last executing test programs: 2.892042449s ago: executing program 3 (id=6786): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x4, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10797e, 0x2, @perf_config_ext={0x0, 0x20003fff8002}, 0x0, 0x32, 0x43a1bd74, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x100200c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0xed0, 0x74a7bf9a, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000210081044e81f782db44b9040200", 0x12}, {&(0x7f0000004200)="3d8c5ddb30a3718cef4f5210732f747226e8d7f41c83b136ac097b9a3c24c45639c2d70ee16c4b00790aca819a43b054bd01626eb0402783358806f064ef1fd963ab9b3f56cd18c60b0906d39e860184856b478f1ba6888cc780673762b0ee290d2b7dc0c21ff48175f779a7249c3f043c08a71a2f5abe07c7374fb92b8b3b61da1fa2d87a5263140bb672027b87cacc1b26a07901697eab4911135583935d28d3deb4720aad045d01d80f00db35ede34e1db4a9b9c9e4c8521575a0c0641a92ff7327130f1c", 0xc6}], 0x2}, 0x0) 2.645779494s ago: executing program 3 (id=6788): socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x102009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f0000000500)=r1, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, 0x0, 0x9cdc2384056b48b8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) r4 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000007800000078000000090000000c0000000000000b0500000003000000080000930800000010000000ae410000070000000700000001000000ffff00000f00000006000000060000000c000000060000000900000001000000040000000000000005000000020000000900000000ef52000002000000002e612e00712e2e0058355927467a4dfec8bcbc524badd7b932666252ef44656d3d2c00ab91c7e268eec750931db1fa0373ba270da2ecdd9c09fc33df3c3607adbe307d16c9d2be4ef04f3876c83d9a8b6dd3a275ebaca89d532a5f95ac819bf29d049ccc9c6c977973a4b43497"], &(0x7f0000000780)=""/222, 0x99, 0xde, 0x0, 0x668, 0x10000, @value=r4}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) socket$kcm(0x2, 0x5, 0x84) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x00') r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0xffffffff, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcf1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r8, 0x29, 0x11, &(0x7f0000000140), 0x4) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000000000095000000000500009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x6, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) 2.413609739s ago: executing program 3 (id=6792): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x26}, 0x40001f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x49, &(0x7f0000000600), 0x4) 2.160298755s ago: executing program 0 (id=6794): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xfe, @remote, 0x4, 0x80000}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0xc}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000003c0)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', 0x0, r1, 0x5, 0x4, 0x1}, 0x50) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x9, &(0x7f0000000880)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8c}, @map_fd={0x18, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYRES8, @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000001700)={&(0x7f00000014c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001500)="b1256d0f8579948f1af090f65421964c23f3fcdddbb280918776c763f1571c4d3d27d0a17e7eea2c04a9d4decbb84ea6edccb675dcf09d015de6940027b8d72eda5c6b5234a6edbec3069efa7767dea571efb97410cee8790447bdfd859e2f9be40b14c965c65101b1425d7b6de5274f70585b82b967584f945cbfeaabbcb20141f45831d7211fedf169889f7d49dde4756bec5e678d2bb26cc074d1f1920b5c55341580cdc56cc2ebf4843e96f6ec19986cdefbf44d66873766bb50c32eb49469fc1d35c9284ac4", 0xc8}, {&(0x7f0000000180)="4a5a0f3374c4590d87026da0ae462f09670a58abd6597672a28c64b8a9132ed0c1747cbf45ed4ca2e56e7d3609ea0d9bbf05321de3a5afb98e3bdf77828a57465a88e0290c6a203e76686b6da7796bedc3ab6f3dee81c5bc0af0845a3a31fd34af434099a6b408d051fff11a60e09a89520ffd4a5d185c9cf5e813944d0510141a48da151331fcf756b8afe98ccb9cc14f44", 0x92}], 0x2, &(0x7f0000000040)=[@ip_ttl={{0x14, 0x0, 0x2, 0xa}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x740b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x3a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0xe0e0}]}}}], 0x38}, 0x0) 2.110366465s ago: executing program 2 (id=6796): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x4, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10797e, 0x2, @perf_config_ext={0x0, 0x20003fff8002}, 0x0, 0x32, 0x43a1bd74, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x100200c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0xed0, 0x74a7bf9a, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000210081044e81f782db44b9040200", 0x12}, {&(0x7f0000004200)="3d8c5ddb30a3718cef4f5210732f747226e8d7f41c83b136ac097b9a3c24c45639c2d70ee16c4b00790aca819a43b054bd01626eb0402783358806f064ef1fd963ab9b3f56cd18c60b0906d39e860184856b478f1ba6888cc780673762b0ee290d2b7dc0c21ff48175f779a7249c3f043c08a71a2f5abe07c7374fb92b8b3b61da1fa2d87a5263140bb672027b87cacc1b26a07901697eab4911135583935d28d3deb4720aad045d01d80f00db35ede34e1db4a9b9c9e4c8521575a0c0641a92ff7327130f1c", 0xc6}], 0x2}, 0x0) 1.654440335s ago: executing program 2 (id=6799): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r1, &(0x7f00000003c0)="8af886", &(0x7f00000004c0)=""/3}, 0x20) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f000015500001", 0x1b}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x2d, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r8, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000001000000010000005c"], 0x70, 0x240040c0}, 0x4000000) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="458600dedf", 0x5}, {&(0x7f0000000100)="5e62ad657ddd26069e462ebcbea9dfede4fa26f950f234b67a42667b34155c86bd7d41a2605e45286f4bdfddaaccc5f5e43f161809a297e4d2fc1100c353c4b5743f33e24de544307e60bfbd5f3fdfdc949fc64633382271503fb5af3e4072659ba0194c47300558af1af21eea6ec8c33aebc5922bbf222a7c649c99108765e367463321b1dcb877ff077b91a7b8258c333f5c89", 0x94}], 0x2}, 0x40000) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) r10 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r10, 0x29, 0x43, 0x0, 0x0) 1.609617946s ago: executing program 0 (id=6800): socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x102009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f0000000500)=r1, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, 0x0, 0x9cdc2384056b48b8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) r4 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000007800000078000000090000000c0000000000000b0500000003000000080000930800000010000000ae410000070000000700000001000000ffff00000f00000006000000060000000c000000060000000900000001000000040000000000000005000000020000000900000000ef52000002000000002e612e00712e2e0058355927467a4dfec8bcbc524badd7b932666252ef44656d3d2c00ab91c7e268eec750931db1fa0373ba270da2ecdd9c09fc33df3c3607adbe307d16c9d2be4ef04f3876c83d9a8b6dd3a275ebaca89d532a5f95ac819bf29d049ccc9c6c977973a4b43497"], &(0x7f0000000780)=""/222, 0x99, 0xde, 0x0, 0x668, 0x10000, @value=r4}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) socket$kcm(0x2, 0x5, 0x84) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x00') r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0xffffffff, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcf1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r8, 0x29, 0x11, &(0x7f0000000140), 0x4) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000000000095000000000500009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x6, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) 1.487007009s ago: executing program 1 (id=6801): r0 = getpid() r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x8, 0x5, 0x4, 0x0, 0x2, 0x12, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xe, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x14008, 0x1, 0x0, 0x4, 0xfffffffffffffff6, 0x9, 0x4, 0x0, 0x6bd9, 0x0, 0x1}, r0, 0xe, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000000c0)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140)=r0, 0x12) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x78ae) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x2f, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) write$cgroup_pid(r2, &(0x7f0000000500)=r0, 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000580)='memory.min\x00', 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r1, 0x20, &(0x7f0000000700)={&(0x7f00000005c0)=""/229, 0xe5, 0x0, &(0x7f00000006c0)=""/17, 0x11}}, 0x10) r9 = openat$cgroup_int(r6, &(0x7f0000000780)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f00000007c0)=0x1000, 0x12) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x4008, r7}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r12, &(0x7f0000000c80)={&(0x7f00000008c0)=@caif=@util={0x25, "30e06de79956a50e603442763caf9312"}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000940)="388daf42eff79aa8e9a090c5bde7eed4667756c9278fad8996c45a0771cbb99034e2b9b7e97fb851c8da21ea52798c688beb476a6cfd8b84dea97109c486c684e8aa512c8f1f23e01641deea48abff64b075f17d187f841568f6df041f0d4e322f31f5095d31296a028e09ac7e7f98c79071efff292d8ad24b89f86dcaf859702dd32c5114dade1aadfcc2664307f07c7c34a7dd1289c4439993f4d575ca4ffbef9e15562315f70e865b5e801944d5ee3f65a1f88261e2e5227c45709cf939f3af44db", 0xc3}, {&(0x7f0000000a40)="d466117524c656ade40b30a9f7428aac50dc4c124c297f81ddddeced832b0ca6a7ca84e115882eadff3d1cf68ac5bb03a764e2072bb2ecbba1d9cd193787bb48032d06b92622e88058fbd7732b947a27b01e22881c6529d8c12ab557999f1463327b5ac7ff5e77385c77f93d60eda2", 0x6f}], 0x2, &(0x7f0000000b00)=[{0x90, 0x115, 0xfffffff8, "7aa6ddf7abe227bfe6e7a17f0c29eb7414b3842dcf953cde0ec85a5795500b9c89976f9469558310adc93fad3a91a65af5feacc94189be95a536f9463c49c056a13ca357037039f6e448a3921901333b2fbcbdb1a2c95442d616839f4d891e6a2231bf2040a85995c40b2a89a024d04dd9d9d73ef79aeb92be85"}, {0xf0, 0x116, 0x3, "06aec308647aefe61054e0bc5ced37da7e5cac69d8f5171ce4344545b2ac5d7b61bd37f137a3070d4c306c555ce501791f5bcb5a6e82ea9152ae44adb02badab2b7f3fc2b34246b8cfd5207cdb2b3b0642611793cc6ab440c2443ff28eaf560ca9b3b75ce99d8e8330a733c5f264efd6806f999af1bd8773ad76d03019aa7245dbccd0c99c38d79b0c0b6d1cb62939efffd32330821f7451c2fc21861dfe5315f38c7d2ab37540b020bde0b8261f5cca9bdb203ca1e1acf96423105fabbed8ceb393034afd302140b0a8474cdb80e61561c7f7ff7acdf3f4bf"}], 0x180}, 0x34000041) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000cc0)=r4, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000dc0)={r13, 0x20, &(0x7f0000000d80)={&(0x7f0000000d00)=""/9, 0x9, 0x0, &(0x7f0000000d40)=""/64, 0x40}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001080)={r5, 0x58, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001380)={0x6, 0xe, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}, [@jmp={0x5, 0x0, 0x0, 0x9, 0xb, 0x6, 0x1}, @ldst={0x1, 0x1, 0x0, 0x5, 0x7, 0x10}, @call={0x85, 0x0, 0x0, 0x1a}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @map_fd={0x18, 0x7, 0x1, 0x0, r10}]}, &(0x7f0000001180)='syzkaller\x00', 0x8, 0xe1, &(0x7f00000011c0)=""/225, 0x40f00, 0x4, '\x00', 0x0, 0x25, r13, 0x8, &(0x7f00000012c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001300)={0x3, 0x3, 0x2, 0x7f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001340)=[r5, r10, r5], 0x0, 0x10, 0xcb}, 0x94) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=@base={0x10, 0x4, 0x80, 0x836e, 0x4201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x1a, 0x17, &(0x7f0000000e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x0, 0xf, 0x6, 0x6, 0x64, 0xfffffffffffffff0}]}, &(0x7f0000000ec0)='GPL\x00', 0x2, 0xc1, &(0x7f0000000f00)=""/193, 0x40f00, 0x21, '\x00', r14, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, r8, r15, 0x5, &(0x7f00000014c0)=[r16, r5, r5, r10, r5], &(0x7f0000001500)=[{0x3, 0x1, 0xb, 0x6}, {0x5, 0x5, 0x1, 0xb}, {0x0, 0x9, 0xb, 0xb}, {0x3, 0x2, 0x0, 0x7}, {0x0, 0x2, 0x0, 0xa}], 0x10, 0x9}, 0x94) r17 = openat$cgroup_ro(r6, &(0x7f0000001640)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) openat$cgroup_procs(r17, &(0x7f0000001680)='cgroup.procs\x00', 0x2, 0x0) sendmsg$kcm(r17, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)="58c9523192bc2b4f7f0e635cfe7a5364368920455ca17c03a8bc33af38ead06a5df258a36aee59a4c1e9c2a8f9d5a37574a4e6e6d3832f7fca1941e45ca10ac0b815cf38f36ee6337af12be466fef074c6fff5093d38b8cd7b1f1a7b2488e120737648b2f40ec34b27d10da6043f0d985428ecc28e468bf787e84459f34de2dadb80c8ffe5e1797bd292d1c6e9f263fe10c83cd2c4b8862d152e3801ffbea47c87cdd5ba2fae9f4387ff2c7ab927644e086fc5b9b7d7da11d8eae6395348942904c1c4ccb5556dbf69a729d681a40f32beb5615f9b42471a09928c8a4564f01e6258e13ce6", 0xe5}], 0x1, &(0x7f0000001800)=[{0x20, 0x10b, 0x80, "8a2cea69e5271a7a880b6cf5872c"}], 0x20}, 0x81d1) close(r11) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002b40)={r17, 0x0, 0xc0, 0x1000, &(0x7f0000001880)="20a9f530434be30db84e6a6eab8d60e8e67c5b7a545184c038c409200a66c388ad72ad7a97dccfde68f6241c416aa9d6bedaf164f97b0070c21ea4262aeab11d07f3fa7b561d86b82e795fd56f49424b2bb1362f326efe88e5b7a0ec61b717a7fe029abb230164accd0e87264e50c741d851a7dd2802692f26d06eb872f3b2032d0f6851c02001767e96e361f7080565fb8ba47b9762cf43ff30b42b806c14e783b70fbc0c24f26734bedb648e6cea5d481c5691d40f282ce9247703fdf2f706", &(0x7f0000001940)=""/4096, 0x69, 0x0, 0xc2, 0xde, &(0x7f0000002940)="750aeb11cc883eb56bd27d50eedb00746926272f3e69d258a04005761fd24f45add8729fd25e094e60b96a8494802f816fdf11bdf1022378908855ae2b15dcdb3c2d882319e9fb26c20077328cc7b2c66c25e0c41e6f9da1d6f5ce8868f5f7b858f4362ee5a0cb51e48535739f51b9cc15170d1e4b63c0d8377caa803adb608883cbf572d51cc2326fc503ba321fa5443c6e39b6122ba7406d6b27cb0305d21b11ea98371b754b4caf31c5b0d49e1c2e2a8e5d6095003d696c6f8e60b60e14c8abbf", &(0x7f0000002a40)="aed76736a1997d481067aa4be96c0476c4c7773f50e8fd592d68b52b3f10906f508ccaecbbc336ef34eb561eb6d13865b8e21048abea3904d30bb1564687200af121b1886a12c5533aa492431a191ecf81ea9e51ad1a985980688abace164592974a0f3e83ea1ab410cb594037ce1e62965e18d88ca3d469bb9ba9097b4c06441ebd98ef4ba6044bd34284980c3d0cb431f22b6a320c5d637739fcb44b50855c95c8f62a12307aff0d5648743ff370bef0afd91a5d55eda77e2812698d35addc2f496941c7a40ee3b0c0b674c18c151cca4c067e52d3bc089c8e50d19c56", 0x4, 0x0, 0x8000}, 0x50) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) 1.393192491s ago: executing program 0 (id=6802): socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x11, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) setsockopt$sock_attach_bpf(r0, 0x84, 0x75, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000210081044e81f782db44b9040200", 0x12}, {&(0x7f0000004200)="3d8c5ddb30a3718cef4f5210732f747226e8d7f41c83b136ac097b9a3c24c45639c2d70ee16c4b00790aca819a43b054bd01626eb0402783358806f064ef1fd963ab9b3f56cd18c60b0906d39e860184856b478f1ba6888cc780673762b0ee290d2b7dc0c21ff48175f779a7249c3f043c08a71a2f5abe07c7374fb92b8b3b61da1fa2d87a5263140bb672027b87cacc1b26a07901697eab4911135583935d28d3deb4720aad045d01d80f00db35ede34e1db4a9b9c9e4c8521575a0c0641a92ff7327130f1c", 0xc6}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000694d0f00000000008510000002000000850000000500000095004800000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0xc, 0xc3, &(0x7f0000000940)=""/195, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x21) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20008095) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.393026091s ago: executing program 1 (id=6803): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000210081044e81f782db44b9040200", 0x12}], 0x1}, 0x0) 1.392701251s ago: executing program 2 (id=6804): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000003c0)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', 0x0, r1, 0x5, 0x4, 0x1}, 0x50) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x9, &(0x7f0000000880)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8c}, @map_fd={0x18, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYRES8, @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000001700)={&(0x7f00000014c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001500)="b1256d0f8579948f1af090f65421964c23f3fcdddbb280918776c763f1571c4d3d27d0a17e7eea2c04a9d4decbb84ea6edccb675dcf09d015de6940027b8d72eda5c6b5234a6edbec3069efa7767dea571efb97410cee8790447bdfd859e2f9be40b14c965c65101b1425d7b6de5274f70585b82b967584f945cbfeaabbcb20141f45831d7211fedf169889f7d49dde4756bec5e678d2bb26cc074d1f1920b5c55341580cdc56cc2ebf4843e96f6ec19986cdefbf44d66873766bb50c32eb49469fc1d35c9284ac4", 0xc8}, {&(0x7f0000000180)="4a5a0f3374c4590d87026da0ae462f09670a58abd6597672a28c64b8a9132ed0c1747cbf45ed4ca2e56e7d3609ea0d9bbf05321de3a5afb98e3bdf77828a57465a88e0290c6a203e76686b6da7796bedc3ab6f3dee81c5bc0af0845a3a31fd34af434099a6b408d051fff11a60e09a89520ffd4a5d185c9cf5e813944d0510141a48da151331fcf756b8afe98ccb9cc14f44", 0x92}], 0x2, &(0x7f0000000040)=[@ip_ttl={{0x14, 0x0, 0x2, 0xa}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x740b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x3a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0xe0e0}]}}}], 0x38}, 0x0) 1.392381731s ago: executing program 3 (id=6805): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001f", 0x0, 0x104, 0x6000000000000000, 0xfc, 0x0, &(0x7f0000000400)="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"}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xb, [@restrict={0x10, 0x0, 0x0, 0xb, 0x4}, @func={0x8, 0x0, 0x0, 0xc, 0x3}, @enum64={0xb, 0x3, 0x0, 0x13, 0x0, 0x8, [{0x9, 0xffffffca, 0xfffffffe}, {0xa, 0x1dcc, 0x80000000}, {0xd, 0x7, 0x3}]}]}, {0x0, [0x61, 0x2e, 0x5f, 0x61, 0x5f, 0x5f, 0x2e, 0x30, 0x5f]}}, &(0x7f0000000580), 0x6b, 0x0, 0x0, 0x3, 0x10000, @value=r1}, 0x28) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x4, 0xff9, &(0x7f0000002500)=""/4089, 0x0, 0x68}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) openat$cgroup_type(r1, &(0x7f0000000580), 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4044004) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) 1.280315183s ago: executing program 1 (id=6806): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3542, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0xffffffff}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x800}) 1.181408415s ago: executing program 2 (id=6807): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4474, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000500), 0x0}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f00000005c0), 0x6e, &(0x7f00000036c0)=[{&(0x7f00000026c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}, 0x100) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x5, 0x5b, 0xff, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x7b, 0x8, 0x8, 0x1, 0x0, 0x82, 0x0, 0x7, 0x0, 0xa}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1004, 0x6dd700000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000580)) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x4, r2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) socket$kcm(0x10, 0x3, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=r5, 0x2e, 0x1, 0x8000, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 585.140548ms ago: executing program 3 (id=6808): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xfe, @remote, 0x4, 0x80000}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0xc}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000003c0)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', 0x0, r1, 0x5, 0x4, 0x1}, 0x50) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x9, &(0x7f0000000880)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8c}, @map_fd={0x18, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYRES8, @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000001700)={&(0x7f00000014c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001500)="b1256d0f8579948f1af090f65421964c23f3fcdddbb280918776c763f1571c4d3d27d0a17e7eea2c04a9d4decbb84ea6edccb675dcf09d015de6940027b8d72eda5c6b5234a6edbec3069efa7767dea571efb97410cee8790447bdfd859e2f9be40b14c965c65101b1425d7b6de5274f70585b82b967584f945cbfeaabbcb20141f45831d7211fedf169889f7d49dde4756bec5e678d2bb26cc074d1f1920b5c55341580cdc56cc2ebf4843e96f6ec19986cdefbf44d66873766bb50c32eb49469fc1d35c9284ac4", 0xc8}, {&(0x7f0000000180)="4a5a0f3374c4590d87026da0ae462f09670a58abd6597672a28c64b8a9132ed0c1747cbf45ed4ca2e56e7d3609ea0d9bbf05321de3a5afb98e3bdf77828a57465a88e0290c6a203e76686b6da7796bedc3ab6f3dee81c5bc0af0845a3a31fd34af434099a6b408d051fff11a60e09a89520ffd4a5d185c9cf5e813944d0510141a48da151331fcf756b8afe98ccb9cc14f44", 0x92}], 0x2, &(0x7f0000000040)=[@ip_ttl={{0x14, 0x0, 0x2, 0xa}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x740b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x3a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0xe0e0}]}}}], 0x38}, 0x0) 563.927348ms ago: executing program 2 (id=6809): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x4, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10797e, 0x2, @perf_config_ext={0x0, 0x20003fff8002}, 0x0, 0x32, 0x43a1bd74, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x100200c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0xed0, 0x74a7bf9a, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000210081044e81f782db44b9040200", 0x12}, {&(0x7f0000004200)="3d8c5ddb30a3718cef4f5210732f747226e8d7f41c83b136ac097b9a3c24c45639c2d70ee16c4b00790aca819a43b054bd01626eb0402783358806f064ef1fd963ab9b3f56cd18c60b0906d39e860184856b478f1ba6888cc780673762b0ee290d2b7dc0c21ff48175f779a7249c3f043c08a71a2f5abe07c7374fb92b8b3b61da1fa2d87a5263140bb672027b87cacc1b26a07901697eab4911135583935d28d3deb4720aad045d01d80f00db35ede34e1db4a9b9c9e4c8521575a0c0641a92ff7327130f1c", 0xc6}], 0x2}, 0x0) 470.28132ms ago: executing program 0 (id=6810): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r1, &(0x7f00000003c0)="8af886", &(0x7f00000004c0)=""/3}, 0x20) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f000015500001", 0x1b}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x2d, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r8, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000001000000010000005c"], 0x70, 0x240040c0}, 0x4000000) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="458600dedf", 0x5}, {&(0x7f0000000100)="5e62ad657ddd26069e462ebcbea9dfede4fa26f950f234b67a42667b34155c86bd7d41a2605e45286f4bdfddaaccc5f5e43f161809a297e4d2fc1100c353c4b5743f33e24de544307e60bfbd5f3fdfdc949fc64633382271503fb5af3e4072659ba0194c47300558af1af21eea6ec8c33aebc5922bbf222a7c649c99108765e367463321b1dcb877ff077b91a7b8258c333f5c89", 0x94}], 0x2}, 0x40000) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) r10 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r10, 0x29, 0x43, 0x0, 0x0) 427.030121ms ago: executing program 1 (id=6811): socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x102009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f0000000500)=r1, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, 0x0, 0x9cdc2384056b48b8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) r4 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000007800000078000000090000000c0000000000000b0500000003000000080000930800000010000000ae410000070000000700000001000000ffff00000f00000006000000060000000c000000060000000900000001000000040000000000000005000000020000000900000000ef52000002000000002e612e00712e2e0058355927467a4dfec8bcbc524badd7b932666252ef44656d3d2c00ab91c7e268eec750931db1fa0373ba270da2ecdd9c09fc33df3c3607adbe307d16c9d2be4ef04f3876c83d9a8b6dd3a275ebaca89d532a5f95ac819bf29d049ccc9c6c977973a4b43497"], &(0x7f0000000780)=""/222, 0x99, 0xde, 0x0, 0x668, 0x10000, @value=r4}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) socket$kcm(0x2, 0x5, 0x84) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x00') r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0xffffffff, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcf1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000140)=r8, 0x4) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000000000095000000000500009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x6, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) 357.993532ms ago: executing program 2 (id=6812): socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x0, 0x3fff8002}, 0x5025, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0xf, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000340)={[{0x2d, 'io'}, {0x2b, 'cpu'}, {0x2d, 'pids'}, {0x2b, 'blkio'}, {0x2b, 'blkio'}]}, 0x1d) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000002c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000200)=r1}, 0x20) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x6b, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x26}, 0x40001f00) setsockopt$sock_attach_bpf(r5, 0x1, 0x49, &(0x7f0000000600), 0x4) 272.629794ms ago: executing program 3 (id=6813): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x20004, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r3) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x5, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x1ad8e029, 0x1000000006}, 0x8000, 0x5, 0x43a1bd78, 0x7, 0x9, 0x40006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x61}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4246}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000440)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) close(r7) socketpair$unix(0x1, 0xf, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 258.658114ms ago: executing program 1 (id=6814): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000210081044e81f782db44b9040200", 0x12}], 0x1}, 0x0) 183.342746ms ago: executing program 0 (id=6815): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000003c0)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', 0x0, r1, 0x5, 0x4, 0x1}, 0x50) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x9, &(0x7f0000000880)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8c}, @map_fd={0x18, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYRES8, @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000001700)={&(0x7f00000014c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001500)="b1256d0f8579948f1af090f65421964c23f3fcdddbb280918776c763f1571c4d3d27d0a17e7eea2c04a9d4decbb84ea6edccb675dcf09d015de6940027b8d72eda5c6b5234a6edbec3069efa7767dea571efb97410cee8790447bdfd859e2f9be40b14c965c65101b1425d7b6de5274f70585b82b967584f945cbfeaabbcb20141f45831d7211fedf169889f7d49dde4756bec5e678d2bb26cc074d1f1920b5c55341580cdc56cc2ebf4843e96f6ec19986cdefbf44d66873766bb50c32eb49469fc1d35c9284ac4", 0xc8}, {&(0x7f0000000180)="4a5a0f3374c4590d87026da0ae462f09670a58abd6597672a28c64b8a9132ed0c1747cbf45ed4ca2e56e7d3609ea0d9bbf05321de3a5afb98e3bdf77828a57465a88e0290c6a203e76686b6da7796bedc3ab6f3dee81c5bc0af0845a3a31fd34af434099a6b408d051fff11a60e09a89520ffd4a5d185c9cf5e813944d0510141a48da151331fcf756b8afe98ccb9cc14f44", 0x92}], 0x2, &(0x7f0000000040)=[@ip_ttl={{0x14, 0x0, 0x2, 0xa}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x740b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x3a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0xe0e0}]}}}], 0x38}, 0x0) 118.139398ms ago: executing program 1 (id=6816): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0xe0e0}]}}}], 0x38}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r4 = perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x80, 0x1, 0x3, 0x7, 0x6, 0x0, 0x3ff, 0x407a4, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x402, 0x101, 0x3, 0x240, 0xfffffff7, 0x1, 0x0, 0x400, 0x0, 0xb}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xd) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10001, 0x2, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x11, 0x2, 0x0) recvmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000180)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) write$cgroup_type(r3, 0x0, 0x0) 0s ago: executing program 0 (id=6817): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001f", 0x0, 0x104, 0x6000000000000000, 0xfc, 0x0, &(0x7f0000000400)="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"}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xb, [@restrict={0x10, 0x0, 0x0, 0xb, 0x4}, @func={0x8, 0x0, 0x0, 0xc, 0x3}, @enum64={0xb, 0x3, 0x0, 0x13, 0x0, 0x8, [{0x9, 0xffffffca, 0xfffffffe}, {0xa, 0x1dcc, 0x80000000}, {0xd, 0x7, 0x3}]}]}, {0x0, [0x61, 0x2e, 0x5f, 0x61, 0x5f, 0x5f, 0x2e, 0x30, 0x5f]}}, &(0x7f0000000580), 0x6b, 0x0, 0x0, 0x3, 0x10000, @value=r1}, 0x28) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x4, 0xff9, &(0x7f0000002500)=""/4089, 0x0, 0x68}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) openat$cgroup_type(r1, &(0x7f0000000580), 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)}, 0x4044004) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) kernel console output (not intermixed with test programs): 6236][T22571] [ 974.887990][T14602] Bluetooth: hci0: command 0x0406 tx timeout [ 975.459837][T22590] syzkaller0: entered promiscuous mode [ 975.465691][T22590] syzkaller0: entered allmulticast mode [ 978.021024][T22596] netlink: 'syz.0.5657': attribute type 13 has an invalid length. [ 978.029373][T22596] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5657'. [ 978.051001][T22596] erspan0: refused to change device tx_queue_len [ 978.725081][T22617] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5665'. [ 979.434901][T22626] netlink: 'syz.1.5669': attribute type 10 has an invalid length. [ 979.485179][T22626] team0: Device vxcan1 is of different type [ 979.718274][T22631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5670'. [ 979.746599][T22631] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5670'. [ 980.078980][T22637] netlink: 'syz.3.5674': attribute type 23 has an invalid length. [ 980.108990][T22637] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5674'. [ 981.002830][T22661] FAULT_INJECTION: forcing a failure. [ 981.002830][T22661] name failslab, interval 1, probability 0, space 0, times 0 [ 981.046278][T22661] CPU: 0 PID: 22661 Comm: syz.2.5673 Not tainted syzkaller #0 [ 981.053822][T22661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 981.063927][T22661] Call Trace: [ 981.067247][T22661] [ 981.070234][T22661] dump_stack_lvl+0x18c/0x250 [ 981.074977][T22661] ? show_regs_print_info+0x20/0x20 [ 981.080233][T22661] ? load_image+0x420/0x420 [ 981.084777][T22661] ? __might_sleep+0xe0/0xe0 [ 981.089414][T22661] ? __lock_acquire+0x7d80/0x7d80 [ 981.094505][T22661] should_fail_ex+0x394/0x4c0 [ 981.099256][T22661] should_failslab+0x9/0x20 [ 981.103820][T22661] slab_pre_alloc_hook+0x59/0x300 [ 981.108911][T22661] ? __fget_files+0x28/0x460 [ 981.113560][T22661] ? bpf_map_meta_alloc+0x12e/0x760 [ 981.118809][T22661] ? bpf_map_meta_alloc+0x12e/0x760 [ 981.124097][T22661] __kmem_cache_alloc_node+0x53/0x250 [ 981.129541][T22661] ? bpf_map_meta_alloc+0x12e/0x760 [ 981.134817][T22661] __kmalloc+0xa7/0x240 [ 981.139029][T22661] bpf_map_meta_alloc+0x12e/0x760 [ 981.144114][T22661] htab_of_map_alloc+0x38/0xc0 [ 981.148920][T22661] map_create+0x877/0x12f0 [ 981.153393][T22661] __sys_bpf+0x651/0x890 [ 981.157662][T22661] ? bpf_link_show_fdinfo+0x390/0x390 [ 981.163101][T22661] ? lock_chain_count+0x20/0x20 [ 981.168004][T22661] __x64_sys_bpf+0x7c/0x90 [ 981.172457][T22661] do_syscall_64+0x55/0xb0 [ 981.176912][T22661] ? clear_bhb_loop+0x40/0x90 [ 981.181611][T22661] ? clear_bhb_loop+0x40/0x90 [ 981.186304][T22661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 981.192230][T22661] RIP: 0033:0x7f7b9739ce59 [ 981.196670][T22661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.216298][T22661] RSP: 002b:00007f7b981ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 981.224733][T22661] RAX: ffffffffffffffda RBX: 00007f7b97615fa0 RCX: 00007f7b9739ce59 [ 981.232726][T22661] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 0000000000000000 [ 981.240725][T22661] RBP: 00007f7b981ef090 R08: 0000000000000000 R09: 0000000000000000 [ 981.248846][T22661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.256860][T22661] R13: 00007f7b97616038 R14: 00007f7b97615fa0 R15: 00007ffc19d95398 [ 981.264869][T22661] [ 983.068605][T22698] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5692'. [ 983.124640][T22698] bridge_slave_1: default FDB implementation only supports local addresses [ 983.508149][T22701] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5693'. [ 991.708974][T22809] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5730'. [ 992.644216][T22821] FAULT_INJECTION: forcing a failure. [ 992.644216][T22821] name failslab, interval 1, probability 0, space 0, times 0 [ 992.731823][T22821] CPU: 0 PID: 22821 Comm: syz.2.5735 Not tainted syzkaller #0 [ 992.739389][T22821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 992.749496][T22821] Call Trace: [ 992.752818][T22821] [ 992.755789][T22821] dump_stack_lvl+0x18c/0x250 [ 992.760550][T22821] ? show_regs_print_info+0x20/0x20 [ 992.765836][T22821] ? load_image+0x420/0x420 [ 992.770391][T22821] ? __might_sleep+0xe0/0xe0 [ 992.775025][T22821] ? __lock_acquire+0x7d80/0x7d80 [ 992.780113][T22821] should_fail_ex+0x394/0x4c0 [ 992.784847][T22821] should_failslab+0x9/0x20 [ 992.789406][T22821] slab_pre_alloc_hook+0x59/0x300 [ 992.794506][T22821] ? kvmalloc_node+0x70/0x180 [ 992.799249][T22821] ? kvmalloc_node+0x70/0x180 [ 992.803985][T22821] __kmem_cache_alloc_node+0x53/0x250 [ 992.809422][T22821] ? kvmalloc_node+0x70/0x180 [ 992.814153][T22821] __kmalloc_node+0xa6/0x240 [ 992.818809][T22821] kvmalloc_node+0x70/0x180 [ 992.823373][T22821] bpf_test_run_xdp_live+0x1e9/0x1b30 [ 992.828815][T22821] ? 0xffffffffa0004100 [ 992.833020][T22821] ? 0xffffffffa0004100 [ 992.837218][T22821] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 992.843160][T22821] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 992.849393][T22821] ? xdp_convert_md_to_buff+0x330/0x330 [ 992.855039][T22821] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 992.861344][T22821] ? _copy_from_user+0xa5/0xe0 [ 992.866166][T22821] ? bpf_test_init+0x119/0x140 [ 992.870985][T22821] ? xdp_convert_md_to_buff+0x5b/0x330 [ 992.876523][T22821] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 992.881966][T22821] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 992.889247][T22821] ? dev_put+0x80/0x80 [ 992.893393][T22821] ? dev_put+0x80/0x80 [ 992.897522][T22821] bpf_prog_test_run+0x31f/0x390 [ 992.902576][T22821] __sys_bpf+0x49d/0x890 [ 992.906887][T22821] ? bpf_link_show_fdinfo+0x390/0x390 [ 992.912376][T22821] ? lock_chain_count+0x20/0x20 [ 992.917287][T22821] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 992.923351][T22821] __x64_sys_bpf+0x7c/0x90 [ 992.927825][T22821] do_syscall_64+0x55/0xb0 [ 992.932301][T22821] ? clear_bhb_loop+0x40/0x90 [ 992.937031][T22821] ? clear_bhb_loop+0x40/0x90 [ 992.941780][T22821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 992.947769][T22821] RIP: 0033:0x7f7b9739ce59 [ 992.952249][T22821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.971928][T22821] RSP: 002b:00007f7b981ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 992.980397][T22821] RAX: ffffffffffffffda RBX: 00007f7b97615fa0 RCX: 00007f7b9739ce59 [ 992.988422][T22821] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 992.996471][T22821] RBP: 00007f7b981ef090 R08: 0000000000000000 R09: 0000000000000000 [ 993.004503][T22821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.012521][T22821] R13: 00007f7b97616038 R14: 00007f7b97615fa0 R15: 00007ffc19d95398 [ 993.020554][T22821] [ 993.287015][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.293398][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.847457][T22840] netlink: 'syz.3.5743': attribute type 10 has an invalid length. [ 994.973636][T22840] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 995.440252][T22855] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5747'. [ 995.466734][T22855] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5747'. [ 995.544008][T22855] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5747'. [ 995.608357][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 997.081226][T22879] netlink: 'syz.1.5757': attribute type 6 has an invalid length. [ 997.128411][T22879] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5757'. [ 1000.383239][T22940] netlink: 'syz.2.5781': attribute type 1 has an invalid length. [ 1000.398469][T22940] netlink: 'syz.2.5781': attribute type 4 has an invalid length. [ 1000.408488][T22940] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5781'. [ 1000.476982][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 1000.805341][T22950] FAULT_INJECTION: forcing a failure. [ 1000.805341][T22950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1000.823159][T22950] CPU: 0 PID: 22950 Comm: syz.0.5785 Not tainted syzkaller #0 [ 1000.830780][T22950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1000.840882][T22950] Call Trace: [ 1000.844215][T22950] [ 1000.847189][T22950] dump_stack_lvl+0x18c/0x250 [ 1000.851929][T22950] ? show_regs_print_info+0x20/0x20 [ 1000.857180][T22950] ? load_image+0x420/0x420 [ 1000.861720][T22950] ? __might_fault+0xaa/0x120 [ 1000.866437][T22950] ? __lock_acquire+0x7d80/0x7d80 [ 1000.871513][T22950] should_fail_ex+0x394/0x4c0 [ 1000.876249][T22950] _copy_from_iter+0x1cd/0x1290 [ 1000.881149][T22950] ? rep_movs_alternative+0x4a/0x90 [ 1000.886416][T22950] ? copyout_mc+0x70/0x70 [ 1000.890800][T22950] ? copyout_mc+0x70/0x70 [ 1000.895183][T22950] ? __virt_addr_valid+0x10c/0x380 [ 1000.900362][T22950] ? page_copy_sane+0x16a/0x270 [ 1000.905270][T22950] copy_page_from_iter+0x7b/0x100 [ 1000.910348][T22950] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 1000.916205][T22950] tun_get_user+0xbc2/0x3d40 [ 1000.920860][T22950] ? aa_file_perm+0x11b/0xee0 [ 1000.925588][T22950] ? aa_file_perm+0x3e3/0xee0 [ 1000.930326][T22950] ? rcu_read_unlock+0xa0/0xa0 [ 1000.935156][T22950] ? tun_get+0x1c/0x2e0 [ 1000.939361][T22950] ? __lock_acquire+0x7d80/0x7d80 [ 1000.944439][T22950] ? tun_get+0x1c/0x2e0 [ 1000.948653][T22950] tun_chr_write_iter+0x119/0x200 [ 1000.953740][T22950] vfs_write+0x474/0x9a0 [ 1000.958030][T22950] ? file_end_write+0x250/0x250 [ 1000.962933][T22950] ? __fget_files+0x3fc/0x460 [ 1000.967676][T22950] ? __fdget_pos+0x1d8/0x330 [ 1000.972312][T22950] ? ksys_write+0x74/0x260 [ 1000.976787][T22950] ksys_write+0x151/0x260 [ 1000.981166][T22950] ? __ia32_sys_read+0x90/0x90 [ 1000.986031][T22950] ? lockdep_hardirqs_on+0x98/0x150 [ 1000.991297][T22950] do_syscall_64+0x55/0xb0 [ 1000.995759][T22950] ? clear_bhb_loop+0x40/0x90 [ 1001.000476][T22950] ? clear_bhb_loop+0x40/0x90 [ 1001.005175][T22950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.011092][T22950] RIP: 0033:0x7f0769f9ce59 [ 1001.015613][T22950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.035275][T22950] RSP: 002b:00007f076ad76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1001.043716][T22950] RAX: ffffffffffffffda RBX: 00007f076a215fa0 RCX: 00007f0769f9ce59 [ 1001.051709][T22950] RDX: 000000000000fdef RSI: 0000200000000980 RDI: 00000000000000c8 [ 1001.059705][T22950] RBP: 00007f076ad76090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.067705][T22950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1001.075692][T22950] R13: 00007f076a216038 R14: 00007f076a215fa0 R15: 00007ffc3dcfc768 [ 1001.083702][T22950] [ 1002.041198][T22977] FAULT_INJECTION: forcing a failure. [ 1002.041198][T22977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1002.074044][T22977] CPU: 1 PID: 22977 Comm: syz.0.5792 Not tainted syzkaller #0 [ 1002.081673][T22977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1002.091777][T22977] Call Trace: [ 1002.095095][T22977] [ 1002.098067][T22977] dump_stack_lvl+0x18c/0x250 [ 1002.102804][T22977] ? show_regs_print_info+0x20/0x20 [ 1002.108055][T22977] ? load_image+0x420/0x420 [ 1002.112603][T22977] ? __lock_acquire+0x7d80/0x7d80 [ 1002.117675][T22977] ? snprintf+0xe9/0x140 [ 1002.121969][T22977] should_fail_ex+0x394/0x4c0 [ 1002.126723][T22977] _copy_to_user+0x2f/0xa0 [ 1002.131221][T22977] simple_read_from_buffer+0xe7/0x150 [ 1002.136663][T22977] proc_fail_nth_read+0x1e8/0x260 [ 1002.141744][T22977] ? proc_fault_inject_write+0x360/0x360 [ 1002.147443][T22977] ? fsnotify_perm+0x271/0x5e0 [ 1002.152254][T22977] ? proc_fault_inject_write+0x360/0x360 [ 1002.157945][T22977] vfs_read+0x298/0x990 [ 1002.162177][T22977] ? kernel_read+0x1e0/0x1e0 [ 1002.166827][T22977] ? __fget_files+0x28/0x460 [ 1002.171489][T22977] ? __fget_files+0x3fc/0x460 [ 1002.176236][T22977] ? __fdget_pos+0x2a3/0x330 [ 1002.180894][T22977] ? ksys_read+0x74/0x260 [ 1002.185278][T22977] ksys_read+0x151/0x260 [ 1002.189576][T22977] ? vfs_write+0x9a0/0x9a0 [ 1002.194061][T22977] ? lockdep_hardirqs_on+0x98/0x150 [ 1002.199321][T22977] do_syscall_64+0x55/0xb0 [ 1002.203834][T22977] ? clear_bhb_loop+0x40/0x90 [ 1002.208565][T22977] ? clear_bhb_loop+0x40/0x90 [ 1002.213292][T22977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1002.219244][T22977] RIP: 0033:0x7f0769f5d68e [ 1002.223716][T22977] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1002.243394][T22977] RSP: 002b:00007f07681f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1002.251869][T22977] RAX: ffffffffffffffda RBX: 00007f07681f66c0 RCX: 00007f0769f5d68e [ 1002.259900][T22977] RDX: 000000000000000f RSI: 00007f07681f60a0 RDI: 000000000000000b [ 1002.267961][T22977] RBP: 00007f07681f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.275984][T22977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1002.284006][T22977] R13: 00007f076a216128 R14: 00007f076a216090 R15: 00007ffc3dcfc768 [ 1002.292056][T22977] [ 1007.231886][T23034] FAULT_INJECTION: forcing a failure. [ 1007.231886][T23034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1007.265030][T23034] CPU: 0 PID: 23034 Comm: syz.0.5816 Not tainted syzkaller #0 [ 1007.272584][T23034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1007.282692][T23034] Call Trace: [ 1007.286017][T23034] [ 1007.289004][T23034] dump_stack_lvl+0x18c/0x250 [ 1007.293750][T23034] ? show_regs_print_info+0x20/0x20 [ 1007.299005][T23034] ? load_image+0x420/0x420 [ 1007.303567][T23034] ? __might_fault+0xaa/0x120 [ 1007.308305][T23034] ? __lock_acquire+0x7d80/0x7d80 [ 1007.313387][T23034] should_fail_ex+0x394/0x4c0 [ 1007.318126][T23034] _copy_from_iter+0x1cd/0x1290 [ 1007.323031][T23034] ? rep_movs_alternative+0x4a/0x90 [ 1007.328291][T23034] ? copyout_mc+0x70/0x70 [ 1007.332678][T23034] ? copyout_mc+0x70/0x70 [ 1007.337076][T23034] ? __virt_addr_valid+0x10c/0x380 [ 1007.342247][T23034] ? page_copy_sane+0x16a/0x270 [ 1007.347179][T23034] copy_page_from_iter+0x7b/0x100 [ 1007.352267][T23034] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 1007.358135][T23034] tun_get_user+0xbc2/0x3d40 [ 1007.362794][T23034] ? trace_event_raw_event_lock+0x150/0x240 [ 1007.368757][T23034] ? aa_file_perm+0x11b/0xee0 [ 1007.373507][T23034] ? aa_file_perm+0x3e3/0xee0 [ 1007.378251][T23034] ? rcu_read_unlock+0xa0/0xa0 [ 1007.383091][T23034] ? tun_get+0x1c/0x2e0 [ 1007.387312][T23034] ? __lock_acquire+0x7d80/0x7d80 [ 1007.392405][T23034] ? tun_get+0x1c/0x2e0 [ 1007.396629][T23034] tun_chr_write_iter+0x119/0x200 [ 1007.401768][T23034] vfs_write+0x474/0x9a0 [ 1007.406084][T23034] ? file_end_write+0x250/0x250 [ 1007.411000][T23034] ? __fget_files+0x3fc/0x460 [ 1007.415750][T23034] ? __fdget_pos+0x1d8/0x330 [ 1007.420380][T23034] ? ksys_write+0x74/0x260 [ 1007.424821][T23034] ksys_write+0x151/0x260 [ 1007.429173][T23034] ? __ia32_sys_read+0x90/0x90 [ 1007.433964][T23034] ? lockdep_hardirqs_on+0x98/0x150 [ 1007.439187][T23034] do_syscall_64+0x55/0xb0 [ 1007.443618][T23034] ? clear_bhb_loop+0x40/0x90 [ 1007.448307][T23034] ? clear_bhb_loop+0x40/0x90 [ 1007.453005][T23034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1007.458916][T23034] RIP: 0033:0x7f0769f9ce59 [ 1007.463346][T23034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.483017][T23034] RSP: 002b:00007f076ad76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1007.491461][T23034] RAX: ffffffffffffffda RBX: 00007f076a215fa0 RCX: 00007f0769f9ce59 [ 1007.499459][T23034] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 00000000000000c8 [ 1007.507456][T23034] RBP: 00007f076ad76090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.515469][T23034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1007.523474][T23034] R13: 00007f076a216038 R14: 00007f076a215fa0 R15: 00007ffc3dcfc768 [ 1007.531537][T23034] [ 1012.660371][T23101] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1013.032571][T23112] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.5839'. [ 1013.062953][T23112] netlink: 'syz.1.5839': attribute type 2 has an invalid length. [ 1013.114181][T23112] netlink: 'syz.1.5839': attribute type 7 has an invalid length. [ 1013.420928][T23117] netlink: 'syz.3.5842': attribute type 29 has an invalid length. [ 1013.450863][T23117] netlink: 'syz.3.5842': attribute type 29 has an invalid length. [ 1013.477026][T23117] netlink: 'syz.3.5842': attribute type 29 has an invalid length. [ 1013.493403][T23117] netlink: 'syz.3.5842': attribute type 29 has an invalid length. [ 1013.523576][T23117] netlink: 'syz.3.5842': attribute type 29 has an invalid length. [ 1013.652639][T23124] netlink: 'syz.0.5845': attribute type 39 has an invalid length. [ 1013.892977][T23133] sit0: left promiscuous mode [ 1014.054288][T23139] netlink: 118300 bytes leftover after parsing attributes in process `syz.1.5848'. [ 1014.396109][T23141] sit0: entered promiscuous mode [ 1014.557597][T23154] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.5852'. [ 1014.581451][T23159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5852'. [ 1015.178561][T14602] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 1015.369978][T23188] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1015.537660][T23194] @0Ù: renamed from bond_slave_1 (while UP) [ 1015.633719][T23192] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.5867'. [ 1015.689485][T23192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5867'. [ 1015.703785][T23198] netlink: 'syz.0.5868': attribute type 3 has an invalid length. [ 1015.723367][T23198] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5868'. [ 1016.220984][T23208] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5872'. [ 1016.230726][T23208] netlink: 'syz.3.5872': attribute type 2 has an invalid length. [ 1016.524620][T23220] IPv6: Can't replace route, no match found [ 1016.703093][T23222] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1017.199618][T14602] Bluetooth: hci4: command 0x0406 tx timeout [ 1017.363014][T23242] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.5882'. [ 1017.529632][T23244] FAULT_INJECTION: forcing a failure. [ 1017.529632][T23244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1017.549004][T23244] CPU: 1 PID: 23244 Comm: syz.3.5883 Not tainted syzkaller #0 [ 1017.556549][T23244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1017.566716][T23244] Call Trace: [ 1017.570063][T23244] [ 1017.573037][T23244] dump_stack_lvl+0x18c/0x250 [ 1017.577778][T23244] ? show_regs_print_info+0x20/0x20 [ 1017.583036][T23244] ? load_image+0x420/0x420 [ 1017.587613][T23244] ? __might_fault+0xaa/0x120 [ 1017.592341][T23244] ? __lock_acquire+0x7d80/0x7d80 [ 1017.597427][T23244] should_fail_ex+0x394/0x4c0 [ 1017.602178][T23244] _copy_from_user+0x2f/0xe0 [ 1017.606836][T23244] ___sys_recvmsg+0x174/0x590 [ 1017.611568][T23244] ? __sys_recvmsg+0x2a0/0x2a0 [ 1017.616386][T23244] ? lock_chain_count+0x20/0x20 [ 1017.621301][T23244] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1017.627531][T23244] __x64_sys_recvmsg+0x21e/0x2f0 [ 1017.632526][T23244] ? ___sys_recvmsg+0x590/0x590 [ 1017.637452][T23244] ? lockdep_hardirqs_on+0x98/0x150 [ 1017.642711][T23244] do_syscall_64+0x55/0xb0 [ 1017.647180][T23244] ? clear_bhb_loop+0x40/0x90 [ 1017.651902][T23244] ? clear_bhb_loop+0x40/0x90 [ 1017.656618][T23244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1017.662548][T23244] RIP: 0033:0x7f7edc19ce59 [ 1017.666987][T23244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.686619][T23244] RSP: 002b:00007f7edcfd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1017.695059][T23244] RAX: ffffffffffffffda RBX: 00007f7edc416090 RCX: 00007f7edc19ce59 [ 1017.703162][T23244] RDX: 0000000000002002 RSI: 0000200000000480 RDI: 0000000000000007 [ 1017.711173][T23244] RBP: 00007f7edcfd9090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.719200][T23244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.727227][T23244] R13: 00007f7edc416128 R14: 00007f7edc416090 R15: 00007ffd3de236e8 [ 1017.735235][T23244] [ 1017.804413][T23246] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.5884'. [ 1018.375678][T23266] FAULT_INJECTION: forcing a failure. [ 1018.375678][T23266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.390773][T23266] CPU: 1 PID: 23266 Comm: syz.3.5893 Not tainted syzkaller #0 [ 1018.398349][T23266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1018.408509][T23266] Call Trace: [ 1018.411872][T23266] [ 1018.414889][T23266] dump_stack_lvl+0x18c/0x250 [ 1018.419683][T23266] ? show_regs_print_info+0x20/0x20 [ 1018.425009][T23266] ? load_image+0x420/0x420 [ 1018.429622][T23266] ? __lock_acquire+0x7d80/0x7d80 [ 1018.434867][T23266] should_fail_ex+0x394/0x4c0 [ 1018.439663][T23266] _copy_from_user+0x2f/0xe0 [ 1018.444354][T23266] __copy_msghdr+0x388/0x560 [ 1018.449060][T23266] ___sys_sendmsg+0x214/0x360 [ 1018.453824][T23266] ? __sys_sendmsg+0x2b0/0x2b0 [ 1018.458711][T23266] ? __lock_acquire+0x7d80/0x7d80 [ 1018.463869][T23266] __se_sys_sendmsg+0x1d0/0x2c0 [ 1018.468785][T23266] ? __x64_sys_sendmsg+0x80/0x80 [ 1018.473816][T23266] ? lockdep_hardirqs_on+0x98/0x150 [ 1018.479114][T23266] do_syscall_64+0x55/0xb0 [ 1018.483573][T23266] ? clear_bhb_loop+0x40/0x90 [ 1018.488296][T23266] ? clear_bhb_loop+0x40/0x90 [ 1018.493021][T23266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1018.498980][T23266] RIP: 0033:0x7f7edc19ce59 [ 1018.503446][T23266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.523101][T23266] RSP: 002b:00007f7edcffa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1018.531580][T23266] RAX: ffffffffffffffda RBX: 00007f7edc415fa0 RCX: 00007f7edc19ce59 [ 1018.539599][T23266] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000005 [ 1018.547616][T23266] RBP: 00007f7edcffa090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.555630][T23266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.563649][T23266] R13: 00007f7edc416038 R14: 00007f7edc415fa0 R15: 00007ffd3de236e8 [ 1018.571712][T23266] [ 1019.045402][T23270] __nla_validate_parse: 1 callbacks suppressed [ 1019.045442][T23270] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5895'. [ 1019.143368][T23270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5895'. [ 1019.408447][T14602] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 1019.448086][T23290] IPv6: Can't replace route, no match found [ 1019.589095][T23295] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5904'. [ 1019.598618][T23295] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5904'. [ 1020.325982][T23319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5912'. [ 1020.395052][T23321] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5913'. [ 1020.414380][T23321] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5913'. [ 1020.436590][T23321] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5913'. [ 1020.460523][T23321] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5913'. [ 1020.994465][T23339] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5917'. [ 1021.386375][ T5779] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 1021.436734][T14602] Bluetooth: hci3: command 0x0406 tx timeout [ 1022.480032][T23383] validate_nla: 3 callbacks suppressed [ 1022.480053][T23383] netlink: 'syz.2.5932': attribute type 1 has an invalid length. [ 1022.496585][T23383] netlink: 'syz.2.5932': attribute type 3 has an invalid length. [ 1022.945213][T23402] veth0_to_bond: entered promiscuous mode [ 1023.436529][T14602] Bluetooth: hci1: command 0x0406 tx timeout [ 1024.294254][T23444] FAULT_INJECTION: forcing a failure. [ 1024.294254][T23444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.313110][T23442] netlink: 'syz.2.5954': attribute type 21 has an invalid length. [ 1024.317042][T23444] CPU: 0 PID: 23444 Comm: syz.3.5955 Not tainted syzkaller #0 [ 1024.328599][T23444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1024.338700][T23444] Call Trace: [ 1024.342026][T23444] [ 1024.345002][T23444] dump_stack_lvl+0x18c/0x250 [ 1024.349735][T23444] ? show_regs_print_info+0x20/0x20 [ 1024.354981][T23444] ? load_image+0x420/0x420 [ 1024.359531][T23444] ? __might_fault+0xaa/0x120 [ 1024.364264][T23444] ? __lock_acquire+0x7d80/0x7d80 [ 1024.369338][T23444] should_fail_ex+0x394/0x4c0 [ 1024.371013][T23442] IPv6: NLM_F_CREATE should be specified when creating new route [ 1024.374057][T23444] _copy_from_user+0x2f/0xe0 [ 1024.374089][T23444] ___sys_sendmsg+0x1c7/0x360 [ 1024.374123][T23444] ? __sys_sendmsg+0x2b0/0x2b0 [ 1024.374194][T23444] __se_sys_sendmsg+0x1d0/0x2c0 [ 1024.374228][T23444] ? __x64_sys_sendmsg+0x80/0x80 [ 1024.374269][T23444] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1024.374304][T23444] do_syscall_64+0x55/0xb0 [ 1024.374327][T23444] ? clear_bhb_loop+0x40/0x90 [ 1024.374346][T23444] ? clear_bhb_loop+0x40/0x90 [ 1024.374368][T23444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1024.374398][T23444] RIP: 0033:0x7f7edc19ce59 [ 1024.374418][T23444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.374436][T23444] RSP: 002b:00007f7edcffa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1024.374459][T23444] RAX: ffffffffffffffda RBX: 00007f7edc415fa0 RCX: 00007f7edc19ce59 [ 1024.374474][T23444] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 1024.374489][T23444] RBP: 00007f7edcffa090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.374502][T23444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.374515][T23444] R13: 00007f7edc416038 R14: 00007f7edc415fa0 R15: 00007ffd3de236e8 [ 1024.374545][T23444] [ 1024.883956][T23456] netlink: 'syz.0.5958': attribute type 21 has an invalid length. [ 1024.933146][T23456] IPv6: NLM_F_CREATE should be specified when creating new route [ 1025.582181][T23480] netlink: 'syz.3.5966': attribute type 10 has an invalid length. [ 1025.598458][T23480] __nla_validate_parse: 12 callbacks suppressed [ 1025.598477][T23480] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5966'. [ 1025.621545][T23480] batman_adv: batadv0: Adding interface: veth0_vlan [ 1025.630219][T23480] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.695019][T23480] batman_adv: batadv0: Interface activated: veth0_vlan [ 1026.164800][T23493] netlink: 'syz.3.5972': attribute type 15 has an invalid length. [ 1026.181744][T23493] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5972'. [ 1026.292776][T23493] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1026.340463][T23493] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5972'. [ 1026.939363][T23502] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5975'. [ 1026.954800][T23502] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5975'. [ 1026.998283][T23505] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5975'. [ 1027.616270][T23525] FAULT_INJECTION: forcing a failure. [ 1027.616270][T23525] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.661019][T23525] CPU: 1 PID: 23525 Comm: syz.1.5982 Not tainted syzkaller #0 [ 1027.668582][T23525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1027.678688][T23525] Call Trace: [ 1027.682099][T23525] [ 1027.685081][T23525] dump_stack_lvl+0x18c/0x250 [ 1027.689822][T23525] ? show_regs_print_info+0x20/0x20 [ 1027.695095][T23525] ? load_image+0x420/0x420 [ 1027.699664][T23525] ? __might_sleep+0xe0/0xe0 [ 1027.704317][T23525] ? __lock_acquire+0x7d80/0x7d80 [ 1027.709419][T23525] should_fail_ex+0x394/0x4c0 [ 1027.714209][T23525] should_failslab+0x9/0x20 [ 1027.718777][T23525] slab_pre_alloc_hook+0x59/0x300 [ 1027.723874][T23525] ? kvmalloc_node+0x70/0x180 [ 1027.728642][T23525] ? kvmalloc_node+0x70/0x180 [ 1027.733374][T23525] __kmem_cache_alloc_node+0x53/0x250 [ 1027.738814][T23525] ? kvmalloc_node+0x70/0x180 [ 1027.743549][T23525] __kmalloc_node+0xa6/0x240 [ 1027.748204][T23525] kvmalloc_node+0x70/0x180 [ 1027.752760][T23525] page_pool_create+0x1eb/0x5c0 [ 1027.757664][T23525] bpf_test_run_xdp_live+0x203/0x1b30 [ 1027.763130][T23525] ? 0xffffffffa0004100 [ 1027.767329][T23525] ? 0xffffffffa0004100 [ 1027.771530][T23525] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 1027.777496][T23525] ? xdp_convert_md_to_buff+0x330/0x330 [ 1027.783152][T23525] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1027.789460][T23525] ? _copy_from_user+0xa5/0xe0 [ 1027.794275][T23525] ? bpf_test_init+0x119/0x140 [ 1027.799091][T23525] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1027.804614][T23525] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 1027.810052][T23525] ? __lock_acquire+0x7d80/0x7d80 [ 1027.815143][T23525] ? dev_put+0x80/0x80 [ 1027.819280][T23525] ? dev_put+0x80/0x80 [ 1027.823438][T23525] bpf_prog_test_run+0x31f/0x390 [ 1027.828430][T23525] __sys_bpf+0x49d/0x890 [ 1027.832825][T23525] ? bpf_link_show_fdinfo+0x390/0x390 [ 1027.838267][T23525] ? lock_chain_count+0x20/0x20 [ 1027.843205][T23525] __x64_sys_bpf+0x7c/0x90 [ 1027.847672][T23525] do_syscall_64+0x55/0xb0 [ 1027.852144][T23525] ? clear_bhb_loop+0x40/0x90 [ 1027.856869][T23525] ? clear_bhb_loop+0x40/0x90 [ 1027.861597][T23525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1027.867547][T23525] RIP: 0033:0x7f0c8e79ce59 [ 1027.872007][T23525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.891670][T23525] RSP: 002b:00007f0c8f681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1027.900143][T23525] RAX: ffffffffffffffda RBX: 00007f0c8ea15fa0 RCX: 00007f0c8e79ce59 [ 1027.908174][T23525] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1027.916278][T23525] RBP: 00007f0c8f681090 R08: 0000000000000000 R09: 0000000000000000 [ 1027.924305][T23525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1027.932322][T23525] R13: 00007f0c8ea16038 R14: 00007f0c8ea15fa0 R15: 00007ffe5cf0b068 [ 1027.940383][T23525] [ 1028.016639][T23525] page_pool_create() gave up with errno -12 [ 1030.759570][T23586] À: port 1(ªªªªªª) entered blocking state [ 1030.784422][T23586] À: port 1(ªªªªªª) entered disabled state [ 1030.812839][T23586] ªªªªªª: entered allmulticast mode [ 1030.829558][T23586] veth0_vlan: entered allmulticast mode [ 1030.866369][T23586] ªªªªªª: entered promiscuous mode [ 1030.894867][T23592] FAULT_INJECTION: forcing a failure. [ 1030.894867][T23592] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.933966][T23592] CPU: 0 PID: 23592 Comm: syz.1.6006 Not tainted syzkaller #0 [ 1030.941519][T23592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1030.951633][T23592] Call Trace: [ 1030.954966][T23592] [ 1030.957943][T23592] dump_stack_lvl+0x18c/0x250 [ 1030.962719][T23592] ? show_regs_print_info+0x20/0x20 [ 1030.967995][T23592] ? load_image+0x420/0x420 [ 1030.972570][T23592] should_fail_ex+0x394/0x4c0 [ 1030.977313][T23592] should_failslab+0x9/0x20 [ 1030.981985][T23592] slab_pre_alloc_hook+0x59/0x300 [ 1030.987078][T23592] ? find_exception+0x175/0xa30 [ 1030.992002][T23592] kmem_cache_alloc+0x5a/0x2c0 [ 1030.996844][T23592] ? dst_alloc+0x105/0x170 [ 1031.001361][T23592] dst_alloc+0x105/0x170 [ 1031.005694][T23592] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 1031.011823][T23592] ? ip_route_output_key_hash+0x13d/0x330 [ 1031.017615][T23592] ip_route_output_key_hash+0x1f3/0x330 [ 1031.023217][T23592] ? ip_route_input_rcu+0x3120/0x3120 [ 1031.028647][T23592] ? crng_make_state+0x350/0x700 [ 1031.033635][T23592] ? lockdep_hardirqs_on+0x98/0x150 [ 1031.038905][T23592] ? crng_make_state+0x411/0x700 [ 1031.043891][T23592] ? init_timer_key+0x41/0x2a0 [ 1031.048732][T23592] ip_route_output_flow+0x2a/0x150 [ 1031.053912][T23592] sctp_v4_get_dst+0x3e8/0x11d0 [ 1031.058848][T23592] ? sctp_v4_xmit+0xd10/0xd10 [ 1031.063577][T23592] ? _get_random_bytes+0x1e8/0x250 [ 1031.068764][T23592] ? _raw_spin_unlock+0x40/0x40 [ 1031.073689][T23592] ? dst_release+0x72/0x1a0 [ 1031.078262][T23592] sctp_transport_route+0x112/0x2b0 [ 1031.083544][T23592] sctp_assoc_add_peer+0x629/0x1350 [ 1031.088825][T23592] sctp_connect_new_asoc+0x323/0x6a0 [ 1031.094174][T23592] ? __sctp_connect+0xd80/0xd80 [ 1031.099076][T23592] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1031.104512][T23592] ? _local_bh_enable+0xa0/0xa0 [ 1031.109417][T23592] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1031.115300][T23592] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1031.121171][T23592] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1031.126776][T23592] ? security_sctp_bind_connect+0x89/0xb0 [ 1031.132558][T23592] sctp_sendmsg+0x1519/0x27b0 [ 1031.137403][T23592] ? sctp_getsockopt+0xb60/0xb60 [ 1031.142440][T23592] ? aa_sk_perm+0x83c/0x970 [ 1031.147019][T23592] ? aa_af_perm+0x330/0x330 [ 1031.151573][T23592] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1031.158065][T23592] ? sock_rps_record_flow+0x19/0x3f0 [ 1031.163422][T23592] ? inet_sendmsg+0x7e/0x2a0 [ 1031.168079][T23592] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1031.173431][T23592] ? inet_send_prepare+0x250/0x250 [ 1031.178618][T23592] ____sys_sendmsg+0x61b/0x980 [ 1031.183457][T23592] ? __asan_memset+0x22/0x40 [ 1031.188122][T23592] ? __sys_sendmsg_sock+0x30/0x30 [ 1031.193202][T23592] ? __import_iovec+0x5f2/0x850 [ 1031.198117][T23592] ? import_iovec+0x73/0xa0 [ 1031.202713][T23592] ___sys_sendmsg+0x2a6/0x360 [ 1031.207473][T23592] ? __sys_sendmsg+0x2b0/0x2b0 [ 1031.212309][T23592] ? __lock_acquire+0x7d80/0x7d80 [ 1031.217422][T23592] __se_sys_sendmsg+0x1d0/0x2c0 [ 1031.222335][T23592] ? __x64_sys_sendmsg+0x80/0x80 [ 1031.227367][T23592] ? lockdep_hardirqs_on+0x98/0x150 [ 1031.232638][T23592] do_syscall_64+0x55/0xb0 [ 1031.237109][T23592] ? clear_bhb_loop+0x40/0x90 [ 1031.241835][T23592] ? clear_bhb_loop+0x40/0x90 [ 1031.246567][T23592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1031.252519][T23592] RIP: 0033:0x7f0c8e79ce59 [ 1031.256986][T23592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.276661][T23592] RSP: 002b:00007f0c8f681028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1031.285130][T23592] RAX: ffffffffffffffda RBX: 00007f0c8ea15fa0 RCX: 00007f0c8e79ce59 [ 1031.293152][T23592] RDX: 00000000000080d1 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1031.301167][T23592] RBP: 00007f0c8f681090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.309221][T23592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.317250][T23592] R13: 00007f0c8ea16038 R14: 00007f0c8ea15fa0 R15: 00007ffe5cf0b068 [ 1031.325298][T23592] [ 1031.396691][T23595] netlink: 'syz.3.6003': attribute type 4 has an invalid length. [ 1031.413947][T23595] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6003'. [ 1033.219679][T23634] tun0: tun_chr_ioctl cmd 1074025678 [ 1033.225477][T23634] tun0: group set to 0 [ 1033.414300][T23640] FAULT_INJECTION: forcing a failure. [ 1033.414300][T23640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.462101][T23640] CPU: 0 PID: 23640 Comm: syz.1.6022 Not tainted syzkaller #0 [ 1033.469688][T23640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1033.479804][T23640] Call Trace: [ 1033.483133][T23640] [ 1033.486117][T23640] dump_stack_lvl+0x18c/0x250 [ 1033.490855][T23640] ? show_regs_print_info+0x20/0x20 [ 1033.496109][T23640] ? load_image+0x420/0x420 [ 1033.500670][T23640] ? __might_fault+0xaa/0x120 [ 1033.505402][T23640] ? __lock_acquire+0x7d80/0x7d80 [ 1033.510488][T23640] should_fail_ex+0x394/0x4c0 [ 1033.515239][T23640] _copy_from_user+0x2f/0xe0 [ 1033.519913][T23640] kstrtouint_from_user+0xde/0x170 [ 1033.525097][T23640] ? kstrtol_from_user+0x190/0x190 [ 1033.530288][T23640] proc_fail_nth_write+0x8f/0x250 [ 1033.535371][T23640] ? proc_fail_nth_read+0x260/0x260 [ 1033.540641][T23640] ? proc_fail_nth_read+0x260/0x260 [ 1033.545903][T23640] vfs_write+0x299/0x9a0 [ 1033.550212][T23640] ? file_end_write+0x250/0x250 [ 1033.555144][T23640] ? __fget_files+0x28/0x460 [ 1033.559796][T23640] ? __fget_files+0x3fc/0x460 [ 1033.564546][T23640] ? __fdget_pos+0x2a3/0x330 [ 1033.569193][T23640] ? ksys_write+0x74/0x260 [ 1033.573688][T23640] ksys_write+0x151/0x260 [ 1033.578100][T23640] ? __ia32_sys_read+0x90/0x90 [ 1033.582944][T23640] ? lockdep_hardirqs_on+0x98/0x150 [ 1033.588225][T23640] do_syscall_64+0x55/0xb0 [ 1033.592704][T23640] ? clear_bhb_loop+0x40/0x90 [ 1033.597438][T23640] ? clear_bhb_loop+0x40/0x90 [ 1033.602166][T23640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1033.608151][T23640] RIP: 0033:0x7f0c8e75d68e [ 1033.612622][T23640] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1033.632335][T23640] RSP: 002b:00007f0c8f680fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1033.640815][T23640] RAX: ffffffffffffffda RBX: 00007f0c8f6816c0 RCX: 00007f0c8e75d68e [ 1033.648839][T23640] RDX: 0000000000000001 RSI: 00007f0c8f6810a0 RDI: 0000000000000008 [ 1033.656888][T23640] RBP: 00007f0c8f681090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.664915][T23640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1033.672934][T23640] R13: 00007f0c8ea16038 R14: 00007f0c8ea15fa0 R15: 00007ffe5cf0b068 [ 1033.680980][T23640] [ 1034.954470][T23674] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6032'. [ 1035.029188][T23673] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.6032'. [ 1035.144663][T23678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1035.152301][T23678] IPv6: NLM_F_CREATE should be set when creating new route [ 1035.160078][T23678] IPv6: NLM_F_CREATE should be set when creating new route [ 1035.167661][T23678] IPv6: NLM_F_CREATE should be set when creating new route [ 1035.197786][T23682] netlink: 763 bytes leftover after parsing attributes in process `syz.3.6034'. [ 1035.212842][T23678] netlink: 'syz.0.6033': attribute type 9 has an invalid length. [ 1035.221832][T23678] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6033'. [ 1035.482598][T23683] netlink: 'syz.0.6033': attribute type 9 has an invalid length. [ 1035.497383][T23683] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6033'. [ 1035.587927][T23690] netlink: 'syz.2.6037': attribute type 10 has an invalid length. [ 1035.601389][T23690] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6037'. [ 1035.890375][T23697] FAULT_INJECTION: forcing a failure. [ 1035.890375][T23697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1035.937371][T23697] CPU: 0 PID: 23697 Comm: syz.0.6040 Not tainted syzkaller #0 [ 1035.944923][T23697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1035.955012][T23697] Call Trace: [ 1035.958320][T23697] [ 1035.961308][T23697] dump_stack_lvl+0x18c/0x250 [ 1035.966019][T23697] ? show_regs_print_info+0x20/0x20 [ 1035.971252][T23697] ? load_image+0x420/0x420 [ 1035.975781][T23697] ? __might_fault+0xaa/0x120 [ 1035.980482][T23697] ? __lock_acquire+0x7d80/0x7d80 [ 1035.985539][T23697] should_fail_ex+0x394/0x4c0 [ 1035.990258][T23697] _copy_from_iter+0x1cd/0x1290 [ 1035.995154][T23697] ? rcu_is_watching+0x15/0xb0 [ 1035.999952][T23697] ? copyout_mc+0x70/0x70 [ 1036.004322][T23697] ? __virt_addr_valid+0x10c/0x380 [ 1036.009466][T23697] ? __virt_addr_valid+0x10c/0x380 [ 1036.014617][T23697] ? __virt_addr_valid+0x10c/0x380 [ 1036.019765][T23697] ? __check_object_size+0x4fc/0xa40 [ 1036.025075][T23697] netlink_sendmsg+0x76b/0xbf0 [ 1036.029878][T23697] ? netlink_getsockopt+0x590/0x590 [ 1036.035130][T23697] ? aa_sock_msg_perm+0x94/0x150 [ 1036.040101][T23697] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1036.045426][T23697] ? security_socket_sendmsg+0x80/0xa0 [ 1036.050909][T23697] ? netlink_getsockopt+0x590/0x590 [ 1036.056149][T23697] ____sys_sendmsg+0x61b/0x980 [ 1036.060950][T23697] ? __asan_memset+0x22/0x40 [ 1036.065574][T23697] ? __sys_sendmsg_sock+0x30/0x30 [ 1036.070621][T23697] ? __import_iovec+0x5f2/0x850 [ 1036.075515][T23697] ? import_iovec+0x73/0xa0 [ 1036.080046][T23697] ___sys_sendmsg+0x2a6/0x360 [ 1036.084748][T23697] ? get_pid_task+0x20/0x1e0 [ 1036.089367][T23697] ? __sys_sendmsg+0x2b0/0x2b0 [ 1036.094173][T23697] ? __lock_acquire+0x7d80/0x7d80 [ 1036.099243][T23697] __se_sys_sendmsg+0x1d0/0x2c0 [ 1036.104129][T23697] ? __x64_sys_sendmsg+0x80/0x80 [ 1036.109106][T23697] ? lockdep_hardirqs_on+0x98/0x150 [ 1036.114339][T23697] do_syscall_64+0x55/0xb0 [ 1036.118780][T23697] ? clear_bhb_loop+0x40/0x90 [ 1036.123478][T23697] ? clear_bhb_loop+0x40/0x90 [ 1036.128178][T23697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1036.134141][T23697] RIP: 0033:0x7f0769f9ce59 [ 1036.138686][T23697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.158412][T23697] RSP: 002b:00007f076ad76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1036.166867][T23697] RAX: ffffffffffffffda RBX: 00007f076a215fa0 RCX: 00007f0769f9ce59 [ 1036.174863][T23697] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1036.182858][T23697] RBP: 00007f076ad76090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.190842][T23697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.198847][T23697] R13: 00007f076a216038 R14: 00007f076a215fa0 R15: 00007ffc3dcfc768 [ 1036.206888][T23697] [ 1036.744085][T23717] netlink: 'syz.3.6048': attribute type 1 has an invalid length. [ 1036.767393][T23717] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.6048'. [ 1036.926758][T23723] netlink: 'syz.2.6050': attribute type 21 has an invalid length. [ 1037.006226][T23725] netlink: 'syz.0.6051': attribute type 10 has an invalid length. [ 1037.019205][T23725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6051'. [ 1037.913307][T23750] À: port 1(ªªªªªª) entered blocking state [ 1037.921624][T23750] À: port 1(ªªªªªª) entered disabled state [ 1037.933502][T23750] ªªªªªª: entered allmulticast mode [ 1037.939927][T23750] veth0_vlan: entered allmulticast mode [ 1037.953396][T23750] ªªªªªª: entered promiscuous mode [ 1037.984111][T23750] netlink: 'syz.1.6060': attribute type 4 has an invalid length. [ 1037.992485][T23750] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6060'. [ 1038.126050][T23755] netlink: 'syz.2.6065': attribute type 15 has an invalid length. [ 1038.134103][T23755] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6065'. [ 1038.185102][T23755] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1038.208544][T23755] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.6065'. [ 1038.890327][T23782] À: port 1(ªªªªªª) entered blocking state [ 1038.902899][T23782] À: port 1(ªªªªªª) entered disabled state [ 1038.915537][T23782] ªªªªªª: entered allmulticast mode [ 1038.921043][T23782] veth0_vlan: entered allmulticast mode [ 1038.934954][T23782] ªªªªªª: entered promiscuous mode [ 1038.978946][T23780] netlink: 'syz.2.6073': attribute type 4 has an invalid length. [ 1038.987475][T23780] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6073'. [ 1039.880563][T23807] FAULT_INJECTION: forcing a failure. [ 1039.880563][T23807] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.902432][T23807] CPU: 0 PID: 23807 Comm: syz.2.6085 Not tainted syzkaller #0 [ 1039.909983][T23807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1039.920091][T23807] Call Trace: [ 1039.923416][T23807] [ 1039.926377][T23807] dump_stack_lvl+0x18c/0x250 [ 1039.931154][T23807] ? show_regs_print_info+0x20/0x20 [ 1039.936409][T23807] ? load_image+0x420/0x420 [ 1039.940968][T23807] ? __lock_acquire+0x7d80/0x7d80 [ 1039.946051][T23807] ? __asan_memset+0x22/0x40 [ 1039.950706][T23807] should_fail_ex+0x394/0x4c0 [ 1039.955449][T23807] should_failslab+0x9/0x20 [ 1039.960033][T23807] slab_pre_alloc_hook+0x59/0x300 [ 1039.965128][T23807] kmem_cache_alloc+0x5a/0x2c0 [ 1039.969985][T23807] ? security_inode_alloc+0x34/0x110 [ 1039.975338][T23807] security_inode_alloc+0x34/0x110 [ 1039.980501][T23807] inode_init_always+0x914/0xc90 [ 1039.985517][T23807] new_inode_pseudo+0x95/0x1d0 [ 1039.990330][T23807] __ns_get_path+0x249/0x5f0 [ 1039.995002][T23807] ns_get_path+0x54/0x90 [ 1039.999292][T23807] proc_ns_get_link+0xf8/0x240 [ 1040.004096][T23807] ? proc_ns_instantiate+0xf0/0xf0 [ 1040.009259][T23807] ? try_to_unlazy+0x33e/0x5c0 [ 1040.014069][T23807] ? proc_ns_instantiate+0xf0/0xf0 [ 1040.019224][T23807] pick_link+0x666/0xdd0 [ 1040.023519][T23807] step_into+0xc18/0xee0 [ 1040.027811][T23807] ? pid_revalidate+0x22/0x260 [ 1040.032620][T23807] ? set_root+0x3a0/0x3a0 [ 1040.036992][T23807] ? pid_revalidate+0x20d/0x260 [ 1040.041911][T23807] ? lookup_fast+0x494/0x4c0 [ 1040.046547][T23807] path_openat+0x1656/0x3270 [ 1040.051197][T23807] ? do_sys_openat2+0xda/0x1d0 [ 1040.056006][T23807] ? __x64_sys_openat+0x139/0x160 [ 1040.061088][T23807] ? verify_lock_unused+0x140/0x140 [ 1040.066357][T23807] ? do_filp_open+0x430/0x430 [ 1040.071183][T23807] do_filp_open+0x1f2/0x430 [ 1040.075735][T23807] ? vfs_tmpfile+0x480/0x480 [ 1040.080413][T23807] ? _raw_spin_unlock+0x28/0x40 [ 1040.085322][T23807] ? alloc_fd+0x590/0x640 [ 1040.089726][T23807] do_sys_openat2+0x134/0x1d0 [ 1040.094457][T23807] ? perf_trace_preemptirq_template+0x269/0x330 [ 1040.100754][T23807] ? do_sys_open+0xe0/0xe0 [ 1040.105228][T23807] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1040.111258][T23807] ? lock_chain_count+0x20/0x20 [ 1040.116161][T23807] __x64_sys_openat+0x139/0x160 [ 1040.121156][T23807] do_syscall_64+0x55/0xb0 [ 1040.125626][T23807] ? clear_bhb_loop+0x40/0x90 [ 1040.130434][T23807] ? clear_bhb_loop+0x40/0x90 [ 1040.135163][T23807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1040.141118][T23807] RIP: 0033:0x7f7b9735d68e [ 1040.145571][T23807] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1040.165310][T23807] RSP: 002b:00007f7b981eeec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1040.173780][T23807] RAX: ffffffffffffffda RBX: 00007f7b981ef6c0 RCX: 00007f7b9735d68e [ 1040.181836][T23807] RDX: 0000000000000000 RSI: 00007f7b981eef90 RDI: ffffffffffffff9c [ 1040.189860][T23807] RBP: 00007f7b981ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.197886][T23807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1040.205892][T23807] R13: 00007f7b97616038 R14: 00007f7b97615fa0 R15: 00007ffc19d95398 [ 1040.213910][T23807] [ 1042.157365][ T8794] wlan1: Trigger new scan to find an IBSS to join [ 1045.039879][T23966] FAULT_INJECTION: forcing a failure. [ 1045.039879][T23966] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.072211][T23966] CPU: 0 PID: 23966 Comm: syz.0.6151 Not tainted syzkaller #0 [ 1045.079800][T23966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1045.089890][T23966] Call Trace: [ 1045.093212][T23966] [ 1045.096170][T23966] dump_stack_lvl+0x18c/0x250 [ 1045.100893][T23966] ? show_regs_print_info+0x20/0x20 [ 1045.106161][T23966] ? load_image+0x420/0x420 [ 1045.110706][T23966] ? __might_sleep+0xe0/0xe0 [ 1045.115341][T23966] ? __lock_acquire+0x7d80/0x7d80 [ 1045.120408][T23966] should_fail_ex+0x394/0x4c0 [ 1045.125128][T23966] should_failslab+0x9/0x20 [ 1045.129673][T23966] slab_pre_alloc_hook+0x59/0x300 [ 1045.134796][T23966] ? tomoyo_encode+0x2ad/0x570 [ 1045.139597][T23966] ? tomoyo_encode+0x2ad/0x570 [ 1045.144392][T23966] __kmem_cache_alloc_node+0x53/0x250 [ 1045.149815][T23966] ? tomoyo_encode+0x2ad/0x570 [ 1045.154620][T23966] __kmalloc+0xa7/0x240 [ 1045.158821][T23966] tomoyo_encode+0x2ad/0x570 [ 1045.163452][T23966] tomoyo_realpath_from_path+0x57c/0x5c0 [ 1045.169121][T23966] ? tomoyo_domain+0xd6/0x120 [ 1045.173838][T23966] tomoyo_path_number_perm+0x248/0x5e0 [ 1045.179333][T23966] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1045.184992][T23966] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1045.190486][T23966] ? trace_call_bpf+0xc3/0x6c0 [ 1045.195286][T23966] ? trace_call_bpf+0xc3/0x6c0 [ 1045.200089][T23966] ? trace_call_bpf+0x5e9/0x6c0 [ 1045.204996][T23966] ? __fget_files+0x28/0x460 [ 1045.209639][T23966] security_file_ioctl+0x70/0xa0 [ 1045.214604][T23966] __se_sys_ioctl+0x48/0x170 [ 1045.219223][T23966] do_syscall_64+0x55/0xb0 [ 1045.223681][T23966] ? clear_bhb_loop+0x40/0x90 [ 1045.228408][T23966] ? clear_bhb_loop+0x40/0x90 [ 1045.233117][T23966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1045.239045][T23966] RIP: 0033:0x7f0769f9ce59 [ 1045.243491][T23966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1045.263126][T23966] RSP: 002b:00007f076ad76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1045.271565][T23966] RAX: ffffffffffffffda RBX: 00007f076a215fa0 RCX: 00007f0769f9ce59 [ 1045.279564][T23966] RDX: 0000200000000000 RSI: 0000000000008b15 RDI: 0000000000000003 [ 1045.287596][T23966] RBP: 00007f076ad76090 R08: 0000000000000000 R09: 0000000000000000 [ 1045.295589][T23966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1045.303588][T23966] R13: 00007f076a216038 R14: 00007f076a215fa0 R15: 00007ffc3dcfc768 [ 1045.311599][T23966] [ 1045.319754][T23966] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1045.543031][T23968] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6152'. [ 1045.566180][T23968] bridge_slave_1: default FDB implementation only supports local addresses [ 1045.740074][T23976] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6155'. [ 1045.772957][T23976] hsr_slave_0: left promiscuous mode [ 1045.799817][T23976] hsr_slave_1: left promiscuous mode [ 1046.173116][ T8825] wlan1: Trigger new scan to find an IBSS to join [ 1046.180193][T23979] netlink: 'syz.2.6155': attribute type 1 has an invalid length. [ 1046.291394][ T8825] wlan1: Creating new IBSS network, BSSID ce:0c:90:ee:fd:93 [ 1047.034875][T24014] netlink: 'syz.2.6169': attribute type 10 has an invalid length. [ 1047.052684][T24014] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6169'. [ 1047.063458][T24016] FAULT_INJECTION: forcing a failure. [ 1047.063458][T24016] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.077238][T24014] team0: entered promiscuous mode [ 1047.082608][T24014] team_slave_0: entered promiscuous mode [ 1047.095397][T24014] team_slave_1: entered promiscuous mode [ 1047.099433][T24016] CPU: 1 PID: 24016 Comm: syz.0.6170 Not tainted syzkaller #0 [ 1047.108653][T24016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1047.118763][T24016] Call Trace: [ 1047.122086][T24016] [ 1047.125053][T24016] dump_stack_lvl+0x18c/0x250 [ 1047.129785][T24016] ? show_regs_print_info+0x20/0x20 [ 1047.135033][T24016] ? load_image+0x420/0x420 [ 1047.139586][T24016] ? verify_lock_unused+0x140/0x140 [ 1047.141872][T24014] mac80211_hwsim hwsim42 wlan1: entered promiscuous mode [ 1047.144834][T24016] should_fail_ex+0x394/0x4c0 [ 1047.144881][T24016] should_failslab+0x9/0x20 [ 1047.144911][T24016] slab_pre_alloc_hook+0x59/0x300 [ 1047.144953][T24016] kmem_cache_alloc+0x5a/0x2c0 [ 1047.167959][T24014] team0: entered allmulticast mode [ 1047.171044][T24016] ? skb_clone+0x1eb/0x370 [ 1047.171088][T24016] skb_clone+0x1eb/0x370 [ 1047.171119][T24016] __netlink_deliver_tap+0x411/0x7f0 [ 1047.171157][T24016] ? netlink_deliver_tap+0x2e/0x1b0 [ 1047.171185][T24016] netlink_deliver_tap+0x19c/0x1b0 [ 1047.171212][T24016] netlink_unicast+0x77b/0x930 [ 1047.171270][T24016] netlink_sendmsg+0x8d0/0xbf0 [ 1047.176837][T24014] team_slave_0: entered allmulticast mode [ 1047.180793][T24016] ? netlink_getsockopt+0x590/0x590 [ 1047.180825][T24016] ? aa_sock_msg_perm+0x94/0x150 [ 1047.180855][T24016] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1047.180882][T24016] ? security_socket_sendmsg+0x80/0xa0 [ 1047.180905][T24016] ? netlink_getsockopt+0x590/0x590 [ 1047.180931][T24016] ____sys_sendmsg+0x61b/0x980 [ 1047.186034][T24014] team_slave_1: entered allmulticast mode [ 1047.190514][T24016] ? __asan_memset+0x22/0x40 [ 1047.190546][T24016] ? __sys_sendmsg_sock+0x30/0x30 [ 1047.190570][T24016] ? __import_iovec+0x5f2/0x850 [ 1047.190602][T24016] ? import_iovec+0x73/0xa0 [ 1047.190627][T24016] ___sys_sendmsg+0x2a6/0x360 [ 1047.190653][T24016] ? get_pid_task+0x20/0x1e0 [ 1047.190686][T24016] ? __sys_sendmsg+0x2b0/0x2b0 [ 1047.190735][T24016] ? __lock_acquire+0x7d80/0x7d80 [ 1047.190789][T24016] __se_sys_sendmsg+0x1d0/0x2c0 [ 1047.190818][T24016] ? __x64_sys_sendmsg+0x80/0x80 [ 1047.190862][T24016] ? lockdep_hardirqs_on+0x98/0x150 [ 1047.190899][T24016] do_syscall_64+0x55/0xb0 [ 1047.190924][T24016] ? clear_bhb_loop+0x40/0x90 [ 1047.190943][T24016] ? clear_bhb_loop+0x40/0x90 [ 1047.190966][T24016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1047.191000][T24016] RIP: 0033:0x7f0769f9ce59 [ 1047.191022][T24016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.191042][T24016] RSP: 002b:00007f076ad76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1047.191067][T24016] RAX: ffffffffffffffda RBX: 00007f076a215fa0 RCX: 00007f0769f9ce59 [ 1047.191084][T24016] RDX: ff0f000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1047.191099][T24016] RBP: 00007f076ad76090 R08: 0000000000000000 R09: 0000000000000000 [ 1047.191113][T24016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1047.390610][T24016] R13: 00007f076a216038 R14: 00007f076a215fa0 R15: 00007ffc3dcfc768 [ 1047.398621][T24016] [ 1047.416276][T24014] mac80211_hwsim hwsim42 wlan1: entered allmulticast mode [ 1047.434979][T24014] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1047.482552][T24013] delete_channel: no stack [ 1047.813238][T24034] À: port 1(ªªªªªª) entered blocking state [ 1047.829243][T24034] À: port 1(ªªªªªª) entered disabled state [ 1047.835727][T24034] ªªªªªª: entered allmulticast mode [ 1047.843951][T24034] veth0_vlan: entered allmulticast mode [ 1047.852708][T24034] ªªªªªª: entered promiscuous mode [ 1049.270894][T24080] FAULT_INJECTION: forcing a failure. [ 1049.270894][T24080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1049.286073][T24080] CPU: 1 PID: 24080 Comm: syz.1.6192 Not tainted syzkaller #0 [ 1049.293621][T24080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1049.303717][T24080] Call Trace: [ 1049.307029][T24080] [ 1049.309989][T24080] dump_stack_lvl+0x18c/0x250 [ 1049.314806][T24080] ? show_regs_print_info+0x20/0x20 [ 1049.320057][T24080] ? load_image+0x420/0x420 [ 1049.324621][T24080] ? __might_fault+0xaa/0x120 [ 1049.329365][T24080] ? __lock_acquire+0x7d80/0x7d80 [ 1049.334454][T24080] should_fail_ex+0x394/0x4c0 [ 1049.339200][T24080] _copy_from_user+0x2f/0xe0 [ 1049.343843][T24080] __sys_bpf+0x23e/0x890 [ 1049.348119][T24080] ? bpf_link_show_fdinfo+0x390/0x390 [ 1049.353528][T24080] ? lock_chain_count+0x20/0x20 [ 1049.358413][T24080] __x64_sys_bpf+0x7c/0x90 [ 1049.362866][T24080] do_syscall_64+0x55/0xb0 [ 1049.367329][T24080] ? clear_bhb_loop+0x40/0x90 [ 1049.372054][T24080] ? clear_bhb_loop+0x40/0x90 [ 1049.376792][T24080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1049.382727][T24080] RIP: 0033:0x7f0c8e79ce59 [ 1049.387173][T24080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1049.406806][T24080] RSP: 002b:00007f0c8f660028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1049.415337][T24080] RAX: ffffffffffffffda RBX: 00007f0c8ea16090 RCX: 00007f0c8e79ce59 [ 1049.423337][T24080] RDX: 0000000000000038 RSI: 0000200000000080 RDI: 000000000000001b [ 1049.431345][T24080] RBP: 00007f0c8f660090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.439352][T24080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1049.447362][T24080] R13: 00007f0c8ea16128 R14: 00007f0c8ea16090 R15: 00007ffe5cf0b068 [ 1049.455391][T24080] [ 1051.816645][T24146] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.6217'. [ 1053.351075][T24178] netlink: 'syz.0.6229': attribute type 10 has an invalid length. [ 1053.366788][T24178] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6229'. [ 1053.381679][T24178] team0: entered promiscuous mode [ 1053.387361][T24178] team_slave_0: entered promiscuous mode [ 1053.393778][T24178] team_slave_1: entered promiscuous mode [ 1053.401714][T24178] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 1053.410426][T24178] macvlan0: entered promiscuous mode [ 1053.419832][T24178] team0: entered allmulticast mode [ 1053.425344][T24178] team_slave_0: entered allmulticast mode [ 1053.433572][T24178] team_slave_1: entered allmulticast mode [ 1053.441345][T24178] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 1053.449878][T24178] macvlan0: entered allmulticast mode [ 1053.455579][T24178] veth1_vlan: entered allmulticast mode [ 1053.469539][T24178] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1053.506181][T24177] delete_channel: no stack [ 1054.358207][T24197] netlink: 763 bytes leftover after parsing attributes in process `syz.1.6237'. [ 1054.529664][T24206] netlink: 'syz.2.6239': attribute type 10 has an invalid length. [ 1054.543284][T24206] macvlan0: entered promiscuous mode [ 1054.549490][T24206] macvlan0: entered allmulticast mode [ 1054.555208][T24206] veth1_vlan: entered allmulticast mode [ 1054.720682][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.727182][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.870195][T24215] netlink: 'syz.0.6241': attribute type 10 has an invalid length. [ 1054.886298][T24215] veth1_vlan: left allmulticast mode [ 1054.932209][T24215] team0: Port device macvlan0 removed [ 1055.745873][T24237] netlink: 763 bytes leftover after parsing attributes in process `syz.2.6250'. [ 1056.744665][T24252] netlink: 'syz.3.6257': attribute type 10 has an invalid length. [ 1056.925000][T24252] team0: Device vxcan1 is of different type [ 1057.273323][T24269] netlink: 763 bytes leftover after parsing attributes in process `syz.0.6262'. [ 1058.347205][T24296] netlink: 683 bytes leftover after parsing attributes in process `syz.2.6272'. [ 1058.404250][T24302] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6275'. [ 1058.413819][T24302] bridge_slave_1: default FDB implementation only supports local addresses [ 1058.976628][T24314] netlink: 'syz.1.6280': attribute type 9 has an invalid length. [ 1058.993305][T24314] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6280'. [ 1059.417877][T24328] netlink: 683 bytes leftover after parsing attributes in process `syz.2.6285'. [ 1059.450705][T24326] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6284'. [ 1059.476990][T24326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.519511][T24326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.564277][T24326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.576572][T24326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.587346][T24326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.602806][T24326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.618061][T24326] batadv_slave_1: entered promiscuous mode [ 1060.962657][T24359] netlink: 683 bytes leftover after parsing attributes in process `syz.3.6296'. [ 1061.401232][T24372] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6301'. [ 1061.909934][T24384] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6305'. [ 1063.497135][T24426] netlink: 'syz.3.6320': attribute type 10 has an invalid length. [ 1063.619256][T24426] macvlan0: entered promiscuous mode [ 1063.636532][T24426] macvlan0: entered allmulticast mode [ 1063.698826][T24426] team0: Port device macvlan0 removed [ 1063.707949][T24426] veth1_vlan: entered allmulticast mode [ 1063.750928][T24426] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1064.173586][T24435] FAULT_INJECTION: forcing a failure. [ 1064.173586][T24435] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.256550][T24435] CPU: 0 PID: 24435 Comm: syz.2.6325 Not tainted syzkaller #0 [ 1064.264095][T24435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1064.274212][T24435] Call Trace: [ 1064.277543][T24435] [ 1064.280520][T24435] dump_stack_lvl+0x18c/0x250 [ 1064.285269][T24435] ? show_regs_print_info+0x20/0x20 [ 1064.290614][T24435] ? load_image+0x420/0x420 [ 1064.295222][T24435] ? __might_sleep+0xe0/0xe0 [ 1064.299889][T24435] ? __lock_acquire+0x7d80/0x7d80 [ 1064.304973][T24435] should_fail_ex+0x394/0x4c0 [ 1064.309741][T24435] should_failslab+0x9/0x20 [ 1064.314309][T24435] slab_pre_alloc_hook+0x59/0x300 [ 1064.319396][T24435] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1064.325175][T24435] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1064.330945][T24435] __kmem_cache_alloc_node+0x53/0x250 [ 1064.336395][T24435] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1064.342224][T24435] __kmalloc+0xa7/0x240 [ 1064.346437][T24435] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1064.352036][T24435] ? tomoyo_domain+0xd6/0x120 [ 1064.356761][T24435] tomoyo_path_number_perm+0x248/0x5e0 [ 1064.362245][T24435] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1064.367907][T24435] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1064.373394][T24435] ? ksys_write+0x1d2/0x260 [ 1064.377957][T24435] ? __fget_files+0x28/0x460 [ 1064.382585][T24435] security_file_ioctl+0x70/0xa0 [ 1064.387553][T24435] __se_sys_ioctl+0x48/0x170 [ 1064.392176][T24435] do_syscall_64+0x55/0xb0 [ 1064.396618][T24435] ? clear_bhb_loop+0x40/0x90 [ 1064.401317][T24435] ? clear_bhb_loop+0x40/0x90 [ 1064.406025][T24435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1064.411953][T24435] RIP: 0033:0x7f7b9739ce59 [ 1064.416402][T24435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.436064][T24435] RSP: 002b:00007f7b981ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1064.444519][T24435] RAX: ffffffffffffffda RBX: 00007f7b97615fa0 RCX: 00007f7b9739ce59 [ 1064.452521][T24435] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000008 [ 1064.460519][T24435] RBP: 00007f7b981ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1064.468531][T24435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1064.476542][T24435] R13: 00007f7b97616038 R14: 00007f7b97615fa0 R15: 00007ffc19d95398 [ 1064.484570][T24435] [ 1064.526873][T24435] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1067.372255][T24463] FAULT_INJECTION: forcing a failure. [ 1067.372255][T24463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.396224][T24463] CPU: 0 PID: 24463 Comm: syz.2.6333 Not tainted syzkaller #0 [ 1067.403778][T24463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1067.413898][T24463] Call Trace: [ 1067.417228][T24463] [ 1067.420205][T24463] dump_stack_lvl+0x18c/0x250 [ 1067.424951][T24463] ? show_regs_print_info+0x20/0x20 [ 1067.430222][T24463] ? load_image+0x420/0x420 [ 1067.434779][T24463] ? __might_fault+0xaa/0x120 [ 1067.439512][T24463] ? __lock_acquire+0x7d80/0x7d80 [ 1067.444605][T24463] should_fail_ex+0x394/0x4c0 [ 1067.449388][T24463] _copy_from_iter+0x1cd/0x1290 [ 1067.454308][T24463] ? __might_fault+0xaa/0x120 [ 1067.459045][T24463] ? copyout_mc+0x70/0x70 [ 1067.463437][T24463] ? copyout_mc+0x70/0x70 [ 1067.467820][T24463] ? __virt_addr_valid+0x10c/0x380 [ 1067.472986][T24463] ? page_copy_sane+0x16a/0x270 [ 1067.477905][T24463] copy_page_from_iter+0x7b/0x100 [ 1067.483007][T24463] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 1067.488890][T24463] tun_get_user+0xbc2/0x3d40 [ 1067.493585][T24463] ? trace_event_raw_event_lock+0x150/0x240 [ 1067.499543][T24463] ? aa_file_perm+0x11b/0xee0 [ 1067.504277][T24463] ? aa_file_perm+0x3e3/0xee0 [ 1067.509021][T24463] ? rcu_read_unlock+0xa0/0xa0 [ 1067.513859][T24463] ? tun_get+0x1c/0x2e0 [ 1067.518070][T24463] ? __lock_acquire+0x7d80/0x7d80 [ 1067.523140][T24463] ? tun_get+0x1c/0x2e0 [ 1067.527328][T24463] tun_chr_write_iter+0x119/0x200 [ 1067.532386][T24463] vfs_write+0x474/0x9a0 [ 1067.536680][T24463] ? file_end_write+0x250/0x250 [ 1067.541571][T24463] ? __fget_files+0x3fc/0x460 [ 1067.546277][T24463] ? __fdget_pos+0x1d8/0x330 [ 1067.550899][T24463] ? ksys_write+0x74/0x260 [ 1067.555384][T24463] ksys_write+0x151/0x260 [ 1067.559770][T24463] ? __ia32_sys_read+0x90/0x90 [ 1067.564593][T24463] ? lockdep_hardirqs_on+0x98/0x150 [ 1067.569853][T24463] do_syscall_64+0x55/0xb0 [ 1067.574331][T24463] ? clear_bhb_loop+0x40/0x90 [ 1067.579093][T24463] ? clear_bhb_loop+0x40/0x90 [ 1067.583816][T24463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1067.589800][T24463] RIP: 0033:0x7f7b9739ce59 [ 1067.594260][T24463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.613929][T24463] RSP: 002b:00007f7b981ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1067.622415][T24463] RAX: ffffffffffffffda RBX: 00007f7b97615fa0 RCX: 00007f7b9739ce59 [ 1067.630418][T24463] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 1067.638435][T24463] RBP: 00007f7b981ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.646450][T24463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1067.654470][T24463] R13: 00007f7b97616038 R14: 00007f7b97615fa0 R15: 00007ffc19d95398 [ 1067.662509][T24463] [ 1068.936188][T24476] FAULT_INJECTION: forcing a failure. [ 1068.936188][T24476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.953285][T24476] CPU: 0 PID: 24476 Comm: syz.2.6337 Not tainted syzkaller #0 [ 1068.960827][T24476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1068.970912][T24476] Call Trace: [ 1068.974200][T24476] [ 1068.977145][T24476] dump_stack_lvl+0x18c/0x250 [ 1068.981843][T24476] ? show_regs_print_info+0x20/0x20 [ 1068.987082][T24476] ? load_image+0x420/0x420 [ 1068.991633][T24476] ? __lock_acquire+0x7d80/0x7d80 [ 1068.996693][T24476] ? snprintf+0xe9/0x140 [ 1069.000952][T24476] should_fail_ex+0x394/0x4c0 [ 1069.005669][T24476] _copy_to_user+0x2f/0xa0 [ 1069.010147][T24476] simple_read_from_buffer+0xe7/0x150 [ 1069.015567][T24476] proc_fail_nth_read+0x1e8/0x260 [ 1069.020626][T24476] ? proc_fault_inject_write+0x360/0x360 [ 1069.026290][T24476] ? fsnotify_perm+0x271/0x5e0 [ 1069.031080][T24476] ? proc_fault_inject_write+0x360/0x360 [ 1069.036748][T24476] vfs_read+0x298/0x990 [ 1069.040954][T24476] ? kernel_read+0x1e0/0x1e0 [ 1069.045662][T24476] ? __fget_files+0x28/0x460 [ 1069.050288][T24476] ? __fget_files+0x3fc/0x460 [ 1069.054997][T24476] ? __fdget_pos+0x2a3/0x330 [ 1069.059618][T24476] ? ksys_read+0x74/0x260 [ 1069.063976][T24476] ksys_read+0x151/0x260 [ 1069.068245][T24476] ? vfs_write+0x9a0/0x9a0 [ 1069.072684][T24476] ? lockdep_hardirqs_on+0x98/0x150 [ 1069.077921][T24476] do_syscall_64+0x55/0xb0 [ 1069.082364][T24476] ? clear_bhb_loop+0x40/0x90 [ 1069.087058][T24476] ? clear_bhb_loop+0x40/0x90 [ 1069.091759][T24476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1069.097695][T24476] RIP: 0033:0x7f7b9735d68e [ 1069.102131][T24476] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1069.121762][T24476] RSP: 002b:00007f7b981eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1069.130219][T24476] RAX: ffffffffffffffda RBX: 00007f7b981ef6c0 RCX: 00007f7b9735d68e [ 1069.138235][T24476] RDX: 000000000000000f RSI: 00007f7b981ef0a0 RDI: 0000000000000004 [ 1069.146227][T24476] RBP: 00007f7b981ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.154215][T24476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.162208][T24476] R13: 00007f7b97616038 R14: 00007f7b97615fa0 R15: 00007ffc19d95398 [ 1069.170214][T24476] [ 1070.217327][T24495] mac80211_hwsim hwsim44 ..ãc¤±: renamed from wlan1 (while UP) [ 1071.703846][T24527] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.6354'. [ 1072.687530][T24538] netlink: 'syz.3.6357': attribute type 21 has an invalid length. [ 1072.696044][T24538] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6357'. [ 1072.807070][T24538] sit0: left promiscuous mode [ 1073.102182][T24553] netlink: 'syz.1.6359': attribute type 10 has an invalid length. [ 1073.153149][T24553] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.6359'. [ 1073.831722][T24569] netlink: 'syz.0.6366': attribute type 4 has an invalid length. [ 1074.601786][T24582] netlink: 'syz.0.6370': attribute type 21 has an invalid length. [ 1075.159645][T24592] mac80211_hwsim hwsim49 ..ãc¤±: renamed from wlan1 (while UP) [ 1075.704314][T24607] FAULT_INJECTION: forcing a failure. [ 1075.704314][T24607] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.746660][T24607] CPU: 0 PID: 24607 Comm: syz.2.6380 Not tainted syzkaller #0 [ 1075.754226][T24607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1075.764347][T24607] Call Trace: [ 1075.767694][T24607] [ 1075.770685][T24607] dump_stack_lvl+0x18c/0x250 [ 1075.775458][T24607] ? show_regs_print_info+0x20/0x20 [ 1075.780732][T24607] ? load_image+0x420/0x420 [ 1075.785348][T24607] ? __might_sleep+0xe0/0xe0 [ 1075.790014][T24607] ? __lock_acquire+0x7d80/0x7d80 [ 1075.795125][T24607] should_fail_ex+0x394/0x4c0 [ 1075.799902][T24607] should_failslab+0x9/0x20 [ 1075.804482][T24607] slab_pre_alloc_hook+0x59/0x300 [ 1075.809587][T24607] ? __lock_acquire+0x7d80/0x7d80 [ 1075.814680][T24607] kmem_cache_alloc_node+0x5e/0x310 [ 1075.819932][T24607] ? __alloc_skb+0x103/0x2c0 [ 1075.824592][T24607] __alloc_skb+0x103/0x2c0 [ 1075.829060][T24607] netlink_sendmsg+0x66a/0xbf0 [ 1075.833870][T24607] ? perf_trace_lock+0x303/0x3b0 [ 1075.838861][T24607] ? netlink_getsockopt+0x590/0x590 [ 1075.844102][T24607] ? aa_sock_msg_perm+0x94/0x150 [ 1075.849088][T24607] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1075.854414][T24607] ? security_socket_sendmsg+0x80/0xa0 [ 1075.859920][T24607] ? netlink_getsockopt+0x590/0x590 [ 1075.865221][T24607] ____sys_sendmsg+0x61b/0x980 [ 1075.870037][T24607] ? __asan_memset+0x22/0x40 [ 1075.874670][T24607] ? __sys_sendmsg_sock+0x30/0x30 [ 1075.879735][T24607] ? __import_iovec+0x3fa/0x850 [ 1075.884657][T24607] ? import_iovec+0x73/0xa0 [ 1075.889216][T24607] ___sys_sendmsg+0x2a6/0x360 [ 1075.893954][T24607] ? __sys_sendmsg+0x2b0/0x2b0 [ 1075.898793][T24607] ? __lock_acquire+0x7d80/0x7d80 [ 1075.903903][T24607] __se_sys_sendmsg+0x1d0/0x2c0 [ 1075.908814][T24607] ? __x64_sys_sendmsg+0x80/0x80 [ 1075.913841][T24607] ? lockdep_hardirqs_on+0x98/0x150 [ 1075.919100][T24607] do_syscall_64+0x55/0xb0 [ 1075.923557][T24607] ? clear_bhb_loop+0x40/0x90 [ 1075.928279][T24607] ? clear_bhb_loop+0x40/0x90 [ 1075.932988][T24607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1075.938938][T24607] RIP: 0033:0x7f7b9739ce59 [ 1075.943394][T24607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.963037][T24607] RSP: 002b:00007f7b981ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1075.971491][T24607] RAX: ffffffffffffffda RBX: 00007f7b97615fa0 RCX: 00007f7b9739ce59 [ 1075.979499][T24607] RDX: 0000000000000090 RSI: 0000200000000080 RDI: 0000000000000004 [ 1075.987508][T24607] RBP: 00007f7b981ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.995514][T24607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.003528][T24607] R13: 00007f7b97616038 R14: 00007f7b97615fa0 R15: 00007ffc19d95398 [ 1076.011560][T24607] [ 1078.085229][T24636] netlink: 'syz.1.6386': attribute type 10 has an invalid length. [ 1078.206875][T24636] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.6386'. [ 1080.173017][T24668] FAULT_INJECTION: forcing a failure. [ 1080.173017][T24668] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.222689][T24668] CPU: 0 PID: 24668 Comm: syz.1.6397 Not tainted syzkaller #0 [ 1080.230250][T24668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1080.240361][T24668] Call Trace: [ 1080.243692][T24668] [ 1080.246668][T24668] dump_stack_lvl+0x18c/0x250 [ 1080.251411][T24668] ? show_regs_print_info+0x20/0x20 [ 1080.256663][T24668] ? load_image+0x420/0x420 [ 1080.261223][T24668] ? __might_sleep+0xe0/0xe0 [ 1080.265888][T24668] ? __lock_acquire+0x7d80/0x7d80 [ 1080.271061][T24668] should_fail_ex+0x394/0x4c0 [ 1080.275813][T24668] should_failslab+0x9/0x20 [ 1080.280386][T24668] slab_pre_alloc_hook+0x59/0x300 [ 1080.285475][T24668] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1080.291270][T24668] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1080.297065][T24668] __kmem_cache_alloc_node+0x53/0x250 [ 1080.302530][T24668] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1080.308305][T24668] __kmalloc+0xa7/0x240 [ 1080.312545][T24668] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1080.318155][T24668] ? tomoyo_domain+0xd6/0x120 [ 1080.322892][T24668] tomoyo_path_number_perm+0x248/0x5e0 [ 1080.328400][T24668] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1080.334082][T24668] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1080.339605][T24668] ? ksys_write+0x1d2/0x260 [ 1080.344213][T24668] ? __fget_files+0x28/0x460 [ 1080.348870][T24668] security_file_ioctl+0x70/0xa0 [ 1080.353859][T24668] __se_sys_ioctl+0x48/0x170 [ 1080.358505][T24668] do_syscall_64+0x55/0xb0 [ 1080.362994][T24668] ? clear_bhb_loop+0x40/0x90 [ 1080.367726][T24668] ? clear_bhb_loop+0x40/0x90 [ 1080.372470][T24668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1080.378440][T24668] RIP: 0033:0x7f0c8e79ce59 [ 1080.382905][T24668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.402554][T24668] RSP: 002b:00007f0c8f681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1080.411015][T24668] RAX: ffffffffffffffda RBX: 00007f0c8ea15fa0 RCX: 00007f0c8e79ce59 [ 1080.419016][T24668] RDX: 0000200000000040 RSI: 0000000000008922 RDI: 0000000000000004 [ 1080.427025][T24668] RBP: 00007f0c8f681090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.435027][T24668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1080.443069][T24668] R13: 00007f0c8ea16038 R14: 00007f0c8ea15fa0 R15: 00007ffe5cf0b068 [ 1080.451083][T24668] [ 1080.502315][T24668] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1080.517050][T24668] wlan1: mtu greater than device maximum [ 1080.647604][T24671] netlink: 'syz.0.6398': attribute type 21 has an invalid length. [ 1080.677274][T24671] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6398'. [ 1080.719862][T24675] netlink: 'syz.1.6401': attribute type 2 has an invalid length. [ 1080.739981][T24675] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6401'. [ 1080.756569][T24678] netlink: 135856 bytes leftover after parsing attributes in process `syz.2.6402'. [ 1080.822969][T24671] sit0: left promiscuous mode [ 1082.087920][T24708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6410'. [ 1082.117519][T24708] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6410'. [ 1082.186727][T24713] C: renamed from team_slave_0 (while UP) [ 1082.233771][T24713] netlink: 'syz.3.6412': attribute type 3 has an invalid length. [ 1082.286764][T24713] netlink: 'syz.3.6412': attribute type 1 has an invalid length. [ 1082.294595][T24713] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6412'. [ 1082.367802][T24708] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6410'. [ 1082.394319][T24708] openvswitch: netlink: Tunnel attr 5652 out of range max 16 [ 1082.412024][T24713] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1082.753200][T24718] delete_channel: no stack [ 1082.816908][T24718] delete_channel: no stack [ 1082.940823][T24733] FAULT_INJECTION: forcing a failure. [ 1082.940823][T24733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1083.065892][T24733] CPU: 1 PID: 24733 Comm: syz.0.6416 Not tainted syzkaller #0 [ 1083.073454][T24733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1083.083569][T24733] Call Trace: [ 1083.086899][T24733] [ 1083.089879][T24733] dump_stack_lvl+0x18c/0x250 [ 1083.094625][T24733] ? show_regs_print_info+0x20/0x20 [ 1083.099883][T24733] ? load_image+0x420/0x420 [ 1083.104441][T24733] ? __lock_acquire+0x7d80/0x7d80 [ 1083.109538][T24733] ? snprintf+0xe9/0x140 [ 1083.113841][T24733] should_fail_ex+0x394/0x4c0 [ 1083.118587][T24733] _copy_to_user+0x2f/0xa0 [ 1083.123067][T24733] simple_read_from_buffer+0xe7/0x150 [ 1083.128509][T24733] proc_fail_nth_read+0x1e8/0x260 [ 1083.133625][T24733] ? proc_fault_inject_write+0x360/0x360 [ 1083.139324][T24733] ? fsnotify_perm+0x271/0x5e0 [ 1083.144145][T24733] ? proc_fault_inject_write+0x360/0x360 [ 1083.149853][T24733] vfs_read+0x298/0x990 [ 1083.154074][T24733] ? kernel_read+0x1e0/0x1e0 [ 1083.158740][T24733] ? __fget_files+0x28/0x460 [ 1083.163396][T24733] ? __fget_files+0x3fc/0x460 [ 1083.168141][T24733] ? __fdget_pos+0x2a3/0x330 [ 1083.172776][T24733] ? ksys_read+0x74/0x260 [ 1083.177155][T24733] ksys_read+0x151/0x260 [ 1083.181470][T24733] ? vfs_write+0x9a0/0x9a0 [ 1083.185951][T24733] ? lockdep_hardirqs_on+0x98/0x150 [ 1083.191199][T24733] do_syscall_64+0x55/0xb0 [ 1083.195673][T24733] ? clear_bhb_loop+0x40/0x90 [ 1083.200400][T24733] ? clear_bhb_loop+0x40/0x90 [ 1083.205215][T24733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1083.211163][T24733] RIP: 0033:0x7f0769f5d68e [ 1083.215710][T24733] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1083.235372][T24733] RSP: 002b:00007f07681f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1083.243851][T24733] RAX: ffffffffffffffda RBX: 00007f07681f66c0 RCX: 00007f0769f5d68e [ 1083.251872][T24733] RDX: 000000000000000f RSI: 00007f07681f60a0 RDI: 0000000000000005 [ 1083.259927][T24733] RBP: 00007f07681f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.267943][T24733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.275959][T24733] R13: 00007f076a216128 R14: 00007f076a216090 R15: 00007ffc3dcfc768 [ 1083.283999][T24733] [ 1085.604719][T24761] FAULT_INJECTION: forcing a failure. [ 1085.604719][T24761] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.637119][T24761] CPU: 1 PID: 24761 Comm: syz.0.6424 Not tainted syzkaller #0 [ 1085.644659][T24761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1085.654748][T24761] Call Trace: [ 1085.658060][T24761] [ 1085.661017][T24761] dump_stack_lvl+0x18c/0x250 [ 1085.665730][T24761] ? show_regs_print_info+0x20/0x20 [ 1085.670960][T24761] ? load_image+0x420/0x420 [ 1085.675490][T24761] ? __lock_acquire+0x7d80/0x7d80 [ 1085.680585][T24761] should_fail_ex+0x394/0x4c0 [ 1085.685298][T24761] should_failslab+0x9/0x20 [ 1085.689828][T24761] slab_pre_alloc_hook+0x59/0x300 [ 1085.694883][T24761] ? mark_lock+0x94/0x320 [ 1085.699251][T24761] kmem_cache_alloc+0x5a/0x2c0 [ 1085.704072][T24761] ? alloc_empty_file+0x9e/0x1d0 [ 1085.709044][T24761] alloc_empty_file+0x9e/0x1d0 [ 1085.713854][T24761] path_openat+0x120/0x3270 [ 1085.718386][T24761] ? verify_lock_unused+0x140/0x140 [ 1085.723611][T24761] ? do_sys_openat2+0xda/0x1d0 [ 1085.728402][T24761] ? __x64_sys_openat+0x139/0x160 [ 1085.733448][T24761] ? do_syscall_64+0x55/0xb0 [ 1085.738084][T24761] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1085.744187][T24761] ? verify_lock_unused+0x140/0x140 [ 1085.749412][T24761] ? do_filp_open+0x430/0x430 [ 1085.754115][T24761] ? perf_trace_preemptirq_template+0xac/0x330 [ 1085.760302][T24761] ? irqentry_enter+0x37/0x50 [ 1085.765023][T24761] do_filp_open+0x1f2/0x430 [ 1085.769552][T24761] ? vfs_tmpfile+0x480/0x480 [ 1085.774189][T24761] ? _raw_spin_unlock+0x28/0x40 [ 1085.779071][T24761] ? alloc_fd+0x590/0x640 [ 1085.783462][T24761] do_sys_openat2+0x134/0x1d0 [ 1085.788180][T24761] ? do_sys_open+0xe0/0xe0 [ 1085.792622][T24761] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1085.798640][T24761] ? lock_chain_count+0x20/0x20 [ 1085.803521][T24761] __x64_sys_openat+0x139/0x160 [ 1085.808398][T24761] do_syscall_64+0x55/0xb0 [ 1085.812837][T24761] ? clear_bhb_loop+0x40/0x90 [ 1085.817539][T24761] ? clear_bhb_loop+0x40/0x90 [ 1085.822247][T24761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1085.828194][T24761] RIP: 0033:0x7f0769f9ce59 [ 1085.832629][T24761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.852258][T24761] RSP: 002b:00007f07681f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1085.860698][T24761] RAX: ffffffffffffffda RBX: 00007f076a216090 RCX: 00007f0769f9ce59 [ 1085.868701][T24761] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1085.876702][T24761] RBP: 00007f07681f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.884700][T24761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1085.892702][T24761] R13: 00007f076a216128 R14: 00007f076a216090 R15: 00007ffc3dcfc768 [ 1085.900724][T24761] [ 1086.729677][T24780] netlink: 'syz.2.6433': attribute type 28 has an invalid length. [ 1086.933873][T24785] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6435'. [ 1087.023371][T24785] netlink: 'syz.0.6435': attribute type 21 has an invalid length. [ 1087.083452][T24789] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6437'. [ 1087.090740][T24792] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6438'. [ 1087.104334][T24789] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6437'. [ 1088.405399][T24830] netlink: 'syz.3.6454': attribute type 21 has an invalid length. [ 1089.572813][T24871] netlink: 16278 bytes leftover after parsing attributes in process `syz.3.6473'. [ 1089.597081][T24871] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6473'. [ 1090.023190][T24887] netlink: 'syz.3.6478': attribute type 15 has an invalid length. [ 1090.178007][T24890] netlink: 'syz.1.6480': attribute type 10 has an invalid length. [ 1090.239151][T24890] team0: Device hsr_slave_0 failed to register rx_handler [ 1090.671639][T24910] FAULT_INJECTION: forcing a failure. [ 1090.671639][T24910] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.709866][T24910] CPU: 0 PID: 24910 Comm: syz.2.6488 Not tainted syzkaller #0 [ 1090.717418][T24910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1090.727511][T24910] Call Trace: [ 1090.730797][T24910] [ 1090.733776][T24910] dump_stack_lvl+0x18c/0x250 [ 1090.738487][T24910] ? show_regs_print_info+0x20/0x20 [ 1090.743735][T24910] ? load_image+0x420/0x420 [ 1090.748272][T24910] ? __might_sleep+0xe0/0xe0 [ 1090.752909][T24910] ? __lock_acquire+0x7d80/0x7d80 [ 1090.757957][T24910] ? __lock_acquire+0x1262/0x7d80 [ 1090.763000][T24910] should_fail_ex+0x394/0x4c0 [ 1090.767733][T24910] should_failslab+0x9/0x20 [ 1090.772290][T24910] slab_pre_alloc_hook+0x59/0x300 [ 1090.777366][T24910] kmem_cache_alloc_node+0x5e/0x310 [ 1090.782642][T24910] ? __alloc_skb+0x103/0x2c0 [ 1090.787263][T24910] __alloc_skb+0x103/0x2c0 [ 1090.791718][T24910] alloc_skb_with_frags+0xcd/0x7a0 [ 1090.796866][T24910] ? __lock_acquire+0x7d80/0x7d80 [ 1090.801932][T24910] ? __ipv6_dev_get_saddr+0x404/0x430 [ 1090.807437][T24910] sock_alloc_send_pskb+0x883/0x9a0 [ 1090.812678][T24910] ? sock_kzfree_s+0x50/0x50 [ 1090.817320][T24910] ? ip6_dst_lookup_tail+0xd65/0x1660 [ 1090.822772][T24910] rawv6_send_hdrinc+0x2fc/0x1660 [ 1090.827849][T24910] ? txopt_get+0x7a/0x3f0 [ 1090.832198][T24910] ? txopt_get+0x3f0/0x3f0 [ 1090.836636][T24910] ? txopt_get+0x344/0x3f0 [ 1090.841079][T24910] ? fl6_sock_lookup+0xc0/0xc0 [ 1090.845880][T24910] rawv6_sendmsg+0x128f/0x1740 [ 1090.850675][T24910] ? compat_rawv6_ioctl+0x70/0x70 [ 1090.855722][T24910] ? aa_sk_perm+0x83c/0x970 [ 1090.860290][T24910] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 1090.866741][T24910] ? inet_sendmsg+0x7e/0x2a0 [ 1090.871382][T24910] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1090.876716][T24910] ? inet_send_prepare+0x250/0x250 [ 1090.881883][T24910] ____sys_sendmsg+0x61b/0x980 [ 1090.886687][T24910] ? __asan_memset+0x22/0x40 [ 1090.891310][T24910] ? __sys_sendmsg_sock+0x30/0x30 [ 1090.896397][T24910] ? __import_iovec+0x5f2/0x850 [ 1090.901319][T24910] ? import_iovec+0x73/0xa0 [ 1090.905864][T24910] ___sys_sendmsg+0x2a6/0x360 [ 1090.910577][T24910] ? __sys_sendmsg+0x2b0/0x2b0 [ 1090.915392][T24910] ? trace_call_bpf+0xc3/0x6c0 [ 1090.920210][T24910] __se_sys_sendmsg+0x1d0/0x2c0 [ 1090.925091][T24910] ? perf_trace_preemptirq_template+0x269/0x330 [ 1090.931370][T24910] ? __x64_sys_sendmsg+0x80/0x80 [ 1090.936341][T24910] ? lockdep_hardirqs_on+0x98/0x150 [ 1090.941610][T24910] do_syscall_64+0x55/0xb0 [ 1090.946067][T24910] ? clear_bhb_loop+0x40/0x90 [ 1090.950763][T24910] ? clear_bhb_loop+0x40/0x90 [ 1090.955472][T24910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1090.961404][T24910] RIP: 0033:0x7f7b9739ce59 [ 1090.965868][T24910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.985519][T24910] RSP: 002b:00007f7b981ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1090.993959][T24910] RAX: ffffffffffffffda RBX: 00007f7b97615fa0 RCX: 00007f7b9739ce59 [ 1091.001959][T24910] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1091.009952][T24910] RBP: 00007f7b981ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.017947][T24910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1091.025937][T24910] R13: 00007f7b97616038 R14: 00007f7b97615fa0 R15: 00007ffc19d95398 [ 1091.033963][T24910] [ 1091.153968][T24912] netlink: 'syz.2.6489': attribute type 10 has an invalid length. [ 1091.185670][T24912] veth1_macvtap: left promiscuous mode [ 1091.809864][T24930] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6497'. [ 1092.474918][T24950] FAULT_INJECTION: forcing a failure. [ 1092.474918][T24950] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.497071][T24950] CPU: 1 PID: 24950 Comm: syz.1.6506 Not tainted syzkaller #0 [ 1092.504612][T24950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1092.514706][T24950] Call Trace: [ 1092.518034][T24950] [ 1092.521010][T24950] dump_stack_lvl+0x18c/0x250 [ 1092.525754][T24950] ? show_regs_print_info+0x20/0x20 [ 1092.531009][T24950] ? load_image+0x420/0x420 [ 1092.535568][T24950] ? __asan_memset+0x22/0x40 [ 1092.540222][T24950] should_fail_ex+0x394/0x4c0 [ 1092.545004][T24950] should_failslab+0x9/0x20 [ 1092.549546][T24950] slab_pre_alloc_hook+0x59/0x300 [ 1092.554634][T24950] ? __debug_object_init+0xec/0x450 [ 1092.559896][T24950] kmem_cache_alloc+0x5a/0x2c0 [ 1092.564728][T24950] ? slab_build_skb+0x28/0x3e0 [ 1092.569579][T24950] slab_build_skb+0x28/0x3e0 [ 1092.574240][T24950] bpf_prog_test_run_skb+0x38f/0x18f0 [ 1092.579678][T24950] ? __fget_files+0x28/0x460 [ 1092.584349][T24950] ? __fget_files+0x3fc/0x460 [ 1092.589105][T24950] ? cpu_online+0x60/0x60 [ 1092.593484][T24950] bpf_prog_test_run+0x31f/0x390 [ 1092.598454][T24950] __sys_bpf+0x49d/0x890 [ 1092.602776][T24950] ? bpf_link_show_fdinfo+0x390/0x390 [ 1092.608222][T24950] ? lock_chain_count+0x20/0x20 [ 1092.613145][T24950] __x64_sys_bpf+0x7c/0x90 [ 1092.617618][T24950] do_syscall_64+0x55/0xb0 [ 1092.622087][T24950] ? clear_bhb_loop+0x40/0x90 [ 1092.626810][T24950] ? clear_bhb_loop+0x40/0x90 [ 1092.631529][T24950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1092.637489][T24950] RIP: 0033:0x7f0c8e79ce59 [ 1092.641944][T24950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.661634][T24950] RSP: 002b:00007f0c8f681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1092.670106][T24950] RAX: ffffffffffffffda RBX: 00007f0c8ea15fa0 RCX: 00007f0c8e79ce59 [ 1092.678123][T24950] RDX: 000000000000007f RSI: 0000200000000d80 RDI: 000000000000000a [ 1092.686149][T24950] RBP: 00007f0c8f681090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.694173][T24950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1092.702190][T24950] R13: 00007f0c8ea16038 R14: 00007f0c8ea15fa0 R15: 00007ffe5cf0b068 [ 1092.710218][T24950] [ 1092.739493][T24952] netlink: 4079 bytes leftover after parsing attributes in process `syz.3.6507'. [ 1092.763950][T24952] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.6507'. [ 1092.852335][T24958] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6509'. [ 1093.034423][T24964] netlink: 'syz.1.6511': attribute type 10 has an invalid length. [ 1093.056135][T24964] nla_validate_range_unsigned: 25 callbacks suppressed [ 1093.056178][T24964] netlink: 'syz.1.6511': attribute type 11 has an invalid length. [ 1093.074977][T24964] netlink: 'syz.1.6511': attribute type 11 has an invalid length. [ 1093.084303][T24964] netlink: 'syz.1.6511': attribute type 11 has an invalid length. [ 1093.095239][T24964] netlink: 'syz.1.6511': attribute type 11 has an invalid length. [ 1093.104437][T24964] netlink: 'syz.1.6511': attribute type 11 has an invalid length. [ 1093.120126][T24964] netlink: 'syz.1.6511': attribute type 11 has an invalid length. [ 1093.130278][T24964] netlink: 'syz.1.6511': attribute type 11 has an invalid length. [ 1093.139021][T24964] netlink: 'syz.1.6511': attribute type 11 has an invalid length. [ 1093.150968][T24964] netlink: 'syz.1.6511': attribute type 11 has an invalid length. [ 1093.159939][T24964] netlink: 'syz.1.6511': attribute type 11 has an invalid length. [ 1093.172726][T24964] netlink: 'syz.1.6511': attribute type 4 has an invalid length. [ 1093.182381][T24964] netlink: 'syz.1.6511': attribute type 5 has an invalid length. [ 1093.191345][T24964] netlink: 208556 bytes leftover after parsing attributes in process `syz.1.6511'. [ 1093.454363][T24974] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6517'. [ 1093.501734][T24974] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1093.533629][T24979] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6519'. [ 1093.603023][T24978] netlink: 17263 bytes leftover after parsing attributes in process `syz.3.6518'. [ 1094.019463][T24995] netlink: 'syz.1.6528': attribute type 10 has an invalid length. [ 1094.042132][T24995] veth1_macvtap: left promiscuous mode [ 1094.288924][T25008] FAULT_INJECTION: forcing a failure. [ 1094.288924][T25008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1094.339079][T25008] CPU: 0 PID: 25008 Comm: syz.3.6531 Not tainted syzkaller #0 [ 1094.346637][T25008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1094.356741][T25008] Call Trace: [ 1094.360072][T25008] [ 1094.363044][T25008] dump_stack_lvl+0x18c/0x250 [ 1094.367785][T25008] ? show_regs_print_info+0x20/0x20 [ 1094.373042][T25008] ? load_image+0x420/0x420 [ 1094.377601][T25008] ? __might_fault+0xaa/0x120 [ 1094.382328][T25008] ? __lock_acquire+0x7d80/0x7d80 [ 1094.387418][T25008] should_fail_ex+0x394/0x4c0 [ 1094.392162][T25008] _copy_from_user+0x2f/0xe0 [ 1094.396813][T25008] ___sys_sendmsg+0x1c7/0x360 [ 1094.401563][T25008] ? get_pid_task+0x20/0x1e0 [ 1094.406221][T25008] ? __sys_sendmsg+0x2b0/0x2b0 [ 1094.411065][T25008] ? __lock_acquire+0x7d80/0x7d80 [ 1094.416227][T25008] __se_sys_sendmsg+0x1d0/0x2c0 [ 1094.421144][T25008] ? __x64_sys_sendmsg+0x80/0x80 [ 1094.426155][T25008] ? lockdep_hardirqs_on+0x98/0x150 [ 1094.431420][T25008] do_syscall_64+0x55/0xb0 [ 1094.435909][T25008] ? clear_bhb_loop+0x40/0x90 [ 1094.440662][T25008] ? clear_bhb_loop+0x40/0x90 [ 1094.445402][T25008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1094.451362][T25008] RIP: 0033:0x7f7edc19ce59 [ 1094.455840][T25008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.475526][T25008] RSP: 002b:00007f7edcffa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1094.483998][T25008] RAX: ffffffffffffffda RBX: 00007f7edc415fa0 RCX: 00007f7edc19ce59 [ 1094.492031][T25008] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1094.500056][T25008] RBP: 00007f7edcffa090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.508082][T25008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.516125][T25008] R13: 00007f7edc416038 R14: 00007f7edc415fa0 R15: 00007ffd3de236e8 [ 1094.524171][T25008] [ 1095.059000][T25025] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1095.064766][T25025] dvmrp1: linktype set to 768 [ 1095.107023][T25016] netlink: 'syz.0.6534': attribute type 2 has an invalid length. [ 1095.126597][T25016] netlink: 'syz.0.6534': attribute type 8 has an invalid length. [ 1095.160761][T25016] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6534'. [ 1095.222750][T25029] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6546'. [ 1095.645244][T25042] netlink: 'syz.1.6542': attribute type 10 has an invalid length. [ 1095.655343][T25042] netlink: 'syz.1.6542': attribute type 4 has an invalid length. [ 1095.675528][T25042] netlink: 'syz.1.6542': attribute type 5 has an invalid length. [ 1095.701315][T25042] netlink: 208556 bytes leftover after parsing attributes in process `syz.1.6542'. [ 1096.087231][T25058] netlink: 'syz.3.6551': attribute type 10 has an invalid length. [ 1096.252291][T25065] veth1_macvtap: left promiscuous mode [ 1096.513979][T25073] bridge_slave_1: default FDB implementation only supports local addresses [ 1097.198781][T25092] veth1_macvtap: left promiscuous mode [ 1098.211595][T25124] validate_nla: 3 callbacks suppressed [ 1098.211612][T25124] netlink: 'syz.0.6577': attribute type 10 has an invalid length. [ 1098.566896][T25140] FAULT_INJECTION: forcing a failure. [ 1098.566896][T25140] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.616584][T25140] CPU: 1 PID: 25140 Comm: syz.3.6582 Not tainted syzkaller #0 [ 1098.624242][T25140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1098.634348][T25140] Call Trace: [ 1098.637674][T25140] [ 1098.640662][T25140] dump_stack_lvl+0x18c/0x250 [ 1098.645396][T25140] ? show_regs_print_info+0x20/0x20 [ 1098.650663][T25140] ? load_image+0x420/0x420 [ 1098.655231][T25140] ? __might_sleep+0xe0/0xe0 [ 1098.659889][T25140] ? __lock_acquire+0x7d80/0x7d80 [ 1098.664992][T25140] should_fail_ex+0x394/0x4c0 [ 1098.669768][T25140] should_failslab+0x9/0x20 [ 1098.674328][T25140] slab_pre_alloc_hook+0x59/0x300 [ 1098.679452][T25140] ? apparmor_sk_alloc_security+0x77/0x100 [ 1098.685326][T25140] __kmem_cache_alloc_node+0x53/0x250 [ 1098.690759][T25140] ? lockdep_hardirqs_on+0x98/0x150 [ 1098.696037][T25140] ? apparmor_sk_alloc_security+0x77/0x100 [ 1098.701913][T25140] kmalloc_trace+0x2a/0xe0 [ 1098.706401][T25140] apparmor_sk_alloc_security+0x77/0x100 [ 1098.712107][T25140] security_sk_alloc+0x6e/0xa0 [ 1098.716933][T25140] sk_prot_alloc+0x101/0x210 [ 1098.721634][T25140] ? sk_alloc+0x24/0x350 [ 1098.725943][T25140] sk_alloc+0x3a/0x350 [ 1098.730096][T25140] ? bpf_ctx_init+0x154/0x190 [ 1098.734825][T25140] bpf_prog_test_run_skb+0x371/0x18f0 [ 1098.740237][T25140] ? __fget_files+0x28/0x460 [ 1098.744859][T25140] ? __fget_files+0x3fc/0x460 [ 1098.749587][T25140] ? cpu_online+0x60/0x60 [ 1098.753958][T25140] bpf_prog_test_run+0x31f/0x390 [ 1098.758981][T25140] __sys_bpf+0x49d/0x890 [ 1098.763257][T25140] ? bpf_link_show_fdinfo+0x390/0x390 [ 1098.768675][T25140] ? lock_chain_count+0x20/0x20 [ 1098.773561][T25140] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1098.779583][T25140] __x64_sys_bpf+0x7c/0x90 [ 1098.784029][T25140] do_syscall_64+0x55/0xb0 [ 1098.788477][T25140] ? clear_bhb_loop+0x40/0x90 [ 1098.793186][T25140] ? clear_bhb_loop+0x40/0x90 [ 1098.797912][T25140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1098.803848][T25140] RIP: 0033:0x7f7edc19ce59 [ 1098.808289][T25140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.827935][T25140] RSP: 002b:00007f7edcffa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1098.836405][T25140] RAX: ffffffffffffffda RBX: 00007f7edc415fa0 RCX: 00007f7edc19ce59 [ 1098.844424][T25140] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1098.852429][T25140] RBP: 00007f7edcffa090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.860429][T25140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.868423][T25140] R13: 00007f7edc416038 R14: 00007f7edc415fa0 R15: 00007ffd3de236e8 [ 1098.876480][T25140] [ 1098.935898][T25144] __nla_validate_parse: 4 callbacks suppressed [ 1098.935927][T25144] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6584'. [ 1099.747413][T25156] netlink: 'syz.0.6588': attribute type 10 has an invalid length. [ 1099.760944][T25159] netlink: 'syz.1.6590': attribute type 3 has an invalid length. [ 1099.775852][T25159] netlink: 'syz.1.6590': attribute type 275 has an invalid length. [ 1100.350271][T25175] netlink: 'syz.2.6596': attribute type 10 has an invalid length. [ 1100.363457][T25175] nla_validate_range_unsigned: 60 callbacks suppressed [ 1100.363507][T25175] netlink: 'syz.2.6596': attribute type 11 has an invalid length. [ 1100.388129][T25175] netlink: 'syz.2.6596': attribute type 11 has an invalid length. [ 1100.443474][T25175] netlink: 'syz.2.6596': attribute type 11 has an invalid length. [ 1100.474067][T25175] netlink: 'syz.2.6596': attribute type 11 has an invalid length. [ 1100.494403][T25175] netlink: 'syz.2.6596': attribute type 11 has an invalid length. [ 1100.516776][T25175] netlink: 'syz.2.6596': attribute type 11 has an invalid length. [ 1100.534845][T25181] netlink: 'syz.1.6599': attribute type 10 has an invalid length. [ 1100.538158][T25175] netlink: 'syz.2.6596': attribute type 11 has an invalid length. [ 1100.576811][T25175] netlink: 'syz.2.6596': attribute type 11 has an invalid length. [ 1100.585069][T25175] netlink: 'syz.2.6596': attribute type 11 has an invalid length. [ 1100.602910][T25175] netlink: 'syz.2.6596': attribute type 11 has an invalid length. [ 1100.629428][T25175] netlink: 'syz.2.6596': attribute type 4 has an invalid length. [ 1100.650917][T25175] netlink: 'syz.2.6596': attribute type 5 has an invalid length. [ 1100.661573][T25175] netlink: 208556 bytes leftover after parsing attributes in process `syz.2.6596'. [ 1100.790381][T25188] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6602'. [ 1102.117974][T25210] FAULT_INJECTION: forcing a failure. [ 1102.117974][T25210] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.133547][T25210] CPU: 1 PID: 25210 Comm: syz.1.6611 Not tainted syzkaller #0 [ 1102.141082][T25210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1102.151184][T25210] Call Trace: [ 1102.154503][T25210] [ 1102.157507][T25210] dump_stack_lvl+0x18c/0x250 [ 1102.162244][T25210] ? show_regs_print_info+0x20/0x20 [ 1102.167481][T25210] ? load_image+0x420/0x420 [ 1102.172016][T25210] ? __lock_acquire+0x7d80/0x7d80 [ 1102.177086][T25210] ? __asan_memset+0x22/0x40 [ 1102.181769][T25210] should_fail_ex+0x394/0x4c0 [ 1102.186518][T25210] should_failslab+0x9/0x20 [ 1102.191070][T25210] slab_pre_alloc_hook+0x59/0x300 [ 1102.196132][T25210] kmem_cache_alloc+0x5a/0x2c0 [ 1102.200921][T25210] ? security_inode_alloc+0x34/0x110 [ 1102.206255][T25210] security_inode_alloc+0x34/0x110 [ 1102.211432][T25210] inode_init_always+0x914/0xc90 [ 1102.216423][T25210] new_inode_pseudo+0x95/0x1d0 [ 1102.221239][T25210] __ns_get_path+0x249/0x5f0 [ 1102.225870][T25210] ns_get_path+0x54/0x90 [ 1102.230161][T25210] proc_ns_get_link+0xf8/0x240 [ 1102.234950][T25210] ? proc_ns_instantiate+0xf0/0xf0 [ 1102.240103][T25210] ? try_to_unlazy+0x33e/0x5c0 [ 1102.244896][T25210] ? proc_ns_instantiate+0xf0/0xf0 [ 1102.250057][T25210] pick_link+0x666/0xdd0 [ 1102.254344][T25210] step_into+0xc18/0xee0 [ 1102.258635][T25210] ? pid_revalidate+0x22/0x260 [ 1102.263447][T25210] ? set_root+0x3a0/0x3a0 [ 1102.267821][T25210] ? pid_revalidate+0x20d/0x260 [ 1102.272728][T25210] ? lookup_fast+0x494/0x4c0 [ 1102.277364][T25210] path_openat+0x1656/0x3270 [ 1102.282007][T25210] ? do_sys_openat2+0xda/0x1d0 [ 1102.286807][T25210] ? __x64_sys_openat+0x139/0x160 [ 1102.291863][T25210] ? verify_lock_unused+0x140/0x140 [ 1102.297085][T25210] ? do_filp_open+0x430/0x430 [ 1102.301795][T25210] do_filp_open+0x1f2/0x430 [ 1102.306344][T25210] ? vfs_tmpfile+0x480/0x480 [ 1102.311004][T25210] ? _raw_spin_unlock+0x28/0x40 [ 1102.315900][T25210] ? alloc_fd+0x590/0x640 [ 1102.320283][T25210] do_sys_openat2+0x134/0x1d0 [ 1102.324997][T25210] ? do_sys_open+0xe0/0xe0 [ 1102.329441][T25210] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1102.335451][T25210] ? lock_chain_count+0x20/0x20 [ 1102.340332][T25210] __x64_sys_openat+0x139/0x160 [ 1102.345220][T25210] do_syscall_64+0x55/0xb0 [ 1102.349663][T25210] ? clear_bhb_loop+0x40/0x90 [ 1102.354379][T25210] ? clear_bhb_loop+0x40/0x90 [ 1102.359082][T25210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1102.365034][T25210] RIP: 0033:0x7f0c8e75d68e [ 1102.369477][T25210] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1102.389112][T25210] RSP: 002b:00007f0c8f680ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1102.397558][T25210] RAX: ffffffffffffffda RBX: 00007f0c8f6816c0 RCX: 00007f0c8e75d68e [ 1102.405554][T25210] RDX: 0000000000000000 RSI: 00007f0c8f680f90 RDI: ffffffffffffff9c [ 1102.413563][T25210] RBP: 00007f0c8f681090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.421567][T25210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1102.429570][T25210] R13: 00007f0c8ea16038 R14: 00007f0c8ea15fa0 R15: 00007ffe5cf0b068 [ 1102.437604][T25210] [ 1102.516880][T25208] netlink: 'syz.3.6609': attribute type 10 has an invalid length. [ 1102.796890][T25220] netlink: 'syz.3.6616': attribute type 39 has an invalid length. [ 1102.951150][T25220] hsr_slave_1 (unregistering): left promiscuous mode [ 1102.983103][T25226] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6618'. [ 1104.115477][T25242] FAULT_INJECTION: forcing a failure. [ 1104.115477][T25242] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.334852][T25242] CPU: 0 PID: 25242 Comm: syz.3.6625 Not tainted syzkaller #0 [ 1104.342500][T25242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1104.352701][T25242] Call Trace: [ 1104.356121][T25242] [ 1104.359198][T25242] dump_stack_lvl+0x18c/0x250 [ 1104.364078][T25242] ? show_regs_print_info+0x20/0x20 [ 1104.369454][T25242] ? load_image+0x420/0x420 [ 1104.374154][T25242] ? verify_lock_unused+0x140/0x140 [ 1104.379516][T25242] ? perf_trace_lock_acquire+0x342/0x400 [ 1104.385369][T25242] should_fail_ex+0x394/0x4c0 [ 1104.390266][T25242] should_failslab+0x9/0x20 [ 1104.394911][T25242] slab_pre_alloc_hook+0x59/0x300 [ 1104.400155][T25242] kmem_cache_alloc+0x5a/0x2c0 [ 1104.405064][T25242] ? skb_clone+0x1eb/0x370 [ 1104.409693][T25242] skb_clone+0x1eb/0x370 [ 1104.414132][T25242] __netlink_deliver_tap+0x411/0x7f0 [ 1104.419713][T25242] ? netlink_deliver_tap+0x2e/0x1b0 [ 1104.425094][T25242] netlink_deliver_tap+0x19c/0x1b0 [ 1104.430365][T25242] netlink_unicast+0x77b/0x930 [ 1104.435401][T25242] netlink_sendmsg+0x8d0/0xbf0 [ 1104.440420][T25242] ? netlink_getsockopt+0x590/0x590 [ 1104.445777][T25242] ? aa_sock_msg_perm+0x94/0x150 [ 1104.450848][T25242] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1104.456228][T25242] ? security_socket_sendmsg+0x80/0xa0 [ 1104.461780][T25242] ? netlink_getsockopt+0x590/0x590 [ 1104.467105][T25242] ____sys_sendmsg+0x61b/0x980 [ 1104.472026][T25242] ? __asan_memset+0x22/0x40 [ 1104.476758][T25242] ? __sys_sendmsg_sock+0x30/0x30 [ 1104.481883][T25242] ? __import_iovec+0x5f2/0x850 [ 1104.487346][T25242] ? import_iovec+0x73/0xa0 [ 1104.492019][T25242] ___sys_sendmsg+0x2a6/0x360 [ 1104.496867][T25242] ? __sys_sendmsg+0x2b0/0x2b0 [ 1104.501918][T25242] ? __lock_acquire+0x7d80/0x7d80 [ 1104.507242][T25242] __se_sys_sendmsg+0x1d0/0x2c0 [ 1104.512242][T25242] ? perf_trace_preemptirq_template+0x269/0x330 [ 1104.518635][T25242] ? __x64_sys_sendmsg+0x80/0x80 [ 1104.523805][T25242] ? lockdep_hardirqs_on+0x98/0x150 [ 1104.529146][T25242] do_syscall_64+0x55/0xb0 [ 1104.533660][T25242] ? clear_bhb_loop+0x40/0x90 [ 1104.538435][T25242] ? clear_bhb_loop+0x40/0x90 [ 1104.543228][T25242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1104.549215][T25242] RIP: 0033:0x7f7edc19ce59 [ 1104.553730][T25242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1104.573515][T25242] RSP: 002b:00007f7edcffa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1104.582043][T25242] RAX: ffffffffffffffda RBX: 00007f7edc415fa0 RCX: 00007f7edc19ce59 [ 1104.590110][T25242] RDX: 0000000060044084 RSI: 0000200000000000 RDI: 0000000000000009 [ 1104.598198][T25242] RBP: 00007f7edcffa090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.606260][T25242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.614317][T25242] R13: 00007f7edc416038 R14: 00007f7edc415fa0 R15: 00007ffd3de236e8 [ 1104.622497][T25242] [ 1104.648559][T25242] netlink: 'syz.3.6625': attribute type 4 has an invalid length. [ 1104.667242][T25242] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6625'. [ 1104.714759][T25242] .`: renamed from bond0 [ 1104.943429][T25254] netlink: 'syz.1.6629': attribute type 2 has an invalid length. [ 1104.960466][T25254] netlink: 119 bytes leftover after parsing attributes in process `syz.1.6629'. [ 1105.402276][T25270] netlink: 'syz.2.6635': attribute type 10 has an invalid length. [ 1106.778031][T25309] netlink: 'syz.3.6649': attribute type 10 has an invalid length. [ 1106.901785][T25314] FAULT_INJECTION: forcing a failure. [ 1106.901785][T25314] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.919474][T25314] CPU: 0 PID: 25314 Comm: syz.3.6652 Not tainted syzkaller #0 [ 1106.927028][T25314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1106.937161][T25314] Call Trace: [ 1106.940513][T25314] [ 1106.943507][T25314] dump_stack_lvl+0x18c/0x250 [ 1106.948287][T25314] ? show_regs_print_info+0x20/0x20 [ 1106.953578][T25314] ? load_image+0x420/0x420 [ 1106.958150][T25314] ? __might_sleep+0xe0/0xe0 [ 1106.962777][T25314] ? __lock_acquire+0x7d80/0x7d80 [ 1106.967852][T25314] should_fail_ex+0x394/0x4c0 [ 1106.972583][T25314] should_failslab+0x9/0x20 [ 1106.977146][T25314] slab_pre_alloc_hook+0x59/0x300 [ 1106.982233][T25314] ? __lock_acquire+0x7d80/0x7d80 [ 1106.987276][T25314] kmem_cache_alloc_node+0x5e/0x310 [ 1106.992500][T25314] ? __alloc_skb+0x103/0x2c0 [ 1106.997127][T25314] __alloc_skb+0x103/0x2c0 [ 1107.001597][T25314] netlink_sendmsg+0x66a/0xbf0 [ 1107.006452][T25314] ? netlink_getsockopt+0x590/0x590 [ 1107.011719][T25314] ? aa_sock_msg_perm+0x94/0x150 [ 1107.016703][T25314] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1107.022012][T25314] ? security_socket_sendmsg+0x80/0xa0 [ 1107.027515][T25314] ? netlink_getsockopt+0x590/0x590 [ 1107.032747][T25314] ____sys_sendmsg+0x61b/0x980 [ 1107.037554][T25314] ? __asan_memset+0x22/0x40 [ 1107.042181][T25314] ? __sys_sendmsg_sock+0x30/0x30 [ 1107.047241][T25314] ? __import_iovec+0x5f2/0x850 [ 1107.052129][T25314] ? import_iovec+0x73/0xa0 [ 1107.056660][T25314] ___sys_sendmsg+0x2a6/0x360 [ 1107.061375][T25314] ? __sys_sendmsg+0x2b0/0x2b0 [ 1107.066182][T25314] ? __lock_acquire+0x7d80/0x7d80 [ 1107.071249][T25314] __se_sys_sendmsg+0x1d0/0x2c0 [ 1107.076133][T25314] ? __x64_sys_sendmsg+0x80/0x80 [ 1107.081134][T25314] ? lockdep_hardirqs_on+0x98/0x150 [ 1107.086372][T25314] do_syscall_64+0x55/0xb0 [ 1107.090815][T25314] ? clear_bhb_loop+0x40/0x90 [ 1107.095515][T25314] ? clear_bhb_loop+0x40/0x90 [ 1107.100215][T25314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1107.106139][T25314] RIP: 0033:0x7f7edc19ce59 [ 1107.110580][T25314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.130218][T25314] RSP: 002b:00007f7edcffa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1107.138660][T25314] RAX: ffffffffffffffda RBX: 00007f7edc415fa0 RCX: 00007f7edc19ce59 [ 1107.146656][T25314] RDX: 0000000004004084 RSI: 0000200000000100 RDI: 0000000000000006 [ 1107.154661][T25314] RBP: 00007f7edcffa090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.162683][T25314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.170706][T25314] R13: 00007f7edc416038 R14: 00007f7edc415fa0 R15: 00007ffd3de236e8 [ 1107.178737][T25314] [ 1107.577199][T25322] netlink: 'syz.3.6655': attribute type 33 has an invalid length. [ 1107.586095][T25322] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6655'. [ 1107.595383][T25322] `: renamed from syz_tun (while UP) [ 1107.888424][T25332] netlink: 'syz.2.6659': attribute type 10 has an invalid length. [ 1108.075098][T25340] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6663'. [ 1108.485076][T25351] netlink: 'syz.2.6668': attribute type 4 has an invalid length. [ 1108.504359][T25351] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6668'. [ 1108.560883][T25351] .`: renamed from bond0 [ 1108.671588][T25359] netlink: 'syz.2.6670': attribute type 33 has an invalid length. [ 1108.680011][T25359] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6670'. [ 1108.691137][T25359] `: renamed from syz_tun (while UP) [ 1109.212501][T25369] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6675'. [ 1109.420307][T25373] netlink: 'syz.2.6677': attribute type 10 has an invalid length. [ 1109.476234][T25377] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6679'. [ 1109.646909][T25379] netlink: 'syz.1.6680': attribute type 4 has an invalid length. [ 1109.655114][T25379] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6680'. [ 1109.698012][T25379] .`: renamed from bond0 [ 1109.921605][T25393] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6685'. [ 1110.175307][T25403] netlink: 'syz.0.6689': attribute type 10 has an invalid length. [ 1110.936154][T25427] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6697'. [ 1111.099421][T25433] netlink: 'syz.3.6698': attribute type 4 has an invalid length. [ 1111.113237][T25433] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6698'. [ 1111.149776][T25432] netlink: 'syz.0.6699': attribute type 10 has an invalid length. [ 1111.832869][T25456] netlink: 'syz.3.6710': attribute type 10 has an invalid length. [ 1112.385915][T25474] netlink: 'syz.3.6719': attribute type 29 has an invalid length. [ 1112.399054][T25474] netlink: 'syz.3.6719': attribute type 29 has an invalid length. [ 1112.430281][T25474] netlink: 'syz.3.6719': attribute type 29 has an invalid length. [ 1112.451946][T25474] netlink: 'syz.3.6719': attribute type 29 has an invalid length. [ 1112.484806][T25474] netlink: 'syz.3.6719': attribute type 29 has an invalid length. [ 1113.132829][T25499] netlink: 'syz.0.6731': attribute type 10 has an invalid length. [ 1113.276235][T25505] FAULT_INJECTION: forcing a failure. [ 1113.276235][T25505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1113.292342][T25505] CPU: 0 PID: 25505 Comm: syz.0.6734 Not tainted syzkaller #0 [ 1113.299874][T25505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1113.309988][T25505] Call Trace: [ 1113.313305][T25505] [ 1113.316273][T25505] dump_stack_lvl+0x18c/0x250 [ 1113.321018][T25505] ? show_regs_print_info+0x20/0x20 [ 1113.326279][T25505] ? load_image+0x420/0x420 [ 1113.330835][T25505] ? __might_fault+0xaa/0x120 [ 1113.335574][T25505] ? __lock_acquire+0x7d80/0x7d80 [ 1113.340657][T25505] should_fail_ex+0x394/0x4c0 [ 1113.345402][T25505] _copy_from_user+0x2f/0xe0 [ 1113.350055][T25505] ___sys_sendmsg+0x1c7/0x360 [ 1113.354798][T25505] ? __sys_sendmsg+0x2b0/0x2b0 [ 1113.359651][T25505] ? trace_call_bpf+0xc3/0x6c0 [ 1113.364504][T25505] __se_sys_sendmsg+0x1d0/0x2c0 [ 1113.369409][T25505] ? perf_trace_preemptirq_template+0x269/0x330 [ 1113.375717][T25505] ? __x64_sys_sendmsg+0x80/0x80 [ 1113.380722][T25505] ? lockdep_hardirqs_on+0x98/0x150 [ 1113.385977][T25505] do_syscall_64+0x55/0xb0 [ 1113.390444][T25505] ? clear_bhb_loop+0x40/0x90 [ 1113.395169][T25505] ? clear_bhb_loop+0x40/0x90 [ 1113.399897][T25505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1113.405845][T25505] RIP: 0033:0x7f0769f9ce59 [ 1113.410316][T25505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1113.429971][T25505] RSP: 002b:00007f076ad76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1113.438555][T25505] RAX: ffffffffffffffda RBX: 00007f076a215fa0 RCX: 00007f0769f9ce59 [ 1113.446601][T25505] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1113.454623][T25505] RBP: 00007f076ad76090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.462643][T25505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.470652][T25505] R13: 00007f076a216038 R14: 00007f076a215fa0 R15: 00007ffc3dcfc768 [ 1113.478669][T25505] [ 1115.185471][T25554] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6753'. [ 1115.323519][T25556] validate_nla: 1 callbacks suppressed [ 1115.323600][T25556] netlink: 'syz.2.6754': attribute type 10 has an invalid length. [ 1115.761965][T25573] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6761'. [ 1115.992803][T25578] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6764'. [ 1116.164700][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.176521][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.220136][T25583] netlink: 'syz.3.6766': attribute type 10 has an invalid length. [ 1116.417913][T25592] FAULT_INJECTION: forcing a failure. [ 1116.417913][T25592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1116.435965][T25592] CPU: 1 PID: 25592 Comm: syz.3.6770 Not tainted syzkaller #0 [ 1116.443504][T25592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1116.453607][T25592] Call Trace: [ 1116.456946][T25592] [ 1116.459910][T25592] dump_stack_lvl+0x18c/0x250 [ 1116.464646][T25592] ? show_regs_print_info+0x20/0x20 [ 1116.469886][T25592] ? load_image+0x420/0x420 [ 1116.474440][T25592] ? __lock_acquire+0x7d80/0x7d80 [ 1116.479524][T25592] ? snprintf+0xe9/0x140 [ 1116.483834][T25592] should_fail_ex+0x394/0x4c0 [ 1116.488607][T25592] _copy_to_user+0x2f/0xa0 [ 1116.493086][T25592] simple_read_from_buffer+0xe7/0x150 [ 1116.498527][T25592] proc_fail_nth_read+0x1e8/0x260 [ 1116.503652][T25592] ? proc_fault_inject_write+0x360/0x360 [ 1116.509344][T25592] ? fsnotify_perm+0x271/0x5e0 [ 1116.514142][T25592] ? proc_fault_inject_write+0x360/0x360 [ 1116.519814][T25592] vfs_read+0x298/0x990 [ 1116.524018][T25592] ? kernel_read+0x1e0/0x1e0 [ 1116.528648][T25592] ? __fget_files+0x28/0x460 [ 1116.533270][T25592] ? __fget_files+0x3fc/0x460 [ 1116.537981][T25592] ? __fdget_pos+0x2a3/0x330 [ 1116.542602][T25592] ? ksys_read+0x74/0x260 [ 1116.546972][T25592] ksys_read+0x151/0x260 [ 1116.551257][T25592] ? vfs_write+0x9a0/0x9a0 [ 1116.555713][T25592] ? lockdep_hardirqs_on+0x98/0x150 [ 1116.560946][T25592] do_syscall_64+0x55/0xb0 [ 1116.565381][T25592] ? clear_bhb_loop+0x40/0x90 [ 1116.570080][T25592] ? clear_bhb_loop+0x40/0x90 [ 1116.574796][T25592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1116.580731][T25592] RIP: 0033:0x7f7edc15d68e [ 1116.585185][T25592] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1116.604822][T25592] RSP: 002b:00007f7edcff9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1116.613263][T25592] RAX: ffffffffffffffda RBX: 00007f7edcffa6c0 RCX: 00007f7edc15d68e [ 1116.621261][T25592] RDX: 000000000000000f RSI: 00007f7edcffa0a0 RDI: 0000000000000004 [ 1116.629252][T25592] RBP: 00007f7edcffa090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.637248][T25592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.645258][T25592] R13: 00007f7edc416038 R14: 00007f7edc415fa0 R15: 00007ffd3de236e8 [ 1116.653267][T25592] [ 1116.973713][T25604] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6775'. [ 1117.104620][T25607] netlink: 'syz.1.6776': attribute type 10 has an invalid length. [ 1117.220524][T25613] syzkaller0: entered promiscuous mode [ 1117.226080][T25613] syzkaller0: entered allmulticast mode [ 1117.331264][T25620] FAULT_INJECTION: forcing a failure. [ 1117.331264][T25620] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.351330][T25620] CPU: 0 PID: 25620 Comm: syz.1.6780 Not tainted syzkaller #0 [ 1117.358873][T25620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1117.368949][T25620] Call Trace: [ 1117.372247][T25620] [ 1117.375214][T25620] dump_stack_lvl+0x18c/0x250 [ 1117.379942][T25620] ? show_regs_print_info+0x20/0x20 [ 1117.385194][T25620] ? load_image+0x420/0x420 [ 1117.389729][T25620] ? __might_sleep+0xe0/0xe0 [ 1117.394341][T25620] ? __lock_acquire+0x7d80/0x7d80 [ 1117.399387][T25620] should_fail_ex+0x394/0x4c0 [ 1117.404106][T25620] should_failslab+0x9/0x20 [ 1117.408658][T25620] slab_pre_alloc_hook+0x59/0x300 [ 1117.413762][T25620] ? apparmor_sk_alloc_security+0x77/0x100 [ 1117.419647][T25620] __kmem_cache_alloc_node+0x53/0x250 [ 1117.425097][T25620] ? apparmor_sk_alloc_security+0x77/0x100 [ 1117.431006][T25620] kmalloc_trace+0x2a/0xe0 [ 1117.435479][T25620] apparmor_sk_alloc_security+0x77/0x100 [ 1117.441160][T25620] security_sk_alloc+0x6e/0xa0 [ 1117.445982][T25620] sk_prot_alloc+0x101/0x210 [ 1117.450624][T25620] ? sk_alloc+0x24/0x350 [ 1117.454910][T25620] sk_alloc+0x3a/0x350 [ 1117.459025][T25620] ? bpf_ctx_init+0x154/0x190 [ 1117.463761][T25620] bpf_prog_test_run_skb+0x371/0x18f0 [ 1117.469189][T25620] ? __fget_files+0x28/0x460 [ 1117.473842][T25620] ? __fget_files+0x3fc/0x460 [ 1117.478608][T25620] ? cpu_online+0x60/0x60 [ 1117.482992][T25620] bpf_prog_test_run+0x31f/0x390 [ 1117.487976][T25620] __sys_bpf+0x49d/0x890 [ 1117.492296][T25620] ? bpf_link_show_fdinfo+0x390/0x390 [ 1117.497720][T25620] ? lock_chain_count+0x20/0x20 [ 1117.502603][T25620] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1117.508643][T25620] __x64_sys_bpf+0x7c/0x90 [ 1117.513189][T25620] do_syscall_64+0x55/0xb0 [ 1117.517649][T25620] ? clear_bhb_loop+0x40/0x90 [ 1117.522361][T25620] ? clear_bhb_loop+0x40/0x90 [ 1117.527074][T25620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1117.533030][T25620] RIP: 0033:0x7f0c8e79ce59 [ 1117.537492][T25620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.557149][T25620] RSP: 002b:00007f0c8f681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1117.565621][T25620] RAX: ffffffffffffffda RBX: 00007f0c8ea15fa0 RCX: 00007f0c8e79ce59 [ 1117.573679][T25620] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1117.581695][T25620] RBP: 00007f0c8f681090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.589706][T25620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.597724][T25620] R13: 00007f0c8ea16038 R14: 00007f0c8ea15fa0 R15: 00007ffe5cf0b068 [ 1117.605753][T25620] [ 1118.072434][T25628] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6784'. [ 1118.106516][T25628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1118.128009][T25635] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6786'. [ 1118.378773][T25640] netlink: 'syz.3.6788': attribute type 10 has an invalid length. [ 1118.853515][T25660] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6796'. [ 1118.930590][T25662] FAULT_INJECTION: forcing a failure. [ 1118.930590][T25662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1118.943903][T25662] CPU: 0 PID: 25662 Comm: syz.1.6797 Not tainted syzkaller #0 [ 1118.951401][T25662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1118.961489][T25662] Call Trace: [ 1118.964801][T25662] [ 1118.967747][T25662] dump_stack_lvl+0x18c/0x250 [ 1118.972454][T25662] ? show_regs_print_info+0x20/0x20 [ 1118.977669][T25662] ? load_image+0x420/0x420 [ 1118.982195][T25662] ? __lock_acquire+0x7d80/0x7d80 [ 1118.987255][T25662] ? snprintf+0xe9/0x140 [ 1118.991542][T25662] should_fail_ex+0x394/0x4c0 [ 1118.996235][T25662] _copy_to_user+0x2f/0xa0 [ 1119.000673][T25662] simple_read_from_buffer+0xe7/0x150 [ 1119.006105][T25662] proc_fail_nth_read+0x1e8/0x260 [ 1119.011168][T25662] ? proc_fault_inject_write+0x360/0x360 [ 1119.016829][T25662] ? fsnotify_perm+0x271/0x5e0 [ 1119.021617][T25662] ? proc_fault_inject_write+0x360/0x360 [ 1119.027289][T25662] vfs_read+0x298/0x990 [ 1119.031524][T25662] ? kernel_read+0x1e0/0x1e0 [ 1119.036137][T25662] ? __fget_files+0x28/0x460 [ 1119.040748][T25662] ? __fget_files+0x3fc/0x460 [ 1119.045467][T25662] ? __fdget_pos+0x2a3/0x330 [ 1119.050089][T25662] ? ksys_read+0x74/0x260 [ 1119.054486][T25662] ksys_read+0x151/0x260 [ 1119.058797][T25662] ? vfs_write+0x9a0/0x9a0 [ 1119.063257][T25662] ? lockdep_hardirqs_on+0x98/0x150 [ 1119.068475][T25662] do_syscall_64+0x55/0xb0 [ 1119.072925][T25662] ? clear_bhb_loop+0x40/0x90 [ 1119.077623][T25662] ? clear_bhb_loop+0x40/0x90 [ 1119.082327][T25662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1119.088273][T25662] RIP: 0033:0x7f0c8e75d68e [ 1119.092707][T25662] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1119.112352][T25662] RSP: 002b:00007f0c8f680fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1119.120779][T25662] RAX: ffffffffffffffda RBX: 00007f0c8f6816c0 RCX: 00007f0c8e75d68e [ 1119.128766][T25662] RDX: 000000000000000f RSI: 00007f0c8f6810a0 RDI: 0000000000000005 [ 1119.136765][T25662] RBP: 00007f0c8f681090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.144770][T25662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.152765][T25662] R13: 00007f0c8ea16038 R14: 00007f0c8ea15fa0 R15: 00007ffe5cf0b068 [ 1119.160791][T25662] [ 1119.381887][T25668] netlink: 'syz.0.6800': attribute type 10 has an invalid length. [ 1119.604110][T25678] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6802'. [ 1120.387402][T25690] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6809'. [ 1120.523234][T25694] netlink: 'syz.1.6811': attribute type 10 has an invalid length. [ 1177.604072][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.616479][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1225.846355][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1225.853102][ C1] rcu: 1-....: (10483 ticks this GP) idle=b3dc/1/0x4000000000000000 softirq=107950/107951 fqs=5240 [ 1225.865068][ C1] rcu: hardirqs softirqs csw/system [ 1225.871505][ C1] rcu: number: 1287958 0 0 [ 1225.877940][ C1] rcu: cputime: 16370 36109 64 ==> 52500(ms) [ 1225.885779][ C1] rcu: (t=10502 jiffies g=149873 q=817 ncpus=2) [ 1225.892156][ C1] CPU: 1 PID: 25699 Comm: syz.3.6813 Not tainted syzkaller #0 [ 1225.899671][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1225.909790][ C1] RIP: 0010:rcu_read_unlock_special+0x83/0x4d0 [ 1225.916021][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 5e 36 92 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1225.935655][ C1] RSP: 0018:ffffc900001f01a0 EFLAGS: 00000206 [ 1225.941754][ C1] RAX: 18ee57f037ded700 RBX: 1ffff9200003e038 RCX: 18ee57f037ded700 [ 1225.949775][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: ffffffff8b1c7be0 [ 1225.957777][ C1] RBP: ffffc900001f0268 R08: ffffffff911bc62f R09: 1ffffffff22378c5 [ 1225.965766][ C1] R10: dffffc0000000000 R11: fffffbfff22378c6 R12: ffffffff8d137000 [ 1225.973763][ C1] R13: dffffc0000000000 R14: ffff8880b8f3d1d0 R15: 1ffff110171e7a3a [ 1225.981779][ C1] FS: 00007f7edcffa6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1225.990729][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1225.997328][ C1] CR2: 0000000100000000 CR3: 0000000069131000 CR4: 00000000003506e0 [ 1226.005327][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1226.013329][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1226.021323][ C1] Call Trace: [ 1226.024617][ C1] [ 1226.027491][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1226.032467][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1226.037859][ C1] ? __read_once_word_nocheck+0x9/0x10 [ 1226.043348][ C1] __rcu_read_unlock+0x7c/0xd0 [ 1226.048152][ C1] is_bpf_text_address+0x27e/0x2a0 [ 1226.053291][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 1226.058515][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1226.064656][ C1] kernel_text_address+0xa0/0xd0 [ 1226.069636][ C1] __kernel_text_address+0xd/0x30 [ 1226.074713][ C1] unwind_get_return_address+0x5d/0xc0 [ 1226.080198][ C1] ? stack_trace_save+0x100/0x100 [ 1226.085246][ C1] arch_stack_walk+0x11d/0x190 [ 1226.090043][ C1] stack_trace_save+0xaa/0x100 [ 1226.094833][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1226.099971][ C1] ? stack_trace_save+0xaa/0x100 [ 1226.104948][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1226.110100][ C1] kasan_set_track+0x4e/0x70 [ 1226.114749][ C1] ? kasan_set_track+0x4e/0x70 [ 1226.119536][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1226.124588][ C1] ? slab_post_alloc_hook+0x6a/0x4d0 [ 1226.129915][ C1] ? kmem_cache_alloc_node+0x1af/0x310 [ 1226.135404][ C1] ? kmalloc_reserve+0x95/0x240 [ 1226.140285][ C1] ? __alloc_skb+0x138/0x2c0 [ 1226.144899][ C1] ? arp_create+0x19f/0xa10 [ 1226.149427][ C1] ? arp_send_dst+0xa7/0x230 [ 1226.154042][ C1] ? arp_solicit+0xbf3/0xe10 [ 1226.158667][ C1] ? neigh_timer_handler+0xaad/0xff0 [ 1226.163977][ C1] ? call_timer_fn+0x189/0x540 [ 1226.168765][ C1] ? __run_timers+0x570/0x810 [ 1226.173462][ C1] ? run_timer_softirq+0x67/0xf0 [ 1226.178433][ C1] ? handle_softirqs+0x27d/0x820 [ 1226.183413][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1226.188205][ C1] ? irq_exit_rcu+0x9/0x20 [ 1226.192639][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1226.198483][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1226.204667][ C1] ? generic_exec_single+0x477/0x4e0 [ 1226.209986][ C1] ? smp_call_function_single+0x36d/0x5a0 [ 1226.215746][ C1] ? perf_install_in_context+0x5bb/0x920 [ 1226.221405][ C1] ? __se_sys_perf_event_open+0x1841/0x1c60 [ 1226.227321][ C1] ? do_syscall_64+0x55/0xb0 [ 1226.231934][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1226.238080][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1226.242965][ C1] slab_post_alloc_hook+0x6a/0x4d0 [ 1226.248120][ C1] kmem_cache_alloc_node+0x1af/0x310 [ 1226.253441][ C1] ? kmalloc_reserve+0x95/0x240 [ 1226.258368][ C1] kmalloc_reserve+0x95/0x240 [ 1226.263078][ C1] __alloc_skb+0x138/0x2c0 [ 1226.267524][ C1] arp_create+0x19f/0xa10 [ 1226.271883][ C1] ? arp_send_dst+0x230/0x230 [ 1226.276579][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1226.281818][ C1] arp_send_dst+0xa7/0x230 [ 1226.286275][ C1] arp_solicit+0xbf3/0xe10 [ 1226.290722][ C1] ? arp_ifdown+0x20/0x20 [ 1226.295077][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1226.300320][ C1] ? arp_ifdown+0x20/0x20 [ 1226.304674][ C1] neigh_timer_handler+0xaad/0xff0 [ 1226.309828][ C1] call_timer_fn+0x189/0x540 [ 1226.314567][ C1] ? neigh_release+0x80/0x80 [ 1226.319196][ C1] ? call_timer_fn+0xd2/0x540 [ 1226.323916][ C1] ? __run_timers+0x810/0x810 [ 1226.328646][ C1] ? neigh_release+0x80/0x80 [ 1226.333261][ C1] __run_timers+0x570/0x810 [ 1226.337799][ C1] ? detach_timer+0x2b0/0x2b0 [ 1226.342512][ C1] run_timer_softirq+0x67/0xf0 [ 1226.347299][ C1] handle_softirqs+0x27d/0x820 [ 1226.352083][ C1] ? read_tsc+0x9/0x20 [ 1226.356173][ C1] ? ktime_get+0x24b/0x280 [ 1226.360613][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1226.365397][ C1] ? do_softirq+0x1a0/0x1a0 [ 1226.369919][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1226.375151][ C1] __irq_exit_rcu+0xd3/0x190 [ 1226.379768][ C1] ? irq_exit_rcu+0x20/0x20 [ 1226.384327][ C1] irq_exit_rcu+0x9/0x20 [ 1226.388615][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1226.394330][ C1] [ 1226.397279][ C1] [ 1226.400227][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1226.406232][ C1] RIP: 0010:generic_exec_single+0x477/0x4e0 [ 1226.412147][ C1] Code: 75 11 e8 2c 00 0b 00 48 85 db 75 16 e8 22 00 0b 00 eb 15 e8 1b 00 0b 00 e8 06 f3 07 09 48 85 db 74 ea e8 0c 00 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 1226.431777][ C1] RSP: 0018:ffffc900032d7a00 EFLAGS: 00000246 [ 1226.437866][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 1226.445851][ C1] RDX: ffffc9000c84a000 RSI: 0000000000002b17 RDI: 0000000000002b18 [ 1226.453836][ C1] RBP: ffffc900032d7ad0 R08: ffffffff911bc5ff R09: 1ffffffff22378bf [ 1226.461840][ C1] R10: dffffc0000000000 R11: fffffbfff22378c0 R12: 1ffff9200065af44 [ 1226.469837][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff9200065af65 [ 1226.477855][ C1] ? event_function+0x300/0x300 [ 1226.482737][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 1226.488483][ C1] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 1226.494235][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1226.499463][ C1] ? smp_call_function_single+0xb0/0x5a0 [ 1226.505125][ C1] smp_call_function_single+0x36d/0x5a0 [ 1226.510696][ C1] ? event_function+0x300/0x300 [ 1226.515589][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 1226.521775][ C1] ? event_function+0x300/0x300 [ 1226.526670][ C1] perf_install_in_context+0x5bb/0x920 [ 1226.532156][ C1] ? alloc_file_pseudo+0x1ae/0x210 [ 1226.537310][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 1226.543307][ C1] ? add_event_to_ctx+0x1170/0x1170 [ 1226.548548][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 1226.553799][ C1] ? perf_event__header_size+0x165/0x220 [ 1226.559467][ C1] __se_sys_perf_event_open+0x1841/0x1c60 [ 1226.565213][ C1] ? __fget_files+0x28/0x460 [ 1226.569842][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1226.575530][ C1] ? lock_chain_count+0x20/0x20 [ 1226.580425][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1226.585656][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1226.591318][ C1] do_syscall_64+0x55/0xb0 [ 1226.595754][ C1] ? clear_bhb_loop+0x40/0x90 [ 1226.600455][ C1] ? clear_bhb_loop+0x40/0x90 [ 1226.605158][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1226.611085][ C1] RIP: 0033:0x7f7edc19ce59 [ 1226.615523][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.635170][ C1] RSP: 002b:00007f7edcffa028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1226.643643][ C1] RAX: ffffffffffffffda RBX: 00007f7edc415fa0 RCX: 00007f7edc19ce59 [ 1226.651640][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 1226.659642][ C1] RBP: 00007f7edc232e6f R08: 000000000000000a R09: 0000000000000000 [ 1226.667641][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1226.675633][ C1] R13: 00007f7edc416038 R14: 00007f7edc415fa0 R15: 00007ffd3de236e8 [ 1226.683639][ C1]