24944] ? security_sctp_bind_connect+0x85/0xb0 [ 3477.188407][T24944] sctp_sendmsg+0x15b0/0x2940 [ 3477.193143][T24944] ? aa_sk_perm+0x811/0x950 [ 3477.197688][T24944] ? sctp_getsockopt+0x8a0/0x8a0 [ 3477.202682][T24944] ? __might_fault+0xa6/0x120 [ 3477.207393][T24944] ? aa_af_perm+0x340/0x340 [ 3477.211936][T24944] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 3477.218390][T24944] ? inet_sendmsg+0xe5/0x2f0 [ 3477.222989][T24944] ? inet_send_prepare+0x260/0x260 [ 3477.228134][T24944] ____sys_sendmsg+0x5be/0x970 [ 3477.232912][T24944] ? __sys_sendmsg_sock+0x30/0x30 [ 3477.237945][T24944] ? __import_iovec+0x315/0x500 [ 3477.242817][T24944] ? import_iovec+0x6f/0xa0 [ 3477.247341][T24944] ___sys_sendmsg+0x2a2/0x360 [ 3477.252065][T24944] ? __sys_sendmsg+0x290/0x290 [ 3477.256902][T24944] ? __lock_acquire+0x7d10/0x7d10 [ 3477.261990][T24944] __se_sys_sendmsg+0x1bb/0x2a0 [ 3477.266861][T24944] ? __x64_sys_sendmsg+0x80/0x80 [ 3477.271821][T24944] ? lockdep_hardirqs_on+0x94/0x140 [ 3477.277046][T24944] do_syscall_64+0x4c/0xa0 [ 3477.281499][T24944] ? clear_bhb_loop+0x60/0xb0 [ 3477.286191][T24944] ? clear_bhb_loop+0x60/0xb0 [ 3477.290901][T24944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3477.296858][T24944] RIP: 0033:0x7f1b51f9ce59 [ 3477.301310][T24944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3477.320941][T24944] RSP: 002b:00007f1b52ed8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3477.329383][T24944] RAX: ffffffffffffffda RBX: 00007f1b52215fa0 RCX: 00007f1b51f9ce59 [ 3477.337411][T24944] RDX: 0000000000040000 RSI: 00002000000024c0 RDI: 0000000000000003 [ 3477.345419][T24944] RBP: 00007f1b52ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 3477.353404][T24944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3477.361389][T24944] R13: 00007f1b52216038 R14: 00007f1b52215fa0 R15: 00007fff9f630018 [ 3477.369379][T24944] [ 3477.997751][T24958] netlink: 'syz.4.16867': attribute type 10 has an invalid length. [ 3478.213710][T24966] netlink: 'syz.1.16868': attribute type 3 has an invalid length. [ 3478.241888][T24966] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.16868'. [ 3478.481869][T24958] device veth0_vlan left promiscuous mode [ 3478.533136][T24958] device veth0_vlan entered promiscuous mode [ 3478.559578][T24958] team0: Device veth0_vlan failed to register rx_handler [ 3478.903694][T24973] netlink: 168 bytes leftover after parsing attributes in process `syz.4.16872'. [ 3478.945678][T24981] FAULT_INJECTION: forcing a failure. [ 3478.945678][T24981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3478.981316][T24981] CPU: 0 PID: 24981 Comm: syz.1.16877 Not tainted syzkaller #0 [ 3478.988950][T24981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3478.999061][T24981] Call Trace: [ 3479.002386][T24981] [ 3479.005359][T24981] dump_stack_lvl+0x188/0x24e [ 3479.010101][T24981] ? show_regs_print_info+0x12/0x12 [ 3479.015354][T24981] ? load_image+0x400/0x400 [ 3479.019917][T24981] ? __lock_acquire+0x7d10/0x7d10 [ 3479.025014][T24981] should_fail_ex+0x399/0x4d0 [ 3479.029740][T24981] _copy_to_user+0x2c/0x130 [ 3479.034316][T24981] bpf_prog_test_run_syscall+0x332/0x4a0 [ 3479.040022][T24981] ? sock_gen_cookie+0x60/0x60 [ 3479.044890][T24981] ? sock_gen_cookie+0x60/0x60 [ 3479.049715][T24981] bpf_prog_test_run+0x31e/0x390 [ 3479.054715][T24981] __sys_bpf+0x62b/0x780 [ 3479.059021][T24981] ? bpf_link_show_fdinfo+0x380/0x380 [ 3479.064472][T24981] ? lock_chain_count+0x20/0x20 [ 3479.069381][T24981] __x64_sys_bpf+0x78/0x90 [ 3479.073843][T24981] do_syscall_64+0x4c/0xa0 [ 3479.078300][T24981] ? clear_bhb_loop+0x60/0xb0 [ 3479.083036][T24981] ? clear_bhb_loop+0x60/0xb0 [ 3479.087763][T24981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3479.093718][T24981] RIP: 0033:0x7fd90bd9ce59 [ 3479.098179][T24981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3479.117832][T24981] RSP: 002b:00007fd90cb7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3479.126317][T24981] RAX: ffffffffffffffda RBX: 00007fd90c015fa0 RCX: 00007fd90bd9ce59 [ 3479.134337][T24981] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 3479.142347][T24981] RBP: 00007fd90cb7b090 R08: 0000000000000000 R09: 0000000000000000 [ 3479.150366][T24981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3479.158380][T24981] R13: 00007fd90c016038 R14: 00007fd90c015fa0 R15: 00007ffde3459a18 [ 3479.166415][T24981] [ 3480.671543][T25012] netlink: 'syz.1.16883': attribute type 10 has an invalid length. [ 3480.695566][T25012] device veth0_vlan left promiscuous mode [ 3480.741828][T25012] device veth0_vlan entered promiscuous mode [ 3480.862367][T25012] team0: Device veth0_vlan failed to register rx_handler [ 3481.721190][T25029] netlink: 168 bytes leftover after parsing attributes in process `syz.1.16888'. [ 3481.905891][T25034] netlink: 'syz.3.16889': attribute type 3 has an invalid length. [ 3481.928518][T25031] netlink: 'syz.4.16890': attribute type 21 has an invalid length. [ 3481.945848][T25035] netlink: 'syz.0.16891': attribute type 3 has an invalid length. [ 3481.957287][T25034] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.16889'. [ 3481.981654][T25035] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.16891'. [ 3485.377090][T25067] netlink: 'syz.0.16900': attribute type 10 has an invalid length. [ 3486.141800][T25067] device veth0_vlan left promiscuous mode [ 3486.169925][T25067] device veth0_vlan entered promiscuous mode [ 3486.187988][T25067] team0: Device veth0_vlan failed to register rx_handler [ 3486.236372][T25077] netlink: 168 bytes leftover after parsing attributes in process `syz.4.16904'. [ 3486.263574][T25079] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.16907'. [ 3486.294976][T25082] IPv6: Can't replace route, no match found [ 3486.593321][T25098] netlink: 830 bytes leftover after parsing attributes in process `syz.0.16913'. [ 3489.770128][T25117] netlink: 'syz.0.16930': attribute type 29 has an invalid length. [ 3489.788455][T25117] netlink: 'syz.0.16930': attribute type 3 has an invalid length. [ 3489.793979][T25116] netlink: 168 bytes leftover after parsing attributes in process `syz.2.16920'. [ 3489.796734][T25117] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16930'. [ 3490.271756][T25131] netlink: 'syz.2.16921': attribute type 10 has an invalid length. [ 3492.812975][T25131] device veth0_vlan left promiscuous mode [ 3492.837135][T25131] device veth0_vlan entered promiscuous mode [ 3492.890969][T25131] team0: Device veth0_vlan failed to register rx_handler [ 3492.943855][T25135] netlink: 'syz.3.16935': attribute type 11 has an invalid length. [ 3492.962241][T25135] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.16935'. [ 3493.234432][T25144] netlink: 'syz.1.16926': attribute type 2 has an invalid length. [ 3493.243314][T25144] netlink: 10 bytes leftover after parsing attributes in process `syz.1.16926'. [ 3493.811437][T25134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3494.049695][T25158] netlink: 'syz.3.16933': attribute type 21 has an invalid length. [ 3494.081033][T25158] netlink: 164 bytes leftover after parsing attributes in process `syz.3.16933'. [ 3494.576342][T25182] netlink: 'syz.2.16943': attribute type 11 has an invalid length. [ 3494.589430][T25182] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.16943'. [ 3494.637876][T25180] device veth0_vlan left promiscuous mode [ 3494.659092][T25180] device veth0_vlan entered promiscuous mode [ 3494.810535][T25190] netlink: 'syz.0.16947': attribute type 21 has an invalid length. [ 3494.830149][T25190] netlink: 164 bytes leftover after parsing attributes in process `syz.0.16947'. [ 3497.556962][T25181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3497.877372][T25197] netlink: 'syz.2.16948': attribute type 29 has an invalid length. [ 3497.924478][T25197] netlink: 'syz.2.16948': attribute type 3 has an invalid length. [ 3497.988218][T25197] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16948'. [ 3498.139904][T25207] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16954'. [ 3498.413191][T25218] netlink: 'syz.1.16957': attribute type 29 has an invalid length. [ 3498.431971][T25218] netlink: 'syz.1.16957': attribute type 29 has an invalid length. [ 3498.466493][T25220] FAULT_INJECTION: forcing a failure. [ 3498.466493][T25220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3498.481171][T25218] netlink: 'syz.1.16957': attribute type 29 has an invalid length. [ 3498.510932][T25220] CPU: 0 PID: 25220 Comm: syz.4.16958 Not tainted syzkaller #0 [ 3498.518561][T25220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3498.528657][T25220] Call Trace: [ 3498.531966][T25220] [ 3498.534936][T25220] dump_stack_lvl+0x188/0x24e [ 3498.539665][T25220] ? show_regs_print_info+0x12/0x12 [ 3498.544905][T25220] ? load_image+0x400/0x400 [ 3498.549451][T25220] ? __lock_acquire+0x7d10/0x7d10 [ 3498.554531][T25220] should_fail_ex+0x399/0x4d0 [ 3498.559271][T25220] strncpy_from_user+0x32/0x350 [ 3498.564180][T25220] bpf_prog_load+0x1f3/0x1560 [ 3498.568931][T25220] ? map_freeze+0x390/0x390 [ 3498.573494][T25220] ? __might_fault+0xa6/0x120 [ 3498.578224][T25220] ? __might_fault+0xa6/0x120 [ 3498.582944][T25220] ? __might_fault+0xc2/0x120 [ 3498.587668][T25220] ? __might_fault+0xa6/0x120 [ 3498.592401][T25220] ? bpf_lsm_bpf+0x5/0x10 [ 3498.596781][T25220] ? security_bpf+0x7a/0xa0 [ 3498.601326][T25220] __sys_bpf+0x5b8/0x780 [ 3498.605608][T25220] ? bpf_link_show_fdinfo+0x380/0x380 [ 3498.611041][T25220] ? lock_chain_count+0x20/0x20 [ 3498.615950][T25220] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3498.621983][T25220] __x64_sys_bpf+0x78/0x90 [ 3498.626441][T25220] do_syscall_64+0x4c/0xa0 [ 3498.630893][T25220] ? clear_bhb_loop+0x60/0xb0 [ 3498.635615][T25220] ? clear_bhb_loop+0x60/0xb0 [ 3498.640335][T25220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3498.646274][T25220] RIP: 0033:0x7f1b51f9ce59 [ 3498.650730][T25220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3498.670367][T25220] RSP: 002b:00007f1b52ed8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3498.678821][T25220] RAX: ffffffffffffffda RBX: 00007f1b52215fa0 RCX: 00007f1b51f9ce59 [ 3498.686839][T25220] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 3498.694867][T25220] RBP: 00007f1b52ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 3498.702886][T25220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3498.710894][T25220] R13: 00007f1b52216038 R14: 00007f1b52215fa0 R15: 00007fff9f630018 [ 3498.718920][T25220] [ 3498.770277][T25224] netlink: 'syz.1.16960': attribute type 11 has an invalid length. [ 3498.790464][T25224] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16960'. [ 3501.775383][T25223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3502.044912][T25254] netlink: 'syz.3.16970': attribute type 29 has an invalid length. [ 3502.137939][T25254] netlink: 'syz.3.16970': attribute type 3 has an invalid length. [ 3502.153053][T25254] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16970'. [ 3502.413056][T25267] FAULT_INJECTION: forcing a failure. [ 3502.413056][T25267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3502.436366][T25264] netlink: 'syz.4.16974': attribute type 10 has an invalid length. [ 3502.462618][T25267] CPU: 0 PID: 25267 Comm: syz.1.16975 Not tainted syzkaller #0 [ 3502.470255][T25267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3502.480466][T25267] Call Trace: [ 3502.483792][T25267] [ 3502.486776][T25267] dump_stack_lvl+0x188/0x24e [ 3502.491517][T25267] ? show_regs_print_info+0x12/0x12 [ 3502.496766][T25267] ? load_image+0x400/0x400 [ 3502.501342][T25267] ? __lock_acquire+0x7d10/0x7d10 [ 3502.506431][T25267] ? snprintf+0xe5/0x140 [ 3502.510756][T25267] should_fail_ex+0x399/0x4d0 [ 3502.515543][T25267] _copy_to_user+0x2c/0x130 [ 3502.520113][T25267] simple_read_from_buffer+0xe3/0x150 [ 3502.525574][T25267] proc_fail_nth_read+0x1a6/0x220 [ 3502.530685][T25267] ? proc_fault_inject_write+0x310/0x310 [ 3502.536396][T25267] ? fsnotify_perm+0x248/0x550 [ 3502.541248][T25267] ? proc_fault_inject_write+0x310/0x310 [ 3502.546983][T25267] vfs_read+0x2de/0xa00 [ 3502.551231][T25267] ? kernel_read+0x1e0/0x1e0 [ 3502.555903][T25267] ? __fget_files+0x28/0x4b0 [ 3502.560556][T25267] ? __fget_files+0x28/0x4b0 [ 3502.565226][T25267] ? __fget_files+0x43d/0x4b0 [ 3502.569985][T25267] ? __fdget_pos+0x2ae/0x360 [ 3502.574661][T25267] ? ksys_read+0x71/0x250 [ 3502.579074][T25267] ksys_read+0x14c/0x250 [ 3502.583393][T25267] ? vfs_write+0xa30/0xa30 [ 3502.587885][T25267] ? lockdep_hardirqs_on+0x94/0x140 [ 3502.593163][T25267] do_syscall_64+0x4c/0xa0 [ 3502.597631][T25267] ? clear_bhb_loop+0x60/0xb0 [ 3502.602354][T25267] ? clear_bhb_loop+0x60/0xb0 [ 3502.607090][T25267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3502.613043][T25267] RIP: 0033:0x7fd90bd5d68e [ 3502.617508][T25267] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3502.637173][T25267] RSP: 002b:00007fd90cb7afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3502.645651][T25267] RAX: ffffffffffffffda RBX: 00007fd90cb7b6c0 RCX: 00007fd90bd5d68e [ 3502.653682][T25267] RDX: 000000000000000f RSI: 00007fd90cb7b0a0 RDI: 0000000000000007 [ 3502.661720][T25267] RBP: 00007fd90cb7b090 R08: 0000000000000000 R09: 0000000000000000 [ 3502.669758][T25267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3502.674347][T25264] team0: Port device wlan1 added [ 3502.677761][T25267] R13: 00007fd90c016038 R14: 00007fd90c015fa0 R15: 00007ffde3459a18 [ 3502.677834][T25267] [ 3503.151686][T25284] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.16982'. [ 3503.212030][T25284] netlink: 'syz.2.16982': attribute type 8 has an invalid length. [ 3503.235881][T25284] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.16982'. [ 3503.319799][T25290] netlink: 'syz.4.16985': attribute type 46 has an invalid length. [ 3503.337334][T25293] FAULT_INJECTION: forcing a failure. [ 3503.337334][T25293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3503.355501][T25293] CPU: 0 PID: 25293 Comm: syz.0.16986 Not tainted syzkaller #0 [ 3503.363125][T25293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3503.373236][T25293] Call Trace: [ 3503.376559][T25293] [ 3503.379528][T25293] dump_stack_lvl+0x188/0x24e [ 3503.384252][T25293] ? show_regs_print_info+0x12/0x12 [ 3503.389497][T25293] ? load_image+0x400/0x400 [ 3503.394061][T25293] ? __lock_acquire+0x7d10/0x7d10 [ 3503.399156][T25293] should_fail_ex+0x399/0x4d0 [ 3503.403898][T25293] _copy_from_user+0x2c/0x170 [ 3503.408639][T25293] __sys_bpf+0x2ea/0x780 [ 3503.412947][T25293] ? bpf_link_show_fdinfo+0x380/0x380 [ 3503.418399][T25293] ? lock_chain_count+0x20/0x20 [ 3503.423317][T25293] __x64_sys_bpf+0x78/0x90 [ 3503.427802][T25293] do_syscall_64+0x4c/0xa0 [ 3503.432271][T25293] ? clear_bhb_loop+0x60/0xb0 [ 3503.437012][T25293] ? clear_bhb_loop+0x60/0xb0 [ 3503.441767][T25293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3503.447722][T25293] RIP: 0033:0x7fe9f9d9ce59 [ 3503.452190][T25293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3503.471859][T25293] RSP: 002b:00007fe9fac12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3503.480356][T25293] RAX: ffffffffffffffda RBX: 00007fe9fa015fa0 RCX: 00007fe9f9d9ce59 [ 3503.488416][T25293] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 3503.496452][T25293] RBP: 00007fe9fac12090 R08: 0000000000000000 R09: 0000000000000000 [ 3503.504493][T25293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3503.512524][T25293] R13: 00007fe9fa016038 R14: 00007fe9fa015fa0 R15: 00007ffe259e7c28 [ 3503.520558][T25293] [ 3503.849954][ T1091] Bluetooth: hci1: ISO packet for unknown connection handle 3646 [ 3504.074701][T31707] tipc: Subscription rejected, illegal request [ 3504.338069][T25316] netlink: 'syz.1.16993': attribute type 10 has an invalid length. [ 3504.469285][T25316] team0: Port device wlan1 added [ 3505.092848][T25356] netlink: 'syz.4.17009': attribute type 1 has an invalid length. [ 3505.114498][T25356] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.17009'. [ 3505.351310][T25366] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 3505.475171][T25366] netlink: 'syz.1.17013': attribute type 1 has an invalid length. [ 3505.525585][T25366] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17013'. [ 3505.564447][T25368] netlink: 'syz.0.17012': attribute type 10 has an invalid length. [ 3505.661243][T25368] team0: Port device wlan1 added [ 3505.704805][T25381] netlink: 'syz.2.17018': attribute type 10 has an invalid length. [ 3505.716967][T25381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17018'. [ 3505.736830][T25381] device ipvlan1 entered promiscuous mode [ 3505.755325][T25381] bridge0: port 3(ipvlan1) entered blocking state [ 3505.776124][T25381] bridge0: port 3(ipvlan1) entered disabled state [ 3505.820039][T25381] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 3505.995433][T25392] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.17022'. [ 3507.069934][T25426] validate_nla: 1 callbacks suppressed [ 3507.069974][T25426] netlink: 'syz.3.17032': attribute type 10 has an invalid length. [ 3507.222986][T25433] FAULT_INJECTION: forcing a failure. [ 3507.222986][T25433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3507.277656][T25433] CPU: 1 PID: 25433 Comm: syz.1.17037 Not tainted syzkaller #0 [ 3507.285291][T25433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3507.295401][T25433] Call Trace: [ 3507.298727][T25433] [ 3507.301682][T25433] dump_stack_lvl+0x188/0x24e [ 3507.306396][T25433] ? show_regs_print_info+0x12/0x12 [ 3507.311621][T25433] ? load_image+0x400/0x400 [ 3507.316159][T25433] ? __lock_acquire+0x7d10/0x7d10 [ 3507.321232][T25433] should_fail_ex+0x399/0x4d0 [ 3507.325949][T25433] _copy_from_user+0x2c/0x170 [ 3507.330658][T25433] get_user_ifreq+0x67/0x170 [ 3507.335293][T25433] sock_ioctl+0x637/0x710 [ 3507.339646][T25433] ? sock_poll+0x410/0x410 [ 3507.344093][T25433] ? bpf_lsm_file_ioctl+0x5/0x10 [ 3507.349062][T25433] ? security_file_ioctl+0x7c/0xa0 [ 3507.354214][T25433] ? sock_poll+0x410/0x410 [ 3507.358659][T25433] __se_sys_ioctl+0xfa/0x170 [ 3507.363300][T25433] do_syscall_64+0x4c/0xa0 [ 3507.367755][T25433] ? clear_bhb_loop+0x60/0xb0 [ 3507.372470][T25433] ? clear_bhb_loop+0x60/0xb0 [ 3507.377198][T25433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3507.383118][T25433] RIP: 0033:0x7fd90bd9ce59 [ 3507.387555][T25433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3507.407183][T25433] RSP: 002b:00007fd90cb7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3507.415625][T25433] RAX: ffffffffffffffda RBX: 00007fd90c015fa0 RCX: 00007fd90bd9ce59 [ 3507.423627][T25433] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000004 [ 3507.431633][T25433] RBP: 00007fd90cb7b090 R08: 0000000000000000 R09: 0000000000000000 [ 3507.439632][T25433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3507.447637][T25433] R13: 00007fd90c016038 R14: 00007fd90c015fa0 R15: 00007ffde3459a18 [ 3507.455662][T25433] [ 3507.715836][T25441] netlink: 'syz.1.17040': attribute type 21 has an invalid length. [ 3507.754833][T25441] IPv6: NLM_F_CREATE should be specified when creating new route [ 3507.767538][T21758] wlan1: Trigger new scan to find an IBSS to join [ 3507.837793][T25441] IPv6: Can't replace route, no match found [ 3508.005703][T25453] netlink: 'syz.0.17045': attribute type 10 has an invalid length. [ 3508.057924][ C0] [ 3508.057933][ C0] ================================ [ 3508.057939][ C0] WARNING: inconsistent lock state [ 3508.057959][ C0] syzkaller #0 Not tainted [ 3508.057971][ C0] -------------------------------- [ 3508.057976][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 3508.057985][ C0] syz.3.17044/25456 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 3508.058004][ C0] ffff88807648c1d0 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 3508.058160][ C0] {INITIAL USE} state was registered at: [ 3508.058168][ C0] lock_acquire+0x1bb/0x4a0 [ 3508.058194][ C0] _raw_spin_lock+0x2a/0x40 [ 3508.058215][ C0] htab_lock_bucket+0x179/0x2f0 [ 3508.058252][ C0] __htab_lru_percpu_map_update_elem+0x276/0x8c0 [ 3508.058274][ C0] bpf_percpu_hash_update+0x115/0x200 [ 3508.058295][ C0] bpf_map_update_value+0x310/0x670 [ 3508.058320][ C0] map_update_elem+0x4d7/0x680 [ 3508.058353][ C0] __sys_bpf+0x4ec/0x780 [ 3508.058378][ C0] __x64_sys_bpf+0x78/0x90 [ 3508.058402][ C0] do_syscall_64+0x4c/0xa0 [ 3508.058419][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3508.058446][ C0] irq event stamp: 1252 [ 3508.058453][ C0] hardirqs last enabled at (1251): [] syscall_enter_from_user_mode+0x21/0x80 [ 3508.058484][ C0] hardirqs last disabled at (1252): [] exc_debug+0x6e/0x130 [ 3508.058509][ C0] softirqs last enabled at (1206): [] bpf_prog_load+0x1127/0x1560 [ 3508.058542][ C0] softirqs last disabled at (1204): [] bpf_ksym_add+0x29/0x340 [ 3508.058564][ C0] [ 3508.058564][ C0] other info that might help us debug this: [ 3508.058571][ C0] Possible unsafe locking scenario: [ 3508.058571][ C0] [ 3508.058576][ C0] CPU0 [ 3508.058580][ C0] ---- [ 3508.058584][ C0] lock(&htab->lockdep_key); [ 3508.058597][ C0] [ 3508.058601][ C0] lock(&htab->lockdep_key); [ 3508.058613][ C0] [ 3508.058613][ C0] *** DEADLOCK *** [ 3508.058613][ C0] [ 3508.058618][ C0] no locks held by syz.3.17044/25456. [ 3508.058627][ C0] [ 3508.058627][ C0] stack backtrace: [ 3508.058633][ C0] CPU: 0 PID: 25456 Comm: syz.3.17044 Not tainted syzkaller #0 [ 3508.058671][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3508.058683][ C0] Call Trace: [ 3508.058690][ C0] <#DB> [ 3508.058742][ C0] dump_stack_lvl+0x188/0x24e [ 3508.058766][ C0] ? show_regs_print_info+0x12/0x12 [ 3508.058791][ C0] ? print_usage_bug+0x42a/0x690 [ 3508.058821][ C0] ? verify_lock_unused+0x18/0x140 [ 3508.058853][ C0] lock_acquire+0x2df/0x4a0 [ 3508.058885][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 3508.058910][ C0] ? read_lock_is_recursive+0x10/0x10 [ 3508.058940][ C0] ? rcu_read_unlock+0x8c/0xa0 [ 3508.058968][ C0] ? perf_output_begin_forward+0xa7/0xa80 [ 3508.058998][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 3508.059026][ C0] ? get_perf_callchain+0x3c8/0x490 [ 3508.059057][ C0] _raw_spin_lock+0x2a/0x40 [ 3508.059081][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 3508.059104][ C0] htab_lock_bucket+0x179/0x2f0 [ 3508.059131][ C0] ? htab_lru_map_delete_node+0x630/0x630 [ 3508.059155][ C0] ? rcu_is_watching+0x11/0xa0 [ 3508.059186][ C0] ? lock_release+0xcf/0x920 [ 3508.059216][ C0] ? htab_map_hash+0x2ed/0x6d0 [ 3508.059242][ C0] htab_lru_map_delete_elem+0x1ad/0x780 [ 3508.059269][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 3508.059295][ C0] ? htab_lru_map_update_elem+0xe80/0xe80 [ 3508.059319][ C0] ? perf_event_output_forward+0x282/0x2f0 [ 3508.059358][ C0] ? perf_event_output_forward+0xbe/0x2f0 [ 3508.059391][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 3508.059414][ C0] bpf_overflow_handler+0x522/0x7c0 [ 3508.059441][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 3508.059464][ C0] ? perf_swevent_overflow+0x230/0x230 [ 3508.059493][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 3508.059526][ C0] __perf_event_overflow+0x448/0x610 [ 3508.059563][ C0] perf_swevent_event+0x315/0x570 [ 3508.059596][ C0] ? perf_tp_event+0xc30/0xc30 [ 3508.059635][ C0] perf_bp_event+0x312/0x3f0 [ 3508.059668][ C0] ? perf_trace_lock_acquire+0x33f/0x3e0 [ 3508.059694][ C0] ? perf_event_free_bpf_prog+0x110/0x110 [ 3508.059745][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 3508.059772][ C0] ? read_lock_is_recursive+0x10/0x10 [ 3508.059806][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 3508.059883][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 3508.059907][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 3508.059934][ C0] notify_die+0x141/0x1a0 [ 3508.059959][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 3508.059993][ C0] notify_debug+0x20/0x30 [ 3508.060019][ C0] exc_debug+0xd9/0x130 [ 3508.060042][ C0] asm_exc_debug+0x1a/0x40 [ 3508.060069][ C0] RIP: 0010:copy_user_short_string+0xd/0x40 [ 3508.060104][ C0] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 3508.060122][ C0] RSP: 0018:ffffc9001388fb28 EFLAGS: 00040202 [ 3508.060141][ C0] RAX: ffffffff84115b01 RBX: 0000000000000038 RCX: 0000000000000007 [ 3508.060169][ C0] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffc9001388fbc0 [ 3508.060183][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 1ffff92002711f7e [ 3508.060196][ C0] R10: dffffc0000000000 R11: fffff52002711f7f R12: 00007fffffffefc8 [ 3508.060211][ C0] R13: 1ffff92002711f74 R14: ffffc9001388fbc0 R15: 0000200000000300 [ 3508.060230][ C0] ? _copy_from_user+0xb1/0x170 [ 3508.060262][ C0] [ 3508.060269][ C0] [ 3508.060275][ C0] _copy_from_user+0xf4/0x170 [ 3508.060302][ C0] ___sys_sendmsg+0x1c3/0x360 [ 3508.060323][ C0] ? try_to_wake_up+0x6ae/0x1080 [ 3508.060359][ C0] ? __sys_sendmsg+0x290/0x290 [ 3508.060408][ C0] __se_sys_sendmsg+0x1bb/0x2a0 [ 3508.060428][ C0] ? ct_nmi_exit+0x145/0x1c0 [ 3508.060454][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 3508.060483][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 3508.060509][ C0] do_syscall_64+0x4c/0xa0 [ 3508.060527][ C0] ? clear_bhb_loop+0x60/0xb0 [ 3508.060555][ C0] ? clear_bhb_loop+0x60/0xb0 [ 3508.060604][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3508.060633][ C0] RIP: 0033:0x7fb9cf99ce59 [ 3508.060649][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3508.060667][ C0] RSP: 002b:00007fb9d07da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3508.060687][ C0] RAX: ffffffffffffffda RBX: 00007fb9cfc16090 RCX: 00007fb9cf99ce59 [ 3508.060703][ C0] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 000000000000000a [ 3508.060716][ C0] RBP: 00007fb9cfa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 3508.060729][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3508.060741][ C0] R13: 00007fb9cfc16128 R14: 00007fb9cfc16090 R15: 00007fff9925fe78 [ 3508.060766][ C0] [ 3508.783886][T25453] team0: Device wg1 is of different type [ 3508.814515][T25439] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17039'. [ 3511.767550][T31707] wlan1: Trigger new scan to find an IBSS to join [ 3511.929119][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 3511.935522][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 3513.768307][T12282] wlan1: Creating new IBSS network, BSSID be:7c:3b:cc:d1:08 [ 3513.777240][T21758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready