last executing test programs: 5.171352068s ago: executing program 1 (id=1023): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f2d0000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) 5.108950209s ago: executing program 2 (id=1024): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602fffe00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="934300005200336ec0a8561fb02b9eb50a"], 0xfe33) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x2, &(0x7f0000000200)=@raw=[@jmp={0x7, 0x0, 0xa, 0x1}, @exit], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='bcache_journal_write\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) 4.720743066s ago: executing program 1 (id=1026): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000028000000000000000000000007"], 0x48}, 0x0) 4.356747981s ago: executing program 2 (id=1028): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 4.154687735s ago: executing program 1 (id=1031): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 4.009510037s ago: executing program 0 (id=1032): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) close(r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000200000d02000000000000000200000000000000000000000000000000000002"], 0x0, 0x42, 0x0, 0x1}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x8, 0x12) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000100feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socketpair(0x22, 0x2, 0x11, &(0x7f00000000c0)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x2a, &(0x7f0000000100)=r10, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r10}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r8, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r12}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r12, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x2, '\x00', r8, r11, 0x0, 0x5, 0x1}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) 4.009243657s ago: executing program 2 (id=1033): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="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", 0x226}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000001000)={&(0x7f0000000380)=@x25={0x9, @remote}, 0x80, &(0x7f0000000f80)=[{0x0}, {0x0}, {&(0x7f0000000e80)=""/142, 0x8e}], 0x3}, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 3.935956528s ago: executing program 1 (id=1035): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bd", 0x1}], 0x1}, 0x20040805) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)}, 0x8000) 3.491963945s ago: executing program 2 (id=1037): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113100000000000bfa000000000000007000000ee00160e5e03feff00000000140500000000000069163a0000000000bf07000000000000360507000fff0720670600003f000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda00010000000000009de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000140), &(0x7f0000000100)=""/17, 0x2}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) 2.852653025s ago: executing program 1 (id=1039): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 2.827059865s ago: executing program 2 (id=1041): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000001a0000000008"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='+'], 0x20) r1 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000001280), 0xb47, r3}, 0x38) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/uts\x00') ioctl$TUNSETIFF(r4, 0xb701, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x510, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x3, 0xf8, 0x0, 0x0, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="080000000047120000000000000100"/24], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r5, 0xe1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0), 0x0, 0x8c, &(0x7f0000000700), 0x48, 0x94c4360ea2455249, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800005400000095b52488d40854952cfff3269f0200832a00"/38], &(0x7f0000000500)='GPL\x00', 0x3, 0x2f, &(0x7f0000000540)=""/47, 0x40f00, 0x10, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x9, 0x1003}, 0x8, 0x10, &(0x7f0000000a80)={0x4, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000ac0)=[r0, r0, r3, r3, r3], &(0x7f0000000b00)=[{0x2, 0x1, 0x4, 0x9}, {0x3, 0x5, 0x4, 0xb}, {0x0, 0x3, 0x5, 0xe}, {0x4, 0x2, 0x10, 0x9}, {0x5, 0x4, 0xb, 0x7}, {0x4, 0x4, 0x0, 0x9}, {0x1, 0x5, 0x1, 0x7}, {0x2, 0x2, 0x2, 0x1}, {0x2, 0x1, 0x6, 0x6}], 0x10, 0x400}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="88"}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000080)={'wlan1\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000004000000080000000a00000040000000", @ANYRES32, @ANYBLOB="000000000100009b3b0000000000fcffffffffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=r8, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000c80)=r8, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r7, 0x0, 0x138, 0x4e, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f00000006c0)=""/78, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c51015df835a7d47be4f852161bc4015e75694c2141beb63bcbdf943a653000d6d", 0x6, 0x0, 0x13}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071107300000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 2.723677877s ago: executing program 1 (id=1042): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRES32, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000a51f09f852f0009000000080000000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x13) ioctl$TUNSETLINK(r1, 0x400454cd, 0x324) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r5 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) write$cgroup_devices(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e03f2003c5ca601288763"], 0xffdd) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x3, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000003c4000003c0000000c0000000400000001000084010000000a0000000300000000000000060000000000001202000000000000000000000300000000020000000200000000000000006100302e61616161006100"], 0x0, 0x60}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="feffffff00000000000000000000000000000000bdf282ec1720d1326be6d3fb58f8b43529aa4201a0fd2d10f5a02c9f14fcac0becc4ddb0965d03a3ce8ad91fb361ea1e729ef8fa4c5be21a8dc6d95586a9111bacfc9815fa082bf6c5de6f2225299aeb2eefb3e664f05edbb8a14fb36e88a28ef2b786248a513bab1409e2085746cb752a6d7949ee8e045c530fb5d28f9238a85275efb6e796c1027f6de3f6a6f90ffc902f0ee89422fb258283a68b9f0fa46748933fb6b41f4335de7032e578a84e06c132f6761dc7627d3349dfdbd8fcccc22f9e8ed1ad62d391d45a8920087bdfb39c60", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000000735af8ff00000000bfa200000000000007020000f8ffffffb703004008000000b704000000000000850000001e00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) socket$kcm(0x29, 0x2, 0x0) 2.679713888s ago: executing program 0 (id=1043): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x3, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000fad92a2bba5bab0aa084a0e16e9686a005341b26bdf68a0426b3edc65214", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000009a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) socketpair(0xb, 0x4, 0x96, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x18, r1}, 0x18) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 2.386337723s ago: executing program 3 (id=1045): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 6) 2.260016134s ago: executing program 2 (id=1046): r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@caif=@rfm={0x25, 0x4, "6cd935ce9c6ee19cbe01be48f1d27dcb"}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x1}]}}, 0x0, 0x26}, 0x28) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)={[{0x2d, 'memory'}, {0x2d, 'cpuacct'}, {0x2b, 'net'}]}, 0x16) r4 = socket$kcm(0x2, 0x2, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$kcm(r4, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800) sendmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="8074bc056e70f185150723c3957fcb62ef1c1569104efb37c65346676d119cec20d6d77e6e32cca892897f7428545cfcae136a56ea21945d8f90bd000879b11da73515e0c01ead18f59a74144f69a7eff656cb7ca8acaed1577315297afee80cf3fdfd5d1252b5036d6b21e527493dc6225b6caef15936da52f39e351919151ca5ac52f6c4ee452b21096fa0500466a155", 0x91}, {&(0x7f0000000400)="35a07b494326ad11ebba3638305822cd029c5f76b4581fa49b4060fdc3e2de81af09f9abe1e217bd314d22d47aeae3c024856ebec4f95debf5403a1693ea7bc7064a4341ff5e6a84b4", 0x49}, {&(0x7f0000000580)="a9045072d1d5e6bbba23fb82612c3a8da753d7606573a374da4364fb4af225bc20592cda3830bbe07b1f379233862638bb0a76d510419f62fb90ecf858dc461a5c18a16f88fbc96ab77f517e68b396c493e8cdd5d8deba63c64f611df4c61488c7af5937bb9b62bc83cb78edf7660c207e01325f55bff56c895341ba16827c278cd3f9b5bb6056146733714aad598d1b95446a0964d14727516c704682daf0663716f5bf47f6d21ee702de7bd3bd929ca4f8e2ff4fa845145250f83c8607c17147ba6a4865e6fdc11d9f3d3e94a76c48daa86b635b1d5d226819f8ae1a64293fffe7f417cc5ab682bb6d2cd81bd2af4d0c9552", 0xf3}, {&(0x7f00000008c0)="4be9122db7a7cc81ddba2e5b0d9968e3b9866177676c46d2e2c414fa1dc7dc602465bc00d4fec8ea12bae39e09c391cfe728c4ad8f03e4c924df576b67492c708bd8d3add7b8b8067a65674d879683cf475822c56b3cf2a08fe44beb48ebc2933976110a3493102c129d9c5925c9ff4bace797903686d303b436fb4ad9199d91fcd20fbb85f85532f88d943b07a0d047440a74ac16d739e2e46c43a23d0a04b6981c67ae9ade5b4a45aef26cc2d83b307adab1d1e1999aded69f7aa16cdfe0dc5361aea502e7f584da3ad2bad8a21efcc13aafc66448a62ef7b8c7133712f413b8", 0xe1}], 0x4, &(0x7f0000000b80)=[{0x38, 0x3a, 0xfffff801, "ca8d89fe20f8582a4b9a6c96e571023508765aa246f130ef54fa5f8b172fe10d6d"}, {0xf0, 0x10e, 0x3, "a44239e42cfdac0f8853277d0a131c37c820633bd6d9bddba56f3f28e7d69cc11fb9cc8a7ac80adb6bc051069d9ec93b2b8bce9a2e4fd23098ccf8f21c0e50e2148ee0c61047b78c492058089338e89b5d1ac1a94ff4990c8c96c04ababaf174ba8a3da3bf872afc8b8179f8bfd58f2825124a587277f2464db87e7c6ab4970b1018e16faa409a60a56fb480fd4085e511c505cd214f9bb92c0292f20fd997bf429ab6f694402912efd55faf679d4ed3d8277b4298d72c2793fa4d01a5583c04192d6113694a8df1817bca2355838cc1c9f2734a271f89a57d77"}, {0x1010, 0x115, 0x3, "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"}, {0x20, 0x10a, 0xfffffffb, "9fe32212281fb389b0"}], 0x1158}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000080), &(0x7f0000000100)=r3}, 0x20) 1.840831691s ago: executing program 3 (id=1047): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bd", 0x1}], 0x1}, 0x20040805) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}, 0x8000) 1.817637731s ago: executing program 0 (id=1048): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x32}, 0x8000, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000023c0)={0x0, 0x0, 0x0}, 0x4001) recvmsg$unix(r2, &(0x7f0000003880)={0x0, 0x0, 0x0}, 0x20012163) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.stat\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000033c0)) r4 = getpid() write$cgroup_pid(r3, &(0x7f00000002c0)=r4, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018460000ffffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="007b8af8ff00000000bfa200000000000007020000f8ffffff7003000008000000b7040000000000008500000082000000185200000d00000000000000000000004ab8a8ff1000000918490000040000000000000000000000183900000400"/105], &(0x7f0000000300)='syzkaller\x00', 0x5, 0x5a, &(0x7f0000000640)=""/90, 0x41100, 0x81, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000340)={0x3, 0x2000004}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x4, 0x92, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[r3, r3], &(0x7f0000000700)=[{0x2, 0x4, 0xe, 0x2}, {0x0, 0x4, 0x9, 0x4}, {0x5, 0x3, 0x2, 0x4}, {0x1, 0x5, 0xd}], 0x10, 0xfffff801}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) write$cgroup_int(r6, &(0x7f0000000040), 0x1) 1.2820037s ago: executing program 0 (id=1049): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000007000000080000000500000080000000", @ANYRES32, @ANYBLOB="0000ffff06ffffffff00000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000006000000000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r3, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000040), 0x0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\f'], 0x10) r5 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000280)="e07d43a43731a03c4a18d4d2d8d857ded80a1ca80c727cabc43e026b8dc78b3f06d895baa49812854ce0717acce6072b3fcc187516adcd45727fd0ec21be6e1bf5c6cb3b39e9e9c37df9ec7dc208a90b0f5ef5492e5061dea87a5f7f8c3e6d603336da563688208f6ffcb9f7958c5c169269382d57da2031ba345f587ff84c0cdb93c1efcdd3dec2b5a18f76092bc72bd9e74e3d993313614810ee387648db", 0x9f}, {&(0x7f00000004c0)="0a15c596de5021361f263c307782bc6b833d5ec839012df525023216c8efeb54916a9e355e7c564da462823fb2917327723db455dbfdfe070d833f8e2fbad62f86bba420bbc9aeab26a5cdc790571d85c61f2c932bab70ced32726b3625ee04b7b76ac8ab3037be1164faf85d84e313f2f6c8405626ff292448ca8b1", 0x7c}, {&(0x7f0000000600)="b53c1029594c61d52ce005642068420019ee520fd1346f376124c893de5491b9b236c752f8804cbbc84016a88365c273d1e0ef06845b71f0b82fcf5f27b55041feb8b889cff8ce35cf32e4518f43efd4815518e749d75ffbe43cb0dca9c3801b7d432af37be2893637ea96839954b9f6aa13182022c916826adba776da86bb44ad0f82c594ab760369e6be7d0cf685036961b06beae61480d7e677b9e841b2a70f6c6cab4c63bc210f5888c8b1ab347029bc6d5458180562fcd00c8f1e42ca4cc560b93b", 0xc4}, {&(0x7f0000000840)="c18d4ad4d21807029a5f5884ba87a7757263f066eba708e601b4192982512f049028a031b6d9e9d1e080e08c1c3216ecbdc7a5ab1ad005ce8c074068077b667bae5ece1c89a23afb591466885f805765dcb05e58b1a48cf147dc9c84c1d37615dbc7e5994be58fb9d78f20613933b8abc13fa2bee79223453fb7751721a6c0a58ac58a07a7b6068d5b5ea7c52b057bbc0c383abfacddcf49c76a3cfab1facf233f6d5f0997e4d5034d33f359d7c0c1540807230c55f2b44980c1e54c010ae646106ee79eb01fe5961a39f73dd32672", 0xcf}, {&(0x7f0000000700)="e972fceb6c29bcddc097388c79561039ce7b0416ffd41cdf3dc347cc7d1df08167d78114bd87c731198941321bcda6f172da3756491cb19b03faec4e467be0afc6c01dad230f7fa4751d1b98d8c8ab918a2d976229c45185f277f1bc525cf9b52ad348", 0x63}, {&(0x7f0000000940)="2572ea7ec17aae6d39612927eacd6179f6fe44f5bee3796483bbe20eabb85c112bdfcf0ba81a49051002552b1f41fca9770efcc917ec7ee6e3afef0b4cad436f045306cceced36338dd78f5243c0e155856f24fa1c8416b238ce5133b9fb5ccb43986fd11e776651e9ed3d9fdf1520d063b6bc4bcce66906856435f3e8eb758eb684fa4652580c7c1d481ecc90bab4281b60b1ecd15d7bd6fe403d46c565702794d2f2800dcbf5a82323473b023fda41aa11f6a7e10feb743b4deaab25c8971b515f09303e2955b454da18eb70d5cdb331db4a39ac", 0xd5}, {&(0x7f0000000a40)="388299e9b4be128dcac11ec98e97c54ae4c66e43cd13332679e155e10701ac589f91094416d815d0d4bdf19dc45478746b513df384f4b33afee2df3ed6da7f11690a6eb9462d97ae3e56b77fdaf1b23af2cd90b426b2bbf671836489924f8fbb69016841d22727fd5e90377e1a47f00f0f84e0a6e5367e24f0e4df22fe03d9f3fa3282a923498e6e5cc6d82c758200c41106eadad5f3f7b5dfa920ce51", 0x9d}, {&(0x7f0000000b00)="014746ee436c0767ad003a7d1f42fb44ce6afd81d877a54c1ed6e634790a03cebcc007055fb300f4e09077d2929203069b8847e5fcccf2cc863b971d85888802e05ee3", 0x43}, {&(0x7f0000000b80)="89a2abe70ca8a1b0332ae19a57818ffbcbe54f44b8e1f1007e5dbc78e76ddd251f4d7517274b449350590c1f21490899542cc7c2fef1ef01ebb6adce396a2e393cf00439788d6e8157bd916e0d0e5a16ad31af1180386a417268f5d329be07427b7b6c176c2070f2a82603dbe4a5108f4a494a4250a4ce216c92eab88ead624ac23b9be6a07f226a183a4df32e00a3fcec79835108293a6da3eac43a572925ae0ca496da62a19dad701255245a6d7685c2846da1bb960fefe78380f314969332042295afb5c9e89b7bee455773663040167e", 0xd2}, {&(0x7f0000000c80)="526a9e29dff4be764a2e1be7a99f24a2d321b03e91a54b124bc540098663058a9457a8453bd4ecbb00e159973664f50cb695ecda71f01efec30939a2ec586732d88e0ab7b98f178d3f6d048a82694a8a0b39fe7c9ba6da447728924e3aad2603f9a9bf694f994966e7af79c1e8ffb9420bbce5a90fdaf5093caa087ae701fbe05a9d59f5930b7c1933d6f231ff90b942bf62bff6c7430dbf9994d4f6ac56b651192bb98fe0a99cc59863221d140a680bdf3c946b515958fb5bc095703b1cf0c8a881cfc3b8cc563844d9", 0xca}], 0xa, &(0x7f0000000e40)=[{0x18, 0x88, 0x6, "2ddc"}, {0xf0, 0x10b, 0x40, "1cc3dda09a0e3300db25219587c229da5110a73b484e2975a6f93947197857e5efad98458e583d740fae28e59a5bad3863d4645b81ad40d78e7f47a1d6faa439c328f5369454ae664c3b310017576d5641bfc791f4d80f76e085c35e2c732fdbb9360d422f10a14fec93e5511a8a4f85238c9865b71251a858507e04153dcc395bade0a32b29862fca25f9968bacc605d7e12f63b3a145472497d6c89444e78a6dbee9220e34aa26ce0da3820ad084d72d63fea92ea1d78044499b34bfe01cb23f2a7b9dbfb3216bc47e0295ac7c129b00cae6cd32b74fe4d709"}], 0x108}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000340), &(0x7f0000000580)=r1}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xf, 0x4, 0x8, 0xacc, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r7, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.068549104s ago: executing program 0 (id=1050): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x2111, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x7b4abb1e}, 0x1490c, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfff7, 0x0, 0x0, 0x0, 0x4b6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @loopback}}}], 0x20}, 0x0) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x42) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0xa0) 832.708497ms ago: executing program 3 (id=1051): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x3}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x400c010) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0xd4, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000c40)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4e) 746.186838ms ago: executing program 3 (id=1052): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 642.47762ms ago: executing program 3 (id=1053): socketpair(0x1a, 0x6, 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f2d0000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) 476.173593ms ago: executing program 3 (id=1054): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) close(r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000200000d02000000000000000200000000000000000000000000000000000002"], 0x0, 0x42, 0x0, 0x1}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x8, 0x12) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000100feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair(0x22, 0x2, 0x11, &(0x7f00000000c0)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x2a, &(0x7f0000000100)=r8, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r8}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 0s ago: executing program 0 (id=1055): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000030000000f000000000000110300000007000001000000"], &(0x7f00000000c0)=""/253, 0x2b, 0xfd, 0x1, 0x5, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r0, 0x20, &(0x7f0000000400)={&(0x7f0000000a00)=""/170, 0xaa, 0x0, &(0x7f0000000ac0)=""/171, 0xab}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x6, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000680)='syzkaller\x00', 0x5, 0xc3, &(0x7f00000008c0)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x88) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @local}}}], 0x20}, 0x8000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r5}, 0x10) r6 = socket$kcm(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x3}, 0x104381, 0x4, 0x0, 0xc, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x8982, &(0x7f0000000080)) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) kernel console output (not intermixed with test programs): /0x90 [ 144.944934][ T7033] ? clear_bhb_loop+0x40/0x90 [ 144.949647][ T7033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.955581][ T7033] RIP: 0033:0x7f685798e929 [ 144.960018][ T7033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.979642][ T7033] RSP: 002b:00007f6858757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.988105][ T7033] RAX: ffffffffffffffda RBX: 00007f6857bb5fa0 RCX: 00007f685798e929 [ 144.996135][ T7033] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000005 [ 145.004121][ T7033] RBP: 00007f6858757090 R08: 0000000000000000 R09: 0000000000000000 [ 145.012105][ T7033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.020094][ T7033] R13: 0000000000000000 R14: 00007f6857bb5fa0 R15: 00007ffe17232878 [ 145.028091][ T7033] [ 145.126018][ T7035] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.480'. [ 145.357866][ T7046] FAULT_INJECTION: forcing a failure. [ 145.357866][ T7046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.366079][ T7045] netlink: 132 bytes leftover after parsing attributes in process `syz.2.484'. [ 145.387997][ T7046] CPU: 0 PID: 7046 Comm: syz.0.483 Not tainted 6.6.95-syzkaller #0 [ 145.395961][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.406036][ T7046] Call Trace: [ 145.409341][ T7046] [ 145.412289][ T7046] dump_stack_lvl+0x16c/0x230 [ 145.416998][ T7046] ? show_regs_print_info+0x20/0x20 [ 145.422233][ T7046] ? load_image+0x3b0/0x3b0 [ 145.426779][ T7046] ? __might_fault+0xaa/0x120 [ 145.431477][ T7046] ? __lock_acquire+0x7c80/0x7c80 [ 145.436532][ T7046] should_fail_ex+0x39d/0x4d0 [ 145.441253][ T7046] _copy_from_user+0x2f/0xe0 [ 145.445872][ T7046] kstrtouint_from_user+0xc2/0x150 [ 145.451014][ T7046] ? kstrtol_from_user+0x150/0x150 [ 145.456212][ T7046] proc_fail_nth_write+0x89/0x240 [ 145.461270][ T7046] ? proc_fail_nth_read+0x250/0x250 [ 145.466506][ T7046] ? proc_fail_nth_read+0x250/0x250 [ 145.471734][ T7046] vfs_write+0x288/0x940 [ 145.476196][ T7046] ? file_end_write+0x250/0x250 [ 145.481165][ T7046] ? __fget_files+0x28/0x4d0 [ 145.485783][ T7046] ? __fget_files+0x44a/0x4d0 [ 145.490607][ T7046] ? __fdget_pos+0x2a3/0x330 [ 145.495239][ T7046] ? ksys_write+0x75/0x250 [ 145.499687][ T7046] ksys_write+0x147/0x250 [ 145.504040][ T7046] ? __ia32_sys_read+0x90/0x90 [ 145.509261][ T7046] ? lockdep_hardirqs_on+0x98/0x150 [ 145.514484][ T7046] do_syscall_64+0x55/0xb0 [ 145.518924][ T7046] ? clear_bhb_loop+0x40/0x90 [ 145.523639][ T7046] ? clear_bhb_loop+0x40/0x90 [ 145.528423][ T7046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.534344][ T7046] RIP: 0033:0x7f685798d3df [ 145.538783][ T7046] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 145.558441][ T7046] RSP: 002b:00007f6858757030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 145.566874][ T7046] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f685798d3df [ 145.574946][ T7046] RDX: 0000000000000001 RSI: 00007f68587570a0 RDI: 0000000000000006 [ 145.583019][ T7046] RBP: 00007f6858757090 R08: 0000000000000000 R09: 0000000000000000 [ 145.591004][ T7046] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 145.598992][ T7046] R13: 0000000000000000 R14: 00007f6857bb5fa0 R15: 00007ffe17232878 [ 145.607005][ T7046] [ 145.977851][ T7059] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.490'. [ 146.022998][ T7063] netlink: 132 bytes leftover after parsing attributes in process `syz.3.491'. [ 146.032875][ T7063] FAULT_INJECTION: forcing a failure. [ 146.032875][ T7063] name failslab, interval 1, probability 0, space 0, times 0 [ 146.053560][ T7063] CPU: 1 PID: 7063 Comm: syz.3.491 Not tainted 6.6.95-syzkaller #0 [ 146.061644][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.071760][ T7063] Call Trace: [ 146.075099][ T7063] [ 146.078085][ T7063] dump_stack_lvl+0x16c/0x230 [ 146.082849][ T7063] ? show_regs_print_info+0x20/0x20 [ 146.088123][ T7063] ? load_image+0x3b0/0x3b0 [ 146.092718][ T7063] ? trace_event_raw_event_lock+0x230/0x230 [ 146.098790][ T7063] should_fail_ex+0x39d/0x4d0 [ 146.103580][ T7063] should_failslab+0x9/0x20 [ 146.108156][ T7063] slab_pre_alloc_hook+0x59/0x310 [ 146.113244][ T7063] ? ___neigh_create+0x6d2/0x2440 [ 146.118347][ T7063] ? ___neigh_create+0x6d2/0x2440 [ 146.123443][ T7063] __kmem_cache_alloc_node+0x53/0x260 [ 146.128877][ T7063] ? ___neigh_create+0x6d2/0x2440 [ 146.134052][ T7063] __kmalloc+0xa4/0x240 [ 146.138391][ T7063] ___neigh_create+0x6d2/0x2440 [ 146.143297][ T7063] ? neigh_lookup+0xb1/0x3f0 [ 146.147928][ T7063] ? neigh_ifdown+0x30/0x30 [ 146.152475][ T7063] neigh_add+0xa8f/0xd20 [ 146.156805][ T7063] ? neigh_proc_dointvec_unres_qlen+0x270/0x270 [ 146.163139][ T7063] ? neigh_proc_dointvec_unres_qlen+0x270/0x270 [ 146.169424][ T7063] rtnetlink_rcv_msg+0x7c7/0xf10 [ 146.174426][ T7063] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 146.180053][ T7063] ? rtnetlink_bind+0x80/0x80 [ 146.184789][ T7063] ? perf_tp_event+0x12d7/0x13a0 [ 146.189791][ T7063] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 146.195647][ T7063] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 146.201672][ T7063] ? __dev_queue_xmit+0x245/0x35a0 [ 146.206859][ T7063] ? __dev_queue_xmit+0x245/0x35a0 [ 146.212011][ T7063] ? __dev_queue_xmit+0x1449/0x35a0 [ 146.217262][ T7063] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 146.223019][ T7063] ? perf_trace_lock+0x2ed/0x380 [ 146.227987][ T7063] ? __copy_skb_header+0xa7/0x550 [ 146.233070][ T7063] netlink_rcv_skb+0x216/0x480 [ 146.237876][ T7063] ? rtnetlink_bind+0x80/0x80 [ 146.242579][ T7063] ? netlink_ack+0x1110/0x1110 [ 146.247394][ T7063] ? __lock_acquire+0x7c80/0x7c80 [ 146.252495][ T7063] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.257753][ T7063] netlink_unicast+0x750/0x8c0 [ 146.262571][ T7063] netlink_sendmsg+0x8c1/0xbe0 [ 146.267388][ T7063] ? netlink_getsockopt+0x580/0x580 [ 146.272643][ T7063] ? aa_sock_msg_perm+0x94/0x150 [ 146.277631][ T7063] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 146.282947][ T7063] ? security_socket_sendmsg+0x80/0xa0 [ 146.288445][ T7063] ? netlink_getsockopt+0x580/0x580 [ 146.293673][ T7063] ____sys_sendmsg+0x5bf/0x950 [ 146.298475][ T7063] ? __asan_memset+0x22/0x40 [ 146.303098][ T7063] ? __sys_sendmsg_sock+0x30/0x30 [ 146.308172][ T7063] ? __import_iovec+0x5f2/0x860 [ 146.313058][ T7063] ? import_iovec+0x73/0xa0 [ 146.317592][ T7063] ___sys_sendmsg+0x220/0x290 [ 146.322305][ T7063] ? __sys_sendmsg+0x270/0x270 [ 146.327125][ T7063] ? __lock_acquire+0x7c80/0x7c80 [ 146.332241][ T7063] __se_sys_sendmsg+0x1a5/0x270 [ 146.337122][ T7063] ? __x64_sys_sendmsg+0x80/0x80 [ 146.342107][ T7063] ? lockdep_hardirqs_on+0x98/0x150 [ 146.347337][ T7063] do_syscall_64+0x55/0xb0 [ 146.351788][ T7063] ? clear_bhb_loop+0x40/0x90 [ 146.356485][ T7063] ? clear_bhb_loop+0x40/0x90 [ 146.361204][ T7063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.367156][ T7063] RIP: 0033:0x7f974d58e929 [ 146.371640][ T7063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.391363][ T7063] RSP: 002b:00007f974e397038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.399832][ T7063] RAX: ffffffffffffffda RBX: 00007f974d7b5fa0 RCX: 00007f974d58e929 [ 146.407862][ T7063] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 146.416223][ T7063] RBP: 00007f974e397090 R08: 0000000000000000 R09: 0000000000000000 [ 146.424220][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.432219][ T7063] R13: 0000000000000000 R14: 00007f974d7b5fa0 R15: 00007ffe6964d418 [ 146.440244][ T7063] [ 146.467835][ T7062] netlink: 'syz.0.492': attribute type 4 has an invalid length. [ 146.479105][ T7062] netlink: 140 bytes leftover after parsing attributes in process `syz.0.492'. [ 146.645000][ T7072] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.502'. [ 146.735497][ T7074] lo: entered allmulticast mode [ 146.940343][ T7080] netlink: 'syz.2.497': attribute type 5 has an invalid length. [ 146.954977][ T7080] C: renamed from team_slave_0 (while UP) [ 146.977875][ T7080] netlink: 'syz.2.497': attribute type 3 has an invalid length. [ 146.985742][ T7080] netlink: 152 bytes leftover after parsing attributes in process `syz.2.497'. [ 147.098770][ T7087] FAULT_INJECTION: forcing a failure. [ 147.098770][ T7087] name failslab, interval 1, probability 0, space 0, times 0 [ 147.129628][ T7088] netlink: 'syz.2.503': attribute type 1 has an invalid length. [ 147.137709][ T7087] CPU: 0 PID: 7087 Comm: syz.0.501 Not tainted 6.6.95-syzkaller #0 [ 147.145669][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.155951][ T7087] Call Trace: [ 147.159288][ T7087] [ 147.162264][ T7087] dump_stack_lvl+0x16c/0x230 [ 147.167008][ T7087] ? show_regs_print_info+0x20/0x20 [ 147.172268][ T7087] ? load_image+0x3b0/0x3b0 [ 147.176836][ T7087] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 147.182976][ T7087] ? __asan_memset+0x22/0x40 [ 147.185475][ T7088] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.503'. [ 147.187612][ T7087] should_fail_ex+0x39d/0x4d0 [ 147.187659][ T7087] should_failslab+0x9/0x20 [ 147.187679][ T7087] slab_pre_alloc_hook+0x59/0x310 [ 147.187700][ T7087] ? __debug_object_init+0xe8/0x430 [ 147.187736][ T7087] kmem_cache_alloc+0x5a/0x2e0 [ 147.187755][ T7087] ? slab_build_skb+0x2b/0x3f0 [ 147.225864][ T7087] slab_build_skb+0x2b/0x3f0 [ 147.230486][ T7087] bpf_prog_test_run_skb+0x3ba/0x11c0 [ 147.235877][ T7087] ? __fget_files+0x28/0x4d0 [ 147.240500][ T7087] ? cpu_online+0x60/0x60 [ 147.244842][ T7087] bpf_prog_test_run+0x321/0x390 [ 147.249814][ T7087] __sys_bpf+0x440/0x800 [ 147.254288][ T7087] ? bpf_link_show_fdinfo+0x350/0x350 [ 147.259731][ T7087] ? lock_chain_count+0x20/0x20 [ 147.264816][ T7087] __x64_sys_bpf+0x7c/0x90 [ 147.269283][ T7087] do_syscall_64+0x55/0xb0 [ 147.273761][ T7087] ? clear_bhb_loop+0x40/0x90 [ 147.278521][ T7087] ? clear_bhb_loop+0x40/0x90 [ 147.283258][ T7087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.289223][ T7087] RIP: 0033:0x7f685798e929 [ 147.293686][ T7087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.313355][ T7087] RSP: 002b:00007f6858757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.321831][ T7087] RAX: ffffffffffffffda RBX: 00007f6857bb5fa0 RCX: 00007f685798e929 [ 147.329857][ T7087] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 147.337961][ T7087] RBP: 00007f6858757090 R08: 0000000000000000 R09: 0000000000000000 [ 147.345967][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.353974][ T7087] R13: 0000000000000000 R14: 00007f6857bb5fa0 R15: 00007ffe17232878 [ 147.361972][ T7087] [ 147.635574][ T7099] netlink: 60 bytes leftover after parsing attributes in process `syz.0.505'. [ 148.363919][ T7112] lo: entered allmulticast mode [ 148.697299][ T7122] netlink: 'syz.3.514': attribute type 5 has an invalid length. [ 148.720252][ T7122] C: renamed from team_slave_0 (while UP) [ 148.741312][ T7122] netlink: 'syz.3.514': attribute type 3 has an invalid length. [ 149.519173][ T7144] __nla_validate_parse: 6 callbacks suppressed [ 149.519191][ T7144] netlink: 60 bytes leftover after parsing attributes in process `syz.3.523'. [ 149.547176][ T7144] netlink: 60 bytes leftover after parsing attributes in process `syz.3.523'. [ 149.633107][ T7144] netlink: 60 bytes leftover after parsing attributes in process `syz.3.523'. [ 150.197927][ T3428] wlan1: Trigger new scan to find an IBSS to join [ 150.317713][ T7169] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.531'. [ 150.685033][ T7185] netlink: 'syz.0.537': attribute type 15 has an invalid length. [ 150.698602][ T7185] netlink: 'syz.0.537': attribute type 5 has an invalid length. [ 150.706513][ T7185] netlink: 144 bytes leftover after parsing attributes in process `syz.0.537'. [ 151.338595][ T7188] netlink: 'syz.1.539': attribute type 1 has an invalid length. [ 151.355833][ T7188] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.539'. [ 151.684758][ T7198] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.544'. [ 152.026514][ T7211] netlink: 60 bytes leftover after parsing attributes in process `syz.1.548'. [ 152.060657][ T7211] netlink: 60 bytes leftover after parsing attributes in process `syz.1.548'. [ 152.076537][ T7209] netlink: 60 bytes leftover after parsing attributes in process `syz.1.548'. [ 152.212737][ T7220] netlink: 'syz.3.551': attribute type 1 has an invalid length. [ 152.726326][ T7232] syzkaller0: entered promiscuous mode [ 152.731983][ T7232] syzkaller0: entered allmulticast mode [ 153.663253][ T7249] netlink: 'syz.0.563': attribute type 39 has an invalid length. [ 153.692276][ T7249] veth0_macvtap: left promiscuous mode [ 154.196791][ T1127] wlan1: Trigger new scan to find an IBSS to join [ 155.177124][ T7273] syz.0.573 uses obsolete (PF_INET,SOCK_PACKET) [ 155.959309][ T7273] FAULT_INJECTION: forcing a failure. [ 155.959309][ T7273] name failslab, interval 1, probability 0, space 0, times 0 [ 155.973147][ T7273] CPU: 1 PID: 7273 Comm: syz.0.573 Not tainted 6.6.95-syzkaller #0 [ 155.981109][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.991217][ T7273] Call Trace: [ 155.994539][ T7273] [ 155.997517][ T7273] dump_stack_lvl+0x16c/0x230 [ 156.002266][ T7273] ? show_regs_print_info+0x20/0x20 [ 156.007553][ T7273] ? load_image+0x3b0/0x3b0 [ 156.012655][ T7273] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 156.018624][ T7273] ? lockdep_hardirqs_on+0x98/0x150 [ 156.023883][ T7273] should_fail_ex+0x39d/0x4d0 [ 156.028629][ T7273] should_failslab+0x9/0x20 [ 156.033171][ T7273] slab_pre_alloc_hook+0x59/0x310 [ 156.038242][ T7273] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 156.044900][ T7273] ? addr_event+0xc3/0x470 [ 156.049470][ T7273] __kmem_cache_alloc_node+0x53/0x260 [ 156.054908][ T7273] ? addr_event+0xc3/0x470 [ 156.059375][ T7273] kmalloc_trace+0x2a/0xe0 [ 156.063833][ T7273] addr_event+0xc3/0x470 [ 156.068140][ T7273] inetaddr_event+0xe4/0x140 [ 156.072775][ T7273] ? is_eth_active_slave_of_bonding_rcu+0x260/0x260 [ 156.079422][ T7273] ? read_lock_is_recursive+0x20/0x20 [ 156.084852][ T7273] ? __build_skb_around+0x255/0x3d0 [ 156.090127][ T7273] notifier_call_chain+0x197/0x390 [ 156.095299][ T7273] blocking_notifier_call_chain+0x6a/0x90 [ 156.101074][ T7273] __inet_del_ifa+0x876/0x1020 [ 156.105911][ T7273] devinet_ioctl+0xe06/0x1c60 [ 156.110659][ T7273] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 156.115830][ T7273] ? _copy_from_user+0xa5/0xe0 [ 156.120646][ T7273] ? get_user_ifreq+0x12b/0x180 [ 156.125551][ T7273] inet_ioctl+0x3c1/0x4c0 [ 156.129935][ T7273] ? tomoyo_path_number_perm+0x1ba/0x590 [ 156.135619][ T7273] ? inet_shutdown+0x370/0x370 [ 156.140435][ T7273] ? slab_free_freelist_hook+0x130/0x1b0 [ 156.146135][ T7273] ? tomoyo_path_number_perm+0x477/0x590 [ 156.151807][ T7273] ? __kmem_cache_free+0xba/0x1f0 [ 156.156888][ T7273] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 156.162396][ T7273] ? packet_ioctl+0x24d/0x340 [ 156.167129][ T7273] sock_do_ioctl+0xd7/0x2f0 [ 156.171687][ T7273] ? sock_show_fdinfo+0xb0/0xb0 [ 156.176607][ T7273] sock_ioctl+0x623/0x7a0 [ 156.180985][ T7273] ? sock_poll+0x3d0/0x3d0 [ 156.185459][ T7273] ? bpf_lsm_file_ioctl+0x9/0x10 [ 156.190443][ T7273] ? security_file_ioctl+0x80/0xa0 [ 156.195605][ T7273] ? sock_poll+0x3d0/0x3d0 [ 156.200135][ T7273] __se_sys_ioctl+0xfd/0x170 [ 156.204790][ T7273] do_syscall_64+0x55/0xb0 [ 156.209260][ T7273] ? clear_bhb_loop+0x40/0x90 [ 156.213984][ T7273] ? clear_bhb_loop+0x40/0x90 [ 156.218715][ T7273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.224674][ T7273] RIP: 0033:0x7f685798e929 [ 156.229136][ T7273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.248789][ T7273] RSP: 002b:00007f6858757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.257263][ T7273] RAX: ffffffffffffffda RBX: 00007f6857bb5fa0 RCX: 00007f685798e929 [ 156.265295][ T7273] RDX: 0000200000000000 RSI: 0000000000008918 RDI: 0000000000000003 [ 156.273314][ T7273] RBP: 00007f6858757090 R08: 0000000000000000 R09: 0000000000000000 [ 156.281328][ T7273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.289353][ T7273] R13: 0000000000000000 R14: 00007f6857bb5fa0 R15: 00007ffe17232878 [ 156.297402][ T7273] [ 156.343348][ T1043] wlan1: Trigger new scan to find an IBSS to join [ 156.458496][ T3428] wlan1: Creating new IBSS network, BSSID fe:b8:f8:b5:bd:98 [ 156.592409][ T7287] sit0: entered allmulticast mode [ 156.720182][ T7287] __nla_validate_parse: 5 callbacks suppressed [ 156.720218][ T7287] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.579'. [ 156.747805][ T7287] sit0: entered promiscuous mode [ 156.837640][ T7296] FAULT_INJECTION: forcing a failure. [ 156.837640][ T7296] name failslab, interval 1, probability 0, space 0, times 0 [ 156.859263][ T7296] CPU: 0 PID: 7296 Comm: syz.2.582 Not tainted 6.6.95-syzkaller #0 [ 156.867233][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.877332][ T7296] Call Trace: [ 156.880647][ T7296] [ 156.883621][ T7296] dump_stack_lvl+0x16c/0x230 [ 156.888359][ T7296] ? show_regs_print_info+0x20/0x20 [ 156.893609][ T7296] ? load_image+0x3b0/0x3b0 [ 156.898254][ T7296] ? __might_sleep+0xe0/0xe0 [ 156.902904][ T7296] ? __lock_acquire+0x7c80/0x7c80 [ 156.907983][ T7296] should_fail_ex+0x39d/0x4d0 [ 156.912726][ T7296] should_failslab+0x9/0x20 [ 156.917272][ T7296] slab_pre_alloc_hook+0x59/0x310 [ 156.922351][ T7296] ? __scm_send+0x63f/0x14a0 [ 156.926999][ T7296] __kmem_cache_alloc_node+0x53/0x260 [ 156.932449][ T7296] ? __scm_send+0x63f/0x14a0 [ 156.937101][ T7296] kmalloc_trace+0x2a/0xe0 [ 156.941585][ T7296] __scm_send+0x63f/0x14a0 [ 156.946085][ T7296] ? __scm_destroy+0x160/0x160 [ 156.950922][ T7296] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x10 [ 156.957054][ T7296] ? security_socket_getpeersec_dgram+0x83/0xa0 [ 156.963353][ T7296] unix_dgram_sendmsg+0x170/0x1720 [ 156.968530][ T7296] ? aa_sk_perm+0x7fc/0x930 [ 156.973080][ T7296] ? __might_fault+0xaa/0x120 [ 156.977803][ T7296] ? unix_dgram_poll+0x670/0x670 [ 156.982789][ T7296] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 156.989250][ T7296] ? __might_fault+0xaa/0x120 [ 156.993969][ T7296] ? aa_sock_msg_perm+0x94/0x150 [ 156.998962][ T7296] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 157.004315][ T7296] ? security_socket_sendmsg+0x80/0xa0 [ 157.009823][ T7296] ? unix_dgram_poll+0x670/0x670 [ 157.014825][ T7296] ____sys_sendmsg+0x5bf/0x950 [ 157.019653][ T7296] ? __sys_sendmsg_sock+0x30/0x30 [ 157.024722][ T7296] ? __import_iovec+0x3fa/0x860 [ 157.029626][ T7296] ? import_iovec+0x73/0xa0 [ 157.034177][ T7296] ___sys_sendmsg+0x220/0x290 [ 157.038901][ T7296] ? __sys_sendmsg+0x270/0x270 [ 157.043734][ T7296] ? __lock_acquire+0x7c80/0x7c80 [ 157.048849][ T7296] __se_sys_sendmsg+0x1a5/0x270 [ 157.053754][ T7296] ? __x64_sys_sendmsg+0x80/0x80 [ 157.058763][ T7296] ? lockdep_hardirqs_on+0x98/0x150 [ 157.064022][ T7296] do_syscall_64+0x55/0xb0 [ 157.068491][ T7296] ? clear_bhb_loop+0x40/0x90 [ 157.073207][ T7296] ? clear_bhb_loop+0x40/0x90 [ 157.077928][ T7296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.083874][ T7296] RIP: 0033:0x7f05df58e929 [ 157.088329][ T7296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.107984][ T7296] RSP: 002b:00007f05e0394038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.116450][ T7296] RAX: ffffffffffffffda RBX: 00007f05df7b5fa0 RCX: 00007f05df58e929 [ 157.124464][ T7296] RDX: 0000000000008080 RSI: 00002000000005c0 RDI: 0000000000000004 [ 157.132570][ T7296] RBP: 00007f05e0394090 R08: 0000000000000000 R09: 0000000000000000 [ 157.140578][ T7296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.148579][ T7296] R13: 0000000000000000 R14: 00007f05df7b5fa0 R15: 00007ffe719a29e8 [ 157.156581][ T7296] [ 157.269258][ T7300] FAULT_INJECTION: forcing a failure. [ 157.269258][ T7300] name failslab, interval 1, probability 0, space 0, times 0 [ 157.282292][ T7300] CPU: 0 PID: 7300 Comm: syz.2.584 Not tainted 6.6.95-syzkaller #0 [ 157.290251][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.300348][ T7300] Call Trace: [ 157.303670][ T7300] [ 157.306632][ T7300] dump_stack_lvl+0x16c/0x230 [ 157.311355][ T7300] ? kasan_set_track+0x4e/0x70 [ 157.316161][ T7300] ? show_regs_print_info+0x20/0x20 [ 157.321401][ T7300] ? load_image+0x3b0/0x3b0 [ 157.325942][ T7300] ? ip6_sk_dst_lookup_flow+0x731/0x970 [ 157.331525][ T7300] ? __se_sys_sendmsg+0x1a5/0x270 [ 157.336582][ T7300] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.342716][ T7300] should_fail_ex+0x39d/0x4d0 [ 157.347447][ T7300] should_failslab+0x9/0x20 [ 157.351970][ T7300] slab_pre_alloc_hook+0x59/0x310 [ 157.357021][ T7300] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 157.362698][ T7300] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 157.368369][ T7300] __kmem_cache_alloc_node+0x53/0x260 [ 157.373775][ T7300] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 157.379450][ T7300] __kmalloc_node+0xa4/0x230 [ 157.384075][ T7300] memcg_alloc_slab_cgroups+0x87/0x130 [ 157.389569][ T7300] slab_post_alloc_hook+0xfc/0x4d0 [ 157.394726][ T7300] kmem_cache_alloc+0x11e/0x2e0 [ 157.399629][ T7300] ? dst_alloc+0x105/0x170 [ 157.404078][ T7300] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 157.409745][ T7300] dst_alloc+0x105/0x170 [ 157.414030][ T7300] ip6_pol_route+0x907/0x1160 [ 157.418734][ T7300] ? ip6_pol_route+0x166/0x1160 [ 157.423619][ T7300] ? trace_fib6_table_lookup+0x1c0/0x1c0 [ 157.429280][ T7300] ? look_up_lock_class+0x75/0x140 [ 157.434535][ T7300] fib6_rule_lookup+0x1d7/0x510 [ 157.439422][ T7300] ? skb_header_pointer+0x120/0x120 [ 157.444655][ T7300] ? fib6_lookup+0x2c0/0x2c0 [ 157.449276][ T7300] ? read_lock_is_recursive+0x20/0x20 [ 157.454687][ T7300] ? dev_get_by_index_rcu+0xf4/0x110 [ 157.460009][ T7300] ip6_route_output_flags+0x364/0x5d0 [ 157.465419][ T7300] ? ip6_route_output_flags+0x2e/0x5d0 [ 157.470908][ T7300] ip6_dst_lookup_tail+0x199/0x14a0 [ 157.476156][ T7300] ? ip6_dst_lookup+0x60/0x60 [ 157.480867][ T7300] ? trace_event_raw_event_lock+0x230/0x230 [ 157.486831][ T7300] ? sk_dst_check+0x25/0x430 [ 157.491465][ T7300] ? sk_dst_check+0x2f3/0x430 [ 157.496183][ T7300] ip6_sk_dst_lookup_flow+0x731/0x970 [ 157.501592][ T7300] ? udpv6_sendmsg+0x1646/0x2530 [ 157.506566][ T7300] udpv6_sendmsg+0x18ba/0x2530 [ 157.511354][ T7300] ? perf_trace_lock+0x2ed/0x380 [ 157.516336][ T7300] ? udpv6_sendmsg+0x2530/0x2530 [ 157.521307][ T7300] ? udp_v6_early_demux+0xf60/0xf60 [ 157.526555][ T7300] ? lock_chain_count+0x20/0x20 [ 157.531454][ T7300] ? _local_bh_enable+0xa0/0xa0 [ 157.536341][ T7300] ? inet_send_prepare+0x1b3/0x260 [ 157.541490][ T7300] ? inet_send_prepare+0x1b3/0x260 [ 157.546637][ T7300] ? inet6_sendmsg+0x5f/0xd0 [ 157.551260][ T7300] ? inet6_compat_ioctl+0x380/0x380 [ 157.556487][ T7300] ____sys_sendmsg+0x5bf/0x950 [ 157.561290][ T7300] ? __asan_memset+0x22/0x40 [ 157.565916][ T7300] ? __sys_sendmsg_sock+0x30/0x30 [ 157.570967][ T7300] ? __import_iovec+0x3fa/0x860 [ 157.575859][ T7300] ? import_iovec+0x73/0xa0 [ 157.580398][ T7300] ___sys_sendmsg+0x220/0x290 [ 157.585116][ T7300] ? __sys_sendmsg+0x270/0x270 [ 157.589951][ T7300] ? __lock_acquire+0x7c80/0x7c80 [ 157.595059][ T7300] __se_sys_sendmsg+0x1a5/0x270 [ 157.599950][ T7300] ? __x64_sys_sendmsg+0x80/0x80 [ 157.604943][ T7300] ? lockdep_hardirqs_on+0x98/0x150 [ 157.610265][ T7300] do_syscall_64+0x55/0xb0 [ 157.614715][ T7300] ? clear_bhb_loop+0x40/0x90 [ 157.619420][ T7300] ? clear_bhb_loop+0x40/0x90 [ 157.624125][ T7300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.630058][ T7300] RIP: 0033:0x7f05df58e929 [ 157.634506][ T7300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.654148][ T7300] RSP: 002b:00007f05e0394038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.662594][ T7300] RAX: ffffffffffffffda RBX: 00007f05df7b5fa0 RCX: 00007f05df58e929 [ 157.670615][ T7300] RDX: 0000000004000080 RSI: 0000200000000580 RDI: 0000000000000004 [ 157.678615][ T7300] RBP: 00007f05e0394090 R08: 0000000000000000 R09: 0000000000000000 [ 157.686614][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.694619][ T7300] R13: 0000000000000000 R14: 00007f05df7b5fa0 R15: 00007ffe719a29e8 [ 157.702651][ T7300] [ 157.727032][ T7303] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.585'. [ 158.136744][ T7317] netlink: 'syz.2.592': attribute type 3 has an invalid length. [ 158.144905][ T7317] netlink: 132 bytes leftover after parsing attributes in process `syz.2.592'. [ 159.218331][ T7343] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.597'. [ 159.297270][ T7349] veth0_vlan: entered allmulticast mode [ 159.588651][ T7344] veth0_vlan: left promiscuous mode [ 159.620698][ T7344] veth0_vlan: entered promiscuous mode [ 159.903517][ T7369] FAULT_INJECTION: forcing a failure. [ 159.903517][ T7369] name failslab, interval 1, probability 0, space 0, times 0 [ 159.917869][ T7369] CPU: 0 PID: 7369 Comm: syz.0.607 Not tainted 6.6.95-syzkaller #0 [ 159.925842][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.935936][ T7369] Call Trace: [ 159.939236][ T7369] [ 159.942190][ T7369] dump_stack_lvl+0x16c/0x230 [ 159.946903][ T7369] ? show_regs_print_info+0x20/0x20 [ 159.952133][ T7369] ? load_image+0x3b0/0x3b0 [ 159.956694][ T7369] ? __might_sleep+0xe0/0xe0 [ 159.961333][ T7369] ? __lock_acquire+0x7c80/0x7c80 [ 159.966406][ T7369] should_fail_ex+0x39d/0x4d0 [ 159.971151][ T7369] should_failslab+0x9/0x20 [ 159.975714][ T7369] slab_pre_alloc_hook+0x59/0x310 [ 159.980826][ T7369] kmem_cache_alloc_node+0x60/0x330 [ 159.986104][ T7369] ? __alloc_skb+0x108/0x2c0 [ 159.990758][ T7369] __alloc_skb+0x108/0x2c0 [ 159.995241][ T7369] rtmsg_ifa+0xf9/0x1f0 [ 159.999454][ T7369] __inet_del_ifa+0x862/0x1020 [ 160.004280][ T7369] devinet_ioctl+0xb63/0x1c60 [ 160.009025][ T7369] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 160.014193][ T7369] ? _copy_from_user+0xa5/0xe0 [ 160.018994][ T7369] ? get_user_ifreq+0x12b/0x180 [ 160.023915][ T7369] inet_ioctl+0x3c1/0x4c0 [ 160.028330][ T7369] ? tomoyo_path_number_perm+0x1ba/0x590 [ 160.034036][ T7369] ? inet_shutdown+0x370/0x370 [ 160.038849][ T7369] ? slab_free_freelist_hook+0x130/0x1b0 [ 160.044521][ T7369] ? tomoyo_path_number_perm+0x477/0x590 [ 160.050196][ T7369] ? __kmem_cache_free+0xba/0x1f0 [ 160.055474][ T7369] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 160.060993][ T7369] ? packet_ioctl+0x270/0x340 [ 160.065717][ T7369] sock_do_ioctl+0xd7/0x2f0 [ 160.070295][ T7369] ? sock_show_fdinfo+0xb0/0xb0 [ 160.075240][ T7369] sock_ioctl+0x623/0x7a0 [ 160.079671][ T7369] ? sock_poll+0x3d0/0x3d0 [ 160.084184][ T7369] ? bpf_lsm_file_ioctl+0x9/0x10 [ 160.089189][ T7369] ? security_file_ioctl+0x80/0xa0 [ 160.094338][ T7369] ? sock_poll+0x3d0/0x3d0 [ 160.098797][ T7369] __se_sys_ioctl+0xfd/0x170 [ 160.103433][ T7369] do_syscall_64+0x55/0xb0 [ 160.107899][ T7369] ? clear_bhb_loop+0x40/0x90 [ 160.112617][ T7369] ? clear_bhb_loop+0x40/0x90 [ 160.117338][ T7369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.123280][ T7369] RIP: 0033:0x7f685798e929 [ 160.127814][ T7369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.147463][ T7369] RSP: 002b:00007f6858757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.155999][ T7369] RAX: ffffffffffffffda RBX: 00007f6857bb5fa0 RCX: 00007f685798e929 [ 160.163999][ T7369] RDX: 0000200000000140 RSI: 0000000000008916 RDI: 0000000000000004 [ 160.171997][ T7369] RBP: 00007f6858757090 R08: 0000000000000000 R09: 0000000000000000 [ 160.180084][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.188082][ T7369] R13: 0000000000000000 R14: 00007f6857bb5fa0 R15: 00007ffe17232878 [ 160.196126][ T7369] [ 160.448224][ T7381] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.610'. [ 160.797932][ T7390] netlink: 'syz.3.615': attribute type 4 has an invalid length. [ 160.806111][ T7390] netlink: 112 bytes leftover after parsing attributes in process `syz.3.615'. [ 160.947037][ T7397] sit0: entered allmulticast mode [ 161.073417][ T7397] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.617'. [ 161.176456][ T7397] sit0: entered promiscuous mode [ 161.250103][ T7409] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.621'. [ 162.100048][ T7440] netlink: 'syz.1.635': attribute type 3 has an invalid length. [ 162.108519][ T7440] netlink: 132 bytes leftover after parsing attributes in process `syz.1.635'. [ 162.129900][ T7441] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.637'. [ 163.223442][ T7469] netlink: 'syz.3.648': attribute type 3 has an invalid length. [ 163.231602][ T7469] netlink: 132 bytes leftover after parsing attributes in process `syz.3.648'. [ 163.795490][ T7493] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 163.925418][ T7497] FAULT_INJECTION: forcing a failure. [ 163.925418][ T7497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.968164][ T7497] CPU: 0 PID: 7497 Comm: syz.3.660 Not tainted 6.6.95-syzkaller #0 [ 163.976163][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.986389][ T7497] Call Trace: [ 163.989733][ T7497] [ 163.992745][ T7497] dump_stack_lvl+0x16c/0x230 [ 163.997766][ T7497] ? show_regs_print_info+0x20/0x20 [ 164.003031][ T7497] ? load_image+0x3b0/0x3b0 [ 164.007585][ T7497] ? __might_fault+0xaa/0x120 [ 164.012304][ T7497] ? __lock_acquire+0x7c80/0x7c80 [ 164.017372][ T7497] should_fail_ex+0x39d/0x4d0 [ 164.022108][ T7497] _copy_from_user+0x2f/0xe0 [ 164.026762][ T7497] ____sys_sendmsg+0x30d/0x950 [ 164.031575][ T7497] ? __sys_sendmsg_sock+0x30/0x30 [ 164.036628][ T7497] ? __import_iovec+0x3fa/0x860 [ 164.041525][ T7497] ? import_iovec+0x73/0xa0 [ 164.046061][ T7497] ___sys_sendmsg+0x220/0x290 [ 164.050772][ T7497] ? __sys_sendmsg+0x270/0x270 [ 164.055598][ T7497] ? __lock_acquire+0x7c80/0x7c80 [ 164.060690][ T7497] __se_sys_sendmsg+0x1a5/0x270 [ 164.065573][ T7497] ? __x64_sys_sendmsg+0x80/0x80 [ 164.070562][ T7497] ? lockdep_hardirqs_on+0x98/0x150 [ 164.075803][ T7497] do_syscall_64+0x55/0xb0 [ 164.080301][ T7497] ? clear_bhb_loop+0x40/0x90 [ 164.085012][ T7497] ? clear_bhb_loop+0x40/0x90 [ 164.089722][ T7497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.095654][ T7497] RIP: 0033:0x7f974d58e929 [ 164.100109][ T7497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.119748][ T7497] RSP: 002b:00007f974e397038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.128214][ T7497] RAX: ffffffffffffffda RBX: 00007f974d7b5fa0 RCX: 00007f974d58e929 [ 164.136217][ T7497] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 164.144217][ T7497] RBP: 00007f974e397090 R08: 0000000000000000 R09: 0000000000000000 [ 164.152222][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.160476][ T7497] R13: 0000000000000000 R14: 00007f974d7b5fa0 R15: 00007ffe6964d418 [ 164.168511][ T7497] [ 164.216259][ T7505] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.663'. [ 164.697800][ T7526] netlink: 192 bytes leftover after parsing attributes in process `syz.2.672'. [ 164.838159][ T7531] sit0: entered allmulticast mode [ 164.994566][ T7531] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.674'. [ 165.041013][ T7531] sit0: entered promiscuous mode [ 165.425303][ T7545] netlink: 132 bytes leftover after parsing attributes in process `syz.3.679'. [ 165.993753][ T7567] FAULT_INJECTION: forcing a failure. [ 165.993753][ T7567] name failslab, interval 1, probability 0, space 0, times 0 [ 166.006761][ T7567] CPU: 0 PID: 7567 Comm: syz.1.689 Not tainted 6.6.95-syzkaller #0 [ 166.014699][ T7567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.024800][ T7567] Call Trace: [ 166.028114][ T7567] [ 166.031118][ T7567] dump_stack_lvl+0x16c/0x230 [ 166.035850][ T7567] ? show_regs_print_info+0x20/0x20 [ 166.041083][ T7567] ? load_image+0x3b0/0x3b0 [ 166.045625][ T7567] should_fail_ex+0x39d/0x4d0 [ 166.050353][ T7567] should_failslab+0x9/0x20 [ 166.054876][ T7567] slab_pre_alloc_hook+0x59/0x310 [ 166.059942][ T7567] kmem_cache_alloc+0x5a/0x2e0 [ 166.064841][ T7567] ? dst_alloc+0x105/0x170 [ 166.069295][ T7567] dst_alloc+0x105/0x170 [ 166.073571][ T7567] ip_route_output_key_hash_rcu+0x1413/0x2320 [ 166.079756][ T7567] ? ip_route_output_key_hash+0x12f/0x340 [ 166.085520][ T7567] ip_route_output_key_hash+0x20b/0x340 [ 166.091274][ T7567] ? ip_route_input_rcu+0x3010/0x3010 [ 166.096676][ T7567] ? bpf_lsm_xfrm_decode_session+0x9/0x10 [ 166.102434][ T7567] xfrmi_xmit+0x374/0x1810 [ 166.106899][ T7567] ? verify_lock_unused+0x140/0x140 [ 166.112129][ T7567] ? skb_crc32c_csum_help+0x520/0x520 [ 166.117532][ T7567] ? xfrmi_dev_uninit+0x200/0x200 [ 166.122689][ T7567] dev_hard_start_xmit+0x246/0x740 [ 166.127842][ T7567] __dev_queue_xmit+0x1a64/0x35a0 [ 166.132891][ T7567] ? __might_fault+0xc6/0x120 [ 166.137589][ T7567] ? __virt_addr_valid+0x18c/0x540 [ 166.142721][ T7567] ? __dev_queue_xmit+0x245/0x35a0 [ 166.147848][ T7567] ? sock_alloc_send_pskb+0x875/0x990 [ 166.153248][ T7567] ? netdev_core_pick_tx+0x340/0x340 [ 166.158551][ T7567] ? packet_parse_headers+0x7c8/0xad0 [ 166.163934][ T7567] ? packet_parse_headers+0x7d9/0xad0 [ 166.169319][ T7567] ? __virt_addr_valid+0x18c/0x540 [ 166.174476][ T7567] ? __check_object_size+0x506/0xa30 [ 166.179773][ T7567] ? skb_setup_tx_timestamp+0x1e0/0x1e0 [ 166.185330][ T7567] ? skb_copy_datagram_from_iter+0x5f6/0x6e0 [ 166.191336][ T7567] ? packet_xmit+0x66/0x330 [ 166.195853][ T7567] ? packet_sendmsg+0x3992/0x4c00 [ 166.200897][ T7567] packet_sendmsg+0x3ab1/0x4c00 [ 166.205790][ T7567] ? __might_sleep+0xe0/0xe0 [ 166.210421][ T7567] ? __lock_acquire+0x1260/0x7c80 [ 166.215469][ T7567] ? verify_lock_unused+0x140/0x140 [ 166.220696][ T7567] ? aa_sk_perm+0x7fc/0x930 [ 166.225213][ T7567] ? packet_getsockopt+0xa20/0xa20 [ 166.230357][ T7567] ? aa_sock_msg_perm+0x94/0x150 [ 166.235320][ T7567] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 166.240626][ T7567] ? security_socket_sendmsg+0x80/0xa0 [ 166.246100][ T7567] ? packet_getsockopt+0xa20/0xa20 [ 166.251241][ T7567] ____sys_sendmsg+0x5bf/0x950 [ 166.256030][ T7567] ? __asan_memset+0x22/0x40 [ 166.260642][ T7567] ? __sys_sendmsg_sock+0x30/0x30 [ 166.265683][ T7567] ? __import_iovec+0x5f2/0x860 [ 166.270560][ T7567] ? import_iovec+0x73/0xa0 [ 166.275082][ T7567] ___sys_sendmsg+0x220/0x290 [ 166.279783][ T7567] ? __sys_sendmsg+0x270/0x270 [ 166.284577][ T7567] ? __lock_acquire+0x7c80/0x7c80 [ 166.289639][ T7567] __se_sys_sendmsg+0x1a5/0x270 [ 166.294510][ T7567] ? __x64_sys_sendmsg+0x80/0x80 [ 166.299476][ T7567] ? lockdep_hardirqs_on+0x98/0x150 [ 166.304697][ T7567] do_syscall_64+0x55/0xb0 [ 166.309134][ T7567] ? clear_bhb_loop+0x40/0x90 [ 166.313824][ T7567] ? clear_bhb_loop+0x40/0x90 [ 166.318519][ T7567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.324441][ T7567] RIP: 0033:0x7f5b9f78e929 [ 166.328873][ T7567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.348582][ T7567] RSP: 002b:00007f5ba054d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.357024][ T7567] RAX: ffffffffffffffda RBX: 00007f5b9f9b5fa0 RCX: 00007f5b9f78e929 [ 166.365013][ T7567] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000003 [ 166.373007][ T7567] RBP: 00007f5ba054d090 R08: 0000000000000000 R09: 0000000000000000 [ 166.381013][ T7567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.389008][ T7567] R13: 0000000000000000 R14: 00007f5b9f9b5fa0 R15: 00007ffc14a99c48 [ 166.397009][ T7567] [ 167.162665][ T7596] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.701'. [ 167.254914][ T7598] netlink: 'syz.0.702': attribute type 1 has an invalid length. [ 167.272992][ T7598] netlink: 'syz.0.702': attribute type 4 has an invalid length. [ 167.282614][ T7598] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.702'. [ 167.433564][ T7608] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.707'. [ 167.617077][ T7615] FAULT_INJECTION: forcing a failure. [ 167.617077][ T7615] name failslab, interval 1, probability 0, space 0, times 0 [ 167.649990][ T7615] CPU: 0 PID: 7615 Comm: syz.3.710 Not tainted 6.6.95-syzkaller #0 [ 167.658020][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.668113][ T7615] Call Trace: [ 167.671421][ T7615] [ 167.674374][ T7615] dump_stack_lvl+0x16c/0x230 [ 167.679137][ T7615] ? show_regs_print_info+0x20/0x20 [ 167.684369][ T7615] ? load_image+0x3b0/0x3b0 [ 167.688908][ T7615] ? __might_sleep+0xe0/0xe0 [ 167.693524][ T7615] ? __lock_acquire+0x7c80/0x7c80 [ 167.698617][ T7615] should_fail_ex+0x39d/0x4d0 [ 167.703329][ T7615] should_failslab+0x9/0x20 [ 167.707858][ T7615] slab_pre_alloc_hook+0x59/0x310 [ 167.712903][ T7615] ? __scm_send+0x63f/0x14a0 [ 167.717516][ T7615] __kmem_cache_alloc_node+0x53/0x260 [ 167.722906][ T7615] ? __scm_send+0x63f/0x14a0 [ 167.727518][ T7615] kmalloc_trace+0x2a/0xe0 [ 167.731950][ T7615] __scm_send+0x63f/0x14a0 [ 167.736417][ T7615] ? __scm_destroy+0x160/0x160 [ 167.741235][ T7615] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x10 [ 167.747338][ T7615] ? security_socket_getpeersec_dgram+0x83/0xa0 [ 167.753601][ T7615] unix_dgram_sendmsg+0x170/0x1720 [ 167.758753][ T7615] ? aa_sk_perm+0x7fc/0x930 [ 167.763311][ T7615] ? __might_fault+0xaa/0x120 [ 167.768102][ T7615] ? unix_dgram_poll+0x670/0x670 [ 167.773073][ T7615] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 167.779539][ T7615] ? __might_fault+0xaa/0x120 [ 167.784254][ T7615] ? aa_sock_msg_perm+0x94/0x150 [ 167.789230][ T7615] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 167.794567][ T7615] ? security_socket_sendmsg+0x80/0xa0 [ 167.800045][ T7615] ? unix_dgram_poll+0x670/0x670 [ 167.804997][ T7615] ____sys_sendmsg+0x5bf/0x950 [ 167.809791][ T7615] ? __sys_sendmsg_sock+0x30/0x30 [ 167.814831][ T7615] ? __import_iovec+0x3fa/0x860 [ 167.819709][ T7615] ? import_iovec+0x73/0xa0 [ 167.824230][ T7615] ___sys_sendmsg+0x220/0x290 [ 167.828952][ T7615] ? __sys_sendmsg+0x270/0x270 [ 167.833774][ T7615] ? __lock_acquire+0x7c80/0x7c80 [ 167.838847][ T7615] __se_sys_sendmsg+0x1a5/0x270 [ 167.843827][ T7615] ? __x64_sys_sendmsg+0x80/0x80 [ 167.848883][ T7615] ? lockdep_hardirqs_on+0x98/0x150 [ 167.854104][ T7615] do_syscall_64+0x55/0xb0 [ 167.858547][ T7615] ? clear_bhb_loop+0x40/0x90 [ 167.863237][ T7615] ? clear_bhb_loop+0x40/0x90 [ 167.867937][ T7615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.873855][ T7615] RIP: 0033:0x7f974d58e929 [ 167.878283][ T7615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.897993][ T7615] RSP: 002b:00007f974e397038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.906428][ T7615] RAX: ffffffffffffffda RBX: 00007f974d7b5fa0 RCX: 00007f974d58e929 [ 167.914429][ T7615] RDX: 0000000000008080 RSI: 00002000000005c0 RDI: 0000000000000004 [ 167.922417][ T7615] RBP: 00007f974e397090 R08: 0000000000000000 R09: 0000000000000000 [ 167.930458][ T7615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.938540][ T7615] R13: 0000000000000000 R14: 00007f974d7b5fa0 R15: 00007ffe6964d418 [ 167.946539][ T7615] [ 167.982618][ T7618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.990995][ T7618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.051190][ T7618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.085435][ T7618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.191622][ T7624] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.713'. [ 168.836337][ T7641] netlink: 'syz.3.721': attribute type 1 has an invalid length. [ 168.844078][ T7641] netlink: 'syz.3.721': attribute type 4 has an invalid length. [ 168.865422][ T7641] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.721'. [ 168.899812][ T7653] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.726'. [ 169.052176][ T7659] FAULT_INJECTION: forcing a failure. [ 169.052176][ T7659] name failslab, interval 1, probability 0, space 0, times 0 [ 169.095814][ T7659] CPU: 1 PID: 7659 Comm: syz.1.728 Not tainted 6.6.95-syzkaller #0 [ 169.103966][ T7659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.114368][ T7659] Call Trace: [ 169.117985][ T7659] [ 169.120997][ T7659] dump_stack_lvl+0x16c/0x230 [ 169.125920][ T7659] ? show_regs_print_info+0x20/0x20 [ 169.131244][ T7659] ? load_image+0x3b0/0x3b0 [ 169.135971][ T7659] ? __might_sleep+0xe0/0xe0 [ 169.140768][ T7659] ? __lock_acquire+0x7c80/0x7c80 [ 169.146299][ T7659] should_fail_ex+0x39d/0x4d0 [ 169.151369][ T7659] should_failslab+0x9/0x20 [ 169.155961][ T7659] slab_pre_alloc_hook+0x59/0x310 [ 169.161092][ T7659] ? d_instantiate+0x6f/0x90 [ 169.165801][ T7659] kmem_cache_alloc+0x5a/0x2e0 [ 169.170737][ T7659] ? alloc_empty_file+0x9e/0x1d0 [ 169.175784][ T7659] alloc_empty_file+0x9e/0x1d0 [ 169.180646][ T7659] alloc_file+0x5c/0x600 [ 169.185177][ T7659] alloc_file_pseudo+0x17e/0x200 [ 169.190233][ T7659] ? alloc_empty_backing_file+0xe0/0xe0 [ 169.195899][ T7659] ? _raw_spin_unlock+0x28/0x40 [ 169.201173][ T7659] ? alloc_fd+0x58f/0x630 [ 169.205691][ T7659] sock_alloc_file+0xb7/0x280 [ 169.210805][ T7659] __sys_socket+0x13d/0x1a0 [ 169.215564][ T7659] __x64_sys_socket+0x7a/0x90 [ 169.220337][ T7659] do_syscall_64+0x55/0xb0 [ 169.224836][ T7659] ? clear_bhb_loop+0x40/0x90 [ 169.229680][ T7659] ? clear_bhb_loop+0x40/0x90 [ 169.234408][ T7659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.240351][ T7659] RIP: 0033:0x7f5b9f78e929 [ 169.244823][ T7659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.264561][ T7659] RSP: 002b:00007f5ba054d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 169.273022][ T7659] RAX: ffffffffffffffda RBX: 00007f5b9f9b5fa0 RCX: 00007f5b9f78e929 [ 169.281031][ T7659] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000022 [ 169.289472][ T7659] RBP: 00007f5ba054d090 R08: 0000000000000000 R09: 0000000000000000 [ 169.297564][ T7659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.305670][ T7659] R13: 0000000000000000 R14: 00007f5b9f9b5fa0 R15: 00007ffc14a99c48 [ 169.313911][ T7659] [ 169.401866][ T7661] netlink: 'syz.2.729': attribute type 21 has an invalid length. [ 169.536877][ T7668] FAULT_INJECTION: forcing a failure. [ 169.536877][ T7668] name failslab, interval 1, probability 0, space 0, times 0 [ 169.554957][ T7668] CPU: 0 PID: 7668 Comm: syz.2.733 Not tainted 6.6.95-syzkaller #0 [ 169.562943][ T7668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.573062][ T7668] Call Trace: [ 169.576398][ T7668] [ 169.579379][ T7668] dump_stack_lvl+0x16c/0x230 [ 169.584152][ T7668] ? show_regs_print_info+0x20/0x20 [ 169.589426][ T7668] ? load_image+0x3b0/0x3b0 [ 169.594010][ T7668] ? __might_sleep+0xe0/0xe0 [ 169.598678][ T7668] ? __lock_acquire+0x7c80/0x7c80 [ 169.603793][ T7668] ? __lock_acquire+0x1260/0x7c80 [ 169.608905][ T7668] should_fail_ex+0x39d/0x4d0 [ 169.613765][ T7668] should_failslab+0x9/0x20 [ 169.618329][ T7668] slab_pre_alloc_hook+0x59/0x310 [ 169.623433][ T7668] kmem_cache_alloc_node+0x60/0x330 [ 169.628701][ T7668] ? __alloc_skb+0x108/0x2c0 [ 169.633372][ T7668] __alloc_skb+0x108/0x2c0 [ 169.637934][ T7668] alloc_skb_with_frags+0xca/0x7c0 [ 169.643217][ T7668] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 169.649961][ T7668] ? tracing_gen_ctx_irq_test+0xbc/0x140 [ 169.655754][ T7668] ? perf_swevent_event+0x114/0x5c0 [ 169.661141][ T7668] sock_alloc_send_pskb+0x857/0x990 [ 169.666449][ T7668] ? sock_kzfree_s+0x50/0x50 [ 169.671211][ T7668] ? dev_get_by_index+0x22/0x2d0 [ 169.676215][ T7668] ? dev_get_by_index+0x22/0x2d0 [ 169.681235][ T7668] packet_sendmsg+0x314d/0x4c00 [ 169.686382][ T7668] ? __might_sleep+0xe0/0xe0 [ 169.691042][ T7668] ? perf_trace_lock_acquire+0x32a/0x3e0 [ 169.696767][ T7668] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 169.703444][ T7668] ? aa_sk_perm+0x7fc/0x930 [ 169.708026][ T7668] ? packet_getsockopt+0xa20/0xa20 [ 169.713238][ T7668] ? aa_sock_msg_perm+0x94/0x150 [ 169.718263][ T7668] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 169.723631][ T7668] ? security_socket_sendmsg+0x80/0xa0 [ 169.729164][ T7668] ? packet_getsockopt+0xa20/0xa20 [ 169.734354][ T7668] ____sys_sendmsg+0x5bf/0x950 [ 169.739211][ T7668] ? __asan_memset+0x22/0x40 [ 169.743882][ T7668] ? __sys_sendmsg_sock+0x30/0x30 [ 169.748979][ T7668] ? __import_iovec+0x3fa/0x860 [ 169.753922][ T7668] ? import_iovec+0x73/0xa0 [ 169.758502][ T7668] ___sys_sendmsg+0x220/0x290 [ 169.763340][ T7668] ? __sys_sendmsg+0x270/0x270 [ 169.768216][ T7668] ? __lock_acquire+0x7c80/0x7c80 [ 169.773366][ T7668] __se_sys_sendmsg+0x1a5/0x270 [ 169.778302][ T7668] ? __x64_sys_sendmsg+0x80/0x80 [ 169.783347][ T7668] ? lockdep_hardirqs_on+0x98/0x150 [ 169.788620][ T7668] do_syscall_64+0x55/0xb0 [ 169.793113][ T7668] ? clear_bhb_loop+0x40/0x90 [ 169.797856][ T7668] ? clear_bhb_loop+0x40/0x90 [ 169.802603][ T7668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.808570][ T7668] RIP: 0033:0x7f05df58e929 [ 169.813054][ T7668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.832703][ T7668] RSP: 002b:00007f05e0394038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.841150][ T7668] RAX: ffffffffffffffda RBX: 00007f05df7b5fa0 RCX: 00007f05df58e929 [ 169.849181][ T7668] RDX: 0000000000004011 RSI: 00002000000001c0 RDI: 0000000000000004 [ 169.857176][ T7668] RBP: 00007f05e0394090 R08: 0000000000000000 R09: 0000000000000000 [ 169.865166][ T7668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.873258][ T7668] R13: 0000000000000000 R14: 00007f05df7b5fa0 R15: 00007ffe719a29e8 [ 169.881279][ T7668] [ 170.139206][ T7683] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.738'. [ 170.254249][ T7684] syzkaller0: entered promiscuous mode [ 170.287865][ T7684] syzkaller0: entered allmulticast mode [ 170.748507][ T7695] netlink: 'syz.1.742': attribute type 1 has an invalid length. [ 170.782902][ T7695] netlink: 'syz.1.742': attribute type 4 has an invalid length. [ 170.823422][ T7695] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.742'. [ 171.254610][ T7711] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.750'. [ 172.666503][ T7707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.929204][ T7722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.945634][ T7722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.967103][ T7722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.974588][ T7722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.286139][ T7735] netlink: 'syz.3.759': attribute type 1 has an invalid length. [ 173.328375][ T7735] netlink: 'syz.3.759': attribute type 4 has an invalid length. [ 173.339172][ T7735] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.759'. [ 173.371788][ T7738] netlink: 'syz.2.760': attribute type 10 has an invalid length. [ 173.386186][ T7738] netlink: 2 bytes leftover after parsing attributes in process `syz.2.760'. [ 173.426627][ T7738] team0: entered promiscuous mode [ 173.431779][ T7738] C: entered promiscuous mode [ 173.440395][ T7738] team_slave_1: entered promiscuous mode [ 173.452439][ T7738] bond0: (slave team0): Releasing backup interface [ 173.553441][ T7742] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.761'. [ 174.287352][ T7771] netlink: 'syz.2.772': attribute type 1 has an invalid length. [ 174.297756][ T7771] netlink: 'syz.2.772': attribute type 4 has an invalid length. [ 174.308377][ T7771] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.772'. [ 174.492143][ T7775] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.774'. [ 174.586602][ T7776] netlink: 'syz.0.773': attribute type 10 has an invalid length. [ 174.607031][ T7776] netlink: 2 bytes leftover after parsing attributes in process `syz.0.773'. [ 174.624962][ T7776] team0: entered promiscuous mode [ 174.645394][ T7776] team_slave_0: entered promiscuous mode [ 174.667592][ T7776] team_slave_1: entered promiscuous mode [ 174.800948][ T7782] FAULT_INJECTION: forcing a failure. [ 174.800948][ T7782] name failslab, interval 1, probability 0, space 0, times 0 [ 174.845219][ T7782] CPU: 1 PID: 7782 Comm: syz.1.776 Not tainted 6.6.95-syzkaller #0 [ 174.853193][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.863301][ T7782] Call Trace: [ 174.866609][ T7782] [ 174.869585][ T7782] dump_stack_lvl+0x16c/0x230 [ 174.874403][ T7782] ? stack_trace_snprint+0xf0/0xf0 [ 174.879565][ T7782] ? show_regs_print_info+0x20/0x20 [ 174.884827][ T7782] ? load_image+0x3b0/0x3b0 [ 174.889394][ T7782] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 174.895196][ T7782] should_fail_ex+0x39d/0x4d0 [ 174.899954][ T7782] should_failslab+0x9/0x20 [ 174.904517][ T7782] slab_pre_alloc_hook+0x59/0x310 [ 174.909611][ T7782] ? __hw_addr_add_ex+0x1f4/0x760 [ 174.914701][ T7782] __kmem_cache_alloc_node+0x53/0x260 [ 174.920138][ T7782] ? __hw_addr_add_ex+0x1f4/0x760 [ 174.925216][ T7782] kmalloc_trace+0x2a/0xe0 [ 174.929688][ T7782] __hw_addr_add_ex+0x1f4/0x760 [ 174.934618][ T7782] dev_addr_init+0x150/0x230 [ 174.939271][ T7782] ? dev_addr_flush+0x210/0x210 [ 174.944198][ T7782] alloc_netdev_mqs+0x2e4/0x1040 [ 174.949193][ T7782] ? udp_tunnel_nic_device_sync_work+0x890/0x890 [ 174.955591][ T7782] __ip_tunnel_create+0x2fb/0x4c0 [ 174.960667][ T7782] ? ip_tunnel_init_net+0x770/0x770 [ 174.965915][ T7782] ? security_capable+0x89/0xb0 [ 174.970829][ T7782] ip_tunnel_ctl+0x98c/0x1970 [ 174.975589][ T7782] vti_tunnel_ctl+0x1f9/0x390 [ 174.980322][ T7782] ip_tunnel_siocdevprivate+0x11d/0x1c0 [ 174.986015][ T7782] ? ip_tunnel_update+0xb10/0xb10 [ 174.991085][ T7782] ? trace_contention_end+0x39/0xe0 [ 174.996351][ T7782] ? full_name_hash+0x92/0xe0 [ 175.001100][ T7782] dev_ifsioc+0xae6/0xe20 [ 175.005503][ T7782] ? dev_ioctl+0x1170/0x1170 [ 175.010155][ T7782] ? dev_load+0x21/0x1f0 [ 175.014452][ T7782] ? dev_load+0x21/0x1f0 [ 175.018754][ T7782] dev_ioctl+0x87a/0x1170 [ 175.023150][ T7782] sock_ioctl+0x726/0x7a0 [ 175.027626][ T7782] ? sock_poll+0x3d0/0x3d0 [ 175.032120][ T7782] ? bpf_lsm_file_ioctl+0x9/0x10 [ 175.037110][ T7782] ? security_file_ioctl+0x80/0xa0 [ 175.042274][ T7782] ? sock_poll+0x3d0/0x3d0 [ 175.046732][ T7782] __se_sys_ioctl+0xfd/0x170 [ 175.051387][ T7782] do_syscall_64+0x55/0xb0 [ 175.055851][ T7782] ? clear_bhb_loop+0x40/0x90 [ 175.060566][ T7782] ? clear_bhb_loop+0x40/0x90 [ 175.065288][ T7782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.071227][ T7782] RIP: 0033:0x7f5b9f78e929 [ 175.075669][ T7782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.095320][ T7782] RSP: 002b:00007f5ba054d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.103765][ T7782] RAX: ffffffffffffffda RBX: 00007f5b9f9b5fa0 RCX: 00007f5b9f78e929 [ 175.111771][ T7782] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000005 [ 175.119888][ T7782] RBP: 00007f5ba054d090 R08: 0000000000000000 R09: 0000000000000000 [ 175.127888][ T7782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.135889][ T7782] R13: 0000000000000000 R14: 00007f5b9f9b5fa0 R15: 00007ffc14a99c48 [ 175.143919][ T7782] [ 175.412239][ T7798] FAULT_INJECTION: forcing a failure. [ 175.412239][ T7798] name failslab, interval 1, probability 0, space 0, times 0 [ 175.425413][ T7798] CPU: 1 PID: 7798 Comm: syz.1.783 Not tainted 6.6.95-syzkaller #0 [ 175.433343][ T7798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.443439][ T7798] Call Trace: [ 175.446746][ T7798] [ 175.449695][ T7798] dump_stack_lvl+0x16c/0x230 [ 175.454417][ T7798] ? show_regs_print_info+0x20/0x20 [ 175.459655][ T7798] ? load_image+0x3b0/0x3b0 [ 175.464180][ T7798] ? verify_lock_unused+0x140/0x140 [ 175.469404][ T7798] should_fail_ex+0x39d/0x4d0 [ 175.474112][ T7798] should_failslab+0x9/0x20 [ 175.478646][ T7798] slab_pre_alloc_hook+0x59/0x310 [ 175.483715][ T7798] kmem_cache_alloc+0x5a/0x2e0 [ 175.488506][ T7798] ? skb_clone+0x1eb/0x370 [ 175.492942][ T7798] skb_clone+0x1eb/0x370 [ 175.497214][ T7798] __netlink_deliver_tap+0x41c/0x830 [ 175.502570][ T7798] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.507794][ T7798] netlink_deliver_tap+0x19c/0x1b0 [ 175.512947][ T7798] netlink_unicast+0x72b/0x8c0 [ 175.517765][ T7798] netlink_sendmsg+0x8c1/0xbe0 [ 175.522585][ T7798] ? netlink_getsockopt+0x580/0x580 [ 175.527822][ T7798] ? aa_sock_msg_perm+0x94/0x150 [ 175.532789][ T7798] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 175.538114][ T7798] ? security_socket_sendmsg+0x80/0xa0 [ 175.543594][ T7798] ? netlink_getsockopt+0x580/0x580 [ 175.548821][ T7798] ____sys_sendmsg+0x5bf/0x950 [ 175.553786][ T7798] ? __asan_memset+0x22/0x40 [ 175.558431][ T7798] ? __sys_sendmsg_sock+0x30/0x30 [ 175.563497][ T7798] ? __import_iovec+0x3fa/0x860 [ 175.568375][ T7798] ? import_iovec+0x73/0xa0 [ 175.572902][ T7798] ___sys_sendmsg+0x220/0x290 [ 175.577612][ T7798] ? __sys_sendmsg+0x270/0x270 [ 175.582425][ T7798] ? __lock_acquire+0x7c80/0x7c80 [ 175.587760][ T7798] __se_sys_sendmsg+0x1a5/0x270 [ 175.592630][ T7798] ? __x64_sys_sendmsg+0x80/0x80 [ 175.597632][ T7798] ? lockdep_hardirqs_on+0x98/0x150 [ 175.602886][ T7798] do_syscall_64+0x55/0xb0 [ 175.607366][ T7798] ? clear_bhb_loop+0x40/0x90 [ 175.612059][ T7798] ? clear_bhb_loop+0x40/0x90 [ 175.616851][ T7798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.622788][ T7798] RIP: 0033:0x7f5b9f78e929 [ 175.627259][ T7798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.646974][ T7798] RSP: 002b:00007f5ba054d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.655422][ T7798] RAX: ffffffffffffffda RBX: 00007f5b9f9b5fa0 RCX: 00007f5b9f78e929 [ 175.663428][ T7798] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 175.671416][ T7798] RBP: 00007f5ba054d090 R08: 0000000000000000 R09: 0000000000000000 [ 175.679404][ T7798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.687494][ T7798] R13: 0000000000000000 R14: 00007f5b9f9b5fa0 R15: 00007ffc14a99c48 [ 175.695535][ T7798] [ 177.017625][ T7784] netlink: 'syz.3.777': attribute type 21 has an invalid length. [ 177.026763][ T7789] netlink: 'syz.0.779': attribute type 10 has an invalid length. [ 177.049373][ T7789] batman_adv: batadv0: Adding interface: netdevsim0 [ 177.080576][ T7789] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.123299][ T7789] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 177.143929][ T7798] netlink: 'syz.1.783': attribute type 10 has an invalid length. [ 177.284680][ T7804] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.785'. [ 177.317513][ T7805] FAULT_INJECTION: forcing a failure. [ 177.317513][ T7805] name failslab, interval 1, probability 0, space 0, times 0 [ 177.342705][ T7805] CPU: 0 PID: 7805 Comm: syz.3.787 Not tainted 6.6.95-syzkaller #0 [ 177.350693][ T7805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.360895][ T7805] Call Trace: [ 177.364213][ T7805] [ 177.367199][ T7805] dump_stack_lvl+0x16c/0x230 [ 177.371959][ T7805] ? show_regs_print_info+0x20/0x20 [ 177.377227][ T7805] ? load_image+0x3b0/0x3b0 [ 177.381791][ T7805] ? __lock_acquire+0x7c80/0x7c80 [ 177.386871][ T7805] ? __mutex_trylock_common+0x153/0x250 [ 177.392495][ T7805] should_fail_ex+0x39d/0x4d0 [ 177.397257][ T7805] should_failslab+0x9/0x20 [ 177.401830][ T7805] slab_pre_alloc_hook+0x59/0x310 [ 177.406939][ T7805] ? __mutex_lock+0x304/0xcc0 [ 177.411692][ T7805] ? tracepoint_add_func+0x307/0x9a0 [ 177.417044][ T7805] ? tracepoint_add_func+0x307/0x9a0 [ 177.422397][ T7805] __kmem_cache_alloc_node+0x53/0x260 [ 177.427839][ T7805] ? tracepoint_add_func+0x307/0x9a0 [ 177.433193][ T7805] __kmalloc+0xa4/0x240 [ 177.437414][ T7805] ? trace_event_raw_event_oom_score_adj_update+0x2d0/0x2d0 [ 177.444786][ T7805] tracepoint_add_func+0x307/0x9a0 [ 177.450000][ T7805] ? trace_event_raw_event_oom_score_adj_update+0x2d0/0x2d0 [ 177.457370][ T7805] tracepoint_probe_register+0x5e/0x90 [ 177.462903][ T7805] ? trace_event_raw_event_oom_score_adj_update+0x2d0/0x2d0 [ 177.470267][ T7805] perf_trace_event_init+0x4d2/0x9b0 [ 177.475614][ T7805] perf_trace_init+0x238/0x2d0 [ 177.480509][ T7805] perf_tp_event_init+0x8d/0x110 [ 177.485509][ T7805] perf_try_init_event+0x12b/0x3c0 [ 177.490692][ T7805] perf_event_alloc+0xfa4/0x21b0 [ 177.495785][ T7805] ? perf_event_alloc+0xc06/0x21b0 [ 177.500986][ T7805] ? find_lively_task_by_vpid+0x19/0x290 [ 177.506696][ T7805] __se_sys_perf_event_open+0x70e/0x1c20 [ 177.512406][ T7805] ? mutex_unlock+0x10/0x10 [ 177.517063][ T7805] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 177.522754][ T7805] ? lock_chain_count+0x20/0x20 [ 177.527652][ T7805] ? lockdep_hardirqs_on+0x98/0x150 [ 177.532899][ T7805] ? __x64_sys_perf_event_open+0x20/0xc0 [ 177.538591][ T7805] do_syscall_64+0x55/0xb0 [ 177.543227][ T7805] ? clear_bhb_loop+0x40/0x90 [ 177.547934][ T7805] ? clear_bhb_loop+0x40/0x90 [ 177.552653][ T7805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.558757][ T7805] RIP: 0033:0x7f974d58e929 [ 177.563227][ T7805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.582863][ T7805] RSP: 002b:00007f974e397038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 177.591311][ T7805] RAX: ffffffffffffffda RBX: 00007f974d7b5fa0 RCX: 00007f974d58e929 [ 177.599316][ T7805] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000500 [ 177.607320][ T7805] RBP: 00007f974e397090 R08: 0000000000000009 R09: 0000000000000000 [ 177.615318][ T7805] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 177.623319][ T7805] R13: 0000000000000000 R14: 00007f974d7b5fa0 R15: 00007ffe6964d418 [ 177.631349][ T7805] [ 177.701853][ T7809] netlink: 'syz.1.788': attribute type 10 has an invalid length. [ 177.725381][ T7809] netlink: 2 bytes leftover after parsing attributes in process `syz.1.788'. [ 177.755291][ T7809] team0: entered promiscuous mode [ 177.760430][ T7809] C: entered promiscuous mode [ 177.803711][ T7809] team_slave_1: entered promiscuous mode [ 178.018448][ T7827] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.795'. [ 178.042444][ T7822] netlink: 176 bytes leftover after parsing attributes in process `syz.2.793'. [ 178.063463][ T5773] Bluetooth: hci3: ISO packet for unknown connection handle 24 [ 178.150136][ T7830] netlink: 'syz.0.796': attribute type 4 has an invalid length. [ 178.164772][ T7834] FAULT_INJECTION: forcing a failure. [ 178.164772][ T7834] name failslab, interval 1, probability 0, space 0, times 0 [ 178.215731][ T7834] CPU: 1 PID: 7834 Comm: syz.3.797 Not tainted 6.6.95-syzkaller #0 [ 178.223718][ T7834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.233837][ T7834] Call Trace: [ 178.237204][ T7834] [ 178.240220][ T7834] dump_stack_lvl+0x16c/0x230 [ 178.245001][ T7834] ? show_regs_print_info+0x20/0x20 [ 178.250279][ T7834] ? load_image+0x3b0/0x3b0 [ 178.254867][ T7834] ? __might_sleep+0xe0/0xe0 [ 178.259531][ T7834] ? __lock_acquire+0x7c80/0x7c80 [ 178.264641][ T7834] should_fail_ex+0x39d/0x4d0 [ 178.269406][ T7834] should_failslab+0x9/0x20 [ 178.273984][ T7834] slab_pre_alloc_hook+0x59/0x310 [ 178.279068][ T7834] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 178.284857][ T7834] ? rtnl_newlink+0xeb/0x2020 [ 178.289602][ T7834] __kmem_cache_alloc_node+0x53/0x260 [ 178.295054][ T7834] ? rtnl_newlink+0xeb/0x2020 [ 178.299808][ T7834] kmalloc_trace+0x2a/0xe0 [ 178.304291][ T7834] rtnl_newlink+0xeb/0x2020 [ 178.308878][ T7834] ? __mutex_lock+0x953/0xcc0 [ 178.313653][ T7834] ? __mutex_lock+0x953/0xcc0 [ 178.318416][ T7834] ? __lock_acquire+0x7c80/0x7c80 [ 178.323502][ T7834] ? do_raw_spin_lock+0x121/0x2c0 [ 178.328600][ T7834] ? rtnl_setlink+0x4b0/0x4b0 [ 178.333353][ T7834] ? __rwlock_init+0x150/0x150 [ 178.338220][ T7834] ? do_raw_spin_unlock+0x121/0x230 [ 178.343508][ T7834] ? __mutex_lock+0x95d/0xcc0 [ 178.348270][ T7834] ? __mutex_lock+0x4e8/0xcc0 [ 178.353046][ T7834] ? rtnetlink_rcv_msg+0x76f/0xf10 [ 178.356931][ T7837] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.798'. [ 178.358210][ T7834] ? mutex_lock_nested+0x20/0x20 [ 178.358274][ T7834] ? rtnl_setlink+0x4b0/0x4b0 [ 178.377258][ T7834] rtnetlink_rcv_msg+0x7c7/0xf10 [ 178.382268][ T7834] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 178.387453][ T7834] ? rtnetlink_bind+0x80/0x80 [ 178.392191][ T7834] ? perf_tp_event+0x12d7/0x13a0 [ 178.397230][ T7834] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 178.403106][ T7834] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 178.409168][ T7834] ? __dev_queue_xmit+0x245/0x35a0 [ 178.414424][ T7834] ? __dev_queue_xmit+0x245/0x35a0 [ 178.419598][ T7834] ? __dev_queue_xmit+0x1449/0x35a0 [ 178.424872][ T7834] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 178.430664][ T7834] ? perf_trace_lock+0x2ed/0x380 [ 178.435665][ T7834] ? __copy_skb_header+0xa7/0x550 [ 178.440750][ T7834] netlink_rcv_skb+0x216/0x480 [ 178.445565][ T7834] ? rtnetlink_bind+0x80/0x80 [ 178.450290][ T7834] ? netlink_ack+0x1110/0x1110 [ 178.455154][ T7834] ? __lock_acquire+0x7c80/0x7c80 [ 178.460331][ T7834] ? netlink_deliver_tap+0x2e/0x1b0 [ 178.465591][ T7834] netlink_unicast+0x750/0x8c0 [ 178.470422][ T7834] netlink_sendmsg+0x8c1/0xbe0 [ 178.475250][ T7834] ? netlink_getsockopt+0x580/0x580 [ 178.480581][ T7834] ? aa_sock_msg_perm+0x94/0x150 [ 178.485597][ T7834] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 178.490953][ T7834] ? security_socket_sendmsg+0x80/0xa0 [ 178.496476][ T7834] ? netlink_getsockopt+0x580/0x580 [ 178.501730][ T7834] ____sys_sendmsg+0x5bf/0x950 [ 178.506553][ T7834] ? __asan_memset+0x22/0x40 [ 178.511199][ T7834] ? __sys_sendmsg_sock+0x30/0x30 [ 178.516267][ T7834] ? __import_iovec+0x5f2/0x860 [ 178.521195][ T7834] ? import_iovec+0x73/0xa0 [ 178.525849][ T7834] ___sys_sendmsg+0x220/0x290 [ 178.530694][ T7834] ? __sys_sendmsg+0x270/0x270 [ 178.535717][ T7834] ? __lock_acquire+0x7c80/0x7c80 [ 178.540813][ T7834] __se_sys_sendmsg+0x1a5/0x270 [ 178.545723][ T7834] ? __x64_sys_sendmsg+0x80/0x80 [ 178.550734][ T7834] ? lockdep_hardirqs_on+0x98/0x150 [ 178.556032][ T7834] do_syscall_64+0x55/0xb0 [ 178.560592][ T7834] ? clear_bhb_loop+0x40/0x90 [ 178.565310][ T7834] ? clear_bhb_loop+0x40/0x90 [ 178.570039][ T7834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.575964][ T7834] RIP: 0033:0x7f974d58e929 [ 178.580406][ T7834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.600164][ T7834] RSP: 002b:00007f974e397038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.608638][ T7834] RAX: ffffffffffffffda RBX: 00007f974d7b5fa0 RCX: 00007f974d58e929 [ 178.616639][ T7834] RDX: 0000000020004800 RSI: 0000200000000000 RDI: 0000000000000005 [ 178.624635][ T7834] RBP: 00007f974e397090 R08: 0000000000000000 R09: 0000000000000000 [ 178.632644][ T7834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.640649][ T7834] R13: 0000000000000000 R14: 00007f974d7b5fa0 R15: 00007ffe6964d418 [ 178.648675][ T7834] [ 179.088159][ T7859] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.813'. [ 179.154816][ T7861] netlink: 'syz.3.806': attribute type 10 has an invalid length. [ 179.177004][ T7861] netlink: 2 bytes leftover after parsing attributes in process `syz.3.806'. [ 179.235508][ T7861] team0: entered promiscuous mode [ 179.240647][ T7861] C: entered promiscuous mode [ 179.285510][ T7861] team_slave_1: entered promiscuous mode [ 179.516752][ T7876] FAULT_INJECTION: forcing a failure. [ 179.516752][ T7876] name failslab, interval 1, probability 0, space 0, times 0 [ 179.530492][ T7876] CPU: 0 PID: 7876 Comm: syz.3.812 Not tainted 6.6.95-syzkaller #0 [ 179.538444][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.548548][ T7876] Call Trace: [ 179.551871][ T7876] [ 179.554835][ T7876] dump_stack_lvl+0x16c/0x230 [ 179.559584][ T7876] ? show_regs_print_info+0x20/0x20 [ 179.564844][ T7876] ? load_image+0x3b0/0x3b0 [ 179.569416][ T7876] ? __might_sleep+0xe0/0xe0 [ 179.574069][ T7876] ? __lock_acquire+0x7c80/0x7c80 [ 179.579149][ T7876] should_fail_ex+0x39d/0x4d0 [ 179.584072][ T7876] should_failslab+0x9/0x20 [ 179.588622][ T7876] slab_pre_alloc_hook+0x59/0x310 [ 179.593676][ T7876] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 179.599417][ T7876] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 179.605174][ T7876] __kmem_cache_alloc_node+0x53/0x260 [ 179.610570][ T7876] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 179.616304][ T7876] __kmalloc+0xa4/0x240 [ 179.620476][ T7876] tomoyo_realpath_from_path+0xe3/0x5d0 [ 179.626148][ T7876] tomoyo_path_number_perm+0x1ea/0x590 [ 179.631622][ T7876] ? tomoyo_path_number_perm+0x1ba/0x590 [ 179.637266][ T7876] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 179.642742][ T7876] ? ksys_write+0x1c1/0x250 [ 179.647288][ T7876] ? __fget_files+0x28/0x4d0 [ 179.651910][ T7876] security_file_ioctl+0x70/0xa0 [ 179.656865][ T7876] __se_sys_ioctl+0x48/0x170 [ 179.661478][ T7876] do_syscall_64+0x55/0xb0 [ 179.665921][ T7876] ? clear_bhb_loop+0x40/0x90 [ 179.670611][ T7876] ? clear_bhb_loop+0x40/0x90 [ 179.675307][ T7876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.681309][ T7876] RIP: 0033:0x7f974d58e929 [ 179.685740][ T7876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.705392][ T7876] RSP: 002b:00007f974e397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.713832][ T7876] RAX: ffffffffffffffda RBX: 00007f974d7b5fa0 RCX: 00007f974d58e929 [ 179.721963][ T7876] RDX: 0000000000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 179.729948][ T7876] RBP: 00007f974e397090 R08: 0000000000000000 R09: 0000000000000000 [ 179.737949][ T7876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.746118][ T7876] R13: 0000000000000000 R14: 00007f974d7b5fa0 R15: 00007ffe6964d418 [ 179.754244][ T7876] [ 179.770580][ T7876] ERROR: Out of memory at tomoyo_realpath_from_path. [ 179.941253][ T7881] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.815'. [ 180.218491][ T7896] FAULT_INJECTION: forcing a failure. [ 180.218491][ T7896] name failslab, interval 1, probability 0, space 0, times 0 [ 180.233447][ T7896] CPU: 0 PID: 7896 Comm: syz.2.821 Not tainted 6.6.95-syzkaller #0 [ 180.241405][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.251505][ T7896] Call Trace: [ 180.254804][ T7896] [ 180.257757][ T7896] dump_stack_lvl+0x16c/0x230 [ 180.262480][ T7896] ? show_regs_print_info+0x20/0x20 [ 180.267702][ T7896] ? load_image+0x3b0/0x3b0 [ 180.272220][ T7896] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 180.278225][ T7896] ? __asan_memset+0x22/0x40 [ 180.282845][ T7896] should_fail_ex+0x39d/0x4d0 [ 180.287562][ T7896] should_failslab+0x9/0x20 [ 180.292079][ T7896] slab_pre_alloc_hook+0x59/0x310 [ 180.297119][ T7896] ? __debug_object_init+0xe8/0x430 [ 180.302349][ T7896] kmem_cache_alloc+0x5a/0x2e0 [ 180.307126][ T7896] ? slab_build_skb+0x2b/0x3f0 [ 180.311919][ T7896] slab_build_skb+0x2b/0x3f0 [ 180.316529][ T7896] bpf_prog_test_run_skb+0x3ba/0x11c0 [ 180.321925][ T7896] ? __fget_files+0x28/0x4d0 [ 180.326558][ T7896] ? cpu_online+0x60/0x60 [ 180.330908][ T7896] bpf_prog_test_run+0x321/0x390 [ 180.335868][ T7896] __sys_bpf+0x440/0x800 [ 180.340135][ T7896] ? bpf_link_show_fdinfo+0x350/0x350 [ 180.345547][ T7896] ? lock_chain_count+0x20/0x20 [ 180.350427][ T7896] __x64_sys_bpf+0x7c/0x90 [ 180.354857][ T7896] do_syscall_64+0x55/0xb0 [ 180.359300][ T7896] ? clear_bhb_loop+0x40/0x90 [ 180.364023][ T7896] ? clear_bhb_loop+0x40/0x90 [ 180.368746][ T7896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.374692][ T7896] RIP: 0033:0x7f05df58e929 [ 180.379130][ T7896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.398774][ T7896] RSP: 002b:00007f05e0394038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.407220][ T7896] RAX: ffffffffffffffda RBX: 00007f05df7b5fa0 RCX: 00007f05df58e929 [ 180.415208][ T7896] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 180.423195][ T7896] RBP: 00007f05e0394090 R08: 0000000000000000 R09: 0000000000000000 [ 180.431179][ T7896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.439185][ T7896] R13: 0000000000000000 R14: 00007f05df7b5fa0 R15: 00007ffe719a29e8 [ 180.447192][ T7896] [ 180.506440][ T7898] netlink: 'syz.1.823': attribute type 10 has an invalid length. [ 180.526144][ T7898] team0: left promiscuous mode [ 180.531009][ T7898] C: left promiscuous mode [ 180.545483][ T7898] team_slave_1: left promiscuous mode [ 180.949314][ T7921] netlink: 'syz.3.831': attribute type 10 has an invalid length. [ 180.981234][ T7921] team0: left promiscuous mode [ 180.995872][ T7924] FAULT_INJECTION: forcing a failure. [ 180.995872][ T7924] name failslab, interval 1, probability 0, space 0, times 0 [ 181.009812][ T7921] C: left promiscuous mode [ 181.014497][ T7921] team_slave_1: left promiscuous mode [ 181.022204][ T7924] CPU: 0 PID: 7924 Comm: syz.2.833 Not tainted 6.6.95-syzkaller #0 [ 181.030169][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.040285][ T7924] Call Trace: [ 181.043623][ T7924] [ 181.046605][ T7924] dump_stack_lvl+0x16c/0x230 [ 181.051374][ T7924] ? show_regs_print_info+0x20/0x20 [ 181.056653][ T7924] ? load_image+0x3b0/0x3b0 [ 181.061249][ T7924] ? __might_sleep+0xe0/0xe0 [ 181.065963][ T7924] ? __lock_acquire+0x7c80/0x7c80 [ 181.071078][ T7924] should_fail_ex+0x39d/0x4d0 [ 181.075847][ T7924] should_failslab+0x9/0x20 [ 181.080421][ T7924] slab_pre_alloc_hook+0x59/0x310 [ 181.084315][ T7921] batman_adv: batadv0: Adding interface: team0 [ 181.085493][ T7924] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 181.085527][ T7924] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 181.085552][ T7924] __kmem_cache_alloc_node+0x53/0x260 [ 181.085587][ T7924] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 181.114544][ T7924] __kmalloc+0xa4/0x240 [ 181.118768][ T7924] tomoyo_realpath_from_path+0xe3/0x5d0 [ 181.124411][ T7924] tomoyo_path_number_perm+0x1ea/0x590 [ 181.129950][ T7924] ? tomoyo_path_number_perm+0x1ba/0x590 [ 181.135656][ T7924] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 181.138300][ T7921] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.141154][ T7924] ? ksys_write+0x1c1/0x250 [ 181.170917][ T7924] ? __fget_files+0x28/0x4d0 [ 181.175615][ T7924] security_file_ioctl+0x70/0xa0 [ 181.180642][ T7924] __se_sys_ioctl+0x48/0x170 [ 181.181545][ T7921] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 181.185280][ T7924] do_syscall_64+0x55/0xb0 [ 181.185316][ T7924] ? clear_bhb_loop+0x40/0x90 [ 181.185338][ T7924] ? clear_bhb_loop+0x40/0x90 [ 181.208943][ T7924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.214931][ T7924] RIP: 0033:0x7f05df58e929 [ 181.219412][ T7924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.239088][ T7924] RSP: 002b:00007f05e0394038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.247576][ T7924] RAX: ffffffffffffffda RBX: 00007f05df7b5fa0 RCX: 00007f05df58e929 [ 181.255616][ T7924] RDX: 0000200000000cc0 RSI: 0000000000008970 RDI: 0000000000000005 [ 181.263660][ T7924] RBP: 00007f05e0394090 R08: 0000000000000000 R09: 0000000000000000 [ 181.271696][ T7924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.279728][ T7924] R13: 0000000000000000 R14: 00007f05df7b5fa0 R15: 00007ffe719a29e8 [ 181.287803][ T7924] [ 181.415852][ T7936] netlink: 'syz.3.837': attribute type 21 has an invalid length. [ 181.416768][ T7924] ERROR: Out of memory at tomoyo_realpath_from_path. [ 181.435483][ T7936] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.595252][ T7942] netlink: 'syz.0.838': attribute type 10 has an invalid length. [ 181.618218][ T7942] team0: left promiscuous mode [ 181.623742][ T7942] team_slave_0: left promiscuous mode [ 181.634201][ T7942] team_slave_1: left promiscuous mode [ 181.673025][ T7942] batman_adv: batadv0: Adding interface: team0 [ 181.701923][ T7942] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.772952][ T7942] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 181.826127][ T7946] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.841'. [ 181.873588][ T7951] netlink: 60 bytes leftover after parsing attributes in process `syz.1.843'. [ 182.640311][ T7985] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.855'. [ 182.719977][ T7990] delete_channel: no stack [ 182.730392][ T7990] delete_channel: no stack [ 183.276558][ T8003] netlink: 196 bytes leftover after parsing attributes in process `syz.1.862'. [ 183.541340][ T8011] netlink: 'syz.1.865': attribute type 39 has an invalid length. [ 183.920051][ T8018] netlink: 'syz.2.868': attribute type 21 has an invalid length. [ 183.929906][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'. [ 183.942996][ T8019] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.867'. [ 184.401589][ T8030] netlink: 60 bytes leftover after parsing attributes in process `syz.3.872'. [ 184.488648][ T8038] FAULT_INJECTION: forcing a failure. [ 184.488648][ T8038] name failslab, interval 1, probability 0, space 0, times 0 [ 184.554390][ T8038] CPU: 1 PID: 8038 Comm: syz.2.873 Not tainted 6.6.95-syzkaller #0 [ 184.562367][ T8038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.572468][ T8038] Call Trace: [ 184.575783][ T8038] [ 184.578752][ T8038] dump_stack_lvl+0x16c/0x230 [ 184.583495][ T8038] ? show_regs_print_info+0x20/0x20 [ 184.588759][ T8038] ? load_image+0x3b0/0x3b0 [ 184.593322][ T8038] ? __might_sleep+0xe0/0xe0 [ 184.598053][ T8038] ? __lock_acquire+0x7c80/0x7c80 [ 184.603127][ T8038] should_fail_ex+0x39d/0x4d0 [ 184.607868][ T8038] should_failslab+0x9/0x20 [ 184.612412][ T8038] slab_pre_alloc_hook+0x59/0x310 [ 184.617493][ T8038] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 184.623781][ T8038] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 184.630062][ T8038] __kmem_cache_alloc_node+0x53/0x260 [ 184.635458][ T8038] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 184.641722][ T8038] __kmalloc+0xa4/0x240 [ 184.645893][ T8038] ? __netlink_dump_start+0xf4/0x810 [ 184.651206][ T8038] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 184.657297][ T8038] genl_start+0x180/0x6b0 [ 184.661645][ T8038] ? netlink_lookup+0x30/0x200 [ 184.666439][ T8038] __netlink_dump_start+0x4a9/0x810 [ 184.671756][ T8038] genl_family_rcv_msg_dumpit+0x1e8/0x2c0 [ 184.677582][ T8038] ? genl_rcv_msg+0x790/0x790 [ 184.682286][ T8038] ? genl_get_cmd+0x680/0x910 [ 184.687004][ T8038] ? genl_family_rcv_msg_doit+0x2f0/0x2f0 [ 184.692739][ T8038] ? genl_start+0x6b0/0x6b0 [ 184.697280][ T8038] ? genl_dumpit+0x1a0/0x1a0 [ 184.701898][ T8038] genl_rcv_msg+0x5d7/0x790 [ 184.706422][ T8038] ? genl_bind+0x360/0x360 [ 184.710848][ T8038] ? ethnl_default_doit+0xb80/0xb80 [ 184.716079][ T8038] ? ethnl_default_start+0x560/0x560 [ 184.721384][ T8038] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 184.726790][ T8038] netlink_rcv_skb+0x216/0x480 [ 184.731588][ T8038] ? genl_bind+0x360/0x360 [ 184.736022][ T8038] ? netlink_ack+0x1110/0x1110 [ 184.740819][ T8038] ? __lock_acquire+0x7c80/0x7c80 [ 184.745868][ T8038] ? down_read+0x1ac/0x2e0 [ 184.750311][ T8038] genl_rcv+0x28/0x40 [ 184.754304][ T8038] netlink_unicast+0x750/0x8c0 [ 184.759099][ T8038] netlink_sendmsg+0x8c1/0xbe0 [ 184.763893][ T8038] ? netlink_getsockopt+0x580/0x580 [ 184.769120][ T8038] ? aa_sock_msg_perm+0x94/0x150 [ 184.774079][ T8038] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 184.779390][ T8038] ? security_socket_sendmsg+0x80/0xa0 [ 184.784873][ T8038] ? netlink_getsockopt+0x580/0x580 [ 184.790094][ T8038] ____sys_sendmsg+0x5bf/0x950 [ 184.794876][ T8038] ? __asan_memset+0x22/0x40 [ 184.799487][ T8038] ? __sys_sendmsg_sock+0x30/0x30 [ 184.804527][ T8038] ? __import_iovec+0x5f2/0x860 [ 184.809404][ T8038] ? import_iovec+0x73/0xa0 [ 184.813931][ T8038] ___sys_sendmsg+0x220/0x290 [ 184.818629][ T8038] ? __sys_sendmsg+0x270/0x270 [ 184.823425][ T8038] ? __lock_acquire+0x7c80/0x7c80 [ 184.828487][ T8038] __se_sys_sendmsg+0x1a5/0x270 [ 184.833352][ T8038] ? __x64_sys_sendmsg+0x80/0x80 [ 184.838315][ T8038] ? lockdep_hardirqs_on+0x98/0x150 [ 184.843575][ T8038] do_syscall_64+0x55/0xb0 [ 184.848013][ T8038] ? clear_bhb_loop+0x40/0x90 [ 184.852704][ T8038] ? clear_bhb_loop+0x40/0x90 [ 184.857397][ T8038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.863403][ T8038] RIP: 0033:0x7f05df58e929 [ 184.867841][ T8038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.887666][ T8038] RSP: 002b:00007f05e0394038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.896159][ T8038] RAX: ffffffffffffffda RBX: 00007f05df7b5fa0 RCX: 00007f05df58e929 [ 184.904159][ T8038] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 184.912234][ T8038] RBP: 00007f05e0394090 R08: 0000000000000000 R09: 0000000000000000 [ 184.920238][ T8038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.928222][ T8038] R13: 0000000000000000 R14: 00007f05df7b5fa0 R15: 00007ffe719a29e8 [ 184.936234][ T8038] [ 185.242856][ T8052] netlink: 'syz.0.878': attribute type 39 has an invalid length. [ 185.294851][ T8054] FAULT_INJECTION: forcing a failure. [ 185.294851][ T8054] name failslab, interval 1, probability 0, space 0, times 0 [ 185.345507][ T8054] CPU: 1 PID: 8054 Comm: syz.0.878 Not tainted 6.6.95-syzkaller #0 [ 185.353484][ T8054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.363671][ T8054] Call Trace: [ 185.366992][ T8054] [ 185.369961][ T8054] dump_stack_lvl+0x16c/0x230 [ 185.374699][ T8054] ? show_regs_print_info+0x20/0x20 [ 185.379953][ T8054] ? load_image+0x3b0/0x3b0 [ 185.384508][ T8054] ? __might_sleep+0xe0/0xe0 [ 185.389158][ T8054] ? __lock_acquire+0x7c80/0x7c80 [ 185.394237][ T8054] ? __might_sleep+0xe0/0xe0 [ 185.398889][ T8054] should_fail_ex+0x39d/0x4d0 [ 185.403628][ T8054] should_failslab+0x9/0x20 [ 185.408172][ T8054] slab_pre_alloc_hook+0x59/0x310 [ 185.413238][ T8054] ? copy_from_sockptr+0x60/0x60 [ 185.418320][ T8054] kmem_cache_alloc_lru+0x4d/0x2e0 [ 185.423482][ T8054] ? sock_alloc_inode+0x28/0xc0 [ 185.428389][ T8054] sock_alloc_inode+0x28/0xc0 [ 185.433121][ T8054] ? sockfs_init_fs_context+0xb0/0xb0 [ 185.438541][ T8054] new_inode_pseudo+0x63/0x1d0 [ 185.443361][ T8054] __sock_create+0x12d/0x940 [ 185.448027][ T8054] __sys_socketpair+0x236/0x550 [ 185.452943][ T8054] __x64_sys_socketpair+0x9b/0xb0 [ 185.458030][ T8054] do_syscall_64+0x55/0xb0 [ 185.462496][ T8054] ? clear_bhb_loop+0x40/0x90 [ 185.467213][ T8054] ? clear_bhb_loop+0x40/0x90 [ 185.471933][ T8054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.477886][ T8054] RIP: 0033:0x7f685798e929 [ 185.482347][ T8054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.502005][ T8054] RSP: 002b:00007f6858736038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 185.510475][ T8054] RAX: ffffffffffffffda RBX: 00007f6857bb6080 RCX: 00007f685798e929 [ 185.518480][ T8054] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 185.526481][ T8054] RBP: 00007f6858736090 R08: 0000000000000000 R09: 0000000000000000 [ 185.534480][ T8054] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000001 [ 185.542483][ T8054] R13: 0000000000000001 R14: 00007f6857bb6080 R15: 00007ffe17232878 [ 185.550490][ T8054] [ 185.558292][ T8054] socket: no more sockets [ 185.678291][ T8056] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.882'. [ 185.950523][ T8069] delete_channel: no stack [ 185.961595][ T8069] delete_channel: no stack [ 186.788577][ T8092] sctp: [Deprecated]: syz.0.895 (pid 8092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.788577][ T8092] Use struct sctp_sack_info instead [ 186.819889][ T8092] netlink: 'syz.0.895': attribute type 39 has an invalid length. [ 186.929066][ T8096] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.897'. [ 186.991290][ T8098] FAULT_INJECTION: forcing a failure. [ 186.991290][ T8098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.035423][ T8098] CPU: 1 PID: 8098 Comm: syz.1.898 Not tainted 6.6.95-syzkaller #0 [ 187.043404][ T8098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.053491][ T8098] Call Trace: [ 187.056801][ T8098] [ 187.059754][ T8098] dump_stack_lvl+0x16c/0x230 [ 187.064472][ T8098] ? show_regs_print_info+0x20/0x20 [ 187.069707][ T8098] ? load_image+0x3b0/0x3b0 [ 187.074260][ T8098] ? __might_fault+0xaa/0x120 [ 187.078965][ T8098] ? __lock_acquire+0x7c80/0x7c80 [ 187.084026][ T8098] should_fail_ex+0x39d/0x4d0 [ 187.088747][ T8098] _copy_from_iter+0x1d3/0x1290 [ 187.093629][ T8098] ? slab_post_alloc_hook+0x8a/0x4d0 [ 187.098961][ T8098] ? __virt_addr_valid+0x18c/0x540 [ 187.104112][ T8098] ? __lock_acquire+0x7c80/0x7c80 [ 187.109247][ T8098] ? rcu_is_watching+0x15/0xb0 [ 187.114133][ T8098] ? copyout_mc+0x70/0x70 [ 187.118491][ T8098] ? __virt_addr_valid+0x18c/0x540 [ 187.123635][ T8098] ? __virt_addr_valid+0x18c/0x540 [ 187.128858][ T8098] ? __virt_addr_valid+0x469/0x540 [ 187.134029][ T8098] ? __check_object_size+0x506/0xa30 [ 187.139458][ T8098] netlink_sendmsg+0x75c/0xbe0 [ 187.144284][ T8098] ? netlink_getsockopt+0x580/0x580 [ 187.149528][ T8098] ? aa_sock_msg_perm+0x94/0x150 [ 187.154506][ T8098] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 187.159850][ T8098] ? security_socket_sendmsg+0x80/0xa0 [ 187.165341][ T8098] ? netlink_getsockopt+0x580/0x580 [ 187.170591][ T8098] ____sys_sendmsg+0x5bf/0x950 [ 187.175572][ T8098] ? __asan_memset+0x22/0x40 [ 187.180293][ T8098] ? __sys_sendmsg_sock+0x30/0x30 [ 187.185341][ T8098] ? __import_iovec+0x5f2/0x860 [ 187.190227][ T8098] ? import_iovec+0x73/0xa0 [ 187.194757][ T8098] ___sys_sendmsg+0x220/0x290 [ 187.199463][ T8098] ? __sys_sendmsg+0x270/0x270 [ 187.204312][ T8098] ? __lock_acquire+0x7c80/0x7c80 [ 187.209400][ T8098] __se_sys_sendmsg+0x1a5/0x270 [ 187.214294][ T8098] ? __x64_sys_sendmsg+0x80/0x80 [ 187.219286][ T8098] ? lockdep_hardirqs_on+0x98/0x150 [ 187.224515][ T8098] do_syscall_64+0x55/0xb0 [ 187.228972][ T8098] ? clear_bhb_loop+0x40/0x90 [ 187.233682][ T8098] ? clear_bhb_loop+0x40/0x90 [ 187.238397][ T8098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.244329][ T8098] RIP: 0033:0x7f5b9f78e929 [ 187.248799][ T8098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.268447][ T8098] RSP: 002b:00007f5ba054d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.276892][ T8098] RAX: ffffffffffffffda RBX: 00007f5b9f9b5fa0 RCX: 00007f5b9f78e929 [ 187.284985][ T8098] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 187.293069][ T8098] RBP: 00007f5ba054d090 R08: 0000000000000000 R09: 0000000000000000 [ 187.301065][ T8098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.309062][ T8098] R13: 0000000000000000 R14: 00007f5b9f9b5fa0 R15: 00007ffc14a99c48 [ 187.317085][ T8098] [ 187.620749][ T8101] delete_channel: no stack [ 187.638407][ T8101] delete_channel: no stack [ 188.116864][ T8118] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 188.117720][ T8122] FAULT_INJECTION: forcing a failure. [ 188.117720][ T8122] name failslab, interval 1, probability 0, space 0, times 0 [ 188.169125][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.905'. [ 188.192285][ T8122] CPU: 1 PID: 8122 Comm: syz.2.908 Not tainted 6.6.95-syzkaller #0 [ 188.200365][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.210492][ T8122] Call Trace: [ 188.213830][ T8122] [ 188.216823][ T8122] dump_stack_lvl+0x16c/0x230 [ 188.221575][ T8122] ? show_regs_print_info+0x20/0x20 [ 188.226823][ T8122] ? load_image+0x3b0/0x3b0 [ 188.231367][ T8122] ? __might_sleep+0xe0/0xe0 [ 188.235998][ T8122] ? __lock_acquire+0x7c80/0x7c80 [ 188.241075][ T8122] should_fail_ex+0x39d/0x4d0 [ 188.245824][ T8122] should_failslab+0x9/0x20 [ 188.250360][ T8122] slab_pre_alloc_hook+0x59/0x310 [ 188.255422][ T8122] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 188.261181][ T8122] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 188.266941][ T8122] __kmem_cache_alloc_node+0x53/0x260 [ 188.272356][ T8122] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 188.278105][ T8122] __kmalloc+0xa4/0x240 [ 188.282303][ T8122] tomoyo_realpath_from_path+0xe3/0x5d0 [ 188.287911][ T8122] tomoyo_path_number_perm+0x1ea/0x590 [ 188.293401][ T8122] ? tomoyo_path_number_perm+0x1ba/0x590 [ 188.299064][ T8122] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 188.304554][ T8122] ? ksys_write+0x1c1/0x250 [ 188.309138][ T8122] ? __fget_files+0x28/0x4d0 [ 188.313783][ T8122] security_file_ioctl+0x70/0xa0 [ 188.318755][ T8122] __se_sys_ioctl+0x48/0x170 [ 188.323384][ T8122] do_syscall_64+0x55/0xb0 [ 188.327834][ T8122] ? clear_bhb_loop+0x40/0x90 [ 188.332540][ T8122] ? clear_bhb_loop+0x40/0x90 [ 188.337249][ T8122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.343176][ T8122] RIP: 0033:0x7f05df58e929 [ 188.347620][ T8122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.367256][ T8122] RSP: 002b:00007f05e0394038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.375703][ T8122] RAX: ffffffffffffffda RBX: 00007f05df7b5fa0 RCX: 00007f05df58e929 [ 188.383697][ T8122] RDX: 0000000000000000 RSI: 0000000000008903 RDI: 0000000000000004 [ 188.391690][ T8122] RBP: 00007f05e0394090 R08: 0000000000000000 R09: 0000000000000000 [ 188.399686][ T8122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.407678][ T8122] R13: 0000000000000000 R14: 00007f05df7b5fa0 R15: 00007ffe719a29e8 [ 188.415704][ T8122] [ 188.445327][ T8122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 188.467790][ T8118] netlink: 'syz.3.905': attribute type 10 has an invalid length. [ 188.497653][ T8118] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 188.601709][ T8128] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.909'. [ 189.713676][ T8159] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 189.736782][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'. [ 189.861125][ T8159] netlink: 'syz.1.923': attribute type 10 has an invalid length. [ 189.881836][ T8159] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 190.572813][ T8180] FAULT_INJECTION: forcing a failure. [ 190.572813][ T8180] name failslab, interval 1, probability 0, space 0, times 0 [ 190.620359][ T8180] CPU: 0 PID: 8180 Comm: syz.2.932 Not tainted 6.6.95-syzkaller #0 [ 190.628337][ T8180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.638437][ T8180] Call Trace: [ 190.641766][ T8180] [ 190.644744][ T8180] dump_stack_lvl+0x16c/0x230 [ 190.649574][ T8180] ? show_regs_print_info+0x20/0x20 [ 190.654831][ T8180] ? load_image+0x3b0/0x3b0 [ 190.659389][ T8180] ? __might_sleep+0xe0/0xe0 [ 190.664035][ T8180] ? __lock_acquire+0x7c80/0x7c80 [ 190.669116][ T8180] should_fail_ex+0x39d/0x4d0 [ 190.673858][ T8180] should_failslab+0x9/0x20 [ 190.678411][ T8180] slab_pre_alloc_hook+0x59/0x310 [ 190.683478][ T8180] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 190.689245][ T8180] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 190.695013][ T8180] __kmem_cache_alloc_node+0x53/0x260 [ 190.700443][ T8180] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 190.706220][ T8180] __kmalloc+0xa4/0x240 [ 190.710433][ T8180] tomoyo_realpath_from_path+0xe3/0x5d0 [ 190.716049][ T8180] tomoyo_path_number_perm+0x1ea/0x590 [ 190.721571][ T8180] ? tomoyo_path_number_perm+0x1ba/0x590 [ 190.727259][ T8180] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 190.732773][ T8180] ? ksys_write+0x1c1/0x250 [ 190.737417][ T8180] ? __fget_files+0x28/0x4d0 [ 190.742049][ T8180] security_file_ioctl+0x70/0xa0 [ 190.747016][ T8180] __se_sys_ioctl+0x48/0x170 [ 190.751640][ T8180] do_syscall_64+0x55/0xb0 [ 190.756192][ T8180] ? clear_bhb_loop+0x40/0x90 [ 190.760907][ T8180] ? clear_bhb_loop+0x40/0x90 [ 190.765605][ T8180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.771642][ T8180] RIP: 0033:0x7f05df58e929 [ 190.776116][ T8180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.795746][ T8180] RSP: 002b:00007f05e0394038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.804201][ T8180] RAX: ffffffffffffffda RBX: 00007f05df7b5fa0 RCX: 00007f05df58e929 [ 190.812205][ T8180] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000003 [ 190.820204][ T8180] RBP: 00007f05e0394090 R08: 0000000000000000 R09: 0000000000000000 [ 190.828197][ T8180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.836187][ T8180] R13: 0000000000000000 R14: 00007f05df7b5fa0 R15: 00007ffe719a29e8 [ 190.844187][ T8180] [ 190.877339][ T8180] ERROR: Out of memory at tomoyo_realpath_from_path. [ 191.410030][ T8203] FAULT_INJECTION: forcing a failure. [ 191.410030][ T8203] name failslab, interval 1, probability 0, space 0, times 0 [ 191.435638][ T8203] CPU: 1 PID: 8203 Comm: syz.2.943 Not tainted 6.6.95-syzkaller #0 [ 191.443619][ T8203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.453719][ T8203] Call Trace: [ 191.457036][ T8203] [ 191.460010][ T8203] dump_stack_lvl+0x16c/0x230 [ 191.464749][ T8203] ? show_regs_print_info+0x20/0x20 [ 191.470016][ T8203] ? load_image+0x3b0/0x3b0 [ 191.474583][ T8203] ? __might_sleep+0xe0/0xe0 [ 191.479243][ T8203] ? __lock_acquire+0x7c80/0x7c80 [ 191.484337][ T8203] should_fail_ex+0x39d/0x4d0 [ 191.489200][ T8203] should_failslab+0x9/0x20 [ 191.493760][ T8203] slab_pre_alloc_hook+0x59/0x310 [ 191.498839][ T8203] ? tomoyo_encode+0x28b/0x540 [ 191.503692][ T8203] ? tomoyo_encode+0x28b/0x540 [ 191.508514][ T8203] __kmem_cache_alloc_node+0x53/0x260 [ 191.513953][ T8203] ? tomoyo_encode+0x28b/0x540 [ 191.518770][ T8203] __kmalloc+0xa4/0x240 [ 191.522983][ T8203] tomoyo_encode+0x28b/0x540 [ 191.527629][ T8203] tomoyo_realpath_from_path+0x592/0x5d0 [ 191.533335][ T8203] tomoyo_path_number_perm+0x1ea/0x590 [ 191.538851][ T8203] ? tomoyo_path_number_perm+0x1ba/0x590 [ 191.544537][ T8203] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 191.550145][ T8203] ? ksys_write+0x1c1/0x250 [ 191.554743][ T8203] ? __fget_files+0x28/0x4d0 [ 191.559409][ T8203] security_file_ioctl+0x70/0xa0 [ 191.564410][ T8203] __se_sys_ioctl+0x48/0x170 [ 191.569070][ T8203] do_syscall_64+0x55/0xb0 [ 191.573547][ T8203] ? clear_bhb_loop+0x40/0x90 [ 191.578281][ T8203] ? clear_bhb_loop+0x40/0x90 [ 191.583014][ T8203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.588969][ T8203] RIP: 0033:0x7f05df58e929 [ 191.593433][ T8203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.613100][ T8203] RSP: 002b:00007f05e0394038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.621571][ T8203] RAX: ffffffffffffffda RBX: 00007f05df7b5fa0 RCX: 00007f05df58e929 [ 191.629594][ T8203] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 0000000000000006 [ 191.637617][ T8203] RBP: 00007f05e0394090 R08: 0000000000000000 R09: 0000000000000000 [ 191.645640][ T8203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.653758][ T8203] R13: 0000000000000000 R14: 00007f05df7b5fa0 R15: 00007ffe719a29e8 [ 191.661796][ T8203] [ 191.685509][ T8203] ERROR: Out of memory at tomoyo_realpath_from_path. [ 191.887947][ T8212] netlink: 132 bytes leftover after parsing attributes in process `syz.2.945'. [ 191.976924][ T8216] FAULT_INJECTION: forcing a failure. [ 191.976924][ T8216] name failslab, interval 1, probability 0, space 0, times 0 [ 192.020320][ T8216] CPU: 1 PID: 8216 Comm: syz.3.947 Not tainted 6.6.95-syzkaller #0 [ 192.028298][ T8216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.038401][ T8216] Call Trace: [ 192.041726][ T8216] [ 192.044780][ T8216] dump_stack_lvl+0x16c/0x230 [ 192.049521][ T8216] ? show_regs_print_info+0x20/0x20 [ 192.054783][ T8216] ? load_image+0x3b0/0x3b0 [ 192.059347][ T8216] ? __might_sleep+0xe0/0xe0 [ 192.064076][ T8216] ? __lock_acquire+0x7c80/0x7c80 [ 192.069174][ T8216] should_fail_ex+0x39d/0x4d0 [ 192.073923][ T8216] should_failslab+0x9/0x20 [ 192.078481][ T8216] slab_pre_alloc_hook+0x59/0x310 [ 192.083563][ T8216] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 192.089336][ T8216] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 192.095110][ T8216] __kmem_cache_alloc_node+0x53/0x260 [ 192.100543][ T8216] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 192.106316][ T8216] __kmalloc+0xa4/0x240 [ 192.110523][ T8216] tomoyo_realpath_from_path+0xe3/0x5d0 [ 192.116148][ T8216] tomoyo_path_number_perm+0x1ea/0x590 [ 192.121758][ T8216] ? tomoyo_path_number_perm+0x1ba/0x590 [ 192.127448][ T8216] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 192.132962][ T8216] ? ksys_write+0x1c1/0x250 [ 192.137558][ T8216] ? __fget_files+0x28/0x4d0 [ 192.142235][ T8216] security_file_ioctl+0x70/0xa0 [ 192.147233][ T8216] __se_sys_ioctl+0x48/0x170 [ 192.151999][ T8216] do_syscall_64+0x55/0xb0 [ 192.156478][ T8216] ? clear_bhb_loop+0x40/0x90 [ 192.161302][ T8216] ? clear_bhb_loop+0x40/0x90 [ 192.166073][ T8216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.172074][ T8216] RIP: 0033:0x7f974d58e929 [ 192.176548][ T8216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.196219][ T8216] RSP: 002b:00007f974e397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.204702][ T8216] RAX: ffffffffffffffda RBX: 00007f974d7b5fa0 RCX: 00007f974d58e929 [ 192.212725][ T8216] RDX: 0000200000000140 RSI: 000000000000891b RDI: 0000000000000003 [ 192.220748][ T8216] RBP: 00007f974e397090 R08: 0000000000000000 R09: 0000000000000000 [ 192.228775][ T8216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.236803][ T8216] R13: 0000000000000000 R14: 00007f974d7b5fa0 R15: 00007ffe6964d418 [ 192.244847][ T8216] [ 192.253917][ T8216] ERROR: Out of memory at tomoyo_realpath_from_path. [ 192.486890][ T8228] netlink: 830 bytes leftover after parsing attributes in process `syz.2.952'. [ 192.554589][ T8232] FAULT_INJECTION: forcing a failure. [ 192.554589][ T8232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.576031][ T8232] CPU: 0 PID: 8232 Comm: syz.0.953 Not tainted 6.6.95-syzkaller #0 [ 192.584259][ T8232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.594343][ T8232] Call Trace: [ 192.597663][ T8232] [ 192.600610][ T8232] dump_stack_lvl+0x16c/0x230 [ 192.605318][ T8232] ? show_regs_print_info+0x20/0x20 [ 192.610541][ T8232] ? load_image+0x3b0/0x3b0 [ 192.615083][ T8232] ? __might_fault+0xaa/0x120 [ 192.619783][ T8232] ? __lock_acquire+0x7c80/0x7c80 [ 192.624831][ T8232] ? perf_trace_lock+0xf7/0x380 [ 192.629712][ T8232] should_fail_ex+0x39d/0x4d0 [ 192.634417][ T8232] _copy_from_user+0x2f/0xe0 [ 192.639030][ T8232] ___sys_sendmsg+0x159/0x290 [ 192.643728][ T8232] ? __sys_sendmsg+0x270/0x270 [ 192.648531][ T8232] ? __lock_acquire+0x7c80/0x7c80 [ 192.653599][ T8232] __se_sys_sendmsg+0x1a5/0x270 [ 192.658485][ T8232] ? __x64_sys_sendmsg+0x80/0x80 [ 192.663453][ T8232] ? lockdep_hardirqs_on+0x98/0x150 [ 192.668677][ T8232] do_syscall_64+0x55/0xb0 [ 192.673119][ T8232] ? clear_bhb_loop+0x40/0x90 [ 192.677813][ T8232] ? clear_bhb_loop+0x40/0x90 [ 192.682515][ T8232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.688443][ T8232] RIP: 0033:0x7f685798e929 [ 192.692883][ T8232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.712592][ T8232] RSP: 002b:00007f6858757038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.721025][ T8232] RAX: ffffffffffffffda RBX: 00007f6857bb5fa0 RCX: 00007f685798e929 [ 192.729013][ T8232] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 192.736997][ T8232] RBP: 00007f6858757090 R08: 0000000000000000 R09: 0000000000000000 [ 192.744984][ T8232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.752971][ T8232] R13: 0000000000000000 R14: 00007f6857bb5fa0 R15: 00007ffe17232878 [ 192.760987][ T8232] [ 193.251458][ T8249] delete_channel: no stack [ 193.276534][ T8249] delete_channel: no stack [ 193.636098][ T8252] netlink: 'syz.2.961': attribute type 10 has an invalid length. [ 193.655569][ T8252] netlink: 55 bytes leftover after parsing attributes in process `syz.2.961'. [ 193.670803][ T8252] FAULT_INJECTION: forcing a failure. [ 193.670803][ T8252] name failslab, interval 1, probability 0, space 0, times 0 [ 193.690266][ T8252] CPU: 0 PID: 8252 Comm: syz.2.961 Not tainted 6.6.95-syzkaller #0 [ 193.698241][ T8252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.708340][ T8252] Call Trace: [ 193.711664][ T8252] [ 193.714624][ T8252] dump_stack_lvl+0x16c/0x230 [ 193.719358][ T8252] ? show_regs_print_info+0x20/0x20 [ 193.724621][ T8252] ? load_image+0x3b0/0x3b0 [ 193.729176][ T8252] ? __might_sleep+0xe0/0xe0 [ 193.733821][ T8252] ? __lock_acquire+0x7c80/0x7c80 [ 193.738906][ T8252] should_fail_ex+0x39d/0x4d0 [ 193.743661][ T8252] should_failslab+0x9/0x20 [ 193.748230][ T8252] slab_pre_alloc_hook+0x59/0x310 [ 193.753310][ T8252] ? br_netlink_fini+0x30/0x30 [ 193.758134][ T8252] kmem_cache_alloc_node+0x60/0x330 [ 193.763388][ T8252] ? __alloc_skb+0x108/0x2c0 [ 193.768025][ T8252] __alloc_skb+0x108/0x2c0 [ 193.772512][ T8252] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 193.777861][ T8252] rtnetlink_event+0x1b7/0x260 [ 193.782690][ T8252] notifier_call_chain+0x197/0x390 [ 193.787873][ T8252] __netdev_upper_dev_unlink+0x1fc/0x7b0 [ 193.793583][ T8252] ? netdev_upper_dev_unlink+0xd0/0xd0 [ 193.799114][ T8252] ? __lock_acquire+0x1260/0x7c80 [ 193.804202][ T8252] ? netdev_upper_dev_unlink+0x84/0xd0 [ 193.809845][ T8252] netdev_upper_dev_unlink+0x92/0xd0 [ 193.815206][ T8252] ? netdev_master_upper_dev_link+0x100/0x100 [ 193.821348][ T8252] unregister_vlan_dev+0x337/0x4e0 [ 193.826533][ T8252] ? vlan_gro_complete+0xd0/0xd0 [ 193.831523][ T8252] rtnl_dellink+0x42b/0x730 [ 193.836089][ T8252] ? rtnl_newlink+0x2020/0x2020 [ 193.840989][ T8252] ? __lock_acquire+0x1260/0x7c80 [ 193.846065][ T8252] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.852203][ T8252] ? kernel_text_address+0xa0/0xd0 [ 193.857383][ T8252] ? arch_stack_walk+0x160/0x190 [ 193.862426][ T8252] ? rtnetlink_rcv_msg+0x76f/0xf10 [ 193.867588][ T8252] ? mutex_lock_nested+0x20/0x20 [ 193.872784][ T8252] ? rtnl_newlink+0x2020/0x2020 [ 193.877690][ T8252] rtnetlink_rcv_msg+0x7c7/0xf10 [ 193.882680][ T8252] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 193.887846][ T8252] ? lockdep_hardirqs_on+0x98/0x150 [ 193.893098][ T8252] ? rtnetlink_bind+0x80/0x80 [ 193.897833][ T8252] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 193.903862][ T8252] ? __dev_queue_xmit+0x245/0x35a0 [ 193.909117][ T8252] ? lock_chain_count+0x20/0x20 [ 193.914064][ T8252] ? __local_bh_enable_ip+0x12e/0x1c0 [ 193.919485][ T8252] ? lockdep_hardirqs_on+0x98/0x150 [ 193.924750][ T8252] ? __local_bh_enable_ip+0x12e/0x1c0 [ 193.930177][ T8252] ? _local_bh_enable+0xa0/0xa0 [ 193.935080][ T8252] ? __dev_queue_xmit+0x245/0x35a0 [ 193.940252][ T8252] ? __dev_queue_xmit+0x1449/0x35a0 [ 193.945517][ T8252] ? __dev_queue_xmit+0x245/0x35a0 [ 193.950701][ T8252] ? ref_tracker_free+0x634/0x7d0 [ 193.955794][ T8252] ? __copy_skb_header+0xa7/0x550 [ 193.960875][ T8252] netlink_rcv_skb+0x216/0x480 [ 193.965790][ T8252] ? rtnetlink_bind+0x80/0x80 [ 193.970514][ T8252] ? netlink_ack+0x1110/0x1110 [ 193.975344][ T8252] ? __lock_acquire+0x7c80/0x7c80 [ 193.980422][ T8252] ? netlink_deliver_tap+0x2e/0x1b0 [ 193.985681][ T8252] netlink_unicast+0x750/0x8c0 [ 193.990508][ T8252] netlink_sendmsg+0x8c1/0xbe0 [ 193.995341][ T8252] ? netlink_getsockopt+0x580/0x580 [ 194.000609][ T8252] ? aa_sock_msg_perm+0x94/0x150 [ 194.005872][ T8252] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 194.011226][ T8252] ? security_socket_sendmsg+0x80/0xa0 [ 194.016748][ T8252] ? netlink_getsockopt+0x580/0x580 [ 194.022015][ T8252] ____sys_sendmsg+0x5bf/0x950 [ 194.026849][ T8252] ? __asan_memset+0x22/0x40 [ 194.031597][ T8252] ? __sys_sendmsg_sock+0x30/0x30 [ 194.036679][ T8252] ? __import_iovec+0x5f2/0x860 [ 194.041597][ T8252] ? import_iovec+0x73/0xa0 [ 194.046158][ T8252] ___sys_sendmsg+0x220/0x290 [ 194.050894][ T8252] ? __sys_sendmsg+0x270/0x270 [ 194.055740][ T8252] ? __lock_acquire+0x7c80/0x7c80 [ 194.060846][ T8252] __se_sys_sendmsg+0x1a5/0x270 [ 194.065743][ T8252] ? __x64_sys_sendmsg+0x80/0x80 [ 194.070743][ T8252] ? lockdep_hardirqs_on+0x98/0x150 [ 194.075989][ T8252] do_syscall_64+0x55/0xb0 [ 194.080454][ T8252] ? clear_bhb_loop+0x40/0x90 [ 194.085177][ T8252] ? clear_bhb_loop+0x40/0x90 [ 194.089987][ T8252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.095933][ T8252] RIP: 0033:0x7f05df58e929 [ 194.100386][ T8252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.120128][ T8252] RSP: 002b:00007f05e0394038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.128595][ T8252] RAX: ffffffffffffffda RBX: 00007f05df7b5fa0 RCX: 00007f05df58e929 [ 194.136613][ T8252] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 194.144629][ T8252] RBP: 00007f05e0394090 R08: 0000000000000000 R09: 0000000000000000 [ 194.152644][ T8252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.160668][ T8252] R13: 0000000000000000 R14: 00007f05df7b5fa0 R15: 00007ffe719a29e8 [ 194.168702][ T8252] [ 194.264951][ T8263] netlink: 'syz.3.963': attribute type 10 has an invalid length. [ 194.307681][ T8263] netlink: 55 bytes leftover after parsing attributes in process `syz.3.963'. [ 194.398633][ T8267] netlink: 14 bytes leftover after parsing attributes in process `syz.1.964'. [ 194.564544][ T8272] FAULT_INJECTION: forcing a failure. [ 194.564544][ T8272] name failslab, interval 1, probability 0, space 0, times 0 [ 194.593195][ T8272] CPU: 1 PID: 8272 Comm: syz.3.966 Not tainted 6.6.95-syzkaller #0 [ 194.600844][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.601145][ T8272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.607653][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.617536][ T8272] Call Trace: [ 194.617546][ T8272] [ 194.617556][ T8272] dump_stack_lvl+0x16c/0x230 [ 194.617594][ T8272] ? show_regs_print_info+0x20/0x20 [ 194.640083][ T8272] ? load_image+0x3b0/0x3b0 [ 194.644613][ T8272] ? __might_sleep+0xe0/0xe0 [ 194.649226][ T8272] ? __lock_acquire+0x7c80/0x7c80 [ 194.654267][ T8272] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 194.660187][ T8272] ? is_dynamic_key+0x260/0x260 [ 194.665068][ T8272] should_fail_ex+0x39d/0x4d0 [ 194.670130][ T8272] should_failslab+0x9/0x20 [ 194.674739][ T8272] slab_pre_alloc_hook+0x59/0x310 [ 194.679792][ T8272] kmem_cache_alloc_node+0x60/0x330 [ 194.685034][ T8272] ? __alloc_skb+0x108/0x2c0 [ 194.689735][ T8272] __alloc_skb+0x108/0x2c0 [ 194.694171][ T8272] __ip_append_data+0x2a23/0x3bd0 [ 194.699230][ T8272] ? ip_route_output_key_hash+0x12f/0x340 [ 194.704997][ T8272] ? raw_send_hdrinc+0x1240/0x1240 [ 194.710145][ T8272] ? ip_setup_cork+0x860/0x860 [ 194.714925][ T8272] ? ip_setup_cork+0x530/0x860 [ 194.719706][ T8272] ip_append_data+0x10d/0x180 [ 194.724403][ T8272] ? raw_send_hdrinc+0x1240/0x1240 [ 194.729535][ T8272] raw_sendmsg+0x1420/0x1950 [ 194.734166][ T8272] ? compat_raw_ioctl+0x70/0x70 [ 194.739051][ T8272] ? aa_sk_perm+0x7fc/0x930 [ 194.743612][ T8272] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 194.750060][ T8272] ? sock_rps_record_flow+0x19/0x400 [ 194.755458][ T8272] ? inet_send_prepare+0x260/0x260 [ 194.760594][ T8272] ? inet_sendmsg+0x7c/0x2f0 [ 194.765200][ T8272] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 194.770543][ T8272] ? security_socket_sendmsg+0x80/0xa0 [ 194.776047][ T8272] ? inet_send_prepare+0x260/0x260 [ 194.781195][ T8272] ____sys_sendmsg+0x5bf/0x950 [ 194.785997][ T8272] ? __sys_sendmsg_sock+0x30/0x30 [ 194.791035][ T8272] ? __import_iovec+0x5f2/0x860 [ 194.795914][ T8272] ? import_iovec+0x73/0xa0 [ 194.800442][ T8272] ___sys_sendmsg+0x220/0x290 [ 194.805146][ T8272] ? __sys_sendmsg+0x270/0x270 [ 194.809944][ T8272] ? __lock_acquire+0x7c80/0x7c80 [ 194.815015][ T8272] __se_sys_sendmsg+0x1a5/0x270 [ 194.819888][ T8272] ? __x64_sys_sendmsg+0x80/0x80 [ 194.824871][ T8272] ? lockdep_hardirqs_on+0x98/0x150 [ 194.830088][ T8272] do_syscall_64+0x55/0xb0 [ 194.834525][ T8272] ? clear_bhb_loop+0x40/0x90 [ 194.839230][ T8272] ? clear_bhb_loop+0x40/0x90 [ 194.844016][ T8272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.850021][ T8272] RIP: 0033:0x7f974d58e929 [ 194.854452][ T8272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.874096][ T8272] RSP: 002b:00007f974e397038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.882530][ T8272] RAX: ffffffffffffffda RBX: 00007f974d7b5fa0 RCX: 00007f974d58e929 [ 194.890867][ T8272] RDX: 0000000000000004 RSI: 0000200000001000 RDI: 0000000000000003 [ 194.898875][ T8272] RBP: 00007f974e397090 R08: 0000000000000000 R09: 0000000000000000 [ 194.906901][ T8272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.914887][ T8272] R13: 0000000000000000 R14: 00007f974d7b5fa0 R15: 00007ffe6964d418 [ 194.922886][ T8272] [ 195.060975][ T8275] delete_channel: no stack [ 195.086073][ T8275] delete_channel: no stack [ 195.259059][ T8282] FAULT_INJECTION: forcing a failure. [ 195.259059][ T8282] name failslab, interval 1, probability 0, space 0, times 0 [ 195.345563][ T8282] CPU: 1 PID: 8282 Comm: syz.0.969 Not tainted 6.6.95-syzkaller #0 [ 195.353626][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.363837][ T8282] Call Trace: [ 195.367144][ T8282] [ 195.370190][ T8282] dump_stack_lvl+0x16c/0x230 [ 195.374920][ T8282] ? show_regs_print_info+0x20/0x20 [ 195.380162][ T8282] ? load_image+0x3b0/0x3b0 [ 195.384746][ T8282] ? __might_sleep+0xe0/0xe0 [ 195.389371][ T8282] ? __lock_acquire+0x7c80/0x7c80 [ 195.394428][ T8282] should_fail_ex+0x39d/0x4d0 [ 195.399144][ T8282] should_failslab+0x9/0x20 [ 195.403672][ T8282] slab_pre_alloc_hook+0x59/0x310 [ 195.408729][ T8282] kmem_cache_alloc+0x5a/0x2e0 [ 195.413511][ T8282] ? security_inode_alloc+0x34/0x110 [ 195.418827][ T8282] security_inode_alloc+0x34/0x110 [ 195.423970][ T8282] inode_init_always+0x8fc/0xc90 [ 195.429196][ T8282] new_inode_pseudo+0x95/0x1d0 [ 195.434024][ T8282] __sock_create+0x12d/0x940 [ 195.438642][ T8282] ? __asan_memset+0x22/0x40 [ 195.443264][ T8282] udp_sock_create4+0xbf/0x4b0 [ 195.448060][ T8282] ? erspan_exit_batch_net+0x30/0x30 [ 195.453409][ T8282] rxrpc_lookup_local+0xccb/0x1550 [ 195.458557][ T8282] ? rxrpc_local_dont_fragment+0x70/0x70 [ 195.464219][ T8282] ? lockdep_hardirqs_on+0x98/0x150 [ 195.469528][ T8282] ? _local_bh_enable+0xa0/0xa0 [ 195.474402][ T8282] rxrpc_sendmsg+0x30a/0x5b0 [ 195.479026][ T8282] ? rxrpc_getsockopt+0x150/0x150 [ 195.484076][ T8282] ____sys_sendmsg+0x5bf/0x950 [ 195.488866][ T8282] ? __sys_sendmsg_sock+0x30/0x30 [ 195.493915][ T8282] ? __import_iovec+0x3fa/0x860 [ 195.498790][ T8282] ? import_iovec+0x73/0xa0 [ 195.503325][ T8282] ___sys_sendmsg+0x220/0x290 [ 195.508021][ T8282] ? __sys_sendmsg+0x270/0x270 [ 195.512818][ T8282] ? __lock_acquire+0x7c80/0x7c80 [ 195.517892][ T8282] __se_sys_sendmsg+0x1a5/0x270 [ 195.522765][ T8282] ? __x64_sys_sendmsg+0x80/0x80 [ 195.527738][ T8282] ? lockdep_hardirqs_on+0x98/0x150 [ 195.532958][ T8282] do_syscall_64+0x55/0xb0 [ 195.537420][ T8282] ? clear_bhb_loop+0x40/0x90 [ 195.542127][ T8282] ? clear_bhb_loop+0x40/0x90 [ 195.546822][ T8282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.552746][ T8282] RIP: 0033:0x7f685798e929 [ 195.557181][ T8282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.576801][ T8282] RSP: 002b:00007f6858757038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.585235][ T8282] RAX: ffffffffffffffda RBX: 00007f6857bb5fa0 RCX: 00007f685798e929 [ 195.593220][ T8282] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 195.601212][ T8282] RBP: 00007f6858757090 R08: 0000000000000000 R09: 0000000000000000 [ 195.609294][ T8282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.617280][ T8282] R13: 0000000000000000 R14: 00007f6857bb5fa0 R15: 00007ffe17232878 [ 195.625285][ T8282] [ 195.658959][ T8282] socket: no more sockets [ 196.503011][ T8312] netlink: 'syz.1.983': attribute type 5 has an invalid length. [ 196.561369][ T8314] netlink: 'syz.2.982': attribute type 7 has an invalid length. [ 196.613901][ T8314] FAULT_INJECTION: forcing a failure. [ 196.613901][ T8314] name failslab, interval 1, probability 0, space 0, times 0 [ 196.666682][ T8314] CPU: 1 PID: 8314 Comm: syz.2.982 Not tainted 6.6.95-syzkaller #0 [ 196.674662][ T8314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.684842][ T8314] Call Trace: [ 196.688143][ T8314] [ 196.691093][ T8314] dump_stack_lvl+0x16c/0x230 [ 196.695800][ T8314] ? show_regs_print_info+0x20/0x20 [ 196.701022][ T8314] ? load_image+0x3b0/0x3b0 [ 196.705545][ T8314] ? __might_sleep+0xe0/0xe0 [ 196.710157][ T8314] ? __lock_acquire+0x7c80/0x7c80 [ 196.715201][ T8314] should_fail_ex+0x39d/0x4d0 [ 196.719909][ T8314] should_failslab+0x9/0x20 [ 196.724430][ T8314] slab_pre_alloc_hook+0x59/0x310 [ 196.729486][ T8314] ? fib_trie_table+0x33/0x1c0 [ 196.734274][ T8314] ? fib_trie_table+0x33/0x1c0 [ 196.739052][ T8314] __kmem_cache_alloc_node+0x53/0x260 [ 196.744444][ T8314] ? fib_trie_table+0x33/0x1c0 [ 196.749227][ T8314] __kmalloc+0xa4/0x240 [ 196.753409][ T8314] fib_trie_table+0x33/0x1c0 [ 196.758028][ T8314] fib_new_table+0x135/0x2d0 [ 196.762667][ T8314] inet_rtm_newroute+0x111/0x200 [ 196.767729][ T8314] ? rcu_read_unlock+0xa0/0xa0 [ 196.772518][ T8314] ? rcu_read_unlock+0xa0/0xa0 [ 196.777298][ T8314] rtnetlink_rcv_msg+0x7c7/0xf10 [ 196.782258][ T8314] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 196.787381][ T8314] ? lockdep_hardirqs_on+0x98/0x150 [ 196.792593][ T8314] ? rtnetlink_bind+0x80/0x80 [ 196.797296][ T8314] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 196.803286][ T8314] ? __dev_queue_xmit+0x245/0x35a0 [ 196.808419][ T8314] ? lock_chain_count+0x20/0x20 [ 196.813290][ T8314] ? __local_bh_enable_ip+0x12e/0x1c0 [ 196.818762][ T8314] ? lockdep_hardirqs_on+0x98/0x150 [ 196.823974][ T8314] ? __local_bh_enable_ip+0x12e/0x1c0 [ 196.829360][ T8314] ? _local_bh_enable+0xa0/0xa0 [ 196.834229][ T8314] ? __dev_queue_xmit+0x245/0x35a0 [ 196.839360][ T8314] ? __dev_queue_xmit+0x1449/0x35a0 [ 196.844683][ T8314] ? __dev_queue_xmit+0x245/0x35a0 [ 196.849824][ T8314] ? ref_tracker_free+0x634/0x7d0 [ 196.854865][ T8314] ? __copy_skb_header+0xa7/0x550 [ 196.859911][ T8314] netlink_rcv_skb+0x216/0x480 [ 196.864704][ T8314] ? rtnetlink_bind+0x80/0x80 [ 196.869398][ T8314] ? netlink_ack+0x1110/0x1110 [ 196.874198][ T8314] ? __lock_acquire+0x7c80/0x7c80 [ 196.879246][ T8314] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.884473][ T8314] netlink_unicast+0x750/0x8c0 [ 196.889267][ T8314] netlink_sendmsg+0x8c1/0xbe0 [ 196.894162][ T8314] ? netlink_getsockopt+0x580/0x580 [ 196.899399][ T8314] ? aa_sock_msg_perm+0x94/0x150 [ 196.904360][ T8314] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 196.909679][ T8314] ? security_socket_sendmsg+0x80/0xa0 [ 196.915166][ T8314] ? netlink_getsockopt+0x580/0x580 [ 196.920652][ T8314] ____sys_sendmsg+0x5bf/0x950 [ 196.925446][ T8314] ? __asan_memset+0x22/0x40 [ 196.930161][ T8314] ? __sys_sendmsg_sock+0x30/0x30 [ 196.935218][ T8314] ? __import_iovec+0x5f2/0x860 [ 196.940181][ T8314] ? import_iovec+0x73/0xa0 [ 196.944811][ T8314] ___sys_sendmsg+0x220/0x290 [ 196.949536][ T8314] ? __sys_sendmsg+0x270/0x270 [ 196.954343][ T8314] ? __lock_acquire+0x7c80/0x7c80 [ 196.959417][ T8314] __se_sys_sendmsg+0x1a5/0x270 [ 196.964300][ T8314] ? __x64_sys_sendmsg+0x80/0x80 [ 196.969341][ T8314] ? lockdep_hardirqs_on+0x98/0x150 [ 196.974559][ T8314] do_syscall_64+0x55/0xb0 [ 196.978994][ T8314] ? clear_bhb_loop+0x40/0x90 [ 196.983696][ T8314] ? clear_bhb_loop+0x40/0x90 [ 196.988391][ T8314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.994317][ T8314] RIP: 0033:0x7f05df58e929 [ 196.998749][ T8314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.018392][ T8314] RSP: 002b:00007f05e0394038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.026840][ T8314] RAX: ffffffffffffffda RBX: 00007f05df7b5fa0 RCX: 00007f05df58e929 [ 197.034830][ T8314] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 197.042923][ T8314] RBP: 00007f05e0394090 R08: 0000000000000000 R09: 0000000000000000 [ 197.050913][ T8314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.058898][ T8314] R13: 0000000000000000 R14: 00007f05df7b5fa0 R15: 00007ffe719a29e8 [ 197.066899][ T8314] [ 197.143595][ T8316] netlink: 'syz.1.983': attribute type 5 has an invalid length. [ 197.213592][ T8321] FAULT_INJECTION: forcing a failure. [ 197.213592][ T8321] name failslab, interval 1, probability 0, space 0, times 0 [ 197.226719][ T8321] CPU: 1 PID: 8321 Comm: syz.3.985 Not tainted 6.6.95-syzkaller #0 [ 197.234689][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.244809][ T8321] Call Trace: [ 197.248153][ T8321] [ 197.251134][ T8321] dump_stack_lvl+0x16c/0x230 [ 197.255890][ T8321] ? show_regs_print_info+0x20/0x20 [ 197.261167][ T8321] ? load_image+0x3b0/0x3b0 [ 197.265753][ T8321] ? __next_zones_zonelist+0x9d/0x130 [ 197.271200][ T8321] should_fail_ex+0x39d/0x4d0 [ 197.275959][ T8321] should_failslab+0x9/0x20 [ 197.280520][ T8321] slab_pre_alloc_hook+0x59/0x310 [ 197.285609][ T8321] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 197.291401][ T8321] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 197.297114][ T8321] __kmem_cache_alloc_node+0x53/0x260 [ 197.302567][ T8321] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 197.308268][ T8321] __kmalloc_node+0xa4/0x230 [ 197.312929][ T8321] memcg_alloc_slab_cgroups+0x87/0x130 [ 197.318469][ T8321] new_slab+0xc3/0x2e0 [ 197.322620][ T8321] ___slab_alloc+0xc6d/0x12f0 [ 197.327368][ T8321] ? inet_bind_bucket_create+0x2f/0x230 [ 197.333081][ T8321] kmem_cache_alloc+0x1b7/0x2e0 [ 197.337988][ T8321] ? inet_bind_bucket_create+0x2f/0x230 [ 197.343600][ T8321] inet_bind_bucket_create+0x2f/0x230 [ 197.349050][ T8321] inet_csk_get_port+0x3c4/0x1730 [ 197.354203][ T8321] inet_sendmsg+0x1ec/0x2f0 [ 197.358795][ T8321] ? inet_send_prepare+0x260/0x260 [ 197.363984][ T8321] ____sys_sendmsg+0x5bf/0x950 [ 197.368833][ T8321] ? __asan_memset+0x22/0x40 [ 197.373500][ T8321] ? __sys_sendmsg_sock+0x30/0x30 [ 197.378587][ T8321] ? __import_iovec+0x3fa/0x860 [ 197.383524][ T8321] ? import_iovec+0x73/0xa0 [ 197.388108][ T8321] ___sys_sendmsg+0x220/0x290 [ 197.392868][ T8321] ? __sys_sendmsg+0x270/0x270 [ 197.397776][ T8321] ? __lock_acquire+0x7c80/0x7c80 [ 197.402933][ T8321] __se_sys_sendmsg+0x1a5/0x270 [ 197.407864][ T8321] ? __x64_sys_sendmsg+0x80/0x80 [ 197.412926][ T8321] ? lockdep_hardirqs_on+0x98/0x150 [ 197.418212][ T8321] do_syscall_64+0x55/0xb0 [ 197.422721][ T8321] ? clear_bhb_loop+0x40/0x90 [ 197.426106][ T8326] delete_channel: no stack [ 197.427439][ T8321] ? clear_bhb_loop+0x40/0x90 [ 197.432332][ T8326] delete_channel: no stack [ 197.436688][ T8321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.436739][ T8321] RIP: 0033:0x7f974d58e929 [ 197.436769][ T8321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.436792][ T8321] RSP: 002b:00007f974e397038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.436823][ T8321] RAX: ffffffffffffffda RBX: 00007f974d7b5fa0 RCX: 00007f974d58e929 [ 197.436843][ T8321] RDX: 00000000000003e8 RSI: 00002000000000c0 RDI: 0000000000000004 [ 197.436861][ T8321] RBP: 00007f974e397090 R08: 0000000000000000 R09: 0000000000000000 [ 197.436878][ T8321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.436895][ T8321] R13: 0000000000000000 R14: 00007f974d7b5fa0 R15: 00007ffe6964d418 [ 197.436971][ T8321] [ 199.202012][ T8351] netlink: 'syz.1.994': attribute type 10 has an invalid length. [ 199.349714][ T8351] team0: Port device geneve1 added [ 201.022706][ T8384] netlink: 'syz.2.1005': attribute type 10 has an invalid length. [ 201.156357][ T8384] geneve1: entered promiscuous mode [ 201.206644][ T8384] team0: Port device geneve1 added [ 202.263614][ T8402] delete_channel: no stack [ 202.311644][ T8402] delete_channel: no stack [ 203.379490][ T8414] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1019'. [ 204.290568][ T8429] netlink: 'syz.2.1024': attribute type 10 has an invalid length. [ 204.829640][ T8440] netlink: 'syz.3.1030': attribute type 10 has an invalid length. [ 204.923662][ T8440] team0: Port device geneve1 added [ 205.311829][ T8454] delete_channel: no stack [ 205.330060][ T8454] delete_channel: no stack [ 206.490997][ T8471] netpci0: tun_chr_ioctl cmd 1074025677 [ 206.503051][ T8471] netpci0: linktype set to 804 [ 206.573288][ T8473] netlink: 'syz.0.1043': attribute type 10 has an invalid length. [ 206.656899][ T8473] team0: Port device geneve1 added [ 206.804828][ T8471] syzkaller0: entered promiscuous mode [ 206.814455][ T8480] FAULT_INJECTION: forcing a failure. [ 206.814455][ T8480] name failslab, interval 1, probability 0, space 0, times 0 [ 206.837175][ T8480] CPU: 1 PID: 8480 Comm: syz.3.1045 Not tainted 6.6.95-syzkaller #0 [ 206.845233][ T8480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.855308][ T8480] Call Trace: [ 206.858602][ T8480] [ 206.861543][ T8480] dump_stack_lvl+0x16c/0x230 [ 206.866254][ T8480] ? show_regs_print_info+0x20/0x20 [ 206.871473][ T8480] ? load_image+0x3b0/0x3b0 [ 206.875997][ T8480] ? __might_sleep+0xe0/0xe0 [ 206.880614][ T8480] ? __lock_acquire+0x7c80/0x7c80 [ 206.885667][ T8480] should_fail_ex+0x39d/0x4d0 [ 206.890377][ T8480] should_failslab+0x9/0x20 [ 206.894917][ T8480] slab_pre_alloc_hook+0x59/0x310 [ 206.899966][ T8480] kmem_cache_alloc_node+0x60/0x330 [ 206.905188][ T8480] ? __alloc_skb+0x108/0x2c0 [ 206.909803][ T8480] __alloc_skb+0x108/0x2c0 [ 206.914237][ T8480] netlink_ack+0x376/0x1110 [ 206.918765][ T8480] ? inet_diag_handler_cmd+0x1e7/0x290 [ 206.924255][ T8480] ? inet_diag_unregister+0xb0/0xb0 [ 206.929505][ T8480] ? netlink_dump+0xe10/0xe10 [ 206.934213][ T8480] ? sock_diag_lock_handler+0x19/0x280 [ 206.939700][ T8480] ? inet_diag_unregister+0xb0/0xb0 [ 206.944927][ T8480] ? sock_diag_rcv_msg+0x402/0x600 [ 206.950063][ T8480] netlink_rcv_skb+0x29a/0x480 [ 206.954856][ T8480] ? sock_diag_bind+0xb0/0xb0 [ 206.959557][ T8480] ? netlink_ack+0x1110/0x1110 [ 206.964354][ T8480] ? __lock_acquire+0x7c80/0x7c80 [ 206.969399][ T8480] ? netlink_deliver_tap+0x2e/0x1b0 [ 206.974622][ T8480] sock_diag_rcv+0x2a/0x40 [ 206.979056][ T8480] netlink_unicast+0x750/0x8c0 [ 206.983865][ T8480] netlink_sendmsg+0x8c1/0xbe0 [ 206.988660][ T8480] ? netlink_getsockopt+0x580/0x580 [ 206.993912][ T8480] ? aa_sock_msg_perm+0x94/0x150 [ 206.998891][ T8480] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 207.004211][ T8480] ? security_socket_sendmsg+0x80/0xa0 [ 207.009696][ T8480] ? netlink_getsockopt+0x580/0x580 [ 207.014931][ T8480] ____sys_sendmsg+0x5bf/0x950 [ 207.019725][ T8480] ? __asan_memset+0x22/0x40 [ 207.024342][ T8480] ? __sys_sendmsg_sock+0x30/0x30 [ 207.029380][ T8480] ? __import_iovec+0x5f2/0x860 [ 207.034256][ T8480] ? import_iovec+0x73/0xa0 [ 207.038783][ T8480] ___sys_sendmsg+0x220/0x290 [ 207.043479][ T8480] ? __sys_sendmsg+0x270/0x270 [ 207.048290][ T8480] ? __lock_acquire+0x7c80/0x7c80 [ 207.053354][ T8480] __se_sys_sendmsg+0x1a5/0x270 [ 207.058260][ T8480] ? __x64_sys_sendmsg+0x80/0x80 [ 207.063247][ T8480] ? lockdep_hardirqs_on+0x98/0x150 [ 207.068518][ T8480] do_syscall_64+0x55/0xb0 [ 207.072968][ T8480] ? clear_bhb_loop+0x40/0x90 [ 207.077751][ T8480] ? clear_bhb_loop+0x40/0x90 [ 207.082560][ T8480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.088498][ T8480] RIP: 0033:0x7f974d58e929 [ 207.092944][ T8480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.112570][ T8480] RSP: 002b:00007f974e397038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.121004][ T8480] RAX: ffffffffffffffda RBX: 00007f974d7b5fa0 RCX: 00007f974d58e929 [ 207.128995][ T8480] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 207.136978][ T8480] RBP: 00007f974e397090 R08: 0000000000000000 R09: 0000000000000000 [ 207.144961][ T8480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.152951][ T8480] R13: 0000000000000000 R14: 00007f974d7b5fa0 R15: 00007ffe6964d418 [ 207.161002][ T8480] [ 207.185268][ T8471] syzkaller0: entered allmulticast mode [ 207.188831][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 208.803986][ T8504] delete_channel: no stack [ 208.809279][ T8504] delete_channel: no stack [ 209.245374][ T42] wlan1: Trigger new scan to find an IBSS to join [ 209.251998][ T42] ================================================================================ [ 209.272412][ T42] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1209:5 [ 209.290852][ T42] index 1 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 209.307443][ T42] CPU: 0 PID: 42 Comm: kworker/u4:2 Not tainted 6.6.95-syzkaller #0 [ 209.315529][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.325669][ T42] Workqueue: events_unbound cfg80211_wiphy_work [ 209.332009][ T42] Call Trace: [ 209.335330][ T42] [ 209.338383][ T42] dump_stack_lvl+0x16c/0x230 [ 209.343117][ T42] ? show_regs_print_info+0x20/0x20 [ 209.348367][ T42] ? load_image+0x3b0/0x3b0 [ 209.352927][ T42] ? mutex_lock_nested+0x20/0x20 [ 209.357942][ T42] ubsan_epilogue+0xa/0x30 [ 209.362434][ T42] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 209.368271][ T42] ieee80211_request_ibss_scan+0x4eb/0x790 [ 209.374229][ T42] ieee80211_ibss_work+0xdfd/0x10c0 [ 209.379580][ T42] ? ieee80211_ibss_rx_queued_mgmt+0x2ac0/0x2ac0 [ 209.386055][ T42] ? mark_lock+0x94/0x320 [ 209.390499][ T42] ? ieee80211_iface_work+0xbca/0xc70 [ 209.395919][ T42] ? _raw_spin_unlock_irq+0x23/0x50 [ 209.401236][ T42] cfg80211_wiphy_work+0x225/0x260 [ 209.406445][ T42] ? process_scheduled_works+0x957/0x15b0 [ 209.412215][ T42] process_scheduled_works+0xa45/0x15b0 [ 209.418007][ T42] ? assign_work+0x400/0x400 [ 209.422682][ T42] ? assign_work+0x39e/0x400 [ 209.427342][ T42] worker_thread+0xa55/0xfc0 [ 209.431985][ T42] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 209.437936][ T42] ? _raw_spin_unlock+0x40/0x40 [ 209.442835][ T42] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 209.448847][ T42] kthread+0x2fa/0x390 [ 209.452954][ T42] ? pr_cont_work+0x560/0x560 [ 209.457681][ T42] ? kthread_blkcg+0xd0/0xd0 [ 209.462312][ T42] ret_from_fork+0x48/0x80 [ 209.466770][ T42] ? kthread_blkcg+0xd0/0xd0 [ 209.471494][ T42] ret_from_fork_asm+0x11/0x20 [ 209.476436][ T42] [ 209.492667][ T42] ================================================================================ [ 209.513990][ T42] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 209.521275][ T42] CPU: 1 PID: 42 Comm: kworker/u4:2 Not tainted 6.6.95-syzkaller #0 [ 209.529375][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.539452][ T42] Workqueue: events_unbound cfg80211_wiphy_work [ 209.545725][ T42] Call Trace: [ 209.549028][ T42] [ 209.551980][ T42] dump_stack_lvl+0x16c/0x230 [ 209.556689][ T42] ? show_regs_print_info+0x20/0x20 [ 209.561911][ T42] ? load_image+0x3b0/0x3b0 [ 209.566459][ T42] panic+0x2c0/0x710 [ 209.570398][ T42] ? bpf_jit_dump+0xd0/0xd0 [ 209.574936][ T42] ? mutex_lock_nested+0x20/0x20 [ 209.579893][ T42] check_panic_on_warn+0x84/0xa0 [ 209.584847][ T42] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 209.590617][ T42] ieee80211_request_ibss_scan+0x4eb/0x790 [ 209.596478][ T42] ieee80211_ibss_work+0xdfd/0x10c0 [ 209.601751][ T42] ? ieee80211_ibss_rx_queued_mgmt+0x2ac0/0x2ac0 [ 209.608113][ T42] ? mark_lock+0x94/0x320 [ 209.612500][ T42] ? ieee80211_iface_work+0xbca/0xc70 [ 209.617911][ T42] ? _raw_spin_unlock_irq+0x23/0x50 [ 209.623141][ T42] cfg80211_wiphy_work+0x225/0x260 [ 209.628282][ T42] ? process_scheduled_works+0x957/0x15b0 [ 209.634024][ T42] process_scheduled_works+0xa45/0x15b0 [ 209.639614][ T42] ? assign_work+0x400/0x400 [ 209.644243][ T42] ? assign_work+0x39e/0x400 [ 209.648869][ T42] worker_thread+0xa55/0xfc0 [ 209.653476][ T42] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 209.659400][ T42] ? _raw_spin_unlock+0x40/0x40 [ 209.664278][ T42] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 209.670222][ T42] kthread+0x2fa/0x390 [ 209.674302][ T42] ? pr_cont_work+0x560/0x560 [ 209.679032][ T42] ? kthread_blkcg+0xd0/0xd0 [ 209.683633][ T42] ret_from_fork+0x48/0x80 [ 209.688065][ T42] ? kthread_blkcg+0xd0/0xd0 [ 209.692672][ T42] ret_from_fork_asm+0x11/0x20 [ 209.697563][ T42] [ 209.700916][ T42] Kernel Offset: disabled [ 209.705331][ T42] Rebooting in 86400 seconds..