last executing test programs: 8.503260523s ago: executing program 4 (id=1509): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x6, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70003000140e2ffca1b1f00f0000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.events.local\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='percpu_alloc_percpu\x00', r5}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000300000061111c000000004600180000000000000000c53fe724dbc8a2492bd200"], &(0x7f0000000000)='GPL\x00'}, 0x80) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000300)={r0}) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000340), 0x4) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="abed61baa755a83c00"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r7}, 0x38) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20165, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x18690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x7, @perf_config_ext, 0x0, 0x10000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.244429296s ago: executing program 3 (id=1513): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x400000000000}, 0x0, 0x1, 0x0, 0x0, 0xf60, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xa}, 0x119b11, 0x3ff, 0xfffffffd, 0x1, 0xfffffffffffffffd, 0x4000, 0xefff, 0x0, 0x10}, 0x0, 0xb, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x14, &(0x7f0000000040)=r3, 0x3b) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x1, &(0x7f0000000200)=@raw=[@generic={0xb, 0x4, 0xf, 0xfff7, 0xec9}], &(0x7f0000000240)='syzkaller\x00', 0x1, 0xdc, &(0x7f0000000500)=""/220, 0x41000, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)=[{0x0, 0x5, 0xf, 0xa}], 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x806, 0x0, 0x2ed9, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffdff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8d}, 0x48) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000fcffffff00000000000000009500000000000001ad4c949ee4d5c50066547dc009c586610ff0ff87a09ebb82ff2676"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) 7.681083509s ago: executing program 4 (id=1518): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32=0x1, @ANYBLOB="01000005645a8ba2c5acb2000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000100"/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000071e36e040000000005000000a6000001000900", @ANYRES32, @ANYBLOB="00000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) close(r4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0xd, &(0x7f00000000c0), 0x4f) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRES64=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c0002", 0x1b}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x600000}, 0xc) 7.268503132s ago: executing program 1 (id=1520): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x64, &(0x7f00000009c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000006a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.559970271s ago: executing program 3 (id=1522): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) 4.522175626s ago: executing program 1 (id=1523): r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100), 0x120) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000054) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, 0x0, 0x0) 4.49593261s ago: executing program 2 (id=1525): openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'ip6_vti0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$sock(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000002c0)=@l2={0x1f, 0xb, @none, 0xa75f, 0x2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)="9c1d60322fb5a761196c8435190c2707c10e4ebb19666502ebca82d9359cf2bf4ba5f56e6b6e5289d4ad94bf37f410f618843c146c446a8cfe41a9f1e6e141ee2850829249cf669dbc208a94b803493551c5853db803a196b6a9091c34da2ea1bb7acdfaf3fef82dcabbb1636e562e28042ee14fc84534175b5d0654e9e2dd58ca73c22ae8b19f7df035adb5f21e32bb7d6b83b7cb38ce00d832e34da57509438304aa00d707ffabc05fbb0a9ed4ae730004c73d092f3e54e31cf894bbd53898f9cb241ec34bd98d60d03eb3c30fc828f899542ef01a02d619d7af0e533ef773fe8585ac48ed24cbbb8f04df9653291cb1b2", 0xf2}, {&(0x7f0000000440)}, {&(0x7f0000000480)="0b704f03c5dfb31a3e6d4047660b8c75b9cfef86870b29", 0x17}, {&(0x7f00000006c0)="47de0931eeced6a9f77d37083edb53bab796a0bffae77f99434614843006ad3b4f5d4461b24f9c20e90601f56a6efc37505f52f39717421f8c25d7742650d548dbd06aff02d69eac272bd2569b52c27d1cff4b8b08cdb22865b072aeaa53e56f82713091e5cf418c46129b691a6a3c277a5b55ce175e665808b7776b7566743b7bae9f305ebffbff429ca37c2cd4c614645a2dde065eee553a3b1a2ab749", 0x9e}, {&(0x7f0000000580)="39f388dc7cf93f489ef109f28c087091f310043a10a8d846c0b870dbcecb57ccf25f187c965c13ae7af68278d029ac15ee7edceb6bb9eefb4c71f0e8f42c9fd2aa45878f37fadbf6bbe7d7c07580e558a26deffcd835a54ae7e9715ade7a25e5", 0x60}, {&(0x7f0000000780)="06f5b8be5e37e9d724233a276ac20c71983c9c03ee22c797b20e6aab1a32daa44098221f76521680f58676fc3b9951934aaa66c1ed4b269e833426d3e24e6b753bb7498029c2a58f67c26d357a0b8512611b4323e24038fa5d5d6010393666b08ef39734029b4d656ef5f8dbdeede0821ab97cd64c7d07ac6033", 0x7a}], 0x6, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x24, 0xc6f}}], 0x18}, 0x4) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$sock(r1, &(0x7f00000001c0)={&(0x7f00000002c0)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, 0x0}, 0x4000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000428c18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x74) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='svcrdma_small_wrch_err\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.436989947s ago: executing program 4 (id=1526): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000001340)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x22, &(0x7f0000000280), 0x4) recvmsg$kcm(r5, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/243, 0xfffffed7}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4e}}, &(0x7f0000000000)='GPL\x00'}, 0x90) 4.304432225s ago: executing program 1 (id=1527): socket$kcm(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x38) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0xd03f030000000000) 4.18410998s ago: executing program 1 (id=1528): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x6, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70003000140e2ffca1b1f00f0000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.events.local\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='percpu_alloc_percpu\x00', r5}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000300000061111c000000004600180000000000000000c53fe724dbc8a2492bd200"], &(0x7f0000000000)='GPL\x00'}, 0x80) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000300)={r0}) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000340), 0x4) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="abed61baa755a83c00"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r7}, 0x38) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20165, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x18690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x7, @perf_config_ext, 0x0, 0x10000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.166308303s ago: executing program 3 (id=1529): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 4.156576824s ago: executing program 2 (id=1530): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x64, &(0x7f00000009c0), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000006a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 5) 3.931141743s ago: executing program 3 (id=1532): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000001f80)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, 0x0, 0x2000fdef) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001080)=@o_path={&(0x7f0000001040)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000016c0)=@bpf_ext={0x1c, 0xb, &(0x7f0000000e80)=@raw=[@exit, @jmp={0x5, 0x1, 0x3, 0x3, 0x0, 0xc, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000300)='GPL\x00', 0x3, 0xbf, &(0x7f0000000f00)=""/191, 0x41100, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001000)={0x1, 0x10, 0x3, 0x23}, 0x10, 0x237ac, r1, 0x2, &(0x7f00000010c0)=[r6, r7], &(0x7f0000001680)=[{0x0, 0x2}, {0x2, 0x5, 0x3, 0x6}], 0x10, 0x9}, 0x94) 3.930895293s ago: executing program 0 (id=1533): openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$sock(r1, &(0x7f00000008c0)={&(0x7f00000002c0)=@l2={0x1f, 0xb, @none, 0xa75f, 0x2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)="9c1d60322fb5a761196c8435190c2707c10e4ebb19666502ebca82d9359cf2bf4ba5f56e6b6e5289d4ad94bf37f410f618843c146c446a8cfe41a9f1e6e141ee2850829249cf669dbc208a94b803493551c5853db803a196b6a9091c34da2ea1bb7acdfaf3fef82dcabbb1636e562e28042ee14fc84534175b5d0654e9e2dd58ca73c22ae8b19f7df035adb5f21e32bb7d6b83b7cb38ce00d832e34da57509438304aa00d707ffabc05fbb0a9ed4ae730004c73d092f3e54e31cf894bbd53898f9cb241ec34bd98d60d03eb3c30fc828f899542ef01a02d619d7af0e533ef773fe8585ac48ed24cbbb8f04df9653291cb1b2", 0xf2}, {&(0x7f0000000440)}, {&(0x7f0000000480)="0b704f03c5dfb31a3e6d4047660b8c75b9cfef86870b29", 0x17}, {&(0x7f00000006c0)="47de0931eeced6a9f77d37083edb53bab796a0bffae77f99434614843006ad3b4f5d4461b24f9c20e90601f56a6efc37505f52f39717421f8c25d7742650d548dbd06aff02d69eac272bd2569b52c27d1cff4b8b08cdb22865b072aeaa53e56f82713091e5cf418c46129b691a6a3c277a5b55ce175e665808b7776b7566743b7bae9f305ebffbff429ca37c2cd4c614645a2dde065eee553a3b1a2ab749", 0x9e}, {&(0x7f0000000580)="39f388dc7cf93f489ef109f28c087091f310043a10a8d846c0b870dbcecb57ccf25f187c965c13ae7af68278d029ac15ee7edceb6bb9eefb4c71f0e8f42c9fd2aa45878f37fadbf6bbe7d7c07580e558a26deffcd835a54ae7e9715ade7a25e5", 0x60}, {&(0x7f0000000780)="06f5b8be5e37e9d724233a276ac20c71983c9c03ee22c797b20e6aab1a32daa44098221f76521680f58676fc3b9951934aaa66c1ed4b269e833426d3e24e6b753bb7498029c2a58f67c26d357a0b8512611b4323e24038fa5d5d6010393666b08ef39734029b4d656ef5f8dbdeede0821ab97cd64c7d07ac6033", 0x7a}], 0x6, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x24, 0xc6f}}], 0x18}, 0x4) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg$sock(r2, &(0x7f00000001c0)={&(0x7f00000002c0)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, 0x0}, 0x4000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000428c18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x74) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='svcrdma_small_wrch_err\x00', r1, 0x0, 0x4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.863832121s ago: executing program 2 (id=1534): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x40000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r6, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000001340)="c0dd898765587ec2b574e3397d6459", 0x0, 0x10002, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.854556763s ago: executing program 1 (id=1535): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) socketpair(0xb, 0x1, 0x7f, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047438, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='task_rename\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014300000000009500000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.735489238s ago: executing program 0 (id=1536): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfe, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) 3.430100117s ago: executing program 4 (id=1537): r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100), 0x120) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000054) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, 0x0, 0x0) 3.123357957s ago: executing program 0 (id=1538): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000040)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={r1, 0xfffffff8}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e00000800", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.045496407s ago: executing program 0 (id=1539): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x62, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) 640.144208ms ago: executing program 0 (id=1540): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) 606.433452ms ago: executing program 1 (id=1541): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffcf0) r1 = socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x3, 0x7ffc, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3, 0x5, 0x6, 0x3, 0x0, 0x4, 0x2000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8ad, 0x7f}, 0x208, 0x400, 0x7, 0x2, 0x2, 0x4, 0xfff, 0x0, 0x9, 0x0, 0x2}, r2, 0x6, r0, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000080016000a000199c508894003000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701001c0040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d5", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@nfc={0x27, 0x0, 0x0, 0x3}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000980)="5cbdf6c1acf41d000e6896b6cee6bd2a42bd58ffad29034c0a275e5d19412b688cdbca303557f5eb374ab17af3232ba4be9a7a76c2bfb02497603c2bb13f37017782c15f46e97216b8fa97d0f732d92bcf3eb46aea03653decc3c1b86743c3881595c5ae828919ef11e0a712a6160f0018c9a60ba2d375b8a9aca70db1761fe39ed1e3bcba8924482870e1fae28003f3f080ce4dc4960f26aa42b90033d4c007da73972583714bde0ff2d200ec3cb40dd367f332fe6b4ad1cfa0f326ae53ca00a78e091d762f1f52f8502a54eb6ba31f8eff48c78ab15cf640558a62df01b0952130a4d93257ad6797704d343ddb0de13ce46af8a6d659b7c23fb2a9f470e9647c76fe9b25aaea286e839afb362067c5ece7b4f9ef758ed145052bf5cb88a6c61d51c8f6c057ed75ab13137ef44e9a4da75874e42b4be197d170bfca00bd2892abcf4439aa91021ca3464f6c9766040ff2709ce3bd100527163553454bf412b1497727aed81c0edeeea924748a0d308b939ac6953685f5ead52d82dab565e47cd7964d68a62ca42d47e788b22f98e1872658df8ab31dee1a0de9ac1a85118c434fce88695494982bdc02ec623ff750f0447875586903f1488214d5cffa28c20adc96414d48cebddd6ab77e1e014302e12dd36a1061b62847658fee51139e05a7c0d8177448c62aeb2146359827bf72ad9de8dc546925158a0b99a5bee0499133dc7fd89a37f482a6a1f7f83f226d74b4dbef956b06b2278ed2ff3621ca7940a827375fe112e28f119776f86c20ae83d6e7f8ccabd260b01418df87ba7e7fce1565f4c8f8d6d7daf16b9c45eec3948101900be7b13586464d6605d817f3576261cce83149d7db10138fadeb222c081f546fa177d5d8db6818064d073db6b675bc675ecbfbed2c702c3586a876fde00aa217520c0f2757503b8e83133af1679a5809e7b826732533a615a4b9a44d5f3c5b810338736cbad284ef9eba54a6037f66850926f7e182f3022929267ce50a29dbd483a1e320be86668912c42f952127a1b3118f259985fe51b84689d1d21691f6288f25dc0a57ecd42edb46696ce7c64c21340d60c6b503247dde9992fb9456649bd0b1d60681c55247941ea792ec6d1b43e50d0b9a26041fdffd53228d6d99cea86fffe9926fd8d06722d8d76dd044a5068cd1fe0380c747846513c4968b610bfad0ec6ecf308e9d301e45395facf9fe788fa70c5b20aeb5d001000e385b1d4e4980e220be66ad5619baa3b7aad3cf3da63798372cc551142b1acbfc8c50031d14db42f647cfc3429cf551a9342573b5725b8cb7a12973f482def0aaa1f6768dc8a6cb7536794d4adc68ea05985f1185d3a8b210907a99c12e13124461d68f13004c9f5c7dd76dc830ab04dbe2ca86017121eb4810c4ecce4e12c5f4c877a84df9939b434388a00c3a64610fe35e59e0c4b1f97970a382c8d61a3e8660bdd80bc4968c7664b7fe863853ae94bbbe9e32fbdc1dfaa4c35e300ac6b31feb95ce9beeadf56ec2c26d69aece4e66c093155aa6bfe447afbd5bfa169cba0096e07de18de3e13b24180bd3e12a24f30d28bf3e8ad26b236252d73095295e68a7d361d4ee0efaaebe83af81b40722cb8778044485a862f4034e7845cc1126c3662ea9b73673e26b98dcd969f3b2d5497c5b656811dcd419ce22c02fdee1e4143db62703c1590dc23de877dafa5af5e40204584276faefa251468cdcf8c78a160db8b480274b7d8becf893a00e3651c9fad792f671cc478d89ed04a24fd92102bcec6c9e547e31139f61007a51614db65b63cfb135b1b90f69762eb5b0f408ae6e1fbadbe4fc24663442287166916ee489e0235e14eb8e6ef958ba27b05fcf939ee49973b69cc03eb92b2ae842cef64840123681ac7ed38ff4c01325b038a0207d51893ee9cb9bef9e9b9189d65d0627e85d2c9f159a43a7f1273d88b27bbc2087648c5a0e3ca971a528a51ec5b3d1f15414efa4bafb1a94d4c2a28e7e0829af382146acb48592f464db1edf67a5e99493aad3af430771e5eb5f245ecf06776bd5dd665f39fe4ba34a5dbff14e241b43c136b4a092696568e2ec9d48dbfb692d3f1f52a2c3581bae09ff9da6969c7f35e9ddf65bb7bf83a9503d0dbebad932dd19fef5a7d1b4c28f5c4d30a098a08255282fa2defae035d33c12558359420cefadd2f098570027ef88b6c10b1d9bf9a10e7fa58d84960db4e1cd04578579d5d0ba19f324aab4480b456620ead3b43ab25e25e50a94a1e4d103a5f979fa07c3bebfe85f301548c2161794cc4e8a1247837fd7324eefe3450c92216468a414e366e5c068f135a211a75fefae76dc601078de269687372c364e350458afe479d3bc8722afde52b06adc56422c515dcd6eea424e7bec6c98cc41b2bfd6347c22a57f74118b6092244395fef6330588f3f98593941cf032a421adf6218d541aac8cc216220ba2ae8d1723ec926d524ffec6f0a64364d84a254c1efc814469b7bd5fe56392942cce9a2a1b862aa600718f23af387e660784a5ce90b11c7d0e827cb4c00c4f33633707a273bbb4ed4fde4e260ff30615669347a379361592b9d2a8b1065ac2ffccd90121f9ad746d128dd642cfa84d0f65f0f241d1f949096fc3f5b6f79ecac33989c6b4833204204bda47be1f228f9a95e2ce582b8d464a7d4292c0b5a339b2164b1449794fbb92cbf912f86d47081e7dddc4100aff19175ed6abf4ae5c77994d24f86af07960ec9b7edac113cfbda45c5d25405e9d6a68dd89fdeeec3ccc8c65b708876bdd4449ac91834a8edca1b1a1fbd5cb35bd3c7fe581451381e920ef2a2cdb16c7d59b3f5308eb9ee0d706c6c69ec921ece68e20ec5b79adff11ecf0185ddd1ab1fa1b61ac0fa151f38f3642d7343f80157aaa887607e8fbf88c9fdea005d04918ed710ecb329ebf75f7c0f0c6cc9c70855f59fcc84a477c652f45a8d8bfaff5ad78d4bb295551dd9be4501db78b5cab7236bb3228ecc0b45cce9df5e019b3819d1f29eaa110464bde2640a8bd1abe99f1968787798de7366cf21328f2950abee0e14e5168193b34ce3548c736ad58c92b4753121845cfe3b3863a2dc93125cf55702004ea12105e52d442822eee09c96d9573d9e7a3419981fc2feeb9a51f3b58f36ab8f2efd1816dc36f1a7c48fc141a8c42acedc075e9304e4593e6430c7d2a246bb35b4691bdf1a780a8275663294bcb2e4a24ccdba8250387e4187708a5782f13e07eb9ca64f04d8dd85db12a1fcd70d04fdecfb421c6051b97d5fc78d57f0caeb0116a016d8e8da8901044277d3f3a7bc62978bf60d69802639f53e4c05c17ccac4cc6103822a9931df3fe0ccdf12ebc3d73e6b537402e787dec51b677319cddbca4b8106fecda34a47a85e84333ba9c376c1dc406572e5aa4e0c5bd3255a583d766c8b4f62972077abc393983f5f573082410cb428e913415a038cf51779fb566a0ee889f8b0095a01dbb73f6c99e7990c7dfc908fc1c987c0bf4a38dfb71b5bfb32f6161bb1197c4d087fd4ac99f3ee7fa84af8724a675856591927663d51f0da6ffb8e331386dc270ab53177d443bca89073a3f1a6940cdcc1fc153a3abb8c9c8fe8eef77e3a7e3413eb76742e297f06a7ba8b6a0bcdaf290653995fc11ba7ce1611a43fe68b6bd93abc8ad93bb8b9431577d8257af7cd3bdec5aee53da7acfce1516a038dd5fc9016874d0a7eb38b907c574104a0f9aac7ad019bdc70c90694c1438a9c7777150b12cd1ccf2dc2553c38cb308fc8cb9d5a94acf0031a4c8676a0bdd3afd171f20717d354391aea24c22ae451a266f1ae0396b2fe6fcc9b09c5e76ee6626deafeba1fce4418832d2dd5361a2e46d28f576b9d03d1115f2881ba00e2aa82e3dc55697ca8e952383f92f4c9b66ce53ce3a8a5adb46dd2b17f0a60036b87ebc6c6eac33be5bbdbdb7e8385376e36c696b6637f4957aa9889d4826dc9a658c145ceb6ebcd5e82ee916849f6c0a980feca6d16189607a0f5bac9b89e03cfc16790fd7573b8d7953223fbea73c574b4a9143fb9d01a028f3d2fe6fe7dac2146f29d757a32a2015a6ba81259e9baabd3ca3bfc177400a0eecffbbcbb673d129645dd7e7f75da4efe62e985c6e380135ffaee20e464d290151d8a08c37bdc4fa4195a51cca19d1c70e3aad6af1df296cb4d2007abe73553e915a5e5bee1333e668c3b98c0ddf45392015b907248313ad2f959f5b9b3d577316de65ef769563d08fbfa2cc70fca21470cbb22af539651481d689e2a51b54fce33ba75b60f7009290405b48f6c4935e3bd39f2015b7cc78470ff1810ee4030fd25c731d8826db156e6cff0c83f2678c4348022e1005a6a262a9acd9f7635f63e4a09fd538cece6b5321836aa2e886ab43ae9994960e90c321bdef953ce9cd03dd29424d65a7f53a7c82ff056b4855b7a6370dc8f9ee14022ed96aa523c3eb74b951724bee9d299a341f4ba303b6f87151cf97ac36321b87ca2138c9785c963aecf8e8143ed05244336765a0a2f115d7940d6435bd8e3b4751f11279d9b674bf1be9b57c3906f6caa49131ca7c27e726e57c931762b3884330775d6607ddf802002da5225438bbbd74a606ef0dc70f2365f204b9b203496ccd1c797776bacba2461494199500169f1298f6a9532250978d92ddf47d0e3d1ab8ff5a3b8162f3795a04843c7e8ba6329f25bfdd230ac94597052f5171eac9c083966276c6543078a236d11dce1e2f4ed19f6e0270c1f1f586689ace22d4349cbf225b0ec47d2f64d75b9f4095ccc70f808e2b9bc9fb448bc195127aa0db8a62a4e8e836f901c3fe3f448034a59353a1168bc4d861f9ac1a5ecfd611b8f8353986dbf1ac2c643008cdfe6b218c722f3101daf88f0405d6ea5d2bb68f51961b9cd6776202a1421908a9937c4b0f80a2ab702948b6a3facc1a7a9d0f5317e4c4336d6352a90a8635d426a0484a8a34ddeca1075e55c3accddf31988a145a556ebb6c57b54c3c37c960fc067f3c7777fd8b02733843914782daddf37f86f9bf6ccb721313b41ca961e1f2ecedcb07b1f5a5de718c681ac79b148f130ca8c09239d5c83e815a1b7a7edf23fdf4a5e6d4bb59802563d2726869a0445460c6563333b1255a82141dc5bdd4302ec3fac62366c4dc1a6a52d258dc6a38777bb5f861450e1e71103980cc0a17e734b29ba17cf1f8cea4f46c29618d0746417290394c35b64ac264bc3cc15c90bafda50fdf8664895a0a469395b30f74b76792012f1c3551eef0703579d208b4149f781b3747d0971fd67cce4bf6fac040b75c753a2482d185dace6c798e6f856cece9fdf1417ef952b807565f03f886a4bd4c7e7da6bca80ed9d1d7b15ae6b9d719adc9e4ad9aa222d1f7583d520e5e6d603b3dcab2be4f7c14ec12f905079dc3936fb98df089115ca3dd8fdb04cf465e86034f7f8ff4251c3cd8934613c99b42353660e17b4fae7cce2d8f222a9de3d128b6a7a830408875f99dd98d3d0bafb5d86ef6c76dd3454a1b03d6376d5c4b660d224109033e1ec43756ecb4c5d2376fbdb3f9409e94e434de4f33444911a21d168523856a3d748f311abac159d9303d185f40ae699b0756b8c5d57d2db6e3f855ccc8e3142224abb6180a10c418e7cf56a728cef72cb5df1a8c3930bd5dca49261919f6c1a9747f080d76d00ef43904c0eb02098ec5985d49b32f6526a8cd5542fda1f5267b05d4436533ba900bc58410ded9f0acd8bd820669d6dc874444e48da9fe5fff49711985d4989a575bb7f2eaac4bbd6d5e2f78c4cb8f0cc5", 0x1000}, {&(0x7f0000000300)="d3e6879e5123f674af4de81610d9f5e7a6d08e845d7c962d7b919b4013f2fb34cc4990b64f37bb05321b6ac6ec8b99ea51642e1fa6bb42fbae3c2e", 0x3b}, {&(0x7f0000000340)="e8a2355f67b5343945595dd0207f984f4f3754d92af2fea8", 0x18}, {&(0x7f0000000380)="9f70b34fda614b7b65738c7a735d22b6386aadc22835a011bc6cf840c4bd99f2048c222afa1d849edeb674e21ac161d8cce29a3a02e712bc4f93eb49d9ff3f1508eb63ec2f515e4a0c9f8a13064a27ef", 0x50}], 0x4}, 0x24000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80d1) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 606.145322ms ago: executing program 4 (id=1542): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00007013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800050007000c00050004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 576.758695ms ago: executing program 2 (id=1543): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 504.627745ms ago: executing program 3 (id=1544): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d80}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000001, 0x72081, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x102000, 0x1, 0x9, 0x9, 0x3, 0x8, 0x9, 0x0, 0x5f, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="bf4b3e9e3a9e9a758f8ea2a244a7", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 267.033246ms ago: executing program 0 (id=1545): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x6, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70003000140e2ffca1b1f00f0000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.events.local\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='percpu_alloc_percpu\x00', r5}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000300000061111c000000004600180000000000000000c53fe724dbc8a2492bd200"], &(0x7f0000000000)='GPL\x00'}, 0x80) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000300)={r0}) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000340), 0x4) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="abed61baa755a83c00"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r7}, 0x38) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20165, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x18690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x7, @perf_config_ext, 0x0, 0x10000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 235.684459ms ago: executing program 2 (id=1546): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000200)={'veth1_vlan\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3b, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='afs_cb_break\x00', r2, 0x0, 0x80}, 0x18) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x891c, &(0x7f0000000040)={'geneve1\x00', @random="02001800"}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="0000000000000000001000000018110000", @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r4, &(0x7f0000000a80), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000007910000000000000c3000000400000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 124.559454ms ago: executing program 4 (id=1547): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000001340)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a", 0xa}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x22, &(0x7f0000000280), 0x4) recvmsg$kcm(r5, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/243, 0xfffffed7}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4e}}, &(0x7f0000000000)='GPL\x00'}, 0x90) 124.309204ms ago: executing program 3 (id=1548): r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91a24fc602f020f000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES32], 0x68}, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000fc0)="1400e6c885a659c000001c000b63d24a80648c25", 0x1}], 0x1}, 0x4008080) 0s ago: executing program 2 (id=1549): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x80000001, 0x0, 0x0, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000004000000000000000200000d0000000005000000000000000000000000000000020000000100000f03000000010000000200000002000000a77818000005000000000f01000000c900002e"], &(0x7f00000000c0)=""/181, 0x60, 0xb5, 0x1}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8008) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000008000008500000083000000bf0900000000000055090100000000009500110000d207b2aed1c0bb899eed549e2c25a837ca681c08c8523146fc1b0a39bfad500a16b57b95a66b63c56cef34a8b1a2fbcb52ca12cadbc337125d2bc8632700000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000008500000023000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r6, &(0x7f0000000440)=ANY=[], 0xffbf) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002600000010000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1000001e0a000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033d407277bac878b4ab50a", @ANYRES32, @ANYRES8=r7], 0xfe33) kernel console output (not intermixed with test programs): a6/0x120 [ 136.006550][ T5335] __sys_bpf+0x466/0x780 [ 136.010942][ T5335] ? bpf_link_show_fdinfo+0x380/0x380 [ 136.016354][ T5335] ? lock_chain_count+0x20/0x20 [ 136.021249][ T5335] __x64_sys_bpf+0x78/0x90 [ 136.025694][ T5335] do_syscall_64+0x4c/0xa0 [ 136.030237][ T5335] ? clear_bhb_loop+0x60/0xb0 [ 136.034945][ T5335] ? clear_bhb_loop+0x60/0xb0 [ 136.039652][ T5335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.045578][ T5335] RIP: 0033:0x7f5c25b9acb9 [ 136.050016][ T5335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.069689][ T5335] RSP: 002b:00007f5c269aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.078129][ T5335] RAX: ffffffffffffffda RBX: 00007f5c25e15fa0 RCX: 00007f5c25b9acb9 [ 136.086127][ T5335] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000004 [ 136.094130][ T5335] RBP: 00007f5c269aa090 R08: 0000000000000000 R09: 0000000000000000 [ 136.102143][ T5335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.110142][ T5335] R13: 00007f5c25e16038 R14: 00007f5c25e15fa0 R15: 00007fffb7f723f8 [ 136.118153][ T5335] [ 136.571224][ T5355] netlink: 'syz.3.320': attribute type 10 has an invalid length. [ 136.678425][ T5355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.702814][ T5355] team0: Port device bond0 added [ 137.682308][ T5391] netlink: 'syz.2.333': attribute type 1 has an invalid length. [ 137.700306][ T5391] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.333'. [ 137.821552][ T5398] netlink: 60 bytes leftover after parsing attributes in process `syz.0.335'. [ 137.838304][ T5398] netlink: 60 bytes leftover after parsing attributes in process `syz.0.335'. [ 137.865470][ T5398] netlink: 60 bytes leftover after parsing attributes in process `syz.0.335'. [ 138.221758][ T5406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.340'. [ 138.263585][ T5406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.340'. [ 139.293138][ T5437] netlink: 'syz.1.353': attribute type 1 has an invalid length. [ 139.347390][ T5437] netlink: 'syz.1.353': attribute type 3 has an invalid length. [ 140.262691][ T5471] GPL: port 1(macsec0) entered blocking state [ 140.273713][ T5471] GPL: port 1(macsec0) entered disabled state [ 140.283853][ T5471] device macsec0 entered promiscuous mode [ 140.298619][ T5475] __nla_validate_parse: 3 callbacks suppressed [ 140.298635][ T5475] netlink: 132 bytes leftover after parsing attributes in process `syz.1.368'. [ 140.417313][ T5480] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.370'. [ 140.706871][ T5495] netlink: 'syz.1.373': attribute type 1 has an invalid length. [ 140.735773][ T5495] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.373'. [ 140.991044][ T5506] netlink: 60 bytes leftover after parsing attributes in process `syz.3.377'. [ 141.030921][ T5506] netlink: 60 bytes leftover after parsing attributes in process `syz.3.377'. [ 141.096249][ T5509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.377'. [ 141.112949][ T5506] netlink: 60 bytes leftover after parsing attributes in process `syz.3.377'. [ 141.487567][ T5520] netlink: 56 bytes leftover after parsing attributes in process `syz.3.382'. [ 141.574240][ T5526] Illegal XDP return value 4294967294 on prog (id 350) dev N/A, expect packet loss! [ 141.717171][ T5532] delete_channel: no stack [ 141.752864][ T5532] delete_channel: no stack [ 141.802907][ T5530] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.385'. [ 143.380768][ T5557] FAULT_INJECTION: forcing a failure. [ 143.380768][ T5557] name failslab, interval 1, probability 0, space 0, times 0 [ 143.474651][ T5557] CPU: 1 PID: 5557 Comm: syz.4.393 Not tainted syzkaller #0 [ 143.482020][ T5557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.492207][ T5557] Call Trace: [ 143.495526][ T5557] [ 143.498493][ T5557] dump_stack_lvl+0x188/0x24e [ 143.503238][ T5557] ? show_regs_print_info+0x12/0x12 [ 143.508499][ T5557] ? load_image+0x400/0x400 [ 143.513075][ T5557] should_fail_ex+0x399/0x4d0 [ 143.517832][ T5557] should_failslab+0x5/0x20 [ 143.522387][ T5557] slab_pre_alloc_hook+0x59/0x310 [ 143.527458][ T5557] ? unwind_get_return_address+0x49/0x80 [ 143.533155][ T5557] kmem_cache_alloc+0x56/0x2f0 [ 143.537979][ T5557] ? skb_clone+0x1e7/0x370 [ 143.542472][ T5557] skb_clone+0x1e7/0x370 [ 143.546816][ T5557] bpf_clone_redirect+0xa9/0x3c0 [ 143.551803][ T5557] ? lock_chain_count+0x20/0x20 [ 143.556729][ T5557] bpf_prog_6893982b85ceadf7+0x56/0x5b [ 143.562237][ T5557] ? __kprobes_text_end+0xb2000/0xb2000 [ 143.567840][ T5557] ? lockdep_hardirqs_on+0x94/0x140 [ 143.573086][ T5557] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 143.579352][ T5557] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 143.585647][ T5557] ? seqcount_lockdep_reader_access+0x196/0x1d0 [ 143.591951][ T5557] ? ktime_get_real_ts64+0x440/0x440 [ 143.597313][ T5557] ? read_lock_is_recursive+0x10/0x10 [ 143.602893][ T5557] ? __cant_sleep+0x220/0x220 [ 143.607631][ T5557] ? ktime_get+0x247/0x270 [ 143.612107][ T5557] bpf_test_run+0x2b6/0x830 [ 143.616707][ T5557] ? convert___skb_to_skb+0x580/0x580 [ 143.622153][ T5557] ? eth_get_headlen+0x200/0x200 [ 143.627142][ T5557] ? __build_skb+0x257/0x3c0 [ 143.631783][ T5557] ? convert___skb_to_skb+0x3d/0x580 [ 143.637119][ T5557] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 143.642554][ T5557] ? cpu_online+0xa0/0xa0 [ 143.646933][ T5557] bpf_prog_test_run+0x31e/0x390 [ 143.651924][ T5557] __sys_bpf+0x62b/0x780 [ 143.656237][ T5557] ? bpf_link_show_fdinfo+0x380/0x380 [ 143.661673][ T5557] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 143.667889][ T5557] __x64_sys_bpf+0x78/0x90 [ 143.672348][ T5557] do_syscall_64+0x4c/0xa0 [ 143.676820][ T5557] ? clear_bhb_loop+0x60/0xb0 [ 143.681549][ T5557] ? clear_bhb_loop+0x60/0xb0 [ 143.686292][ T5557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.692240][ T5557] RIP: 0033:0x7f5c25b9acb9 [ 143.696696][ T5557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.716350][ T5557] RSP: 002b:00007f5c26989028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.724823][ T5557] RAX: ffffffffffffffda RBX: 00007f5c25e16090 RCX: 00007f5c25b9acb9 [ 143.732839][ T5557] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 143.740853][ T5557] RBP: 00007f5c26989090 R08: 0000000000000000 R09: 0000000000000000 [ 143.748883][ T5557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.756906][ T5557] R13: 00007f5c25e16128 R14: 00007f5c25e16090 R15: 00007fffb7f723f8 [ 143.764946][ T5557] [ 145.603566][ T5586] netlink: 'syz.0.403': attribute type 10 has an invalid length. [ 145.715867][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.746067][ T5594] netlink: 184 bytes leftover after parsing attributes in process `syz.2.405'. [ 145.777025][ T5586] bond0: (slave team0): Enslaving as an active interface with an up link [ 146.262980][ T5614] FAULT_INJECTION: forcing a failure. [ 146.262980][ T5614] name failslab, interval 1, probability 0, space 0, times 0 [ 146.290992][ T5614] CPU: 1 PID: 5614 Comm: syz.3.414 Not tainted syzkaller #0 [ 146.298441][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.308550][ T5614] Call Trace: [ 146.311893][ T5614] [ 146.314862][ T5614] dump_stack_lvl+0x188/0x24e [ 146.319612][ T5614] ? show_regs_print_info+0x12/0x12 [ 146.324858][ T5614] ? load_image+0x400/0x400 [ 146.329408][ T5614] ? __might_sleep+0xd0/0xd0 [ 146.334040][ T5614] ? __lock_acquire+0x7d10/0x7d10 [ 146.339092][ T5614] ? trace_event_raw_event_lock+0x250/0x250 [ 146.345025][ T5614] should_fail_ex+0x399/0x4d0 [ 146.349754][ T5614] should_failslab+0x5/0x20 [ 146.354288][ T5614] slab_pre_alloc_hook+0x59/0x310 [ 146.359360][ T5614] ? sk_prot_alloc+0xe7/0x210 [ 146.364068][ T5614] __kmem_cache_alloc_node+0x4f/0x260 [ 146.369463][ T5614] ? sk_prot_alloc+0xe7/0x210 [ 146.374173][ T5614] __kmalloc+0xa0/0x240 [ 146.378361][ T5614] sk_prot_alloc+0xe7/0x210 [ 146.382903][ T5614] ? sk_alloc+0x20/0x340 [ 146.387190][ T5614] sk_alloc+0x36/0x340 [ 146.391308][ T5614] ? bpf_ctx_init+0x163/0x1a0 [ 146.396012][ T5614] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 146.401592][ T5614] bpf_prog_test_run_skb+0x35e/0x12a0 [ 146.406993][ T5614] ? __fget_files+0x28/0x4b0 [ 146.411607][ T5614] ? __fget_files+0x43d/0x4b0 [ 146.416317][ T5614] ? cpu_online+0xa0/0xa0 [ 146.420678][ T5614] bpf_prog_test_run+0x31e/0x390 [ 146.425654][ T5614] __sys_bpf+0x62b/0x780 [ 146.429929][ T5614] ? bpf_link_show_fdinfo+0x380/0x380 [ 146.435336][ T5614] ? lock_chain_count+0x20/0x20 [ 146.440222][ T5614] __x64_sys_bpf+0x78/0x90 [ 146.444677][ T5614] do_syscall_64+0x4c/0xa0 [ 146.449125][ T5614] ? clear_bhb_loop+0x60/0xb0 [ 146.453841][ T5614] ? clear_bhb_loop+0x60/0xb0 [ 146.458547][ T5614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.464464][ T5614] RIP: 0033:0x7f399fb9acb9 [ 146.468904][ T5614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.488530][ T5614] RSP: 002b:00007f39a0a19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.496961][ T5614] RAX: ffffffffffffffda RBX: 00007f399fe15fa0 RCX: 00007f399fb9acb9 [ 146.504947][ T5614] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a [ 146.512940][ T5614] RBP: 00007f39a0a19090 R08: 0000000000000000 R09: 0000000000000000 [ 146.520929][ T5614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.529001][ T5614] R13: 00007f399fe16038 R14: 00007f399fe15fa0 R15: 00007ffe99e451a8 [ 146.537006][ T5614] [ 146.733798][ T5624] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.418'. [ 146.826852][ T5624] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.418'. [ 146.902353][ T5626] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.418'. [ 146.914650][ T5631] netlink: 'syz.3.416': attribute type 7 has an invalid length. [ 146.930907][ T5627] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.418'. [ 147.179501][ T5642] FAULT_INJECTION: forcing a failure. [ 147.179501][ T5642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.210851][ T5642] CPU: 1 PID: 5642 Comm: syz.2.422 Not tainted syzkaller #0 [ 147.218227][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.228332][ T5642] Call Trace: [ 147.231649][ T5642] [ 147.234616][ T5642] dump_stack_lvl+0x188/0x24e [ 147.239357][ T5642] ? show_regs_print_info+0x12/0x12 [ 147.244617][ T5642] ? load_image+0x400/0x400 [ 147.249174][ T5642] ? __might_fault+0xa6/0x120 [ 147.253898][ T5642] should_fail_ex+0x399/0x4d0 [ 147.258624][ T5642] copyin+0x1b/0x120 [ 147.262560][ T5642] _copy_from_iter+0x447/0x1130 [ 147.267453][ T5642] ? copyout_mc+0x110/0x110 [ 147.271990][ T5642] ? __virt_addr_valid+0x188/0x540 [ 147.277238][ T5642] ? __virt_addr_valid+0x188/0x540 [ 147.282377][ T5642] ? __virt_addr_valid+0x465/0x540 [ 147.287519][ T5642] ? __check_object_size+0x500/0xa40 [ 147.292832][ T5642] netlink_sendmsg+0x755/0xbd0 [ 147.297636][ T5642] ? netlink_getsockopt+0x550/0x550 [ 147.302858][ T5642] ? aa_sock_msg_perm+0x94/0x150 [ 147.307818][ T5642] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 147.313219][ T5642] ? security_socket_sendmsg+0x7c/0xa0 [ 147.318706][ T5642] ? netlink_getsockopt+0x550/0x550 [ 147.323936][ T5642] ____sys_sendmsg+0x5be/0x970 [ 147.328733][ T5642] ? __sys_sendmsg_sock+0x30/0x30 [ 147.333790][ T5642] ? __import_iovec+0x315/0x500 [ 147.338669][ T5642] ? import_iovec+0x6f/0xa0 [ 147.343211][ T5642] ___sys_sendmsg+0x2a2/0x360 [ 147.347917][ T5642] ? __sys_sendmsg+0x290/0x290 [ 147.352732][ T5642] ? __lock_acquire+0x7d10/0x7d10 [ 147.357810][ T5642] __se_sys_sendmsg+0x1bb/0x2a0 [ 147.362694][ T5642] ? __x64_sys_sendmsg+0x80/0x80 [ 147.367665][ T5642] ? lockdep_hardirqs_on+0x94/0x140 [ 147.372890][ T5642] do_syscall_64+0x4c/0xa0 [ 147.377337][ T5642] ? clear_bhb_loop+0x60/0xb0 [ 147.382056][ T5642] ? clear_bhb_loop+0x60/0xb0 [ 147.386764][ T5642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.392778][ T5642] RIP: 0033:0x7f0072b9acb9 [ 147.397272][ T5642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.416898][ T5642] RSP: 002b:00007f0073ad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.425369][ T5642] RAX: ffffffffffffffda RBX: 00007f0072e15fa0 RCX: 00007f0072b9acb9 [ 147.433365][ T5642] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 147.441394][ T5642] RBP: 00007f0073ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 147.449385][ T5642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.457378][ T5642] R13: 00007f0072e16038 R14: 00007f0072e15fa0 R15: 00007ffee2a6b318 [ 147.465388][ T5642] [ 147.734008][ T5646] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 147.772412][ T5646] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.424'. [ 148.341740][ T5659] netlink: 'syz.1.427': attribute type 10 has an invalid length. [ 150.560064][ T5710] FAULT_INJECTION: forcing a failure. [ 150.560064][ T5710] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 150.575308][ T5710] CPU: 0 PID: 5710 Comm: syz.0.448 Not tainted syzkaller #0 [ 150.582685][ T5710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.592827][ T5710] Call Trace: [ 150.596158][ T5710] [ 150.599134][ T5710] dump_stack_lvl+0x188/0x24e [ 150.603886][ T5710] ? show_regs_print_info+0x12/0x12 [ 150.609177][ T5710] ? load_image+0x400/0x400 [ 150.613718][ T5710] ? __lock_acquire+0x7d10/0x7d10 [ 150.618778][ T5710] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 150.624779][ T5710] should_fail_ex+0x399/0x4d0 [ 150.629501][ T5710] prepare_alloc_pages+0x1e2/0x5f0 [ 150.634663][ T5710] __alloc_pages+0x130/0x4f0 [ 150.639300][ T5710] ? zone_statistics+0x170/0x170 [ 150.644287][ T5710] ? xdp_convert_md_to_buff+0x5b/0x330 [ 150.649811][ T5710] bpf_prog_test_run_xdp+0xaf7/0xf10 [ 150.655167][ T5710] ? dev_put+0x80/0x80 [ 150.659304][ T5710] ? dev_put+0x80/0x80 [ 150.663419][ T5710] bpf_prog_test_run+0x31e/0x390 [ 150.668396][ T5710] __sys_bpf+0x62b/0x780 [ 150.672660][ T5710] ? bpf_link_show_fdinfo+0x380/0x380 [ 150.678082][ T5710] ? lock_chain_count+0x20/0x20 [ 150.682993][ T5710] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 150.689000][ T5710] __x64_sys_bpf+0x78/0x90 [ 150.693450][ T5710] do_syscall_64+0x4c/0xa0 [ 150.697920][ T5710] ? clear_bhb_loop+0x60/0xb0 [ 150.702646][ T5710] ? clear_bhb_loop+0x60/0xb0 [ 150.707389][ T5710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.713333][ T5710] RIP: 0033:0x7f2587b9acb9 [ 150.717800][ T5710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.737453][ T5710] RSP: 002b:00007f2588ad9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.745898][ T5710] RAX: ffffffffffffffda RBX: 00007f2587e15fa0 RCX: 00007f2587b9acb9 [ 150.753915][ T5710] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 150.761930][ T5710] RBP: 00007f2588ad9090 R08: 0000000000000000 R09: 0000000000000000 [ 150.769960][ T5710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.777953][ T5710] R13: 00007f2587e16038 R14: 00007f2587e15fa0 R15: 00007ffcb5f9aa78 [ 150.785969][ T5710] [ 151.851402][ T5685] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0 [ 152.171393][ T5728] FAULT_INJECTION: forcing a failure. [ 152.171393][ T5728] name failslab, interval 1, probability 0, space 0, times 0 [ 152.267686][ T5728] CPU: 0 PID: 5728 Comm: syz.4.451 Not tainted syzkaller #0 [ 152.275075][ T5728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.285267][ T5728] Call Trace: [ 152.288583][ T5728] [ 152.291556][ T5728] dump_stack_lvl+0x188/0x24e [ 152.296278][ T5728] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 152.302480][ T5728] ? show_regs_print_info+0x12/0x12 [ 152.307730][ T5728] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 152.313934][ T5728] should_fail_ex+0x399/0x4d0 [ 152.318686][ T5728] should_failslab+0x5/0x20 [ 152.323227][ T5728] slab_pre_alloc_hook+0x59/0x310 [ 152.328340][ T5728] ? bpf_test_init+0x9f/0x140 [ 152.333053][ T5728] __kmem_cache_alloc_node+0x4f/0x260 [ 152.338458][ T5728] ? bpf_test_init+0x9f/0x140 [ 152.343164][ T5728] __kmalloc+0xa0/0x240 [ 152.347359][ T5728] bpf_test_init+0x9f/0x140 [ 152.351915][ T5728] bpf_prog_test_run_xdp+0x484/0xf10 [ 152.357254][ T5728] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 152.363453][ T5728] ? dev_put+0x80/0x80 [ 152.367568][ T5728] ? dev_put+0x80/0x80 [ 152.371673][ T5728] bpf_prog_test_run+0x31e/0x390 [ 152.376658][ T5728] __sys_bpf+0x62b/0x780 [ 152.380941][ T5728] ? bpf_link_show_fdinfo+0x380/0x380 [ 152.386387][ T5728] __x64_sys_bpf+0x78/0x90 [ 152.390854][ T5728] do_syscall_64+0x4c/0xa0 [ 152.395308][ T5728] ? clear_bhb_loop+0x60/0xb0 [ 152.400016][ T5728] ? clear_bhb_loop+0x60/0xb0 [ 152.404740][ T5728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.410773][ T5728] RIP: 0033:0x7f5c25b9acb9 [ 152.415240][ T5728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.434961][ T5728] RSP: 002b:00007f5c269aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 152.443410][ T5728] RAX: ffffffffffffffda RBX: 00007f5c25e15fa0 RCX: 00007f5c25b9acb9 [ 152.451408][ T5728] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 152.459402][ T5728] RBP: 00007f5c269aa090 R08: 0000000000000000 R09: 0000000000000000 [ 152.467428][ T5728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.475446][ T5728] R13: 00007f5c25e16038 R14: 00007f5c25e15fa0 R15: 00007fffb7f723f8 [ 152.483469][ T5728] [ 152.828249][ T5734] device wg2 entered promiscuous mode [ 152.970900][ T5741] netlink: 'syz.1.459': attribute type 3 has an invalid length. [ 152.978625][ T5741] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.459'. [ 153.137884][ T5743] netlink: 'syz.4.460': attribute type 11 has an invalid length. [ 153.148356][ T5743] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.460'. [ 153.713253][ T5742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.021022][ T5785] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.474'. [ 155.052556][ T5785] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.474'. [ 155.120455][ T5785] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.474'. [ 155.132612][ T5784] netlink: 'syz.1.475': attribute type 153 has an invalid length. [ 155.235102][ T5787] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.474'. [ 155.267488][ T5784] netlink: 69544 bytes leftover after parsing attributes in process `syz.1.475'. [ 155.792311][ T5793] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.477'. [ 156.620571][ T5830] netlink: 60 bytes leftover after parsing attributes in process `syz.4.488'. [ 156.638053][ T5830] netlink: 60 bytes leftover after parsing attributes in process `syz.4.488'. [ 156.828761][ T5827] netlink: 'syz.3.489': attribute type 10 has an invalid length. [ 156.844764][ T5827] device dummy0 entered promiscuous mode [ 156.898960][ T5827] bridge0: port 3(dummy0) entered blocking state [ 156.935463][ T5827] bridge0: port 3(dummy0) entered disabled state [ 157.040223][ T5836] netlink: 'syz.4.491': attribute type 29 has an invalid length. [ 157.149777][ T5827] bridge0: port 3(dummy0) entered blocking state [ 157.164728][ T5827] bridge0: port 3(dummy0) entered forwarding state [ 157.335861][ T5836] netlink: 'syz.4.491': attribute type 29 has an invalid length. [ 157.395185][ T5842] netlink: 'syz.4.491': attribute type 29 has an invalid length. [ 157.830975][ T5855] netlink: 'syz.2.497': attribute type 153 has an invalid length. [ 158.078900][ T5857] __nla_validate_parse: 5 callbacks suppressed [ 158.078922][ T5857] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.500'. [ 158.117702][ T5857] netlink: zone id is out of range [ 158.140031][ T5857] netlink: zone id is out of range [ 158.146001][ T5857] netlink: zone id is out of range [ 158.182547][ T5857] netlink: zone id is out of range [ 158.188428][ T5857] netlink: zone id is out of range [ 158.196018][ T5857] netlink: zone id is out of range [ 158.224643][ T5857] netlink: zone id is out of range [ 158.230008][ T5857] netlink: zone id is out of range [ 158.261045][ T5857] netlink: zone id is out of range [ 158.266400][ T5857] netlink: zone id is out of range [ 158.338792][ T5867] netlink: 184 bytes leftover after parsing attributes in process `syz.2.503'. [ 158.424984][ T5867] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 158.496680][ T5867] syzkaller0: linktype set to 776 [ 159.137194][ T5888] netlink: 'syz.3.507': attribute type 10 has an invalid length. [ 159.194026][ T5889] FAULT_INJECTION: forcing a failure. [ 159.194026][ T5889] name failslab, interval 1, probability 0, space 0, times 0 [ 159.207179][ T5889] CPU: 0 PID: 5889 Comm: syz.4.511 Not tainted syzkaller #0 [ 159.214524][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.224635][ T5889] Call Trace: [ 159.227963][ T5889] [ 159.230949][ T5889] dump_stack_lvl+0x188/0x24e [ 159.235704][ T5889] ? show_regs_print_info+0x12/0x12 [ 159.240970][ T5889] ? load_image+0x400/0x400 [ 159.245550][ T5889] ? kasan_set_track+0x60/0x70 [ 159.250372][ T5889] ? kasan_set_track+0x4b/0x70 [ 159.255205][ T5889] ? __kasan_slab_alloc+0x6b/0x80 [ 159.260288][ T5889] ? slab_post_alloc_hook+0x4b/0x480 [ 159.265642][ T5889] should_fail_ex+0x399/0x4d0 [ 159.270405][ T5889] should_failslab+0x5/0x20 [ 159.275502][ T5889] slab_pre_alloc_hook+0x59/0x310 [ 159.280568][ T5889] ? ref_tracker_alloc+0x14e/0x4b0 [ 159.285817][ T5889] __kmem_cache_alloc_node+0x4f/0x260 [ 159.291256][ T5889] ? ref_tracker_alloc+0x14e/0x4b0 [ 159.296416][ T5889] kmalloc_trace+0x26/0xe0 [ 159.300874][ T5889] ref_tracker_alloc+0x14e/0x4b0 [ 159.305850][ T5889] ? ref_tracker_dir_print+0x150/0x150 [ 159.311377][ T5889] ? __kasan_slab_alloc+0x6b/0x80 [ 159.316453][ T5889] ? slab_post_alloc_hook+0x67/0x480 [ 159.321770][ T5889] ? slab_pre_alloc_hook+0x59/0x310 [ 159.327010][ T5889] dst_init+0xda/0x410 [ 159.331120][ T5889] dst_alloc+0x12a/0x160 [ 159.335408][ T5889] ip_route_output_key_hash_rcu+0x14a4/0x23f0 [ 159.341560][ T5889] ? ip_route_output_key_hash+0x139/0x330 [ 159.347316][ T5889] ip_route_output_key_hash+0x1ef/0x330 [ 159.352910][ T5889] ? ip_route_input_rcu+0x3160/0x3160 [ 159.358330][ T5889] ? memset+0x1e/0x40 [ 159.362346][ T5889] ip_route_output_flow+0x26/0x150 [ 159.367496][ T5889] ip_tunnel_xmit+0x993/0x2440 [ 159.372309][ T5889] ? ip_tunnel_xmit+0x80/0x2440 [ 159.377218][ T5889] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 159.382302][ T5889] ? iptunnel_handle_offloads+0x2bc/0x550 [ 159.388066][ T5889] sit_tunnel_xmit+0x667/0x2010 [ 159.392968][ T5889] ? validate_xmit_xfrm+0xb2/0x11e0 [ 159.398219][ T5889] ? ipip6_tunnel_uninit+0x180/0x180 [ 159.403543][ T5889] ? passthru_features_check+0x10/0x10 [ 159.409075][ T5889] dev_hard_start_xmit+0x262/0x870 [ 159.414258][ T5889] __dev_queue_xmit+0x1a7f/0x37f0 [ 159.419315][ T5889] ? lock_chain_count+0x20/0x20 [ 159.424216][ T5889] ? __dev_queue_xmit+0x26b/0x37f0 [ 159.429371][ T5889] ? netdev_core_pick_tx+0x340/0x340 [ 159.434723][ T5889] ? neigh_connected_output+0x3ac/0x450 [ 159.440327][ T5889] ? ip_finish_output2+0x3ff/0x11b0 [ 159.445575][ T5889] ip_finish_output2+0xd05/0x11b0 [ 159.450640][ T5889] ? ip_finish_output2+0x3ff/0x11b0 [ 159.455890][ T5889] ? ip_fast_csum+0x1ea/0x2b0 [ 159.460605][ T5889] ? ip_fragment+0x210/0x210 [ 159.465240][ T5889] ? ip_frag_next+0x61e/0xaf0 [ 159.469973][ T5889] ? ip_options_fragment+0x1aa/0x290 [ 159.475301][ T5889] ? ip_do_fragment+0x8c7/0x1750 [ 159.480312][ T5889] ip_do_fragment+0x969/0x1750 [ 159.485140][ T5889] ? ip_fragment+0x210/0x210 [ 159.489785][ T5889] ip_send_skb+0x129/0x1c0 [ 159.494248][ T5889] raw_sendmsg+0x153d/0x1b20 [ 159.498871][ T5889] ? raw_sendmsg+0x5a0/0x1b20 [ 159.503587][ T5889] ? compat_raw_ioctl+0x60/0x60 [ 159.508511][ T5889] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 159.514976][ T5889] ? sock_rps_record_flow+0x19/0x3f0 [ 159.520295][ T5889] ? inet_sendmsg+0x78/0x2f0 [ 159.524920][ T5889] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 159.530234][ T5889] ? security_socket_sendmsg+0x7c/0xa0 [ 159.535760][ T5889] ? inet_send_prepare+0x260/0x260 [ 159.540903][ T5889] ____sys_sendmsg+0x5be/0x970 [ 159.545718][ T5889] ? __sys_sendmsg_sock+0x30/0x30 [ 159.550774][ T5889] ? __import_iovec+0x315/0x500 [ 159.555666][ T5889] ? import_iovec+0x6f/0xa0 [ 159.560207][ T5889] ___sys_sendmsg+0x2a2/0x360 [ 159.564924][ T5889] ? __sys_sendmsg+0x290/0x290 [ 159.569780][ T5889] ? __lock_acquire+0x7d10/0x7d10 [ 159.574888][ T5889] __se_sys_sendmsg+0x1bb/0x2a0 [ 159.579781][ T5889] ? __x64_sys_sendmsg+0x80/0x80 [ 159.584778][ T5889] ? lockdep_hardirqs_on+0x94/0x140 [ 159.590020][ T5889] do_syscall_64+0x4c/0xa0 [ 159.594473][ T5889] ? clear_bhb_loop+0x60/0xb0 [ 159.599185][ T5889] ? clear_bhb_loop+0x60/0xb0 [ 159.603908][ T5889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.609843][ T5889] RIP: 0033:0x7f5c25b9acb9 [ 159.614295][ T5889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.633928][ T5889] RSP: 002b:00007f5c269aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.642389][ T5889] RAX: ffffffffffffffda RBX: 00007f5c25e15fa0 RCX: 00007f5c25b9acb9 [ 159.650397][ T5889] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 159.658402][ T5889] RBP: 00007f5c269aa090 R08: 0000000000000000 R09: 0000000000000000 [ 159.666403][ T5889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.674406][ T5889] R13: 00007f5c25e16038 R14: 00007f5c25e15fa0 R15: 00007fffb7f723f8 [ 159.682437][ T5889] [ 159.685684][ T5889] memory allocation failure, unreliable refcount tracker. [ 160.231025][ T5903] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.514'. [ 160.240572][ T5903] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.514'. [ 160.251165][ T5903] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.514'. [ 160.260923][ T5903] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.514'. [ 160.544197][ T5910] netlink: 14 bytes leftover after parsing attributes in process `syz.3.520'. [ 161.036334][ T5928] netlink: 60 bytes leftover after parsing attributes in process `syz.1.525'. [ 161.251071][ T5910] team0: Port device bond0 removed [ 161.259034][ T5910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.279329][ T5910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.301932][ T5910] bond0 (unregistering): Released all slaves [ 161.311517][ T5928] netlink: 60 bytes leftover after parsing attributes in process `syz.1.525'. [ 161.339484][ T5929] netlink: 60 bytes leftover after parsing attributes in process `syz.1.525'. [ 162.464565][ T5962] FAULT_INJECTION: forcing a failure. [ 162.464565][ T5962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.504774][ T5962] CPU: 0 PID: 5962 Comm: syz.4.537 Not tainted syzkaller #0 [ 162.512130][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.522236][ T5962] Call Trace: [ 162.525559][ T5962] [ 162.528525][ T5962] dump_stack_lvl+0x188/0x24e [ 162.533305][ T5962] ? show_regs_print_info+0x12/0x12 [ 162.538549][ T5962] ? load_image+0x400/0x400 [ 162.543094][ T5962] ? __lock_acquire+0x7d10/0x7d10 [ 162.548203][ T5962] should_fail_ex+0x399/0x4d0 [ 162.552926][ T5962] _copy_from_user+0x2c/0x170 [ 162.557644][ T5962] iovec_from_user+0x143/0x360 [ 162.562436][ T5962] __import_iovec+0x6d/0x500 [ 162.567056][ T5962] import_iovec+0x6f/0xa0 [ 162.571420][ T5962] ___sys_sendmsg+0x252/0x360 [ 162.576130][ T5962] ? __sys_sendmsg+0x290/0x290 [ 162.580936][ T5962] ? __lock_acquire+0x7d10/0x7d10 [ 162.586012][ T5962] __se_sys_sendmsg+0x1bb/0x2a0 [ 162.590894][ T5962] ? __x64_sys_sendmsg+0x80/0x80 [ 162.595875][ T5962] ? lockdep_hardirqs_on+0x94/0x140 [ 162.601108][ T5962] do_syscall_64+0x4c/0xa0 [ 162.605556][ T5962] ? clear_bhb_loop+0x60/0xb0 [ 162.610269][ T5962] ? clear_bhb_loop+0x60/0xb0 [ 162.614989][ T5962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.620917][ T5962] RIP: 0033:0x7f5c25b9acb9 [ 162.625386][ T5962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.645023][ T5962] RSP: 002b:00007f5c269aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.653464][ T5962] RAX: ffffffffffffffda RBX: 00007f5c25e15fa0 RCX: 00007f5c25b9acb9 [ 162.661458][ T5962] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 162.669457][ T5962] RBP: 00007f5c269aa090 R08: 0000000000000000 R09: 0000000000000000 [ 162.677464][ T5962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.685458][ T5962] R13: 00007f5c25e16038 R14: 00007f5c25e15fa0 R15: 00007fffb7f723f8 [ 162.693829][ T5962] [ 163.743930][ T5990] FAULT_INJECTION: forcing a failure. [ 163.743930][ T5990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.773488][ T5990] CPU: 1 PID: 5990 Comm: syz.1.545 Not tainted syzkaller #0 [ 163.780877][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.790990][ T5990] Call Trace: [ 163.794391][ T5990] [ 163.797453][ T5990] dump_stack_lvl+0x188/0x24e [ 163.802195][ T5990] ? show_regs_print_info+0x12/0x12 [ 163.807448][ T5990] ? load_image+0x400/0x400 [ 163.812001][ T5990] ? __lock_acquire+0x7d10/0x7d10 [ 163.817175][ T5990] should_fail_ex+0x399/0x4d0 [ 163.821936][ T5990] _copy_from_user+0x2c/0x170 [ 163.826688][ T5990] ____sys_sendmsg+0x30a/0x970 [ 163.831518][ T5990] ? __sys_sendmsg_sock+0x30/0x30 [ 163.836599][ T5990] ? __import_iovec+0x315/0x500 [ 163.841510][ T5990] ? import_iovec+0x6f/0xa0 [ 163.846068][ T5990] ___sys_sendmsg+0x2a2/0x360 [ 163.850898][ T5990] ? __sys_sendmsg+0x290/0x290 [ 163.855812][ T5990] ? __lock_acquire+0x7d10/0x7d10 [ 163.860919][ T5990] __se_sys_sendmsg+0x1bb/0x2a0 [ 163.865828][ T5990] ? __x64_sys_sendmsg+0x80/0x80 [ 163.870831][ T5990] ? lockdep_hardirqs_on+0x94/0x140 [ 163.876096][ T5990] do_syscall_64+0x4c/0xa0 [ 163.880570][ T5990] ? clear_bhb_loop+0x60/0xb0 [ 163.885308][ T5990] ? clear_bhb_loop+0x60/0xb0 [ 163.890021][ T5990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.895956][ T5990] RIP: 0033:0x7fd018b9acb9 [ 163.900400][ T5990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.920033][ T5990] RSP: 002b:00007fd019b1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.928474][ T5990] RAX: ffffffffffffffda RBX: 00007fd018e16090 RCX: 00007fd018b9acb9 [ 163.936469][ T5990] RDX: 0000000000000000 RSI: 0000200000001a40 RDI: 0000000000000008 [ 163.944461][ T5990] RBP: 00007fd019b1a090 R08: 0000000000000000 R09: 0000000000000000 [ 163.952452][ T5990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.960486][ T5990] R13: 00007fd018e16128 R14: 00007fd018e16090 R15: 00007ffc787f9bf8 [ 163.968507][ T5990] [ 164.468900][ T5997] netlink: 'syz.3.548': attribute type 29 has an invalid length. [ 164.485235][ T5999] netlink: 'syz.0.552': attribute type 11 has an invalid length. [ 164.511283][ T5997] netlink: 'syz.3.548': attribute type 29 has an invalid length. [ 164.592160][ T5997] netlink: 'syz.3.548': attribute type 29 has an invalid length. [ 165.448508][ T6029] FAULT_INJECTION: forcing a failure. [ 165.448508][ T6029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.496965][ T6029] CPU: 1 PID: 6029 Comm: syz.0.560 Not tainted syzkaller #0 [ 165.504441][ T6029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.514572][ T6029] Call Trace: [ 165.517898][ T6029] [ 165.520874][ T6029] dump_stack_lvl+0x188/0x24e [ 165.525606][ T6029] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 165.531824][ T6029] ? show_regs_print_info+0x12/0x12 [ 165.537094][ T6029] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 165.543304][ T6029] should_fail_ex+0x399/0x4d0 [ 165.548020][ T6029] _copy_from_user+0x2c/0x170 [ 165.552741][ T6029] dev_ethtool+0xc2/0x12f0 [ 165.557201][ T6029] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 165.563475][ T6029] ? __lock_acquire+0x7d10/0x7d10 [ 165.568528][ T6029] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 165.574719][ T6029] ? full_name_hash+0x8e/0xe0 [ 165.579430][ T6029] ? dev_load+0x1d/0x1e0 [ 165.583716][ T6029] ? dev_load+0x1d/0x1e0 [ 165.588009][ T6029] dev_ioctl+0x474/0xe80 [ 165.592304][ T6029] sock_do_ioctl+0x245/0x320 [ 165.596932][ T6029] ? sock_show_fdinfo+0xb0/0xb0 [ 165.601823][ T6029] sock_ioctl+0x4d2/0x710 [ 165.606188][ T6029] ? sock_poll+0x410/0x410 [ 165.610670][ T6029] ? bpf_lsm_file_ioctl+0x5/0x10 [ 165.615674][ T6029] ? security_file_ioctl+0x7c/0xa0 [ 165.620834][ T6029] ? sock_poll+0x410/0x410 [ 165.625292][ T6029] __se_sys_ioctl+0xfa/0x170 [ 165.629925][ T6029] do_syscall_64+0x4c/0xa0 [ 165.634376][ T6029] ? clear_bhb_loop+0x60/0xb0 [ 165.639082][ T6029] ? clear_bhb_loop+0x60/0xb0 [ 165.643793][ T6029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.649716][ T6029] RIP: 0033:0x7f2587b9acb9 [ 165.654171][ T6029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.673814][ T6029] RSP: 002b:00007f2588ad9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.682273][ T6029] RAX: ffffffffffffffda RBX: 00007f2587e15fa0 RCX: 00007f2587b9acb9 [ 165.690277][ T6029] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000031 [ 165.698281][ T6029] RBP: 00007f2588ad9090 R08: 0000000000000000 R09: 0000000000000000 [ 165.706282][ T6029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.714272][ T6029] R13: 00007f2587e16038 R14: 00007f2587e15fa0 R15: 00007ffcb5f9aa78 [ 165.722281][ T6029] [ 165.804982][ T6040] netlink: 'syz.2.565': attribute type 4 has an invalid length. [ 166.470793][ T6051] __nla_validate_parse: 1 callbacks suppressed [ 166.470812][ T6051] netlink: 60 bytes leftover after parsing attributes in process `syz.0.568'. [ 166.811701][ T6065] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.573'. [ 167.071247][ T6076] netlink: 'syz.1.578': attribute type 10 has an invalid length. [ 168.020326][ T6076] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 168.454923][ T6100] netlink: 'syz.0.587': attribute type 27 has an invalid length. [ 168.501919][ T6100] netlink: 164 bytes leftover after parsing attributes in process `syz.0.587'. [ 169.051847][ T6110] netlink: 10 bytes leftover after parsing attributes in process `syz.4.589'. [ 169.236418][ T6118] FAULT_INJECTION: forcing a failure. [ 169.236418][ T6118] name failslab, interval 1, probability 0, space 0, times 0 [ 169.275194][ T6118] CPU: 1 PID: 6118 Comm: syz.3.592 Not tainted syzkaller #0 [ 169.282573][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.292682][ T6118] Call Trace: [ 169.296013][ T6118] [ 169.298985][ T6118] dump_stack_lvl+0x188/0x24e [ 169.303735][ T6118] ? show_regs_print_info+0x12/0x12 [ 169.309000][ T6118] ? load_image+0x400/0x400 [ 169.313557][ T6118] ? __might_sleep+0xd0/0xd0 [ 169.318206][ T6118] ? __lock_acquire+0x7d10/0x7d10 [ 169.323299][ T6118] should_fail_ex+0x399/0x4d0 [ 169.328039][ T6118] should_failslab+0x5/0x20 [ 169.332611][ T6118] slab_pre_alloc_hook+0x59/0x310 [ 169.337740][ T6118] kmem_cache_alloc_node+0x5a/0x320 [ 169.342990][ T6118] ? __alloc_skb+0xfc/0x7e0 [ 169.347539][ T6118] __alloc_skb+0xfc/0x7e0 [ 169.351908][ T6118] __ip6_append_data+0x2bb8/0x3d40 [ 169.357055][ T6118] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 169.362843][ T6118] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 169.367734][ T6118] ? ip6_setup_cork+0xfe0/0xfe0 [ 169.372628][ T6118] ? ip6_append_data+0x2aa/0x3e0 [ 169.377598][ T6118] ip6_append_data+0x1ea/0x3e0 [ 169.382426][ T6118] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 169.387314][ T6118] l2tp_ip6_sendmsg+0x1208/0x1670 [ 169.392382][ T6118] ? l2tp_ip6_destroy_sock+0x50/0x50 [ 169.397695][ T6118] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 169.403726][ T6118] ? sock_rps_record_flow+0x19/0x3f0 [ 169.409038][ T6118] ? inet_sendmsg+0x78/0x2f0 [ 169.413648][ T6118] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 169.418972][ T6118] ? security_socket_sendmsg+0x7c/0xa0 [ 169.424511][ T6118] ? inet_send_prepare+0x260/0x260 [ 169.429702][ T6118] ____sys_sendmsg+0x5be/0x970 [ 169.434906][ T6118] ? __sys_sendmsg_sock+0x30/0x30 [ 169.439957][ T6118] ? __import_iovec+0x315/0x500 [ 169.444841][ T6118] ? import_iovec+0x6f/0xa0 [ 169.449371][ T6118] ___sys_sendmsg+0x2a2/0x360 [ 169.454080][ T6118] ? __sys_sendmsg+0x290/0x290 [ 169.458882][ T6118] ? ktime_get_real_ts64+0x440/0x440 [ 169.464211][ T6118] __se_sys_sendmsg+0x1bb/0x2a0 [ 169.469087][ T6118] ? __x64_sys_sendmsg+0x80/0x80 [ 169.474071][ T6118] ? lockdep_hardirqs_on+0x94/0x140 [ 169.479306][ T6118] do_syscall_64+0x4c/0xa0 [ 169.483783][ T6118] ? clear_bhb_loop+0x60/0xb0 [ 169.488606][ T6118] ? clear_bhb_loop+0x60/0xb0 [ 169.493502][ T6118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.499434][ T6118] RIP: 0033:0x7f399fb9acb9 [ 169.503875][ T6118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.523541][ T6118] RSP: 002b:00007f39a0a19028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.531990][ T6118] RAX: ffffffffffffffda RBX: 00007f399fe15fa0 RCX: 00007f399fb9acb9 [ 169.539990][ T6118] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000009 [ 169.547985][ T6118] RBP: 00007f39a0a19090 R08: 0000000000000000 R09: 0000000000000000 [ 169.555980][ T6118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.563971][ T6118] R13: 00007f399fe16038 R14: 00007f399fe15fa0 R15: 00007ffe99e451a8 [ 169.571980][ T6118] [ 169.661327][ T6134] netlink: 'syz.2.597': attribute type 41 has an invalid length. [ 169.669860][ T6134] netlink: 'syz.2.597': attribute type 41 has an invalid length. [ 169.930724][ T6146] netlink: 132 bytes leftover after parsing attributes in process `syz.3.600'. [ 170.045307][ T6148] FAULT_INJECTION: forcing a failure. [ 170.045307][ T6148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.092951][ T6148] CPU: 1 PID: 6148 Comm: syz.2.603 Not tainted syzkaller #0 [ 170.100333][ T6148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.110442][ T6148] Call Trace: [ 170.113762][ T6148] [ 170.116734][ T6148] dump_stack_lvl+0x188/0x24e [ 170.121568][ T6148] ? show_regs_print_info+0x12/0x12 [ 170.126826][ T6148] ? load_image+0x400/0x400 [ 170.131396][ T6148] ? __lock_acquire+0x7d10/0x7d10 [ 170.136467][ T6148] should_fail_ex+0x399/0x4d0 [ 170.141166][ T6148] _copy_to_user+0x2c/0x130 [ 170.145703][ T6148] btf_get_info_by_fd+0x1ce/0x5b0 [ 170.150775][ T6148] ? __fget_files+0x28/0x4b0 [ 170.155415][ T6148] ? btf_get_by_fd+0x160/0x160 [ 170.160208][ T6148] ? __fdget+0x17c/0x200 [ 170.164491][ T6148] bpf_obj_get_info_by_fd+0xc30/0x2f50 [ 170.169979][ T6148] ? __lock_acquire+0x7d10/0x7d10 [ 170.175471][ T6148] ? verify_lock_unused+0x140/0x140 [ 170.180745][ T6148] ? bpf_map_get_fd_by_id+0x310/0x310 [ 170.186149][ T6148] ? get_pid_task+0x1c/0x1e0 [ 170.190781][ T6148] ? __might_fault+0xa6/0x120 [ 170.195481][ T6148] ? __lock_acquire+0x7d10/0x7d10 [ 170.200542][ T6148] ? __might_fault+0xa6/0x120 [ 170.205244][ T6148] ? __might_fault+0xc2/0x120 [ 170.209943][ T6148] ? __might_fault+0xa6/0x120 [ 170.214645][ T6148] ? bpf_lsm_bpf+0x5/0x10 [ 170.218993][ T6148] ? security_bpf+0x7a/0xa0 [ 170.223517][ T6148] __sys_bpf+0x505/0x780 [ 170.227789][ T6148] ? bpf_link_show_fdinfo+0x380/0x380 [ 170.233197][ T6148] ? lock_chain_count+0x20/0x20 [ 170.238088][ T6148] __x64_sys_bpf+0x78/0x90 [ 170.242534][ T6148] do_syscall_64+0x4c/0xa0 [ 170.246978][ T6148] ? clear_bhb_loop+0x60/0xb0 [ 170.251697][ T6148] ? clear_bhb_loop+0x60/0xb0 [ 170.256428][ T6148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.262362][ T6148] RIP: 0033:0x7f0072b9acb9 [ 170.266815][ T6148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.286483][ T6148] RSP: 002b:00007f0073ad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.294924][ T6148] RAX: ffffffffffffffda RBX: 00007f0072e15fa0 RCX: 00007f0072b9acb9 [ 170.302917][ T6148] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 170.310913][ T6148] RBP: 00007f0073ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 170.318900][ T6148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.326921][ T6148] R13: 00007f0072e16038 R14: 00007f0072e15fa0 R15: 00007ffee2a6b318 [ 170.334923][ T6148] [ 170.413249][ T6155] FAULT_INJECTION: forcing a failure. [ 170.413249][ T6155] name failslab, interval 1, probability 0, space 0, times 0 [ 170.426282][ T6155] CPU: 1 PID: 6155 Comm: syz.0.605 Not tainted syzkaller #0 [ 170.433635][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.443747][ T6155] Call Trace: [ 170.447095][ T6155] [ 170.450083][ T6155] dump_stack_lvl+0x188/0x24e [ 170.454867][ T6155] ? show_regs_print_info+0x12/0x12 [ 170.460136][ T6155] ? load_image+0x400/0x400 [ 170.464713][ T6155] ? __might_sleep+0xd0/0xd0 [ 170.469383][ T6155] ? __lock_acquire+0x7d10/0x7d10 [ 170.474491][ T6155] should_fail_ex+0x399/0x4d0 [ 170.479273][ T6155] should_failslab+0x5/0x20 [ 170.483852][ T6155] slab_pre_alloc_hook+0x59/0x310 [ 170.488936][ T6155] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 170.494729][ T6155] __kmem_cache_alloc_node+0x4f/0x260 [ 170.500259][ T6155] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 170.506060][ T6155] __kmalloc+0xa0/0x240 [ 170.510303][ T6155] tomoyo_realpath_from_path+0xdf/0x5d0 [ 170.515943][ T6155] ? tomoyo_path_number_perm+0x205/0x650 [ 170.521656][ T6155] tomoyo_path_number_perm+0x22f/0x650 [ 170.527192][ T6155] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 170.532716][ T6155] ? ksys_write+0x1c0/0x250 [ 170.537289][ T6155] ? common_file_perm+0x171/0x1c0 [ 170.542424][ T6155] ? __fget_files+0x28/0x4b0 [ 170.547077][ T6155] ? __fget_files+0x28/0x4b0 [ 170.551763][ T6155] security_file_ioctl+0x6c/0xa0 [ 170.556774][ T6155] __se_sys_ioctl+0x48/0x170 [ 170.561445][ T6155] do_syscall_64+0x4c/0xa0 [ 170.565930][ T6155] ? clear_bhb_loop+0x60/0xb0 [ 170.570668][ T6155] ? clear_bhb_loop+0x60/0xb0 [ 170.575411][ T6155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.581379][ T6155] RIP: 0033:0x7f2587b9acb9 [ 170.585847][ T6155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.605565][ T6155] RSP: 002b:00007f2588ad9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.614050][ T6155] RAX: ffffffffffffffda RBX: 00007f2587e15fa0 RCX: 00007f2587b9acb9 [ 170.622089][ T6155] RDX: 0000000000000009 RSI: 0000000000002400 RDI: 0000000000000005 [ 170.630137][ T6155] RBP: 00007f2588ad9090 R08: 0000000000000000 R09: 0000000000000000 [ 170.638173][ T6155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.646197][ T6155] R13: 00007f2587e16038 R14: 00007f2587e15fa0 R15: 00007ffcb5f9aa78 [ 170.654264][ T6155] [ 170.719665][ T6158] netlink: 10 bytes leftover after parsing attributes in process `syz.1.607'. [ 170.762671][ T6155] ERROR: Out of memory at tomoyo_realpath_from_path. [ 170.852511][ T6165] netlink: 184 bytes leftover after parsing attributes in process `syz.4.610'. [ 170.906536][ T6165] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 170.916533][ T6165] syzkaller0: linktype set to 776 [ 170.998179][ T6171] netlink: 'syz.3.613': attribute type 4 has an invalid length. [ 171.043434][ T6171] netlink: 140 bytes leftover after parsing attributes in process `syz.3.613'. [ 171.153811][ T6176] netlink: 'syz.1.611': attribute type 10 has an invalid length. [ 171.438375][ T6176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.578245][ T6176] team0: Port device bond0 added [ 172.563997][ T6210] netlink: 184 bytes leftover after parsing attributes in process `syz.3.627'. [ 173.105885][ T6202] netlink: 10 bytes leftover after parsing attributes in process `syz.1.622'. [ 173.130439][ T6217] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 173.144799][ T6217] syzkaller0: linktype set to 776 [ 173.311573][ T6223] FAULT_INJECTION: forcing a failure. [ 173.311573][ T6223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.355916][ T6223] CPU: 1 PID: 6223 Comm: syz.1.629 Not tainted syzkaller #0 [ 173.363302][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.373399][ T6223] Call Trace: [ 173.376717][ T6223] [ 173.379695][ T6223] dump_stack_lvl+0x188/0x24e [ 173.384435][ T6223] ? show_regs_print_info+0x12/0x12 [ 173.389691][ T6223] ? load_image+0x400/0x400 [ 173.394417][ T6223] ? __might_fault+0xa6/0x120 [ 173.399160][ T6223] should_fail_ex+0x399/0x4d0 [ 173.403982][ T6223] copyin+0x1b/0x120 [ 173.407942][ T6223] _copy_from_iter+0x447/0x1130 [ 173.412866][ T6223] ? copyout_mc+0x110/0x110 [ 173.417421][ T6223] ? copyout_mc+0x110/0x110 [ 173.421975][ T6223] ? __virt_addr_valid+0x188/0x540 [ 173.427147][ T6223] ? page_copy_sane+0x194/0x390 [ 173.432064][ T6223] copy_page_from_iter+0x77/0x100 [ 173.437142][ T6223] skb_copy_datagram_from_iter+0x2b3/0x690 [ 173.443009][ T6223] unix_dgram_sendmsg+0x5fb/0x16e0 [ 173.448196][ T6223] ? aa_sk_perm+0x81f/0x950 [ 173.452844][ T6223] ? __might_fault+0xa6/0x120 [ 173.457581][ T6223] ? unix_dgram_poll+0x680/0x680 [ 173.462575][ T6223] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 173.469116][ T6223] ? aa_sock_msg_perm+0x94/0x150 [ 173.474281][ T6223] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 173.479613][ T6223] ? security_socket_sendmsg+0x7c/0xa0 [ 173.485139][ T6223] ? unix_dgram_poll+0x680/0x680 [ 173.490137][ T6223] ____sys_sendmsg+0x5be/0x970 [ 173.494956][ T6223] ? __sys_sendmsg_sock+0x30/0x30 [ 173.500025][ T6223] ? __import_iovec+0x315/0x500 [ 173.504938][ T6223] ? import_iovec+0x6f/0xa0 [ 173.509485][ T6223] ___sys_sendmsg+0x2a2/0x360 [ 173.514219][ T6223] ? __sys_sendmsg+0x290/0x290 [ 173.519043][ T6223] ? __lock_acquire+0x7d10/0x7d10 [ 173.524143][ T6223] __se_sys_sendmsg+0x1bb/0x2a0 [ 173.529039][ T6223] ? __x64_sys_sendmsg+0x80/0x80 [ 173.534125][ T6223] ? lockdep_hardirqs_on+0x94/0x140 [ 173.539574][ T6223] do_syscall_64+0x4c/0xa0 [ 173.544057][ T6223] ? clear_bhb_loop+0x60/0xb0 [ 173.548792][ T6223] ? clear_bhb_loop+0x60/0xb0 [ 173.553618][ T6223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.559563][ T6223] RIP: 0033:0x7fd018b9acb9 [ 173.564030][ T6223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.583688][ T6223] RSP: 002b:00007fd019b3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.592166][ T6223] RAX: ffffffffffffffda RBX: 00007fd018e15fa0 RCX: 00007fd018b9acb9 [ 173.600188][ T6223] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 173.608202][ T6223] RBP: 00007fd019b3b090 R08: 0000000000000000 R09: 0000000000000000 [ 173.616203][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.624226][ T6223] R13: 00007fd018e16038 R14: 00007fd018e15fa0 R15: 00007ffc787f9bf8 [ 173.632272][ T6223] [ 174.267614][ T6251] netlink: 10 bytes leftover after parsing attributes in process `syz.2.639'. [ 174.396863][ T6255] netlink: 'syz.4.638': attribute type 10 has an invalid length. [ 174.575405][ T6264] raw_sendmsg: syz.1.644 forgot to set AF_INET. Fix it! [ 174.626548][ T6255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.723431][ T6255] team0: Port device bond0 added [ 176.835940][ T6306] netlink: 'syz.3.658': attribute type 4 has an invalid length. [ 176.866639][ T6307] netlink: 10 bytes leftover after parsing attributes in process `syz.4.656'. [ 176.927669][ T6306] netlink: 'syz.3.658': attribute type 19 has an invalid length. [ 176.955211][ T6309] netlink: 'syz.0.659': attribute type 2 has an invalid length. [ 176.993926][ T6309] netlink: 'syz.0.659': attribute type 9 has an invalid length. [ 177.031257][ T6309] netlink: 132 bytes leftover after parsing attributes in process `syz.0.659'. [ 178.491985][ T6339] FAULT_INJECTION: forcing a failure. [ 178.491985][ T6339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.555099][ T6339] CPU: 1 PID: 6339 Comm: syz.4.668 Not tainted syzkaller #0 [ 178.562477][ T6339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.572591][ T6339] Call Trace: [ 178.575911][ T6339] [ 178.578885][ T6339] dump_stack_lvl+0x188/0x24e [ 178.583625][ T6339] ? show_regs_print_info+0x12/0x12 [ 178.588883][ T6339] ? load_image+0x400/0x400 [ 178.593458][ T6339] ? __lock_acquire+0x7d10/0x7d10 [ 178.598549][ T6339] should_fail_ex+0x399/0x4d0 [ 178.603299][ T6339] _copy_from_user+0x2c/0x170 [ 178.608051][ T6339] iovec_from_user+0x143/0x360 [ 178.613046][ T6339] __import_iovec+0x6d/0x500 [ 178.617695][ T6339] import_iovec+0x6f/0xa0 [ 178.622080][ T6339] ___sys_sendmsg+0x252/0x360 [ 178.626818][ T6339] ? __sys_sendmsg+0x290/0x290 [ 178.631660][ T6339] ? __lock_acquire+0x7d10/0x7d10 [ 178.636806][ T6339] __se_sys_sendmsg+0x1bb/0x2a0 [ 178.641728][ T6339] ? __x64_sys_sendmsg+0x80/0x80 [ 178.647166][ T6339] ? lockdep_hardirqs_on+0x94/0x140 [ 178.652429][ T6339] do_syscall_64+0x4c/0xa0 [ 178.656900][ T6339] ? clear_bhb_loop+0x60/0xb0 [ 178.661630][ T6339] ? clear_bhb_loop+0x60/0xb0 [ 178.666366][ T6339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.672349][ T6339] RIP: 0033:0x7f5c25b9acb9 [ 178.676816][ T6339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.696563][ T6339] RSP: 002b:00007f5c269aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.705035][ T6339] RAX: ffffffffffffffda RBX: 00007f5c25e15fa0 RCX: 00007f5c25b9acb9 [ 178.713064][ T6339] RDX: 0000000000008080 RSI: 0000200000000080 RDI: 0000000000000003 [ 178.721097][ T6339] RBP: 00007f5c269aa090 R08: 0000000000000000 R09: 0000000000000000 [ 178.729189][ T6339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.737389][ T6339] R13: 00007f5c25e16038 R14: 00007f5c25e15fa0 R15: 00007fffb7f723f8 [ 178.745387][ T6339] [ 178.759731][ T6346] netlink: 'syz.3.670': attribute type 2 has an invalid length. [ 178.788585][ T6346] netlink: 'syz.3.670': attribute type 9 has an invalid length. [ 178.807056][ T6346] netlink: 132 bytes leftover after parsing attributes in process `syz.3.670'. [ 178.838807][ T6346] netlink: 'syz.3.670': attribute type 4 has an invalid length. [ 178.914661][ T6350] netlink: 'syz.2.671': attribute type 21 has an invalid length. [ 178.950841][ T6350] netlink: 152 bytes leftover after parsing attributes in process `syz.2.671'. [ 179.058871][ T6352] netlink: 10 bytes leftover after parsing attributes in process `syz.1.672'. [ 179.376712][ T6371] netlink: 'syz.2.679': attribute type 4 has an invalid length. [ 179.454950][ T6371] netlink: 'syz.2.679': attribute type 19 has an invalid length. [ 181.245264][ T6403] netlink: 152 bytes leftover after parsing attributes in process `syz.4.690'. [ 181.270224][ T6399] netlink: 10 bytes leftover after parsing attributes in process `syz.1.689'. [ 181.586467][ T6415] netlink: 168 bytes leftover after parsing attributes in process `syz.3.691'. [ 181.865415][ T6422] validate_nla: 1 callbacks suppressed [ 181.865432][ T6422] netlink: 'syz.1.699': attribute type 1 has an invalid length. [ 181.936608][ T6422] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.699'. [ 182.140548][ T4281] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 182.321390][ T6439] netlink: 'syz.2.697': attribute type 10 has an invalid length. [ 183.825343][ T6439] device macsec0 left promiscuous mode [ 183.835273][ T6439] GPL: port 1(macsec0) entered disabled state [ 184.141258][ T6448] netlink: 10 bytes leftover after parsing attributes in process `syz.1.705'. [ 184.164132][ T6460] netlink: 'syz.3.707': attribute type 21 has an invalid length. [ 184.193026][ T6460] netlink: 152 bytes leftover after parsing attributes in process `syz.3.707'. [ 184.723255][ T6471] device sit0 entered promiscuous mode [ 185.530418][ T6481] netlink: 14 bytes leftover after parsing attributes in process `syz.3.713'. [ 185.700788][ T6481] device hsr_slave_0 left promiscuous mode [ 185.754480][ T6481] device hsr_slave_1 left promiscuous mode [ 186.059378][ T6484] netlink: 'syz.0.716': attribute type 6 has an invalid length. [ 186.081052][ T6484] netlink: 168 bytes leftover after parsing attributes in process `syz.0.716'. [ 186.324471][ T6499] FAULT_INJECTION: forcing a failure. [ 186.324471][ T6499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.356298][ T6499] CPU: 1 PID: 6499 Comm: syz.4.720 Not tainted syzkaller #0 [ 186.363679][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.373788][ T6499] Call Trace: [ 186.377108][ T6499] [ 186.380077][ T6499] dump_stack_lvl+0x188/0x24e [ 186.384830][ T6499] ? show_regs_print_info+0x12/0x12 [ 186.390091][ T6499] ? load_image+0x400/0x400 [ 186.394653][ T6499] ? __lock_acquire+0x7d10/0x7d10 [ 186.399731][ T6499] should_fail_ex+0x399/0x4d0 [ 186.404466][ T6499] _copy_from_user+0x2c/0x170 [ 186.409201][ T6499] iovec_from_user+0x143/0x360 [ 186.414199][ T6499] __import_iovec+0x6d/0x500 [ 186.418850][ T6499] import_iovec+0x6f/0xa0 [ 186.423239][ T6499] ___sys_sendmsg+0x252/0x360 [ 186.427974][ T6499] ? __sys_sendmsg+0x290/0x290 [ 186.432800][ T6499] ? __lock_acquire+0x7d10/0x7d10 [ 186.437880][ T6499] __se_sys_sendmsg+0x1bb/0x2a0 [ 186.442781][ T6499] ? __x64_sys_sendmsg+0x80/0x80 [ 186.447768][ T6499] ? lockdep_hardirqs_on+0x94/0x140 [ 186.453016][ T6499] do_syscall_64+0x4c/0xa0 [ 186.457477][ T6499] ? clear_bhb_loop+0x60/0xb0 [ 186.462204][ T6499] ? clear_bhb_loop+0x60/0xb0 [ 186.466922][ T6499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.473283][ T6499] RIP: 0033:0x7f5c25b9acb9 [ 186.477727][ T6499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.497450][ T6499] RSP: 002b:00007f5c269aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.505983][ T6499] RAX: ffffffffffffffda RBX: 00007f5c25e15fa0 RCX: 00007f5c25b9acb9 [ 186.513996][ T6499] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 186.521993][ T6499] RBP: 00007f5c269aa090 R08: 0000000000000000 R09: 0000000000000000 [ 186.529990][ T6499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.537985][ T6499] R13: 00007f5c25e16038 R14: 00007f5c25e15fa0 R15: 00007fffb7f723f8 [ 186.545990][ T6499] [ 186.740289][ T6502] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.721'. [ 186.912972][ T6508] netlink: 'syz.3.723': attribute type 10 has an invalid length. [ 187.553990][ T6538] netlink: 'syz.2.729': attribute type 2 has an invalid length. [ 187.601172][ T6538] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.729'. [ 190.791026][ T6558] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.738'. [ 191.133709][ T6575] netlink: 'syz.1.735': attribute type 11 has an invalid length. [ 191.236384][ T6575] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.735'. [ 191.437531][ T6552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.872275][ T6584] netlink: 10 bytes leftover after parsing attributes in process `syz.4.744'. [ 191.938917][ T6587] netlink: 'syz.2.746': attribute type 29 has an invalid length. [ 192.406049][ T6607] device sit0 entered promiscuous mode [ 193.320405][ T6624] netlink: 10 bytes leftover after parsing attributes in process `syz.2.759'. [ 193.986381][ T6636] FAULT_INJECTION: forcing a failure. [ 193.986381][ T6636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.020848][ T6636] CPU: 1 PID: 6636 Comm: syz.2.765 Not tainted syzkaller #0 [ 194.028222][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.038320][ T6636] Call Trace: [ 194.041635][ T6636] [ 194.044614][ T6636] dump_stack_lvl+0x188/0x24e [ 194.049365][ T6636] ? show_regs_print_info+0x12/0x12 [ 194.054625][ T6636] ? load_image+0x400/0x400 [ 194.059190][ T6636] ? __lock_acquire+0x7d10/0x7d10 [ 194.064270][ T6636] should_fail_ex+0x399/0x4d0 [ 194.069009][ T6636] _copy_from_user+0x2c/0x170 [ 194.073737][ T6636] iovec_from_user+0x143/0x360 [ 194.078542][ T6636] __import_iovec+0x6d/0x500 [ 194.083179][ T6636] import_iovec+0x6f/0xa0 [ 194.087558][ T6636] ___sys_sendmsg+0x252/0x360 [ 194.092285][ T6636] ? __sys_sendmsg+0x290/0x290 [ 194.097099][ T6636] ? __lock_acquire+0x7d10/0x7d10 [ 194.102175][ T6636] __se_sys_sendmsg+0x1bb/0x2a0 [ 194.107051][ T6636] ? __x64_sys_sendmsg+0x80/0x80 [ 194.112024][ T6636] ? lockdep_hardirqs_on+0x94/0x140 [ 194.117256][ T6636] do_syscall_64+0x4c/0xa0 [ 194.121710][ T6636] ? clear_bhb_loop+0x60/0xb0 [ 194.126430][ T6636] ? clear_bhb_loop+0x60/0xb0 [ 194.131141][ T6636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.137062][ T6636] RIP: 0033:0x7f0072b9acb9 [ 194.141505][ T6636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.161135][ T6636] RSP: 002b:00007f0073ad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.169570][ T6636] RAX: ffffffffffffffda RBX: 00007f0072e15fa0 RCX: 00007f0072b9acb9 [ 194.177563][ T6636] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 194.185557][ T6636] RBP: 00007f0073ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 194.193552][ T6636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.201544][ T6636] R13: 00007f0072e16038 R14: 00007f0072e15fa0 R15: 00007ffee2a6b318 [ 194.209549][ T6636] [ 194.219817][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.226220][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.591987][ T6659] netlink: 10 bytes leftover after parsing attributes in process `syz.2.773'. [ 196.281427][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 196.287648][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 196.293943][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 196.299994][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 196.321228][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 198.226008][ T6685] netlink: 'syz.1.777': attribute type 10 has an invalid length. [ 198.579951][ T6693] netlink: 'syz.2.784': attribute type 3 has an invalid length. [ 198.604491][ T6693] netlink: 'syz.2.784': attribute type 1 has an invalid length. [ 198.682853][ T6701] device sit0 entered promiscuous mode [ 199.364934][ T6716] netlink: 10 bytes leftover after parsing attributes in process `syz.4.794'. [ 199.581338][ T6731] device sit0 entered promiscuous mode [ 199.816377][ T6734] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.801'. [ 199.931975][ T6732] netlink: 'syz.3.798': attribute type 10 has an invalid length. [ 200.525841][ T6750] netlink: 'syz.2.807': attribute type 2 has an invalid length. [ 200.543975][ T6750] netlink: 'syz.2.807': attribute type 1 has an invalid length. [ 200.744506][ T6764] netlink: 132 bytes leftover after parsing attributes in process `syz.2.811'. [ 200.775498][ T6764] netlink: 'syz.2.811': attribute type 39 has an invalid length. [ 201.188742][ T6779] net_ratelimit: 281 callbacks suppressed [ 201.188763][ T6779] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 201.208633][ T6779] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 201.217910][ T6779] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 201.227232][ T6779] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 201.236401][ T6779] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 201.245546][ T6779] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 201.254718][ T6779] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 201.263879][ T6779] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 201.273037][ T6779] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 201.282183][ T6779] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 202.071045][ T6798] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.820'. [ 202.105281][ T6798] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.820'. [ 202.142081][ T6803] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.820'. [ 202.179811][ T6798] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.820'. [ 202.242053][ T6798] netlink: 'syz.1.820': attribute type 9 has an invalid length. [ 202.260140][ T6798] netlink: 44 bytes leftover after parsing attributes in process `syz.1.820'. [ 203.151052][ T6823] netlink: 'syz.0.831': attribute type 10 has an invalid length. [ 203.185661][ T6823] netlink: 156 bytes leftover after parsing attributes in process `syz.0.831'. [ 203.493389][ T6828] delete_channel: no stack [ 203.823114][ T6846] netlink: 'syz.2.839': attribute type 10 has an invalid length. [ 204.022837][ T6848] netlink: 'syz.1.840': attribute type 10 has an invalid length. [ 204.252000][ T6852] netlink: 'syz.3.842': attribute type 10 has an invalid length. [ 204.479226][ T6873] netlink: 'syz.0.850': attribute type 10 has an invalid length. [ 204.493516][ T6873] netlink: 55 bytes leftover after parsing attributes in process `syz.0.850'. [ 205.566226][ T6886] FAULT_INJECTION: forcing a failure. [ 205.566226][ T6886] name failslab, interval 1, probability 0, space 0, times 0 [ 205.579597][ T6886] CPU: 1 PID: 6886 Comm: syz.2.853 Not tainted syzkaller #0 [ 205.586944][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.597053][ T6886] Call Trace: [ 205.600374][ T6886] [ 205.603356][ T6886] dump_stack_lvl+0x188/0x24e [ 205.608102][ T6886] ? show_regs_print_info+0x12/0x12 [ 205.613409][ T6886] ? load_image+0x400/0x400 [ 205.617968][ T6886] ? __might_sleep+0xd0/0xd0 [ 205.622631][ T6886] ? __lock_acquire+0x7d10/0x7d10 [ 205.627711][ T6886] ? stack_trace_save+0xa6/0xf0 [ 205.632618][ T6886] should_fail_ex+0x399/0x4d0 [ 205.637363][ T6886] should_failslab+0x5/0x20 [ 205.641913][ T6886] slab_pre_alloc_hook+0x59/0x310 [ 205.647002][ T6886] kmem_cache_alloc_lru+0x49/0x2e0 [ 205.652139][ T6886] ? sock_alloc_inode+0x24/0xc0 [ 205.657023][ T6886] sock_alloc_inode+0x24/0xc0 [ 205.661730][ T6886] ? sockfs_init_fs_context+0xa0/0xa0 [ 205.667136][ T6886] new_inode_pseudo+0x5f/0x1c0 [ 205.671934][ T6886] __sock_create+0x129/0x940 [ 205.676573][ T6886] udp_sock_create6+0xd3/0x6a0 [ 205.681395][ T6886] ? lockdep_softirqs_off+0x430/0x430 [ 205.686813][ T6886] ? inet6_hash+0x80/0x80 [ 205.691721][ T6886] ? rcu_is_watching+0x11/0xa0 [ 205.696517][ T6886] ? rxrpc_lookup_local+0xd15/0x1530 [ 205.701927][ T6886] rxrpc_lookup_local+0xd8b/0x1530 [ 205.707077][ T6886] ? rxrpc_process_local_events+0xa50/0xa50 [ 205.713092][ T6886] ? lockdep_hardirqs_on+0x94/0x140 [ 205.718322][ T6886] ? _local_bh_enable+0xa0/0xa0 [ 205.723219][ T6886] rxrpc_sendmsg+0x3f1/0x890 [ 205.727848][ T6886] ? rxrpc_getsockopt+0x150/0x150 [ 205.732911][ T6886] ____sys_sendmsg+0x5be/0x970 [ 205.737706][ T6886] ? __sys_sendmsg_sock+0x30/0x30 [ 205.742750][ T6886] ? __import_iovec+0x315/0x500 [ 205.747680][ T6886] ? import_iovec+0x6f/0xa0 [ 205.752235][ T6886] ___sys_sendmsg+0x2a2/0x360 [ 205.757030][ T6886] ? __sys_sendmsg+0x290/0x290 [ 205.761838][ T6886] ? __lock_acquire+0x7d10/0x7d10 [ 205.767005][ T6886] __se_sys_sendmsg+0x1bb/0x2a0 [ 205.771890][ T6886] ? __x64_sys_sendmsg+0x80/0x80 [ 205.776889][ T6886] ? lockdep_hardirqs_on+0x94/0x140 [ 205.782116][ T6886] do_syscall_64+0x4c/0xa0 [ 205.786571][ T6886] ? clear_bhb_loop+0x60/0xb0 [ 205.791279][ T6886] ? clear_bhb_loop+0x60/0xb0 [ 205.796003][ T6886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.801928][ T6886] RIP: 0033:0x7f0072b9acb9 [ 205.806369][ T6886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.826004][ T6886] RSP: 002b:00007f0073ad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.834445][ T6886] RAX: ffffffffffffffda RBX: 00007f0072e15fa0 RCX: 00007f0072b9acb9 [ 205.842444][ T6886] RDX: 000000000404f444 RSI: 0000200000000080 RDI: 0000000000000003 [ 205.850472][ T6886] RBP: 00007f0073ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 205.858471][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.866465][ T6886] R13: 00007f0072e16038 R14: 00007f0072e15fa0 R15: 00007ffee2a6b318 [ 205.874479][ T6886] [ 206.049998][ T6884] device sit0 left promiscuous mode [ 206.053984][ T6881] netlink: 'syz.4.849': attribute type 11 has an invalid length. [ 206.073366][ T6881] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.849'. [ 206.109538][ T6887] device sit0 entered promiscuous mode [ 206.129365][ T6881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.844149][ T6897] netlink: 'syz.2.858': attribute type 4 has an invalid length. [ 206.916064][ T6897] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.858'. [ 206.946667][ T6904] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.860'. [ 206.986023][ T6904] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 207.039575][ T6902] netlink: 'syz.3.859': attribute type 10 has an invalid length. [ 207.432590][ T6920] netlink: 'syz.4.863': attribute type 10 has an invalid length. [ 207.883369][ T6925] netlink: 60 bytes leftover after parsing attributes in process `syz.0.868'. [ 207.957187][ T6925] netlink: 60 bytes leftover after parsing attributes in process `syz.0.868'. [ 207.978360][ T6932] netlink: 60 bytes leftover after parsing attributes in process `syz.0.868'. [ 208.069203][ T6934] netlink: 'syz.3.870': attribute type 4 has an invalid length. [ 208.101537][ T6934] netlink: 14345 bytes leftover after parsing attributes in process `syz.3.870'. [ 208.235483][ T6936] netlink: 10 bytes leftover after parsing attributes in process `syz.2.869'. [ 208.433797][ T6942] netlink: 'syz.1.872': attribute type 10 has an invalid length. [ 208.459589][ T6942] netlink: 156 bytes leftover after parsing attributes in process `syz.1.872'. [ 208.658319][ T6949] netlink: 'syz.0.876': attribute type 1 has an invalid length. [ 209.076573][ T6967] netlink: 'syz.3.883': attribute type 10 has an invalid length. [ 210.187816][ T6973] __nla_validate_parse: 1 callbacks suppressed [ 210.187853][ T6973] netlink: 10 bytes leftover after parsing attributes in process `syz.3.885'. [ 210.500361][ T6983] netlink: 'syz.0.886': attribute type 10 has an invalid length. [ 210.582033][ T6983] team0: Device bond0 is already an upper device of the team interface [ 211.569919][ T7016] netlink: 10 bytes leftover after parsing attributes in process `syz.4.902'. [ 212.555724][ T7048] netlink: 10 bytes leftover after parsing attributes in process `syz.3.914'. [ 212.713215][ T7054] FAULT_INJECTION: forcing a failure. [ 212.713215][ T7054] name failslab, interval 1, probability 0, space 0, times 0 [ 212.759529][ T7054] CPU: 1 PID: 7054 Comm: syz.2.917 Not tainted syzkaller #0 [ 212.766915][ T7054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.777023][ T7054] Call Trace: [ 212.780377][ T7054] [ 212.783353][ T7054] dump_stack_lvl+0x188/0x24e [ 212.788115][ T7054] ? show_regs_print_info+0x12/0x12 [ 212.793384][ T7054] ? load_image+0x400/0x400 [ 212.797957][ T7054] ? __might_sleep+0xd0/0xd0 [ 212.802627][ T7054] ? __lock_acquire+0x7d10/0x7d10 [ 212.807729][ T7054] should_fail_ex+0x399/0x4d0 [ 212.812484][ T7054] should_failslab+0x5/0x20 [ 212.817048][ T7054] slab_pre_alloc_hook+0x59/0x310 [ 212.822138][ T7054] kmem_cache_alloc_node+0x5a/0x320 [ 212.827386][ T7054] ? __alloc_skb+0xfc/0x7e0 [ 212.831960][ T7054] __alloc_skb+0xfc/0x7e0 [ 212.836333][ T7054] ? netlink_autobind+0xda/0x300 [ 212.841332][ T7054] netlink_sendmsg+0x654/0xbd0 [ 212.846154][ T7054] ? netlink_getsockopt+0x550/0x550 [ 212.851434][ T7054] ? aa_sock_msg_perm+0x94/0x150 [ 212.856421][ T7054] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 212.861735][ T7054] ? security_socket_sendmsg+0x7c/0xa0 [ 212.867233][ T7054] ? netlink_getsockopt+0x550/0x550 [ 212.872469][ T7054] ____sys_sendmsg+0x5be/0x970 [ 212.877316][ T7054] ? __sys_sendmsg_sock+0x30/0x30 [ 212.882374][ T7054] ? __import_iovec+0x315/0x500 [ 212.887268][ T7054] ? import_iovec+0x6f/0xa0 [ 212.891821][ T7054] ___sys_sendmsg+0x2a2/0x360 [ 212.896567][ T7054] ? __sys_sendmsg+0x290/0x290 [ 212.901393][ T7054] ? __lock_acquire+0x7d10/0x7d10 [ 212.906489][ T7054] __se_sys_sendmsg+0x1bb/0x2a0 [ 212.911370][ T7054] ? ct_nmi_exit+0x145/0x1c0 [ 212.915994][ T7054] ? __x64_sys_sendmsg+0x80/0x80 [ 212.920995][ T7054] ? lockdep_hardirqs_on+0x94/0x140 [ 212.926235][ T7054] do_syscall_64+0x4c/0xa0 [ 212.930695][ T7054] ? clear_bhb_loop+0x60/0xb0 [ 212.935413][ T7054] ? clear_bhb_loop+0x60/0xb0 [ 212.940124][ T7054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.946053][ T7054] RIP: 0033:0x7f0072b9acb9 [ 212.950500][ T7054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.970143][ T7054] RSP: 002b:00007f0073ad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.978603][ T7054] RAX: ffffffffffffffda RBX: 00007f0072e15fa0 RCX: 00007f0072b9acb9 [ 212.986612][ T7054] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 212.994614][ T7054] RBP: 00007f0073ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 213.002606][ T7054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.010616][ T7054] R13: 00007f0072e16038 R14: 00007f0072e15fa0 R15: 00007ffee2a6b318 [ 213.018651][ T7054] [ 213.183933][ T7065] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.921'. [ 213.790214][ T7088] netlink: 10 bytes leftover after parsing attributes in process `syz.1.929'. [ 215.635184][ T7128] netlink: 10 bytes leftover after parsing attributes in process `syz.3.944'. [ 220.539613][ T7187] netlink: 'syz.4.965': attribute type 4 has an invalid length. [ 220.561333][ T7187] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.965'. [ 222.547677][ T7193] device sit0 left promiscuous mode [ 222.606980][ T7194] device sit0 entered promiscuous mode [ 223.319030][ T7241] netlink: 10 bytes leftover after parsing attributes in process `syz.2.983'. [ 224.340373][ T7272] device sit0 left promiscuous mode [ 224.427028][ T7272] device sit0 entered promiscuous mode [ 224.473789][ T7276] FAULT_INJECTION: forcing a failure. [ 224.473789][ T7276] name failslab, interval 1, probability 0, space 0, times 0 [ 224.507290][ T7276] CPU: 1 PID: 7276 Comm: syz.1.994 Not tainted syzkaller #0 [ 224.514681][ T7276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.524791][ T7276] Call Trace: [ 224.528114][ T7276] [ 224.531101][ T7276] dump_stack_lvl+0x188/0x24e [ 224.535853][ T7276] ? show_regs_print_info+0x12/0x12 [ 224.541126][ T7276] ? load_image+0x400/0x400 [ 224.545697][ T7276] ? __might_sleep+0xd0/0xd0 [ 224.550358][ T7276] ? __lock_acquire+0x7d10/0x7d10 [ 224.555438][ T7276] ? trace_event_raw_event_lock+0x250/0x250 [ 224.561414][ T7276] should_fail_ex+0x399/0x4d0 [ 224.566159][ T7276] should_failslab+0x5/0x20 [ 224.570725][ T7276] slab_pre_alloc_hook+0x59/0x310 [ 224.575810][ T7276] ? sk_prot_alloc+0xe7/0x210 [ 224.580549][ T7276] __kmem_cache_alloc_node+0x4f/0x260 [ 224.585959][ T7276] ? sk_prot_alloc+0xe7/0x210 [ 224.590671][ T7276] __kmalloc+0xa0/0x240 [ 224.594869][ T7276] sk_prot_alloc+0xe7/0x210 [ 224.599400][ T7276] ? sk_alloc+0x20/0x340 [ 224.603688][ T7276] sk_alloc+0x36/0x340 [ 224.607791][ T7276] ? bpf_ctx_init+0x163/0x1a0 [ 224.612565][ T7276] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 224.618158][ T7276] bpf_prog_test_run_skb+0x35e/0x12a0 [ 224.623575][ T7276] ? __fget_files+0x28/0x4b0 [ 224.628196][ T7276] ? __fget_files+0x43d/0x4b0 [ 224.632918][ T7276] ? cpu_online+0xa0/0xa0 [ 224.637283][ T7276] bpf_prog_test_run+0x31e/0x390 [ 224.642265][ T7276] __sys_bpf+0x62b/0x780 [ 224.646553][ T7276] ? bpf_link_show_fdinfo+0x380/0x380 [ 224.651982][ T7276] ? lock_chain_count+0x20/0x20 [ 224.656957][ T7276] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 224.662981][ T7276] __x64_sys_bpf+0x78/0x90 [ 224.667441][ T7276] do_syscall_64+0x4c/0xa0 [ 224.671917][ T7276] ? clear_bhb_loop+0x60/0xb0 [ 224.676626][ T7276] ? clear_bhb_loop+0x60/0xb0 [ 224.681341][ T7276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.687275][ T7276] RIP: 0033:0x7fd018b9acb9 [ 224.691727][ T7276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.711364][ T7276] RSP: 002b:00007fd019b3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.719806][ T7276] RAX: ffffffffffffffda RBX: 00007fd018e15fa0 RCX: 00007fd018b9acb9 [ 224.727803][ T7276] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 224.735802][ T7276] RBP: 00007fd019b3b090 R08: 0000000000000000 R09: 0000000000000000 [ 224.743801][ T7276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.751796][ T7276] R13: 00007fd018e16038 R14: 00007fd018e15fa0 R15: 00007ffc787f9bf8 [ 224.759812][ T7276] [ 225.369610][ T7293] netlink: 10 bytes leftover after parsing attributes in process `syz.3.999'. [ 226.695813][ T7329] netlink: 'syz.3.1009': attribute type 29 has an invalid length. [ 226.798899][ T7333] FAULT_INJECTION: forcing a failure. [ 226.798899][ T7333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.816080][ T7333] CPU: 1 PID: 7333 Comm: syz.0.1013 Not tainted syzkaller #0 [ 226.823512][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.833610][ T7333] Call Trace: [ 226.836922][ T7333] [ 226.839890][ T7333] dump_stack_lvl+0x188/0x24e [ 226.844626][ T7333] ? show_regs_print_info+0x12/0x12 [ 226.849881][ T7333] ? load_image+0x400/0x400 [ 226.854434][ T7333] ? __lock_acquire+0x7d10/0x7d10 [ 226.859530][ T7333] should_fail_ex+0x399/0x4d0 [ 226.864267][ T7333] _copy_from_user+0x2c/0x170 [ 226.868994][ T7333] __sys_bpf+0x2ea/0x780 [ 226.873302][ T7333] ? bpf_link_show_fdinfo+0x380/0x380 [ 226.878736][ T7333] ? lock_chain_count+0x20/0x20 [ 226.883783][ T7333] __x64_sys_bpf+0x78/0x90 [ 226.888251][ T7333] do_syscall_64+0x4c/0xa0 [ 226.892717][ T7333] ? clear_bhb_loop+0x60/0xb0 [ 226.897451][ T7333] ? clear_bhb_loop+0x60/0xb0 [ 226.902174][ T7333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.908113][ T7333] RIP: 0033:0x7f2587b9acb9 [ 226.912572][ T7333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.932224][ T7333] RSP: 002b:00007f2588ad9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.940794][ T7333] RAX: ffffffffffffffda RBX: 00007f2587e15fa0 RCX: 00007f2587b9acb9 [ 226.948867][ T7333] RDX: 0000000000000010 RSI: 0000200000001440 RDI: 000000000000000f [ 226.956888][ T7333] RBP: 00007f2588ad9090 R08: 0000000000000000 R09: 0000000000000000 [ 226.964908][ T7333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.972923][ T7333] R13: 00007f2587e16038 R14: 00007f2587e15fa0 R15: 00007ffcb5f9aa78 [ 226.980969][ T7333] [ 229.079497][ T7329] netlink: 'syz.3.1009': attribute type 29 has an invalid length. [ 229.101127][ T7331] netlink: 'syz.3.1009': attribute type 29 has an invalid length. [ 229.123408][ T7341] device sit0 left promiscuous mode [ 229.209349][ T7348] device sit0 entered promiscuous mode [ 229.411155][ T7354] netlink: 'syz.1.1016': attribute type 17 has an invalid length. [ 229.419089][ T7354] netlink: 'syz.1.1016': attribute type 16 has an invalid length. [ 229.427151][ T7354] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1016'. [ 229.490997][ T7352] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1017'. [ 229.801422][ T9] wlan1: Trigger new scan to find an IBSS to join [ 230.960523][ T7388] netlink: 'syz.1.1026': attribute type 1 has an invalid length. [ 231.388082][ T7406] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1033'. [ 232.517236][ T7441] netlink: 'syz.3.1046': attribute type 1 has an invalid length. [ 234.843963][ T4366] wlan1: Trigger new scan to find an IBSS to join [ 235.523147][ T7501] FAULT_INJECTION: forcing a failure. [ 235.523147][ T7501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.573466][ T7501] CPU: 1 PID: 7501 Comm: syz.3.1067 Not tainted syzkaller #0 [ 235.580935][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.591050][ T7501] Call Trace: [ 235.594374][ T7501] [ 235.597353][ T7501] dump_stack_lvl+0x188/0x24e [ 235.602094][ T7501] ? show_regs_print_info+0x12/0x12 [ 235.607360][ T7501] ? load_image+0x400/0x400 [ 235.611930][ T7501] ? __lock_acquire+0x7d10/0x7d10 [ 235.617014][ T7501] should_fail_ex+0x399/0x4d0 [ 235.622101][ T7501] _copy_from_user+0x2c/0x170 [ 235.626852][ T7501] ___sys_sendmsg+0x1c3/0x360 [ 235.631583][ T7501] ? __sys_sendmsg+0x290/0x290 [ 235.636424][ T7501] ? trace_call_bpf+0xbf/0x6b0 [ 235.641320][ T7501] __se_sys_sendmsg+0x1bb/0x2a0 [ 235.646228][ T7501] ? __x64_sys_sendmsg+0x80/0x80 [ 235.651231][ T7501] ? lockdep_hardirqs_on+0x94/0x140 [ 235.656490][ T7501] do_syscall_64+0x4c/0xa0 [ 235.660962][ T7501] ? clear_bhb_loop+0x60/0xb0 [ 235.665691][ T7501] ? clear_bhb_loop+0x60/0xb0 [ 235.670477][ T7501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.676477][ T7501] RIP: 0033:0x7f399fb9acb9 [ 235.680941][ T7501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.700615][ T7501] RSP: 002b:00007f39a09f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.709082][ T7501] RAX: ffffffffffffffda RBX: 00007f399fe16090 RCX: 00007f399fb9acb9 [ 235.717103][ T7501] RDX: 0000000000000000 RSI: 0000200000001b00 RDI: 000000000000000f [ 235.725106][ T7501] RBP: 00007f39a09f8090 R08: 0000000000000000 R09: 0000000000000000 [ 235.733110][ T7501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.741113][ T7501] R13: 00007f399fe16128 R14: 00007f399fe16090 R15: 00007ffe99e451a8 [ 235.749131][ T7501] [ 236.070833][ T6649] wlan1: Creating new IBSS network, BSSID ca:de:dc:8d:02:27 [ 236.646687][ T7511] netlink: 'syz.3.1070': attribute type 6 has an invalid length. [ 236.659136][ T7511] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1070'. [ 238.058664][ T7468] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1058'. [ 238.068704][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1058'. [ 239.031545][ T7559] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1090'. [ 239.066006][ T7563] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1092'. [ 239.078780][ T7563] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1092'. [ 239.115416][ T7560] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1090'. [ 239.129505][ T7564] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1090'. [ 239.154087][ T7565] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1092'. [ 239.198423][ T7563] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1092'. [ 239.243015][ T7566] netlink: 'syz.2.1091': attribute type 6 has an invalid length. [ 241.188239][ T7611] netlink: 'syz.3.1109': attribute type 6 has an invalid length. [ 244.364428][ T7631] device sit0 left promiscuous mode [ 244.520793][ T7632] __nla_validate_parse: 8 callbacks suppressed [ 244.520809][ T7632] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1117'. [ 244.561796][ T7635] device sit0 entered promiscuous mode [ 244.940580][ T7656] FAULT_INJECTION: forcing a failure. [ 244.940580][ T7656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.960227][ T7656] CPU: 0 PID: 7656 Comm: syz.2.1125 Not tainted syzkaller #0 [ 244.967701][ T7656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.977897][ T7656] Call Trace: [ 244.981222][ T7656] [ 244.984282][ T7656] dump_stack_lvl+0x188/0x24e [ 244.989021][ T7656] ? show_regs_print_info+0x12/0x12 [ 244.994275][ T7656] ? load_image+0x400/0x400 [ 244.998849][ T7656] ? __lock_acquire+0x7d10/0x7d10 [ 245.003941][ T7656] should_fail_ex+0x399/0x4d0 [ 245.008685][ T7656] _copy_to_user+0x2c/0x130 [ 245.013265][ T7656] bpf_test_finish+0x198/0x600 [ 245.018091][ T7656] ? convert___skb_to_skb+0x580/0x580 [ 245.023518][ T7656] ? convert_skb_to___skb+0x420/0x420 [ 245.029013][ T7656] ? bpf_test_init+0x119/0x140 [ 245.033834][ T7656] bpf_prog_test_run_xdp+0x80a/0xf10 [ 245.039212][ T7656] ? dev_put+0x80/0x80 [ 245.043349][ T7656] ? dev_put+0x80/0x80 [ 245.047477][ T7656] bpf_prog_test_run+0x31e/0x390 [ 245.052476][ T7656] __sys_bpf+0x62b/0x780 [ 245.056782][ T7656] ? bpf_link_show_fdinfo+0x380/0x380 [ 245.062236][ T7656] ? lock_chain_count+0x20/0x20 [ 245.067150][ T7656] __x64_sys_bpf+0x78/0x90 [ 245.071627][ T7656] do_syscall_64+0x4c/0xa0 [ 245.076101][ T7656] ? clear_bhb_loop+0x60/0xb0 [ 245.080843][ T7656] ? clear_bhb_loop+0x60/0xb0 [ 245.085577][ T7656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.091518][ T7656] RIP: 0033:0x7f0072b9acb9 [ 245.095982][ T7656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.115726][ T7656] RSP: 002b:00007f0073ad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.124202][ T7656] RAX: ffffffffffffffda RBX: 00007f0072e15fa0 RCX: 00007f0072b9acb9 [ 245.132224][ T7656] RDX: 000000000000004c RSI: 0000200000000440 RDI: 000000000000000a [ 245.140248][ T7656] RBP: 00007f0073ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 245.148274][ T7656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.156291][ T7656] R13: 00007f0072e16038 R14: 00007f0072e15fa0 R15: 00007ffee2a6b318 [ 245.164423][ T7656] [ 245.919177][ T7672] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1130'. [ 245.934845][ T7678] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1132'. [ 246.039205][ T7679] netlink: 'syz.0.1130': attribute type 10 has an invalid length. [ 246.117526][ T7679] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1130'. [ 246.166761][ T7679] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 246.231347][ T7679] net_ratelimit: 3257 callbacks suppressed [ 246.231366][ T7679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.338742][ T7682] device sit0 left promiscuous mode [ 246.470803][ T7688] device sit0 entered promiscuous mode [ 249.767286][ T7710] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1142'. [ 249.895781][ T7706] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1141'. [ 251.057330][ T7731] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1149'. [ 251.154855][ T7731] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1149'. [ 251.176391][ T7732] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1149'. [ 251.193279][ T7738] FAULT_INJECTION: forcing a failure. [ 251.193279][ T7738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.237756][ T7739] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1149'. [ 251.258029][ T7738] CPU: 0 PID: 7738 Comm: syz.4.1150 Not tainted syzkaller #0 [ 251.265509][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.275614][ T7738] Call Trace: [ 251.278980][ T7738] [ 251.281961][ T7738] dump_stack_lvl+0x188/0x24e [ 251.286706][ T7738] ? show_regs_print_info+0x12/0x12 [ 251.291980][ T7738] ? load_image+0x400/0x400 [ 251.296544][ T7738] ? __might_fault+0xa6/0x120 [ 251.301281][ T7738] should_fail_ex+0x399/0x4d0 [ 251.306037][ T7738] copyin+0x1b/0x120 [ 251.309994][ T7738] _copy_from_iter+0x447/0x1130 [ 251.314951][ T7738] ? copyout_mc+0x110/0x110 [ 251.319597][ T7738] ? __virt_addr_valid+0x188/0x540 [ 251.324769][ T7738] ? __virt_addr_valid+0x188/0x540 [ 251.329971][ T7738] ? __virt_addr_valid+0x465/0x540 [ 251.335153][ T7738] ? __phys_addr_symbol+0x2b/0x70 [ 251.340234][ T7738] ? __check_object_size+0x500/0xa40 [ 251.345572][ T7738] tipc_msg_build+0x7f1/0xde0 [ 251.350311][ T7738] __tipc_sendmsg+0x1c91/0x2c90 [ 251.355299][ T7738] ? rht_lock+0x150/0x150 [ 251.359687][ T7738] ? verify_lock_unused+0x140/0x140 [ 251.364964][ T7738] ? wait_woken+0x1c0/0x1c0 [ 251.369582][ T7738] ? mark_lock+0x94/0x320 [ 251.373981][ T7738] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 251.380030][ T7738] ? __local_bh_enable_ip+0x136/0x1c0 [ 251.385462][ T7738] ? lockdep_hardirqs_on+0x94/0x140 [ 251.390721][ T7738] ? __local_bh_enable_ip+0x136/0x1c0 [ 251.396148][ T7738] ? _local_bh_enable+0xa0/0xa0 [ 251.401065][ T7738] tipc_sendmsg+0x51/0x70 [ 251.405455][ T7738] ? tipc_recvmsg+0x1400/0x1400 [ 251.410446][ T7738] ____sys_sendmsg+0x5be/0x970 [ 251.415267][ T7738] ? __sys_sendmsg_sock+0x30/0x30 [ 251.420366][ T7738] ? __import_iovec+0x315/0x500 [ 251.425268][ T7738] ? import_iovec+0x6f/0xa0 [ 251.429817][ T7738] ___sys_sendmsg+0x2a2/0x360 [ 251.434550][ T7738] ? __sys_sendmsg+0x290/0x290 [ 251.439389][ T7738] ? __lock_acquire+0x7d10/0x7d10 [ 251.444493][ T7738] __se_sys_sendmsg+0x1bb/0x2a0 [ 251.449653][ T7738] ? ct_nmi_exit+0x145/0x1c0 [ 251.454296][ T7738] ? __x64_sys_sendmsg+0x80/0x80 [ 251.459304][ T7738] ? lockdep_hardirqs_on+0x94/0x140 [ 251.465003][ T7738] do_syscall_64+0x4c/0xa0 [ 251.469479][ T7738] ? clear_bhb_loop+0x60/0xb0 [ 251.474217][ T7738] ? clear_bhb_loop+0x60/0xb0 [ 251.478957][ T7738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.484912][ T7738] RIP: 0033:0x7f5c25b9acb9 [ 251.489384][ T7738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.509048][ T7738] RSP: 002b:00007f5c269aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.517543][ T7738] RAX: ffffffffffffffda RBX: 00007f5c25e15fa0 RCX: 00007f5c25b9acb9 [ 251.525656][ T7738] RDX: 0000000000000000 RSI: 0000200000003a00 RDI: 0000000000000004 [ 251.533703][ T7738] RBP: 00007f5c269aa090 R08: 0000000000000000 R09: 0000000000000000 [ 251.541718][ T7738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.549732][ T7738] R13: 00007f5c25e16038 R14: 00007f5c25e15fa0 R15: 00007fffb7f723f8 [ 251.557777][ T7738] [ 253.984752][ T7745] device sit0 left promiscuous mode [ 254.099285][ T7748] device sit0 entered promiscuous mode [ 254.277007][ T7756] syz.2.1158[7756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.277130][ T7756] syz.2.1158[7756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.645027][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.664902][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.948507][ T7763] netlink: 'syz.2.1160': attribute type 10 has an invalid length. [ 261.970741][ T7763] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1160'. [ 262.325961][ T7798] device sit0 left promiscuous mode [ 262.440947][ T7801] device sit0 entered promiscuous mode [ 262.554986][ T7818] netlink: 'syz.3.1179': attribute type 2 has an invalid length. [ 262.565312][ T7818] netlink: 'syz.3.1179': attribute type 8 has an invalid length. [ 262.576975][ T7818] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1179'. [ 262.590595][ T7827] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.598175][ T7827] IPv6: NLM_F_CREATE should be set when creating new route [ 262.605642][ T7827] IPv6: NLM_F_CREATE should be set when creating new route [ 262.612952][ T7827] IPv6: NLM_F_CREATE should be set when creating new route [ 262.916242][ T7850] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1188'. [ 262.948590][ T7852] netlink: 'syz.0.1190': attribute type 10 has an invalid length. [ 266.508176][ T7868] FAULT_INJECTION: forcing a failure. [ 266.508176][ T7868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.578877][ T7868] CPU: 0 PID: 7868 Comm: syz.3.1195 Not tainted syzkaller #0 [ 266.586460][ T7868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 266.596746][ T7868] Call Trace: [ 266.600070][ T7868] [ 266.603047][ T7868] dump_stack_lvl+0x188/0x24e [ 266.607807][ T7868] ? show_regs_print_info+0x12/0x12 [ 266.613076][ T7868] ? load_image+0x400/0x400 [ 266.617700][ T7868] ? __lock_acquire+0x7d10/0x7d10 [ 266.622883][ T7868] ? snprintf+0xe5/0x140 [ 266.627198][ T7868] should_fail_ex+0x399/0x4d0 [ 266.631957][ T7868] _copy_to_user+0x2c/0x130 [ 266.636521][ T7868] simple_read_from_buffer+0xe3/0x150 [ 266.641966][ T7868] proc_fail_nth_read+0x1a6/0x220 [ 266.647057][ T7868] ? proc_fault_inject_write+0x310/0x310 [ 266.652755][ T7868] ? fsnotify_perm+0x248/0x550 [ 266.657583][ T7868] ? proc_fault_inject_write+0x310/0x310 [ 266.663363][ T7868] vfs_read+0x2de/0xa00 [ 266.667609][ T7868] ? kernel_read+0x1e0/0x1e0 [ 266.672272][ T7868] ? __fget_files+0x28/0x4b0 [ 266.676958][ T7868] ? __fget_files+0x28/0x4b0 [ 266.681624][ T7868] ? __fget_files+0x43d/0x4b0 [ 266.686392][ T7868] ? __fdget_pos+0x2ae/0x360 [ 266.691042][ T7868] ? ksys_read+0x71/0x250 [ 266.695453][ T7868] ksys_read+0x14c/0x250 [ 266.699750][ T7876] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1198'. [ 266.699774][ T7868] ? vfs_write+0xa30/0xa30 [ 266.713471][ T7868] ? lockdep_hardirqs_on+0x94/0x140 [ 266.718777][ T7868] do_syscall_64+0x4c/0xa0 [ 266.723253][ T7868] ? clear_bhb_loop+0x60/0xb0 [ 266.727991][ T7868] ? clear_bhb_loop+0x60/0xb0 [ 266.732733][ T7868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.738730][ T7868] RIP: 0033:0x7f399fb5b58e [ 266.743195][ T7868] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 266.760294][ T7876] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 266.762835][ T7868] RSP: 002b:00007f39a0a18fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.762868][ T7868] RAX: ffffffffffffffda RBX: 00007f39a0a196c0 RCX: 00007f399fb5b58e [ 266.762887][ T7868] RDX: 000000000000000f RSI: 00007f39a0a190a0 RDI: 0000000000000005 [ 266.762903][ T7868] RBP: 00007f39a0a19090 R08: 0000000000000000 R09: 0000000000000000 [ 266.762918][ T7868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.762934][ T7868] R13: 00007f399fe16038 R14: 00007f399fe15fa0 R15: 00007ffe99e451a8 [ 266.762982][ T7868] [ 267.025645][ T7879] device sit0 left promiscuous mode [ 267.211118][ T7880] device sit0 entered promiscuous mode [ 267.439557][ T7891] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1204'. [ 268.629697][ T7911] netlink: 'syz.1.1208': attribute type 6 has an invalid length. [ 268.660978][ T7911] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1208'. [ 268.933325][ T7918] FAULT_INJECTION: forcing a failure. [ 268.933325][ T7918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.991589][ T7918] CPU: 0 PID: 7918 Comm: syz.3.1211 Not tainted syzkaller #0 [ 268.999087][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 269.009200][ T7918] Call Trace: [ 269.012534][ T7918] [ 269.015587][ T7918] dump_stack_lvl+0x188/0x24e [ 269.020317][ T7918] ? show_regs_print_info+0x12/0x12 [ 269.025568][ T7918] ? load_image+0x400/0x400 [ 269.030118][ T7918] ? __lock_acquire+0x7d10/0x7d10 [ 269.035187][ T7918] ? snprintf+0xe5/0x140 [ 269.039490][ T7918] should_fail_ex+0x399/0x4d0 [ 269.044226][ T7918] _copy_to_user+0x2c/0x130 [ 269.048773][ T7918] simple_read_from_buffer+0xe3/0x150 [ 269.054189][ T7918] proc_fail_nth_read+0x1a6/0x220 [ 269.059249][ T7918] ? proc_fault_inject_write+0x310/0x310 [ 269.064918][ T7918] ? fsnotify_perm+0x248/0x550 [ 269.069707][ T7918] ? proc_fault_inject_write+0x310/0x310 [ 269.075364][ T7918] vfs_read+0x2de/0xa00 [ 269.079557][ T7918] ? kernel_read+0x1e0/0x1e0 [ 269.084181][ T7918] ? __fget_files+0x28/0x4b0 [ 269.088810][ T7918] ? __fget_files+0x28/0x4b0 [ 269.093433][ T7918] ? __fget_files+0x43d/0x4b0 [ 269.098152][ T7918] ? __fdget_pos+0x2ae/0x360 [ 269.102769][ T7918] ? ksys_read+0x71/0x250 [ 269.107129][ T7918] ksys_read+0x14c/0x250 [ 269.111411][ T7918] ? vfs_write+0xa30/0xa30 [ 269.115865][ T7918] ? lockdep_hardirqs_on+0x94/0x140 [ 269.121096][ T7918] do_syscall_64+0x4c/0xa0 [ 269.125559][ T7918] ? clear_bhb_loop+0x60/0xb0 [ 269.130285][ T7918] ? clear_bhb_loop+0x60/0xb0 [ 269.135085][ T7918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.141015][ T7918] RIP: 0033:0x7f399fb5b58e [ 269.145457][ T7918] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 269.165114][ T7918] RSP: 002b:00007f39a0a18fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 269.173579][ T7918] RAX: ffffffffffffffda RBX: 00007f39a0a196c0 RCX: 00007f399fb5b58e [ 269.181664][ T7918] RDX: 000000000000000f RSI: 00007f39a0a190a0 RDI: 0000000000000006 [ 269.189657][ T7918] RBP: 00007f39a0a19090 R08: 0000000000000000 R09: 0000000000000000 [ 269.197659][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.205744][ T7918] R13: 00007f399fe16038 R14: 00007f399fe15fa0 R15: 00007ffe99e451a8 [ 269.213761][ T7918] [ 269.219076][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 269.357254][ T7913] delete_channel: no stack [ 269.905823][ T7934] device sit0 left promiscuous mode [ 270.639179][ T7935] device sit0 entered promiscuous mode [ 270.999997][ T7965] netlink: 'syz.2.1225': attribute type 6 has an invalid length. [ 271.037929][ T7965] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1225'. [ 271.077924][ T7960] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1226'. [ 271.284824][ T7969] netlink: 'syz.1.1229': attribute type 11 has an invalid length. [ 271.308400][ T7971] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1229'. [ 272.085476][ T7979] FAULT_INJECTION: forcing a failure. [ 272.085476][ T7979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.201026][ T7979] CPU: 0 PID: 7979 Comm: syz.2.1232 Not tainted syzkaller #0 [ 272.208490][ T7979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.218585][ T7979] Call Trace: [ 272.221999][ T7979] [ 272.224977][ T7979] dump_stack_lvl+0x188/0x24e [ 272.229714][ T7979] ? show_regs_print_info+0x12/0x12 [ 272.234978][ T7979] ? load_image+0x400/0x400 [ 272.239538][ T7979] ? __lock_acquire+0x7d10/0x7d10 [ 272.244630][ T7979] should_fail_ex+0x399/0x4d0 [ 272.249479][ T7979] _copy_from_user+0x2c/0x170 [ 272.254218][ T7979] __sys_bpf+0x2ea/0x780 [ 272.258516][ T7979] ? bpf_link_show_fdinfo+0x380/0x380 [ 272.263975][ T7979] ? lock_chain_count+0x20/0x20 [ 272.268890][ T7979] __x64_sys_bpf+0x78/0x90 [ 272.273370][ T7979] do_syscall_64+0x4c/0xa0 [ 272.277844][ T7979] ? clear_bhb_loop+0x60/0xb0 [ 272.282578][ T7979] ? clear_bhb_loop+0x60/0xb0 [ 272.287316][ T7979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.293532][ T7979] RIP: 0033:0x7f0072b9acb9 [ 272.298095][ T7979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.317848][ T7979] RSP: 002b:00007f0073ad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 272.326425][ T7979] RAX: ffffffffffffffda RBX: 00007f0072e15fa0 RCX: 00007f0072b9acb9 [ 272.334453][ T7979] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 272.342474][ T7979] RBP: 00007f0073ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 272.350497][ T7979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.358534][ T7979] R13: 00007f0072e16038 R14: 00007f0072e15fa0 R15: 00007ffee2a6b318 [ 272.366581][ T7979] [ 273.212926][ T7999] device sit0 left promiscuous mode [ 273.393184][ T7995] device sit0 entered promiscuous mode [ 273.541027][ T8006] netlink: 'syz.0.1236': attribute type 29 has an invalid length. [ 273.671017][ T8006] netlink: 'syz.0.1236': attribute type 29 has an invalid length. [ 274.131929][ T8017] netlink: 'syz.1.1243': attribute type 6 has an invalid length. [ 274.166541][ T8017] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1243'. [ 274.665807][ T8031] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1246'. [ 275.091268][ T8045] device sit0 left promiscuous mode [ 275.350821][ T8052] device sit0 entered promiscuous mode [ 275.504096][ T8061] netlink: 'syz.3.1257': attribute type 6 has an invalid length. [ 275.561086][ T8061] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1257'. [ 276.217424][ T8069] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1261'. [ 276.816240][ T8090] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.1270'. [ 276.840822][ T8090] netlink: zone id is out of range [ 276.846190][ T8090] netlink: zone id is out of range [ 276.860799][ T8090] netlink: zone id is out of range [ 276.870023][ T8090] netlink: zone id is out of range [ 276.915875][ T8090] netlink: zone id is out of range [ 276.941130][ T8090] netlink: zone id is out of range [ 276.960418][ T8090] netlink: zone id is out of range [ 276.975211][ T8090] netlink: zone id is out of range [ 276.995335][ T8095] netlink: 'syz.2.1272': attribute type 6 has an invalid length. [ 277.010906][ T8090] netlink: zone id is out of range [ 277.025116][ T8090] netlink: get zone limit has 8 unknown bytes [ 277.040774][ T8095] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1272'. [ 277.196565][ T8100] device sit0 left promiscuous mode [ 277.281806][ T8101] device sit0 entered promiscuous mode [ 277.544749][ T8112] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1277'. [ 278.556294][ T8142] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1287'. [ 278.567041][ T8139] sctp: [Deprecated]: syz.0.1286 (pid 8139) Use of int in maxseg socket option. [ 278.567041][ T8139] Use struct sctp_assoc_value instead [ 278.731960][ T8146] device sit0 entered promiscuous mode [ 280.026389][ T8176] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1299'. [ 280.913239][ T8186] device sit0 left promiscuous mode [ 281.070395][ T8187] device sit0 entered promiscuous mode [ 282.393368][ T8219] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1313'. [ 282.471289][ T8219] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 282.487714][ T8222] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1315'. [ 282.569897][ T8223] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1314'. [ 285.530480][ T8264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1328'. [ 287.723525][ T8247] device wg2 left promiscuous mode [ 287.749577][ T8248] device wg2 entered promiscuous mode [ 287.759895][ T8264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1328'. [ 287.769849][ T8277] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1330'. [ 287.894581][ T8280] device syzkaller0 entered promiscuous mode [ 293.676706][ T8287] device sit0 left promiscuous mode [ 293.722968][ T8292] device sit0 entered promiscuous mode [ 293.820724][ T8318] netlink: 'syz.1.1346': attribute type 10 has an invalid length. [ 293.854273][ T8318] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1346'. [ 293.875573][ T8318] device dummy0 entered promiscuous mode [ 293.893142][ T8318] bond0: (slave dummy0): Releasing backup interface [ 293.938125][ T8318] bridge0: port 3(dummy0) entered blocking state [ 293.968573][ T8318] bridge0: port 3(dummy0) entered disabled state [ 293.987531][ T8319] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1345'. [ 294.211386][ T8328] netlink: 'syz.4.1348': attribute type 10 has an invalid length. [ 294.241046][ T8328] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1348'. [ 294.343463][ T8328] device team0 entered promiscuous mode [ 294.349105][ T8328] device team_slave_0 entered promiscuous mode [ 294.459684][ T8328] device team_slave_1 entered promiscuous mode [ 294.558153][ T8328] device bond0 entered promiscuous mode [ 294.664607][ T8328] device bond_slave_0 entered promiscuous mode [ 294.725408][ T8328] device bond_slave_1 entered promiscuous mode [ 294.801738][ T8328] bridge0: port 3(team0) entered blocking state [ 295.013953][ T8328] bridge0: port 3(team0) entered disabled state [ 295.064382][ T8328] bridge0: port 3(team0) entered blocking state [ 295.071053][ T8328] bridge0: port 3(team0) entered forwarding state [ 295.813992][ T8348] device sit0 left promiscuous mode [ 296.208557][ T8350] device sit0 entered promiscuous mode [ 296.721581][ T8370] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1360'. [ 296.908391][ T8373] netlink: 'syz.1.1363': attribute type 21 has an invalid length. [ 296.916863][ T8373] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1363'. [ 296.931571][ T8373] netlink: 'syz.1.1363': attribute type 4 has an invalid length. [ 296.984814][ T8373] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1363'. [ 297.560160][ T8378] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1364'. [ 297.868895][ T8391] IPv6: NLM_F_CREATE should be specified when creating new route [ 297.876997][ T8391] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1369'. [ 298.460929][ T8406] device sit0 left promiscuous mode [ 298.588968][ T8409] device sit0 entered promiscuous mode [ 298.800969][ T8419] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1378'. [ 299.848217][ T8442] device sit0 left promiscuous mode [ 300.289720][ T8445] device sit0 entered promiscuous mode [ 300.903148][ T8452] FAULT_INJECTION: forcing a failure. [ 300.903148][ T8452] name failslab, interval 1, probability 0, space 0, times 0 [ 300.961186][ T8452] CPU: 1 PID: 8452 Comm: syz.4.1390 Not tainted syzkaller #0 [ 300.968649][ T8452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.978757][ T8452] Call Trace: [ 300.982079][ T8452] [ 300.985055][ T8452] dump_stack_lvl+0x188/0x24e [ 300.989888][ T8452] ? show_regs_print_info+0x12/0x12 [ 300.995194][ T8452] ? load_image+0x400/0x400 [ 300.999771][ T8452] ? verify_lock_unused+0x140/0x140 [ 301.005131][ T8452] should_fail_ex+0x399/0x4d0 [ 301.009970][ T8452] should_failslab+0x5/0x20 [ 301.014543][ T8452] slab_pre_alloc_hook+0x59/0x310 [ 301.019631][ T8452] kmem_cache_alloc+0x56/0x2f0 [ 301.024446][ T8452] ? skb_clone+0x1e7/0x370 [ 301.028920][ T8452] skb_clone+0x1e7/0x370 [ 301.033213][ T8452] __netlink_deliver_tap+0x3ed/0x800 [ 301.038544][ T8452] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.043772][ T8452] netlink_deliver_tap+0x19c/0x1b0 [ 301.048909][ T8452] netlink_unicast+0x728/0x8d0 [ 301.053711][ T8452] netlink_sendmsg+0x8ad/0xbd0 [ 301.058506][ T8452] ? netlink_getsockopt+0x550/0x550 [ 301.063733][ T8452] ? aa_sock_msg_perm+0x94/0x150 [ 301.068695][ T8452] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 301.074002][ T8452] ? security_socket_sendmsg+0x7c/0xa0 [ 301.079499][ T8452] ? netlink_getsockopt+0x550/0x550 [ 301.084723][ T8452] ____sys_sendmsg+0x5be/0x970 [ 301.089521][ T8452] ? __sys_sendmsg_sock+0x30/0x30 [ 301.094566][ T8452] ? __import_iovec+0x315/0x500 [ 301.099457][ T8452] ? import_iovec+0x6f/0xa0 [ 301.103985][ T8452] ___sys_sendmsg+0x2a2/0x360 [ 301.108687][ T8452] ? __sys_sendmsg+0x290/0x290 [ 301.113497][ T8452] ? __lock_acquire+0x7d10/0x7d10 [ 301.118574][ T8452] __se_sys_sendmsg+0x1bb/0x2a0 [ 301.123450][ T8452] ? __x64_sys_sendmsg+0x80/0x80 [ 301.128431][ T8452] ? lockdep_hardirqs_on+0x94/0x140 [ 301.133744][ T8452] do_syscall_64+0x4c/0xa0 [ 301.138212][ T8452] ? clear_bhb_loop+0x60/0xb0 [ 301.142917][ T8452] ? clear_bhb_loop+0x60/0xb0 [ 301.147624][ T8452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.153548][ T8452] RIP: 0033:0x7f5c25b9acb9 [ 301.158000][ T8452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.177630][ T8452] RSP: 002b:00007f5c269aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.186071][ T8452] RAX: ffffffffffffffda RBX: 00007f5c25e15fa0 RCX: 00007f5c25b9acb9 [ 301.194243][ T8452] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 301.202238][ T8452] RBP: 00007f5c269aa090 R08: 0000000000000000 R09: 0000000000000000 [ 301.210229][ T8452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.218222][ T8452] R13: 00007f5c25e16038 R14: 00007f5c25e15fa0 R15: 00007fffb7f723f8 [ 301.226231][ T8452] [ 301.230412][ T4366] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 301.691684][ T8452] IPv6: NLM_F_CREATE should be specified when creating new route [ 301.748170][ T8452] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1390'. [ 301.775076][ T8467] device sit0 left promiscuous mode [ 301.885876][ T8468] device sit0 entered promiscuous mode [ 302.312584][ T8473] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1397'. [ 302.333106][ T8484] device sit0 left promiscuous mode [ 302.474106][ T8489] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1403'. [ 302.532330][ T8482] device sit0 entered promiscuous mode [ 302.765117][ T8489] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1403'. [ 302.889625][ T8491] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1403'. [ 302.916821][ T8492] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1403'. [ 305.768670][ T8528] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1416'. [ 306.085333][ T8539] sctp: [Deprecated]: syz.2.1420 (pid 8539) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.085333][ T8539] Use struct sctp_sack_info instead [ 306.200038][ T8535] netlink: 'syz.4.1417': attribute type 10 has an invalid length. [ 306.224494][ T8539] FAULT_INJECTION: forcing a failure. [ 306.224494][ T8539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.281004][ T8539] CPU: 1 PID: 8539 Comm: syz.2.1420 Not tainted syzkaller #0 [ 306.288493][ T8539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.298628][ T8539] Call Trace: [ 306.301950][ T8539] [ 306.304925][ T8539] dump_stack_lvl+0x188/0x24e [ 306.309671][ T8539] ? show_regs_print_info+0x12/0x12 [ 306.314933][ T8539] ? load_image+0x400/0x400 [ 306.319503][ T8539] ? __lock_acquire+0x7d10/0x7d10 [ 306.324581][ T8539] ? snprintf+0xe5/0x140 [ 306.328876][ T8539] should_fail_ex+0x399/0x4d0 [ 306.333721][ T8539] _copy_to_user+0x2c/0x130 [ 306.338280][ T8539] simple_read_from_buffer+0xe3/0x150 [ 306.343814][ T8539] proc_fail_nth_read+0x1a6/0x220 [ 306.348901][ T8539] ? proc_fault_inject_write+0x310/0x310 [ 306.354593][ T8539] ? fsnotify_perm+0x248/0x550 [ 306.359407][ T8539] ? proc_fault_inject_write+0x310/0x310 [ 306.365107][ T8539] vfs_read+0x2de/0xa00 [ 306.369334][ T8539] ? kernel_read+0x1e0/0x1e0 [ 306.373988][ T8539] ? __fget_files+0x28/0x4b0 [ 306.378649][ T8539] ? __fget_files+0x28/0x4b0 [ 306.383297][ T8539] ? __fget_files+0x43d/0x4b0 [ 306.388056][ T8539] ? __fdget_pos+0x2ae/0x360 [ 306.392701][ T8539] ? ksys_read+0x71/0x250 [ 306.397125][ T8539] ksys_read+0x14c/0x250 [ 306.401520][ T8539] ? vfs_write+0xa30/0xa30 [ 306.406005][ T8539] ? trace_sys_enter+0x22/0x80 [ 306.410834][ T8539] do_syscall_64+0x4c/0xa0 [ 306.415302][ T8539] ? clear_bhb_loop+0x60/0xb0 [ 306.420028][ T8539] ? clear_bhb_loop+0x60/0xb0 [ 306.424761][ T8539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.430720][ T8539] RIP: 0033:0x7f0072b5b58e [ 306.435195][ T8539] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 306.454859][ T8539] RSP: 002b:00007f0073ad5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 306.463329][ T8539] RAX: ffffffffffffffda RBX: 00007f0073ad66c0 RCX: 00007f0072b5b58e [ 306.471350][ T8539] RDX: 000000000000000f RSI: 00007f0073ad60a0 RDI: 0000000000000007 [ 306.479364][ T8539] RBP: 00007f0073ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 306.487383][ T8539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.495401][ T8539] R13: 00007f0072e16038 R14: 00007f0072e15fa0 R15: 00007ffee2a6b318 [ 306.503553][ T8539] [ 306.516487][ T8535] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1417'. [ 307.131263][ T8545] sctp: [Deprecated]: syz.3.1422 (pid 8545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.131263][ T8545] Use struct sctp_sack_info instead [ 307.228423][ T8551] device sit0 left promiscuous mode [ 307.346570][ T8553] device sit0 entered promiscuous mode [ 308.262524][ T8582] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1433'. [ 308.294772][ T8589] sctp: [Deprecated]: syz.2.1437 (pid 8589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.294772][ T8589] Use struct sctp_sack_info instead [ 308.507944][ T8593] device sit0 left promiscuous mode [ 308.942284][ T8597] device sit0 entered promiscuous mode [ 312.364029][ T8622] netlink: 'syz.1.1448': attribute type 3 has an invalid length. [ 312.391816][ T8622] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1448'. [ 312.689890][ T8646] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1453'. [ 312.781539][ T8648] device sit0 left promiscuous mode [ 312.929266][ T8641] device sit0 entered promiscuous mode [ 313.757059][ T8662] netlink: 'syz.4.1462': attribute type 3 has an invalid length. [ 313.781514][ T8662] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1462'. [ 313.840477][ T8668] netlink: 130181 bytes leftover after parsing attributes in process `syz.0.1463'. [ 313.981329][ T8674] netlink: 'syz.0.1463': attribute type 13 has an invalid length. [ 313.989981][ T8674] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1463'. [ 317.132345][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.138807][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.297503][ T8684] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1469'. [ 317.428176][ T8696] device sit0 left promiscuous mode [ 317.674710][ T8699] device sit0 entered promiscuous mode [ 321.378478][ T8722] netlink: 130181 bytes leftover after parsing attributes in process `syz.4.1481'. [ 321.546933][ T8722] netlink: 'syz.4.1481': attribute type 13 has an invalid length. [ 321.571150][ T8722] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1481'. [ 321.749984][ T8732] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1484'. [ 324.655553][ T8745] device sit0 left promiscuous mode [ 324.871143][ T8748] device sit0 entered promiscuous mode [ 325.134789][ T8751] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1489'. [ 325.626620][ T8767] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1495'. [ 325.903517][ T8776] netlink: 130181 bytes leftover after parsing attributes in process `syz.3.1499'. [ 326.032885][ T8776] netlink: 'syz.3.1499': attribute type 13 has an invalid length. [ 326.067342][ T8776] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1499'. [ 326.228505][ T8786] syz.0.1504[8786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.228648][ T8786] syz.0.1504[8786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.344286][ T8791] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1504'. [ 328.967845][ T8789] device sit0 left promiscuous mode [ 329.123484][ T8792] device sit0 entered promiscuous mode [ 329.263802][ T8791] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 329.313180][ T8791] CPU: 0 PID: 8791 Comm: syz.0.1504 Not tainted syzkaller #0 [ 329.320658][ T8791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 329.330791][ T8791] Call Trace: [ 329.334111][ T8791] [ 329.337169][ T8791] dump_stack_lvl+0x188/0x24e [ 329.341932][ T8791] ? show_regs_print_info+0x12/0x12 [ 329.347193][ T8791] ? load_image+0x400/0x400 [ 329.351783][ T8791] sysfs_warn_dup+0x8a/0xa0 [ 329.356348][ T8791] sysfs_do_create_link_sd+0xc0/0x110 [ 329.361787][ T8791] device_add+0x7ed/0xfb0 [ 329.366192][ T8791] wiphy_register+0x1d9f/0x2ac0 [ 329.371138][ T8791] ? cfg80211_event_work+0x40/0x40 [ 329.376328][ T8791] ? minstrel_ht_alloc+0x894/0xa20 [ 329.381522][ T8791] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 329.387652][ T8791] ieee80211_register_hw+0x2d00/0x39f0 [ 329.393182][ T8791] ? ieee80211_register_hw+0xf01/0x39f0 [ 329.398778][ T8791] ? ieee80211_register_hw+0xf01/0x39f0 [ 329.404379][ T8791] ? ieee80211_tasklet_handler+0x20/0x20 [ 329.410081][ T8791] ? memset+0x1e/0x40 [ 329.414127][ T8791] ? __hrtimer_init+0x186/0x270 [ 329.419035][ T8791] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 329.424842][ T8791] hwsim_new_radio_nl+0xafa/0xce0 [ 329.429948][ T8791] genl_family_rcv_msg_doit+0x22a/0x330 [ 329.435561][ T8791] ? end_current_label_crit_section+0x170/0x170 [ 329.441877][ T8791] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 329.447854][ T8791] ? bpf_lsm_capable+0x5/0x10 [ 329.452595][ T8791] ? security_capable+0x85/0xb0 [ 329.457599][ T8791] genl_rcv_msg+0x604/0x790 [ 329.462176][ T8791] ? genl_bind+0x360/0x360 [ 329.466658][ T8791] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 329.473057][ T8791] netlink_rcv_skb+0x1fb/0x450 [ 329.477875][ T8791] ? genl_bind+0x360/0x360 [ 329.482332][ T8791] ? netlink_ack+0x1170/0x1170 [ 329.487141][ T8791] ? down_read+0x1a8/0x2d0 [ 329.491679][ T8791] genl_rcv+0x24/0x40 [ 329.495698][ T8791] netlink_unicast+0x74d/0x8d0 [ 329.500498][ T8791] netlink_sendmsg+0x8ad/0xbd0 [ 329.505310][ T8791] ? netlink_getsockopt+0x550/0x550 [ 329.510554][ T8791] ? aa_sock_msg_perm+0x94/0x150 [ 329.515528][ T8791] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 329.520845][ T8791] ? security_socket_sendmsg+0x7c/0xa0 [ 329.526356][ T8791] ? netlink_getsockopt+0x550/0x550 [ 329.531593][ T8791] ____sys_sendmsg+0x5be/0x970 [ 329.536392][ T8791] ? __sys_sendmsg_sock+0x30/0x30 [ 329.541442][ T8791] ? __import_iovec+0x315/0x500 [ 329.546328][ T8791] ? import_iovec+0x6f/0xa0 [ 329.550863][ T8791] ___sys_sendmsg+0x2a2/0x360 [ 329.555565][ T8791] ? try_to_wake_up+0x6ae/0x1080 [ 329.560540][ T8791] ? __sys_sendmsg+0x290/0x290 [ 329.565372][ T8791] __se_sys_sendmsg+0x1bb/0x2a0 [ 329.570334][ T8791] ? ct_nmi_exit+0x145/0x1c0 [ 329.574966][ T8791] ? __x64_sys_sendmsg+0x80/0x80 [ 329.579948][ T8791] ? lockdep_hardirqs_on+0x94/0x140 [ 329.585185][ T8791] do_syscall_64+0x4c/0xa0 [ 329.589641][ T8791] ? clear_bhb_loop+0x60/0xb0 [ 329.594491][ T8791] ? clear_bhb_loop+0x60/0xb0 [ 329.599208][ T8791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.605150][ T8791] RIP: 0033:0x7f2587b9acb9 [ 329.609593][ T8791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.629229][ T8791] RSP: 002b:00007f2588ab8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.637682][ T8791] RAX: ffffffffffffffda RBX: 00007f2587e16090 RCX: 00007f2587b9acb9 [ 329.645675][ T8791] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 329.653668][ T8791] RBP: 00007f2587c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 329.661701][ T8791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.669694][ T8791] R13: 00007f2587e16128 R14: 00007f2587e16090 R15: 00007ffcb5f9aa78 [ 329.677705][ T8791] [ 329.773346][ T8796] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1506'. [ 330.088363][ T8811] FAULT_INJECTION: forcing a failure. [ 330.088363][ T8811] name failslab, interval 1, probability 0, space 0, times 0 [ 330.140013][ T8811] CPU: 0 PID: 8811 Comm: syz.0.1514 Not tainted syzkaller #0 [ 330.147469][ T8811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.157660][ T8811] Call Trace: [ 330.160979][ T8811] [ 330.163960][ T8811] dump_stack_lvl+0x188/0x24e [ 330.168732][ T8811] ? show_regs_print_info+0x12/0x12 [ 330.173988][ T8811] ? load_image+0x400/0x400 [ 330.178546][ T8811] ? verify_lock_unused+0x140/0x140 [ 330.183813][ T8811] should_fail_ex+0x399/0x4d0 [ 330.188559][ T8811] should_failslab+0x5/0x20 [ 330.193226][ T8811] slab_pre_alloc_hook+0x59/0x310 [ 330.198302][ T8811] kmem_cache_alloc+0x56/0x2f0 [ 330.203106][ T8811] ? skb_clone+0x1e7/0x370 [ 330.207568][ T8811] skb_clone+0x1e7/0x370 [ 330.211858][ T8811] __netlink_deliver_tap+0x3ed/0x800 [ 330.217217][ T8811] ? netlink_deliver_tap+0x2e/0x1b0 [ 330.222467][ T8811] netlink_deliver_tap+0x19c/0x1b0 [ 330.227629][ T8811] netlink_unicast+0x728/0x8d0 [ 330.232450][ T8811] netlink_sendmsg+0x8ad/0xbd0 [ 330.237285][ T8811] ? netlink_getsockopt+0x550/0x550 [ 330.242544][ T8811] ? aa_sock_msg_perm+0x94/0x150 [ 330.247524][ T8811] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 330.252838][ T8811] ? security_socket_sendmsg+0x7c/0xa0 [ 330.258335][ T8811] ? netlink_getsockopt+0x550/0x550 [ 330.263557][ T8811] ____sys_sendmsg+0x5be/0x970 [ 330.268374][ T8811] ? __sys_sendmsg_sock+0x30/0x30 [ 330.273504][ T8811] ? __import_iovec+0x315/0x500 [ 330.278383][ T8811] ? import_iovec+0x6f/0xa0 [ 330.282910][ T8811] ___sys_sendmsg+0x2a2/0x360 [ 330.287617][ T8811] ? __sys_sendmsg+0x290/0x290 [ 330.292438][ T8811] ? __lock_acquire+0x7d10/0x7d10 [ 330.297515][ T8811] __se_sys_sendmsg+0x1bb/0x2a0 [ 330.302396][ T8811] ? __x64_sys_sendmsg+0x80/0x80 [ 330.307369][ T8811] ? trace_sys_enter+0x22/0x80 [ 330.312183][ T8811] do_syscall_64+0x4c/0xa0 [ 330.316631][ T8811] ? clear_bhb_loop+0x60/0xb0 [ 330.321347][ T8811] ? clear_bhb_loop+0x60/0xb0 [ 330.326053][ T8811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.331978][ T8811] RIP: 0033:0x7f2587b9acb9 [ 330.336420][ T8811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.356050][ T8811] RSP: 002b:00007f2588ad9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.364508][ T8811] RAX: ffffffffffffffda RBX: 00007f2587e15fa0 RCX: 00007f2587b9acb9 [ 330.372601][ T8811] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 330.380950][ T8811] RBP: 00007f2588ad9090 R08: 0000000000000000 R09: 0000000000000000 [ 330.388963][ T8811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.396973][ T8811] R13: 00007f2587e16038 R14: 00007f2587e15fa0 R15: 00007ffcb5f9aa78 [ 330.405025][ T8811] [ 330.420809][ T8811] netlink: 'syz.0.1514': attribute type 12 has an invalid length. [ 330.429444][ T8811] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1514'. [ 330.500552][ T8818] FAULT_INJECTION: forcing a failure. [ 330.500552][ T8818] name failslab, interval 1, probability 0, space 0, times 0 [ 330.561119][ T8818] CPU: 0 PID: 8818 Comm: syz.1.1516 Not tainted syzkaller #0 [ 330.568602][ T8818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.578715][ T8818] Call Trace: [ 330.582047][ T8818] [ 330.585027][ T8818] dump_stack_lvl+0x188/0x24e [ 330.589779][ T8818] ? show_regs_print_info+0x12/0x12 [ 330.595054][ T8818] ? load_image+0x400/0x400 [ 330.599625][ T8818] ? __might_sleep+0xd0/0xd0 [ 330.604287][ T8818] ? __lock_acquire+0x7d10/0x7d10 [ 330.609396][ T8818] should_fail_ex+0x399/0x4d0 [ 330.614167][ T8818] should_failslab+0x5/0x20 [ 330.618819][ T8818] slab_pre_alloc_hook+0x59/0x310 [ 330.623908][ T8818] ? prepend_path+0xa68/0xc20 [ 330.628652][ T8818] ? tomoyo_encode+0x27e/0x540 [ 330.633489][ T8818] __kmem_cache_alloc_node+0x4f/0x260 [ 330.638929][ T8818] ? tomoyo_encode+0x27e/0x540 [ 330.643756][ T8818] __kmalloc+0xa0/0x240 [ 330.647990][ T8818] tomoyo_encode+0x27e/0x540 [ 330.652665][ T8818] tomoyo_realpath_from_path+0x58e/0x5d0 [ 330.658387][ T8818] ? tomoyo_path_number_perm+0x205/0x650 [ 330.664212][ T8818] tomoyo_path_number_perm+0x22f/0x650 [ 330.669767][ T8818] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 330.675334][ T8818] ? ksys_write+0x1c0/0x250 [ 330.679886][ T8818] ? common_file_perm+0x171/0x1c0 [ 330.685031][ T8818] ? __fget_files+0x28/0x4b0 [ 330.689700][ T8818] ? __fget_files+0x28/0x4b0 [ 330.694532][ T8818] security_file_ioctl+0x6c/0xa0 [ 330.699548][ T8818] __se_sys_ioctl+0x48/0x170 [ 330.704203][ T8818] do_syscall_64+0x4c/0xa0 [ 330.708659][ T8818] ? clear_bhb_loop+0x60/0xb0 [ 330.713397][ T8818] ? clear_bhb_loop+0x60/0xb0 [ 330.718110][ T8818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.724044][ T8818] RIP: 0033:0x7fd018b9acb9 [ 330.728507][ T8818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.748144][ T8818] RSP: 002b:00007fd019b3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.756593][ T8818] RAX: ffffffffffffffda RBX: 00007fd018e15fa0 RCX: 00007fd018b9acb9 [ 330.764608][ T8818] RDX: 00002000000005c0 RSI: 000000004020940d RDI: 0000000000000004 [ 330.772611][ T8818] RBP: 00007fd019b3b090 R08: 0000000000000000 R09: 0000000000000000 [ 330.780623][ T8818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.788626][ T8818] R13: 00007fd018e16038 R14: 00007fd018e15fa0 R15: 00007ffc787f9bf8 [ 330.796661][ T8818] [ 330.843381][ T8818] ERROR: Out of memory at tomoyo_realpath_from_path. [ 331.002444][ T8827] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1518'. [ 331.050193][ T8827] tc_dump_action: action bad kind [ 333.083510][ T56] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 334.027464][ T8852] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1526'. [ 334.567902][ T8868] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1535'. [ 334.717964][ T8868] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 335.027283][ T8876] syz.0.1536 (8876) used greatest stack depth: 18096 bytes left [ 337.746716][ T8886] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1541'. [ 337.946401][ T8886] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 338.273203][ T11] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 338.293357][ T11] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 338.305411][ T4298] ------------[ cut here ]------------ [ 338.311425][ T4298] WARNING: CPU: 0 PID: 4298 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 338.321466][ T4298] Modules linked in: [ 338.325422][ T4298] CPU: 0 PID: 4298 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 338.333108][ T4298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 338.343302][ T4298] Workqueue: cfg80211 cfg80211_event_work [ 338.349664][ T4298] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 338.356170][ T4298] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c1 7e f0 f7 0f 0b eb bb e8 b8 7e f0 f7 <0f> 0b eb b2 e8 af 7e f0 f7 0f 0b e9 77 fd ff ff e8 a3 7e f0 f7 0f [ 338.375990][ T4298] RSP: 0018:ffffc90003eb7aa0 EFLAGS: 00010293 [ 338.382314][ T4298] RAX: ffffffff8991d3b8 RBX: dffffc0000000000 RCX: ffff88807c199dc0 [ 338.390351][ T4298] RDX: 0000000000000000 RSI: ffffffff8a8c0620 RDI: ffffffff8adf0020 [ 338.398492][ T4298] RBP: ffffc90003eb7b70 R08: ffffffff90ad82a7 R09: 1ffffffff215b054 [ 338.406577][ T4298] R10: dffffc0000000000 R11: fffffbfff215b055 R12: ffff88801db5b618 [ 338.414658][ T4298] R13: 1ffff920007d6f5c R14: 000000000000001f R15: ffff888054828c90 [ 338.422732][ T4298] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 338.431778][ T4298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.438432][ T4298] CR2: 000020000000d000 CR3: 000000007ccf3000 CR4: 00000000003506f0 [ 338.446537][ T4298] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 338.454628][ T4298] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 338.462795][ T4298] Call Trace: [ 338.466132][ T4298] [ 338.469144][ T4298] ? mutex_lock_nested+0x10/0x10 [ 338.474212][ T4298] ? trace_rdev_return_void+0x240/0x240 [ 338.479928][ T4298] cfg80211_process_wdev_events+0x3ad/0x550 [ 338.485961][ T4298] cfg80211_process_rdev_events+0x9d/0x110 [ 338.491956][ T4298] ? process_one_work+0x7b0/0x1160 [ 338.497132][ T4298] cfg80211_event_work+0x2b/0x40 [ 338.502228][ T4298] process_one_work+0x8a2/0x1160 [ 338.507253][ T4298] ? worker_detach_from_pool+0x240/0x240 [ 338.513018][ T4298] ? _raw_spin_lock_irq+0x86/0xf0 [ 338.518114][ T4298] ? _raw_spin_lock_irq+0xb7/0xf0 [ 338.523283][ T4298] ? _raw_spin_lock_irqsave+0x100/0x100 [ 338.528897][ T4298] ? kthread_data+0x4b/0xc0 [ 338.533543][ T4298] worker_thread+0xaa2/0x1270 [ 338.538305][ T4298] ? __kthread_parkme+0x162/0x1c0 [ 338.543534][ T4298] kthread+0x29d/0x330 [ 338.547684][ T4298] ? worker_clr_flags+0x1a0/0x1a0 [ 338.552840][ T4298] ? kthread_blkcg+0xd0/0xd0 [ 338.557507][ T4298] ret_from_fork+0x1f/0x30 [ 338.561561][ T8908] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1547'. [ 338.562217][ T4298] [ 338.574141][ T4298] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 338.581545][ T4298] CPU: 0 PID: 4298 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 338.589137][ T4298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 338.599252][ T4298] Workqueue: cfg80211 cfg80211_event_work [ 338.605041][ T4298] Call Trace: [ 338.608366][ T4298] [ 338.611349][ T4298] dump_stack_lvl+0x188/0x24e [ 338.616098][ T4298] ? memcpy+0x3c/0x60 [ 338.620130][ T4298] ? show_regs_print_info+0x12/0x12 [ 338.625513][ T4298] ? load_image+0x400/0x400 [ 338.630092][ T4298] panic+0x2e5/0x730 [ 338.634043][ T4298] ? bpf_jit_dump+0xd0/0xd0 [ 338.638609][ T4298] ? ret_from_fork+0x1f/0x30 [ 338.643265][ T4298] __warn+0x2f8/0x4f0 [ 338.647303][ T4298] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 338.652905][ T4298] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 338.658504][ T4298] report_bug+0x2ba/0x4f0 [ 338.662877][ T4298] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 338.668492][ T4298] handle_bug+0x3a/0x70 [ 338.672688][ T4298] exc_invalid_op+0x16/0x40 [ 338.677237][ T4298] asm_exc_invalid_op+0x16/0x20 [ 338.682130][ T4298] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 338.688341][ T4298] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c1 7e f0 f7 0f 0b eb bb e8 b8 7e f0 f7 <0f> 0b eb b2 e8 af 7e f0 f7 0f 0b e9 77 fd ff ff e8 a3 7e f0 f7 0f [ 338.708050][ T4298] RSP: 0018:ffffc90003eb7aa0 EFLAGS: 00010293 [ 338.714169][ T4298] RAX: ffffffff8991d3b8 RBX: dffffc0000000000 RCX: ffff88807c199dc0 [ 338.722207][ T4298] RDX: 0000000000000000 RSI: ffffffff8a8c0620 RDI: ffffffff8adf0020 [ 338.730232][ T4298] RBP: ffffc90003eb7b70 R08: ffffffff90ad82a7 R09: 1ffffffff215b054 [ 338.738264][ T4298] R10: dffffc0000000000 R11: fffffbfff215b055 R12: ffff88801db5b618 [ 338.746287][ T4298] R13: 1ffff920007d6f5c R14: 000000000000001f R15: ffff888054828c90 [ 338.754351][ T4298] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 338.759970][ T4298] ? mutex_lock_nested+0x10/0x10 [ 338.764976][ T4298] ? trace_rdev_return_void+0x240/0x240 [ 338.770589][ T4298] cfg80211_process_wdev_events+0x3ad/0x550 [ 338.776559][ T4298] cfg80211_process_rdev_events+0x9d/0x110 [ 338.782420][ T4298] ? process_one_work+0x7b0/0x1160 [ 338.787576][ T4298] cfg80211_event_work+0x2b/0x40 [ 338.792574][ T4298] process_one_work+0x8a2/0x1160 [ 338.797579][ T4298] ? worker_detach_from_pool+0x240/0x240 [ 338.803263][ T4298] ? _raw_spin_lock_irq+0x86/0xf0 [ 338.808347][ T4298] ? _raw_spin_lock_irq+0xb7/0xf0 [ 338.813424][ T4298] ? _raw_spin_lock_irqsave+0x100/0x100 [ 338.819019][ T4298] ? kthread_data+0x4b/0xc0 [ 338.823588][ T4298] worker_thread+0xaa2/0x1270 [ 338.828370][ T4298] ? __kthread_parkme+0x162/0x1c0 [ 338.833458][ T4298] kthread+0x29d/0x330 [ 338.837585][ T4298] ? worker_clr_flags+0x1a0/0x1a0 [ 338.842664][ T4298] ? kthread_blkcg+0xd0/0xd0 [ 338.847310][ T4298] ret_from_fork+0x1f/0x30 [ 338.851797][ T4298] [ 338.855449][ T4298] Kernel Offset: disabled [ 338.859891][ T4298] Rebooting in 86400 seconds..