last executing test programs: 9.07084685s ago: executing program 4 (id=1125): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, '\x00', 0x0, r3}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r2, r5}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6012"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xfffffffffffffed2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x9, '\x00', r6, r4, 0x3, 0x1, 0x1}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r1}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r1}, 0xc) r8 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r8}, 0x8) sendmsg$kcm(r8, &(0x7f0000000a80)={&(0x7f0000000880)=@sco={0x1f, @fixed}, 0x12, 0x0}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r9) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063019e000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r9, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000400)='cpu<00||!') ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000040)='&!\x00') ioctl$TUNSETDEBUG(r9, 0x400454c9, &(0x7f0000000000)) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000100)={0x0, 0x3, [@random="67126a4fbb21", @multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}]}) 6.899375794s ago: executing program 4 (id=1131): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x118442, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000b80)={0x0, r0}, 0x8) r2 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@const={0xa}, @fwd={0xe}, @volatile={0x7, 0x0, 0x0, 0x9, 0x4}, @var={0xa, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x0, 0x0]}}, &(0x7f0000000d40)=""/95, 0x52, 0x5f, 0x0, 0xe}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1f, 0x3, &(0x7f0000000e80)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRESHEX=r3, @ANYBLOB="f76565972ddc01cd7e665ee6e3ef97be4c4dccc25c5e9f4a1bbfa68e8a3d27a1caa6e5638b0aabe6a29a7b39a6518853f4975994a7d001a0abf023cdeebd34098256c4b3fe7967a9771e0214571950cb758fe766c69d73d5c5b4b57c7bd003cb393f841736bbd8ca796fa8a842e6c224dc15a52fb9ca27a7029841dbb7684c3b091809", @ANYRES32=r1], &(0x7f0000000180)='syzkaller\x00', 0xfffff543, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000f40)=""/187, 0xbb}, {&(0x7f0000001000)=""/101, 0x65}, {&(0x7f0000001080)=""/111, 0x6f}, {&(0x7f0000001100)=""/192, 0xc0}], 0x4, &(0x7f0000001240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x40010001) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r6, 0x58, &(0x7f0000000040)={0x0, 0x0}}, 0x10) r9 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0xa, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={r8, 0xfffffff8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r8, 0x81d4}, 0xc) r10 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r10, &(0x7f0000000480)={&(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)}], 0x1}, 0x840) sendmsg$inet(r10, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x3, @local}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000000)="0f", 0x1}], 0x1}, 0x0) r11 = socket$kcm(0x1e, 0x1, 0x0) recvmsg$unix(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000640)}, 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x13, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r12 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r12, &(0x7f0000000640)={&(0x7f0000000300)=@hci={0x1f, 0x2, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x20}, 0x8000) r13 = perf_event_open$cgroup(&(0x7f0000000ac0)={0x0, 0x80, 0x0, 0x40, 0x7, 0x9, 0x0, 0x2, 0x804, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0xffff, 0x3}, 0x100042, 0x3, 0x7fff, 0x3, 0xa7, 0x6, 0x4, 0x0, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b40)=@o_path={&(0x7f0000000a80)='./file0\x00', 0x0, 0x8, r13}, 0x18) 5.653999065s ago: executing program 4 (id=1134): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x40082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235c, 0x1, @perf_config_ext={0x603e5b79, 0xaea}, 0x14c05, 0x12e, 0xfffffbff, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0xfffffffffffffd16}, 0x48) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x8a, 0xd, 0x0, 0x0, 0x0, 0x0, 0x70132, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3d, 0x1}, 0x10188, 0x0, 0xc52, 0x3, 0x40, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a000900050282c1c1273e370e0c11", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r2, 0x0, 0xfe33) 5.315565642s ago: executing program 4 (id=1140): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x8007ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x1, @perf_bp={&(0x7f0000000140), 0x2}, 0x14105, 0x2e, 0xfffffbff, 0x8, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x87}, {0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x6}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000a80)='\x9f\xb50i\x00\x00\x00\x00\x00\x00\x00\n\x9f.\r\xfci\x114\x0f\xd6\x10a@\xd7.\xc5\x02h\x1b\x83\x14(\x80q\xfc\xf7\x06\x964w~%\f\xc1\xd9TK`r\xad\xa9\xc73\xcf\x0f\xca+?\xf2\xc4Ar\x062\xaf-\x06\xb1W\xed\x05\x00T\xda\xef\xc0\x95]\xd7;fy\xe4\xfb\xa1\xb4\xa9\xc9%\b\xe28\xb6\x99\xa1.$\xc2\xd1C\xbb\x1f\xd3\x8e\x92\x01\x1f0\x01\xf6\xa4\xcfr\x82K\x1e\xb6=7\xf4Z\xf0t\x81\x13\x0e\xa7\xd7\xec.m8\xaa\x12\xed\xaf-\xf1\x92b\xbcq?Sk*\x1d\x1b\x06\xe9\x053\xe0\xca\xe1AU&\v)\xcef\x82,\xdd\xc2\f;\xfb\x8a\x94\xc4n\x13\xb9\xf6U\xc40\xefs\xe9Me\xa7\xb8\x8bA\xb3\xf9\x88>4') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000c00)='K\xcd\x83o\x99\xc8\xe5\xa0\x10\xaa\xab\xd8Vu\x92\x96\xd5\xea#rm\xbc]\xecq\x89\x8f\x89\xe5\x86@2\xb8\x9c5\\\xf9\xa7\xaeW\xd8\'\x19\t^\xb8\xeb:O\xaa~\xa1\x015b\xed\x89Bc!%\xa3\xcf\xa9Nh\xe7\xb9\xba\x9a\x1b<\xfd\xd1\xd6\r&\xbc\xa7\xd9}\xe6\xf4\xf7\xca\xfe\x92pBn\xbcw\x99\xde\xd0NXm\xbfA=\xa5%\xe8\x18\v\xee\x82\xfe\xe5\xe3\x01\xe6K\xc8\x13\xaei5\xdf\x9f,;M\'\x87V \xc0MS[8\x92\xc3\xd0\xdb\x14\xf3\xa3z\x91k\xe2\xf9q\xb3T\"\xf4\x81\xd2\x9fzf\xca*\xad\xdcMC.\xfb|<\xe7\"^\x1e\x94\xa2\xc5\x1aR\x82k\xc5\xb4\x7f\xba\xe7\x9c\x94\x15f3\x85\xfd\xd2@\xc4\xbe\xa4|j\xf7\x15:\x7f9\x7f\xfb\xed\xdcW\xc3\xe4\x84\xdd[\xe9g\xbb\x9e\x13\a\x14N\x9e\xf5\x9a\x87\x83]\xb2\xf0\x85\xb5\xe5\xa6\xf94\\\xfe\x9c+\xe0\x955\xbd\xaa\xa1\xefK\x04\xb61\xd3\x1bQ\x1f\x11{\xc4\xec\x00F\x8dB\x92\xbe\xcd\xdfSw&<\xf1\xe5\xeb\x8e\x1c\x1d_\xe0\x1a-F4\x03[\x9a~x\x1c~jC\xc2s\xa9\x89t\x85\x9a\xf2\xcbPZQJ\x91\xd6[\x92]\xd8\x8fQ\xbd\xb0\xd7\xdf\x84\xb3\xb3<\t\xeaF\xb4:`\f\xa1\xfcO\xf9\n\xdb\xcc\x92\x16M\xb0\xb5\x8c\xd0\x17\r|;u1|\x984@(PN\x89$\xe3!\xceU\xc5\x11\xc6\xda)\v\xccU\a\n\x14\x84)\\\xa4\a\x01\x1f=|') r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000002900eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x5112, 0x0, 0x0, 0x1, 0x29, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0}}, 0xfffffffffffffed2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x9, '\x00', r6, r4, 0x3, 0x1, 0x1}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r1}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r1}, 0xc) r8 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r8}, 0x8) sendmsg$kcm(r8, &(0x7f0000000a80)={&(0x7f0000000880)=@sco={0x1f, @fixed}, 0x12, 0x0}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r9) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063019e000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r9, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000400)='cpu<00||!') ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000040)='&!\x00') ioctl$TUNSETDEBUG(r9, 0x400454c9, &(0x7f0000000000)) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000100)={0x0, 0x3, [@random="67126a4fbb21", @multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}]}) 5.147964136s ago: executing program 1 (id=1143): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xd0}, 0x14002) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100a64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 5.09209246s ago: executing program 0 (id=1144): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x118442, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000b80)={0x0, r0}, 0x8) r2 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@const={0xa}, @fwd={0xe}, @volatile={0x7, 0x0, 0x0, 0x9, 0x4}, @var={0xa, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x0, 0x0]}}, &(0x7f0000000d40)=""/95, 0x52, 0x5f, 0x0, 0xe}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1f, 0x3, &(0x7f0000000e80)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRESHEX=r3, @ANYBLOB="f76565972ddc01cd7e665ee6e3ef97be4c4dccc25c5e9f4a1bbfa68e8a3d27a1caa6e5638b0aabe6a29a7b39a6518853f4975994a7d001a0abf023cdeebd34098256c4b3fe7967a9771e0214571950cb758fe766c69d73d5c5b4b57c7bd003cb393f841736bbd8ca796fa8a842e6c224dc15a52fb9ca27a7029841dbb7684c3b091809", @ANYRES32=r1], &(0x7f0000000180)='syzkaller\x00', 0xfffff543, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000f40)=""/187, 0xbb}, {&(0x7f0000001000)=""/101, 0x65}, {&(0x7f0000001080)=""/111, 0x6f}, {&(0x7f0000001100)=""/192, 0xc0}], 0x4, &(0x7f0000001240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x40010001) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r6, 0x58, &(0x7f0000000040)={0x0, 0x0}}, 0x10) r9 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0xa, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={r8, 0xfffffff8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r8, 0x81d4}, 0xc) r10 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r10, &(0x7f0000000480)={&(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)}], 0x1}, 0x840) sendmsg$inet(r10, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x3, @local}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000000)="0f", 0x1}], 0x1}, 0x0) r11 = socket$kcm(0x1e, 0x1, 0x0) recvmsg$unix(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000640)}, 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x13, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r12 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r12, &(0x7f0000000640)={&(0x7f0000000300)=@hci={0x1f, 0x2, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x20}, 0x8000) r13 = perf_event_open$cgroup(&(0x7f0000000ac0)={0x0, 0x80, 0x0, 0x40, 0x7, 0x9, 0x0, 0x2, 0x804, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0xffff, 0x3}, 0x100042, 0x3, 0x7fff, 0x3, 0xa7, 0x6, 0x4, 0x0, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b40)=@o_path={&(0x7f0000000a80)='./file0\x00', 0x0, 0x8, r13}, 0x18) 4.960102581s ago: executing program 3 (id=1145): socket$kcm(0x10, 0x2, 0x10) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x0, 0x51}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x2c, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001440), 0x8}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1}, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe33) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000ff000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x2, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f00000012c0)="2442e85dfec864738425490ad3e6c2dfbb96d8ed53799d458147b4ff", &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000040)={r5, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) r6 = perf_event_open(&(0x7f0000001300)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x10012, 0x0, 0x0, 0x1, 0x5a7, 0x2, 0x0, 0x0, 0x8, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001400)=[{&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001380)=ANY=[@ANYBLOB="000000000000000000000000070000000700040a010102e00000010a01010164010102ac1414bb9400000007008a3c92ffe58aecc3b173c6ddb389005b26d9e92c38a63e5514000011000000000000000000000001000000a0000000000000001400000000000000987e2f743f5dd500000000020000000000008000000000"], 0x48}, 0x20000000) 4.769193766s ago: executing program 3 (id=1147): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0x0) (fail_nth: 6) 4.323356552s ago: executing program 3 (id=1148): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x207) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r4, 0x0, 0x82, 0x71, &(0x7f0000000680)="978b91d355820e590edd8e8fde82d46c866fbc9dc6286ec434b1c56ddb8f286a0abebdb6cec1989386805b1378bd8d348f740625e3ad5dcdd1e9620e13b60bd2087590bcac68aa8dab9ed6c5740bd02232068d42b2d84b2d35b9e98e429de2b76abd2a7c1c8182822afdac1a318f471a3b57c7b378d26c7ab38268eaeb2ed7c72b29", &(0x7f00000003c0)=""/113, 0x2, 0x0, 0x70, 0x7, &(0x7f0000000880)="58c712617ca1fe7c57803c4caf8fbb01e6ae0d418bc1958dc2465ba710ad690536bb2e0c18ffb1a36354bd80fc1535267c7f4e65582a75ffeff7e7331c091fa8ba891e8df53f78e799e32de3048e98f503b7cc9259f644ef63fe6c98899f308a8a5268d90900d40ffc998a11e765ed09", &(0x7f00000002c0)="3a6a7311e740f2", 0x3, 0x0, 0x8}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x28, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @tail_call, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x1, 0x2, 0x0, 0x7, 0x30, 0xffffffffffffffff}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @jmp={0x5, 0x0, 0xa, 0xb, 0x4, 0x6, 0xfffffffffffffff0}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x94ef}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x6a, &(0x7f0000000340)=""/106, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x3, 0xa, 0xca0f, 0x5}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000240)=[{0x2, 0x3, 0x0, 0xb}, {0x0, 0x2, 0x6, 0x3}, {0x3, 0x5, 0x3, 0x9}, {0x5, 0x3, 0x1, 0x4}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='btrfs_writepage_end_io_hook\x00', r6, 0x0, 0x100000000}, 0xfffffffffffffde9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1.932943945s ago: executing program 0 (id=1149): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000c00), 0x2}, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x488c0) (async) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x488c0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) (async) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32=r1, @ANYBLOB="00004f00a1db00e6ff7f0000000000", @ANYRES32=0x0, @ANYRES32], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32=r1, @ANYBLOB="00004f00a1db00e6ff7f0000000000", @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db4400040000a118000200", 0x17}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x40002002) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[], 0xfe33) (async) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[], 0xfe33) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[], 0xfe33) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x40086602, 0x110e22fff2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000500)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e88368002c0001000002000000000000080005007a010401a80016002000034004020000035c0461c9d67f4f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2fe547dc84e838d60d871355bc9aaaf02b6a24865233018053e44bdf0e1555b1fd796573deefe439c5e0c780a2580fab2d48a2eb84a0134f9c6953c734df45c1e7f8b41163118bcd6110e3580f47b959d5f2a2d4485d03c6765589e078e6", 0xc8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000a80)={0x4, 0x80, 0x2, 0x1, 0x21, 0x9, 0x0, 0x1ff, 0x800, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x2, 0x120000}, 0x1100, 0x9, 0x4, 0x1, 0x90, 0xfcc6, 0xbb, 0x0, 0x8, 0x0, 0x9}, r4, 0x9, r7, 0x9) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x6, 0x200, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.907432386s ago: executing program 1 (id=1150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x106, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa404, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40800300, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 1.840026482s ago: executing program 2 (id=1151): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x40082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235c, 0x1, @perf_config_ext={0x603e5b79, 0xaea}, 0x14c05, 0x12e, 0xfffffbff, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0xfffffffffffffd16}, 0x48) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x8a, 0xd, 0x0, 0x0, 0x0, 0x0, 0x70132, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3d, 0x1}, 0x10188, 0x0, 0xc52, 0x3, 0x40, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a000900050282c1c1273e370e0c11", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfe33) 1.839365622s ago: executing program 4 (id=1152): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x9411, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000880)=0x1) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0xe, 0x0, 0x0, 0x1018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x401, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005000500000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x498a3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x3ffffe, 0x0, 0x0, 0xe, 0x0, 0x8}, r3, 0x0, 0xffffffffffffffff, 0x3) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0xffffffffffffff5d) 1.684955084s ago: executing program 3 (id=1153): socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x3a, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0xffffffff, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1]}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) close(r3) r5 = socket$kcm(0x11, 0x2, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x8) r7 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[], 0xfefb) r8 = socket$kcm(0x1e, 0x1, 0x0) recvmsg$unix(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/11, 0xb}], 0x1, &(0x7f0000000640)}, 0x120) 1.250888829s ago: executing program 1 (id=1154): socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x3a, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0xffffffff, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.033309897s ago: executing program 1 (id=1155): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, '\x00', 0x0, r3}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r2, r5}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6012"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xfffffffffffffed2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x9, '\x00', r6, r4, 0x3, 0x1, 0x1}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r1}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r1}, 0xc) r8 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r8}, 0x8) sendmsg$kcm(r8, &(0x7f0000000a80)={&(0x7f0000000880)=@sco={0x1f, @fixed}, 0x12, 0x0}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r9) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063019e000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r9, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000400)='cpu<00||!') ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000040)='&!\x00') ioctl$TUNSETDEBUG(r9, 0x400454c9, &(0x7f0000000000)) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000100)={0x0, 0x3, [@random="67126a4fbb21", @multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}]}) 1.032955907s ago: executing program 3 (id=1156): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2400000064006bcd9e3fe3dc6e48aa31086b8703130000001f00000000000000", 0x20}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, '\x00', 0x0, r3}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r2, r4}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6012"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xfffffffffffffed2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x9, '\x00', r5, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r1}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r1}, 0xc) r7 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r7}, 0x8) sendmsg$kcm(r7, &(0x7f0000000a80)={&(0x7f0000000880)=@sco={0x1f, @fixed}, 0x12, 0x0}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000400)='cpu<00||!') ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000040)='&!\x00') ioctl$TUNSETDEBUG(r8, 0x400454c9, &(0x7f0000000000)) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000100)={0x0, 0x3, [@random="67126a4fbb21", @multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}]}) 1.032258137s ago: executing program 2 (id=1157): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x15, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x6d}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x38, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000280), &(0x7f0000000400), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000840)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xa3, 0x1, 0x4, 0x128ce, r3, 0x4, '\x00', r4, r5, 0x0, 0x4, 0x0, 0x9, @void, @value, @value=r6}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x26, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r7, &(0x7f0000000300), 0x0}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 964.271072ms ago: executing program 0 (id=1158): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000b40)='itimer_expire\x00', r0}, 0x18) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x118442, 0x0, 0x0, 0x1}, 0x0, 0x0, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000800000000bba93c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) 666.775707ms ago: executing program 1 (id=1159): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000bef64cc7ff0000000400000000000a8769680000"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008003fffe, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r7, 0x400454c8, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) 583.126683ms ago: executing program 0 (id=1160): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x118442, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000b80)={0x0, r0}, 0x8) r2 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@const={0xa}, @fwd={0xe}, @volatile={0x7, 0x0, 0x0, 0x9, 0x4}, @var={0xa, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x61, 0x0, 0x0]}}, &(0x7f0000000d40)=""/95, 0x52, 0x5f, 0x0, 0xe}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1f, 0x3, &(0x7f0000000e80)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRESHEX=r3, @ANYBLOB="f76565972ddc01cd7e665ee6e3ef97be4c4dccc25c5e9f4a1bbfa68e8a3d27a1caa6e5638b0aabe6a29a7b39a6518853f4975994a7d001a0abf023cdeebd34098256c4b3fe7967a9771e0214571950cb758fe766c69d73d5c5b4b57c7bd003cb393f841736bbd8ca796fa8a842e6c224dc15a52fb9ca27a7029841dbb7684c3b091809", @ANYRES32=r1], &(0x7f0000000180)='syzkaller\x00', 0xfffff543, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000f40)=""/187, 0xbb}, {&(0x7f0000001000)=""/101, 0x65}, {&(0x7f0000001080)=""/111, 0x6f}, {&(0x7f0000001100)=""/192, 0xc0}], 0x4, &(0x7f0000001240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x40010001) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r6, 0x58, &(0x7f0000000040)={0x0, 0x0}}, 0x10) r9 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0xa, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={r8, 0xfffffff8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r8, 0x81d4}, 0xc) r10 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r10, &(0x7f0000000480)={&(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)}], 0x1}, 0x840) sendmsg$inet(r10, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x3, @local}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000000)="0f", 0x1}], 0x1}, 0x0) r11 = socket$kcm(0x1e, 0x1, 0x0) recvmsg$unix(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/11, 0xb}], 0x1}, 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x13, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r12 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r12, &(0x7f0000000640)={&(0x7f0000000300)=@hci={0x1f, 0x2, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x20}, 0x8000) r13 = perf_event_open$cgroup(&(0x7f0000000ac0)={0x0, 0x80, 0x0, 0x40, 0x7, 0x9, 0x0, 0x2, 0x804, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0xffff, 0x3}, 0x100042, 0x3, 0x7fff, 0x3, 0xa7, 0x6, 0x4, 0x0, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b40)=@o_path={&(0x7f0000000a80)='./file0\x00', 0x0, 0x8, r13}, 0x18) 508.277929ms ago: executing program 4 (id=1161): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xd0}, 0x14002) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100a64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 445.445274ms ago: executing program 2 (id=1162): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10200, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1659befe1b3103e7}}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90324fc60100005000a000200053582c137153e37000c018004001000f835", 0x33fe0}], 0x1}, 0x0) 311.540195ms ago: executing program 3 (id=1163): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x207) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r4, 0x0, 0x82, 0x71, &(0x7f0000000680)="978b91d355820e590edd8e8fde82d46c866fbc9dc6286ec434b1c56ddb8f286a0abebdb6cec1989386805b1378bd8d348f740625e3ad5dcdd1e9620e13b60bd2087590bcac68aa8dab9ed6c5740bd02232068d42b2d84b2d35b9e98e429de2b76abd2a7c1c8182822afdac1a318f471a3b57c7b378d26c7ab38268eaeb2ed7c72b29", &(0x7f00000003c0)=""/113, 0x2, 0x0, 0x70, 0x7, &(0x7f0000000880)="58c712617ca1fe7c57803c4caf8fbb01e6ae0d418bc1958dc2465ba710ad690536bb2e0c18ffb1a36354bd80fc1535267c7f4e65582a75ffeff7e7331c091fa8ba891e8df53f78e799e32de3048e98f503b7cc9259f644ef63fe6c98899f308a8a5268d90900d40ffc998a11e765ed09", &(0x7f00000002c0)="3a6a7311e740f2", 0x3, 0x0, 0x8}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)="a0005b020eaa4d56", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x28, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @tail_call, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x1, 0x2, 0x0, 0x7, 0x30, 0xffffffffffffffff}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @jmp={0x5, 0x0, 0xa, 0xb, 0x4, 0x6, 0xfffffffffffffff0}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x94ef}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x6a, &(0x7f0000000340)=""/106, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x3, 0xa, 0xca0f, 0x5}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000240)=[{0x2, 0x3, 0x0, 0xb}, {0x0, 0x2, 0x6, 0x3}, {0x3, 0x5, 0x3, 0x9}, {0x5, 0x3, 0x1, 0x4}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='btrfs_writepage_end_io_hook\x00', r6, 0x0, 0x100000000}, 0xfffffffffffffde9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 232.189092ms ago: executing program 2 (id=1164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x20, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 213.925143ms ago: executing program 2 (id=1165): socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x3a, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0xffffffff, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 185.060506ms ago: executing program 1 (id=1166): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x0, 0x17, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000000000000007, 0x30408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="d8000000180081054e81f783db4cb9040a1d080006007c02cdfc55a10a0017000600a42603600e12080006ba0474f701a8000600fe80ffff7f6f94007134cf6efb8000a007a290457f01890500277ce06bbaceac3c2fb14c2ee5a7a3aab62f00001fb71b14d6d930dfe1d9d322fe7c2e8771820d16a4683f5aeb4edbb5952a0f536ffd77500db798262f3d409c1f40cb9f92b74f51fad9e3bb9ad809d5e1cace0d81ed0b764434a19789bf0cffece0b4129ecbee5de6ccd4e1ffffffffc2c9b627430600007c388b0dd6e4edef3d93000020000000000000", 0xd8}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000d40), 0xd}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x32, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000800)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @call={0x85, 0x0, 0x0, 0x89}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xb2}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}], &(0x7f00000008c0)='GPL\x00', 0x10000, 0x1b, &(0x7f0000000900)=""/27, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0x1, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000009c0)=[{0x2, 0x5, 0x9, 0xb}, {0x1, 0x2, 0xa, 0x5}, {0x2, 0x3, 0xc}, {0x2, 0x3, 0x2, 0xb}, {0x0, 0x4, 0x5, 0x2}, {0x3, 0x1, 0xf}, {0x0, 0x3, 0x5, 0x3}, {0x2, 0x5, 0xa, 0xc}], 0x10, 0x1}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{}, &(0x7f0000000b40), &(0x7f0000000b80)='%-010d \x00'}, 0x20) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0x0, 0x6, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xd94c64aa844a35bd, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffb}}, &(0x7f0000000240)='syzkaller\x00', 0x80000001, 0x15, &(0x7f0000000380)=""/21, 0x41000, 0x0, '\x00', r11, @fallback=0x21, r9, 0x8, &(0x7f0000000780)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x4, 0x5, 0x1ff}, 0x10, 0x0, r12, 0x0, &(0x7f0000000c40)=[r13, r7, r14], 0x0, 0x10, 0x8}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) 132.866769ms ago: executing program 0 (id=1167): socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x3a, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0xffffffff, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1]}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) close(r3) r5 = socket$kcm(0x11, 0x2, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x8) r7 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[], 0xfefb) r8 = socket$kcm(0x1e, 0x1, 0x0) recvmsg$unix(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/11, 0xb}], 0x1, &(0x7f0000000640)}, 0x120) 0s ago: executing program 2 (id=1168): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x40082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235c, 0x1, @perf_config_ext={0x603e5b79, 0xaea}, 0x14c05, 0x12e, 0xfffffbff, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0xfffffffffffffd16}, 0x48) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x8a, 0xd, 0x0, 0x0, 0x0, 0x0, 0x70132, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3d, 0x1}, 0x10188, 0x0, 0xc52, 0x3, 0x40, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a000900050282c1c1273e370e0c11", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfe33) kernel console output (not intermixed with test programs): 27653][ T4705] RIP: 0033:0x7ffa9738ebe9 [ 80.632165][ T4705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.651976][ T4705] RSP: 002b:00007ffa981f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.660486][ T4705] RAX: ffffffffffffffda RBX: 00007ffa975b5fa0 RCX: 00007ffa9738ebe9 [ 80.668562][ T4705] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 80.676535][ T4705] RBP: 00007ffa981f9090 R08: 0000000000000000 R09: 0000000000000000 [ 80.684512][ T4705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.692487][ T4705] R13: 00007ffa975b6038 R14: 00007ffa975b5fa0 R15: 00007ffd15217d58 [ 80.700575][ T4705] [ 80.872538][ T4719] netlink: 'syz.4.106': attribute type 9 has an invalid length. [ 80.955756][ T4719] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.106'. [ 81.434101][ T4723] device wg2 left promiscuous mode [ 81.447584][ T4726] netlink: 'syz.0.111': attribute type 3 has an invalid length. [ 81.518140][ T4726] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.111'. [ 81.637324][ T4723] device wg2 entered promiscuous mode [ 81.836365][ T4740] netlink: 'syz.3.115': attribute type 21 has an invalid length. [ 82.518444][ T4763] netlink: 'syz.1.121': attribute type 2 has an invalid length. [ 82.604155][ T4763] netlink: 'syz.1.121': attribute type 1 has an invalid length. [ 82.621946][ T4763] netlink: 'syz.1.121': attribute type 8 has an invalid length. [ 82.631377][ T4763] netlink: 44 bytes leftover after parsing attributes in process `syz.1.121'. [ 82.665659][ T4768] netlink: 'syz.2.125': attribute type 9 has an invalid length. [ 82.676374][ T4768] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.125'. [ 82.910122][ T4771] netlink: 'syz.3.126': attribute type 3 has an invalid length. [ 82.937321][ T4771] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.126'. [ 83.289043][ T4781] netlink: 'syz.0.130': attribute type 21 has an invalid length. [ 83.397915][ T4786] device wg2 left promiscuous mode [ 83.704601][ T4789] device wg2 entered promiscuous mode [ 84.108801][ T4814] netlink: 'syz.4.138': attribute type 9 has an invalid length. [ 84.140857][ T4814] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.138'. [ 84.523137][ T4821] netlink: 'syz.3.142': attribute type 3 has an invalid length. [ 84.551040][ T4821] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.142'. [ 85.511212][ T4848] device wg2 entered promiscuous mode [ 85.725848][ T4862] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.154'. [ 85.791967][ T4865] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.155'. [ 86.339170][ T4875] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.160'. [ 86.584351][ T4879] validate_nla: 3 callbacks suppressed [ 86.584391][ T4879] netlink: 'syz.2.162': attribute type 21 has an invalid length. [ 87.387059][ T4905] netlink: 'syz.2.169': attribute type 9 has an invalid length. [ 87.457623][ T4905] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.169'. [ 88.171833][ T4910] device wg2 left promiscuous mode [ 88.254738][ T4910] device wg2 entered promiscuous mode [ 88.296889][ T4918] netlink: 'syz.0.175': attribute type 3 has an invalid length. [ 88.310084][ T4918] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.175'. [ 88.703191][ T4928] netlink: 'syz.4.179': attribute type 21 has an invalid length. [ 88.847241][ T4939] netlink: 'syz.1.180': attribute type 10 has an invalid length. [ 89.036804][ T4939] device veth1_macvtap left promiscuous mode [ 89.751328][ T4948] netlink: 'syz.2.184': attribute type 9 has an invalid length. [ 89.779317][ T4948] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.184'. [ 90.196827][ T4961] device wg2 entered promiscuous mode [ 90.368841][ T4973] netlink: 'syz.3.192': attribute type 3 has an invalid length. [ 90.382179][ T4973] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.192'. [ 90.508807][ T4977] netlink: 'syz.0.193': attribute type 21 has an invalid length. [ 90.658899][ T4984] netlink: 'syz.3.197': attribute type 41 has an invalid length. [ 91.214475][ T5007] netlink: 'syz.0.203': attribute type 11 has an invalid length. [ 91.320936][ T5007] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.203'. [ 91.575996][ T5016] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.204'. [ 91.759138][ T5023] device wg2 left promiscuous mode [ 91.834499][ T5024] validate_nla: 3 callbacks suppressed [ 91.834518][ T5024] netlink: 'syz.0.207': attribute type 3 has an invalid length. [ 91.877075][ T5023] device wg2 entered promiscuous mode [ 91.894800][ T5024] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.207'. [ 92.043475][ T5035] netlink: 'syz.1.210': attribute type 21 has an invalid length. [ 92.458312][ T5048] FAULT_INJECTION: forcing a failure. [ 92.458312][ T5048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.525694][ T5048] CPU: 0 PID: 5048 Comm: syz.1.215 Not tainted 6.1.147-syzkaller #0 [ 92.533848][ T5048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 92.544148][ T5048] Call Trace: [ 92.547461][ T5048] [ 92.550428][ T5048] dump_stack_lvl+0x168/0x22e [ 92.555162][ T5048] ? show_regs_print_info+0x12/0x12 [ 92.560395][ T5048] ? load_image+0x3b0/0x3b0 [ 92.565048][ T5048] ? __lock_acquire+0x7c50/0x7c50 [ 92.570116][ T5048] should_fail_ex+0x399/0x4d0 [ 92.574832][ T5048] _copy_from_user+0x2c/0x170 [ 92.579550][ T5048] iovec_from_user+0x143/0x360 [ 92.584354][ T5048] __import_iovec+0x6d/0x500 [ 92.588981][ T5048] ? __might_fault+0xa6/0x120 [ 92.588994][ T5054] netlink: 60 bytes leftover after parsing attributes in process `syz.4.218'. [ 92.589028][ T5048] import_iovec+0x6f/0xa0 [ 92.593949][ T5054] netlink: 60 bytes leftover after parsing attributes in process `syz.4.218'. [ 92.602678][ T5048] ___sys_sendmsg+0x1e4/0x290 [ 92.602712][ T5048] ? __sys_sendmsg+0x270/0x270 [ 92.602751][ T5048] ? __lock_acquire+0x7c50/0x7c50 [ 92.602790][ T5048] ? __fdget+0x17c/0x200 [ 92.617749][ T5053] netlink: 60 bytes leftover after parsing attributes in process `syz.4.218'. [ 92.620650][ T5048] __se_sys_sendmsg+0x19e/0x270 [ 92.620686][ T5048] ? __x64_sys_sendmsg+0x80/0x80 [ 92.620722][ T5048] ? lockdep_hardirqs_on+0x94/0x140 [ 92.620749][ T5048] do_syscall_64+0x4c/0xa0 [ 92.620766][ T5048] ? clear_bhb_loop+0x60/0xb0 [ 92.620782][ T5048] ? clear_bhb_loop+0x60/0xb0 [ 92.620801][ T5048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.620826][ T5048] RIP: 0033:0x7feedb98ebe9 [ 92.620844][ T5048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.620859][ T5048] RSP: 002b:00007feedc834038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.620882][ T5048] RAX: ffffffffffffffda RBX: 00007feedbbb6090 RCX: 00007feedb98ebe9 [ 92.620896][ T5048] RDX: 0000000000000020 RSI: 0000200000000980 RDI: 0000000000000003 [ 92.681006][ T5056] netlink: 60 bytes leftover after parsing attributes in process `syz.4.218'. [ 92.683858][ T5048] RBP: 00007feedc834090 R08: 0000000000000000 R09: 0000000000000000 [ 92.683882][ T5048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.683894][ T5048] R13: 00007feedbbb6128 R14: 00007feedbbb6090 R15: 00007ffca88ffd08 [ 92.683925][ T5048] [ 93.000098][ T5067] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.221'. [ 93.058470][ T5069] device wg2 left promiscuous mode [ 93.137227][ T5069] device wg2 entered promiscuous mode [ 93.148589][ T5073] netlink: 'syz.0.225': attribute type 3 has an invalid length. [ 93.487107][ T5076] netlink: 'syz.3.226': attribute type 21 has an invalid length. [ 94.228409][ T5112] device wg2 left promiscuous mode [ 94.259242][ T5113] netlink: 'syz.0.240': attribute type 3 has an invalid length. [ 94.451689][ T5112] device wg2 entered promiscuous mode [ 94.767636][ T5121] netlink: 'syz.0.243': attribute type 3 has an invalid length. [ 94.786357][ T5121] __nla_validate_parse: 3 callbacks suppressed [ 94.786373][ T5121] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.243'. [ 94.858838][ T5123] netlink: 'syz.4.244': attribute type 21 has an invalid length. [ 95.093207][ T5130] device ipvlan0 entered promiscuous mode [ 95.566678][ T5147] netlink: 'syz.0.251': attribute type 3 has an invalid length. [ 95.665416][ T5147] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.251'. [ 97.875388][ T5154] device wg2 left promiscuous mode [ 97.893314][ T5156] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.255'. [ 97.905363][ T5164] device wg2 entered promiscuous mode [ 98.156165][ T5172] netlink: 'syz.4.260': attribute type 21 has an invalid length. [ 98.212017][ T5171] netlink: 'syz.0.258': attribute type 10 has an invalid length. [ 98.360029][ T5171] team0: Cannot enslave team device to itself [ 98.410692][ T5184] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 99.027830][ T5199] netlink: 'syz.1.268': attribute type 3 has an invalid length. [ 99.043846][ T5199] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.268'. [ 99.750170][ T5211] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.271'. [ 100.119684][ T5215] device wg2 left promiscuous mode [ 100.240988][ T5215] device wg2 entered promiscuous mode [ 100.332073][ T5226] FAULT_INJECTION: forcing a failure. [ 100.332073][ T5226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.381017][ T5226] CPU: 1 PID: 5226 Comm: syz.0.276 Not tainted 6.1.147-syzkaller #0 [ 100.389331][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.399415][ T5226] Call Trace: [ 100.402828][ T5226] [ 100.405788][ T5226] dump_stack_lvl+0x168/0x22e [ 100.410502][ T5226] ? show_regs_print_info+0x12/0x12 [ 100.415742][ T5226] ? load_image+0x3b0/0x3b0 [ 100.420270][ T5226] ? __lock_acquire+0x7c50/0x7c50 [ 100.425303][ T5226] ? lockdep_hardirqs_on+0x94/0x140 [ 100.430630][ T5226] should_fail_ex+0x399/0x4d0 [ 100.435345][ T5226] _copy_from_user+0x2c/0x170 [ 100.440047][ T5226] perf_copy_attr+0x174/0x850 [ 100.444929][ T5226] ? irqentry_enter+0x33/0x50 [ 100.449634][ T5226] __se_sys_perf_event_open+0xce/0x1e60 [ 100.455204][ T5226] ? lock_chain_count+0x20/0x20 [ 100.460370][ T5226] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 100.466056][ T5226] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 100.471704][ T5226] do_syscall_64+0x4c/0xa0 [ 100.476126][ T5226] ? clear_bhb_loop+0x60/0xb0 [ 100.480823][ T5226] ? clear_bhb_loop+0x60/0xb0 [ 100.485540][ T5226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.491471][ T5226] RIP: 0033:0x7ffa9738ebe9 [ 100.495995][ T5226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.515632][ T5226] RSP: 002b:00007ffa981f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 100.524060][ T5226] RAX: ffffffffffffffda RBX: 00007ffa975b5fa0 RCX: 00007ffa9738ebe9 [ 100.532071][ T5226] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000003c0 [ 100.540496][ T5226] RBP: 00007ffa981f9090 R08: 0000000000000000 R09: 0000000000000000 [ 100.548469][ T5226] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 100.556455][ T5226] R13: 00007ffa975b6038 R14: 00007ffa975b5fa0 R15: 00007ffd15217d58 [ 100.564447][ T5226] [ 100.966349][ T5243] netlink: 60 bytes leftover after parsing attributes in process `syz.1.281'. [ 100.999964][ T5243] netlink: 60 bytes leftover after parsing attributes in process `syz.1.281'. [ 101.049923][ T5240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.281'. [ 101.109049][ T5249] netlink: 60 bytes leftover after parsing attributes in process `syz.1.281'. [ 101.532747][ T5265] netlink: 'syz.0.286': attribute type 3 has an invalid length. [ 101.583673][ T5265] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.286'. [ 101.770614][ T5263] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.287'. [ 102.377061][ T5281] device wg2 left promiscuous mode [ 102.629516][ T5281] device wg2 entered promiscuous mode [ 102.768270][ T5288] netlink: 60 bytes leftover after parsing attributes in process `syz.0.293'. [ 102.807706][ T5288] netlink: 60 bytes leftover after parsing attributes in process `syz.0.293'. [ 102.855373][ T5287] netlink: 60 bytes leftover after parsing attributes in process `syz.0.293'. [ 102.909381][ T5292] netlink: 60 bytes leftover after parsing attributes in process `syz.0.293'. [ 103.644875][ T5319] netlink: 'syz.1.304': attribute type 3 has an invalid length. [ 105.245484][ T5310] device syzkaller0 entered promiscuous mode [ 105.314731][ T5332] FAULT_INJECTION: forcing a failure. [ 105.314731][ T5332] name failslab, interval 1, probability 0, space 0, times 0 [ 105.431536][ T5332] CPU: 0 PID: 5332 Comm: syz.2.307 Not tainted 6.1.147-syzkaller #0 [ 105.439701][ T5332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.449804][ T5332] Call Trace: [ 105.453104][ T5332] [ 105.456143][ T5332] dump_stack_lvl+0x168/0x22e [ 105.460881][ T5332] ? show_regs_print_info+0x12/0x12 [ 105.466111][ T5332] ? load_image+0x3b0/0x3b0 [ 105.470654][ T5332] ? __might_sleep+0xd0/0xd0 [ 105.475277][ T5332] ? __lock_acquire+0x7c50/0x7c50 [ 105.480332][ T5332] should_fail_ex+0x399/0x4d0 [ 105.485056][ T5332] should_failslab+0x5/0x20 [ 105.489591][ T5332] slab_pre_alloc_hook+0x59/0x310 [ 105.494643][ T5332] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 105.500485][ T5332] __kmem_cache_alloc_node+0x4f/0x260 [ 105.505888][ T5332] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 105.511718][ T5332] __kmalloc+0xa0/0x240 [ 105.515906][ T5332] tomoyo_realpath_from_path+0xdf/0x5d0 [ 105.521497][ T5332] tomoyo_path_number_perm+0x1e3/0x600 [ 105.527073][ T5332] ? tomoyo_path_number_perm+0x1b6/0x600 [ 105.532727][ T5332] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 105.538404][ T5332] ? ksys_write+0x1bd/0x240 [ 105.542999][ T5332] ? common_file_perm+0x171/0x1c0 [ 105.548117][ T5332] ? __fget_files+0x28/0x4d0 [ 105.552757][ T5332] security_file_ioctl+0x6c/0xa0 [ 105.557728][ T5332] __se_sys_ioctl+0x48/0x170 [ 105.562360][ T5332] do_syscall_64+0x4c/0xa0 [ 105.566892][ T5332] ? clear_bhb_loop+0x60/0xb0 [ 105.571598][ T5332] ? clear_bhb_loop+0x60/0xb0 [ 105.576316][ T5332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.582325][ T5332] RIP: 0033:0x7fa52ef8ebe9 [ 105.586852][ T5332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.606582][ T5332] RSP: 002b:00007fa52fe5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.615223][ T5332] RAX: ffffffffffffffda RBX: 00007fa52f1b5fa0 RCX: 00007fa52ef8ebe9 [ 105.623224][ T5332] RDX: 0000000000000000 RSI: 00000000000089ef RDI: 0000000000000003 [ 105.631233][ T5332] RBP: 00007fa52fe5a090 R08: 0000000000000000 R09: 0000000000000000 [ 105.639241][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.647249][ T5332] R13: 00007fa52f1b6038 R14: 00007fa52f1b5fa0 R15: 00007ffcb1423bc8 [ 105.655265][ T5332] [ 105.910288][ T5332] ERROR: Out of memory at tomoyo_realpath_from_path. [ 106.914404][ T5334] device wg2 left promiscuous mode [ 107.154405][ T5334] device wg2 entered promiscuous mode [ 107.834909][ T5368] netlink: 'syz.2.319': attribute type 3 has an invalid length. [ 107.898009][ T5368] __nla_validate_parse: 2 callbacks suppressed [ 107.898026][ T5368] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.319'. [ 108.366780][ T5380] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.321'. [ 108.616129][ T5382] netlink: 'syz.3.322': attribute type 3 has an invalid length. [ 108.624409][ T5382] netlink: 'syz.3.322': attribute type 1 has an invalid length. [ 108.637780][ T5382] netlink: 116 bytes leftover after parsing attributes in process `syz.3.322'. [ 109.340168][ T5406] device wg2 left promiscuous mode [ 110.044804][ T5426] netlink: 'syz.1.335': attribute type 3 has an invalid length. [ 110.069642][ T5426] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.335'. [ 110.242617][ T5412] device wg2 entered promiscuous mode [ 111.930154][ T5439] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.338'. [ 112.454209][ T5464] netlink: 'syz.2.349': attribute type 3 has an invalid length. [ 112.509997][ T5464] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.349'. [ 113.679195][ T5484] netlink: 'syz.3.351': attribute type 3 has an invalid length. [ 113.730364][ T5484] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.351'. [ 115.311810][ T5472] device wg2 left promiscuous mode [ 115.386888][ T5480] device wg2 entered promiscuous mode [ 115.457454][ T5487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.633063][ T5493] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.353'. [ 116.019741][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 116.036171][ T5510] FAULT_INJECTION: forcing a failure. [ 116.036171][ T5510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.077578][ T5506] netlink: 830 bytes leftover after parsing attributes in process `syz.1.361'. [ 116.087030][ T5510] CPU: 1 PID: 5510 Comm: syz.0.362 Not tainted 6.1.147-syzkaller #0 [ 116.095061][ T5510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.105240][ T5510] Call Trace: [ 116.108545][ T5510] [ 116.111500][ T5510] dump_stack_lvl+0x168/0x22e [ 116.116215][ T5510] ? show_regs_print_info+0x12/0x12 [ 116.121626][ T5510] ? load_image+0x3b0/0x3b0 [ 116.126167][ T5510] ? __lock_acquire+0x7c50/0x7c50 [ 116.131234][ T5510] ? snprintf+0xd7/0x120 [ 116.135521][ T5510] should_fail_ex+0x399/0x4d0 [ 116.140243][ T5510] _copy_to_user+0x2c/0x130 [ 116.144787][ T5510] simple_read_from_buffer+0xe3/0x150 [ 116.150298][ T5510] proc_fail_nth_read+0x19a/0x210 [ 116.155368][ T5510] ? proc_fault_inject_write+0x2f0/0x2f0 [ 116.161045][ T5510] ? fsnotify_perm+0x248/0x550 [ 116.165851][ T5510] ? proc_fault_inject_write+0x2f0/0x2f0 [ 116.171527][ T5510] vfs_read+0x2c0/0x920 [ 116.175731][ T5510] ? kernel_read+0x1e0/0x1e0 [ 116.180365][ T5510] ? __fget_files+0x28/0x4d0 [ 116.185001][ T5510] ? __fget_files+0x44a/0x4d0 [ 116.189837][ T5510] ? __fdget_pos+0x2ae/0x360 [ 116.194482][ T5510] ? ksys_read+0x71/0x240 [ 116.198874][ T5510] ksys_read+0x143/0x240 [ 116.203159][ T5510] ? vfs_write+0x960/0x960 [ 116.207709][ T5510] ? lockdep_hardirqs_on+0x94/0x140 [ 116.212983][ T5510] do_syscall_64+0x4c/0xa0 [ 116.217434][ T5510] ? clear_bhb_loop+0x60/0xb0 [ 116.222149][ T5510] ? clear_bhb_loop+0x60/0xb0 [ 116.226862][ T5510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.232887][ T5510] RIP: 0033:0x7ffa9738d5fc [ 116.237328][ T5510] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 116.257060][ T5510] RSP: 002b:00007ffa981f9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 116.265517][ T5510] RAX: ffffffffffffffda RBX: 00007ffa975b5fa0 RCX: 00007ffa9738d5fc [ 116.273527][ T5510] RDX: 000000000000000f RSI: 00007ffa981f90a0 RDI: 0000000000000004 [ 116.281751][ T5510] RBP: 00007ffa981f9090 R08: 0000000000000000 R09: 0000000000000000 [ 116.289852][ T5510] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 116.297952][ T5510] R13: 00007ffa975b6038 R14: 00007ffa975b5fa0 R15: 00007ffd15217d58 [ 116.305984][ T5510] [ 116.562757][ T5523] netlink: 'syz.3.364': attribute type 3 has an invalid length. [ 116.587901][ T5523] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.364'. [ 116.839808][ T5527] device wg2 left promiscuous mode [ 117.027435][ T5530] device wg2 entered promiscuous mode [ 117.572808][ T5542] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.372'. [ 119.072751][ T5563] netlink: 'syz.1.383': attribute type 3 has an invalid length. [ 119.081520][ T5563] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.383'. [ 119.569788][ T5583] netlink: 'syz.3.387': attribute type 3 has an invalid length. [ 119.578008][ T5583] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.387'. [ 120.297304][ T5574] device wg2 left promiscuous mode [ 120.368235][ T5590] device wg2 entered promiscuous mode [ 120.607638][ T5604] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.391'. [ 121.248538][ T5627] FAULT_INJECTION: forcing a failure. [ 121.248538][ T5627] name failslab, interval 1, probability 0, space 0, times 0 [ 121.340790][ T5627] CPU: 1 PID: 5627 Comm: syz.4.403 Not tainted 6.1.147-syzkaller #0 [ 121.348886][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.359093][ T5627] Call Trace: [ 121.362510][ T5627] [ 121.365493][ T5627] dump_stack_lvl+0x168/0x22e [ 121.370258][ T5627] ? show_regs_print_info+0x12/0x12 [ 121.375536][ T5627] ? load_image+0x3b0/0x3b0 [ 121.380132][ T5627] ? __lock_acquire+0x7c50/0x7c50 [ 121.385251][ T5627] should_fail_ex+0x399/0x4d0 [ 121.390027][ T5627] should_failslab+0x5/0x20 [ 121.394585][ T5627] slab_pre_alloc_hook+0x59/0x310 [ 121.399757][ T5627] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.405912][ T5627] kmem_cache_alloc_node+0x5a/0x320 [ 121.411161][ T5627] ? alloc_vmap_area+0x185/0x1880 [ 121.416433][ T5627] alloc_vmap_area+0x185/0x1880 [ 121.421399][ T5627] ? vm_map_ram+0xab0/0xab0 [ 121.426044][ T5627] ? rcu_is_watching+0x11/0xa0 [ 121.430886][ T5627] __get_vm_area_node+0x158/0x330 [ 121.435962][ T5627] ? __local_bh_enable_ip+0x12a/0x1b0 [ 121.441402][ T5627] __vmalloc_node_range+0x357/0x1390 [ 121.446740][ T5627] ? netlink_sendmsg+0x5dd/0xbc0 [ 121.451736][ T5627] ? release_sock+0x2b/0x1b0 [ 121.456396][ T5627] ? netlink_insert+0x101f/0x13b0 [ 121.461591][ T5627] ? netlink_insert+0x274/0x13b0 [ 121.466611][ T5627] ? free_vm_area+0x50/0x50 [ 121.471197][ T5627] ? netlink_sendmsg+0x5dd/0xbc0 [ 121.476293][ T5627] vmalloc+0x75/0x80 [ 121.480339][ T5627] ? netlink_sendmsg+0x5dd/0xbc0 [ 121.485333][ T5627] netlink_sendmsg+0x5dd/0xbc0 [ 121.490191][ T5627] ? netlink_getsockopt+0x540/0x540 [ 121.495464][ T5627] ? aa_sock_msg_perm+0x94/0x150 [ 121.500465][ T5627] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 121.505801][ T5627] ? security_socket_sendmsg+0x7c/0xa0 [ 121.511327][ T5627] ? netlink_getsockopt+0x540/0x540 [ 121.516578][ T5627] ____sys_sendmsg+0x59b/0x970 [ 121.521429][ T5627] ? __sys_sendmsg_sock+0x30/0x30 [ 121.526499][ T5627] ? __import_iovec+0x315/0x500 [ 121.531528][ T5627] ? import_iovec+0x6f/0xa0 [ 121.536221][ T5627] ___sys_sendmsg+0x21c/0x290 [ 121.541085][ T5627] ? __sys_sendmsg+0x270/0x270 [ 121.545986][ T5627] ? __lock_acquire+0x7c50/0x7c50 [ 121.551140][ T5627] ? __fdget+0x17c/0x200 [ 121.555478][ T5627] __se_sys_sendmsg+0x19e/0x270 [ 121.560399][ T5627] ? __x64_sys_sendmsg+0x80/0x80 [ 121.565452][ T5627] ? lockdep_hardirqs_on+0x94/0x140 [ 121.570740][ T5627] do_syscall_64+0x4c/0xa0 [ 121.575263][ T5627] ? clear_bhb_loop+0x60/0xb0 [ 121.580017][ T5627] ? clear_bhb_loop+0x60/0xb0 [ 121.584752][ T5627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.590701][ T5627] RIP: 0033:0x7f7c84f8ebe9 [ 121.595167][ T5627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.614843][ T5627] RSP: 002b:00007f7c85dd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.623492][ T5627] RAX: ffffffffffffffda RBX: 00007f7c851b5fa0 RCX: 00007f7c84f8ebe9 [ 121.631605][ T5627] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 121.639624][ T5627] RBP: 00007f7c85dd3090 R08: 0000000000000000 R09: 0000000000000000 [ 121.647636][ T5627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.655832][ T5627] R13: 00007f7c851b6038 R14: 00007f7c851b5fa0 R15: 00007ffd368cb608 [ 121.664014][ T5627] [ 121.813262][ T5633] netlink: 'syz.1.404': attribute type 3 has an invalid length. [ 121.846937][ T5633] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.404'. [ 122.074146][ T5627] syz.4.403: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 122.121434][ T5627] CPU: 1 PID: 5627 Comm: syz.4.403 Not tainted 6.1.147-syzkaller #0 [ 122.129501][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.139699][ T5627] Call Trace: [ 122.143033][ T5627] [ 122.145997][ T5627] dump_stack_lvl+0x168/0x22e [ 122.150710][ T5627] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 122.157167][ T5627] ? show_regs_print_info+0x12/0x12 [ 122.162402][ T5627] ? load_image+0x3b0/0x3b0 [ 122.166951][ T5627] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 122.173499][ T5627] ? cpuset_print_current_mems_allowed+0x2df/0x360 [ 122.180137][ T5627] warn_alloc+0x20c/0x300 [ 122.184589][ T5627] ? slab_free_freelist_hook+0x131/0x1a0 [ 122.190250][ T5627] ? zone_watermark_ok_safe+0x270/0x270 [ 122.195821][ T5627] ? __get_vm_area_node+0x16d/0x330 [ 122.201071][ T5627] ? __get_vm_area_node+0x16d/0x330 [ 122.206298][ T5627] ? __local_bh_enable_ip+0x12a/0x1b0 [ 122.211706][ T5627] __vmalloc_node_range+0x37c/0x1390 [ 122.217030][ T5627] ? release_sock+0x2b/0x1b0 [ 122.221759][ T5627] ? netlink_insert+0x101f/0x13b0 [ 122.226920][ T5627] ? netlink_insert+0x274/0x13b0 [ 122.231901][ T5627] ? free_vm_area+0x50/0x50 [ 122.236534][ T5627] ? netlink_sendmsg+0x5dd/0xbc0 [ 122.241498][ T5627] vmalloc+0x75/0x80 [ 122.245420][ T5627] ? netlink_sendmsg+0x5dd/0xbc0 [ 122.250383][ T5627] netlink_sendmsg+0x5dd/0xbc0 [ 122.255180][ T5627] ? netlink_getsockopt+0x540/0x540 [ 122.260493][ T5627] ? aa_sock_msg_perm+0x94/0x150 [ 122.265553][ T5627] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 122.270889][ T5627] ? security_socket_sendmsg+0x7c/0xa0 [ 122.276376][ T5627] ? netlink_getsockopt+0x540/0x540 [ 122.281594][ T5627] ____sys_sendmsg+0x59b/0x970 [ 122.286393][ T5627] ? __sys_sendmsg_sock+0x30/0x30 [ 122.291534][ T5627] ? __import_iovec+0x315/0x500 [ 122.296437][ T5627] ? import_iovec+0x6f/0xa0 [ 122.300971][ T5627] ___sys_sendmsg+0x21c/0x290 [ 122.305779][ T5627] ? __sys_sendmsg+0x270/0x270 [ 122.310633][ T5627] ? __lock_acquire+0x7c50/0x7c50 [ 122.315721][ T5627] ? __fdget+0x17c/0x200 [ 122.320008][ T5627] __se_sys_sendmsg+0x19e/0x270 [ 122.324901][ T5627] ? __x64_sys_sendmsg+0x80/0x80 [ 122.329887][ T5627] ? lockdep_hardirqs_on+0x94/0x140 [ 122.335112][ T5627] do_syscall_64+0x4c/0xa0 [ 122.339548][ T5627] ? clear_bhb_loop+0x60/0xb0 [ 122.344248][ T5627] ? clear_bhb_loop+0x60/0xb0 [ 122.348945][ T5627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.354866][ T5627] RIP: 0033:0x7f7c84f8ebe9 [ 122.359307][ T5627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.379294][ T5627] RSP: 002b:00007f7c85dd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.388002][ T5627] RAX: ffffffffffffffda RBX: 00007f7c851b5fa0 RCX: 00007f7c84f8ebe9 [ 122.396011][ T5627] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 122.404028][ T5627] RBP: 00007f7c85dd3090 R08: 0000000000000000 R09: 0000000000000000 [ 122.412123][ T5627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.420123][ T5627] R13: 00007f7c851b6038 R14: 00007f7c851b5fa0 R15: 00007ffd368cb608 [ 122.428154][ T5627] [ 122.466177][ T5627] Mem-Info: [ 122.469721][ T5627] active_anon:5345 inactive_anon:0 isolated_anon:0 [ 122.469721][ T5627] active_file:13473 inactive_file:39846 isolated_file:0 [ 122.469721][ T5627] unevictable:768 dirty:27 writeback:0 [ 122.469721][ T5627] slab_reclaimable:20678 slab_unreclaimable:97019 [ 122.469721][ T5627] mapped:31787 shmem:1361 pagetables:619 [ 122.469721][ T5627] sec_pagetables:0 bounce:0 [ 122.469721][ T5627] kernel_misc_reclaimable:0 [ 122.469721][ T5627] free:1331991 free_pcp:7355 free_cma:0 [ 122.524731][ T5627] Node 0 active_anon:21380kB inactive_anon:0kB active_file:53892kB inactive_file:159180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127148kB dirty:108kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11620kB pagetables:2476kB sec_pagetables:0kB all_unreclaimable? no [ 122.583851][ T5627] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 122.624758][ T5627] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.660325][ T5627] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 122.666787][ T5627] Node 0 DMA32 free:1413508kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:21412kB inactive_anon:0kB active_file:53892kB inactive_file:159180kB unevictable:1536kB writepending:108kB present:3129332kB managed:2593360kB mlocked:0kB bounce:0kB free_pcp:12396kB local_pcp:1292kB free_cma:0kB [ 122.746699][ T5627] lowmem_reserve[]: 0 0 1 1 1 [ 122.762248][ T5627] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.838046][ T5627] lowmem_reserve[]: 0 0 0 0 0 [ 122.843413][ T5627] Node 1 Normal free:3899096kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:16320kB local_pcp:7936kB free_cma:0kB [ 122.945131][ T5627] lowmem_reserve[]: 0 0 0 0 0 [ 122.950153][ T5627] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 122.994352][ T5627] Node 0 DMA32: 1875*4kB (UM) 1269*8kB (UME) 1235*16kB (UM) 732*32kB (UME) 324*64kB (UME) 26*128kB (UME) 9*256kB (UME) 6*512kB (UME) 7*1024kB (UME) 4*2048kB (M) 319*4096kB (M) = 1412260kB [ 123.024673][ T5627] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 123.045575][ T5627] Node 1 Normal: 256*4kB (UME) 49*8kB (UME) 27*16kB (UME) 39*32kB (UME) 17*64kB (UME) 11*128kB (UME) 3*256kB (UE) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 949*4096kB (M) = 3899096kB [ 123.069937][ T5627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.086619][ T5627] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 123.096814][ T5627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.111745][ T5627] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 123.124831][ T5627] 54680 total pagecache pages [ 123.129551][ T5627] 0 pages in swap cache [ 123.136203][ T5627] Free swap = 124996kB [ 123.140396][ T5627] Total swap = 124996kB [ 123.150099][ T5627] 2097051 pages RAM [ 123.159080][ T5627] 0 pages HighMem/MovableOnly [ 123.167279][ T5627] 415110 pages reserved [ 123.174437][ T5627] 0 pages cma reserved [ 123.298695][ T5637] device wg2 left promiscuous mode [ 123.367093][ T5647] device wg2 entered promiscuous mode [ 123.503997][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 123.579347][ T5653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.751998][ T5657] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.409'. [ 123.775537][ T5664] netlink: 830 bytes leftover after parsing attributes in process `syz.2.411'. [ 124.699227][ T5682] netlink: 'syz.4.420': attribute type 3 has an invalid length. [ 124.735895][ T5682] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.420'. [ 124.879380][ T5690] device wg2 left promiscuous mode [ 125.370194][ T5703] netlink: 'syz.4.424': attribute type 29 has an invalid length. [ 126.436736][ T5701] device wg2 entered promiscuous mode [ 126.448971][ T5703] netlink: 'syz.4.424': attribute type 29 has an invalid length. [ 126.546318][ T5704] netlink: 'syz.4.424': attribute type 29 has an invalid length. [ 126.699248][ T5715] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.426'. [ 127.557305][ T5738] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 127.564325][ T5738] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 127.663331][ T5732] netlink: 'syz.3.434': attribute type 3 has an invalid length. [ 127.707488][ T5732] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.434'. [ 128.128354][ T5746] device wg2 left promiscuous mode [ 128.185861][ T5746] device wg2 entered promiscuous mode [ 129.050793][ T5761] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 129.201261][ T5761] team0: Port device netdevsim0 added [ 129.277581][ T5757] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 129.448835][ T5757] team0: Port device netdevsim0 removed [ 129.460083][ T5757] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 129.521030][ T5763] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.444'. [ 129.608477][ T5765] device wg2 left promiscuous mode [ 129.920837][ T5765] device wg2 entered promiscuous mode [ 130.374904][ T5788] device bond_slave_1 entered promiscuous mode [ 130.430645][ T5788] netlink: 'syz.1.451': attribute type 29 has an invalid length. [ 130.452559][ T5788] netlink: 'syz.1.451': attribute type 29 has an invalid length. [ 130.585914][ T5797] netlink: 'syz.0.454': attribute type 3 has an invalid length. [ 130.630028][ T5797] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.454'. [ 130.755297][ T5804] netlink: 'syz.4.455': attribute type 3 has an invalid length. [ 130.764609][ T5804] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.455'. [ 131.298294][ T5821] netlink: 60 bytes leftover after parsing attributes in process `syz.3.461'. [ 131.308766][ T5814] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.460'. [ 131.369478][ T5821] netlink: 60 bytes leftover after parsing attributes in process `syz.3.461'. [ 131.380130][ T5815] netlink: 60 bytes leftover after parsing attributes in process `syz.3.461'. [ 131.390177][ T5823] netlink: 60 bytes leftover after parsing attributes in process `syz.3.461'. [ 131.595188][ T5828] device wg2 left promiscuous mode [ 131.827942][ T5828] device wg2 entered promiscuous mode [ 132.125190][ T5840] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.479'. [ 132.255423][ T5847] netlink: 'syz.1.472': attribute type 3 has an invalid length. [ 132.284371][ T5847] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.472'. [ 132.560294][ T5860] netlink: 60 bytes leftover after parsing attributes in process `syz.4.478'. [ 132.621738][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.628083][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.693829][ T5864] netlink: 'syz.1.481': attribute type 3 has an invalid length. [ 133.435823][ T5888] device wg2 left promiscuous mode [ 133.496014][ T5900] netlink: 'syz.4.491': attribute type 3 has an invalid length. [ 133.510940][ T5888] device wg2 entered promiscuous mode [ 135.317898][ T5937] netlink: 'syz.1.504': attribute type 41 has an invalid length. [ 135.337246][ T5939] netlink: 'syz.0.506': attribute type 3 has an invalid length. [ 135.613949][ T5948] device wg2 left promiscuous mode [ 135.699435][ T5948] device wg2 entered promiscuous mode [ 136.134431][ T5966] netlink: 'syz.3.514': attribute type 21 has an invalid length. [ 137.196730][ T5993] netlink: 'syz.0.521': attribute type 9 has an invalid length. [ 137.229786][ T5993] __nla_validate_parse: 9 callbacks suppressed [ 137.229804][ T5993] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.521'. [ 137.888509][ T5999] device wg2 left promiscuous mode [ 138.045798][ T5999] device wg2 entered promiscuous mode [ 138.294599][ T6017] device wg2 left promiscuous mode [ 138.430975][ T6018] device wg2 entered promiscuous mode [ 138.864224][ T6032] device wg2 left promiscuous mode [ 139.033094][ T6032] device wg2 entered promiscuous mode [ 139.163003][ T6043] netlink: 'syz.4.541': attribute type 11 has an invalid length. [ 139.225350][ T6046] netlink: 'syz.2.540': attribute type 9 has an invalid length. [ 139.261091][ T6046] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.540'. [ 139.418842][ T6041] netlink: 'syz.4.541': attribute type 3 has an invalid length. [ 139.448099][ T6041] netlink: 'syz.4.541': attribute type 1 has an invalid length. [ 139.460223][ T6041] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.541'. [ 140.402320][ T6064] netlink: 'syz.1.558': attribute type 9 has an invalid length. [ 140.430742][ T6064] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.558'. [ 140.483045][ T6069] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.549'. [ 140.647062][ T6071] netlink: 'syz.3.550': attribute type 21 has an invalid length. [ 141.145013][ T6084] netlink: 'syz.1.554': attribute type 3 has an invalid length. [ 141.187496][ T6084] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.554'. [ 141.566236][ T6091] netlink: 'syz.2.557': attribute type 41 has an invalid length. [ 141.785284][ T6103] netlink: 'syz.4.564': attribute type 3 has an invalid length. [ 141.814390][ T6103] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.564'. [ 142.042788][ T6110] device wg2 left promiscuous mode [ 142.202411][ T6107] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.563'. [ 142.400001][ T6110] device wg2 entered promiscuous mode [ 142.981411][ T6127] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.569'. [ 143.204956][ T6133] netlink: 'syz.3.570': attribute type 3 has an invalid length. [ 143.242131][ T6133] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.570'. [ 143.761243][ T6143] device wg2 left promiscuous mode [ 143.848848][ T6143] device wg2 entered promiscuous mode [ 144.353993][ T6160] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.576'. [ 144.437824][ T6159] netlink: 'syz.3.577': attribute type 3 has an invalid length. [ 144.489230][ T6159] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.577'. [ 145.485785][ T6186] device wg2 left promiscuous mode [ 145.520142][ T6189] device wg2 left promiscuous mode [ 145.595938][ T6186] device wg2 entered promiscuous mode [ 146.000329][ T6191] device wg2 entered promiscuous mode [ 146.338299][ T6215] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.598'. [ 147.012396][ T6235] netlink: 'syz.2.604': attribute type 3 has an invalid length. [ 147.046624][ T6235] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.604'. [ 147.171313][ T6238] netlink: 'syz.4.606': attribute type 9 has an invalid length. [ 147.210701][ T6238] netlink: 65023 bytes leftover after parsing attributes in process `syz.4.606'. [ 147.328401][ T6243] device wg2 left promiscuous mode [ 147.355590][ T6234] netlink: 'syz.1.617': attribute type 9 has an invalid length. [ 147.363875][ T6234] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.617'. [ 147.517990][ T6246] device ipvlan0 entered promiscuous mode [ 147.529338][ T6243] device wg2 entered promiscuous mode [ 147.666648][ T6250] device wg2 left promiscuous mode [ 147.811030][ T6250] device wg2 entered promiscuous mode [ 147.995882][ T6258] device wg2 left promiscuous mode [ 148.591241][ T6262] device wg2 entered promiscuous mode [ 150.074103][ T6279] netlink: 'syz.3.623': attribute type 9 has an invalid length. [ 150.082270][ T6279] netlink: 65023 bytes leftover after parsing attributes in process `syz.3.623'. [ 150.101786][ T6284] netlink: 'syz.4.624': attribute type 10 has an invalid length. [ 150.165394][ T6284] team0: Port device netdevsim0 added [ 150.171703][ T6285] netlink: 'syz.4.624': attribute type 10 has an invalid length. [ 150.254694][ T6285] team0: Port device netdevsim0 removed [ 150.281720][ T6287] netlink: 'syz.1.625': attribute type 3 has an invalid length. [ 150.298716][ T6285] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 150.308588][ T6287] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.625'. [ 150.791452][ T6302] netlink: 'syz.2.627': attribute type 29 has an invalid length. [ 153.282535][ T6294] device bond_slave_1 entered promiscuous mode [ 153.293282][ T6302] netlink: 'syz.2.627': attribute type 29 has an invalid length. [ 153.303494][ T6304] device wg2 left promiscuous mode [ 153.384520][ T6311] device wg2 entered promiscuous mode [ 153.817013][ T6332] netlink: 'syz.1.635': attribute type 9 has an invalid length. [ 153.898681][ T6332] netlink: 65023 bytes leftover after parsing attributes in process `syz.1.635'. [ 153.940354][ T6335] netlink: 'syz.0.636': attribute type 9 has an invalid length. [ 153.967010][ T6335] netlink: 65023 bytes leftover after parsing attributes in process `syz.0.636'. [ 154.502896][ T6346] netlink: 'syz.1.642': attribute type 3 has an invalid length. [ 154.539165][ T6346] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.642'. [ 154.591869][ T6353] netlink: 'syz.2.654': attribute type 12 has an invalid length. [ 154.680913][ T6353] netlink: 132 bytes leftover after parsing attributes in process `syz.2.654'. [ 154.792432][ T6356] device bond_slave_1 entered promiscuous mode [ 154.996155][ T6361] device wg2 left promiscuous mode [ 155.037580][ T6363] FAULT_INJECTION: forcing a failure. [ 155.037580][ T6363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.084892][ T6363] CPU: 0 PID: 6363 Comm: syz.3.647 Not tainted 6.1.147-syzkaller #0 [ 155.093128][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.103770][ T6363] Call Trace: [ 155.107077][ T6363] [ 155.110040][ T6363] dump_stack_lvl+0x168/0x22e [ 155.114757][ T6363] ? show_regs_print_info+0x12/0x12 [ 155.119987][ T6363] ? load_image+0x3b0/0x3b0 [ 155.124533][ T6363] ? __lock_acquire+0x7c50/0x7c50 [ 155.129610][ T6363] should_fail_ex+0x399/0x4d0 [ 155.134504][ T6363] _copy_from_user+0x2c/0x170 [ 155.139310][ T6363] ___sys_recvmsg+0x12b/0x510 [ 155.144029][ T6363] ? __sys_recvmsg+0x270/0x270 [ 155.148812][ T6363] ? common_file_perm+0x171/0x1c0 [ 155.153859][ T6363] ? __fget_files+0x44a/0x4d0 [ 155.158572][ T6363] ? __fdget+0x17c/0x200 [ 155.162823][ T6363] __x64_sys_recvmsg+0x1eb/0x2b0 [ 155.167768][ T6363] ? ___sys_recvmsg+0x510/0x510 [ 155.172638][ T6363] ? lockdep_hardirqs_on+0x94/0x140 [ 155.177842][ T6363] do_syscall_64+0x4c/0xa0 [ 155.182280][ T6363] ? clear_bhb_loop+0x60/0xb0 [ 155.186960][ T6363] ? clear_bhb_loop+0x60/0xb0 [ 155.191645][ T6363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.197823][ T6363] RIP: 0033:0x7f178738ebe9 [ 155.202240][ T6363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.221970][ T6363] RSP: 002b:00007f178828f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 155.230412][ T6363] RAX: ffffffffffffffda RBX: 00007f17875b5fa0 RCX: 00007f178738ebe9 [ 155.238390][ T6363] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 155.246404][ T6363] RBP: 00007f178828f090 R08: 0000000000000000 R09: 0000000000000000 [ 155.254473][ T6363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.262448][ T6363] R13: 00007f17875b6038 R14: 00007f17875b5fa0 R15: 00007ffd31d18388 [ 155.270528][ T6363] [ 155.283505][ T6361] device wg2 entered promiscuous mode [ 155.857853][ T6384] validate_nla: 2 callbacks suppressed [ 155.857870][ T6384] netlink: 'syz.3.651': attribute type 9 has an invalid length. [ 155.902019][ T6384] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.651'. [ 156.061004][ T6387] netlink: 'syz.1.655': attribute type 10 has an invalid length. [ 156.170457][ T6392] netlink: 'syz.4.657': attribute type 3 has an invalid length. [ 156.236494][ T6392] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.657'. [ 156.329998][ T6387] bond0: (slave netdevsim0): Releasing backup interface [ 156.441242][ T6398] netlink: 7079 bytes leftover after parsing attributes in process `syz.2.656'. [ 156.446775][ T6387] team0: Port device netdevsim0 added [ 156.480412][ T6394] netlink: 'syz.1.655': attribute type 10 has an invalid length. [ 156.519457][ T6394] team0: Port device netdevsim0 removed [ 156.543835][ T6394] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 156.558032][ T6388] netlink: 'syz.0.653': attribute type 9 has an invalid length. [ 156.581042][ T6388] netlink: 65023 bytes leftover after parsing attributes in process `syz.0.653'. [ 156.871812][ T6406] netlink: 'syz.3.660': attribute type 12 has an invalid length. [ 156.879648][ T6406] netlink: 132 bytes leftover after parsing attributes in process `syz.3.660'. [ 156.967936][ T6408] delete_channel: no stack [ 156.990935][ T6407] netlink: 'syz.4.661': attribute type 2 has an invalid length. [ 156.991530][ T6408] delete_channel: no stack [ 157.049837][ T6407] netlink: 132 bytes leftover after parsing attributes in process `syz.4.661'. [ 157.145923][ T6415] netlink: 60 bytes leftover after parsing attributes in process `syz.1.662'. [ 157.185568][ T6415] netlink: 60 bytes leftover after parsing attributes in process `syz.1.662'. [ 157.257216][ T6411] netlink: 60 bytes leftover after parsing attributes in process `syz.1.662'. [ 157.287432][ T6417] netlink: 60 bytes leftover after parsing attributes in process `syz.1.662'. [ 160.506482][ T6445] netlink: 'syz.2.675': attribute type 21 has an invalid length. [ 160.515547][ T6445] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.524074][ T6445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 160.531753][ T6445] IPv6: NLM_F_CREATE should be set when creating new route [ 160.539142][ T6445] IPv6: NLM_F_CREATE should be set when creating new route [ 160.546526][ T6445] IPv6: NLM_F_CREATE should be set when creating new route [ 160.648624][ T6448] device wg2 left promiscuous mode [ 160.766936][ T6448] device wg2 entered promiscuous mode [ 161.479554][ T6471] netlink: 'syz.4.681': attribute type 10 has an invalid length. [ 161.554939][ T6471] bond0: (slave netdevsim0): Releasing backup interface [ 161.595980][ T6478] __nla_validate_parse: 1 callbacks suppressed [ 161.595997][ T6478] netlink: 60 bytes leftover after parsing attributes in process `syz.2.685'. [ 161.648376][ T6471] team0: Port device netdevsim0 added [ 161.675665][ T6467] netlink: 'syz.4.681': attribute type 10 has an invalid length. [ 161.901116][ T6491] delete_channel: no stack [ 161.905765][ T6491] delete_channel: no stack [ 162.140895][ T6467] team0: Port device netdevsim0 removed [ 162.149845][ T6467] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 162.158972][ T6478] netlink: 60 bytes leftover after parsing attributes in process `syz.2.685'. [ 162.181915][ T6475] netlink: 60 bytes leftover after parsing attributes in process `syz.2.685'. [ 162.229728][ T6488] netlink: 'syz.3.689': attribute type 2 has an invalid length. [ 162.248259][ T6488] netlink: 132 bytes leftover after parsing attributes in process `syz.3.689'. [ 162.282723][ T6480] netlink: 60 bytes leftover after parsing attributes in process `syz.2.685'. [ 163.313632][ T6529] netlink: 'syz.0.702': attribute type 10 has an invalid length. [ 163.477239][ T6522] FAULT_INJECTION: forcing a failure. [ 163.477239][ T6522] name failslab, interval 1, probability 0, space 0, times 0 [ 163.527144][ T6529] team0: Port device netdevsim0 added [ 163.541773][ T6522] CPU: 1 PID: 6522 Comm: syz.4.700 Not tainted 6.1.147-syzkaller #0 [ 163.549815][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.559915][ T6522] Call Trace: [ 163.563213][ T6522] [ 163.566152][ T6522] dump_stack_lvl+0x168/0x22e [ 163.570928][ T6522] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 163.577107][ T6522] ? show_regs_print_info+0x12/0x12 [ 163.582333][ T6522] ? load_image+0x3b0/0x3b0 [ 163.586875][ T6522] should_fail_ex+0x399/0x4d0 [ 163.591574][ T6522] should_failslab+0x5/0x20 [ 163.596088][ T6522] slab_pre_alloc_hook+0x59/0x310 [ 163.601115][ T6522] ? lockdep_hardirqs_on+0x94/0x140 [ 163.606334][ T6522] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 163.612287][ T6522] __kmem_cache_alloc_node+0x4f/0x260 [ 163.617685][ T6522] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 163.623589][ T6522] kmalloc_trace+0x26/0xe0 [ 163.628464][ T6522] sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 163.634198][ T6522] sctp_association_new+0x15e5/0x25d0 [ 163.639588][ T6522] sctp_connect_new_asoc+0x2bb/0x690 [ 163.645149][ T6522] ? __sctp_connect+0xd20/0xd20 [ 163.650024][ T6522] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 163.655575][ T6522] ? security_sctp_bind_connect+0x85/0xb0 [ 163.661313][ T6522] sctp_sendmsg+0x15ff/0x2980 [ 163.666011][ T6522] ? sctp_getsockopt+0x8a0/0x8a0 [ 163.670964][ T6522] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 163.677134][ T6522] ? inet_sendmsg+0xe5/0x2f0 [ 163.681773][ T6522] ? inet_send_prepare+0x260/0x260 [ 163.686891][ T6522] ____sys_sendmsg+0x59b/0x970 [ 163.691668][ T6522] ? __sys_sendmsg_sock+0x30/0x30 [ 163.696696][ T6522] ? __import_iovec+0x315/0x500 [ 163.701562][ T6522] ? import_iovec+0x6f/0xa0 [ 163.706077][ T6522] ___sys_sendmsg+0x21c/0x290 [ 163.710761][ T6522] ? __sys_sendmsg+0x270/0x270 [ 163.715650][ T6522] ? __fdget+0x17c/0x200 [ 163.719923][ T6522] __se_sys_sendmsg+0x19e/0x270 [ 163.724795][ T6522] ? __x64_sys_sendmsg+0x80/0x80 [ 163.729860][ T6522] ? lockdep_hardirqs_on+0x94/0x140 [ 163.735072][ T6522] do_syscall_64+0x4c/0xa0 [ 163.739490][ T6522] ? clear_bhb_loop+0x60/0xb0 [ 163.744311][ T6522] ? clear_bhb_loop+0x60/0xb0 [ 163.749003][ T6522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.755000][ T6522] RIP: 0033:0x7f7c84f8ebe9 [ 163.759418][ T6522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.779049][ T6522] RSP: 002b:00007f7c85dd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.787486][ T6522] RAX: ffffffffffffffda RBX: 00007f7c851b5fa0 RCX: 00007f7c84f8ebe9 [ 163.795464][ T6522] RDX: 00000000040080c0 RSI: 00002000000003c0 RDI: 0000000000000005 [ 163.803440][ T6522] RBP: 00007f7c85dd3090 R08: 0000000000000000 R09: 0000000000000000 [ 163.811436][ T6522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.819407][ T6522] R13: 00007f7c851b6038 R14: 00007f7c851b5fa0 R15: 00007ffd368cb608 [ 163.827397][ T6522] [ 163.890198][ T6531] netlink: 'syz.0.702': attribute type 10 has an invalid length. [ 163.993506][ T6531] team0: Port device netdevsim0 removed [ 164.009434][ T6531] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 164.025931][ T6528] netlink: 'syz.1.701': attribute type 10 has an invalid length. [ 164.062906][ T6528] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 164.119073][ T6535] FAULT_INJECTION: forcing a failure. [ 164.119073][ T6535] name failslab, interval 1, probability 0, space 0, times 0 [ 164.142077][ T6537] netlink: 60 bytes leftover after parsing attributes in process `syz.4.703'. [ 164.169143][ T6535] CPU: 1 PID: 6535 Comm: syz.2.704 Not tainted 6.1.147-syzkaller #0 [ 164.177202][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.187399][ T6535] Call Trace: [ 164.190682][ T6537] netlink: 60 bytes leftover after parsing attributes in process `syz.4.703'. [ 164.190704][ T6535] [ 164.202522][ T6535] dump_stack_lvl+0x168/0x22e [ 164.207338][ T6535] ? show_regs_print_info+0x12/0x12 [ 164.212587][ T6535] ? load_image+0x3b0/0x3b0 [ 164.217132][ T6535] ? __might_sleep+0xd0/0xd0 [ 164.221935][ T6535] ? __lock_acquire+0x7c50/0x7c50 [ 164.227001][ T6535] should_fail_ex+0x399/0x4d0 [ 164.231725][ T6535] should_failslab+0x5/0x20 [ 164.236272][ T6535] slab_pre_alloc_hook+0x59/0x310 [ 164.241348][ T6535] ? prepend_path+0xa6b/0xc20 [ 164.246072][ T6535] ? tomoyo_encode+0x27e/0x540 [ 164.249644][ T6536] netlink: 60 bytes leftover after parsing attributes in process `syz.4.703'. [ 164.250858][ T6535] __kmem_cache_alloc_node+0x4f/0x260 [ 164.250889][ T6535] ? tomoyo_encode+0x27e/0x540 [ 164.250911][ T6535] __kmalloc+0xa0/0x240 [ 164.250938][ T6535] tomoyo_encode+0x27e/0x540 [ 164.250965][ T6535] tomoyo_realpath_from_path+0x58e/0x5d0 [ 164.250998][ T6535] tomoyo_path_number_perm+0x1e3/0x600 [ 164.251018][ T6535] ? tomoyo_path_number_perm+0x1b6/0x600 [ 164.251039][ T6535] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 164.251060][ T6535] ? ksys_write+0x1bd/0x240 [ 164.251083][ T6535] ? common_file_perm+0x171/0x1c0 [ 164.251134][ T6535] ? __fget_files+0x28/0x4d0 [ 164.251168][ T6535] security_file_ioctl+0x6c/0xa0 [ 164.320478][ T6535] __se_sys_ioctl+0x48/0x170 [ 164.321881][ T6536] netlink: 60 bytes leftover after parsing attributes in process `syz.4.703'. [ 164.325094][ T6535] do_syscall_64+0x4c/0xa0 [ 164.338468][ T6535] ? clear_bhb_loop+0x60/0xb0 [ 164.343179][ T6535] ? clear_bhb_loop+0x60/0xb0 [ 164.347911][ T6535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.353854][ T6535] RIP: 0033:0x7fa52ef8ebe9 [ 164.358622][ T6535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.378449][ T6535] RSP: 002b:00007fa52fe5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.386922][ T6535] RAX: ffffffffffffffda RBX: 00007fa52f1b5fa0 RCX: 00007fa52ef8ebe9 [ 164.394927][ T6535] RDX: 0000200000001200 RSI: 000000004004743b RDI: 0000000000000003 [ 164.403442][ T6535] RBP: 00007fa52fe5a090 R08: 0000000000000000 R09: 0000000000000000 [ 164.411517][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.419501][ T6535] R13: 00007fa52f1b6038 R14: 00007fa52f1b5fa0 R15: 00007ffcb1423bc8 [ 164.427510][ T6535] [ 164.519163][ T6535] ERROR: Out of memory at tomoyo_realpath_from_path. [ 165.121411][ T6563] Illegal XDP return value 4294967262 on prog (id 424) dev N/A, expect packet loss! [ 166.039514][ T6583] netlink: 'syz.0.721': attribute type 3 has an invalid length. [ 166.121937][ T6583] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.721'. [ 167.962223][ T6606] device wg2 left promiscuous mode [ 168.036924][ T6606] device wg2 entered promiscuous mode [ 169.678552][ T6648] netlink: 'syz.2.742': attribute type 14 has an invalid length. [ 169.686695][ T6648] netlink: 156 bytes leftover after parsing attributes in process `syz.2.742'. [ 171.513931][ T6654] Dead loop on virtual device ip6_vti0, fix it urgently! [ 172.592635][ T6672] FAULT_INJECTION: forcing a failure. [ 172.592635][ T6672] name failslab, interval 1, probability 0, space 0, times 0 [ 172.620407][ T6672] CPU: 1 PID: 6672 Comm: syz.0.750 Not tainted 6.1.147-syzkaller #0 [ 172.628460][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.638547][ T6672] Call Trace: [ 172.641856][ T6672] [ 172.644808][ T6672] dump_stack_lvl+0x168/0x22e [ 172.649515][ T6672] ? show_regs_print_info+0x12/0x12 [ 172.654737][ T6672] ? load_image+0x3b0/0x3b0 [ 172.659279][ T6672] ? __might_sleep+0xd0/0xd0 [ 172.663921][ T6672] ? __lock_acquire+0x7c50/0x7c50 [ 172.668994][ T6672] should_fail_ex+0x399/0x4d0 [ 172.674000][ T6672] should_failslab+0x5/0x20 [ 172.678547][ T6672] slab_pre_alloc_hook+0x59/0x310 [ 172.683615][ T6672] ? sctp_association_new+0x86/0x25d0 [ 172.689017][ T6672] __kmem_cache_alloc_node+0x4f/0x260 [ 172.694495][ T6672] ? sctp_association_new+0x86/0x25d0 [ 172.699922][ T6672] kmalloc_trace+0x26/0xe0 [ 172.704396][ T6672] sctp_association_new+0x86/0x25d0 [ 172.709637][ T6672] ? sctp_do_bind+0x6bb/0x990 [ 172.714362][ T6672] sctp_connect_new_asoc+0x2bb/0x690 [ 172.719766][ T6672] ? __sctp_connect+0xd20/0xd20 [ 172.724652][ T6672] ? __local_bh_enable_ip+0x12a/0x1b0 [ 172.730060][ T6672] ? lock_sock_nested+0x66/0x100 [ 172.735121][ T6672] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 172.740799][ T6672] ? security_sctp_bind_connect+0x85/0xb0 [ 172.746562][ T6672] sctp_sendmsg+0x15ff/0x2980 [ 172.751290][ T6672] ? sctp_getsockopt+0x8a0/0x8a0 [ 172.756249][ T6672] ? aa_af_perm+0x2b0/0x2b0 [ 172.760783][ T6672] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 172.767326][ T6672] ? inet_sendmsg+0xe5/0x2f0 [ 172.771946][ T6672] ? inet_send_prepare+0x260/0x260 [ 172.777096][ T6672] ____sys_sendmsg+0x59b/0x970 [ 172.781900][ T6672] ? __sys_sendmsg_sock+0x30/0x30 [ 172.787032][ T6672] ? __import_iovec+0x315/0x500 [ 172.791931][ T6672] ? import_iovec+0x6f/0xa0 [ 172.796464][ T6672] ___sys_sendmsg+0x21c/0x290 [ 172.801171][ T6672] ? __sys_sendmsg+0x270/0x270 [ 172.805982][ T6672] ? __lock_acquire+0x7c50/0x7c50 [ 172.811057][ T6672] ? __fdget+0x17c/0x200 [ 172.815332][ T6672] __se_sys_sendmsg+0x19e/0x270 [ 172.820209][ T6672] ? __x64_sys_sendmsg+0x80/0x80 [ 172.825185][ T6672] ? lockdep_hardirqs_on+0x94/0x140 [ 172.830432][ T6672] do_syscall_64+0x4c/0xa0 [ 172.834900][ T6672] ? clear_bhb_loop+0x60/0xb0 [ 172.839695][ T6672] ? clear_bhb_loop+0x60/0xb0 [ 172.844402][ T6672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.850329][ T6672] RIP: 0033:0x7ffa9738ebe9 [ 172.854773][ T6672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.874414][ T6672] RSP: 002b:00007ffa981f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.882870][ T6672] RAX: ffffffffffffffda RBX: 00007ffa975b5fa0 RCX: 00007ffa9738ebe9 [ 172.890870][ T6672] RDX: 0000000000000040 RSI: 00002000000007c0 RDI: 0000000000000003 [ 172.898858][ T6672] RBP: 00007ffa981f9090 R08: 0000000000000000 R09: 0000000000000000 [ 172.906947][ T6672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.914942][ T6672] R13: 00007ffa975b6038 R14: 00007ffa975b5fa0 R15: 00007ffd15217d58 [ 172.922957][ T6672] [ 173.069797][ T6675] netlink: 'syz.3.752': attribute type 17 has an invalid length. [ 173.077979][ T6675] netlink: 'syz.3.752': attribute type 16 has an invalid length. [ 173.090686][ T6675] netlink: 152 bytes leftover after parsing attributes in process `syz.3.752'. [ 173.452784][ T6686] netlink: 'syz.1.755': attribute type 3 has an invalid length. [ 173.496475][ T6686] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.755'. [ 174.441044][ T6680] netlink: 'syz.0.753': attribute type 10 has an invalid length. [ 174.449655][ T6680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.753'. [ 174.476990][ T6680] bridge0: port 3(veth0_vlan) entered blocking state [ 174.511430][ T6680] bridge0: port 3(veth0_vlan) entered disabled state [ 174.628342][ T6680] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 175.360907][ T6709] netlink: 132 bytes leftover after parsing attributes in process `syz.0.761'. [ 175.762047][ T6717] device wg2 left promiscuous mode [ 175.820423][ T6721] netlink: 'syz.4.768': attribute type 17 has an invalid length. [ 175.859474][ T6721] netlink: 'syz.4.768': attribute type 16 has an invalid length. [ 175.890180][ T6721] netlink: 152 bytes leftover after parsing attributes in process `syz.4.768'. [ 176.577434][ T6717] device wg2 entered promiscuous mode [ 176.845084][ T6738] netlink: 'syz.1.771': attribute type 29 has an invalid length. [ 176.867500][ T6740] netlink: 'syz.2.770': attribute type 10 has an invalid length. [ 176.898012][ T6743] netlink: 'syz.1.771': attribute type 8 has an invalid length. [ 176.960750][ T6743] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.771'. [ 177.102807][ T6740] team0: Port device vlan0 added [ 177.151364][ T6738] netlink: 'syz.1.771': attribute type 29 has an invalid length. [ 177.440914][ T6754] device wg2 left promiscuous mode [ 177.939726][ T6754] device wg2 entered promiscuous mode [ 178.300917][ T6769] netlink: 'syz.0.781': attribute type 29 has an invalid length. [ 178.309265][ T6769] netlink: 'syz.0.781': attribute type 29 has an invalid length. [ 178.326102][ T6769] netlink: 'syz.0.781': attribute type 29 has an invalid length. [ 178.791751][ T6778] device wg2 left promiscuous mode [ 178.845038][ T6782] device wg2 left promiscuous mode [ 178.936064][ T6782] device wg2 entered promiscuous mode [ 178.975542][ T6778] device wg2 entered promiscuous mode [ 179.749041][ T6804] netlink: 'syz.3.796': attribute type 10 has an invalid length. [ 179.787521][ T6804] netlink: 40 bytes leftover after parsing attributes in process `syz.3.796'. [ 179.823631][ T6804] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 180.100863][ T6812] device wg2 left promiscuous mode [ 180.196755][ T6812] device wg2 entered promiscuous mode [ 180.830726][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 180.836852][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 180.843628][ T4267] Bluetooth: hci2: command 0x0406 tx timeout [ 180.849664][ T4267] Bluetooth: hci3: command 0x0406 tx timeout [ 180.856026][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 184.955759][ T6862] FAULT_INJECTION: forcing a failure. [ 184.955759][ T6862] name failslab, interval 1, probability 0, space 0, times 0 [ 184.980653][ T6862] CPU: 1 PID: 6862 Comm: syz.1.816 Not tainted 6.1.147-syzkaller #0 [ 184.988736][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.998940][ T6862] Call Trace: [ 185.002264][ T6862] [ 185.005248][ T6862] dump_stack_lvl+0x168/0x22e [ 185.010014][ T6862] ? show_regs_print_info+0x12/0x12 [ 185.015282][ T6862] ? load_image+0x3b0/0x3b0 [ 185.019941][ T6862] ? __lock_acquire+0x7c50/0x7c50 [ 185.025044][ T6862] should_fail_ex+0x399/0x4d0 [ 185.029795][ T6862] should_failslab+0x5/0x20 [ 185.034430][ T6862] slab_pre_alloc_hook+0x59/0x310 [ 185.039516][ T6862] kmem_cache_alloc+0x56/0x2f0 [ 185.044328][ T6862] ? security_file_alloc+0x30/0x110 [ 185.049599][ T6862] security_file_alloc+0x30/0x110 [ 185.054694][ T6862] __alloc_file+0xc2/0x230 [ 185.059180][ T6862] alloc_empty_file+0x90/0x180 [ 185.064013][ T6862] alloc_file+0x5c/0x5f0 [ 185.068340][ T6862] alloc_file_pseudo+0x17a/0x1f0 [ 185.073442][ T6862] ? alloc_empty_file_noaccount+0x80/0x80 [ 185.079228][ T6862] ? bpf_lsm_capable+0x5/0x10 [ 185.083978][ T6862] ? bpf_lsm_perf_event_open+0x5/0x10 [ 185.089493][ T6862] ? security_perf_event_open+0x75/0x90 [ 185.095137][ T6862] anon_inode_getfile+0xc1/0x1a0 [ 185.100144][ T6862] __se_sys_perf_event_open+0xbf0/0x1e60 [ 185.105836][ T6862] ? __fget_files+0x44a/0x4d0 [ 185.110591][ T6862] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 185.116354][ T6862] ? lockdep_hardirqs_on+0x94/0x140 [ 185.121687][ T6862] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 185.127388][ T6862] do_syscall_64+0x4c/0xa0 [ 185.131855][ T6862] ? clear_bhb_loop+0x60/0xb0 [ 185.136581][ T6862] ? clear_bhb_loop+0x60/0xb0 [ 185.141317][ T6862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.147262][ T6862] RIP: 0033:0x7feedb98ebe9 [ 185.151738][ T6862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.171498][ T6862] RSP: 002b:00007feedc855038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 185.180066][ T6862] RAX: ffffffffffffffda RBX: 00007feedbbb5fa0 RCX: 00007feedb98ebe9 [ 185.188102][ T6862] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000800 [ 185.196133][ T6862] RBP: 00007feedc855090 R08: 0000000000000000 R09: 0000000000000000 [ 185.204169][ T6862] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 185.212211][ T6862] R13: 00007feedbbb6038 R14: 00007feedbbb5fa0 R15: 00007ffca88ffd08 [ 185.220307][ T6862] [ 185.261036][ T6865] device wg2 left promiscuous mode [ 185.473204][ T6865] device wg2 entered promiscuous mode [ 185.727644][ T6878] FAULT_INJECTION: forcing a failure. [ 185.727644][ T6878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.791618][ T6878] CPU: 1 PID: 6878 Comm: syz.1.821 Not tainted 6.1.147-syzkaller #0 [ 185.799945][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.810041][ T6878] Call Trace: [ 185.813356][ T6878] [ 185.816332][ T6878] dump_stack_lvl+0x168/0x22e [ 185.821046][ T6878] ? show_regs_print_info+0x12/0x12 [ 185.826289][ T6878] ? load_image+0x3b0/0x3b0 [ 185.830843][ T6878] ? __lock_acquire+0x7c50/0x7c50 [ 185.835910][ T6878] should_fail_ex+0x399/0x4d0 [ 185.840625][ T6878] _copy_from_user+0x2c/0x170 [ 185.845333][ T6878] __copy_msghdr+0x3b7/0x580 [ 185.849951][ T6878] ___sys_sendmsg+0x1a2/0x290 [ 185.854658][ T6878] ? __sys_sendmsg+0x270/0x270 [ 185.859557][ T6878] ? __lock_acquire+0x7c50/0x7c50 [ 185.864642][ T6878] ? __fdget+0x17c/0x200 [ 185.868913][ T6878] __se_sys_sendmsg+0x19e/0x270 [ 185.873796][ T6878] ? perf_trace_preemptirq_template+0x287/0x330 [ 185.880086][ T6878] ? __x64_sys_sendmsg+0x80/0x80 [ 185.885113][ T6878] ? lockdep_hardirqs_on+0x94/0x140 [ 185.890336][ T6878] do_syscall_64+0x4c/0xa0 [ 185.894769][ T6878] ? clear_bhb_loop+0x60/0xb0 [ 185.899465][ T6878] ? clear_bhb_loop+0x60/0xb0 [ 185.904255][ T6878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.910177][ T6878] RIP: 0033:0x7feedb98ebe9 [ 185.914609][ T6878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.934538][ T6878] RSP: 002b:00007feedc855038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.943149][ T6878] RAX: ffffffffffffffda RBX: 00007feedbbb5fa0 RCX: 00007feedb98ebe9 [ 185.951143][ T6878] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000007 [ 185.959131][ T6878] RBP: 00007feedc855090 R08: 0000000000000000 R09: 0000000000000000 [ 185.967217][ T6878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.975222][ T6878] R13: 00007feedbbb6038 R14: 00007feedbbb5fa0 R15: 00007ffca88ffd08 [ 185.983292][ T6878] [ 186.119783][ T6888] device wg2 left promiscuous mode [ 186.361240][ T6890] device wg2 entered promiscuous mode [ 187.577658][ T26] audit: type=1800 audit(1755077714.413:2): pid=6903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.830" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 187.577935][ T6903] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 187.610653][ T6903] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 187.640821][ T6903] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 187.864185][ T6912] netlink: 60 bytes leftover after parsing attributes in process `syz.4.832'. [ 187.898932][ T6912] netlink: 60 bytes leftover after parsing attributes in process `syz.4.832'. [ 187.935058][ T6911] netlink: 60 bytes leftover after parsing attributes in process `syz.4.832'. [ 187.968600][ T6913] netlink: 60 bytes leftover after parsing attributes in process `syz.4.832'. [ 188.010433][ T6922] netlink: 60 bytes leftover after parsing attributes in process `syz.1.834'. [ 188.057677][ T6915] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.836'. [ 188.060279][ T6922] netlink: 60 bytes leftover after parsing attributes in process `syz.1.834'. [ 188.135842][ T6918] netlink: 60 bytes leftover after parsing attributes in process `syz.1.834'. [ 188.157593][ T6915] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.836'. [ 188.207697][ T6924] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.836'. [ 188.619112][ T6945] device wg2 left promiscuous mode [ 188.628294][ T6946] netlink: 'syz.2.843': attribute type 3 has an invalid length. [ 188.698564][ T6945] device wg2 entered promiscuous mode [ 189.385798][ T6961] FAULT_INJECTION: forcing a failure. [ 189.385798][ T6961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.421659][ T6961] CPU: 0 PID: 6961 Comm: syz.1.848 Not tainted 6.1.147-syzkaller #0 [ 189.429732][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.439908][ T6961] Call Trace: [ 189.443197][ T6961] [ 189.446134][ T6961] dump_stack_lvl+0x168/0x22e [ 189.450936][ T6961] ? show_regs_print_info+0x12/0x12 [ 189.456224][ T6961] ? load_image+0x3b0/0x3b0 [ 189.460757][ T6961] ? __lock_acquire+0x7c50/0x7c50 [ 189.465792][ T6961] ? snprintf+0xd7/0x120 [ 189.470043][ T6961] should_fail_ex+0x399/0x4d0 [ 189.474735][ T6961] _copy_to_user+0x2c/0x130 [ 189.479247][ T6961] simple_read_from_buffer+0xe3/0x150 [ 189.484637][ T6961] proc_fail_nth_read+0x19a/0x210 [ 189.489669][ T6961] ? proc_fault_inject_write+0x2f0/0x2f0 [ 189.495313][ T6961] ? fsnotify_perm+0x248/0x550 [ 189.500087][ T6961] ? proc_fault_inject_write+0x2f0/0x2f0 [ 189.505749][ T6961] vfs_read+0x2c0/0x920 [ 189.509949][ T6961] ? kernel_read+0x1e0/0x1e0 [ 189.514579][ T6961] ? __fget_files+0x28/0x4d0 [ 189.519184][ T6961] ? __fget_files+0x44a/0x4d0 [ 189.523978][ T6961] ? __fdget_pos+0x2ae/0x360 [ 189.528576][ T6961] ? ksys_read+0x71/0x240 [ 189.532921][ T6961] ksys_read+0x143/0x240 [ 189.537176][ T6961] ? vfs_write+0x960/0x960 [ 189.541603][ T6961] ? lockdep_hardirqs_on+0x94/0x140 [ 189.546815][ T6961] do_syscall_64+0x4c/0xa0 [ 189.551266][ T6961] ? clear_bhb_loop+0x60/0xb0 [ 189.555947][ T6961] ? clear_bhb_loop+0x60/0xb0 [ 189.560657][ T6961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.566562][ T6961] RIP: 0033:0x7feedb98d5fc [ 189.571027][ T6961] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 189.590664][ T6961] RSP: 002b:00007feedc834030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.599088][ T6961] RAX: ffffffffffffffda RBX: 00007feedbbb6090 RCX: 00007feedb98d5fc [ 189.607157][ T6961] RDX: 000000000000000f RSI: 00007feedc8340a0 RDI: 0000000000000005 [ 189.615139][ T6961] RBP: 00007feedc834090 R08: 0000000000000000 R09: 0000000000000000 [ 189.623118][ T6961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.631179][ T6961] R13: 00007feedbbb6128 R14: 00007feedbbb6090 R15: 00007ffca88ffd08 [ 189.639205][ T6961] [ 191.846583][ T6955] syz.3.847 (6955) used greatest stack depth: 16448 bytes left [ 191.968563][ T6969] FAULT_INJECTION: forcing a failure. [ 191.968563][ T6969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.015087][ T6969] CPU: 0 PID: 6969 Comm: syz.1.853 Not tainted 6.1.147-syzkaller #0 [ 192.023588][ T6969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.033681][ T6969] Call Trace: [ 192.037059][ T6969] [ 192.040019][ T6969] dump_stack_lvl+0x168/0x22e [ 192.044759][ T6969] ? show_regs_print_info+0x12/0x12 [ 192.050009][ T6969] ? load_image+0x3b0/0x3b0 [ 192.055562][ T6969] ? __lock_acquire+0x7c50/0x7c50 [ 192.060651][ T6969] should_fail_ex+0x399/0x4d0 [ 192.065382][ T6969] _copy_to_user+0x2c/0x130 [ 192.069932][ T6969] bpf_test_finish+0x4fa/0x600 [ 192.074845][ T6969] ? convert___skb_to_skb+0x580/0x580 [ 192.080272][ T6969] ? convert_skb_to___skb+0x420/0x420 [ 192.085780][ T6969] ? __build_skb+0x257/0x3c0 [ 192.090422][ T6969] bpf_prog_test_run_skb+0xc03/0x11b0 [ 192.095856][ T6969] ? cpu_online+0xa0/0xa0 [ 192.100217][ T6969] bpf_prog_test_run+0x31e/0x390 [ 192.105187][ T6969] __sys_bpf+0x593/0x6d0 [ 192.109453][ T6969] ? bpf_link_show_fdinfo+0x340/0x340 [ 192.114868][ T6969] ? lock_chain_count+0x20/0x20 [ 192.119916][ T6969] __x64_sys_bpf+0x78/0x90 [ 192.124347][ T6969] do_syscall_64+0x4c/0xa0 [ 192.128860][ T6969] ? clear_bhb_loop+0x60/0xb0 [ 192.133542][ T6969] ? clear_bhb_loop+0x60/0xb0 [ 192.138238][ T6969] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.144147][ T6969] RIP: 0033:0x7feedb98ebe9 [ 192.148566][ T6969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.168261][ T6969] RSP: 002b:00007feedc855038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.176682][ T6969] RAX: ffffffffffffffda RBX: 00007feedbbb5fa0 RCX: 00007feedb98ebe9 [ 192.184743][ T6969] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 192.192718][ T6969] RBP: 00007feedc855090 R08: 0000000000000000 R09: 0000000000000000 [ 192.200691][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.208663][ T6969] R13: 00007feedbbb6038 R14: 00007feedbbb5fa0 R15: 00007ffca88ffd08 [ 192.216751][ T6969] [ 192.313914][ T6980] netlink: 'syz.0.856': attribute type 3 has an invalid length. [ 193.285277][ T6997] device wg2 left promiscuous mode [ 193.529387][ T6997] device wg2 entered promiscuous mode [ 193.879643][ T7023] netlink: 'syz.1.869': attribute type 3 has an invalid length. [ 193.908127][ T7023] __nla_validate_parse: 4 callbacks suppressed [ 193.908147][ T7023] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.869'. [ 194.055954][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.062406][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.464543][ T7040] netlink: 60 bytes leftover after parsing attributes in process `syz.1.873'. [ 194.480844][ T7040] netlink: 60 bytes leftover after parsing attributes in process `syz.1.873'. [ 194.496738][ T7039] netlink: 60 bytes leftover after parsing attributes in process `syz.1.873'. [ 194.507757][ T7040] netlink: 60 bytes leftover after parsing attributes in process `syz.1.873'. [ 195.175878][ T7060] device wg2 left promiscuous mode [ 195.210471][ T7059] device wg2 left promiscuous mode [ 195.343957][ T7059] device wg2 entered promiscuous mode [ 195.362216][ T7060] device wg2 entered promiscuous mode [ 195.516366][ T7068] FAULT_INJECTION: forcing a failure. [ 195.516366][ T7068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.542233][ T7068] CPU: 0 PID: 7068 Comm: syz.4.883 Not tainted 6.1.147-syzkaller #0 [ 195.550471][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.560672][ T7068] Call Trace: [ 195.563967][ T7068] [ 195.566918][ T7068] dump_stack_lvl+0x168/0x22e [ 195.571608][ T7068] ? show_regs_print_info+0x12/0x12 [ 195.576814][ T7068] ? load_image+0x3b0/0x3b0 [ 195.581331][ T7068] ? __lock_acquire+0x7c50/0x7c50 [ 195.586486][ T7068] should_fail_ex+0x399/0x4d0 [ 195.591244][ T7068] strncpy_from_user+0x32/0x350 [ 195.596386][ T7068] ? kmem_cache_alloc+0x175/0x2f0 [ 195.601431][ T7068] getname_flags+0xf2/0x500 [ 195.606002][ T7068] __x64_sys_mkdirat+0x78/0x90 [ 195.610788][ T7068] do_syscall_64+0x4c/0xa0 [ 195.615209][ T7068] ? clear_bhb_loop+0x60/0xb0 [ 195.619916][ T7068] ? clear_bhb_loop+0x60/0xb0 [ 195.624617][ T7068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.630641][ T7068] RIP: 0033:0x7f7c84f8ebe9 [ 195.635161][ T7068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.654772][ T7068] RSP: 002b:00007f7c85db2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 195.663201][ T7068] RAX: ffffffffffffffda RBX: 00007f7c851b6090 RCX: 00007f7c84f8ebe9 [ 195.671197][ T7068] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 195.679300][ T7068] RBP: 00007f7c85db2090 R08: 0000000000000000 R09: 0000000000000000 [ 195.687378][ T7068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.695372][ T7068] R13: 00007f7c851b6128 R14: 00007f7c851b6090 R15: 00007ffd368cb608 [ 195.703371][ T7068] [ 195.891947][ T7073] FAULT_INJECTION: forcing a failure. [ 195.891947][ T7073] name failslab, interval 1, probability 0, space 0, times 0 [ 195.937504][ T7073] CPU: 1 PID: 7073 Comm: syz.2.885 Not tainted 6.1.147-syzkaller #0 [ 195.945580][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.955769][ T7073] Call Trace: [ 195.959088][ T7073] [ 195.962050][ T7073] dump_stack_lvl+0x168/0x22e [ 195.967023][ T7073] ? show_regs_print_info+0x12/0x12 [ 195.972369][ T7073] ? load_image+0x3b0/0x3b0 [ 195.976919][ T7073] ? verify_lock_unused+0x140/0x140 [ 195.982173][ T7073] should_fail_ex+0x399/0x4d0 [ 195.986904][ T7073] should_failslab+0x5/0x20 [ 195.991441][ T7073] slab_pre_alloc_hook+0x59/0x310 [ 195.996771][ T7073] kmem_cache_alloc+0x56/0x2f0 [ 196.001558][ T7073] ? skb_clone+0x1e7/0x370 [ 196.006002][ T7073] skb_clone+0x1e7/0x370 [ 196.010278][ T7073] __netlink_deliver_tap+0x3ed/0x800 [ 196.015594][ T7073] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.020817][ T7073] netlink_deliver_tap+0x19c/0x1b0 [ 196.025948][ T7073] netlink_unicast+0x728/0x8d0 [ 196.030763][ T7073] netlink_sendmsg+0x89e/0xbc0 [ 196.035577][ T7073] ? netlink_getsockopt+0x540/0x540 [ 196.040819][ T7073] ? aa_sock_msg_perm+0x94/0x150 [ 196.045792][ T7073] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 196.051095][ T7073] ? security_socket_sendmsg+0x7c/0xa0 [ 196.056586][ T7073] ? netlink_getsockopt+0x540/0x540 [ 196.061805][ T7073] ____sys_sendmsg+0x59b/0x970 [ 196.066619][ T7073] ? __sys_sendmsg_sock+0x30/0x30 [ 196.071688][ T7073] ? __import_iovec+0x315/0x500 [ 196.076588][ T7073] ? import_iovec+0x6f/0xa0 [ 196.081136][ T7073] ___sys_sendmsg+0x21c/0x290 [ 196.085929][ T7073] ? __sys_sendmsg+0x270/0x270 [ 196.090736][ T7073] ? __lock_acquire+0x7c50/0x7c50 [ 196.095891][ T7073] ? __fdget+0x17c/0x200 [ 196.100159][ T7073] __se_sys_sendmsg+0x19e/0x270 [ 196.105040][ T7073] ? __x64_sys_sendmsg+0x80/0x80 [ 196.110051][ T7073] ? lockdep_hardirqs_on+0x94/0x140 [ 196.115381][ T7073] do_syscall_64+0x4c/0xa0 [ 196.119822][ T7073] ? clear_bhb_loop+0x60/0xb0 [ 196.124816][ T7073] ? clear_bhb_loop+0x60/0xb0 [ 196.129528][ T7073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.135570][ T7073] RIP: 0033:0x7fa52ef8ebe9 [ 196.140012][ T7073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.160254][ T7073] RSP: 002b:00007fa52fe5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.168694][ T7073] RAX: ffffffffffffffda RBX: 00007fa52f1b5fa0 RCX: 00007fa52ef8ebe9 [ 196.176772][ T7073] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 196.184857][ T7073] RBP: 00007fa52fe5a090 R08: 0000000000000000 R09: 0000000000000000 [ 196.193142][ T7073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.201167][ T7073] R13: 00007fa52f1b6038 R14: 00007fa52f1b5fa0 R15: 00007ffcb1423bc8 [ 196.209452][ T7073] [ 196.765841][ T7095] netlink: 'syz.1.894': attribute type 10 has an invalid length. [ 196.796542][ T7095] netlink: 152 bytes leftover after parsing attributes in process `syz.1.894'. [ 196.845499][ T7095] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 197.391612][ T7097] device wg2 left promiscuous mode [ 197.469758][ T7097] device wg2 entered promiscuous mode [ 197.632813][ T7106] FAULT_INJECTION: forcing a failure. [ 197.632813][ T7106] name failslab, interval 1, probability 0, space 0, times 0 [ 197.649801][ T7106] CPU: 1 PID: 7106 Comm: syz.1.900 Not tainted 6.1.147-syzkaller #0 [ 197.657854][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.667944][ T7106] Call Trace: [ 197.671513][ T7106] [ 197.674457][ T7106] dump_stack_lvl+0x168/0x22e [ 197.679149][ T7106] ? show_regs_print_info+0x12/0x12 [ 197.684356][ T7106] ? load_image+0x3b0/0x3b0 [ 197.688880][ T7106] ? perf_trace_lock_acquire+0xf7/0x3c0 [ 197.694431][ T7106] ? verify_lock_unused+0x140/0x140 [ 197.699645][ T7106] ? perf_trace_lock_acquire+0xf7/0x3c0 [ 197.705212][ T7106] should_fail_ex+0x399/0x4d0 [ 197.709915][ T7106] should_failslab+0x5/0x20 [ 197.714427][ T7106] slab_pre_alloc_hook+0x59/0x310 [ 197.719485][ T7106] kmem_cache_alloc+0x56/0x2f0 [ 197.724284][ T7106] ? skb_clone+0x1e7/0x370 [ 197.728743][ T7106] skb_clone+0x1e7/0x370 [ 197.733137][ T7106] __netlink_deliver_tap+0x3ed/0x800 [ 197.738554][ T7106] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.743839][ T7106] netlink_deliver_tap+0x19c/0x1b0 [ 197.749050][ T7106] netlink_unicast+0x728/0x8d0 [ 197.753835][ T7106] netlink_sendmsg+0x89e/0xbc0 [ 197.758654][ T7106] ? netlink_getsockopt+0x540/0x540 [ 197.764149][ T7106] ? aa_sock_msg_perm+0x94/0x150 [ 197.769110][ T7106] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 197.774402][ T7106] ? security_socket_sendmsg+0x7c/0xa0 [ 197.779903][ T7106] ? netlink_getsockopt+0x540/0x540 [ 197.785127][ T7106] ____sys_sendmsg+0x59b/0x970 [ 197.790006][ T7106] ? __sys_sendmsg_sock+0x30/0x30 [ 197.795048][ T7106] ? __import_iovec+0x315/0x500 [ 197.799918][ T7106] ? import_iovec+0x6f/0xa0 [ 197.804434][ T7106] ___sys_sendmsg+0x21c/0x290 [ 197.809131][ T7106] ? __sys_sendmsg+0x270/0x270 [ 197.813922][ T7106] ? __lock_acquire+0x7c50/0x7c50 [ 197.818974][ T7106] ? __fdget+0x17c/0x200 [ 197.823237][ T7106] __se_sys_sendmsg+0x19e/0x270 [ 197.828105][ T7106] ? __x64_sys_sendmsg+0x80/0x80 [ 197.833150][ T7106] ? lockdep_hardirqs_on+0x94/0x140 [ 197.838368][ T7106] do_syscall_64+0x4c/0xa0 [ 197.842787][ T7106] ? clear_bhb_loop+0x60/0xb0 [ 197.847467][ T7106] ? clear_bhb_loop+0x60/0xb0 [ 197.852147][ T7106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.858051][ T7106] RIP: 0033:0x7feedb98ebe9 [ 197.862484][ T7106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.882094][ T7106] RSP: 002b:00007feedc855038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.890528][ T7106] RAX: ffffffffffffffda RBX: 00007feedbbb5fa0 RCX: 00007feedb98ebe9 [ 197.898515][ T7106] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 197.906495][ T7106] RBP: 00007feedc855090 R08: 0000000000000000 R09: 0000000000000000 [ 197.914474][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.922449][ T7106] R13: 00007feedbbb6038 R14: 00007feedbbb5fa0 R15: 00007ffca88ffd08 [ 197.930452][ T7106] [ 197.938946][ T7106] netlink: 'syz.1.900': attribute type 10 has an invalid length. [ 197.952539][ T7106] team0: Device ipvlan1 failed to register rx_handler [ 197.968627][ T7108] device wg2 left promiscuous mode [ 198.069043][ T7108] device wg2 entered promiscuous mode [ 198.157619][ T7115] netlink: 'syz.0.902': attribute type 3 has an invalid length. [ 198.209481][ T7112] netlink: 'syz.1.901': attribute type 21 has an invalid length. [ 198.308358][ T7115] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.902'. [ 198.351740][ T7112] netlink: 132 bytes leftover after parsing attributes in process `syz.1.901'. [ 204.040954][ T7132] FAULT_INJECTION: forcing a failure. [ 204.040954][ T7132] name failslab, interval 1, probability 0, space 0, times 0 [ 204.162616][ T7132] CPU: 1 PID: 7132 Comm: syz.1.906 Not tainted 6.1.147-syzkaller #0 [ 204.170689][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.180870][ T7132] Call Trace: [ 204.184181][ T7132] [ 204.187136][ T7132] dump_stack_lvl+0x168/0x22e [ 204.191866][ T7132] ? show_regs_print_info+0x12/0x12 [ 204.197121][ T7132] ? load_image+0x3b0/0x3b0 [ 204.201669][ T7132] ? perf_trace_lock+0xf3/0x370 [ 204.206559][ T7132] ? verify_lock_unused+0x140/0x140 [ 204.211811][ T7132] ? perf_trace_lock+0xf3/0x370 [ 204.216715][ T7132] should_fail_ex+0x399/0x4d0 [ 204.221449][ T7132] should_failslab+0x5/0x20 [ 204.225989][ T7132] slab_pre_alloc_hook+0x59/0x310 [ 204.231057][ T7132] kmem_cache_alloc+0x56/0x2f0 [ 204.235868][ T7132] ? skb_clone+0x1e7/0x370 [ 204.240334][ T7132] skb_clone+0x1e7/0x370 [ 204.244609][ T7132] __netlink_deliver_tap+0x3ed/0x800 [ 204.250218][ T7132] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.255431][ T7132] netlink_deliver_tap+0x19c/0x1b0 [ 204.260561][ T7132] netlink_unicast+0x728/0x8d0 [ 204.265354][ T7132] netlink_sendmsg+0x89e/0xbc0 [ 204.270134][ T7132] ? netlink_getsockopt+0x540/0x540 [ 204.275349][ T7132] ? aa_sock_msg_perm+0x94/0x150 [ 204.280397][ T7132] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 204.285712][ T7132] ? security_socket_sendmsg+0x7c/0xa0 [ 204.291200][ T7132] ? netlink_getsockopt+0x540/0x540 [ 204.296448][ T7132] ____sys_sendmsg+0x59b/0x970 [ 204.301231][ T7132] ? __sys_sendmsg_sock+0x30/0x30 [ 204.306266][ T7132] ? __import_iovec+0x315/0x500 [ 204.311143][ T7132] ? import_iovec+0x6f/0xa0 [ 204.315672][ T7132] ___sys_sendmsg+0x21c/0x290 [ 204.320357][ T7132] ? __sys_sendmsg+0x270/0x270 [ 204.325147][ T7132] ? __lock_acquire+0x7c50/0x7c50 [ 204.330207][ T7132] ? __fdget+0x17c/0x200 [ 204.334459][ T7132] __se_sys_sendmsg+0x19e/0x270 [ 204.339319][ T7132] ? ct_nmi_exit+0x145/0x1c0 [ 204.343926][ T7132] ? __x64_sys_sendmsg+0x80/0x80 [ 204.348888][ T7132] ? lockdep_hardirqs_on+0x94/0x140 [ 204.354098][ T7132] do_syscall_64+0x4c/0xa0 [ 204.358516][ T7132] ? clear_bhb_loop+0x60/0xb0 [ 204.363198][ T7132] ? clear_bhb_loop+0x60/0xb0 [ 204.367905][ T7132] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.373899][ T7132] RIP: 0033:0x7feedb98ebe9 [ 204.378413][ T7132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.398026][ T7132] RSP: 002b:00007feedc855038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.406536][ T7132] RAX: ffffffffffffffda RBX: 00007feedbbb5fa0 RCX: 00007feedb98ebe9 [ 204.414514][ T7132] RDX: 0000000000000004 RSI: 0000200000000940 RDI: 0000000000000003 [ 204.422490][ T7132] RBP: 00007feedc855090 R08: 0000000000000000 R09: 0000000000000000 [ 204.430766][ T7132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.438826][ T7132] R13: 00007feedbbb6038 R14: 00007feedbbb5fa0 R15: 00007ffca88ffd08 [ 204.446906][ T7132] [ 204.543848][ T7132] netlink: 'syz.1.906': attribute type 10 has an invalid length. [ 204.564808][ T7132] netlink: 152 bytes leftover after parsing attributes in process `syz.1.906'. [ 204.580494][ T7132] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 204.972146][ T7143] netlink: 'syz.4.910': attribute type 10 has an invalid length. [ 205.045299][ T7143] team0: Device ipvlan1 failed to register rx_handler [ 205.144019][ T7148] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.912'. [ 206.832523][ T7168] device wg2 left promiscuous mode [ 206.973272][ T7168] device wg2 entered promiscuous mode [ 210.632816][ T7202] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.929'. [ 210.728345][ T7204] netlink: 'syz.1.930': attribute type 3 has an invalid length. [ 210.769911][ T7204] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.930'. [ 214.492300][ T7226] device wg2 left promiscuous mode [ 214.550256][ T7242] device wg2 entered promiscuous mode [ 214.986983][ T7258] netlink: 'syz.2.946': attribute type 3 has an invalid length. [ 215.046689][ T7258] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.946'. [ 215.074227][ T7263] netlink: 56 bytes leftover after parsing attributes in process `syz.1.945'. [ 215.210380][ T7263] netlink: 56 bytes leftover after parsing attributes in process `syz.1.945'. [ 215.269129][ T7265] netlink: 56 bytes leftover after parsing attributes in process `syz.1.945'. [ 217.970052][ T7272] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 218.118414][ T7276] netlink: 60 bytes leftover after parsing attributes in process `syz.2.952'. [ 218.200937][ T3637] udevd[3637]: worker [6863] terminated by signal 33 (Unknown signal 33) [ 218.231199][ T3637] udevd[3637]: worker [6863] failed while handling '/devices/virtual/block/loop1' [ 218.691687][ T7290] device wg2 left promiscuous mode [ 218.781564][ T7290] device wg2 entered promiscuous mode [ 219.249700][ T7305] netlink: 'syz.2.962': attribute type 3 has an invalid length. [ 219.287035][ T7305] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.962'. [ 219.466863][ T7314] netlink: 'syz.0.965': attribute type 3 has an invalid length. [ 219.496495][ T7314] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.965'. [ 219.595770][ T7316] netlink: 'syz.0.965': attribute type 10 has an invalid length. [ 219.605001][ T7316] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 222.497889][ T7324] FAULT_INJECTION: forcing a failure. [ 222.497889][ T7324] name failslab, interval 1, probability 0, space 0, times 0 [ 222.520800][ T7324] CPU: 0 PID: 7324 Comm: syz.3.968 Not tainted 6.1.147-syzkaller #0 [ 222.528850][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.538949][ T7324] Call Trace: [ 222.542259][ T7324] [ 222.545224][ T7324] dump_stack_lvl+0x168/0x22e [ 222.549937][ T7324] ? show_regs_print_info+0x12/0x12 [ 222.555167][ T7324] ? load_image+0x3b0/0x3b0 [ 222.559719][ T7324] ? verify_lock_unused+0x140/0x140 [ 222.564969][ T7324] should_fail_ex+0x399/0x4d0 [ 222.569683][ T7324] should_failslab+0x5/0x20 [ 222.574308][ T7324] slab_pre_alloc_hook+0x59/0x310 [ 222.579366][ T7324] kmem_cache_alloc+0x56/0x2f0 [ 222.584155][ T7324] ? skb_clone+0x1e7/0x370 [ 222.588605][ T7324] skb_clone+0x1e7/0x370 [ 222.592887][ T7324] __netlink_deliver_tap+0x3ed/0x800 [ 222.598232][ T7324] ? netlink_deliver_tap+0x2e/0x1b0 [ 222.603470][ T7324] netlink_deliver_tap+0x19c/0x1b0 [ 222.608618][ T7324] netlink_unicast+0x728/0x8d0 [ 222.613421][ T7324] netlink_sendmsg+0x89e/0xbc0 [ 222.618317][ T7324] ? netlink_getsockopt+0x540/0x540 [ 222.623550][ T7324] ? aa_sock_msg_perm+0x94/0x150 [ 222.628524][ T7324] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 222.633827][ T7324] ? security_socket_sendmsg+0x7c/0xa0 [ 222.639407][ T7324] ? netlink_getsockopt+0x540/0x540 [ 222.644628][ T7324] ____sys_sendmsg+0x59b/0x970 [ 222.649425][ T7324] ? __sys_sendmsg_sock+0x30/0x30 [ 222.654468][ T7324] ? __import_iovec+0x315/0x500 [ 222.659356][ T7324] ? import_iovec+0x6f/0xa0 [ 222.663893][ T7324] ___sys_sendmsg+0x21c/0x290 [ 222.668597][ T7324] ? __sys_sendmsg+0x270/0x270 [ 222.673492][ T7324] ? __lock_acquire+0x7c50/0x7c50 [ 222.678656][ T7324] ? __fdget+0x17c/0x200 [ 222.683039][ T7324] __se_sys_sendmsg+0x19e/0x270 [ 222.687943][ T7324] ? __x64_sys_sendmsg+0x80/0x80 [ 222.692939][ T7324] ? lockdep_hardirqs_on+0x94/0x140 [ 222.698180][ T7324] do_syscall_64+0x4c/0xa0 [ 222.702626][ T7324] ? clear_bhb_loop+0x60/0xb0 [ 222.707322][ T7324] ? clear_bhb_loop+0x60/0xb0 [ 222.712020][ T7324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.717946][ T7324] RIP: 0033:0x7f178738ebe9 [ 222.722409][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.742149][ T7324] RSP: 002b:00007f178828f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.750858][ T7324] RAX: ffffffffffffffda RBX: 00007f17875b5fa0 RCX: 00007f178738ebe9 [ 222.758877][ T7324] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 222.766891][ T7324] RBP: 00007f178828f090 R08: 0000000000000000 R09: 0000000000000000 [ 222.775070][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.783162][ T7324] R13: 00007f17875b6038 R14: 00007f17875b5fa0 R15: 00007ffd31d18388 [ 222.791192][ T7324] [ 223.580177][ T7344] device wg2 left promiscuous mode [ 223.712692][ T7349] device wg2 entered promiscuous mode [ 223.864986][ T7355] netlink: 'syz.3.976': attribute type 1 has an invalid length. [ 223.901576][ T7355] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.976'. [ 224.193641][ T7358] netlink: 'syz.4.978': attribute type 3 has an invalid length. [ 224.245780][ T7358] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.978'. [ 227.146275][ T7381] FAULT_INJECTION: forcing a failure. [ 227.146275][ T7381] name failslab, interval 1, probability 0, space 0, times 0 [ 227.168843][ T7381] CPU: 1 PID: 7381 Comm: syz.1.986 Not tainted 6.1.147-syzkaller #0 [ 227.176901][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 227.187026][ T7381] Call Trace: [ 227.190340][ T7381] [ 227.193293][ T7381] dump_stack_lvl+0x168/0x22e [ 227.198003][ T7381] ? show_regs_print_info+0x12/0x12 [ 227.203221][ T7381] ? load_image+0x3b0/0x3b0 [ 227.207755][ T7381] ? __might_sleep+0xd0/0xd0 [ 227.212385][ T7381] ? __lock_acquire+0x7c50/0x7c50 [ 227.217452][ T7381] should_fail_ex+0x399/0x4d0 [ 227.222172][ T7381] should_failslab+0x5/0x20 [ 227.226710][ T7381] slab_pre_alloc_hook+0x59/0x310 [ 227.231851][ T7381] ? kvmalloc_node+0x6c/0x180 [ 227.236581][ T7381] __kmem_cache_alloc_node+0x4f/0x260 [ 227.242260][ T7381] ? kvmalloc_node+0x6c/0x180 [ 227.246987][ T7381] __kmalloc_node+0xa0/0x240 [ 227.251627][ T7381] kvmalloc_node+0x6c/0x180 [ 227.256169][ T7381] bpf_test_run_xdp_live+0x1a9/0x1970 [ 227.261608][ T7381] ? text_poke_copy+0x79/0x90 [ 227.266402][ T7381] ? 0xffffffffa0004440 [ 227.270577][ T7381] ? __sys_bpf+0x593/0x6d0 [ 227.275020][ T7381] ? __x64_sys_bpf+0x78/0x90 [ 227.279740][ T7381] ? do_syscall_64+0x4c/0xa0 [ 227.284367][ T7381] ? xdp_convert_md_to_buff+0x330/0x330 [ 227.289982][ T7381] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 227.296360][ T7381] ? bpf_test_init+0x134/0x150 [ 227.301162][ T7381] ? xdp_convert_md_to_buff+0x5b/0x330 [ 227.306659][ T7381] bpf_prog_test_run_xdp+0x6f1/0xe50 [ 227.312016][ T7381] ? dev_put+0x80/0x80 [ 227.316317][ T7381] ? dev_put+0x80/0x80 [ 227.320416][ T7381] bpf_prog_test_run+0x31e/0x390 [ 227.325398][ T7381] __sys_bpf+0x593/0x6d0 [ 227.329687][ T7381] ? bpf_link_show_fdinfo+0x340/0x340 [ 227.335108][ T7381] ? lock_chain_count+0x20/0x20 [ 227.339992][ T7381] __x64_sys_bpf+0x78/0x90 [ 227.344437][ T7381] do_syscall_64+0x4c/0xa0 [ 227.348959][ T7381] ? clear_bhb_loop+0x60/0xb0 [ 227.353746][ T7381] ? clear_bhb_loop+0x60/0xb0 [ 227.358439][ T7381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.364461][ T7381] RIP: 0033:0x7feedb98ebe9 [ 227.368913][ T7381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.388721][ T7381] RSP: 002b:00007feedc855038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.397163][ T7381] RAX: ffffffffffffffda RBX: 00007feedbbb5fa0 RCX: 00007feedb98ebe9 [ 227.405156][ T7381] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 227.413161][ T7381] RBP: 00007feedc855090 R08: 0000000000000000 R09: 0000000000000000 [ 227.421254][ T7381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.429270][ T7381] R13: 00007feedbbb6038 R14: 00007feedbbb5fa0 R15: 00007ffca88ffd08 [ 227.437306][ T7381] [ 227.473945][ T7388] netlink: 'syz.4.989': attribute type 2 has an invalid length. [ 227.643390][ T7394] device wg2 left promiscuous mode [ 227.689365][ T7399] netlink: 'syz.4.992': attribute type 3 has an invalid length. [ 227.728960][ T7399] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.992'. [ 227.761020][ T7394] device wg2 entered promiscuous mode [ 228.124405][ T7418] FAULT_INJECTION: forcing a failure. [ 228.124405][ T7418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.238656][ T7418] CPU: 0 PID: 7418 Comm: syz.4.998 Not tainted 6.1.147-syzkaller #0 [ 228.246708][ T7418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.256872][ T7418] Call Trace: [ 228.260181][ T7418] [ 228.263133][ T7418] dump_stack_lvl+0x168/0x22e [ 228.267847][ T7418] ? show_regs_print_info+0x12/0x12 [ 228.273065][ T7418] ? load_image+0x3b0/0x3b0 [ 228.277614][ T7418] ? __lock_acquire+0x7c50/0x7c50 [ 228.282935][ T7418] should_fail_ex+0x399/0x4d0 [ 228.287661][ T7418] _copy_from_user+0x2c/0x170 [ 228.292461][ T7418] iovec_from_user+0x143/0x360 [ 228.297264][ T7418] __import_iovec+0x6d/0x500 [ 228.301884][ T7418] ? __might_fault+0xa6/0x120 [ 228.306599][ T7418] import_iovec+0x6f/0xa0 [ 228.311008][ T7418] ___sys_sendmsg+0x1e4/0x290 [ 228.315724][ T7418] ? __sys_sendmsg+0x270/0x270 [ 228.320535][ T7418] ? __lock_acquire+0x7c50/0x7c50 [ 228.325627][ T7418] ? __fdget+0x17c/0x200 [ 228.329902][ T7418] __se_sys_sendmsg+0x19e/0x270 [ 228.334789][ T7418] ? __x64_sys_sendmsg+0x80/0x80 [ 228.339771][ T7418] ? lockdep_hardirqs_on+0x94/0x140 [ 228.345018][ T7418] do_syscall_64+0x4c/0xa0 [ 228.349543][ T7418] ? clear_bhb_loop+0x60/0xb0 [ 228.354241][ T7418] ? clear_bhb_loop+0x60/0xb0 [ 228.358937][ T7418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.364863][ T7418] RIP: 0033:0x7f7c84f8ebe9 [ 228.369306][ T7418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.389121][ T7418] RSP: 002b:00007f7c85db2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.397565][ T7418] RAX: ffffffffffffffda RBX: 00007f7c851b6090 RCX: 00007f7c84f8ebe9 [ 228.405661][ T7418] RDX: 0000000004040c04 RSI: 0000200000000080 RDI: 0000000000000006 [ 228.413762][ T7418] RBP: 00007f7c85db2090 R08: 0000000000000000 R09: 0000000000000000 [ 228.421930][ T7418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.429937][ T7418] R13: 00007f7c851b6128 R14: 00007f7c851b6090 R15: 00007ffd368cb608 [ 228.437966][ T7418] [ 229.490710][ T7445] netlink: 'syz.4.1008': attribute type 3 has an invalid length. [ 229.509139][ T7445] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1008'. [ 229.673262][ T7450] netlink: 'syz.2.1009': attribute type 10 has an invalid length. [ 229.723674][ T7450] team0: Port device netdevsim0 added [ 229.813113][ T7449] device wg2 left promiscuous mode [ 229.855716][ T7453] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1011'. [ 229.912998][ T7453] device bond_slave_0 entered promiscuous mode [ 229.919751][ T7453] device bond_slave_1 entered promiscuous mode [ 229.926140][ T7453] device netdevsim0 entered promiscuous mode [ 230.365870][ T7461] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1011'. [ 230.396910][ T7460] device wg2 entered promiscuous mode [ 230.410293][ T7468] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1014'. [ 230.693842][ T7479] FAULT_INJECTION: forcing a failure. [ 230.693842][ T7479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.735462][ T7479] CPU: 0 PID: 7479 Comm: syz.0.1018 Not tainted 6.1.147-syzkaller #0 [ 230.743702][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.753808][ T7479] Call Trace: [ 230.757119][ T7479] [ 230.760085][ T7479] dump_stack_lvl+0x168/0x22e [ 230.764794][ T7479] ? show_regs_print_info+0x12/0x12 [ 230.770032][ T7479] ? load_image+0x3b0/0x3b0 [ 230.774576][ T7479] ? __lock_acquire+0x7c50/0x7c50 [ 230.779731][ T7479] should_fail_ex+0x399/0x4d0 [ 230.784450][ T7479] _copy_from_user+0x2c/0x170 [ 230.789158][ T7479] __copy_msghdr+0x3b7/0x580 [ 230.793785][ T7479] ___sys_sendmsg+0x1a2/0x290 [ 230.798491][ T7479] ? __sys_sendmsg+0x270/0x270 [ 230.803304][ T7479] ? __lock_acquire+0x7c50/0x7c50 [ 230.808383][ T7479] ? __fdget+0x17c/0x200 [ 230.812647][ T7479] __se_sys_sendmsg+0x19e/0x270 [ 230.817513][ T7479] ? __x64_sys_sendmsg+0x80/0x80 [ 230.822486][ T7479] ? lockdep_hardirqs_on+0x94/0x140 [ 230.827743][ T7479] do_syscall_64+0x4c/0xa0 [ 230.832166][ T7479] ? clear_bhb_loop+0x60/0xb0 [ 230.836842][ T7479] ? clear_bhb_loop+0x60/0xb0 [ 230.841541][ T7479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.847534][ T7479] RIP: 0033:0x7ffa9738ebe9 [ 230.851968][ T7479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.871575][ T7479] RSP: 002b:00007ffa981f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.880010][ T7479] RAX: ffffffffffffffda RBX: 00007ffa975b5fa0 RCX: 00007ffa9738ebe9 [ 230.887985][ T7479] RDX: 0000000020000850 RSI: 0000200000003900 RDI: 0000000000000003 [ 230.895986][ T7479] RBP: 00007ffa981f9090 R08: 0000000000000000 R09: 0000000000000000 [ 230.903969][ T7479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.911961][ T7479] R13: 00007ffa975b6038 R14: 00007ffa975b5fa0 R15: 00007ffd15217d58 [ 230.919955][ T7479] [ 231.869802][ T7502] netlink: 'syz.1.1023': attribute type 3 has an invalid length. [ 231.941454][ T7502] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1023'. [ 232.107954][ T7509] FAULT_INJECTION: forcing a failure. [ 232.107954][ T7509] name failslab, interval 1, probability 0, space 0, times 0 [ 232.155325][ T7509] CPU: 0 PID: 7509 Comm: syz.0.1026 Not tainted 6.1.147-syzkaller #0 [ 232.163473][ T7509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.173639][ T7509] Call Trace: [ 232.176961][ T7509] [ 232.179909][ T7509] dump_stack_lvl+0x168/0x22e [ 232.184640][ T7509] ? show_regs_print_info+0x12/0x12 [ 232.189859][ T7509] ? load_image+0x3b0/0x3b0 [ 232.194496][ T7509] ? perf_trace_lock+0xf3/0x370 [ 232.199371][ T7509] ? verify_lock_unused+0x140/0x140 [ 232.204595][ T7509] ? perf_trace_lock+0xf3/0x370 [ 232.209470][ T7509] should_fail_ex+0x399/0x4d0 [ 232.214184][ T7509] should_failslab+0x5/0x20 [ 232.218721][ T7509] slab_pre_alloc_hook+0x59/0x310 [ 232.223777][ T7509] kmem_cache_alloc+0x56/0x2f0 [ 232.228568][ T7509] ? skb_clone+0x1e7/0x370 [ 232.233015][ T7509] skb_clone+0x1e7/0x370 [ 232.237298][ T7509] __netlink_deliver_tap+0x3ed/0x800 [ 232.242645][ T7509] ? netlink_deliver_tap+0x2e/0x1b0 [ 232.247888][ T7509] netlink_deliver_tap+0x19c/0x1b0 [ 232.253047][ T7509] netlink_unicast+0x728/0x8d0 [ 232.257851][ T7509] netlink_sendmsg+0x89e/0xbc0 [ 232.262685][ T7509] ? netlink_getsockopt+0x540/0x540 [ 232.267931][ T7509] ? aa_sock_msg_perm+0x94/0x150 [ 232.272922][ T7509] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 232.278230][ T7509] ? security_socket_sendmsg+0x7c/0xa0 [ 232.283716][ T7509] ? netlink_getsockopt+0x540/0x540 [ 232.288938][ T7509] ____sys_sendmsg+0x59b/0x970 [ 232.293726][ T7509] ? __sys_sendmsg_sock+0x30/0x30 [ 232.298771][ T7509] ? __import_iovec+0x315/0x500 [ 232.303665][ T7509] ? import_iovec+0x6f/0xa0 [ 232.308204][ T7509] ___sys_sendmsg+0x21c/0x290 [ 232.312920][ T7509] ? __sys_sendmsg+0x270/0x270 [ 232.317740][ T7509] ? __lock_acquire+0x7c50/0x7c50 [ 232.322853][ T7509] ? __fdget+0x17c/0x200 [ 232.327147][ T7509] __se_sys_sendmsg+0x19e/0x270 [ 232.332132][ T7509] ? __x64_sys_sendmsg+0x80/0x80 [ 232.337123][ T7509] ? lockdep_hardirqs_on+0x94/0x140 [ 232.342360][ T7509] do_syscall_64+0x4c/0xa0 [ 232.346804][ T7509] ? clear_bhb_loop+0x60/0xb0 [ 232.351512][ T7509] ? clear_bhb_loop+0x60/0xb0 [ 232.356232][ T7509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.362166][ T7509] RIP: 0033:0x7ffa9738ebe9 [ 232.366605][ T7509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.386237][ T7509] RSP: 002b:00007ffa981d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.394680][ T7509] RAX: ffffffffffffffda RBX: 00007ffa975b6090 RCX: 00007ffa9738ebe9 [ 232.402679][ T7509] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 232.410761][ T7509] RBP: 00007ffa981d8090 R08: 0000000000000000 R09: 0000000000000000 [ 232.418755][ T7509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.426754][ T7509] R13: 00007ffa975b6128 R14: 00007ffa975b6090 R15: 00007ffd15217d58 [ 232.434770][ T7509] [ 232.558683][ T7509] netlink: 'syz.0.1026': attribute type 10 has an invalid length. [ 232.571307][ T7509] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 232.867779][ T7518] device wg2 left promiscuous mode [ 232.922858][ T7517] netlink: 'syz.1.1030': attribute type 10 has an invalid length. [ 232.956676][ T7517] team0: Device ipvlan1 failed to register rx_handler [ 233.121828][ T7518] device wg2 entered promiscuous mode [ 233.834923][ T7545] netlink: 'syz.3.1040': attribute type 3 has an invalid length. [ 233.872667][ T7545] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1040'. [ 236.038018][ T7557] syz.2.1045[7557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.038150][ T7557] syz.2.1045[7557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.395664][ T7569] device wg2 left promiscuous mode [ 236.851339][ T7569] device wg2 entered promiscuous mode [ 237.277315][ T7585] netlink: 'syz.4.1054': attribute type 3 has an invalid length. [ 237.336689][ T7587] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.1053'. [ 237.425994][ T7585] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1054'. [ 237.895515][ T7555] netlink: 'syz.3.1044': attribute type 1 has an invalid length. [ 237.936191][ T7555] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1044'. [ 238.095787][ T7603] FAULT_INJECTION: forcing a failure. [ 238.095787][ T7603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.143311][ T7603] CPU: 0 PID: 7603 Comm: syz.1.1060 Not tainted 6.1.147-syzkaller #0 [ 238.151466][ T7603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.161730][ T7603] Call Trace: [ 238.165041][ T7603] [ 238.168005][ T7603] dump_stack_lvl+0x168/0x22e [ 238.172752][ T7603] ? show_regs_print_info+0x12/0x12 [ 238.178087][ T7603] ? load_image+0x3b0/0x3b0 [ 238.182633][ T7603] ? __lock_acquire+0x7c50/0x7c50 [ 238.187698][ T7603] should_fail_ex+0x399/0x4d0 [ 238.192410][ T7603] _copy_from_user+0x2c/0x170 [ 238.197114][ T7603] __sys_bpf+0x265/0x6d0 [ 238.201387][ T7603] ? bpf_link_show_fdinfo+0x340/0x340 [ 238.206848][ T7603] ? lock_chain_count+0x20/0x20 [ 238.211760][ T7603] __x64_sys_bpf+0x78/0x90 [ 238.216231][ T7603] do_syscall_64+0x4c/0xa0 [ 238.220672][ T7603] ? clear_bhb_loop+0x60/0xb0 [ 238.225374][ T7603] ? clear_bhb_loop+0x60/0xb0 [ 238.230070][ T7603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.236000][ T7603] RIP: 0033:0x7feedb98ebe9 [ 238.240435][ T7603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.260248][ T7603] RSP: 002b:00007feedc855038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.268705][ T7603] RAX: ffffffffffffffda RBX: 00007feedbbb5fa0 RCX: 00007feedb98ebe9 [ 238.276721][ T7603] RDX: 0000000000000050 RSI: 0000200000000700 RDI: 0000000000000000 [ 238.284831][ T7603] RBP: 00007feedc855090 R08: 0000000000000000 R09: 0000000000000000 [ 238.292855][ T7603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.300954][ T7603] R13: 00007feedbbb6038 R14: 00007feedbbb5fa0 R15: 00007ffca88ffd08 [ 238.309166][ T7603] [ 238.512451][ T7623] device wg2 left promiscuous mode [ 238.878427][ T7630] netlink: 'syz.1.1068': attribute type 3 has an invalid length. [ 238.890703][ T7630] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1068'. [ 238.917552][ T7623] device wg2 entered promiscuous mode [ 239.117168][ T7637] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1069'. [ 239.136697][ T7637] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1069'. [ 239.155181][ T7634] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1069'. [ 239.185027][ T7641] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1069'. [ 239.223885][ T7643] netlink: 'syz.1.1072': attribute type 29 has an invalid length. [ 239.275953][ T7643] netlink: 'syz.1.1072': attribute type 29 has an invalid length. [ 239.297218][ T7643] netlink: 'syz.1.1072': attribute type 29 has an invalid length. [ 240.352477][ T7667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1077'. [ 240.412380][ T7667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1077'. [ 241.188402][ T7653] netlink: 'syz.0.1075': attribute type 1 has an invalid length. [ 241.448320][ T7677] device wg2 left promiscuous mode [ 241.480291][ T7685] device wg2 entered promiscuous mode [ 241.487891][ T7687] netlink: 'syz.2.1082': attribute type 3 has an invalid length. [ 241.702365][ T7692] FAULT_INJECTION: forcing a failure. [ 241.702365][ T7692] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 241.820630][ T7692] CPU: 1 PID: 7692 Comm: syz.0.1084 Not tainted 6.1.147-syzkaller #0 [ 241.828788][ T7692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.838867][ T7692] Call Trace: [ 241.842174][ T7692] [ 241.845125][ T7692] dump_stack_lvl+0x168/0x22e [ 241.849868][ T7692] ? show_regs_print_info+0x12/0x12 [ 241.855094][ T7692] ? load_image+0x3b0/0x3b0 [ 241.859633][ T7692] ? __lock_acquire+0x7c50/0x7c50 [ 241.864692][ T7692] ? perf_trace_lock+0xf3/0x370 [ 241.869575][ T7692] should_fail_ex+0x399/0x4d0 [ 241.874302][ T7692] prepare_alloc_pages+0x1e2/0x5f0 [ 241.879453][ T7692] __alloc_pages+0x123/0x4e0 [ 241.884081][ T7692] ? kasan_populate_vmalloc_pte+0xa4/0xf0 [ 241.889939][ T7692] ? zone_statistics+0x170/0x170 [ 241.894919][ T7692] ? alloc_pages+0x4d8/0x740 [ 241.899538][ T7692] ? do_raw_spin_unlock+0x11d/0x230 [ 241.904870][ T7692] __get_free_pages+0x8/0x30 [ 241.909507][ T7692] kasan_populate_vmalloc_pte+0x31/0xf0 [ 241.915080][ T7692] ? __apply_to_page_range+0x953/0xc80 [ 241.920569][ T7692] __apply_to_page_range+0x962/0xc80 [ 241.925893][ T7692] ? kasan_populate_vmalloc+0x70/0x70 [ 241.931389][ T7692] alloc_vmap_area+0x1754/0x1880 [ 241.936372][ T7692] ? vm_map_ram+0xab0/0xab0 [ 241.940905][ T7692] ? rcu_is_watching+0x11/0xa0 [ 241.945719][ T7692] __get_vm_area_node+0x158/0x330 [ 241.950777][ T7692] __vmalloc_node_range+0x357/0x1390 [ 241.956387][ T7692] ? reuseport_array_alloc+0xbe/0x160 [ 241.961826][ T7692] ? free_vm_area+0x50/0x50 [ 241.966359][ T7692] ? bpf_lsm_capable+0x5/0x10 [ 241.971062][ T7692] ? security_capable+0x85/0xb0 [ 241.975942][ T7692] bpf_map_area_alloc+0xd4/0xe0 [ 241.980826][ T7692] ? reuseport_array_alloc+0xbe/0x160 [ 241.986222][ T7692] reuseport_array_alloc+0xbe/0x160 [ 241.991457][ T7692] map_create+0x531/0xe30 [ 241.995833][ T7692] ? bpf_lsm_bpf+0x5/0x10 [ 242.000187][ T7692] __sys_bpf+0x2f3/0x6d0 [ 242.004548][ T7692] ? bpf_link_show_fdinfo+0x340/0x340 [ 242.010140][ T7692] ? lock_chain_count+0x20/0x20 [ 242.015025][ T7692] __x64_sys_bpf+0x78/0x90 [ 242.019474][ T7692] do_syscall_64+0x4c/0xa0 [ 242.023907][ T7692] ? clear_bhb_loop+0x60/0xb0 [ 242.028602][ T7692] ? clear_bhb_loop+0x60/0xb0 [ 242.033322][ T7692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.039240][ T7692] RIP: 0033:0x7ffa9738ebe9 [ 242.043682][ T7692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.063399][ T7692] RSP: 002b:00007ffa981f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.071929][ T7692] RAX: ffffffffffffffda RBX: 00007ffa975b5fa0 RCX: 00007ffa9738ebe9 [ 242.080011][ T7692] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 242.088002][ T7692] RBP: 00007ffa981f9090 R08: 0000000000000000 R09: 0000000000000000 [ 242.095995][ T7692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.103996][ T7692] R13: 00007ffa975b6038 R14: 00007ffa975b5fa0 R15: 00007ffd15217d58 [ 242.112270][ T7692] [ 243.463486][ T7718] sctp: [Deprecated]: syz.2.1089 (pid 7718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.463486][ T7718] Use struct sctp_sack_info instead [ 243.571000][ T7722] netlink: 'syz.1.1092': attribute type 29 has an invalid length. [ 243.587579][ T7722] netlink: 'syz.1.1092': attribute type 29 has an invalid length. [ 243.622662][ T7725] netlink: 'syz.1.1092': attribute type 29 has an invalid length. [ 243.734700][ T7729] FAULT_INJECTION: forcing a failure. [ 243.734700][ T7729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.798978][ T7729] CPU: 1 PID: 7729 Comm: syz.0.1094 Not tainted 6.1.147-syzkaller #0 [ 243.807137][ T7729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.817317][ T7729] Call Trace: [ 243.820642][ T7729] [ 243.823617][ T7729] dump_stack_lvl+0x168/0x22e [ 243.828351][ T7729] ? show_regs_print_info+0x12/0x12 [ 243.833597][ T7729] ? load_image+0x3b0/0x3b0 [ 243.838165][ T7729] ? __lock_acquire+0x7c50/0x7c50 [ 243.843325][ T7729] ? __virt_addr_valid+0x188/0x540 [ 243.848509][ T7729] should_fail_ex+0x399/0x4d0 [ 243.853233][ T7729] _copy_from_user+0x2c/0x170 [ 243.857951][ T7729] sctp_setsockopt+0x19a/0xf90 [ 243.862760][ T7729] ? sock_common_recvmsg+0x1a0/0x1a0 [ 243.868097][ T7729] __sys_setsockopt+0x2bf/0x3d0 [ 243.872991][ T7729] __x64_sys_setsockopt+0xb1/0xc0 [ 243.878052][ T7729] do_syscall_64+0x4c/0xa0 [ 243.882493][ T7729] ? clear_bhb_loop+0x60/0xb0 [ 243.887274][ T7729] ? clear_bhb_loop+0x60/0xb0 [ 243.891971][ T7729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.898055][ T7729] RIP: 0033:0x7ffa9738ebe9 [ 243.902664][ T7729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.922541][ T7729] RSP: 002b:00007ffa981f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 243.930963][ T7729] RAX: ffffffffffffffda RBX: 00007ffa975b5fa0 RCX: 00007ffa9738ebe9 [ 243.938978][ T7729] RDX: 0000000000000010 RSI: 0000000000000084 RDI: 0000000000000003 [ 243.947126][ T7729] RBP: 00007ffa981f9090 R08: 0000000000000008 R09: 0000000000000000 [ 243.955205][ T7729] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.963194][ T7729] R13: 00007ffa975b6038 R14: 00007ffa975b5fa0 R15: 00007ffd15217d58 [ 243.971210][ T7729] [ 244.140474][ T7736] device wg2 left promiscuous mode [ 244.252227][ T7736] device wg2 entered promiscuous mode [ 244.451516][ T7752] netlink: 'syz.1.1101': attribute type 28 has an invalid length. [ 244.469493][ T7748] netlink: 'syz.0.1099': attribute type 3 has an invalid length. [ 244.477752][ T7752] netlink: 'syz.1.1101': attribute type 3 has an invalid length. [ 244.489407][ T7752] __nla_validate_parse: 4 callbacks suppressed [ 244.489425][ T7752] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1101'. [ 244.505295][ T7748] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1099'. [ 245.319701][ T7781] netlink: 'syz.2.1111': attribute type 10 has an invalid length. [ 245.365735][ T7781] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1111'. [ 245.936280][ T7792] device wg2 left promiscuous mode [ 246.007574][ T7795] netlink: 'syz.4.1115': attribute type 3 has an invalid length. [ 246.015988][ T7792] device wg2 entered promiscuous mode [ 246.034348][ T7795] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1115'. [ 246.295387][ T7804] netlink: 'syz.1.1118': attribute type 29 has an invalid length. [ 246.344848][ T7804] netlink: 'syz.1.1118': attribute type 29 has an invalid length. [ 247.099502][ T7831] tun0: tun_chr_ioctl cmd 1074025677 [ 247.126795][ T7831] tun0: linktype set to 769 [ 249.054081][ T7855] validate_nla: 5 callbacks suppressed [ 249.054100][ T7855] netlink: 'syz.4.1131': attribute type 3 has an invalid length. [ 249.071863][ T7855] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1131'. [ 249.885938][ T7831] bond0: (slave netdevsim0): Releasing backup interface [ 249.908712][ T7831] team0: Port device netdevsim0 added [ 249.918398][ T7835] netlink: 'syz.1.1127': attribute type 10 has an invalid length. [ 249.932896][ T7835] team0: Port device netdevsim0 removed [ 249.946098][ T7835] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 249.956328][ T7840] netlink: 'syz.2.1129': attribute type 21 has an invalid length. [ 249.968731][ T7840] netlink: 'syz.2.1129': attribute type 11 has an invalid length. [ 249.978478][ T7842] device wg2 left promiscuous mode [ 250.018390][ T7850] device wg2 entered promiscuous mode [ 250.665568][ T7885] netlink: 'syz.2.1142': attribute type 29 has an invalid length. [ 250.685970][ T7885] netlink: 'syz.2.1142': attribute type 29 has an invalid length. [ 250.718343][ T7885] netlink: 'syz.2.1142': attribute type 29 has an invalid length. [ 250.761390][ T7887] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1140'. [ 250.798650][ T7889] netlink: 'syz.2.1142': attribute type 29 has an invalid length. [ 250.821933][ T7885] netlink: 'syz.2.1142': attribute type 2 has an invalid length. [ 250.851835][ T7885] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1142'. [ 250.937217][ T7893] netlink: 'syz.0.1144': attribute type 3 has an invalid length. [ 250.966405][ T7893] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1144'. [ 251.103201][ T7901] FAULT_INJECTION: forcing a failure. [ 251.103201][ T7901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.137073][ T7901] CPU: 1 PID: 7901 Comm: syz.3.1147 Not tainted 6.1.147-syzkaller #0 [ 251.145219][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.155387][ T7901] Call Trace: [ 251.158695][ T7901] [ 251.161653][ T7901] dump_stack_lvl+0x168/0x22e [ 251.166369][ T7901] ? show_regs_print_info+0x12/0x12 [ 251.171677][ T7901] ? load_image+0x3b0/0x3b0 [ 251.176222][ T7901] ? __lock_acquire+0x7c50/0x7c50 [ 251.181281][ T7901] ? snprintf+0xd7/0x120 [ 251.185580][ T7901] should_fail_ex+0x399/0x4d0 [ 251.190298][ T7901] _copy_to_user+0x2c/0x130 [ 251.194941][ T7901] simple_read_from_buffer+0xe3/0x150 [ 251.200372][ T7901] proc_fail_nth_read+0x19a/0x210 [ 251.205443][ T7901] ? proc_fault_inject_write+0x2f0/0x2f0 [ 251.211218][ T7901] ? fsnotify_perm+0x248/0x550 [ 251.216023][ T7901] ? proc_fault_inject_write+0x2f0/0x2f0 [ 251.221680][ T7901] vfs_read+0x2c0/0x920 [ 251.225978][ T7901] ? kernel_read+0x1e0/0x1e0 [ 251.230598][ T7901] ? __fget_files+0x28/0x4d0 [ 251.235308][ T7901] ? __fget_files+0x44a/0x4d0 [ 251.240120][ T7901] ? __fdget_pos+0x2ae/0x360 [ 251.244744][ T7901] ? ksys_read+0x71/0x240 [ 251.249109][ T7901] ksys_read+0x143/0x240 [ 251.253384][ T7901] ? vfs_write+0x960/0x960 [ 251.257836][ T7901] ? lockdep_hardirqs_on+0x94/0x140 [ 251.263160][ T7901] do_syscall_64+0x4c/0xa0 [ 251.267605][ T7901] ? clear_bhb_loop+0x60/0xb0 [ 251.272309][ T7901] ? clear_bhb_loop+0x60/0xb0 [ 251.277007][ T7901] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.282937][ T7901] RIP: 0033:0x7f178738d5fc [ 251.287471][ T7901] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 251.307193][ T7901] RSP: 002b:00007f178828f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.315672][ T7901] RAX: ffffffffffffffda RBX: 00007f17875b5fa0 RCX: 00007f178738d5fc [ 251.323677][ T7901] RDX: 000000000000000f RSI: 00007f178828f0a0 RDI: 0000000000000004 [ 251.331707][ T7901] RBP: 00007f178828f090 R08: 0000000000000000 R09: 0000000000000000 [ 251.339724][ T7901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.347833][ T7901] R13: 00007f17875b6038 R14: 00007f17875b5fa0 R15: 00007ffd31d18388 [ 251.355949][ T7901] [ 253.769969][ T7907] device wg2 left promiscuous mode [ 253.786131][ T7914] device wg2 entered promiscuous mode [ 254.031152][ T7921] FAULT_INJECTION: forcing a failure. [ 254.031152][ T7921] name failslab, interval 1, probability 0, space 0, times 0 [ 254.126299][ T7921] CPU: 1 PID: 7921 Comm: syz.1.1150 Not tainted 6.1.147-syzkaller #0 [ 254.134510][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.144821][ T7921] Call Trace: [ 254.148177][ T7921] [ 254.151192][ T7921] dump_stack_lvl+0x168/0x22e [ 254.155988][ T7921] ? show_regs_print_info+0x12/0x12 [ 254.161302][ T7921] ? load_image+0x3b0/0x3b0 [ 254.165939][ T7921] ? __lock_acquire+0x7c50/0x7c50 [ 254.171141][ T7921] should_fail_ex+0x399/0x4d0 [ 254.175965][ T7921] should_failslab+0x5/0x20 [ 254.180651][ T7921] slab_pre_alloc_hook+0x59/0x310 [ 254.185789][ T7921] ? __vmalloc_node_range+0x584/0x1390 [ 254.191353][ T7921] __kmem_cache_alloc_node+0x4f/0x260 [ 254.196860][ T7921] ? __vmalloc_node_range+0x584/0x1390 [ 254.202585][ T7921] __kmalloc_node+0xa0/0x240 [ 254.207338][ T7921] __vmalloc_node_range+0x584/0x1390 [ 254.212851][ T7921] ? __lock_acquire+0x7c50/0x7c50 [ 254.218068][ T7921] ? free_vm_area+0x50/0x50 [ 254.222662][ T7921] ? rcu_is_watching+0x11/0xa0 [ 254.227592][ T7921] dup_task_struct+0x3d3/0x6b0 [ 254.232454][ T7921] ? copy_process+0x5bd/0x4020 [ 254.237438][ T7921] copy_process+0x5bd/0x4020 [ 254.242130][ T7921] ? trace_event_raw_event_lock+0x230/0x230 [ 254.248147][ T7921] ? perf_trace_lock+0xf3/0x370 [ 254.253123][ T7921] ? perf_trace_lock+0xf3/0x370 [ 254.258176][ T7921] ? idle_dummy+0x10/0x10 [ 254.262652][ T7921] kernel_clone+0x225/0x8b0 [ 254.267213][ T7921] ? ksys_write+0x1bd/0x240 [ 254.271841][ T7921] ? create_io_thread+0x120/0x120 [ 254.277041][ T7921] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 254.282756][ T7921] __x64_sys_clone+0x17c/0x1d0 [ 254.287603][ T7921] ? __fget_files+0x44a/0x4d0 [ 254.292354][ T7921] ? __ia32_sys_vfork+0x100/0x100 [ 254.297623][ T7921] ? lock_chain_count+0x20/0x20 [ 254.302608][ T7921] ? lockdep_hardirqs_on+0x94/0x140 [ 254.308013][ T7921] do_syscall_64+0x4c/0xa0 [ 254.312501][ T7921] ? clear_bhb_loop+0x60/0xb0 [ 254.317437][ T7921] ? clear_bhb_loop+0x60/0xb0 [ 254.322303][ T7921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.328270][ T7921] RIP: 0033:0x7feedb98ebe9 [ 254.332759][ T7921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.352431][ T7921] RSP: 002b:00007feedc854fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 254.360995][ T7921] RAX: ffffffffffffffda RBX: 00007feedbbb5fa0 RCX: 00007feedb98ebe9 [ 254.369015][ T7921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040800200 [ 254.377035][ T7921] RBP: 00007feedc855090 R08: 0000000000000000 R09: 0000000000000000 [ 254.385083][ T7921] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 254.393368][ T7921] R13: 00007feedbbb6038 R14: 00007feedbbb5fa0 R15: 00007ffca88ffd08 [ 254.401602][ T7921] [ 254.912449][ T7940] netlink: 'syz.0.1158': attribute type 1 has an invalid length. [ 254.930751][ T7940] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1158'. [ 255.020975][ T7936] netlink: 'syz.2.1157': attribute type 10 has an invalid length. [ 255.042289][ T7936] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1157'. [ 255.137263][ T7936] bridge0: port 3(veth0_vlan) entered blocking state [ 255.155480][ T7936] bridge0: port 3(veth0_vlan) entered disabled state [ 255.223015][ T7936] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 255.374523][ T7949] netlink: 'syz.0.1160': attribute type 3 has an invalid length. [ 255.390712][ T7949] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1160'. [ 255.406042][ T7953] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1162'. [ 255.495769][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.502193][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.257931][ T46] ------------[ cut here ]------------ [ 258.263990][ T46] intf 08:02:11:00:00:01 [link=0]: bad STA 44:3b:1b:5e:2a:90 bandwidth 20 MHz (0) > channel config 1 MHz (8) [ 258.281217][ T46] WARNING: CPU: 0 PID: 46 at drivers/net/wireless/mac80211_hwsim.c:2438 mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 258.293752][ T46] Modules linked in: [ 258.297683][ T46] CPU: 0 PID: 46 Comm: kworker/u4:3 Not tainted 6.1.147-syzkaller #0 [ 258.306095][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.316502][ T46] Workqueue: phy10 ieee80211_iface_work [ 258.322215][ T46] RIP: 0010:mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 258.328925][ T46] Code: e8 c4 0c 00 00 48 c7 c7 00 95 27 8b 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 e1 41 57 50 e8 03 bc 61 fb 48 83 c4 10 <0f> 0b e9 8b fe ff ff e8 b3 99 95 fb 0f 0b e9 7f fe ff ff e8 a7 99 [ 258.349212][ T46] RSP: 0018:ffffc90000b777f8 EFLAGS: 00010282 [ 258.355659][ T46] RAX: 5df470e78794df00 RBX: 0000000000000014 RCX: ffff88801daa9dc0 [ 258.363706][ T46] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 258.371737][ T46] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff5200016ee8d [ 258.379743][ T46] R10: fffff5200016ee8d R11: 1ffff9200016ee8c R12: 0000000000000000 [ 258.387775][ T46] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000008 [ 258.395978][ T46] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 258.405142][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.411782][ T46] CR2: 000000110c37203e CR3: 000000005c78e000 CR4: 00000000003506f0 [ 258.419795][ T46] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 258.427918][ T46] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 258.436131][ T46] Call Trace: [ 258.439439][ T46] [ 258.442426][ T46] ? mac80211_hwsim_sta_rc_update+0x53/0x6e0 [ 258.448464][ T46] mac80211_hwsim_sta_add+0x92/0x280 [ 258.453811][ T46] ? mac80211_hwsim_sw_scan_complete+0xd0/0xd0 [ 258.460039][ T46] drv_sta_state+0x62a/0x1280 [ 258.464880][ T46] sta_info_insert_rcu+0xc1e/0x1550 [ 258.470157][ T46] ? sta_info_insert_rcu+0x1b0/0x1550 [ 258.475696][ T46] ieee80211_ibss_finish_sta+0x27f/0x350 [ 258.481391][ T46] ? ieee80211_ibss_work+0x10b0/0x10b0 [ 258.487056][ T46] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 258.493122][ T46] ieee80211_ibss_work+0x234/0x10b0 [ 258.498369][ T46] ? lockdep_hardirqs_on+0x94/0x140 [ 258.503750][ T46] ? _raw_spin_unlock+0x40/0x40 [ 258.508656][ T46] ? ieee80211_ibss_rx_queued_mgmt+0x2b10/0x2b10 [ 258.515082][ T46] ? skb_dequeue+0x10a/0x140 [ 258.519708][ T46] ? ieee80211_iface_work+0x97c/0xc80 [ 258.525112][ T46] ? ieee80211_iface_work+0xb98/0xc80 [ 258.530619][ T46] ? _raw_spin_unlock_irq+0x1f/0x40 [ 258.535855][ T46] ? process_one_work+0x7a1/0x1160 [ 258.541021][ T46] process_one_work+0x898/0x1160 [ 258.545987][ T46] ? worker_detach_from_pool+0x240/0x240 [ 258.551657][ T46] ? _raw_spin_lock_irq+0x7a/0xe0 [ 258.556812][ T46] ? _raw_spin_lock_irq+0xab/0xe0 [ 258.562001][ T46] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 258.567465][ T46] ? kthread_data+0x4b/0xc0 [ 258.572054][ T46] worker_thread+0xaa2/0x1250 [ 258.576782][ T46] kthread+0x29d/0x330 [ 258.580935][ T46] ? worker_clr_flags+0x1a0/0x1a0 [ 258.585987][ T46] ? kthread_blkcg+0xd0/0xd0 [ 258.590638][ T46] ret_from_fork+0x1f/0x30 [ 258.595084][ T46] [ 258.598097][ T46] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 258.605390][ T46] CPU: 0 PID: 46 Comm: kworker/u4:3 Not tainted 6.1.147-syzkaller #0 [ 258.613478][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.623631][ T46] Workqueue: phy10 ieee80211_iface_work [ 258.629217][ T46] Call Trace: [ 258.632527][ T46] [ 258.635494][ T46] dump_stack_lvl+0x168/0x22e [ 258.640178][ T46] ? memcpy+0x3c/0x60 [ 258.644271][ T46] ? show_regs_print_info+0x12/0x12 [ 258.649573][ T46] ? load_image+0x3b0/0x3b0 [ 258.654071][ T46] panic+0x2c9/0x710 [ 258.658056][ T46] ? bpf_jit_dump+0xd0/0xd0 [ 258.662603][ T46] ? ret_from_fork+0x1f/0x30 [ 258.667237][ T46] __warn+0x2f8/0x4f0 [ 258.671312][ T46] ? mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 258.677404][ T46] ? mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 258.683508][ T46] report_bug+0x2ba/0x4f0 [ 258.687990][ T46] ? mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 258.694109][ T46] handle_bug+0x3a/0x70 [ 258.698273][ T46] exc_invalid_op+0x16/0x40 [ 258.702809][ T46] asm_exc_invalid_op+0x16/0x20 [ 258.707709][ T46] RIP: 0010:mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 258.714392][ T46] Code: e8 c4 0c 00 00 48 c7 c7 00 95 27 8b 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 e1 41 57 50 e8 03 bc 61 fb 48 83 c4 10 <0f> 0b e9 8b fe ff ff e8 b3 99 95 fb 0f 0b e9 7f fe ff ff e8 a7 99 [ 258.734092][ T46] RSP: 0018:ffffc90000b777f8 EFLAGS: 00010282 [ 258.740170][ T46] RAX: 5df470e78794df00 RBX: 0000000000000014 RCX: ffff88801daa9dc0 [ 258.748144][ T46] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 258.756110][ T46] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff5200016ee8d [ 258.764090][ T46] R10: fffff5200016ee8d R11: 1ffff9200016ee8c R12: 0000000000000000 [ 258.772076][ T46] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000008 [ 258.780147][ T46] ? mac80211_hwsim_sta_rc_update+0x53/0x6e0 [ 258.786126][ T46] mac80211_hwsim_sta_add+0x92/0x280 [ 258.791403][ T46] ? mac80211_hwsim_sw_scan_complete+0xd0/0xd0 [ 258.797579][ T46] drv_sta_state+0x62a/0x1280 [ 258.802287][ T46] sta_info_insert_rcu+0xc1e/0x1550 [ 258.807502][ T46] ? sta_info_insert_rcu+0x1b0/0x1550 [ 258.812861][ T46] ieee80211_ibss_finish_sta+0x27f/0x350 [ 258.818499][ T46] ? ieee80211_ibss_work+0x10b0/0x10b0 [ 258.823966][ T46] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 258.829969][ T46] ieee80211_ibss_work+0x234/0x10b0 [ 258.835158][ T46] ? lockdep_hardirqs_on+0x94/0x140 [ 258.840420][ T46] ? _raw_spin_unlock+0x40/0x40 [ 258.845274][ T46] ? ieee80211_ibss_rx_queued_mgmt+0x2b10/0x2b10 [ 258.851605][ T46] ? skb_dequeue+0x10a/0x140 [ 258.856184][ T46] ? ieee80211_iface_work+0x97c/0xc80 [ 258.861569][ T46] ? ieee80211_iface_work+0xb98/0xc80 [ 258.866990][ T46] ? _raw_spin_unlock_irq+0x1f/0x40 [ 258.872195][ T46] ? process_one_work+0x7a1/0x1160 [ 258.877330][ T46] process_one_work+0x898/0x1160 [ 258.882319][ T46] ? worker_detach_from_pool+0x240/0x240 [ 258.888057][ T46] ? _raw_spin_lock_irq+0x7a/0xe0 [ 258.893084][ T46] ? _raw_spin_lock_irq+0xab/0xe0 [ 258.898098][ T46] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 258.903478][ T46] ? kthread_data+0x4b/0xc0 [ 258.908015][ T46] worker_thread+0xaa2/0x1250 [ 258.912690][ T46] kthread+0x29d/0x330 [ 258.916745][ T46] ? worker_clr_flags+0x1a0/0x1a0 [ 258.921766][ T46] ? kthread_blkcg+0xd0/0xd0 [ 258.926377][ T46] ret_from_fork+0x1f/0x30 [ 258.930842][ T46] [ 258.934155][ T46] Kernel Offset: disabled [ 258.938754][ T46] Rebooting in 86400 seconds..