last executing test programs: 5.135893384s ago: executing program 3 (id=16971): socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x58, &(0x7f0000000140)}, 0x10) socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) r6 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) recvmsg(r1, &(0x7f0000001800)={&(0x7f0000000280)=@generic, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000300)=""/229, 0xe5}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/187, 0xbb}], 0x4, &(0x7f0000001700)=""/227, 0xe3}, 0x2102) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x6b, 0x0, 0x0) sendmsg$kcm(r6, 0x0, 0x120008c0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 4.953159087s ago: executing program 1 (id=16975): r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c200, 0xac59, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x10, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x6, 0x6, 0x4}, 0x0, 0x7, 0xffffffffffffffff, 0x3) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x3, 0x18}, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x109, 0x5, 0x8, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x403, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 4.844323589s ago: executing program 3 (id=16976): r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x85}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r1 = socket$kcm(0x10, 0x0, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x115482, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0x28, 0x0, &(0x7f0000000540)="c1dfb080cd21d308098e00008100568186dd", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ca000000180100002020642500000000002020207b1af8ff00000000bfa100010000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r5, 0x0, 0x0) sendmsg$kcm(r5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="2d84c184ff"], 0xffdd) close(0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90424fc602f0009", 0x17}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 3.754637207s ago: executing program 3 (id=16980): socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:2/2N'], 0x6a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) r3 = socket$kcm(0xa, 0x2, 0x3a) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000340)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r5, 0x4) sendmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0xd7, &(0x7f0000000080), 0x1}, 0x0) r6 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) setsockopt$sock_attach_bpf(r7, 0x1, 0x42, &(0x7f0000000040), 0x3b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r8, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x120) sendmsg$inet(r8, &(0x7f0000000a80)={&(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.752645707s ago: executing program 1 (id=16990): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80d1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x5}, 0x21, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40004, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x2, 0x73) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x1) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="000f1500", 0x4}], 0x1}, 0x8004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x19, 0x0, 0xfcd8) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5d31, 0x48420, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext={0x3, 0x5}, 0x100e64, 0x2, 0x80000002, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x40) 3.328933865s ago: executing program 4 (id=16982): socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 3.264043665s ago: executing program 2 (id=16983): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd5a, 0x0, 0x8, 0x47, 0x0}}, 0x10) 3.187137156s ago: executing program 4 (id=16985): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x64317119, 0x0, 0x7fff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0, 0x42, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair(0x2, 0x3, 0x1, &(0x7f0000000180)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0xa, 0x0, 0xa4) 3.107983228s ago: executing program 2 (id=16986): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80d1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x5}, 0x21, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) (fail_nth: 2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80d1) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) 2.802221183s ago: executing program 4 (id=16987): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0xb}, {0x200, 0x0, 0x4}, {0x3, 0x4, 0x1000a, 0x5}], 0x10, 0xfffffff7}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4041}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4041}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.714418844s ago: executing program 3 (id=16989): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0xfffd}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x41) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x4) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x8915, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee6, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0e, 0xffffffffffffffa3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x40) close(r2) socket$kcm(0x10, 0x2, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000a80), 0x3}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={0xffffffffffffffff, 0x0, 0x66, 0xfe, &(0x7f0000000ac0)="58aebd2654d4ce67c4e223d9ea90a429a5409f17b8bde778a9eb3ad74dd2687f2e44f8904f1a29f31afbf6454a6f14ad700ed1a68379f48250ba5c96c735dca1a05a7716ac012980fc93f4c3863e014239d734fd7197f4ef50791928540b76056326fc02e2c5", &(0x7f0000000b40)=""/254, 0x0, 0x0, 0x11, 0x0, &(0x7f0000000c40)="0a45c9256badffa2eabdf3f8478cdb63d9", &(0x7f0000000c80), 0x4, 0x0, 0x1200000}, 0x50) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbca313a181002c000000000400000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x20008040) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r7 = getpid() r8 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0xc2, 0x4, 0x3c, 0x0, 0x3, 0x88040, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000001c0), 0x2}, 0x9, 0x3, 0x5b9, 0x4, 0x3978, 0x6, 0x6, 0x0, 0x10001, 0x0, 0x5}, 0x0, 0x8, r6, 0x9) socketpair(0x9, 0x1, 0xd, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x8, 0x92, 0xe, 0x0, 0x8, 0x2800, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x9, 0x7}, 0x0, 0x0, 0x5, 0x0, 0x80000001, 0x0, 0x8, 0x0, 0x1}, r7, 0x7, r8, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 2.662210245s ago: executing program 1 (id=16991): r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x85}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r1 = socket$kcm(0x10, 0x0, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x115482, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0x28, 0x0, &(0x7f0000000540)="c1dfb080cd21d308098e00008100568186dd", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ca000000180100002020642500000000002020207b1af8ff00000000bfa100010000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r5, 0x0, 0x0) sendmsg$kcm(r5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="2d84c184ff"], 0xffdd) close(0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90424fc602f0009", 0x17}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 2.644269476s ago: executing program 4 (id=16992): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x2}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) (rerun: 32) setsockopt$sock_attach_bpf(r1, 0x10f, 0x32, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040), 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000"], 0x48) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/17, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="030000000500"/28], 0x50) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYRES16=r0, @ANYRES64, @ANYRES32=r3, @ANYRES32=r0], 0x48) (rerun: 64) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x48) (async) close(r4) (async) r5 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d80000001d0081044e81f782db4400000000000053e0984f79fd2002000000000000a1180015000600142603f95029d5d21fdde8000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d916a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad90200e006dcdf63951f215ce3000000000000000000", 0xb7}], 0x1}, 0x0) (async) r6 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) (async, rerun: 64) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') socket$kcm(0x10, 0x2, 0x4) 2.584420237s ago: executing program 2 (id=16993): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691081000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) socketpair(0x1f, 0x2, 0x5, &(0x7f0000000580)) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random='<\x00'}) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r5, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000540)="f4000900062b2f25fe80000000000000dc8b2b8b816937dcef1258850f238466cc00007a000000ad6e91880b", 0x2c}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd5a, 0x0, 0x8, 0x47, 0x0}}, 0x10) 2.37813123s ago: executing program 2 (id=16994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x2, 0x21) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000dc0)='>', 0x1}], 0x1}, 0x0) write$cgroup_subtree(r3, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/225, 0xe1}], 0x1}, 0x2142) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000001580)) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'a', ' *:* ', 'm\x00'}, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1a, 0x1a, 0x8, [@datasec={0x10, 0x1, 0x0, 0xf, 0x2, [{0x9, 0x9, 0x6345}], "0bea"}]}, {0x0, [0x0, 0x0, 0x5f, 0x5f, 0x61, 0x2e]}}, &(0x7f0000000240)=""/161, 0x3c, 0xa1, 0x1, 0x4, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x8, 0x0, r6, 0x8001, '\x00', r7, r9, 0x0, 0x5, 0x2}, 0x50) 2.105893215s ago: executing program 0 (id=16995): socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xfe, 0xbd, 0x0, 0x0, 0x0, 0x1, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000300875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 1.893601178s ago: executing program 4 (id=16996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002740)=ANY=[@ANYBLOB="0100000004000000040000000400000004000000", @ANYBLOB="d4f89389e3fd5da6a67057e254200244f10ff742382cd40abef07e69ed5a380c2a0e957284f1fd686a373c45cd4996170bf39bab369364a3b3f79efc5f9fd3df525f6237b482deec71eab0984355253743fbd3237ff045cbe09d9aa3c20294ab9dbf16289ee3b91ba98827089b784832dac767b42748473711c27213489bb1b9b7a6a196764fa341d67cacda97a33a36315f08fb1c4d56a2fb00f40fe8a211048ed574bd0cc4ea34eb7e64bf452bc34bcd75f721c45080c7f36a92cbe69a2f369bf8d555068d41ed528e412a5d0a409b7463dce9674b06e8aba4e28e6c199921ee3d36835f1ec6e9568ed966c34e2bc17f2be2d50562880a77", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYBLOB='\x00'/28], 0x48) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b703000020000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1a00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="080000604bf53d645388cd5d8600080000000000000000000000001000eefbcb94e27ecb5edfbfc55f50a8ae6c1a14ed7b69567ebfc1fb193c189f914f6370116f684f9e6e59bfddc5e9c4d67982391b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffb3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x48}, 0x4008004) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a2, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000000600000004"], 0x48) r9 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r9, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f354", 0x14}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fc3d15e888cb0f5d02e77bfecefda6b064c8bb2b66a0080000000000000330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c13f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001180)=ANY=[@ANYBLOB="11000000000000000000000001000004000000000000000014000000000000000000000002000000f9860000000000004000000000000000000000000700000001442c7401ac1414aa000000077f00000100000007e00000010001000164010100000000030a01010100006dcb00000088000000000000000000000007000000447d63ac1e0001004200816401010100000007e000000200000fff7f00000100000005860a8e3ff446131e6d1d070f3cac1e0101e0000002e00000018927d2ffffffff0a010102e0000001ac1414aa00000000e000000200000000ac01008a4c6698df853ffb0000ffffff44085b7000000004440cf363"], 0xf8}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg1\x00', 0xe43986f95b0e4309}) 1.77803183s ago: executing program 0 (id=16997): socket$kcm(0x29, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 1.641849233s ago: executing program 0 (id=16998): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x64317119, 0x0, 0x7fff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0, 0x42, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair(0x2, 0x3, 0x1, &(0x7f0000000180)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0xa, 0x0, 0xa4) 1.568143384s ago: executing program 1 (id=16999): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x336) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r5, &(0x7f0000000680)={&(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="bffa768bbf817c9a8c4c78d066596c31c56440a0fd758e7dda5edfc8363464d4bfc9186df7d206008f93792bffa12aa0beabcec33f6f811f47509d87875ab967faef0b40013699d3814d3bf52303a24b74fb2fc95db1a04aa06394b868c38a050243a95fb8ae3a548851cc90ca58397f0532ce74d5cb6cd864471d14f00a56283ea0555825116bf6d3f57bf7d45a03a462fa", 0x92}, {&(0x7f0000000540)="8b22ed0120734507521a6933e0805a876f8e29e84eaa87ad4f7ff33f8165e778c28f5bf33693deab8a8bc171482645934f0c1b7cf7a6fd1f10ab442d73a6bc82b93faf185191eefcf99e48c85a3a7bf2d7f9567848cfca3a3f05153cccfc0c29b39ce15cbb80dcd6dc6e6b5312b9eb4d889bb4197a81c067a1fab18e147e35dc69086fb20ba2b4b44662d7f087a0c23610788f8d0e19013b2cd0e145c96de5cd6e27c2406ea1e7c3fabb11be4c7780f5bbce405b55f127b1378417fb7cffdd6ae927115024f78adb07ec5fbe0137bca3d660c4eb68167a", 0xd7}], 0x2}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000d00)={r6}, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1d, 0x800, 0x2, &(0x7f0000000080)) r7 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) 1.529850035s ago: executing program 3 (id=17000): socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) syz_clone(0xcd480, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000280)="42f2a7e4c08a137106a9a3b78ba99c30644e8267ab44b5b09e0ac65381c0e05ba27c7f2e63f16527a3dc312b2bfabaf061b8b64efd7ab70ba0ac5c1830395807d5b4d0d06c942ba3d473a1086e4017067160") ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0fe8ffff03000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r2, &(0x7f0000000200)="ba"}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000000000000000000400"/24]) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x6a) bpf$PROG_LOAD(0x5, 0x0, 0xfffffeb2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x6, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2128}, 0x20000804) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) socket$kcm(0xa, 0x5, 0x0) 1.528471895s ago: executing program 2 (id=17010): syz_clone(0xcd480, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000280)="42f2a7e4c08a137106a9a3b78ba99c30644e8267ab44b5b09e0ac65381c0e05ba27c7f2e63f16527a3dc312b2bfabaf061b8b64efd7ab70ba0ac5c1830395807d5b4d0d06c942ba3d473a1086e4017067160") ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x2, 0x4, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00000000001000000000f0000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r2, &(0x7f0000000200)="ba"}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000100)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x6a) bpf$PROG_LOAD(0x5, 0x0, 0xfffffeb2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x6, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2128}, 0x20000804) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x88) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) 1.445317045s ago: executing program 0 (id=17001): r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c200, 0xac59, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x10, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x6, 0x6, 0x4}, 0x0, 0x7, 0xffffffffffffffff, 0x3) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x3, 0x18}, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x109, 0x5, 0x8, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x403, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.205289289s ago: executing program 1 (id=17002): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, 0x0, 0x4000080) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, 0x0, &(0x7f0000000240)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x803, 0x1, &(0x7f0000000040)) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="d80000002c0081024e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r7 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r7, 0x10d, 0x2, &(0x7f0000000040), 0x17) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f8480100000001000000000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004880)=""/4129, 0x1021}, {&(0x7f0000000900)=""/4071, 0xfe7}], 0x2}, 0x12100) r10 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x4, 0x4, 0x4, 0x4000b, 0xc14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0xfffffffe}, 0x50) sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f698537672f3c0c6e5391c0c7a51e00b3b1abec39685dca3b9f5975b85413e66459a95ea6336c8692e9d5fd8d52d8d068e29f9ba3f7639e01c9cbcee01d60a4961", 0x9a}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 1.18579821s ago: executing program 0 (id=17003): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x27, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632f77fbac141416e000030a94029f0303", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 124.098067ms ago: executing program 3 (id=17004): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) openat$cgroup_freezer_state(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000000880)='N', 0x1}], 0x1}, 0xc54) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600df01341090005000400000037153e370248038011f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) 91.553258ms ago: executing program 4 (id=17005): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x100, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x4b15}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee01, 0xee00}}}], 0x38, 0x4050}, 0x20000800) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40012140) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb110018000000000000000c0000000c08000004001000010000000000000f030000000094612e00"], 0x0, 0x28}, 0x28) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="8fedcb7907009875f35538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06770786d0b14974b1f586fa8602969a604da0e264"], 0xfdef) r6 = socket$kcm(0x21, 0x2, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000000004ae6f69d40f49f0a876b5000000080000e8a79f1000000100000033f237b3d3500927dbc00b967889ef109835aca5e1d5205c268537e19466b8d80fcb11445f017221153a59836aee58f4bf0a46405bc4bae0ad2a89aa95b646", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000000004008500000033"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) sendmsg$kcm(r6, 0x0, 0x200008c0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18}, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x0, @private=0xa010102}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 79.825428ms ago: executing program 1 (id=17006): r0 = socket$kcm(0x10, 0x3, 0x4) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair(0x1a, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e343a185bbf7000000016ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010300090c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x89}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000ce000000bf0900000000000055090100000000409500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000200)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x24}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x97}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000380)='GPL\x00', 0x9, 0x6a, &(0x7f00000003c0)=""/106, 0x41100, 0x64, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000540)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x1, 0xfffff839, 0x2e}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f00000005c0)=[{0x2, 0x4, 0x2, 0x1}, {0x3, 0x5, 0x6}, {0x0, 0x2, 0x4, 0x8}, {0x4, 0x2}, {0x4, 0x2, 0xe, 0x5}, {0x5, 0x5, 0x3, 0x5}, {0x5, 0x1, 0x5, 0x7}, {0x3, 0x1, 0x4, 0x7}, {0x0, 0x2, 0x4, 0x8}], 0x10, 0x3ff}, 0x94) 78.638919ms ago: executing program 0 (id=17007): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, 0x0, 0xc800) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, 0x0, &(0x7f0000000240)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x803, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="d80000002c0081024e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r8 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r8, 0x10d, 0x2, &(0x7f0000000040), 0x17) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f8480100000001000000000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004880)=""/4129, 0x1021}, {&(0x7f0000000900)=""/4071, 0xfe7}], 0x2}, 0x12000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r10}, 0x8) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x28, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0400000004000000040000000b000400140c0000", @ANYRES32, @ANYBLOB="00000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000feffffff00"/28], 0x50) 0s ago: executing program 2 (id=17008): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) kernel console output (not intermixed with test programs): : batadv_slave_0 [ 2884.018734][T23309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2884.060140][T23309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2884.192361][T23309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2884.568542][T23313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2885.327605][T23338] netlink: 'syz.2.16088': attribute type 39 has an invalid length. [ 2885.513111][T23349] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16091'. [ 2885.548496][T23349] FAULT_INJECTION: forcing a failure. [ 2885.548496][T23349] name failslab, interval 1, probability 0, space 0, times 0 [ 2885.599519][T23349] CPU: 0 PID: 23349 Comm: syz.4.16091 Not tainted syzkaller #0 [ 2885.607173][T23349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2885.617309][T23349] Call Trace: [ 2885.620646][T23349] [ 2885.623627][T23349] dump_stack_lvl+0x188/0x24e [ 2885.628373][T23349] ? show_regs_print_info+0x12/0x12 [ 2885.633640][T23349] ? load_image+0x410/0x410 [ 2885.638223][T23349] ? __lock_acquire+0x7bd0/0x7bd0 [ 2885.643322][T23349] ? __mutex_lock+0x1ab/0xae0 [ 2885.648067][T23349] should_fail_ex+0x390/0x4c0 [ 2885.652810][T23349] should_failslab+0x5/0x20 [ 2885.657374][T23349] slab_pre_alloc_hook+0x59/0x300 [ 2885.662456][T23349] ? mutex_lock_nested+0x10/0x10 [ 2885.667449][T23349] ? __ipv6_dev_mc_inc+0x3fb/0xac0 [ 2885.672601][T23349] __kmem_cache_alloc_node+0x4f/0x270 [ 2885.678040][T23349] ? __ipv6_dev_mc_inc+0x3fb/0xac0 [ 2885.683195][T23349] kmalloc_trace+0x26/0xe0 [ 2885.687660][T23349] __ipv6_dev_mc_inc+0x3fb/0xac0 [ 2885.692638][T23349] __ipv6_sock_mc_join+0x562/0x7e0 [ 2885.697798][T23349] ipv6_mc_config+0x64/0xc0 [ 2885.702340][T23349] inet6_addr_add+0x264/0x9c0 [ 2885.707100][T23349] ? ipv6_mc_up+0x240/0x2f0 [ 2885.711645][T23349] inet6_rtm_newaddr+0x6c9/0x8f0 [ 2885.716629][T23349] ? inet6_dump_ifinfo+0x950/0x950 [ 2885.721791][T23349] ? inet6_dump_ifinfo+0x950/0x950 [ 2885.726939][T23349] rtnetlink_rcv_msg+0x863/0xfb0 [ 2885.731910][T23349] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 2885.737061][T23349] ? rtnetlink_bind+0x80/0x80 [ 2885.741770][T23349] ? __local_bh_enable_ip+0x136/0x1c0 [ 2885.747178][T23349] ? lockdep_hardirqs_on+0x94/0x140 [ 2885.752414][T23349] ? __local_bh_enable_ip+0x136/0x1c0 [ 2885.757815][T23349] ? _local_bh_enable+0xa0/0xa0 [ 2885.762699][T23349] ? __dev_queue_xmit+0x281/0x3810 [ 2885.767849][T23349] ? __dev_queue_xmit+0x281/0x3810 [ 2885.772995][T23349] ? __dev_queue_xmit+0x1d84/0x3810 [ 2885.778236][T23349] ? __dev_queue_xmit+0x281/0x3810 [ 2885.783395][T23349] ? ref_tracker_free+0x682/0x830 [ 2885.788462][T23349] ? refcount_inc+0x70/0x70 [ 2885.792998][T23349] ? memcpy+0x3c/0x60 [ 2885.797011][T23349] ? __copy_skb_header+0x3ba/0x4f0 [ 2885.802160][T23349] ? __skb_clone+0x446/0x6c0 [ 2885.806780][T23349] netlink_rcv_skb+0x1ef/0x440 [ 2885.811580][T23349] ? rtnetlink_bind+0x80/0x80 [ 2885.816294][T23349] ? netlink_ack+0x1160/0x1160 [ 2885.821102][T23349] ? netlink_deliver_tap+0x2e/0x1b0 [ 2885.826338][T23349] netlink_unicast+0x7ad/0x920 [ 2885.831145][T23349] netlink_sendmsg+0x8ad/0xbd0 [ 2885.835950][T23349] ? netlink_getsockopt+0x550/0x550 [ 2885.841183][T23349] ? aa_sock_msg_perm+0x94/0x150 [ 2885.846152][T23349] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2885.851464][T23349] ? security_socket_sendmsg+0x7c/0xa0 [ 2885.856951][T23349] ? netlink_getsockopt+0x550/0x550 [ 2885.862189][T23349] ____sys_sendmsg+0x5ed/0x9a0 [ 2885.866998][T23349] ? __sys_sendmsg_sock+0x30/0x30 [ 2885.872057][T23349] ? __import_iovec+0x306/0x510 [ 2885.876942][T23349] ? import_iovec+0x6f/0xa0 [ 2885.881481][T23349] ___sys_sendmsg+0x2a2/0x360 [ 2885.886192][T23349] ? __sys_sendmsg+0x2a0/0x2a0 [ 2885.891004][T23349] ? __lock_acquire+0x7bd0/0x7bd0 [ 2885.896096][T23349] __se_sys_sendmsg+0x1c3/0x2b0 [ 2885.900977][T23349] ? ct_nmi_exit+0x145/0x1c0 [ 2885.905605][T23349] ? __x64_sys_sendmsg+0x80/0x80 [ 2885.910593][T23349] ? lockdep_hardirqs_on+0x94/0x140 [ 2885.915831][T23349] do_syscall_64+0x4c/0xa0 [ 2885.920275][T23349] ? clear_bhb_loop+0x60/0xb0 [ 2885.924980][T23349] ? clear_bhb_loop+0x60/0xb0 [ 2885.929688][T23349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2885.935630][T23349] RIP: 0033:0x7f2362b9ce59 [ 2885.940077][T23349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2885.959716][T23349] RSP: 002b:00007f2360df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2885.968163][T23349] RAX: ffffffffffffffda RBX: 00007f2362e15fa0 RCX: 00007f2362b9ce59 [ 2885.976166][T23349] RDX: 0000000020004c04 RSI: 0000200000000080 RDI: 0000000000000003 [ 2885.984165][T23349] RBP: 00007f2360df6090 R08: 0000000000000000 R09: 0000000000000000 [ 2885.992169][T23349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2886.000176][T23349] R13: 00007f2362e16038 R14: 00007f2362e15fa0 R15: 00007ffe2a9239a8 [ 2886.008197][T23349] [ 2886.290469][T23358] netlink: 'syz.1.16093': attribute type 16 has an invalid length. [ 2886.356607][T23358] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16093'. [ 2886.621779][T23357] netlink: 'syz.4.16094': attribute type 11 has an invalid length. [ 2886.630623][T23357] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16094'. [ 2886.667746][T23357] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.16094'. [ 2886.713340][T23361] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16095'. [ 2886.736766][T23362] netlink: 'syz.1.16093': attribute type 10 has an invalid length. [ 2887.103093][T23380] netlink: 'syz.2.16102': attribute type 39 has an invalid length. [ 2887.963301][T23385] netlink: 'syz.3.16103': attribute type 10 has an invalid length. [ 2888.048693][T23385] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16103'. [ 2888.188723][T23392] netlink: 'syz.3.16103': attribute type 10 has an invalid length. [ 2888.778012][T23409] netlink: 'syz.3.16108': attribute type 10 has an invalid length. [ 2889.237635][T23423] netlink: 'syz.0.16112': attribute type 16 has an invalid length. [ 2889.277182][T23423] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16112'. [ 2889.407843][T23430] netlink: 'syz.2.16115': attribute type 39 has an invalid length. [ 2889.459066][T23428] netlink: 'syz.0.16112': attribute type 10 has an invalid length. [ 2890.311461][T23452] netlink: 'syz.2.16120': attribute type 10 has an invalid length. [ 2890.358571][T23452] netlink: 168 bytes leftover after parsing attributes in process `syz.2.16120'. [ 2891.078718][T23460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2891.097145][T23460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2891.126254][T23460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2891.218625][T23460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2892.429912][T23481] netlink: 'syz.3.16130': attribute type 39 has an invalid length. [ 2892.617693][T23487] netlink: 'syz.2.16131': attribute type 16 has an invalid length. [ 2892.638569][T23487] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16131'. [ 2892.812171][T23491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2892.853462][T23492] netlink: 'syz.2.16131': attribute type 10 has an invalid length. [ 2893.115813][T23509] netlink: 'syz.3.16137': attribute type 6 has an invalid length. [ 2893.154877][T23509] netlink: 164 bytes leftover after parsing attributes in process `syz.3.16137'. [ 2893.188727][T23507] netlink: 'syz.1.16135': attribute type 10 has an invalid length. [ 2893.210398][T23507] netlink: 168 bytes leftover after parsing attributes in process `syz.1.16135'. [ 2894.085637][T23521] validate_nla: 1 callbacks suppressed [ 2894.085680][T23521] netlink: 'syz.2.16144': attribute type 39 has an invalid length. [ 2894.996702][T23539] tipc: Started in network mode [ 2895.053648][T23539] tipc: Node identity 9215a268, cluster identity 4711 [ 2895.098257][T23539] tipc: Node number set to 2450891368 [ 2895.883310][T23568] netlink: 'syz.1.16158': attribute type 39 has an invalid length. [ 2896.251359][T23571] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.16159'. [ 2897.251054][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.257529][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2897.361865][T23598] netlink: 'syz.3.16166': attribute type 21 has an invalid length. [ 2897.382775][T23598] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16166'. [ 2898.203408][T23617] netlink: 'syz.0.16184': attribute type 39 has an invalid length. [ 2898.363509][T23623] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.16174'. [ 2899.245224][T23636] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16179'. [ 2900.831096][T23664] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.16189'. [ 2906.889533][T23755] FAULT_INJECTION: forcing a failure. [ 2906.889533][T23755] name failslab, interval 1, probability 0, space 0, times 0 [ 2907.143296][T23755] CPU: 0 PID: 23755 Comm: syz.1.16220 Not tainted syzkaller #0 [ 2907.150951][T23755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2907.161057][T23755] Call Trace: [ 2907.164379][T23755] [ 2907.167351][T23755] dump_stack_lvl+0x188/0x24e [ 2907.172078][T23755] ? sctp_sendmsg+0x1686/0x2940 [ 2907.176981][T23755] ? ___sys_sendmsg+0x2a2/0x360 [ 2907.181880][T23755] ? show_regs_print_info+0x12/0x12 [ 2907.187137][T23755] ? load_image+0x410/0x410 [ 2907.191723][T23755] should_fail_ex+0x390/0x4c0 [ 2907.196458][T23755] should_failslab+0x5/0x20 [ 2907.201005][T23755] slab_pre_alloc_hook+0x59/0x300 [ 2907.206084][T23755] ? sctp_add_bind_addr+0x89/0x350 [ 2907.211249][T23755] __kmem_cache_alloc_node+0x4f/0x270 [ 2907.216712][T23755] ? sctp_add_bind_addr+0x89/0x350 [ 2907.221878][T23755] kmalloc_trace+0x26/0xe0 [ 2907.226351][T23755] sctp_add_bind_addr+0x89/0x350 [ 2907.231341][T23755] sctp_copy_local_addr_list+0x317/0x4d0 [ 2907.237031][T23755] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 2907.242810][T23755] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 2907.248930][T23755] ? sctp_v4_is_any+0x31/0x50 [ 2907.253656][T23755] ? sctp_copy_one_addr+0x93/0x660 [ 2907.258822][T23755] sctp_bind_addr_copy+0xaf/0x3c0 [ 2907.263896][T23755] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 2907.270297][T23755] sctp_connect_new_asoc+0x2f5/0x6a0 [ 2907.275654][T23755] ? __sctp_connect+0xd80/0xd80 [ 2907.280544][T23755] ? __local_bh_enable_ip+0x136/0x1c0 [ 2907.285953][T23755] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 2907.291532][T23755] ? security_sctp_bind_connect+0x85/0xb0 [ 2907.297319][T23755] sctp_sendmsg+0x1686/0x2940 [ 2907.302040][T23755] ? sctp_getsockopt+0x8a0/0x8a0 [ 2907.307010][T23755] ? __might_fault+0xa6/0x120 [ 2907.311715][T23755] ? aa_af_perm+0x340/0x340 [ 2907.316249][T23755] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2907.322708][T23755] ? inet_sendmsg+0xca/0x2a0 [ 2907.327325][T23755] ? inet_send_prepare+0x250/0x250 [ 2907.332472][T23755] ____sys_sendmsg+0x5ed/0x9a0 [ 2907.337276][T23755] ? __sys_sendmsg_sock+0x30/0x30 [ 2907.342328][T23755] ? __import_iovec+0x306/0x510 [ 2907.347216][T23755] ? import_iovec+0x6f/0xa0 [ 2907.351755][T23755] ___sys_sendmsg+0x2a2/0x360 [ 2907.356473][T23755] ? __sys_sendmsg+0x2a0/0x2a0 [ 2907.361283][T23755] ? __lock_acquire+0x7bd0/0x7bd0 [ 2907.366361][T23755] __se_sys_sendmsg+0x1c3/0x2b0 [ 2907.371244][T23755] ? __x64_sys_sendmsg+0x80/0x80 [ 2907.376223][T23755] ? lockdep_hardirqs_on+0x94/0x140 [ 2907.381459][T23755] do_syscall_64+0x4c/0xa0 [ 2907.385905][T23755] ? clear_bhb_loop+0x60/0xb0 [ 2907.390612][T23755] ? clear_bhb_loop+0x60/0xb0 [ 2907.395322][T23755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2907.401254][T23755] RIP: 0033:0x7f69d719ce59 [ 2907.405702][T23755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2907.425340][T23755] RSP: 002b:00007f69d8007028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2907.433779][T23755] RAX: ffffffffffffffda RBX: 00007f69d7415fa0 RCX: 00007f69d719ce59 [ 2907.441775][T23755] RDX: 00000000000040f0 RSI: 0000200000000240 RDI: 0000000000000003 [ 2907.449773][T23755] RBP: 00007f69d8007090 R08: 0000000000000000 R09: 0000000000000000 [ 2907.457769][T23755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2907.465761][T23755] R13: 00007f69d7416038 R14: 00007f69d7415fa0 R15: 00007ffe091c87c8 [ 2907.473800][T23755] [ 2907.938077][T23762] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.16223'. [ 2908.614154][T11779] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 2908.622273][T11779] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 2908.631916][T11779] CPU: 0 PID: 11779 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 2908.639614][T11779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2908.649731][T11779] Workqueue: hci1 hci_rx_work [ 2908.654482][T11779] Call Trace: [ 2908.657808][T11779] [ 2908.660791][T11779] dump_stack_lvl+0x188/0x24e [ 2908.665541][T11779] ? show_regs_print_info+0x12/0x12 [ 2908.670802][T11779] ? load_image+0x410/0x410 [ 2908.675439][T11779] sysfs_create_dir_ns+0x26a/0x290 [ 2908.680629][T11779] ? __lock_acquire+0x7bd0/0x7bd0 [ 2908.685721][T11779] ? sysfs_warn_dup+0xa0/0xa0 [ 2908.690467][T11779] ? do_raw_spin_unlock+0x11d/0x230 [ 2908.695729][T11779] kobject_add_internal+0x617/0xca0 [ 2908.701006][T11779] kobject_add+0x160/0x230 [ 2908.705488][T11779] ? kobject_init+0x1c0/0x1c0 [ 2908.710226][T11779] ? __raw_spin_lock_init+0x41/0x100 [ 2908.715556][T11779] ? klist_children_get+0x50/0x50 [ 2908.720636][T11779] ? get_device_parent+0x121/0x3e0 [ 2908.725803][T11779] device_add+0x470/0x1050 [ 2908.730275][T11779] hci_conn_add_sysfs+0xd1/0x1e0 [ 2908.735276][T11779] le_conn_complete_evt+0xf69/0x1560 [ 2908.740644][T11779] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 2908.746955][T11779] ? bt_info+0x180/0x180 [ 2908.751245][T11779] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2908.756918][T11779] ? mutex_unlock+0x10/0x10 [ 2908.761451][T11779] ? skb_pull_data+0xec/0x1f0 [ 2908.766170][T11779] hci_le_enh_conn_complete_evt+0x185/0x460 [ 2908.772108][T11779] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 2908.778567][T11779] ? hci_remote_host_features_evt+0x230/0x230 [ 2908.784664][T11779] hci_event_packet+0x7b3/0x1290 [ 2908.789668][T11779] ? __lock_acquire+0x7bd0/0x7bd0 [ 2908.794744][T11779] ? bis_list+0x280/0x280 [ 2908.799110][T11779] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2908.805046][T11779] ? kcov_remote_start+0x4b0/0x7e0 [ 2908.810192][T11779] ? nf_ct_resolve_clash+0x572/0x68f [ 2908.815511][T11779] ? hci_send_to_monitor+0x9c/0x4a0 [ 2908.820752][T11779] hci_rx_work+0x3eb/0xd40 [ 2908.825204][T11779] ? _raw_spin_unlock+0x40/0x40 [ 2908.830098][T11779] ? process_one_work+0x7b4/0x1160 [ 2908.835239][T11779] process_one_work+0x8ab/0x1160 [ 2908.840220][T11779] ? worker_detach_from_pool+0x240/0x240 [ 2908.845887][T11779] ? _raw_spin_lock_irq+0x86/0xf0 [ 2908.850955][T11779] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2908.856014][T11779] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2908.861595][T11779] ? wq_worker_running+0x97/0x190 [ 2908.866646][T11779] worker_thread+0xaf5/0x12a0 [ 2908.871372][T11779] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2908.877308][T11779] kthread+0x29d/0x330 [ 2908.881401][T11779] ? worker_clr_flags+0x1a0/0x1a0 [ 2908.886457][T11779] ? kthread_blkcg+0xd0/0xd0 [ 2908.891098][T11779] ret_from_fork+0x1f/0x30 [ 2908.895563][T11779] [ 2908.899796][T11779] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2908.914071][T11779] Bluetooth: hci1: failed to register connection device [ 2909.758147][T23786] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16228'. [ 2910.928370][T11779] Bluetooth: hci1: command 0x2016 tx timeout [ 2914.768288][T16543] Bluetooth: hci3: command 0x0406 tx timeout [ 2916.124145][T23834] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.16243'. [ 2917.126709][T23860] netlink: 'syz.0.16253': attribute type 1 has an invalid length. [ 2917.240282][T23860] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.16253'. [ 2917.724014][T23875] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16256'. [ 2919.735097][T23910] netlink: 'syz.0.16267': attribute type 10 has an invalid length. [ 2919.784803][T23912] netlink: 'syz.3.16268': attribute type 29 has an invalid length. [ 2919.807684][T23912] netlink: 'syz.3.16268': attribute type 29 has an invalid length. [ 2919.825337][T23916] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16269'. [ 2920.055490][T23923] netlink: 'syz.0.16271': attribute type 1 has an invalid length. [ 2920.075639][T23923] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.16271'. [ 2921.084425][T23912] netlink: 'syz.3.16268': attribute type 29 has an invalid length. [ 2921.296630][T23934] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.16272'. [ 2922.066626][T23955] netlink: 'syz.1.16283': attribute type 1 has an invalid length. [ 2922.114379][T23955] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.16283'. [ 2922.312400][T23969] FAULT_INJECTION: forcing a failure. [ 2922.312400][T23969] name failslab, interval 1, probability 0, space 0, times 0 [ 2922.438446][T23969] CPU: 0 PID: 23969 Comm: syz.2.16287 Not tainted syzkaller #0 [ 2922.446112][T23969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2922.456257][T23969] Call Trace: [ 2922.459588][T23969] [ 2922.462568][T23969] dump_stack_lvl+0x188/0x24e [ 2922.467310][T23969] ? show_regs_print_info+0x12/0x12 [ 2922.472568][T23969] ? load_image+0x410/0x410 [ 2922.477145][T23969] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2922.483207][T23969] ? __lock_acquire+0x7bd0/0x7bd0 [ 2922.488309][T23969] should_fail_ex+0x390/0x4c0 [ 2922.493055][T23969] should_failslab+0x5/0x20 [ 2922.497634][T23969] slab_pre_alloc_hook+0x59/0x300 [ 2922.502745][T23969] kmem_cache_alloc+0x56/0x2f0 [ 2922.507560][T23969] ? __build_skb+0x27/0x3b0 [ 2922.512137][T23969] __build_skb+0x27/0x3b0 [ 2922.516518][T23969] ? build_skb+0x14/0x230 [ 2922.520921][T23969] build_skb+0x1e/0x230 [ 2922.525150][T23969] bpf_prog_test_run_skb+0x38d/0x18e0 [ 2922.530598][T23969] ? __fget_files+0x28/0x460 [ 2922.535260][T23969] ? __fget_files+0x3fc/0x460 [ 2922.540033][T23969] ? cpu_online+0xa0/0xa0 [ 2922.544439][T23969] bpf_prog_test_run+0x31c/0x390 [ 2922.549466][T23969] __sys_bpf+0x62b/0x780 [ 2922.553790][T23969] ? bpf_link_show_fdinfo+0x380/0x380 [ 2922.559276][T23969] ? lock_chain_count+0x20/0x20 [ 2922.564247][T23969] __x64_sys_bpf+0x78/0x90 [ 2922.568748][T23969] do_syscall_64+0x4c/0xa0 [ 2922.573232][T23969] ? clear_bhb_loop+0x60/0xb0 [ 2922.577964][T23969] ? clear_bhb_loop+0x60/0xb0 [ 2922.582699][T23969] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2922.588654][T23969] RIP: 0033:0x7ff2aa79ce59 [ 2922.593125][T23969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2922.612826][T23969] RSP: 002b:00007ff2ab61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2922.621308][T23969] RAX: ffffffffffffffda RBX: 00007ff2aaa15fa0 RCX: 00007ff2aa79ce59 [ 2922.629342][T23969] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 2922.637364][T23969] RBP: 00007ff2ab61f090 R08: 0000000000000000 R09: 0000000000000000 [ 2922.645383][T23969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2922.653402][T23969] R13: 00007ff2aaa16038 R14: 00007ff2aaa15fa0 R15: 00007ffff932f3f8 [ 2922.661476][T23969] [ 2922.899237][T23974] netlink: 'syz.4.16291': attribute type 21 has an invalid length. [ 2923.118469][T23974] netlink: 'syz.4.16291': attribute type 12 has an invalid length. [ 2923.127110][T23974] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16291'. [ 2923.556736][T24001] netlink: 'syz.0.16300': attribute type 9 has an invalid length. [ 2923.707497][T16543] Bluetooth: hci1: ISO packet for unknown connection handle 3861 [ 2923.725296][T24004] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.16300'. [ 2925.187928][T24039] netlink: 'syz.2.16310': attribute type 21 has an invalid length. [ 2925.284117][T24039] netlink: 'syz.2.16310': attribute type 12 has an invalid length. [ 2925.312954][T24039] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16310'. [ 2925.739830][T24053] FAULT_INJECTION: forcing a failure. [ 2925.739830][T24053] name failslab, interval 1, probability 0, space 0, times 0 [ 2925.803980][T24053] CPU: 0 PID: 24053 Comm: syz.4.16315 Not tainted syzkaller #0 [ 2925.811620][T24053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2925.821723][T24053] Call Trace: [ 2925.825044][T24053] [ 2925.828014][T24053] dump_stack_lvl+0x188/0x24e [ 2925.832746][T24053] ? show_regs_print_info+0x12/0x12 [ 2925.837994][T24053] ? load_image+0x410/0x410 [ 2925.842559][T24053] ? __might_sleep+0xd0/0xd0 [ 2925.847191][T24053] ? __lock_acquire+0x7bd0/0x7bd0 [ 2925.852279][T24053] should_fail_ex+0x390/0x4c0 [ 2925.857016][T24053] should_failslab+0x5/0x20 [ 2925.861560][T24053] slab_pre_alloc_hook+0x59/0x300 [ 2925.866669][T24053] ? tomoyo_encode+0x28a/0x550 [ 2925.871494][T24053] __kmem_cache_alloc_node+0x4f/0x270 [ 2925.876916][T24053] ? tomoyo_encode+0x28a/0x550 [ 2925.881733][T24053] __kmalloc+0xa3/0x240 [ 2925.885977][T24053] tomoyo_encode+0x28a/0x550 [ 2925.890624][T24053] tomoyo_realpath_from_path+0x578/0x5c0 [ 2925.896309][T24053] ? tomoyo_domain+0xd2/0x120 [ 2925.901042][T24053] ? tomoyo_path_number_perm+0x205/0x650 [ 2925.906728][T24053] tomoyo_path_number_perm+0x22f/0x650 [ 2925.912245][T24053] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2925.917751][T24053] ? ksys_write+0x1ce/0x260 [ 2925.922305][T24053] ? common_file_perm+0x171/0x1c0 [ 2925.927434][T24053] ? __fget_files+0x28/0x460 [ 2925.932120][T24053] security_file_ioctl+0x6c/0xa0 [ 2925.937111][T24053] __se_sys_ioctl+0x48/0x170 [ 2925.941754][T24053] do_syscall_64+0x4c/0xa0 [ 2925.946241][T24053] ? clear_bhb_loop+0x60/0xb0 [ 2925.950983][T24053] ? clear_bhb_loop+0x60/0xb0 [ 2925.955704][T24053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2925.961652][T24053] RIP: 0033:0x7f2362b9ce59 [ 2925.966104][T24053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2925.985755][T24053] RSP: 002b:00007f2360dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2925.994216][T24053] RAX: ffffffffffffffda RBX: 00007f2362e16090 RCX: 00007f2362b9ce59 [ 2926.002232][T24053] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000009 [ 2926.010238][T24053] RBP: 00007f2360dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 2926.018248][T24053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2926.026252][T24053] R13: 00007f2362e16128 R14: 00007f2362e16090 R15: 00007ffe2a9239a8 [ 2926.034275][T24053] [ 2926.098518][T24053] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2927.317201][T24089] sctp: [Deprecated]: syz.3.16325 (pid 24089) Use of int in maxseg socket option. [ 2927.317201][T24089] Use struct sctp_assoc_value instead [ 2927.852009][T24105] netlink: 'syz.3.16329': attribute type 21 has an invalid length. [ 2928.028587][T24111] netlink: 'syz.3.16329': attribute type 12 has an invalid length. [ 2928.038354][T24111] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16329'. [ 2928.100920][T24115] netlink: 'syz.2.16331': attribute type 11 has an invalid length. [ 2928.117786][T24115] netlink: 'syz.2.16331': attribute type 6 has an invalid length. [ 2928.136242][T24115] netlink: 125060 bytes leftover after parsing attributes in process `syz.2.16331'. [ 2928.206379][T24118] FAULT_INJECTION: forcing a failure. [ 2928.206379][T24118] name failslab, interval 1, probability 0, space 0, times 0 [ 2928.264787][T24118] CPU: 1 PID: 24118 Comm: syz.4.16332 Not tainted syzkaller #0 [ 2928.272438][T24118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2928.282546][T24118] Call Trace: [ 2928.285872][T24118] [ 2928.288856][T24118] dump_stack_lvl+0x188/0x24e [ 2928.293589][T24118] ? show_regs_print_info+0x12/0x12 [ 2928.298836][T24118] ? load_image+0x410/0x410 [ 2928.303422][T24118] ? __lock_acquire+0x7bd0/0x7bd0 [ 2928.308517][T24118] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2928.314583][T24118] should_fail_ex+0x390/0x4c0 [ 2928.319312][T24118] should_failslab+0x5/0x20 [ 2928.323896][T24118] slab_pre_alloc_hook+0x59/0x300 [ 2928.328971][T24118] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 2928.334916][T24118] __kmem_cache_alloc_node+0x4f/0x270 [ 2928.340334][T24118] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 2928.346272][T24118] kmalloc_trace+0x26/0xe0 [ 2928.350751][T24118] sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 2928.356551][T24118] ? sctp_stream_interleave_init+0x54/0x90 [ 2928.362425][T24118] sctp_association_new+0x15d4/0x2520 [ 2928.367859][T24118] sctp_connect_new_asoc+0x2da/0x6a0 [ 2928.373203][T24118] ? __sctp_connect+0xd80/0xd80 [ 2928.378097][T24118] ? __local_bh_enable_ip+0x136/0x1c0 [ 2928.383516][T24118] ? _local_bh_enable+0xa0/0xa0 [ 2928.388413][T24118] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 2928.394287][T24118] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 2928.400155][T24118] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 2928.405745][T24118] ? security_sctp_bind_connect+0x85/0xb0 [ 2928.411516][T24118] sctp_sendmsg+0x1686/0x2940 [ 2928.416252][T24118] ? sctp_getsockopt+0x8a0/0x8a0 [ 2928.421233][T24118] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2928.427447][T24118] ? lockdep_hardirqs_on+0x94/0x140 [ 2928.432715][T24118] ? inet_sendmsg+0x7a/0x2a0 [ 2928.437353][T24118] ? inet_send_prepare+0x250/0x250 [ 2928.442515][T24118] ____sys_sendmsg+0x5ed/0x9a0 [ 2928.447351][T24118] ? __sys_sendmsg_sock+0x30/0x30 [ 2928.452436][T24118] ? __import_iovec+0x306/0x510 [ 2928.457349][T24118] ? import_iovec+0x6f/0xa0 [ 2928.461895][T24118] ___sys_sendmsg+0x2a2/0x360 [ 2928.466613][T24118] ? __sys_sendmsg+0x2a0/0x2a0 [ 2928.471440][T24118] ? ktime_get+0x7b/0x270 [ 2928.475843][T24118] __se_sys_sendmsg+0x1c3/0x2b0 [ 2928.480748][T24118] ? __x64_sys_sendmsg+0x80/0x80 [ 2928.485763][T24118] do_syscall_64+0x4c/0xa0 [ 2928.490226][T24118] ? clear_bhb_loop+0x60/0xb0 [ 2928.494940][T24118] ? clear_bhb_loop+0x60/0xb0 [ 2928.499657][T24118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2928.505606][T24118] RIP: 0033:0x7f2362b9ce59 [ 2928.510100][T24118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2928.529749][T24118] RSP: 002b:00007f2360dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2928.538206][T24118] RAX: ffffffffffffffda RBX: 00007f2362e16090 RCX: 00007f2362b9ce59 [ 2928.546308][T24118] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 2928.554315][T24118] RBP: 00007f2360dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 2928.562320][T24118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2928.570330][T24118] R13: 00007f2362e16128 R14: 00007f2362e16090 R15: 00007ffe2a9239a8 [ 2928.578351][T24118] [ 2929.702351][T24149] netlink: 'syz.1.16344': attribute type 29 has an invalid length. [ 2929.985517][T24149] netlink: 'syz.1.16344': attribute type 29 has an invalid length. [ 2930.188211][T24155] netlink: 'syz.1.16344': attribute type 29 has an invalid length. [ 2930.651244][T24167] netlink: 'syz.0.16345': attribute type 21 has an invalid length. [ 2930.884313][T24172] netlink: 'syz.0.16345': attribute type 12 has an invalid length. [ 2930.901688][T24172] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16345'. [ 2931.247766][T24186] netlink: 'syz.1.16352': attribute type 9 has an invalid length. [ 2931.382348][T16543] Bluetooth: hci0: ISO packet for unknown connection handle 3861 [ 2931.396664][T24193] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.16352'. [ 2931.766913][T24208] netlink: 'syz.0.16358': attribute type 4 has an invalid length. [ 2931.843346][T24208] netlink: 52 bytes leftover after parsing attributes in process `syz.0.16358'. [ 2935.364199][T24299] netlink: 'syz.4.16389': attribute type 1 has an invalid length. [ 2935.397705][T24299] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.16389'. [ 2936.194880][T24320] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.16396'. [ 2937.531083][T24346] netlink: 'syz.4.16402': attribute type 16 has an invalid length. [ 2937.553365][T24346] netlink: 'syz.4.16402': attribute type 3 has an invalid length. [ 2937.587436][T24346] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16402'. [ 2937.759472][T24357] bridge0: port 2(bridge_slave_1) entered disabled state [ 2937.767252][T24357] bridge0: port 1(bridge_slave_0) entered disabled state [ 2938.223479][T24363] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.16408'. [ 2938.225235][T24373] netlink: 'syz.2.16411': attribute type 33 has an invalid length. [ 2938.261719][T24373] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16411'. [ 2938.323861][T24368] netlink: 'syz.0.16409': attribute type 1 has an invalid length. [ 2938.356897][T24368] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.16409'. [ 2938.693193][T24380] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.16423'. [ 2939.206358][T24383] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.16425'. [ 2940.278715][T24412] netlink: 'syz.1.16421': attribute type 2 has an invalid length. [ 2940.438882][T24412] device .*! entered promiscuous mode [ 2940.881597][T24428] netlink: 'syz.0.16428': attribute type 1 has an invalid length. [ 2940.918863][T24428] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.16428'. [ 2941.800389][T16543] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 2942.998214][T24485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16443'. [ 2943.897805][T24499] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.16447'. [ 2944.247494][T24502] netlink: 'syz.1.16449': attribute type 1 has an invalid length. [ 2944.295262][T24502] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.16449'. [ 2944.899318][T24522] netlink: 'syz.0.16454': attribute type 2 has an invalid length. [ 2944.907456][T24522] netlink: 'syz.0.16454': attribute type 1 has an invalid length. [ 2946.487205][T24553] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.16463'. [ 2947.427062][T24567] netlink: 'syz.0.16468': attribute type 1 has an invalid length. [ 2947.481540][T24567] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.16468'. [ 2948.137682][T24576] netlink: 'syz.4.16473': attribute type 29 has an invalid length. [ 2948.161328][T24576] netlink: 'syz.4.16473': attribute type 29 has an invalid length. [ 2948.233147][T24580] netlink: 'syz.4.16473': attribute type 29 has an invalid length. [ 2948.340600][T24576] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.16473'. [ 2948.491887][T24583] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.16475'. [ 2949.372446][T24623] netlink: 'syz.4.16486': attribute type 1 has an invalid length. [ 2949.404877][T24623] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.16486'. [ 2950.136807][T24629] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.16488'. [ 2950.351149][T24638] Q±6ã`Ò˜: renamed from lo [ 2953.614367][T24671] FAULT_INJECTION: forcing a failure. [ 2953.614367][T24671] name failslab, interval 1, probability 0, space 0, times 0 [ 2953.662150][T24671] CPU: 0 PID: 24671 Comm: syz.3.16500 Not tainted syzkaller #0 [ 2953.669792][T24671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2953.679899][T24671] Call Trace: [ 2953.683222][T24671] [ 2953.686202][T24671] dump_stack_lvl+0x188/0x24e [ 2953.690949][T24671] ? show_regs_print_info+0x12/0x12 [ 2953.696210][T24671] ? load_image+0x410/0x410 [ 2953.700805][T24671] ? __might_sleep+0xd0/0xd0 [ 2953.705449][T24671] ? __lock_acquire+0x7bd0/0x7bd0 [ 2953.710551][T24671] should_fail_ex+0x390/0x4c0 [ 2953.715299][T24671] should_failslab+0x5/0x20 [ 2953.719857][T24671] slab_pre_alloc_hook+0x59/0x300 [ 2953.724938][T24671] kmem_cache_alloc_lru+0x49/0x2e0 [ 2953.730083][T24671] ? new_inode_pseudo+0x7e/0x1c0 [ 2953.735060][T24671] new_inode_pseudo+0x7e/0x1c0 [ 2953.739890][T24671] new_inode+0x25/0x1d0 [ 2953.744080][T24671] ? start_creating+0x1f5/0x310 [ 2953.748960][T24671] debugfs_create_dir+0xec/0x4c0 [ 2953.753931][T24671] ieee80211_debugfs_add_netdev+0x11e/0xee0 [ 2953.759862][T24671] ? sta_aql_write+0x360/0x360 [ 2953.764662][T24671] ? ieee80211_setup_sdata+0x94e/0xbd0 [ 2953.770165][T24671] ieee80211_if_change_type+0x210/0xa80 [ 2953.775750][T24671] ? cfg80211_mgmt_registrations_update_wk+0xa0/0xa0 [ 2953.782457][T24671] ? cfg80211_mlme_purge_registrations+0x1d0/0x200 [ 2953.788991][T24671] ieee80211_change_iface+0x58/0x4c0 [ 2953.794319][T24671] cfg80211_change_iface+0x786/0xf10 [ 2953.799643][T24671] __cfg80211_wext_siwmode+0x1c2/0x290 [ 2953.805190][T24671] ? __cfg80211_wext_giwfreq+0x8b0/0x8b0 [ 2953.810866][T24671] ? full_name_hash+0x8e/0xe0 [ 2953.815576][T24671] ioctl_standard_call+0xc6/0x250 [ 2953.820634][T24671] ? __cfg80211_wext_giwfreq+0x8b0/0x8b0 [ 2953.826312][T24671] ? __cfg80211_wext_giwfreq+0x8b0/0x8b0 [ 2953.831979][T24671] wext_ioctl_dispatch+0x3da/0x470 [ 2953.837113][T24671] ? wext_ioctl_dispatch+0x470/0x470 [ 2953.842421][T24671] ? iw_handler_get_private+0x1e0/0x1e0 [ 2953.847994][T24671] wext_handle_ioctl+0x114/0x1d0 [ 2953.852961][T24671] ? call_commit_handler+0xf0/0xf0 [ 2953.858111][T24671] sock_ioctl+0x143/0x700 [ 2953.862474][T24671] ? sock_poll+0x420/0x420 [ 2953.866924][T24671] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2953.871894][T24671] ? security_file_ioctl+0x7c/0xa0 [ 2953.877044][T24671] ? sock_poll+0x420/0x420 [ 2953.881491][T24671] __se_sys_ioctl+0xfa/0x170 [ 2953.886118][T24671] do_syscall_64+0x4c/0xa0 [ 2953.890557][T24671] ? clear_bhb_loop+0x60/0xb0 [ 2953.895260][T24671] ? clear_bhb_loop+0x60/0xb0 [ 2953.899962][T24671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2953.905889][T24671] RIP: 0033:0x7fd8e899ce59 [ 2953.910330][T24671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2953.929963][T24671] RSP: 002b:00007fd8e9824028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2953.938403][T24671] RAX: ffffffffffffffda RBX: 00007fd8e8c15fa0 RCX: 00007fd8e899ce59 [ 2953.946398][T24671] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 000000000000000a [ 2953.954394][T24671] RBP: 00007fd8e9824090 R08: 0000000000000000 R09: 0000000000000000 [ 2953.962392][T24671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2953.970386][T24671] R13: 00007fd8e8c16038 R14: 00007fd8e8c15fa0 R15: 00007ffc02940788 [ 2953.978395][T24671] [ 2954.056329][T24675] netlink: 'syz.2.16501': attribute type 1 has an invalid length. [ 2954.066206][T24675] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.16501'. [ 2954.489822][T24671] debugfs: out of free dentries, can not create directory 'netdev:wlan1' [ 2954.569594][T16543] Bluetooth: hci5: unexpected event 0x14 length: 15 > 6 [ 2955.032747][T24703] netlink: 'syz.2.16512': attribute type 39 has an invalid length. [ 2956.041995][T24720] FAULT_INJECTION: forcing a failure. [ 2956.041995][T24720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2956.063297][T24720] CPU: 1 PID: 24720 Comm: syz.1.16515 Not tainted syzkaller #0 [ 2956.070939][T24720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2956.081048][T24720] Call Trace: [ 2956.084356][T24720] [ 2956.087314][T24720] dump_stack_lvl+0x188/0x24e [ 2956.092033][T24720] ? show_regs_print_info+0x12/0x12 [ 2956.097263][T24720] ? load_image+0x410/0x410 [ 2956.101812][T24720] ? __might_fault+0xa6/0x120 [ 2956.106522][T24720] should_fail_ex+0x390/0x4c0 [ 2956.111262][T24720] copyin+0x1b/0x120 [ 2956.115186][T24720] _copy_from_iter+0x447/0x1130 [ 2956.120065][T24720] ? copyout_mc+0x110/0x110 [ 2956.124591][T24720] ? txopt_get+0x76/0x3f0 [ 2956.128950][T24720] ? txopt_get+0x76/0x3f0 [ 2956.133310][T24720] ? txopt_get+0x340/0x3f0 [ 2956.137753][T24720] ? tomoyo_check_acl+0x378/0x3f0 [ 2956.142812][T24720] ? fl6_sock_lookup+0xc0/0xc0 [ 2956.147625][T24720] rawv6_probe_proto_opt+0x166/0x300 [ 2956.152941][T24720] rawv6_sendmsg+0xa6c/0x1710 [ 2956.157831][T24720] ? compat_rawv6_ioctl+0x60/0x60 [ 2956.162902][T24720] ? aa_sk_perm+0x81f/0x950 [ 2956.167459][T24720] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 2956.173928][T24720] ? inet_sendmsg+0x7a/0x2a0 [ 2956.178552][T24720] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2956.183871][T24720] ? inet_send_prepare+0x250/0x250 [ 2956.189021][T24720] ____sys_sendmsg+0x5ed/0x9a0 [ 2956.193821][T24720] ? __sys_sendmsg_sock+0x30/0x30 [ 2956.198876][T24720] ? __import_iovec+0x306/0x510 [ 2956.203760][T24720] ? import_iovec+0x6f/0xa0 [ 2956.208295][T24720] ___sys_sendmsg+0x2a2/0x360 [ 2956.213015][T24720] ? __sys_sendmsg+0x2a0/0x2a0 [ 2956.217823][T24720] ? __lock_acquire+0x7bd0/0x7bd0 [ 2956.222902][T24720] __se_sys_sendmsg+0x1c3/0x2b0 [ 2956.227786][T24720] ? __x64_sys_sendmsg+0x80/0x80 [ 2956.232760][T24720] ? lockdep_hardirqs_on+0x94/0x140 [ 2956.237993][T24720] do_syscall_64+0x4c/0xa0 [ 2956.242444][T24720] ? clear_bhb_loop+0x60/0xb0 [ 2956.247145][T24720] ? clear_bhb_loop+0x60/0xb0 [ 2956.251851][T24720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2956.257781][T24720] RIP: 0033:0x7f69d719ce59 [ 2956.262220][T24720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2956.281862][T24720] RSP: 002b:00007f69d8007028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2956.290308][T24720] RAX: ffffffffffffffda RBX: 00007f69d7415fa0 RCX: 00007f69d719ce59 [ 2956.298303][T24720] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 2956.306307][T24720] RBP: 00007f69d8007090 R08: 0000000000000000 R09: 0000000000000000 [ 2956.314302][T24720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2956.322297][T24720] R13: 00007f69d7416038 R14: 00007f69d7415fa0 R15: 00007ffe091c87c8 [ 2956.330334][T24720] [ 2956.415593][T24722] FAULT_INJECTION: forcing a failure. [ 2956.415593][T24722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2956.442560][T24722] CPU: 0 PID: 24722 Comm: syz.2.16516 Not tainted syzkaller #0 [ 2956.450213][T24722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2956.460331][T24722] Call Trace: [ 2956.463664][T24722] [ 2956.466683][T24722] dump_stack_lvl+0x188/0x24e [ 2956.471439][T24722] ? show_regs_print_info+0x12/0x12 [ 2956.476704][T24722] ? load_image+0x410/0x410 [ 2956.481290][T24722] ? __lock_acquire+0x7bd0/0x7bd0 [ 2956.486396][T24722] ? snprintf+0xe5/0x140 [ 2956.490720][T24722] should_fail_ex+0x390/0x4c0 [ 2956.495455][T24722] _copy_to_user+0x2c/0x130 [ 2956.500009][T24722] simple_read_from_buffer+0xe3/0x150 [ 2956.505421][T24722] proc_fail_nth_read+0x1a6/0x220 [ 2956.510520][T24722] ? proc_fault_inject_write+0x310/0x310 [ 2956.516194][T24722] ? fsnotify_perm+0x248/0x550 [ 2956.521006][T24722] ? proc_fault_inject_write+0x310/0x310 [ 2956.526675][T24722] vfs_read+0x2db/0x960 [ 2956.530893][T24722] ? kernel_read+0x1e0/0x1e0 [ 2956.535539][T24722] ? __fget_files+0x28/0x460 [ 2956.540175][T24722] ? __fget_files+0x3fc/0x460 [ 2956.545011][T24722] ? __fdget_pos+0x2ae/0x360 [ 2956.549704][T24722] ? ksys_read+0x70/0x260 [ 2956.554095][T24722] ksys_read+0x14d/0x260 [ 2956.558389][T24722] ? vfs_write+0x9a0/0x9a0 [ 2956.562850][T24722] ? lockdep_hardirqs_on+0x94/0x140 [ 2956.568092][T24722] do_syscall_64+0x4c/0xa0 [ 2956.572551][T24722] ? clear_bhb_loop+0x60/0xb0 [ 2956.577264][T24722] ? clear_bhb_loop+0x60/0xb0 [ 2956.581979][T24722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2956.587921][T24722] RIP: 0033:0x7ff2aa75d68e [ 2956.592371][T24722] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2956.612047][T24722] RSP: 002b:00007ff2ab61efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2956.620521][T24722] RAX: ffffffffffffffda RBX: 00007ff2ab61f6c0 RCX: 00007ff2aa75d68e [ 2956.628524][T24722] RDX: 000000000000000f RSI: 00007ff2ab61f0a0 RDI: 0000000000000006 [ 2956.636539][T24722] RBP: 00007ff2ab61f090 R08: 0000000000000000 R09: 0000000000000000 [ 2956.644553][T24722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2956.652556][T24722] R13: 00007ff2aaa16038 R14: 00007ff2aaa15fa0 R15: 00007ffff932f3f8 [ 2956.660587][T24722] [ 2956.892912][T24730] netlink: 'syz.1.16518': attribute type 1 has an invalid length. [ 2956.932673][T24730] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.16518'. [ 2958.135908][T24747] netlink: 'syz.2.16524': attribute type 29 has an invalid length. [ 2958.160525][T24747] netlink: 'syz.2.16524': attribute type 29 has an invalid length. [ 2958.181448][T24747] netlink: 'syz.2.16524': attribute type 29 has an invalid length. [ 2958.210035][T24747] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.16524'. [ 2958.691026][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2958.697467][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2958.987816][T24776] netlink: 57923 bytes leftover after parsing attributes in process `syz.0.16543'. [ 2959.006402][T24775] device wg2 entered promiscuous mode [ 2959.567248][T24782] netlink: 'syz.4.16535': attribute type 1 has an invalid length. [ 2959.596653][T24782] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.16535'. [ 2960.087752][T24796] device sit0 entered promiscuous mode [ 2961.224520][T24810] netlink: 57923 bytes leftover after parsing attributes in process `syz.4.16547'. [ 2962.191594][T24831] netlink: 'syz.4.16555': attribute type 1 has an invalid length. [ 2962.248827][T24831] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.16555'. [ 2963.093370][T24840] netlink: 'syz.2.16549': attribute type 29 has an invalid length. [ 2963.143306][T24840] netlink: 'syz.2.16549': attribute type 29 has an invalid length. [ 2963.190613][T24814] netlink: 'syz.2.16549': attribute type 29 has an invalid length. [ 2965.420988][T24849] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.16558'. [ 2965.957939][T24868] netlink: 57923 bytes leftover after parsing attributes in process `syz.0.16562'. [ 2966.563335][T24881] netlink: 'syz.2.16570': attribute type 1 has an invalid length. [ 2966.612744][T24881] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.16570'. [ 2966.663501][T24884] FAULT_INJECTION: forcing a failure. [ 2966.663501][T24884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2966.693945][T24884] CPU: 1 PID: 24884 Comm: syz.0.16571 Not tainted syzkaller #0 [ 2966.701630][T24884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2966.711744][T24884] Call Trace: [ 2966.715070][T24884] [ 2966.718040][T24884] dump_stack_lvl+0x188/0x24e [ 2966.722787][T24884] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2966.729018][T24884] ? show_regs_print_info+0x12/0x12 [ 2966.734272][T24884] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2966.740513][T24884] should_fail_ex+0x390/0x4c0 [ 2966.745246][T24884] _copy_from_user+0x2c/0x170 [ 2966.749987][T24884] __sys_bpf+0x2ea/0x780 [ 2966.754293][T24884] ? bpf_link_show_fdinfo+0x380/0x380 [ 2966.759753][T24884] ? lock_chain_count+0x20/0x20 [ 2966.764670][T24884] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2966.770729][T24884] __x64_sys_bpf+0x78/0x90 [ 2966.775211][T24884] do_syscall_64+0x4c/0xa0 [ 2966.779675][T24884] ? clear_bhb_loop+0x60/0xb0 [ 2966.784412][T24884] ? clear_bhb_loop+0x60/0xb0 [ 2966.789141][T24884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2966.795135][T24884] RIP: 0033:0x7f5dc019ce59 [ 2966.799613][T24884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2966.819273][T24884] RSP: 002b:00007f5dc1093028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2966.827761][T24884] RAX: ffffffffffffffda RBX: 00007f5dc0415fa0 RCX: 00007f5dc019ce59 [ 2966.835792][T24884] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a [ 2966.843822][T24884] RBP: 00007f5dc1093090 R08: 0000000000000000 R09: 0000000000000000 [ 2966.851853][T24884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2966.859884][T24884] R13: 00007f5dc0416038 R14: 00007f5dc0415fa0 R15: 00007ffffc8dffe8 [ 2966.867923][T24884] [ 2968.677812][T24904] netlink: 57923 bytes leftover after parsing attributes in process `syz.2.16577'. [ 2970.814007][T24895] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.16574'. [ 2971.120722][T24918] netlink: 'syz.4.16583': attribute type 29 has an invalid length. [ 2971.149185][T24918] netlink: 'syz.4.16583': attribute type 29 has an invalid length. [ 2971.161463][T24918] netlink: 'syz.4.16583': attribute type 29 has an invalid length. [ 2971.502673][T24927] netlink: 'syz.3.16585': attribute type 1 has an invalid length. [ 2971.568412][T24927] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.16585'. [ 2971.771235][T24929] netlink: 57923 bytes leftover after parsing attributes in process `syz.1.16588'. [ 2972.133469][T24941] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.16591'. [ 2972.357478][T24946] netlink: 'syz.4.16592': attribute type 10 has an invalid length. [ 2972.409589][T24946] device hsr0 entered promiscuous mode [ 2972.620933][T24946] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.16592'. [ 2973.289306][T24971] netlink: 57923 bytes leftover after parsing attributes in process `syz.1.16600'. [ 2973.528606][T24989] FAULT_INJECTION: forcing a failure. [ 2973.528606][T24989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2973.571959][T24989] CPU: 1 PID: 24989 Comm: syz.3.16606 Not tainted syzkaller #0 [ 2973.579613][T24989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2973.589723][T24989] Call Trace: [ 2973.593040][T24989] [ 2973.596010][T24989] dump_stack_lvl+0x188/0x24e [ 2973.600757][T24989] ? show_regs_print_info+0x12/0x12 [ 2973.606012][T24989] ? load_image+0x410/0x410 [ 2973.610583][T24989] ? __lock_acquire+0x7bd0/0x7bd0 [ 2973.615691][T24989] should_fail_ex+0x390/0x4c0 [ 2973.620424][T24989] strncpy_from_user+0x32/0x340 [ 2973.625332][T24989] bpf_prog_load+0x200/0x1530 [ 2973.630115][T24989] ? map_freeze+0x390/0x390 [ 2973.634675][T24989] ? __might_fault+0xa6/0x120 [ 2973.639408][T24989] ? __might_fault+0xa6/0x120 [ 2973.644144][T24989] ? __might_fault+0xc2/0x120 [ 2973.648878][T24989] ? __might_fault+0xa6/0x120 [ 2973.653610][T24989] ? bpf_lsm_bpf+0x5/0x10 [ 2973.657993][T24989] ? security_bpf+0x7a/0xa0 [ 2973.662549][T24989] __sys_bpf+0x5b8/0x780 [ 2973.666855][T24989] ? bpf_link_show_fdinfo+0x380/0x380 [ 2973.672314][T24989] ? lock_chain_count+0x20/0x20 [ 2973.677247][T24989] __x64_sys_bpf+0x78/0x90 [ 2973.681729][T24989] do_syscall_64+0x4c/0xa0 [ 2973.686194][T24989] ? clear_bhb_loop+0x60/0xb0 [ 2973.690909][T24989] ? clear_bhb_loop+0x60/0xb0 [ 2973.695623][T24989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2973.701552][T24989] RIP: 0033:0x7fd8e899ce59 [ 2973.705989][T24989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2973.725644][T24989] RSP: 002b:00007fd8e9803028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2973.734098][T24989] RAX: ffffffffffffffda RBX: 00007fd8e8c16090 RCX: 00007fd8e899ce59 [ 2973.742097][T24989] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 2973.750096][T24989] RBP: 00007fd8e9803090 R08: 0000000000000000 R09: 0000000000000000 [ 2973.758091][T24989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2973.766093][T24989] R13: 00007fd8e8c16128 R14: 00007fd8e8c16090 R15: 00007ffc02940788 [ 2973.774107][T24989] [ 2974.120452][T24996] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16609'. [ 2974.174850][T25002] netlink: 'syz.2.16609': attribute type 12 has an invalid length. [ 2974.218354][T25002] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16609'. [ 2974.556017][T25009] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.16614'. [ 2974.620520][T25009] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.16614'. [ 2975.921125][T25035] netlink: 'syz.4.16625': attribute type 21 has an invalid length. [ 2976.114611][T25051] netlink: 'syz.2.16629': attribute type 3 has an invalid length. [ 2976.150838][T25051] __nla_validate_parse: 3 callbacks suppressed [ 2976.150861][T25051] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.16629'. [ 2976.683109][T25060] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.16631'. [ 2977.451851][T25079] netlink: 'syz.3.16640': attribute type 10 has an invalid length. [ 2978.883982][T25093] netlink: 'syz.4.16643': attribute type 1 has an invalid length. [ 2978.927842][T25094] tc_dump_action: action bad kind [ 2979.614902][T25104] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.16646'. [ 2980.723848][T25130] netlink: 'syz.0.16654': attribute type 10 has an invalid length. [ 2981.256256][T25140] netlink: 'syz.0.16657': attribute type 10 has an invalid length. [ 2983.062263][T16543] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 2983.251891][T25164] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.16666'. [ 2983.372796][T25161] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.16664'. [ 2984.176725][T25188] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2985.037388][T25199] netlink: 'syz.2.16676': attribute type 10 has an invalid length. [ 2985.658996][T16543] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2986.101543][T25218] netlink: 'syz.3.16681': attribute type 15 has an invalid length. [ 2986.121212][T25218] netlink: 'syz.3.16681': attribute type 7 has an invalid length. [ 2986.134066][T25218] netlink: 52 bytes leftover after parsing attributes in process `syz.3.16681'. [ 2986.503948][T25230] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.16683'. [ 2986.723720][T25234] netlink: 'syz.3.16685': attribute type 10 has an invalid length. [ 2987.372050][T16543] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 2988.164187][T25265] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.16697'. [ 2989.517998][T25294] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16705'. [ 2989.580181][T25298] netlink: 'syz.0.16705': attribute type 12 has an invalid length. [ 2989.618959][T25298] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16705'. [ 2989.674342][T16543] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 2989.796406][T25294] bridge0: port 3(bond0) entered disabled state [ 2989.816834][T25294] bridge0: port 2(bridge_slave_1) entered disabled state [ 2989.838144][T25294] bridge0: port 1(bridge_slave_0) entered disabled state [ 2990.386189][T25305] netlink: 'syz.2.16711': attribute type 10 has an invalid length. [ 2990.418338][T25305] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16711'. [ 2990.473954][T25305] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 2991.022118][T25321] netlink: 48 bytes leftover after parsing attributes in process `syz.4.16714'. [ 2991.082252][T25321] bridge0: port 1(bridge_slave_0) entered disabled state [ 2991.484715][T25329] netlink: 'syz.0.16716': attribute type 2 has an invalid length. [ 2991.513414][T25329] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.16716'. [ 2991.751950][T16543] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 2992.973575][T25353] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.16725'. [ 2993.486361][T25360] tipc: Started in network mode [ 2993.516277][T25360] tipc: Node identity 9215a268, cluster identity 4711 [ 2993.535500][T25360] tipc: Node number set to 2450891368 [ 2993.572556][T25360] FAULT_INJECTION: forcing a failure. [ 2993.572556][T25360] name failslab, interval 1, probability 0, space 0, times 0 [ 2993.586059][T25360] CPU: 1 PID: 25360 Comm: syz.4.16728 Not tainted syzkaller #0 [ 2993.593704][T25360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2993.603843][T25360] Call Trace: [ 2993.607191][T25360] [ 2993.610183][T25360] dump_stack_lvl+0x188/0x24e [ 2993.614937][T25360] ? show_regs_print_info+0x12/0x12 [ 2993.620200][T25360] ? load_image+0x410/0x410 [ 2993.624779][T25360] ? verify_lock_unused+0x140/0x140 [ 2993.630056][T25360] should_fail_ex+0x390/0x4c0 [ 2993.634796][T25360] should_failslab+0x5/0x20 [ 2993.639348][T25360] slab_pre_alloc_hook+0x59/0x300 [ 2993.644436][T25360] ? tipc_nametbl_insert_publ+0x60/0x1380 [ 2993.650222][T25360] __kmem_cache_alloc_node+0x4f/0x270 [ 2993.655702][T25360] ? tipc_nametbl_insert_publ+0x60/0x1380 [ 2993.661477][T25360] kmalloc_trace+0x26/0xe0 [ 2993.665956][T25360] tipc_nametbl_insert_publ+0x60/0x1380 [ 2993.671566][T25360] ? do_raw_spin_lock+0x128/0x2f0 [ 2993.676646][T25360] ? __rwlock_init+0x140/0x140 [ 2993.681459][T25360] ? tipc_net+0x45/0x270 [ 2993.685817][T25360] ? tipc_nametbl_publish+0x70/0x1e0 [ 2993.691173][T25360] tipc_nametbl_publish+0xb9/0x1e0 [ 2993.696350][T25360] tipc_net_finalize+0x133/0x1b0 [ 2993.701369][T25360] ? tipc_net_init+0x160/0x160 [ 2993.706192][T25360] ? net_generic+0x1e/0x240 [ 2993.710770][T25360] tipc_net_init+0xfa/0x160 [ 2993.715360][T25360] __tipc_nl_net_set+0x3e0/0x600 [ 2993.720362][T25360] ? tipc_nl_net_dump+0x770/0x770 [ 2993.725434][T25360] ? nla_put+0x130/0x1e0 [ 2993.729875][T25360] ? tipc_nl_compat_net_set+0x294/0x3c0 [ 2993.735491][T25360] ? tipc_nl_compat_node_dump+0x5a0/0x5a0 [ 2993.741275][T25360] ? __nla_parse+0x3c/0x50 [ 2993.745756][T25360] tipc_nl_compat_doit+0x3dc/0x610 [ 2993.750936][T25360] ? end_current_label_crit_section+0x170/0x170 [ 2993.757276][T25360] ? tipc_nl_compat_bearer_enable+0x610/0x610 [ 2993.763437][T25360] ? bpf_lsm_capable+0x5/0x10 [ 2993.768183][T25360] ? security_capable+0x85/0xb0 [ 2993.773124][T25360] tipc_nl_compat_recv+0x536/0xaf0 [ 2993.778329][T25360] ? tipc_netlink_compat_stop+0x20/0x20 [ 2993.783917][T25360] ? __mutex_trylock_common+0x15c/0x260 [ 2993.789516][T25360] ? tipc_nl_net_dump+0x770/0x770 [ 2993.794583][T25360] ? tipc_nl_compat_node_dump+0x5a0/0x5a0 [ 2993.800378][T25360] ? rcu_is_watching+0x11/0xa0 [ 2993.805200][T25360] ? trace_contention_end+0x5f/0x170 [ 2993.810553][T25360] genl_family_rcv_msg_doit+0x22f/0x350 [ 2993.816166][T25360] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 2993.822118][T25360] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2993.828098][T25360] ? memset+0x1e/0x40 [ 2993.832140][T25360] ? genl_get_cmd+0x55f/0x8b0 [ 2993.836889][T25360] genl_rcv_msg+0x601/0x790 [ 2993.841479][T25360] ? genl_bind+0x360/0x360 [ 2993.845941][T25360] ? tipc_netlink_compat_stop+0x20/0x20 [ 2993.851590][T25360] netlink_rcv_skb+0x1ef/0x440 [ 2993.856411][T25360] ? genl_bind+0x360/0x360 [ 2993.860885][T25360] ? netlink_ack+0x1160/0x1160 [ 2993.865729][T25360] ? down_read+0x1a8/0x2d0 [ 2993.870201][T25360] genl_rcv+0x24/0x40 [ 2993.874233][T25360] netlink_unicast+0x7ad/0x920 [ 2993.879086][T25360] netlink_sendmsg+0x8ad/0xbd0 [ 2993.883929][T25360] ? netlink_getsockopt+0x550/0x550 [ 2993.889237][T25360] ? aa_sock_msg_perm+0x94/0x150 [ 2993.894267][T25360] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2993.899598][T25360] ? security_socket_sendmsg+0x7c/0xa0 [ 2993.905107][T25360] ? netlink_getsockopt+0x550/0x550 [ 2993.910364][T25360] ____sys_sendmsg+0x5ed/0x9a0 [ 2993.915213][T25360] ? __sys_sendmsg_sock+0x30/0x30 [ 2993.920282][T25360] ? __import_iovec+0x306/0x510 [ 2993.925213][T25360] ? import_iovec+0x6f/0xa0 [ 2993.929778][T25360] ___sys_sendmsg+0x2a2/0x360 [ 2993.934517][T25360] ? __sys_sendmsg+0x2a0/0x2a0 [ 2993.939395][T25360] ? __lock_acquire+0x7bd0/0x7bd0 [ 2993.944548][T25360] __se_sys_sendmsg+0x1c3/0x2b0 [ 2993.949450][T25360] ? perf_trace_preemptirq_template+0x268/0x320 [ 2993.955748][T25360] ? __x64_sys_sendmsg+0x80/0x80 [ 2993.960779][T25360] ? lockdep_hardirqs_on+0x94/0x140 [ 2993.966037][T25360] do_syscall_64+0x4c/0xa0 [ 2993.970496][T25360] ? clear_bhb_loop+0x60/0xb0 [ 2993.975217][T25360] ? clear_bhb_loop+0x60/0xb0 [ 2993.979943][T25360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2993.985889][T25360] RIP: 0033:0x7f2362b9ce59 [ 2993.990355][T25360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2994.010005][T25360] RSP: 002b:00007f2360df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2994.018476][T25360] RAX: ffffffffffffffda RBX: 00007f2362e15fa0 RCX: 00007f2362b9ce59 [ 2994.026493][T25360] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2994.034515][T25360] RBP: 00007f2360df6090 R08: 0000000000000000 R09: 0000000000000000 [ 2994.042529][T25360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2994.050541][T25360] R13: 00007f2362e16038 R14: 00007f2362e15fa0 R15: 00007ffe2a9239a8 [ 2994.058605][T25360] [ 2995.668420][T16543] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 2996.816226][T25392] netlink: 164 bytes leftover after parsing attributes in process `syz.3.16734'. [ 2997.521974][T25400] delete_channel: no stack [ 2997.549365][T25400] delete_channel: no stack [ 2997.714205][T25401] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.16739'. [ 2998.093750][T25408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16741'. [ 2998.191383][T25408] netlink: 'syz.1.16741': attribute type 14 has an invalid length. [ 2998.266188][T25408] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16741'. [ 2998.617553][T25414] netlink: 'syz.1.16743': attribute type 2 has an invalid length. [ 2998.629737][T25414] netlink: 137528 bytes leftover after parsing attributes in process `syz.1.16743'. [ 2998.694580][T25418] FAULT_INJECTION: forcing a failure. [ 2998.694580][T25418] name failslab, interval 1, probability 0, space 0, times 0 [ 2998.731279][T25418] CPU: 0 PID: 25418 Comm: syz.4.16744 Not tainted syzkaller #0 [ 2998.738925][T25418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2998.749036][T25418] Call Trace: [ 2998.752371][T25418] [ 2998.755352][T25418] dump_stack_lvl+0x188/0x24e [ 2998.760106][T25418] ? show_regs_print_info+0x12/0x12 [ 2998.765367][T25418] ? load_image+0x410/0x410 [ 2998.769943][T25418] ? __lock_acquire+0x7bd0/0x7bd0 [ 2998.775037][T25418] should_fail_ex+0x390/0x4c0 [ 2998.779776][T25418] should_failslab+0x5/0x20 [ 2998.784335][T25418] slab_pre_alloc_hook+0x59/0x300 [ 2998.789455][T25418] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 2998.795061][T25418] __kmem_cache_alloc_node+0x4f/0x270 [ 2998.800489][T25418] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 2998.806099][T25418] __kmalloc+0xa3/0x240 [ 2998.810324][T25418] bpf_prog_test_run_skb+0x23e/0x18e0 [ 2998.815763][T25418] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2998.821983][T25418] ? lockdep_hardirqs_on+0x94/0x140 [ 2998.827250][T25418] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2998.833487][T25418] ? cpu_online+0xa0/0xa0 [ 2998.837875][T25418] bpf_prog_test_run+0x31c/0x390 [ 2998.842871][T25418] __sys_bpf+0x62b/0x780 [ 2998.847207][T25418] ? bpf_link_show_fdinfo+0x380/0x380 [ 2998.852667][T25418] ? lock_chain_count+0x20/0x20 [ 2998.857566][T25418] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2998.863653][T25418] __x64_sys_bpf+0x78/0x90 [ 2998.868132][T25418] do_syscall_64+0x4c/0xa0 [ 2998.872603][T25418] ? clear_bhb_loop+0x60/0xb0 [ 2998.877342][T25418] ? clear_bhb_loop+0x60/0xb0 [ 2998.882069][T25418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2998.888022][T25418] RIP: 0033:0x7f2362b9ce59 [ 2998.892481][T25418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2998.912112][T25418] RSP: 002b:00007f2360df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2998.920559][T25418] RAX: ffffffffffffffda RBX: 00007f2362e15fa0 RCX: 00007f2362b9ce59 [ 2998.928585][T25418] RDX: 0000000000000050 RSI: 0000200000000d40 RDI: 000000000000000a [ 2998.936582][T25418] RBP: 00007f2360df6090 R08: 0000000000000000 R09: 0000000000000000 [ 2998.944582][T25418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2998.952578][T25418] R13: 00007f2362e16038 R14: 00007f2362e15fa0 R15: 00007ffe2a9239a8 [ 2998.960594][T25418] [ 3000.344232][T16543] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 3001.035145][T25471] FAULT_INJECTION: forcing a failure. [ 3001.035145][T25471] name failslab, interval 1, probability 0, space 0, times 0 [ 3001.049630][T25471] CPU: 1 PID: 25471 Comm: syz.1.16755 Not tainted syzkaller #0 [ 3001.057257][T25471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3001.067391][T25471] Call Trace: [ 3001.070716][T25471] [ 3001.073697][T25471] dump_stack_lvl+0x188/0x24e [ 3001.078434][T25471] ? show_regs_print_info+0x12/0x12 [ 3001.083692][T25471] ? load_image+0x410/0x410 [ 3001.088248][T25471] ? __lock_acquire+0x7bd0/0x7bd0 [ 3001.093328][T25471] ? perf_trace_lock_acquire+0x101/0x3f0 [ 3001.099024][T25471] should_fail_ex+0x390/0x4c0 [ 3001.103753][T25471] should_failslab+0x5/0x20 [ 3001.108303][T25471] slab_pre_alloc_hook+0x59/0x300 [ 3001.113377][T25471] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 3001.118983][T25471] __kmem_cache_alloc_node+0x4f/0x270 [ 3001.124410][T25471] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 3001.130008][T25471] __kmalloc+0xa3/0x240 [ 3001.134223][T25471] bpf_prog_test_run_skb+0x23e/0x18e0 [ 3001.139649][T25471] ? __fget_files+0x28/0x460 [ 3001.144296][T25471] ? __fget_files+0x3fc/0x460 [ 3001.149040][T25471] ? cpu_online+0xa0/0xa0 [ 3001.153424][T25471] bpf_prog_test_run+0x31c/0x390 [ 3001.158425][T25471] __sys_bpf+0x62b/0x780 [ 3001.162720][T25471] ? bpf_link_show_fdinfo+0x380/0x380 [ 3001.168145][T25471] ? lock_chain_count+0x20/0x20 [ 3001.173039][T25471] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 3001.179067][T25471] __x64_sys_bpf+0x78/0x90 [ 3001.183548][T25471] do_syscall_64+0x4c/0xa0 [ 3001.187995][T25471] ? clear_bhb_loop+0x60/0xb0 [ 3001.192698][T25471] ? clear_bhb_loop+0x60/0xb0 [ 3001.197406][T25471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3001.203339][T25471] RIP: 0033:0x7f69d719ce59 [ 3001.207778][T25471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3001.227416][T25471] RSP: 002b:00007f69d8007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3001.235861][T25471] RAX: ffffffffffffffda RBX: 00007f69d7415fa0 RCX: 00007f69d719ce59 [ 3001.243862][T25471] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 3001.251859][T25471] RBP: 00007f69d8007090 R08: 0000000000000000 R09: 0000000000000000 [ 3001.259855][T25471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3001.267849][T25471] R13: 00007f69d7416038 R14: 00007f69d7415fa0 R15: 00007ffe091c87c8 [ 3001.275861][T25471] [ 3001.657886][T25484] netlink: 'syz.4.16762': attribute type 21 has an invalid length. [ 3001.697344][T25484] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.16762'. [ 3003.733252][T25522] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.16770'. [ 3003.906862][T25529] FAULT_INJECTION: forcing a failure. [ 3003.906862][T25529] name failslab, interval 1, probability 0, space 0, times 0 [ 3003.922417][T25529] CPU: 1 PID: 25529 Comm: syz.3.16771 Not tainted syzkaller #0 [ 3003.930065][T25529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3003.940186][T25529] Call Trace: [ 3003.943515][T25529] [ 3003.946499][T25529] dump_stack_lvl+0x188/0x24e [ 3003.951269][T25529] ? show_regs_print_info+0x12/0x12 [ 3003.956545][T25529] ? load_image+0x410/0x410 [ 3003.961147][T25529] should_fail_ex+0x390/0x4c0 [ 3003.965878][T25529] should_failslab+0x5/0x20 [ 3003.970420][T25529] slab_pre_alloc_hook+0x59/0x300 [ 3003.975486][T25529] ? lockdep_init_map_type+0x98/0x8d0 [ 3003.980907][T25529] ? nf_ct_ext_add+0x1a7/0x3e0 [ 3003.985725][T25529] __kmem_cache_alloc_node+0x4f/0x270 [ 3003.991151][T25529] ? nf_ct_ext_add+0x1a7/0x3e0 [ 3003.995956][T25529] __kmalloc_node_track_caller+0xa0/0x240 [ 3004.001763][T25529] krealloc+0x6a/0x100 [ 3004.005885][T25529] nf_ct_ext_add+0x1a7/0x3e0 [ 3004.010542][T25529] init_conntrack+0x808/0x1190 [ 3004.015387][T25529] ? early_drop+0x870/0x870 [ 3004.019940][T25529] ? nf_conntrack_find_get+0x640/0x640 [ 3004.025439][T25529] ? __siphash_unaligned+0x289/0x3d0 [ 3004.030784][T25529] nf_conntrack_in+0xd76/0x1830 [ 3004.035719][T25529] ? nf_ct_pernet+0x270/0x270 [ 3004.040501][T25529] ? ip6t_alloc_initial_table+0x640/0x640 [ 3004.046301][T25529] ? ipv6_defrag+0x2d2/0x3a0 [ 3004.050945][T25529] ? ipv6_conntrack_in+0x20/0x20 [ 3004.055942][T25529] nf_hook_slow+0xb9/0x200 [ 3004.060430][T25529] __ip6_local_out+0x780/0x8a0 [ 3004.065246][T25529] ? __ip6_local_out+0x608/0x8a0 [ 3004.070225][T25529] ? ip6_dst_hoplimit+0x340/0x340 [ 3004.075306][T25529] ? __ip6_local_out+0x8a0/0x8a0 [ 3004.080288][T25529] ? read_lock_is_recursive+0x10/0x10 [ 3004.085715][T25529] ip6_local_out+0x26/0x120 [ 3004.090274][T25529] ? ip6_send_skb+0x106/0x370 [ 3004.094991][T25529] ip6_send_skb+0x1c9/0x370 [ 3004.099546][T25529] udp_v6_send_skb+0xb99/0x1850 [ 3004.104465][T25529] udp_v6_push_pending_frames+0x12f/0x220 [ 3004.110230][T25529] udpv6_sendmsg+0xdde/0x22c0 [ 3004.114967][T25529] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 3004.119870][T25529] ? udp_v6_early_demux+0xf00/0xf00 [ 3004.125104][T25529] ? perf_tp_event+0xa8e/0xc10 [ 3004.129927][T25529] ? verify_lock_unused+0x140/0x140 [ 3004.135236][T25529] ? sock_rps_record_flow+0x19/0x3f0 [ 3004.140570][T25529] ? inet_send_prepare+0x57/0x250 [ 3004.145637][T25529] ? inet6_sendmsg+0x5b/0xd0 [ 3004.150268][T25529] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 3004.155511][T25529] ____sys_sendmsg+0x5ed/0x9a0 [ 3004.160342][T25529] ? __might_fault+0xa6/0x120 [ 3004.165068][T25529] ? __sys_sendmsg_sock+0x30/0x30 [ 3004.170130][T25529] ? __import_iovec+0x306/0x510 [ 3004.175035][T25529] ? import_iovec+0x6f/0xa0 [ 3004.179588][T25529] ___sys_sendmsg+0x2a2/0x360 [ 3004.184316][T25529] ? __sys_sendmsg+0x2a0/0x2a0 [ 3004.189154][T25529] ? __lock_acquire+0x7bd0/0x7bd0 [ 3004.194269][T25529] __se_sys_sendmsg+0x1c3/0x2b0 [ 3004.199164][T25529] ? perf_trace_preemptirq_template+0x268/0x320 [ 3004.205454][T25529] ? __x64_sys_sendmsg+0x80/0x80 [ 3004.210459][T25529] ? lockdep_hardirqs_on+0x94/0x140 [ 3004.215705][T25529] do_syscall_64+0x4c/0xa0 [ 3004.220152][T25529] ? clear_bhb_loop+0x60/0xb0 [ 3004.224860][T25529] ? clear_bhb_loop+0x60/0xb0 [ 3004.229580][T25529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3004.235518][T25529] RIP: 0033:0x7fd8e899ce59 [ 3004.239973][T25529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3004.259618][T25529] RSP: 002b:00007fd8e9824028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3004.268071][T25529] RAX: ffffffffffffffda RBX: 00007fd8e8c15fa0 RCX: 00007fd8e899ce59 [ 3004.276090][T25529] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 000000000000000c [ 3004.284103][T25529] RBP: 00007fd8e9824090 R08: 0000000000000000 R09: 0000000000000000 [ 3004.292110][T25529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3004.300115][T25529] R13: 00007fd8e8c16038 R14: 00007fd8e8c15fa0 R15: 00007ffc02940788 [ 3004.308166][T25529] [ 3005.444805][T25550] FAULT_INJECTION: forcing a failure. [ 3005.444805][T25550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3005.482915][T25550] CPU: 0 PID: 25550 Comm: syz.4.16780 Not tainted syzkaller #0 [ 3005.490557][T25550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3005.500647][T25550] Call Trace: [ 3005.503955][T25550] [ 3005.506907][T25550] dump_stack_lvl+0x188/0x24e [ 3005.511623][T25550] ? show_regs_print_info+0x12/0x12 [ 3005.516845][T25550] ? load_image+0x410/0x410 [ 3005.521388][T25550] ? __lock_acquire+0x7bd0/0x7bd0 [ 3005.526449][T25550] should_fail_ex+0x390/0x4c0 [ 3005.531194][T25550] _copy_from_user+0x2c/0x170 [ 3005.535908][T25550] get_user_ifreq+0x67/0x170 [ 3005.540532][T25550] sock_ioctl+0x61f/0x700 [ 3005.544900][T25550] ? sock_poll+0x420/0x420 [ 3005.549350][T25550] ? bpf_lsm_file_ioctl+0x5/0x10 [ 3005.554323][T25550] ? security_file_ioctl+0x7c/0xa0 [ 3005.559471][T25550] ? sock_poll+0x420/0x420 [ 3005.563919][T25550] __se_sys_ioctl+0xfa/0x170 [ 3005.568552][T25550] do_syscall_64+0x4c/0xa0 [ 3005.573001][T25550] ? clear_bhb_loop+0x60/0xb0 [ 3005.577700][T25550] ? clear_bhb_loop+0x60/0xb0 [ 3005.582401][T25550] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3005.588330][T25550] RIP: 0033:0x7f2362b9ce59 [ 3005.592766][T25550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3005.612402][T25550] RSP: 002b:00007f2360df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3005.620841][T25550] RAX: ffffffffffffffda RBX: 00007f2362e15fa0 RCX: 00007f2362b9ce59 [ 3005.628839][T25550] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000004 [ 3005.636835][T25550] RBP: 00007f2360df6090 R08: 0000000000000000 R09: 0000000000000000 [ 3005.644828][T25550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3005.652821][T25550] R13: 00007f2362e16038 R14: 00007f2362e15fa0 R15: 00007ffe2a9239a8 [ 3005.660834][T25550] [ 3006.022887][T25557] cgroup: fork rejected by pids controller in /syz0 [ 3006.111215][T25584] FAULT_INJECTION: forcing a failure. [ 3006.111215][T25584] name failslab, interval 1, probability 0, space 0, times 0 [ 3006.151418][T25584] CPU: 0 PID: 25584 Comm: syz.3.16786 Not tainted syzkaller #0 [ 3006.159070][T25584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3006.169181][T25584] Call Trace: [ 3006.172504][T25584] [ 3006.175481][T25584] dump_stack_lvl+0x188/0x24e [ 3006.180215][T25584] ? verify_lock_unused+0x140/0x140 [ 3006.185473][T25584] ? show_regs_print_info+0x12/0x12 [ 3006.190730][T25584] ? load_image+0x410/0x410 [ 3006.195296][T25584] ? crng_make_state+0x60e/0xb00 [ 3006.200297][T25584] ? crng_make_state+0x1d1/0xb00 [ 3006.205294][T25584] ? urandom_read_iter+0x140/0x140 [ 3006.210465][T25584] ? ___sys_sendmsg+0x2a2/0x360 [ 3006.215375][T25584] should_fail_ex+0x390/0x4c0 [ 3006.220112][T25584] should_failslab+0x5/0x20 [ 3006.224700][T25584] slab_pre_alloc_hook+0x59/0x300 [ 3006.229798][T25584] ? sctp_add_bind_addr+0x89/0x350 [ 3006.234968][T25584] __kmem_cache_alloc_node+0x4f/0x270 [ 3006.240400][T25584] ? sctp_add_bind_addr+0x89/0x350 [ 3006.245562][T25584] kmalloc_trace+0x26/0xe0 [ 3006.250081][T25584] sctp_add_bind_addr+0x89/0x350 [ 3006.255113][T25584] sctp_copy_local_addr_list+0x317/0x4d0 [ 3006.260793][T25584] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 3006.266544][T25584] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 3006.272647][T25584] ? sctp_v4_is_any+0x31/0x50 [ 3006.277351][T25584] ? sctp_copy_one_addr+0x93/0x660 [ 3006.282490][T25584] sctp_bind_addr_copy+0xaf/0x3c0 [ 3006.287552][T25584] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 3006.294000][T25584] sctp_connect_new_asoc+0x2f5/0x6a0 [ 3006.299318][T25584] ? __sctp_connect+0xd80/0xd80 [ 3006.304197][T25584] ? __local_bh_enable_ip+0x136/0x1c0 [ 3006.309601][T25584] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 3006.315175][T25584] ? security_sctp_bind_connect+0x85/0xb0 [ 3006.320922][T25584] sctp_sendmsg+0x1686/0x2940 [ 3006.325642][T25584] ? sctp_getsockopt+0x8a0/0x8a0 [ 3006.330635][T25584] ? __lock_acquire+0x7bd0/0x7bd0 [ 3006.335692][T25584] ? aa_af_perm+0x340/0x340 [ 3006.340254][T25584] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 3006.346715][T25584] ? inet_sendmsg+0xca/0x2a0 [ 3006.351345][T25584] ? inet_send_prepare+0x250/0x250 [ 3006.356486][T25584] ____sys_sendmsg+0x5ed/0x9a0 [ 3006.361296][T25584] ? __sys_sendmsg_sock+0x30/0x30 [ 3006.366374][T25584] ? __import_iovec+0x306/0x510 [ 3006.371264][T25584] ? import_iovec+0x6f/0xa0 [ 3006.375795][T25584] ___sys_sendmsg+0x2a2/0x360 [ 3006.380504][T25584] ? __sys_sendmsg+0x2a0/0x2a0 [ 3006.385323][T25584] ? __lock_acquire+0x7bd0/0x7bd0 [ 3006.390410][T25584] __se_sys_sendmsg+0x1c3/0x2b0 [ 3006.395288][T25584] ? ct_nmi_exit+0x145/0x1c0 [ 3006.399918][T25584] ? __x64_sys_sendmsg+0x80/0x80 [ 3006.404903][T25584] ? lockdep_hardirqs_on+0x94/0x140 [ 3006.410135][T25584] do_syscall_64+0x4c/0xa0 [ 3006.414578][T25584] ? clear_bhb_loop+0x60/0xb0 [ 3006.419278][T25584] ? clear_bhb_loop+0x60/0xb0 [ 3006.423984][T25584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3006.429911][T25584] RIP: 0033:0x7fd8e899ce59 [ 3006.434351][T25584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3006.453991][T25584] RSP: 002b:00007fd8e9824028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3006.462442][T25584] RAX: ffffffffffffffda RBX: 00007fd8e8c15fa0 RCX: 00007fd8e899ce59 [ 3006.470440][T25584] RDX: 0000000000008081 RSI: 0000200000002500 RDI: 0000000000000003 [ 3006.478436][T25584] RBP: 00007fd8e9824090 R08: 0000000000000000 R09: 0000000000000000 [ 3006.486432][T25584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3006.494426][T25584] R13: 00007fd8e8c16038 R14: 00007fd8e8c15fa0 R15: 00007ffc02940788 [ 3006.502441][T25584] [ 3007.222569][ T4491] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3007.453775][ T4491] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3008.204320][ T4491] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3008.390143][ T4491] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3010.342548][T25718] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.16800'. [ 3010.467418][T11779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3010.478068][T11779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3010.521514][T11779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3010.537838][ T9396] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3010.549142][ T9396] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3010.557139][ T9396] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3011.065635][T25734] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.16802'. [ 3012.267506][T25727] chnl_net:caif_netlink_parms(): no params data found [ 3012.616046][ T9396] Bluetooth: hci1: command 0x0409 tx timeout [ 3012.836905][ T4491] device veth0_to_team left promiscuous mode [ 3012.895033][ T4491] Ÿë: port 1(veth0_to_team) entered disabled state [ 3013.004993][ T4491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3013.042171][ T4491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3013.062655][ T4491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3013.088708][ T4491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3013.142972][ T4491] bridge0: port 3(bond0) entered disabled state [ 3013.164100][ T4491] bridge0: port 2(bridge_slave_1) entered disabled state [ 3013.195125][ T4491] device bridge_slave_0 left promiscuous mode [ 3013.208698][ T4491] bridge0: port 1(bridge_slave_0) entered disabled state [ 3013.259074][ T4491] device veth1_macvtap left promiscuous mode [ 3013.273004][ T4491] device veth0_macvtap left promiscuous mode [ 3013.286081][ T4491] device veth1_vlan left promiscuous mode [ 3014.542273][ T4491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3014.551339][ T4491] device bond_slave_1 left promiscuous mode [ 3014.600891][ T4491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3014.611124][ T4491] device bond_slave_0 left promiscuous mode [ 3014.692694][ T9396] Bluetooth: hci1: command 0x041b tx timeout [ 3014.946393][ T4491] bond0 (unregistering): Released all slaves [ 3015.053421][T25727] bridge0: port 1(bridge_slave_0) entered blocking state [ 3015.064177][T25727] bridge0: port 1(bridge_slave_0) entered disabled state [ 3015.072510][T25727] device bridge_slave_0 entered promiscuous mode [ 3015.086356][T25776] device syzkaller0 entered promiscuous mode [ 3015.097483][T25779] netlink: 'syz.2.16810': attribute type 21 has an invalid length. [ 3015.198363][T25727] bridge0: port 2(bridge_slave_1) entered blocking state [ 3015.218334][T25727] bridge0: port 2(bridge_slave_1) entered disabled state [ 3015.226385][T25727] device bridge_slave_1 entered promiscuous mode [ 3015.363025][T25727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3015.433235][T25727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3015.637981][T25727] team0: Port device team_slave_0 added [ 3015.679445][T25727] team0: Port device team_slave_1 added [ 3015.798185][T25806] FAULT_INJECTION: forcing a failure. [ 3015.798185][T25806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3015.829590][T25727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3015.836633][T25727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3015.888818][T25806] CPU: 0 PID: 25806 Comm: syz.4.16816 Not tainted syzkaller #0 [ 3015.896459][T25806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3015.906569][T25806] Call Trace: [ 3015.909892][T25806] [ 3015.912867][T25806] dump_stack_lvl+0x188/0x24e [ 3015.917596][T25806] ? show_regs_print_info+0x12/0x12 [ 3015.922879][T25806] ? load_image+0x410/0x410 [ 3015.927452][T25806] ? __lock_acquire+0x7bd0/0x7bd0 [ 3015.932559][T25806] should_fail_ex+0x390/0x4c0 [ 3015.937331][T25806] _copy_from_user+0x2c/0x170 [ 3015.942074][T25806] bpf_prog_test_run_skb+0x263/0x18e0 [ 3015.947514][T25806] ? __fget_files+0x28/0x460 [ 3015.952169][T25806] ? __fget_files+0x3fc/0x460 [ 3015.956913][T25806] ? cpu_online+0xa0/0xa0 [ 3015.961301][T25806] bpf_prog_test_run+0x31c/0x390 [ 3015.966304][T25806] __sys_bpf+0x62b/0x780 [ 3015.970609][T25806] ? bpf_link_show_fdinfo+0x380/0x380 [ 3015.976067][T25806] ? lock_chain_count+0x20/0x20 [ 3015.976582][T25727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3015.980968][T25806] __x64_sys_bpf+0x78/0x90 [ 3015.981004][T25806] do_syscall_64+0x4c/0xa0 [ 3015.981035][T25806] ? clear_bhb_loop+0x60/0xb0 [ 3016.005130][T25806] ? clear_bhb_loop+0x60/0xb0 [ 3016.009866][T25806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3016.015828][T25806] RIP: 0033:0x7f2362b9ce59 [ 3016.020293][T25806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3016.039953][T25806] RSP: 002b:00007f2360df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3016.048423][T25806] RAX: ffffffffffffffda RBX: 00007f2362e15fa0 RCX: 00007f2362b9ce59 [ 3016.056450][T25806] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 3016.064476][T25806] RBP: 00007f2360df6090 R08: 0000000000000000 R09: 0000000000000000 [ 3016.066639][T25727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3016.072491][T25806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3016.072511][T25806] R13: 00007f2362e16038 R14: 00007f2362e15fa0 R15: 00007ffe2a9239a8 [ 3016.072543][T25806] [ 3016.098928][T25727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3016.168214][T25727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3016.768212][ T9396] Bluetooth: hci1: command 0x040f tx timeout [ 3018.308854][T25727] device hsr_slave_0 entered promiscuous mode [ 3018.353887][T25727] device hsr_slave_1 entered promiscuous mode [ 3018.377119][T25727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3018.384994][T25727] Cannot create hsr debugfs directory [ 3018.843587][T25912] netlink: 'syz.3.16822': attribute type 1 has an invalid length. [ 3018.858278][T25912] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.16822'. [ 3018.858282][T16543] Bluetooth: hci1: command 0x0419 tx timeout [ 3018.874785][T25912] netlink: 'syz.3.16822': attribute type 23 has an invalid length. [ 3018.891000][T25912] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16822'. [ 3019.674383][T25727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3020.136621][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.143164][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3022.469372][T25727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3022.490636][T25727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3022.505169][T25727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3022.668492][T25727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3022.729003][T25890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3022.751542][T25890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3022.805625][T25727] 8021q: adding VLAN 0 to HW filter on device team0 [ 3022.863387][T25889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3022.881895][T25889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3022.909923][T25889] bridge0: port 1(bridge_slave_0) entered blocking state [ 3022.917144][T25889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3022.988685][T25889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3023.040967][T25889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3023.089865][T25889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3023.102412][T25950] FAULT_INJECTION: forcing a failure. [ 3023.102412][T25950] name failslab, interval 1, probability 0, space 0, times 0 [ 3023.145878][T25950] CPU: 0 PID: 25950 Comm: syz.1.16829 Not tainted syzkaller #0 [ 3023.153535][T25950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3023.161923][T25889] bridge0: port 2(bridge_slave_1) entered blocking state [ 3023.163613][T25950] Call Trace: [ 3023.171026][T25889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3023.173943][T25950] [ 3023.184195][T25950] dump_stack_lvl+0x188/0x24e [ 3023.188937][T25950] ? show_regs_print_info+0x12/0x12 [ 3023.194201][T25950] ? load_image+0x410/0x410 [ 3023.198760][T25950] ? __might_sleep+0xd0/0xd0 [ 3023.203396][T25950] ? __lock_acquire+0x7bd0/0x7bd0 [ 3023.208488][T25950] should_fail_ex+0x390/0x4c0 [ 3023.213218][T25950] should_failslab+0x5/0x20 [ 3023.217746][T25950] slab_pre_alloc_hook+0x59/0x300 [ 3023.222893][T25950] ? tomoyo_encode+0x28a/0x550 [ 3023.227689][T25950] __kmem_cache_alloc_node+0x4f/0x270 [ 3023.233098][T25950] ? tomoyo_encode+0x28a/0x550 [ 3023.237894][T25950] __kmalloc+0xa3/0x240 [ 3023.242090][T25950] tomoyo_encode+0x28a/0x550 [ 3023.246717][T25950] tomoyo_realpath_from_path+0x578/0x5c0 [ 3023.252394][T25950] ? tomoyo_domain+0xd2/0x120 [ 3023.257113][T25950] ? tomoyo_path_number_perm+0x205/0x650 [ 3023.262804][T25950] tomoyo_path_number_perm+0x22f/0x650 [ 3023.268298][T25950] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 3023.274916][T25950] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3023.280407][T25950] ? ksys_write+0x1ce/0x260 [ 3023.284947][T25950] ? common_file_perm+0x171/0x1c0 [ 3023.290026][T25950] ? __fget_files+0x28/0x460 [ 3023.294664][T25950] security_file_ioctl+0x6c/0xa0 [ 3023.299638][T25950] __se_sys_ioctl+0x48/0x170 [ 3023.304261][T25950] do_syscall_64+0x4c/0xa0 [ 3023.308704][T25950] ? clear_bhb_loop+0x60/0xb0 [ 3023.313406][T25950] ? clear_bhb_loop+0x60/0xb0 [ 3023.318117][T25950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3023.324042][T25950] RIP: 0033:0x7f69d719ce59 [ 3023.328516][T25950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3023.348155][T25950] RSP: 002b:00007f69d8007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3023.356607][T25950] RAX: ffffffffffffffda RBX: 00007f69d7415fa0 RCX: 00007f69d719ce59 [ 3023.364609][T25950] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000003 [ 3023.372609][T25950] RBP: 00007f69d8007090 R08: 0000000000000000 R09: 0000000000000000 [ 3023.380605][T25950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3023.388600][T25950] R13: 00007f69d7416038 R14: 00007f69d7415fa0 R15: 00007ffe091c87c8 [ 3023.396619][T25950] [ 3023.502076][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3023.521874][T25950] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3023.539642][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3023.589765][T25818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3023.635396][T25818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3023.712185][T25818] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3023.842329][T25890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3023.869208][T25890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3023.892677][T25890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3023.923600][T25890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3023.952086][T25890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3023.979954][T25890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3023.997286][T25727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3024.122324][T25970] FAULT_INJECTION: forcing a failure. [ 3024.122324][T25970] name failslab, interval 1, probability 0, space 0, times 0 [ 3024.158628][T25970] CPU: 0 PID: 25970 Comm: syz.4.16832 Not tainted syzkaller #0 [ 3024.166276][T25970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3024.176376][T25970] Call Trace: [ 3024.179686][T25970] [ 3024.182642][T25970] dump_stack_lvl+0x188/0x24e [ 3024.187353][T25970] ? show_regs_print_info+0x12/0x12 [ 3024.192581][T25970] ? load_image+0x410/0x410 [ 3024.197120][T25970] ? __might_sleep+0xd0/0xd0 [ 3024.201738][T25970] ? __lock_acquire+0x7bd0/0x7bd0 [ 3024.206800][T25970] ? verify_lock_unused+0x140/0x140 [ 3024.212034][T25970] should_fail_ex+0x390/0x4c0 [ 3024.216740][T25970] should_failslab+0x5/0x20 [ 3024.221268][T25970] slab_pre_alloc_hook+0x59/0x300 [ 3024.226320][T25970] ? perf_trace_preemptirq_template+0x268/0x320 [ 3024.232592][T25970] ? sock_kmalloc+0x92/0xf0 [ 3024.237159][T25970] __kmem_cache_alloc_node+0x4f/0x270 [ 3024.242567][T25970] ? sock_kmalloc+0x92/0xf0 [ 3024.247126][T25970] __kmalloc+0xa3/0x240 [ 3024.251318][T25970] ? lock_chain_count+0x20/0x20 [ 3024.256205][T25970] sock_kmalloc+0x92/0xf0 [ 3024.260579][T25970] ____sys_sendmsg+0x1bf/0x9a0 [ 3024.265367][T25970] ? lockdep_hardirqs_on+0x94/0x140 [ 3024.270607][T25970] ? __sys_sendmsg_sock+0x30/0x30 [ 3024.275674][T25970] ? __import_iovec+0x306/0x510 [ 3024.280561][T25970] ? import_iovec+0x6f/0xa0 [ 3024.285096][T25970] ___sys_sendmsg+0x2a2/0x360 [ 3024.289797][T25970] ? migrate_enable+0x148/0x220 [ 3024.294710][T25970] ? __sys_sendmsg+0x2a0/0x2a0 [ 3024.299545][T25970] __se_sys_sendmsg+0x1c3/0x2b0 [ 3024.304426][T25970] ? __x64_sys_sendmsg+0x80/0x80 [ 3024.309402][T25970] ? syscall_enter_from_user_mode+0x2a/0x80 [ 3024.315340][T25970] do_syscall_64+0x4c/0xa0 [ 3024.319780][T25970] ? clear_bhb_loop+0x60/0xb0 [ 3024.324476][T25970] ? clear_bhb_loop+0x60/0xb0 [ 3024.329180][T25970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3024.335107][T25970] RIP: 0033:0x7f2362b9ce59 [ 3024.339546][T25970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3024.359175][T25970] RSP: 002b:00007f2360df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3024.367646][T25970] RAX: ffffffffffffffda RBX: 00007f2362e15fa0 RCX: 00007f2362b9ce59 [ 3024.375646][T25970] RDX: 0000000020000800 RSI: 00002000000008c0 RDI: 0000000000000006 [ 3024.383650][T25970] RBP: 00007f2360df6090 R08: 0000000000000000 R09: 0000000000000000 [ 3024.391647][T25970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3024.399643][T25970] R13: 00007f2362e16038 R14: 00007f2362e15fa0 R15: 00007ffe2a9239a8 [ 3024.407654][T25970] [ 3025.138840][T25819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3025.146458][T25819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3025.224424][T25727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3025.236508][T25988] netlink: 'syz.3.16835': attribute type 10 has an invalid length. [ 3025.249492][T25988] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16835'. [ 3025.347346][T25890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3025.381191][T25890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3025.455196][T25819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3025.479336][T25819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3025.523774][T25727] device veth0_vlan entered promiscuous mode [ 3025.565684][T25819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3025.613508][T25819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3025.693867][T25727] device veth1_vlan entered promiscuous mode [ 3025.820246][T26007] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.16841'. [ 3025.841807][T25727] device veth0_macvtap entered promiscuous mode [ 3025.859682][T25819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3025.879557][T25819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3025.916759][T25819] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3025.945425][T25727] device veth1_macvtap entered promiscuous mode [ 3025.964459][T26012] netlink: 'syz.1.16840': attribute type 33 has an invalid length. [ 3025.984764][T26012] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16840'. [ 3026.039232][T25727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3026.081228][T25727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3026.124739][T25727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3026.179003][T25819] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3026.200506][T25819] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3026.259087][T25819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3026.313493][T25727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3026.328333][T25727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3026.342172][T25727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3026.358550][T25727] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3026.367489][T25727] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3026.377467][T25727] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3026.411643][T25727] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3026.452002][T25819] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3026.473489][T25819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3026.678403][T25890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3026.706673][T25890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3026.753913][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3026.860327][ T4491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3026.871962][ T4491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3026.901622][T25889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3027.209494][T26045] netlink: 'syz.3.16850': attribute type 1 has an invalid length. [ 3027.233825][T26045] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16850'. [ 3027.709440][T26061] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.16853'. [ 3028.206736][T26077] FAULT_INJECTION: forcing a failure. [ 3028.206736][T26077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3028.287224][T26077] CPU: 0 PID: 26077 Comm: syz.2.16857 Not tainted syzkaller #0 [ 3028.294872][T26077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3028.305009][T26077] Call Trace: [ 3028.308334][T26077] [ 3028.311308][T26077] dump_stack_lvl+0x188/0x24e [ 3028.316048][T26077] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3028.322275][T26077] ? show_regs_print_info+0x12/0x12 [ 3028.327537][T26077] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3028.333780][T26077] should_fail_ex+0x390/0x4c0 [ 3028.338520][T26077] strncpy_from_user+0x32/0x340 [ 3028.343438][T26077] bpf_prog_load+0x200/0x1530 [ 3028.348189][T26077] ? map_freeze+0x390/0x390 [ 3028.352773][T26077] ? __might_fault+0xa6/0x120 [ 3028.357517][T26077] ? __might_fault+0xa6/0x120 [ 3028.362277][T26077] ? __might_fault+0xc2/0x120 [ 3028.367004][T26077] ? __might_fault+0xa6/0x120 [ 3028.371766][T26077] ? bpf_lsm_bpf+0x5/0x10 [ 3028.376151][T26077] ? security_bpf+0x7a/0xa0 [ 3028.380722][T26077] __sys_bpf+0x5b8/0x780 [ 3028.385033][T26077] ? bpf_link_show_fdinfo+0x380/0x380 [ 3028.390482][T26077] ? lock_chain_count+0x20/0x20 [ 3028.395397][T26077] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 3028.401717][T26077] __x64_sys_bpf+0x78/0x90 [ 3028.406175][T26077] do_syscall_64+0x4c/0xa0 [ 3028.410642][T26077] ? clear_bhb_loop+0x60/0xb0 [ 3028.415371][T26077] ? clear_bhb_loop+0x60/0xb0 [ 3028.420122][T26077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3028.426075][T26077] RIP: 0033:0x7ff2aa79ce59 [ 3028.430523][T26077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3028.450161][T26077] RSP: 002b:00007ff2ab61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3028.458603][T26077] RAX: ffffffffffffffda RBX: 00007ff2aaa15fa0 RCX: 00007ff2aa79ce59 [ 3028.466602][T26077] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 3028.474603][T26077] RBP: 00007ff2ab61f090 R08: 0000000000000000 R09: 0000000000000000 [ 3028.482601][T26077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3028.490596][T26077] R13: 00007ff2aaa16038 R14: 00007ff2aaa15fa0 R15: 00007ffff932f3f8 [ 3028.498611][T26077] [ 3028.501881][T26057] delete_channel: no stack [ 3029.214424][T26105] FAULT_INJECTION: forcing a failure. [ 3029.214424][T26105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3029.269030][T26105] CPU: 0 PID: 26105 Comm: syz.0.16866 Not tainted syzkaller #0 [ 3029.276681][T26105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3029.286775][T26105] Call Trace: [ 3029.290087][T26105] [ 3029.293047][T26105] dump_stack_lvl+0x188/0x24e [ 3029.297754][T26105] ? show_regs_print_info+0x12/0x12 [ 3029.302985][T26105] ? load_image+0x410/0x410 [ 3029.307526][T26105] ? __lock_acquire+0x7bd0/0x7bd0 [ 3029.312607][T26105] ? __rcu_read_unlock+0x78/0xd0 [ 3029.317575][T26105] should_fail_ex+0x390/0x4c0 [ 3029.322286][T26105] _copy_to_user+0x2c/0x130 [ 3029.326821][T26105] bpf_test_finish+0x198/0x600 [ 3029.331625][T26105] ? dst_hold+0xb0/0xb0 [ 3029.335811][T26105] ? convert_skb_to___skb+0x420/0x420 [ 3029.341237][T26105] bpf_prog_test_run_xdp+0x827/0xf80 [ 3029.346646][T26105] ? __lock_acquire+0x7bd0/0x7bd0 [ 3029.351715][T26105] ? dev_put+0x80/0x80 [ 3029.355840][T26105] ? dev_put+0x80/0x80 [ 3029.359939][T26105] bpf_prog_test_run+0x31c/0x390 [ 3029.364909][T26105] __sys_bpf+0x62b/0x780 [ 3029.369187][T26105] ? bpf_link_show_fdinfo+0x380/0x380 [ 3029.374629][T26105] ? lock_chain_count+0x20/0x20 [ 3029.379540][T26105] __x64_sys_bpf+0x78/0x90 [ 3029.383999][T26105] do_syscall_64+0x4c/0xa0 [ 3029.388444][T26105] ? clear_bhb_loop+0x60/0xb0 [ 3029.393146][T26105] ? clear_bhb_loop+0x60/0xb0 [ 3029.397855][T26105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3029.403782][T26105] RIP: 0033:0x7f083099ce59 [ 3029.408228][T26105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3029.427859][T26105] RSP: 002b:00007f083188d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3029.436302][T26105] RAX: ffffffffffffffda RBX: 00007f0830c15fa0 RCX: 00007f083099ce59 [ 3029.444296][T26105] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 3029.452306][T26105] RBP: 00007f083188d090 R08: 0000000000000000 R09: 0000000000000000 [ 3029.460409][T26105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3029.468425][T26105] R13: 00007f0830c16038 R14: 00007f0830c15fa0 R15: 00007fff514f0bd8 [ 3029.476544][T26105] [ 3030.092873][T26135] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.16873'. [ 3030.673258][T26158] netlink: 'syz.1.16876': attribute type 8 has an invalid length. [ 3031.139608][T26167] FAULT_INJECTION: forcing a failure. [ 3031.139608][T26167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3031.211058][T26167] CPU: 1 PID: 26167 Comm: syz.4.16880 Not tainted syzkaller #0 [ 3031.218734][T26167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3031.228826][T26167] Call Trace: [ 3031.232131][T26167] [ 3031.235088][T26167] dump_stack_lvl+0x188/0x24e [ 3031.239825][T26167] ? show_regs_print_info+0x12/0x12 [ 3031.245051][T26167] ? load_image+0x410/0x410 [ 3031.249593][T26167] ? __lock_acquire+0x7bd0/0x7bd0 [ 3031.254680][T26167] should_fail_ex+0x390/0x4c0 [ 3031.259393][T26167] _copy_from_user+0x2c/0x170 [ 3031.264108][T26167] ___sys_sendmsg+0x1c3/0x360 [ 3031.268846][T26167] ? __sys_sendmsg+0x2a0/0x2a0 [ 3031.273654][T26167] ? __lock_acquire+0x7bd0/0x7bd0 [ 3031.278733][T26167] __se_sys_sendmsg+0x1c3/0x2b0 [ 3031.283617][T26167] ? __x64_sys_sendmsg+0x80/0x80 [ 3031.288599][T26167] ? lockdep_hardirqs_on+0x94/0x140 [ 3031.293832][T26167] do_syscall_64+0x4c/0xa0 [ 3031.298319][T26167] ? clear_bhb_loop+0x60/0xb0 [ 3031.303021][T26167] ? clear_bhb_loop+0x60/0xb0 [ 3031.307749][T26167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3031.313682][T26167] RIP: 0033:0x7f2362b9ce59 [ 3031.318128][T26167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3031.337769][T26167] RSP: 002b:00007f2360df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3031.346213][T26167] RAX: ffffffffffffffda RBX: 00007f2362e15fa0 RCX: 00007f2362b9ce59 [ 3031.354209][T26167] RDX: 0000000004000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 3031.362210][T26167] RBP: 00007f2360df6090 R08: 0000000000000000 R09: 0000000000000000 [ 3031.370208][T26167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3031.378210][T26167] R13: 00007f2362e16038 R14: 00007f2362e15fa0 R15: 00007ffe2a9239a8 [ 3031.386224][T26167] [ 3032.597253][T26208] device syzkaller0 entered promiscuous mode [ 3036.058269][T26220] netlink: 'syz.0.16895': attribute type 10 has an invalid length. [ 3036.066254][T26220] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.16895'. [ 3036.100732][T26228] netlink: 'syz.0.16895': attribute type 10 has an invalid length. [ 3036.149882][T26228] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.16895'. [ 3036.213879][T26247] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.16897'. [ 3036.502811][T26259] netlink: 'syz.0.16900': attribute type 10 has an invalid length. [ 3036.573842][T26259] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16900'. [ 3036.644725][T26259] device team0 entered promiscuous mode [ 3036.664830][T26259] device team_slave_0 entered promiscuous mode [ 3036.671393][T26259] device team_slave_1 entered promiscuous mode [ 3036.678717][T26259] bridge0: port 3(team0) entered blocking state [ 3036.824286][T26259] bridge0: port 3(team0) entered disabled state [ 3036.923644][T26259] bridge0: port 3(team0) entered blocking state [ 3036.930206][T26259] bridge0: port 3(team0) entered forwarding state [ 3037.689501][T26270] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.16904'. [ 3037.725914][T26274] FAULT_INJECTION: forcing a failure. [ 3037.725914][T26274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3037.741209][T26276] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.16906'. [ 3037.751004][T26274] CPU: 0 PID: 26274 Comm: syz.1.16905 Not tainted syzkaller #0 [ 3037.758629][T26274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3037.768753][T26274] Call Trace: [ 3037.772087][T26274] [ 3037.775070][T26274] dump_stack_lvl+0x188/0x24e [ 3037.779857][T26274] ? show_regs_print_info+0x12/0x12 [ 3037.785119][T26274] ? load_image+0x410/0x410 [ 3037.786461][T26276] bridge_slave_1: default FDB implementation only supports local addresses [ 3037.789689][T26274] ? __might_fault+0xa6/0x120 [ 3037.789737][T26274] should_fail_ex+0x390/0x4c0 [ 3037.789792][T26274] copyin+0x1b/0x120 [ 3037.811698][T26274] _copy_from_iter+0x447/0x1130 [ 3037.816601][T26274] ? copyout_mc+0x110/0x110 [ 3037.821138][T26274] ? __virt_addr_valid+0x188/0x540 [ 3037.826293][T26274] ? __virt_addr_valid+0x188/0x540 [ 3037.831445][T26274] ? __virt_addr_valid+0x467/0x540 [ 3037.836597][T26274] ? __phys_addr_symbol+0x2b/0x70 [ 3037.841667][T26274] ? __check_object_size+0x4f6/0xa70 [ 3037.846989][T26274] pfkey_sendmsg+0x1f9/0x1140 [ 3037.851730][T26274] ? pfkey_release+0x340/0x340 [ 3037.856539][T26274] ? aa_sk_perm+0x81f/0x950 [ 3037.861092][T26274] ? __might_fault+0xa6/0x120 [ 3037.865804][T26274] ? aa_af_perm+0x340/0x340 [ 3037.870342][T26274] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 3037.876809][T26274] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 3037.882836][T26274] ? aa_sock_msg_perm+0x94/0x150 [ 3037.887811][T26274] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3037.893131][T26274] ? security_socket_sendmsg+0x7c/0xa0 [ 3037.898620][T26274] ? pfkey_release+0x340/0x340 [ 3037.903432][T26274] ____sys_sendmsg+0x5ed/0x9a0 [ 3037.908244][T26274] ? __sys_sendmsg_sock+0x30/0x30 [ 3037.913302][T26274] ? __import_iovec+0x306/0x510 [ 3037.918198][T26274] ? import_iovec+0x6f/0xa0 [ 3037.922740][T26274] ___sys_sendmsg+0x2a2/0x360 [ 3037.927724][T26274] ? __sys_sendmsg+0x2a0/0x2a0 [ 3037.932552][T26274] ? __lock_acquire+0x7bd0/0x7bd0 [ 3037.937660][T26274] __se_sys_sendmsg+0x1c3/0x2b0 [ 3037.942542][T26274] ? perf_trace_preemptirq_template+0x268/0x320 [ 3037.948823][T26274] ? __x64_sys_sendmsg+0x80/0x80 [ 3037.953816][T26274] ? lockdep_hardirqs_on+0x94/0x140 [ 3037.959060][T26274] do_syscall_64+0x4c/0xa0 [ 3037.963503][T26274] ? clear_bhb_loop+0x60/0xb0 [ 3037.968207][T26274] ? clear_bhb_loop+0x60/0xb0 [ 3037.972917][T26274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3037.978849][T26274] RIP: 0033:0x7f69d719ce59 [ 3037.983309][T26274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3038.002949][T26274] RSP: 002b:00007f69d8007028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3038.011394][T26274] RAX: ffffffffffffffda RBX: 00007f69d7415fa0 RCX: 00007f69d719ce59 [ 3038.019422][T26274] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000c [ 3038.027445][T26274] RBP: 00007f69d8007090 R08: 0000000000000000 R09: 0000000000000000 [ 3038.035448][T26274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3038.043452][T26274] R13: 00007f69d7416038 R14: 00007f69d7415fa0 R15: 00007ffe091c87c8 [ 3038.051481][T26274] [ 3038.377791][T26278] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.16907'. [ 3040.074186][T26323] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.16922'. [ 3040.094627][T26323] bridge_slave_1: default FDB implementation only supports local addresses [ 3040.277977][T26331] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.16925'. [ 3040.393717][T26334] netlink: 'syz.2.16928': attribute type 10 has an invalid length. [ 3040.536343][T26335] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.16927'. [ 3040.770176][T26339] FAULT_INJECTION: forcing a failure. [ 3040.770176][T26339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3040.801990][T26339] CPU: 1 PID: 26339 Comm: syz.2.16931 Not tainted syzkaller #0 [ 3040.809644][T26339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3040.819753][T26339] Call Trace: [ 3040.823105][T26339] [ 3040.826076][T26339] dump_stack_lvl+0x188/0x24e [ 3040.830814][T26339] ? show_regs_print_info+0x12/0x12 [ 3040.836071][T26339] ? load_image+0x410/0x410 [ 3040.840636][T26339] ? __lock_acquire+0x7bd0/0x7bd0 [ 3040.845754][T26339] ? tomoyo_path_number_perm+0x205/0x650 [ 3040.851465][T26339] should_fail_ex+0x390/0x4c0 [ 3040.856202][T26339] _copy_from_user+0x2c/0x170 [ 3040.861016][T26339] vlan_ioctl_handler+0xba/0x5c0 [ 3040.866008][T26339] ? sock_ioctl+0x21b/0x700 [ 3040.870574][T26339] ? net_generic+0x240/0x240 [ 3040.875247][T26339] ? net_generic+0x240/0x240 [ 3040.879913][T26339] sock_ioctl+0x23b/0x700 [ 3040.884301][T26339] ? sock_poll+0x420/0x420 [ 3040.888791][T26339] ? bpf_lsm_file_ioctl+0x5/0x10 [ 3040.893796][T26339] ? security_file_ioctl+0x7c/0xa0 [ 3040.898989][T26339] ? sock_poll+0x420/0x420 [ 3040.903452][T26339] __se_sys_ioctl+0xfa/0x170 [ 3040.908082][T26339] do_syscall_64+0x4c/0xa0 [ 3040.912538][T26339] ? clear_bhb_loop+0x60/0xb0 [ 3040.917236][T26339] ? clear_bhb_loop+0x60/0xb0 [ 3040.921943][T26339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3040.927879][T26339] RIP: 0033:0x7ff2aa79ce59 [ 3040.932320][T26339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3040.951983][T26339] RSP: 002b:00007ff2ab61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3040.960427][T26339] RAX: ffffffffffffffda RBX: 00007ff2aaa15fa0 RCX: 00007ff2aa79ce59 [ 3040.968429][T26339] RDX: 0000200000000080 RSI: 0000000000008982 RDI: 0000000000000006 [ 3040.976450][T26339] RBP: 00007ff2ab61f090 R08: 0000000000000000 R09: 0000000000000000 [ 3040.984447][T26339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3040.992443][T26339] R13: 00007ff2aaa16038 R14: 00007ff2aaa15fa0 R15: 00007ffff932f3f8 [ 3041.000456][T26339] [ 3041.016308][T26341] device pim6reg1 entered promiscuous mode [ 3041.960187][T26356] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.16936'. [ 3041.998465][T26356] bridge_slave_1: default FDB implementation only supports local addresses [ 3042.007329][T26358] À: port 1(vlan0) entered blocking state [ 3042.017725][T26358] FAULT_INJECTION: forcing a failure. [ 3042.017725][T26358] name failslab, interval 1, probability 0, space 0, times 0 [ 3042.038869][T26358] CPU: 0 PID: 26358 Comm: syz.3.16937 Not tainted syzkaller #0 [ 3042.046507][T26358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3042.056610][T26358] Call Trace: [ 3042.059928][T26358] [ 3042.062900][T26358] dump_stack_lvl+0x188/0x24e [ 3042.067634][T26358] ? show_regs_print_info+0x12/0x12 [ 3042.072878][T26358] ? load_image+0x410/0x410 [ 3042.077448][T26358] should_fail_ex+0x390/0x4c0 [ 3042.082182][T26358] should_failslab+0x5/0x20 [ 3042.086734][T26358] slab_pre_alloc_hook+0x59/0x300 [ 3042.091814][T26358] ? ref_tracker_alloc+0x14f/0x490 [ 3042.096984][T26358] __kmem_cache_alloc_node+0x4f/0x270 [ 3042.102413][T26358] ? ref_tracker_alloc+0x14f/0x490 [ 3042.107571][T26358] kmalloc_trace+0x26/0xe0 [ 3042.112029][T26358] ref_tracker_alloc+0x14f/0x490 [ 3042.117003][T26358] ? ref_tracker_dir_print+0x150/0x150 [ 3042.122509][T26358] ? __kmem_cache_alloc_node+0x19d/0x270 [ 3042.128169][T26358] ? switchdev_deferred_enqueue+0x2d/0x240 [ 3042.134005][T26358] ? switchdev_deferred_enqueue+0x240/0x240 [ 3042.139926][T26358] ? switchdev_deferred_enqueue+0x93/0x240 [ 3042.145764][T26358] switchdev_deferred_enqueue+0x111/0x240 [ 3042.151519][T26358] switchdev_port_attr_set+0xfb/0x2d0 [ 3042.156931][T26358] ? load_image+0x410/0x410 [ 3042.161473][T26358] ? switchdev_deferred_process+0x290/0x290 [ 3042.167398][T26358] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3042.173324][T26358] ? _raw_spin_unlock+0x40/0x40 [ 3042.178221][T26358] br_set_state+0x374/0x690 [ 3042.182756][T26358] ? br_set_max_age+0x110/0x110 [ 3042.187638][T26358] ? br_ioctl_stub+0xcf0/0xcf0 [ 3042.192435][T26358] ? br_become_designated_port+0x1c/0x250 [ 3042.198185][T26358] ? br_init_port+0x141/0x200 [ 3042.202893][T26358] new_nbp+0x2fd/0x430 [ 3042.206994][T26358] br_add_if+0x27c/0xee0 [ 3042.211260][T26358] ? bpf_lsm_capable+0x5/0x10 [ 3042.215975][T26358] ? security_capable+0x85/0xb0 [ 3042.220871][T26358] br_ioctl_stub+0x6c4/0xcf0 [ 3042.225497][T26358] ? rcu_is_watching+0x11/0xa0 [ 3042.230294][T26358] ? rcu_read_unlock+0xa0/0xa0 [ 3042.235087][T26358] ? __mutex_lock+0x1ab/0xae0 [ 3042.239800][T26358] ? mutex_lock_nested+0x10/0x10 [ 3042.244778][T26358] ? rcu_read_unlock+0xa0/0xa0 [ 3042.249568][T26358] sock_ioctl+0x453/0x700 [ 3042.253926][T26358] ? sock_poll+0x420/0x420 [ 3042.259156][T26358] ? bpf_lsm_file_ioctl+0x5/0x10 [ 3042.264123][T26358] ? security_file_ioctl+0x7c/0xa0 [ 3042.269267][T26358] ? sock_poll+0x420/0x420 [ 3042.273712][T26358] __se_sys_ioctl+0xfa/0x170 [ 3042.278339][T26358] do_syscall_64+0x4c/0xa0 [ 3042.282780][T26358] ? clear_bhb_loop+0x60/0xb0 [ 3042.287507][T26358] ? clear_bhb_loop+0x60/0xb0 [ 3042.292211][T26358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3042.298141][T26358] RIP: 0033:0x7fd8e899ce59 [ 3042.302581][T26358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3042.322208][T26358] RSP: 002b:00007fd8e9824028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3042.330645][T26358] RAX: ffffffffffffffda RBX: 00007fd8e8c15fa0 RCX: 00007fd8e899ce59 [ 3042.338638][T26358] RDX: 0000200000000080 RSI: 00000000000089a2 RDI: 000000000000000b [ 3042.346630][T26358] RBP: 00007fd8e9824090 R08: 0000000000000000 R09: 0000000000000000 [ 3042.354621][T26358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3042.362614][T26358] R13: 00007fd8e8c16038 R14: 00007fd8e8c15fa0 R15: 00007ffc02940788 [ 3042.370623][T26358] [ 3042.438405][T26358] À: port 1(vlan0) entered disabled state [ 3042.446538][T26358] device vlan0 entered promiscuous mode [ 3042.871912][T26378] netlink: 'syz.3.16944': attribute type 1 has an invalid length. [ 3042.937355][T26378] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.16944'. [ 3043.118119][T26383] netlink: 'syz.2.16946': attribute type 10 has an invalid length. [ 3043.187675][T26383] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16946'. [ 3043.507013][T26375] netlink: 'syz.4.16940': attribute type 10 has an invalid length. [ 3043.523191][T26375] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.16940'. [ 3043.586899][T26370] netlink: 'syz.4.16940': attribute type 10 has an invalid length. [ 3043.605848][T26370] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.16940'. [ 3043.667301][T26389] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16947'. [ 3043.830929][T26395] netlink: 'syz.1.16948': attribute type 39 has an invalid length. [ 3044.230533][T26403] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.16950'. [ 3044.263856][T26403] bridge_slave_1: default FDB implementation only supports local addresses [ 3044.485359][T26413] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.16954'. [ 3044.658894][T26418] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16956'. [ 3044.668029][T26418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3044.732521][T26418] netlink: 13566 bytes leftover after parsing attributes in process `syz.0.16956'. [ 3045.191564][T26436] netlink: 'syz.1.16963': attribute type 10 has an invalid length. [ 3045.933895][T26444] device wlan1 entered promiscuous mode [ 3046.182460][T26458] FAULT_INJECTION: forcing a failure. [ 3046.182460][T26458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3046.213329][T26458] CPU: 0 PID: 26458 Comm: syz.4.16967 Not tainted syzkaller #0 [ 3046.220976][T26458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3046.231086][T26458] Call Trace: [ 3046.234410][T26458] [ 3046.237386][T26458] dump_stack_lvl+0x188/0x24e [ 3046.242125][T26458] ? show_regs_print_info+0x12/0x12 [ 3046.247380][T26458] ? load_image+0x410/0x410 [ 3046.251926][T26458] ? __lock_acquire+0x7bd0/0x7bd0 [ 3046.257080][T26458] should_fail_ex+0x390/0x4c0 [ 3046.261788][T26458] _copy_from_user+0x2c/0x170 [ 3046.266504][T26458] addrconf_del_ifaddr+0xd4/0x170 [ 3046.271558][T26458] ? inet6_addr_add+0x9c0/0x9c0 [ 3046.276444][T26458] ? __lock_acquire+0x7bd0/0x7bd0 [ 3046.281501][T26458] ? slab_free_freelist_hook+0x133/0x1b0 [ 3046.287174][T26458] inet6_ioctl+0x1f0/0x280 [ 3046.291621][T26458] ? __kmem_cache_free+0xb6/0x200 [ 3046.296675][T26458] ? inet6_getname+0x670/0x670 [ 3046.301458][T26458] ? tomoyo_path_number_perm+0x205/0x650 [ 3046.307118][T26458] ? tomoyo_path_number_perm+0x5a4/0x650 [ 3046.312779][T26458] ? tomoyo_path_number_perm+0x205/0x650 [ 3046.318445][T26458] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3046.323941][T26458] sock_do_ioctl+0xfb/0x320 [ 3046.328482][T26458] ? sock_show_fdinfo+0xb0/0xb0 [ 3046.333372][T26458] sock_ioctl+0x48a/0x700 [ 3046.337731][T26458] ? sock_poll+0x420/0x420 [ 3046.342183][T26458] ? bpf_lsm_file_ioctl+0x5/0x10 [ 3046.347160][T26458] ? security_file_ioctl+0x7c/0xa0 [ 3046.352300][T26458] ? sock_poll+0x420/0x420 [ 3046.356741][T26458] __se_sys_ioctl+0xfa/0x170 [ 3046.361365][T26458] do_syscall_64+0x4c/0xa0 [ 3046.365802][T26458] ? clear_bhb_loop+0x60/0xb0 [ 3046.370506][T26458] ? clear_bhb_loop+0x60/0xb0 [ 3046.375211][T26458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3046.381143][T26458] RIP: 0033:0x7f2362b9ce59 [ 3046.385579][T26458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3046.405228][T26458] RSP: 002b:00007f2360df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3046.413716][T26458] RAX: ffffffffffffffda RBX: 00007f2362e15fa0 RCX: 00007f2362b9ce59 [ 3046.421718][T26458] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003 [ 3046.429717][T26458] RBP: 00007f2360df6090 R08: 0000000000000000 R09: 0000000000000000 [ 3046.437708][T26458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3046.445706][T26458] R13: 00007f2362e16038 R14: 00007f2362e15fa0 R15: 00007ffe2a9239a8 [ 3046.453712][T26458] [ 3046.654487][T26471] netlink: 'syz.4.16974': attribute type 29 has an invalid length. [ 3046.693843][T26471] netlink: 'syz.4.16974': attribute type 29 has an invalid length. [ 3046.847010][T26470] FAULT_INJECTION: forcing a failure. [ 3046.847010][T26470] name failslab, interval 1, probability 0, space 0, times 0 [ 3046.863952][T26470] CPU: 1 PID: 26470 Comm: syz.2.16973 Not tainted syzkaller #0 [ 3046.871594][T26470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3046.881707][T26470] Call Trace: [ 3046.885026][T26470] [ 3046.887983][T26470] dump_stack_lvl+0x188/0x24e [ 3046.892697][T26470] ? show_regs_print_info+0x12/0x12 [ 3046.897927][T26470] ? load_image+0x410/0x410 [ 3046.902475][T26470] ? __might_sleep+0xd0/0xd0 [ 3046.907092][T26470] ? __lock_acquire+0x7bd0/0x7bd0 [ 3046.912153][T26470] should_fail_ex+0x390/0x4c0 [ 3046.916855][T26470] should_failslab+0x5/0x20 [ 3046.921381][T26470] slab_pre_alloc_hook+0x59/0x300 [ 3046.926438][T26470] ? tomoyo_encode+0x28a/0x550 [ 3046.931240][T26470] __kmem_cache_alloc_node+0x4f/0x270 [ 3046.936650][T26470] ? tomoyo_encode+0x28a/0x550 [ 3046.941443][T26470] __kmalloc+0xa3/0x240 [ 3046.945639][T26470] tomoyo_encode+0x28a/0x550 [ 3046.950271][T26470] tomoyo_realpath_from_path+0x578/0x5c0 [ 3046.955940][T26470] ? tomoyo_domain+0xd2/0x120 [ 3046.960676][T26470] ? tomoyo_path_number_perm+0x205/0x650 [ 3046.966388][T26470] tomoyo_path_number_perm+0x22f/0x650 [ 3046.971895][T26470] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3046.977424][T26470] ? __fget_files+0x28/0x460 [ 3046.982061][T26470] security_file_ioctl+0x6c/0xa0 [ 3046.987052][T26470] __se_sys_ioctl+0x48/0x170 [ 3046.991689][T26470] do_syscall_64+0x4c/0xa0 [ 3046.996133][T26470] ? clear_bhb_loop+0x60/0xb0 [ 3047.000835][T26470] ? clear_bhb_loop+0x60/0xb0 [ 3047.005537][T26470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3047.011466][T26470] RIP: 0033:0x7ff2aa79ce59 [ 3047.015905][T26470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3047.035536][T26470] RSP: 002b:00007ff2ab61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3047.043995][T26470] RAX: ffffffffffffffda RBX: 00007ff2aaa15fa0 RCX: 00007ff2aa79ce59 [ 3047.052011][T26470] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 000000000000000b [ 3047.060017][T26470] RBP: 00007ff2ab61f090 R08: 0000000000000000 R09: 0000000000000000 [ 3047.068019][T26470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3047.076024][T26470] R13: 00007ff2aaa16038 R14: 00007ff2aaa15fa0 R15: 00007ffff932f3f8 [ 3047.084074][T26470] [ 3047.110834][T26470] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3047.172824][T26480] __nla_validate_parse: 1 callbacks suppressed [ 3047.172844][T26480] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16977'. [ 3047.980759][T26494] FAULT_INJECTION: forcing a failure. [ 3047.980759][T26494] name failslab, interval 1, probability 0, space 0, times 0 [ 3047.999493][T26494] CPU: 0 PID: 26494 Comm: syz.2.16981 Not tainted syzkaller #0 [ 3048.007127][T26495] netlink: 'syz.3.16980': attribute type 10 has an invalid length. [ 3048.007138][T26494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3048.015058][T26494] Call Trace: [ 3048.015076][T26494] [ 3048.015088][T26494] dump_stack_lvl+0x188/0x24e [ 3048.015121][T26494] ? show_regs_print_info+0x12/0x12 [ 3048.015146][T26494] ? load_image+0x410/0x410 [ 3048.015181][T26494] ? __might_sleep+0xd0/0xd0 [ 3048.015205][T26494] ? __lock_acquire+0x7bd0/0x7bd0 [ 3048.015236][T26494] ? ct_irq_exit_irqson+0x113/0x170 [ 3048.015268][T26494] should_fail_ex+0x390/0x4c0 [ 3048.015297][T26494] should_failslab+0x5/0x20 [ 3048.015319][T26494] slab_pre_alloc_hook+0x59/0x300 [ 3048.015346][T26494] ? exc_page_fault+0x88/0x100 [ 3048.015375][T26494] ? sk_prot_alloc+0xe7/0x210 [ 3048.015409][T26494] __kmem_cache_alloc_node+0x4f/0x270 [ 3048.034666][T26495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16980'. [ 3048.036437][T26494] ? exc_page_fault+0x88/0x100 [ 3048.036480][T26494] ? sk_prot_alloc+0xe7/0x210 [ 3048.036512][T26494] __kmalloc+0xa3/0x240 [ 3048.036558][T26494] sk_prot_alloc+0xe7/0x210 [ 3048.117580][T26494] ? sk_alloc+0x20/0x330 [ 3048.121889][T26494] sk_alloc+0x36/0x330 [ 3048.126014][T26494] ? bpf_ctx_init+0x154/0x190 [ 3048.130753][T26494] bpf_prog_test_run_skb+0x36d/0x18e0 [ 3048.136190][T26494] ? __fget_files+0x28/0x460 [ 3048.140849][T26494] ? __fget_files+0x3fc/0x460 [ 3048.145599][T26494] ? cpu_online+0xa0/0xa0 [ 3048.149986][T26494] bpf_prog_test_run+0x31c/0x390 [ 3048.154988][T26494] __sys_bpf+0x62b/0x780 [ 3048.159292][T26494] ? bpf_link_show_fdinfo+0x380/0x380 [ 3048.164739][T26494] ? lock_chain_count+0x20/0x20 [ 3048.169695][T26494] __x64_sys_bpf+0x78/0x90 [ 3048.174176][T26494] do_syscall_64+0x4c/0xa0 [ 3048.178645][T26494] ? clear_bhb_loop+0x60/0xb0 [ 3048.183375][T26494] ? clear_bhb_loop+0x60/0xb0 [ 3048.188106][T26494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3048.194054][T26494] RIP: 0033:0x7ff2aa79ce59 [ 3048.198521][T26494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3048.218182][T26494] RSP: 002b:00007ff2ab61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3048.226653][T26494] RAX: ffffffffffffffda RBX: 00007ff2aaa15fa0 RCX: 00007ff2aa79ce59 [ 3048.234714][T26494] RDX: 000000000000004c RSI: 0000200000000000 RDI: 000000000000000a [ 3048.242732][T26494] RBP: 00007ff2ab61f090 R08: 0000000000000000 R09: 0000000000000000 [ 3048.250752][T26494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3048.258767][T26494] R13: 00007ff2aaa16038 R14: 00007ff2aaa15fa0 R15: 00007ffff932f3f8 [ 3048.266809][T26494] [ 3048.604662][T26512] FAULT_INJECTION: forcing a failure. [ 3048.604662][T26512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3048.636491][T26512] CPU: 1 PID: 26512 Comm: syz.2.16986 Not tainted syzkaller #0 [ 3048.644129][T26512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3048.654214][T26512] Call Trace: [ 3048.657516][T26512] [ 3048.660470][T26512] dump_stack_lvl+0x188/0x24e [ 3048.665182][T26512] ? show_regs_print_info+0x12/0x12 [ 3048.670407][T26512] ? load_image+0x410/0x410 [ 3048.674961][T26512] ? __lock_acquire+0x7bd0/0x7bd0 [ 3048.680022][T26512] ? lockdep_hardirqs_on+0x94/0x140 [ 3048.685253][T26512] should_fail_ex+0x390/0x4c0 [ 3048.689961][T26512] _copy_from_user+0x2c/0x170 [ 3048.694675][T26512] __copy_msghdr+0x384/0x560 [ 3048.699307][T26512] ___sys_sendmsg+0x210/0x360 [ 3048.704066][T26512] ? lock_chain_count+0x20/0x20 [ 3048.708959][T26512] ? __sys_sendmsg+0x2a0/0x2a0 [ 3048.713771][T26512] ? __lock_acquire+0x7bd0/0x7bd0 [ 3048.718846][T26512] __se_sys_sendmsg+0x1c3/0x2b0 [ 3048.723725][T26512] ? __x64_sys_sendmsg+0x80/0x80 [ 3048.728787][T26512] ? syscall_enter_from_user_mode+0x2a/0x80 [ 3048.734725][T26512] do_syscall_64+0x4c/0xa0 [ 3048.739164][T26512] ? clear_bhb_loop+0x60/0xb0 [ 3048.743867][T26512] ? clear_bhb_loop+0x60/0xb0 [ 3048.748567][T26512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3048.754494][T26512] RIP: 0033:0x7ff2aa79ce59 [ 3048.758940][T26512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3048.778576][T26512] RSP: 002b:00007ff2ab61f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3048.787107][T26512] RAX: ffffffffffffffda RBX: 00007ff2aaa15fa0 RCX: 00007ff2aa79ce59 [ 3048.795105][T26512] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 3048.803102][T26512] RBP: 00007ff2ab61f090 R08: 0000000000000000 R09: 0000000000000000 [ 3048.811102][T26512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3048.819098][T26512] R13: 00007ff2aaa16038 R14: 00007ff2aaa15fa0 R15: 00007ffff932f3f8 [ 3048.827109][T26512] [ 3048.925000][T26517] netlink: 'syz.4.16987': attribute type 11 has an invalid length. [ 3048.950366][T26517] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.16987'. [ 3049.846515][T26536] netlink: 'syz.3.16989': attribute type 39 has an invalid length. [ 3049.983515][T26543] tap0: tun_chr_ioctl cmd 2147767517 [ 3050.022710][T26538] delete_channel: no stack [ 3050.218425][T26558] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.16999'. [ 3050.692083][T26567] device wlan1 entered promiscuous mode [ 3050.753647][T26572] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17002'. [ 3050.770695][T26572] netlink: 'syz.1.17002': attribute type 10 has an invalid length. [ 3050.797853][T26572] netlink: 'syz.1.17002': attribute type 10 has an invalid length. [ 3050.809529][T26572] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17002'. [ 3050.826743][T26572] batman_adv: batadv0: Adding interface: virt_wifi0 [ 3050.835629][T26572] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3050.874029][T26572] batman_adv: batadv0: Interface activated: virt_wifi0 [ 3051.766545][T26583] netlink: 152 bytes leftover after parsing attributes in process `syz.0.17007'. [ 3051.873909][T26577] ================================================================== [ 3051.882059][T26577] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 3051.889927][T26577] Write of size 80 at addr ffff8880a68c2810 by task syz.3.17004/26577 [ 3051.898130][T26577] [ 3051.900493][T26577] CPU: 1 PID: 26577 Comm: syz.3.17004 Not tainted syzkaller #0 [ 3051.908084][T26577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3051.918203][T26577] Call Trace: [ 3051.921524][T26577] [ 3051.924498][T26577] dump_stack_lvl+0x188/0x24e [ 3051.929227][T26577] ? __lock_acquire+0x7bd0/0x7bd0 [ 3051.934312][T26577] ? show_regs_print_info+0x12/0x12 [ 3051.939554][T26577] ? load_image+0x410/0x410 [ 3051.944104][T26577] ? __virt_addr_valid+0x467/0x540 [ 3051.949278][T26577] ? __bpf_get_stackid+0x6c9/0x920 [ 3051.954421][T26577] print_report+0xa8/0x210 [ 3051.958877][T26577] kasan_report+0x10b/0x140 [ 3051.963445][T26577] ? __bpf_get_stackid+0x6c9/0x920 [ 3051.968637][T26577] kasan_check_range+0x235/0x290 [ 3051.973609][T26577] ? __bpf_get_stackid+0x6c9/0x920 [ 3051.978747][T26577] memcpy+0x3c/0x60 [ 3051.982590][T26577] __bpf_get_stackid+0x6c9/0x920 [ 3051.987569][T26577] bpf_get_stackid_pe+0x33f/0x400 [ 3051.992630][T26577] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 3051.998123][T26577] bpf_overflow_handler+0x50b/0x790 [ 3052.003365][T26577] ? bpf_overflow_handler+0xd9/0x790 [ 3052.008678][T26577] ? perf_swevent_overflow+0x230/0x230 [ 3052.014162][T26577] ? ct_irq_exit_irqson+0x113/0x170 [ 3052.019392][T26577] ? lockdep_hardirqs_on+0x94/0x140 [ 3052.024625][T26577] ? __perf_event_account_interrupt+0x187/0x280 [ 3052.030906][T26577] __perf_event_overflow+0x457/0x630 [ 3052.036236][T26577] perf_swevent_event+0x315/0x570 [ 3052.041345][T26577] ? perf_tp_event+0xc10/0xc10 [ 3052.046147][T26577] ? perf_tp_event+0xa8e/0xc10 [ 3052.050956][T26577] ___perf_sw_event+0x498/0x6d0 [ 3052.055841][T26577] ? ___perf_sw_event+0x184/0x6d0 [ 3052.060899][T26577] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 3052.067374][T26577] ? ct_nmi_exit+0x145/0x1c0 [ 3052.071996][T26577] ? ct_irq_exit_irqson+0x113/0x170 [ 3052.077235][T26577] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 3052.083259][T26577] ? lock_chain_count+0x20/0x20 [ 3052.088155][T26577] __perf_sw_event+0x135/0x260 [ 3052.092958][T26577] do_user_addr_fault+0x497/0xb20 [ 3052.098030][T26577] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 3052.104054][T26577] ? trace_hardirqs_off_finish+0x86/0x180 [ 3052.109819][T26577] exc_page_fault+0x60/0x100 [ 3052.114455][T26577] asm_exc_page_fault+0x22/0x30 [ 3052.119340][T26577] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 3052.125964][T26577] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 3052.145609][T26577] RSP: 0018:ffffc900059cf788 EFLAGS: 00050206 [ 3052.151710][T26577] RAX: ffffffff840dde01 RBX: 0000000000033fe0 RCX: 0000000000031020 [ 3052.159734][T26577] RDX: 0000000000033fe0 RSI: 0000200000003000 RDI: ffffc90005afbfc0 [ 3052.167750][T26577] RBP: 0000000000000000 R08: ffffc90005b2cfdf R09: 1ffff92000b659fb [ 3052.175755][T26577] R10: dffffc0000000000 R11: fffff52000b659fc R12: 00007ffffffcb020 [ 3052.184018][T26577] R13: 0000000000000000 R14: 0000200000000040 R15: ffffc90005af9000 [ 3052.192027][T26577] ? copyin+0x91/0x120 [ 3052.196134][T26577] copyin+0xe7/0x120 [ 3052.200065][T26577] _copy_from_iter+0x447/0x1130 [ 3052.204950][T26577] ? copyout_mc+0x110/0x110 [ 3052.209479][T26577] ? do_raw_spin_unlock+0x11d/0x230 [ 3052.214706][T26577] ? _raw_spin_unlock+0x24/0x40 [ 3052.219590][T26577] ? find_vmap_area+0xf8/0x110 [ 3052.224387][T26577] ? __phys_addr_symbol+0x2b/0x70 [ 3052.229467][T26577] ? __check_object_size+0x4f6/0xa70 [ 3052.234781][T26577] netlink_sendmsg+0x755/0xbd0 [ 3052.239582][T26577] ? netlink_getsockopt+0x550/0x550 [ 3052.244813][T26577] ? aa_sock_msg_perm+0x94/0x150 [ 3052.249778][T26577] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3052.255089][T26577] ? security_socket_sendmsg+0x7c/0xa0 [ 3052.260585][T26577] ? netlink_getsockopt+0x550/0x550 [ 3052.265811][T26577] ____sys_sendmsg+0x5ed/0x9a0 [ 3052.270608][T26577] ? __sys_sendmsg_sock+0x30/0x30 [ 3052.275655][T26577] ? __import_iovec+0x306/0x510 [ 3052.280542][T26577] ? import_iovec+0x6f/0xa0 [ 3052.285069][T26577] ___sys_sendmsg+0x2a2/0x360 [ 3052.289780][T26577] ? __sys_sendmsg+0x2a0/0x2a0 [ 3052.294609][T26577] __se_sys_sendmsg+0x1c3/0x2b0 [ 3052.299483][T26577] ? ct_nmi_exit+0x145/0x1c0 [ 3052.304112][T26577] ? __x64_sys_sendmsg+0x80/0x80 [ 3052.309084][T26577] ? lockdep_hardirqs_on+0x94/0x140 [ 3052.314317][T26577] do_syscall_64+0x4c/0xa0 [ 3052.318755][T26577] ? clear_bhb_loop+0x60/0xb0 [ 3052.323451][T26577] ? clear_bhb_loop+0x60/0xb0 [ 3052.328155][T26577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3052.334080][T26577] RIP: 0033:0x7fd8e899ce59 [ 3052.338521][T26577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3052.358162][T26577] RSP: 002b:00007fd8e9824028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3052.366603][T26577] RAX: ffffffffffffffda RBX: 00007fd8e8c15fa0 RCX: 00007fd8e899ce59 [ 3052.374600][T26577] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 3052.382597][T26577] RBP: 00007fd8e8a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 3052.390593][T26577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3052.398588][T26577] R13: 00007fd8e8c16038 R14: 00007fd8e8c15fa0 R15: 00007ffc02940788 [ 3052.406605][T26577] [ 3052.409644][T26577] [ 3052.411983][T26577] Allocated by task 26577: [ 3052.416413][T26577] kasan_set_track+0x4b/0x70 [ 3052.421038][T26577] __kasan_kmalloc+0x8e/0xa0 [ 3052.425661][T26577] __kmalloc_node+0xb2/0x240 [ 3052.430280][T26577] bpf_map_area_alloc+0x47/0xe0 [ 3052.435178][T26577] prealloc_elems_and_freelist+0x86/0x1c0 [ 3052.440925][T26577] stack_map_alloc+0x386/0x510 [ 3052.445723][T26577] map_create+0x524/0xff0 [ 3052.450086][T26577] __sys_bpf+0x38b/0x780 [ 3052.454355][T26577] __x64_sys_bpf+0x78/0x90 [ 3052.458799][T26577] do_syscall_64+0x4c/0xa0 [ 3052.463241][T26577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3052.469167][T26577] [ 3052.471507][T26577] Last potentially related work creation: [ 3052.477235][T26577] kasan_save_stack+0x3a/0x60 [ 3052.481946][T26577] __kasan_record_aux_stack+0xb2/0xc0 [ 3052.487337][T26577] call_rcu+0x14f/0x950 [ 3052.491524][T26577] __nf_register_net_hook+0x787/0x910 [ 3052.496926][T26577] nf_register_net_hook+0xae/0x190 [ 3052.502065][T26577] nf_register_net_hooks+0x40/0x1a0 [ 3052.507297][T26577] nf_ct_netns_do_get+0x20f/0x5b0 [ 3052.512349][T26577] nf_ct_netns_inet_get+0x3b/0x150 [ 3052.517487][T26577] nf_conncount_init+0x123/0x380 [ 3052.522445][T26577] ovs_ct_init+0x312/0x480 [ 3052.526884][T26577] ovs_init_net+0x1e2/0x240 [ 3052.531415][T26577] ops_init+0x360/0x5e0 [ 3052.535588][T26577] setup_net+0x4f2/0xbd0 [ 3052.539858][T26577] copy_net_ns+0x33e/0x5b0 [ 3052.544306][T26577] create_new_namespaces+0x3ce/0x700 [ 3052.549618][T26577] copy_namespaces+0x3ae/0x410 [ 3052.554403][T26577] copy_process+0x19ef/0x40c0 [ 3052.559103][T26577] kernel_clone+0x24b/0x900 [ 3052.563624][T26577] __x64_sys_clone+0x1a7/0x220 [ 3052.568411][T26577] do_syscall_64+0x4c/0xa0 [ 3052.572848][T26577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3052.578772][T26577] [ 3052.581112][T26577] Second to last potentially related work creation: [ 3052.587710][T26577] kasan_save_stack+0x3a/0x60 [ 3052.592419][T26577] __kasan_record_aux_stack+0xb2/0xc0 [ 3052.597818][T26577] call_rcu+0x14f/0x950 [ 3052.602000][T26577] nf_unregister_net_hooks+0xc7/0x130 [ 3052.607421][T26577] nf_ct_netns_put+0x369/0x510 [ 3052.612227][T26577] nf_conncount_destroy+0x3d/0x150 [ 3052.617370][T26577] ovs_ct_exit+0x98/0x200 [ 3052.621723][T26577] ovs_exit_net+0xe9/0x7a0 [ 3052.626166][T26577] cleanup_net+0x703/0xba0 [ 3052.630602][T26577] process_one_work+0x8ab/0x1160 [ 3052.635565][T26577] worker_thread+0xaf5/0x12a0 [ 3052.640266][T26577] kthread+0x29d/0x330 [ 3052.644359][T26577] ret_from_fork+0x1f/0x30 [ 3052.648801][T26577] [ 3052.651154][T26577] The buggy address belongs to the object at ffff8880a68c2800 [ 3052.651154][T26577] which belongs to the cache kmalloc-cg-64 of size 64 [ 3052.665314][T26577] The buggy address is located 16 bytes inside of [ 3052.665314][T26577] 64-byte region [ffff8880a68c2800, ffff8880a68c2840) [ 3052.678440][T26577] [ 3052.680783][T26577] The buggy address belongs to the physical page: [ 3052.687227][T26577] page:ffffea00029a3080 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880a68c2200 pfn:0xa68c2 [ 3052.698710][T26577] memcg:ffff8880799a9e01 [ 3052.702968][T26577] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 3052.710561][T26577] raw: 00fff00000000200 ffffea00009156c0 dead000000000006 ffff888017442780 [ 3052.719169][T26577] raw: ffff8880a68c2200 000000008020001d 00000001ffffffff ffff8880799a9e01 [ 3052.727769][T26577] page dumped because: kasan: bad access detected [ 3052.734208][T26577] page_owner tracks the page as allocated [ 3052.739941][T26577] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 14344, tgid 14344 (syz-executor), ts 1025717264348, free_ts 1025696187759 [ 3052.758745][T26577] post_alloc_hook+0x173/0x1a0 [ 3052.763546][T26577] get_page_from_freelist+0x206b/0x2180 [ 3052.769129][T26577] __alloc_pages+0x1ec/0x4f0 [ 3052.773751][T26577] alloc_slab_page+0x5d/0x180 [ 3052.778457][T26577] new_slab+0x87/0x2d0 [ 3052.782552][T26577] ___slab_alloc+0xbc5/0x1240 [ 3052.787277][T26577] __kmem_cache_alloc_node+0x126/0x270 [ 3052.792768][T26577] kmalloc_trace+0x26/0xe0 [ 3052.797215][T26577] alloc_fdtable+0xca/0x2c0 [ 3052.801750][T26577] dup_fd+0x743/0xa20 [ 3052.805763][T26577] copy_files+0x72/0xe0 [ 3052.809941][T26577] copy_process+0x1862/0x40c0 [ 3052.814641][T26577] kernel_clone+0x24b/0x900 [ 3052.819169][T26577] __x64_sys_clone+0x1a7/0x220 [ 3052.823954][T26577] do_syscall_64+0x4c/0xa0 [ 3052.828397][T26577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3052.834329][T26577] page last free stack trace: [ 3052.839030][T26577] free_unref_page_prepare+0x8e5/0x9e0 [ 3052.844520][T26577] free_unref_page+0x2e/0x3f0 [ 3052.849228][T26577] __unfreeze_partials+0x188/0x1e0 [ 3052.854367][T26577] put_cpu_partial+0x17c/0x250 [ 3052.859156][T26577] qlist_free_all+0x76/0xe0 [ 3052.863680][T26577] kasan_quarantine_reduce+0x144/0x160 [ 3052.869175][T26577] __kasan_slab_alloc+0x1e/0x80 [ 3052.874056][T26577] slab_post_alloc_hook+0x4b/0x490 [ 3052.879193][T26577] kmem_cache_alloc_lru+0x182/0x2e0 [ 3052.884423][T26577] sock_alloc_inode+0x24/0xc0 [ 3052.889140][T26577] new_inode_pseudo+0x5f/0x1c0 [ 3052.893925][T26577] __sock_create+0x129/0x940 [ 3052.898546][T26577] __sys_socket+0xc4/0x190 [ 3052.902985][T26577] __x64_sys_socket+0x76/0x80 [ 3052.907686][T26577] do_syscall_64+0x4c/0xa0 [ 3052.912133][T26577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3052.918064][T26577] [ 3052.920417][T26577] Memory state around the buggy address: [ 3052.926066][T26577] ffff8880a68c2700: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 3052.934151][T26577] ffff8880a68c2780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 3052.942236][T26577] >ffff8880a68c2800: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 3052.950331][T26577] ^ [ 3052.955721][T26577] ffff8880a68c2880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 3052.963800][T26577] ffff8880a68c2900: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 3052.971907][T26577] ================================================================== [ 3052.980001][T26577] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3052.987209][T26577] CPU: 1 PID: 26577 Comm: syz.3.17004 Not tainted syzkaller #0 [ 3052.994774][T26577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3053.004852][T26577] Call Trace: [ 3053.008154][T26577] [ 3053.011113][T26577] dump_stack_lvl+0x188/0x24e [ 3053.015822][T26577] ? memcpy+0x3c/0x60 [ 3053.019832][T26577] ? show_regs_print_info+0x12/0x12 [ 3053.025058][T26577] ? load_image+0x410/0x410 [ 3053.029610][T26577] panic+0x2d3/0x710 [ 3053.033538][T26577] ? bpf_jit_dump+0xd0/0xd0 [ 3053.038075][T26577] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3053.044011][T26577] ? _raw_spin_unlock+0x40/0x40 [ 3053.048890][T26577] ? print_memory_metadata+0x314/0x400 [ 3053.054385][T26577] check_panic_on_warn+0x80/0xa0 [ 3053.059359][T26577] ? __bpf_get_stackid+0x6c9/0x920 [ 3053.064499][T26577] end_report+0x66/0x110 [ 3053.068800][T26577] kasan_report+0x118/0x140 [ 3053.073338][T26577] ? __bpf_get_stackid+0x6c9/0x920 [ 3053.078481][T26577] kasan_check_range+0x235/0x290 [ 3053.083448][T26577] ? __bpf_get_stackid+0x6c9/0x920 [ 3053.088587][T26577] memcpy+0x3c/0x60 [ 3053.092430][T26577] __bpf_get_stackid+0x6c9/0x920 [ 3053.097398][T26577] bpf_get_stackid_pe+0x33f/0x400 [ 3053.102456][T26577] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 3053.107938][T26577] bpf_overflow_handler+0x50b/0x790 [ 3053.113170][T26577] ? bpf_overflow_handler+0xd9/0x790 [ 3053.118478][T26577] ? perf_swevent_overflow+0x230/0x230 [ 3053.123961][T26577] ? ct_irq_exit_irqson+0x113/0x170 [ 3053.129186][T26577] ? lockdep_hardirqs_on+0x94/0x140 [ 3053.134451][T26577] ? __perf_event_account_interrupt+0x187/0x280 [ 3053.140731][T26577] __perf_event_overflow+0x457/0x630 [ 3053.146054][T26577] perf_swevent_event+0x315/0x570 [ 3053.151119][T26577] ? perf_tp_event+0xc10/0xc10 [ 3053.155920][T26577] ? perf_tp_event+0xa8e/0xc10 [ 3053.160726][T26577] ___perf_sw_event+0x498/0x6d0 [ 3053.165609][T26577] ? ___perf_sw_event+0x184/0x6d0 [ 3053.170667][T26577] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 3053.177140][T26577] ? ct_nmi_exit+0x145/0x1c0 [ 3053.181873][T26577] ? ct_irq_exit_irqson+0x113/0x170 [ 3053.187176][T26577] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 3053.193209][T26577] ? lock_chain_count+0x20/0x20 [ 3053.198117][T26577] __perf_sw_event+0x135/0x260 [ 3053.202945][T26577] do_user_addr_fault+0x497/0xb20 [ 3053.208014][T26577] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 3053.214047][T26577] ? trace_hardirqs_off_finish+0x86/0x180 [ 3053.219823][T26577] exc_page_fault+0x60/0x100 [ 3053.224460][T26577] asm_exc_page_fault+0x22/0x30 [ 3053.229354][T26577] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 3053.235979][T26577] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 3053.255629][T26577] RSP: 0018:ffffc900059cf788 EFLAGS: 00050206 [ 3053.261738][T26577] RAX: ffffffff840dde01 RBX: 0000000000033fe0 RCX: 0000000000031020 [ 3053.269743][T26577] RDX: 0000000000033fe0 RSI: 0000200000003000 RDI: ffffc90005afbfc0 [ 3053.277749][T26577] RBP: 0000000000000000 R08: ffffc90005b2cfdf R09: 1ffff92000b659fb [ 3053.285754][T26577] R10: dffffc0000000000 R11: fffff52000b659fc R12: 00007ffffffcb020 [ 3053.293762][T26577] R13: 0000000000000000 R14: 0000200000000040 R15: ffffc90005af9000 [ 3053.301773][T26577] ? copyin+0x91/0x120 [ 3053.305884][T26577] copyin+0xe7/0x120 [ 3053.309815][T26577] _copy_from_iter+0x447/0x1130 [ 3053.314716][T26577] ? copyout_mc+0x110/0x110 [ 3053.319256][T26577] ? do_raw_spin_unlock+0x11d/0x230 [ 3053.324496][T26577] ? _raw_spin_unlock+0x24/0x40 [ 3053.329390][T26577] ? find_vmap_area+0xf8/0x110 [ 3053.334222][T26577] ? __phys_addr_symbol+0x2b/0x70 [ 3053.339305][T26577] ? __check_object_size+0x4f6/0xa70 [ 3053.344636][T26577] netlink_sendmsg+0x755/0xbd0 [ 3053.349474][T26577] ? netlink_getsockopt+0x550/0x550 [ 3053.354713][T26577] ? aa_sock_msg_perm+0x94/0x150 [ 3053.359689][T26577] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3053.365008][T26577] ? security_socket_sendmsg+0x7c/0xa0 [ 3053.370504][T26577] ? netlink_getsockopt+0x550/0x550 [ 3053.375742][T26577] ____sys_sendmsg+0x5ed/0x9a0 [ 3053.380547][T26577] ? __sys_sendmsg_sock+0x30/0x30 [ 3053.385608][T26577] ? __import_iovec+0x306/0x510 [ 3053.390509][T26577] ? import_iovec+0x6f/0xa0 [ 3053.395056][T26577] ___sys_sendmsg+0x2a2/0x360 [ 3053.399780][T26577] ? __sys_sendmsg+0x2a0/0x2a0 [ 3053.404622][T26577] __se_sys_sendmsg+0x1c3/0x2b0 [ 3053.409509][T26577] ? ct_nmi_exit+0x145/0x1c0 [ 3053.414146][T26577] ? __x64_sys_sendmsg+0x80/0x80 [ 3053.419169][T26577] ? lockdep_hardirqs_on+0x94/0x140 [ 3053.424413][T26577] do_syscall_64+0x4c/0xa0 [ 3053.428865][T26577] ? clear_bhb_loop+0x60/0xb0 [ 3053.433583][T26577] ? clear_bhb_loop+0x60/0xb0 [ 3053.438300][T26577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3053.444233][T26577] RIP: 0033:0x7fd8e899ce59 [ 3053.448684][T26577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3053.468332][T26577] RSP: 002b:00007fd8e9824028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3053.476783][T26577] RAX: ffffffffffffffda RBX: 00007fd8e8c15fa0 RCX: 00007fd8e899ce59 [ 3053.484787][T26577] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 3053.492791][T26577] RBP: 00007fd8e8a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 3053.500793][T26577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3053.508803][T26577] R13: 00007fd8e8c16038 R14: 00007fd8e8c15fa0 R15: 00007ffc02940788 [ 3053.516822][T26577] [ 3053.520476][T26577] Kernel Offset: disabled [ 3053.524819][T26577] Rebooting in 86400 seconds..