last executing test programs: 8.871822263s ago: executing program 1 (id=2498): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000140120081ae08060cdc030100007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a009bb837dc6cc01e32efaec8c7e4ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b567c660dbbff", 0x89}], 0x1}, 0x40084) 8.630585761s ago: executing program 1 (id=2500): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x12010, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000870000008500000007000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.319780171s ago: executing program 1 (id=2502): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000500) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x5) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x0, 0x10000}, 0x8000, 0x5, 0x43a1bd79, 0x8, 0x9, 0x6, 0x8, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0x7}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) socketpair(0x1d, 0x2, 0x7, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 8.117932448s ago: executing program 1 (id=2504): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000005300000095dbd0ff7fa57b0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 7.883458956s ago: executing program 1 (id=2506): r0 = socket$kcm(0x11, 0xa, 0x300) sendmsg(r0, &(0x7f0000001040)={&(0x7f0000000380)=@ethernet={0x6, @local}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000680)="b068648c9cfd44025a9a45defaa6", 0xe}, {0x0}, {&(0x7f0000000bc0)}], 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x2f0}, 0x4c080) 7.534182747s ago: executing program 1 (id=2508): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x0, 0xff66, 0x10, 0x8, 0xffffffffffffff5a, 0x0}}, 0x10) close(r1) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0xffff, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES32=r0], 0x9a) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0xffffffffffffffff, r6, 0x0, 0x3, &(0x7f0000000040)='{.\x00'}, 0x30) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e46558"], 0x14) 4.354922174s ago: executing program 0 (id=2524): r0 = socket$kcm(0x11, 0xa, 0x300) sendmsg(r0, &(0x7f0000001040)={&(0x7f0000000380)=@ethernet={0x6, @local}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000680)="b068648c9cfd44025a9a45defaa6", 0xe}, {0x0}, {&(0x7f0000000bc0)}], 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x2f0}, 0x4c080) 4.17331039s ago: executing program 0 (id=2528): r0 = socket$kcm(0x11, 0xa, 0x300) sendmsg(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000680)="b068648c9cfd44025a9a45defaa6", 0xe}, {0x0}, {&(0x7f0000000bc0)}], 0x3, &(0x7f0000000d40)=ANY=[], 0x2f0}, 0x4c080) 3.987669456s ago: executing program 0 (id=2529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003c9d709e9f8016b1110f56e7c22d459aff94d60c9b74f0f6ad3a0a79fe932e8f7c070ad284ac323fe4d838d2d585fc34e67b8abae44572de4d0000000000000000000000000000000020d3b072b4de98ef2a06e9ca43aa8f8edade9d34efb4012fa2610b468d8a864dcc499b5fda503f288979edc8f3d55b5ee4c37be3e8e7c21c8a11b7f0bbc436c625e398f86c7c89f553bbc864eab29b318fe1c093004710390ac6298637d403132e5fe71e8ecd40ee1ffd424b0e9c3e2cbff88dc90d"], 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="5c00000014006b03000000d86e6c1d00028409fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6aee6d700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB="0000000000000000080000100000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000001c0)=r7, 0x4) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240)={0x6}, 0x8) r8 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x840, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0xb, 0x0, 0x0) sendmsg$inet(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000001c000000000", @ANYRES32], 0x0, 0x3}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)}, 0x4048001) perf_event_open(&(0x7f00000006c0)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0xfffffffffffffffc, 0x80000001, 0x1, 0x0, 0x80000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 2.807161476s ago: executing program 2 (id=2531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x54) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x8b, &(0x7f0000000140)=""/139, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x23971, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0xfd, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x2, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x3e8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$tipc(r3, 0x0, 0x40) socketpair(0x1d, 0x2, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="2000000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000", 0x20}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 2.67586014s ago: executing program 3 (id=2532): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24b8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866307d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb967ef735181df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccced13468a188df7ab4840b9961e2a8b5202c9d9b00ee912572eea15d13abdf3b21ad680c88a513021c1d3a7b30d64960c03a01364b2324966bd89d917b15dcb4f8cbacfe05ddcc213d14189edcd9f8b828ebaaab4f56470d3abef47b6d88dc438c9b0a253c26c386464754e76c0d7bfbc1dfa7248982ec26bd725eb623bb12f96e63eb5d1a0030e58a6653247c986c7ca9f15fd84d5eb1cd5ee35c4f464dc1a789b06c6c7074fc927680eac8546b2aee2f8867d6bf36b88a99ff67c7b2dd68ae3380622653efcad276a0f4b446091b80653014e67629dfde0091c7f090a22b5c427d03"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 2.549829795s ago: executing program 3 (id=2533): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001200)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x7, 0x6c, &(0x7f00000014c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000850000006d000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000001800e8ff000000000000000054075ba9c0688ed0fe27b32f95a8d22efb4bff8074760c7002819f07741630c41934ea1a2f169c9187585ae670bcfcadbe06b7e421ebdde11228c4a36420c7a4b56a4d561cb81debacf1edfec720f8c41ccb8396ffe8fa3549845a1cd471c200cffba0abdb644f2dd5c8c0b0ecc2c9e48c07949f1dbe054c5b2e1c83b67bfb7ef69b7c4c0bd39929b46a4173a9dde928146b71e33543776e8a005188b1772b8f3ed5a06bcd180fa645e335f2b06af6a995da03c5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = syz_clone(0x84000000, &(0x7f0000000840)="8317d6df1782e14ed70678c3a0a7c9da5c13909216bc4e784450bbd09f46f260240b2f90988203f169dc23e71978fe082abb0e9135e336998c01fbe6e685924545ab284f127327a10a4cd48982dc7eb4ab14d6ad1b502b8a1e758a51ef8ccb2e66e0691ac99a6213662bd3f32a37808b70cd4aedadd03b250eaeb6d8503e694fc03e2b751e5bad3a4f5ef7567cec0db02ec3f2f5c76084020ca482e31ca59024146b76d2870cab84eca8eb700123a9c4676add6ffaf349ead74d66c338fd6c5a4e204dc2f40e25004557beccf4fb09b2e21a3eb4deaff6175e02701ddd5ec9f09d3e61d2b3a4260598506a", 0xeb, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="fd8887245f2fe1b580fb493d277d5b385acdd66bcca108d18bfa26ae7f2affce28b749fac89b8c05995ce05a4bc01a6c79d65a11a2a5dd218fdd655972832b4f2e7e3941a5283f7ab54eec054759c273c861d31d2fbb3c3d8550aac82137ba03") perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf2903, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x8}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, r2, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4880) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756e6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 2.118948699s ago: executing program 3 (id=2534): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x2, 0x1, 0x9}, {0x10000002, 0x0, 0x0, 0xc}], 0x10, 0x3}, 0x94) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x922000000003, 0x11) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) close(r4) r6 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240), 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func={0x3, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35}, 0x20) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r7}, 0x8) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) 1.732018022s ago: executing program 3 (id=2535): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000500) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x5) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x0, 0x10000}, 0x8000, 0x5, 0x43a1bd79, 0x8, 0x9, 0x6, 0x8, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0x7}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) socketpair(0x1d, 0x2, 0x7, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69ee517d34442bc24", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.674849284s ago: executing program 2 (id=2536): r0 = socket$kcm(0x11, 0xa, 0x300) sendmsg(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000680)="b068648c9cfd44025a9a45defaa6", 0xe}, {0x0}, {&(0x7f0000000bc0)}], 0x3, &(0x7f0000000d40)=ANY=[], 0x2f0}, 0x4c080) 1.452172701s ago: executing program 0 (id=2537): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x2, 0x0, 0x84) socketpair(0x5, 0x807, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1.408798482s ago: executing program 3 (id=2538): perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000feffffff18010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f9ffffff8500000015000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400e71400000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a70000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d38000911161000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b70300000008000085000000a0000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) close(r5) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x4008804) sendmsg$inet(r6, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)="c109000000000000001d1e020e", 0xd}, {&(0x7f0000000240)="0563", 0x2}], 0x2}, 0x20040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) sendmsg(r6, &(0x7f0000002dc0)={&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @private=0xa010100}, 0x1, 0x3, 0x3, 0x3}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000240)="0bd21673ebf68f704352d08852608b25441de17d9ae60e9093442ad83282b996a6d27de9eee57f518d254d59b2cb3bbf4d", 0x31}, {&(0x7f00000007c0)="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", 0xfc}, {&(0x7f00000008c0)="daff7756461bedc5fa985f25f92c89953ce4062b61d02fdbaedfd40060064ae48a637be8c39ec424aff49e13fe0ea24f55393f367be286531aa233258e337597d7d140eb3b29ed958686cea8f8fd9655f892cce4de8ede4a2eb475aef63d4c0a16f49a4e477f620b0cb54e4f434a930f833f91499a4524afe7bf5b8ce9d6cd648c", 0x81}], 0x3, &(0x7f0000001980)=[{0x1010, 0x10c, 0x5, "319f3ce30f667a8e9daf8159b023cba46beaba6c8377491aa7e9eafb3501af52cfcfb521e2805e9ff792db7a162b3739d0a30d6d8e3ad5f486108a86097fd56ce62375a9879691c0514967918ebdbcddf279c3e42fabde5447c1884d958a5fb8da5a40154c847fb8924de8000168373bb5007efb4389e2ddf5c4113d07d113addcb8aea9c69a00072f1f788d423995bdba0832dbde0000587ca82a504c050c331cbdd081f3eb2b156e4c760f7fc4571bf020ea3b47cfcac00d5f869d5cc9cc60b15e86bd5191786176464751c28df647fd9362654a6c4b1f5c31004a70342ef9c28ff134b64456deaa3741f708a75e252b4c32f34d5358006a3bf89bd844d1ac1b25c426dfc1cc500d57d3444fc8094e258872a6e4283cbf51f126b5b419dc7b31cb10c7b66c8011594e4aeff2bc4e7ca79000a8f4397c7c404185f5e3c3ade445bfb0441ea7c048f500cd094c68f2f170b6f3fe88866614e9d6acd13d6b812e0b1e4c2f25226cbf6ce9514255561eab81e18984f4ebfb6dfa0921460abba215b18d91462f993d643725b0309d20c7f77fdaa45129ac733bd66359702c696eb9234440decbb4e952670be04c6082246ca24159bb35799c1feb6e640e4e552eca553e4890ea8332623ec5f9b88478c7bce18b5efd1498ad662770dea777bbba7fdd39776890ac3c7bfb0a10d44ad03b78de4df36c1d79e21a025a2bdf0a07b601758085712ac936df5484dd2bc166784744f3f704111bebb9e693dea2ed48c6a0a41e1b3e8ac2b71a0980a69b63aa57298548bfaa16fdece21c6604983f3507e28b2bd092f18e7ea02b2701e181cc997a49d25634b802886bf970877c8e47b62490ad990264021504c36a2f5cf4090fec19c68bd0a76f3d14a856e4864405a9ed7b36026b04538af200d683377141f573b9befa2080048ec374c2acb9af738cad1bf4842be7bb6dc4843df4e82de8476033e728708aaa093013ef5976d6bf3affc6e357a540b4322e6cd46f65768591e3cbd4398c1acd6027274f0201899826a3759034249815a0dd859ffd21e00c7975880f1456699104b924255a5dda56035836aecee758488f51677969aba46222a6215fbccd41f489433fda213af58ec729a6cab149968a7d61002de5a02fe38fc333068465aad6e2134b09cb16d091a41ab9767d75ef6cdb971a5e5e0d3f9d5b322ebe1f1de54a8fe8db24c3d9265379b5a00df836f6855295c2ccb4d7459895dcac02537d2aa1c167f6e920e476d18441b7298e413c27809763f246d6439381507e7cdff6a480cfcb3385cc66fa1f263a32690219c7404d83c441ccf921a264fd630ef30cb24ed0569b300e3253af17527f80174e93f669751a6532aecdf56bbce04f674b913b222d378d1a7921199b42705c1a68265731974cd780a0225090a57e1ae25ed00b507640df0f2a8a4ec69cbac8ede00b52e46bc40571bbdfffc2a6998f6a0361f4677bbfcc87b700d22d78e46af0a6507357c8083993a6b2bc4ba9b404c8c6e144f1a4d2dfd55c5cea636cfdaa6f1412e752dd1e5cde15e70b0a8367ade39aefd187def1453e6914f69ed0b3b43049e61b29e36db95085409e9abda998120952e13e3928a16ea21f0b3839fbc741de40e1bbcae79c85838ecefa0a8977d4a53f290a9dfe678b850c4a760d7c4f0ed1852320fbf334674d33949a6f0c899ebb1b4fac46f34cbd5a40d8c6f5abfc11570fc85394c1cb8d033b639c30190a50bebed00b11ccfeec76b376e3e7f2e2bb6b9e1b2d2203bac48cbb168d54006b7d9a6cb41ba559f9913013aefeab9a0246c91a3ed0d5b435c83d13d1aff983e338788a1483f85b1d7c487a1afe8989f035aab89322d44f2e31fe3d92b6f84d1ef70a74b09a7f180b3a1c3fd860c039e92860db81217744cf00b569d55feb7b1101d9a616a0770278b9b86ceb63413136943be27e23ee575af1e2cb379cbf306f81713e705f68be8ef3451307c740875ae1a894cf433f660d419e86afcf6b407f2decb422f507d4b3b3551533e9b48106edc3111ac024fc5c75cb23687da5cb9b6cf31b140cfc20b60e8da1ac4a3b7c04c094406ee46f12a82403f3d5b572f8ff7a3cf8d02f497ee1af04d4c0a4545aa84c8de63f686e0413d52f0935c76163d1d960ec6ee661a8d021bface150c0bd038444dbb938e0e726f2b3d278ac61ba8d0ef818eb946b06c2681ced2a242f799b31cb6ff4899d5d8dcc493de6d6ded8f03cc6e6dac05a6169a85317d8d4275567861d62a648e75798ab5c6dcf7ededa1b48f96c2cf8625654fa8a042f721ab369f20c2b8a82657c743399b72f91fdd09c3af5304af9e2bbdf12f2b5f9b0812a2116d2e4953867a25135a6025eb07c444f21c2ed8574151e3b6a9d88e91ccc16b09440d307ff1363b2c99b6020b6516164a0dc9599f8b16a3ac589c1c1383159fce5520f45f879b5703b4e2b3b6af3d38f0e12757ea70d10804b430e2b0fb03a39ddba1eb49b17e603653dd3cfca2dcb2e4d8bb6f0dc66d69099e27a804243b071a25e830c6ada96101d555346505d495cbea09488002c2ca580328b986d575ecbe51dc06c7f563694c6a37f895b3e39ca59ef9c7a06569c4a037fbf21cdc9c1945cdbe214fdc41526f66369a42dd592d202f3d17d4ca2e0e8c8bf0b6c7b18e020e562373c01ac971f910d5bb429f6fdebe17d20af82dd82f9bdaeb3b5b81bed0647f289521f4811ecdd50846bf1fd9f212b8b837f155072dc6e747e621fe9656db0fc440efcb8e51ef1d373e8d498de17893a56747e028c1d6b3586c361e887f6a0835bb887500b5b1c90c15e8169a1db6d23c36eaeb608a9b64e55f37cf14eb437a2e1b8bd0e1b511ed1f3de975030682592dd13bc6fca99587a70bc834c34b9f25fa67615d8c24b5bbc4af7250edf1d65be7390098a90a49dbf029d82cd6109f0fe0e79f712d450a87307410a6557d908deeef0b5fd37e5989a6423ddb5e686573f2e04e80b6972790db48682319b9af44849c975a69437e6a344ba64ebd81716dead095e33c8d29b9a37b7ce35a5ee19fe4dcca7086fff3b7e3880e3a3912fb75071aa4de06a4f43fb958a94910c2acd2ecd49ad81b2b940f52958924665263e8d31cb676ce81e39dc43fc41f905ae661d293c71530cdfa8f602e5028801d123b5c5d9d9fb76c0b6226518c03284c1ecd0ce559b432f1e4dd18a71e0ab8ab8ad52b8fbd650083e4fb9ad066fc1416f77252755cddb4a85efa7ba10abad01c4a8f99adc2720229335b99b270de5b1d49588f89f277f1387d41d7e83287e0ac47074036b0abffaccf2c9fa6c91555c6f1c657db58607931f94b79f17f2459f349426938a079b019c236c692e50a9e433120e300b6bbe9b0254f48df7ca33a33ef97855b4a30cb6b28c39ea9417ae4797b8aa66ad368ad949052733a50f2c018b0cda6acd22de9c35a3bb0894be1d6deb1e53ca7800ea2a6ece021c625355266805af42ca0ec2a7a91ca999562d25186719100b7e6e4854b1dd4448bf15211aea109e592ae908729ded04aa2cdbff74e34e446548b75cf5346e6ad81e34ae38ccb47523ed9eac300d6ed13d7b6e80cdb64330d2cd4c482d77b2ce1bccefd52ef26cbb34240eb3fa3b58628f8fa889c58afffe6d18deb33e8dc9bc7dfc0f95dc5158f14080ef33da2f18957b00ecca5978e733e3b1221368b11b48bd775edf0a9412fe1e3bc4a159b2f08895366722adc5c771394ffad13559179429ed7b8462d792b88445e42e09f7bf9eecb206a95008fc6c095f3e34b053718ed76c6178b83796c6235ec00adb81bd0d683d0b66060969faca1fca59c435cf07dee649a4a3c52b4d58b3836a5ca47c83899f94eff01ab14f79b871a3f98e4c6063fe41063d2f46c61a69b1371bf04c14fc16f4bb1034e85e6a01335808ae1c26848ecf6d2f2b33c0eeb22822ab383003f46db040d805fa81bfd16e51667002972acfc2d3a60b4475fc3a3a35676653f6ca5cc6f583950f95f8a5771a93a2325a489217aa5ae940c5d846145573f4b02fd53e2e9356c8222646dbc31f512801a2065bac778207cba02fb9022b51b86ac84e2d39a04e81b93a54ec170e26495aab9840e469e755be624d61701c656a13b2bb36d22c59f85f8b57acc4f7b5de143d221531116ec07d00d8131e3901a31d6cfb68c1bde8d49d137caa66532a6f385c245b82aa9b9a30fd85d1bbcbf6e7a139362f8f2ed8b6d45b59c4721f6db098097b53d2372dea9307031dc4275586c836f57aad889ef5daad7350f48a8020187fba0b43f6461c0e522b8de0cf8eac6925ba42ab3d584d7ffe38ef9c53917a3a4c6648c2d6a9deb53c4cce9316fa83199ced58f5db3bbf1b50f36b828fe644ab9cb5e07ee0df943369c0e2adeab880a6dd8724928b8da92da50d90a20989e25e884d09ed675f0a3d4613e488f32dc0f93e1e75db792dc5389d6d7b022fa2048686943e026792bb3ded5e629f11497eacea3a40caa9f3e7542b7a2c14aea92e2790afcacbae7db1e9a00b47e09f27ce748f3e0fdf8a8955f460b2fb2687ea1cebdae45948cb51fad3bb4e404bc0061bf8ce938c7e3070620b6a4d7fa3f1250d7cca26b1b4f2066b6e59a13df27b162c4f85bc82fd233f2a569c664151757bc7159fa356f365c034bcfe0b345acf0c3d2d81bcc5714900b017d872f6e7a4045eb3480b04e74f03839bd7b1bb59f9f80dfec4ebfa37b3f15b2d2ef5bd718da447e47d9b2f5e320a818636b9a5a29d7f3259a7b3aa9b8e15c7f29e6af33ab699d5a62a6b5691c1b7c0691c5836b24e41b9e653f6fe49c56c5a8cfd178135ee632f57230ee0498285713b34d7a8b06996f6fb51e35b3386fca2503692d67c32b37cd9f57c52eb259334ad2c728f8188a35a5dfccfde5e2276a0d82f7bce6732c729717aebea86619255f5231ab426783f54e539071dfa974d0a3427a8664e720960c7900e77f566852ec558cbbd9c085c38bf3801f8dd0dea65f6c6056635a75a2a6a719aed936be4bd2a2fb0857a5218983410086414db3a5d4838a87188853f449a52dc3f700de330ad9caa2dc1dd8ca697ea779b32bf05d7dff59c23dac7a990177918be31659d8562314bb9e4c7136c7ed9f748b7fd28e42efa86ae3022be97b113b3f6a1e1ab231a1e2b4bc2c96203fa606d1794ea0f37bfa20bf58a43c87c064d9bb9d4f3a42296d8cbab9830727ccc457b04bb8442a1c12ea05a3797ad4193b131613b121b300b101840c035b35a5960190fde78cec0d9bbbd15980b6a02e2ab05bc45be2db4e6eb1404c194f2c1688ff0c763b327caf2639f1ce4c97dc5da7a780a858d528bf89389487798f1b64a01d1d921e94dd95a3f84df6c463783c96e03cda75bbfd405020de6055c76cebaa88079781dc1d81ddc2ad70c656f0473186a503066d60d199779f4328ea037122dde5a6fe070ee9afb1c4e1fe7ea0871bd9c2b8d392b743080338e9ff1f3f816d3fb15e1718ff421c9729c2f608e280c2130eaae7732e4e33a2ee17e3c60ec186ed92540a192c2fc8d1413efc727164b06645466976eab0f705e64ee8251c640f247d36cc64ed1508b963c393c7756fa6874da36c606c8d77bd442f8b6ca06e9465cccef50da0ece760453f6590a5a85c5b7abd0963838dc32f16f63dac55155d9a94f81b218b9b1fe6d49f325c44ae576703a49e82462feca0c50857ac07817bdd5ab91812fa2c18a69067a2b14cbabc754bcffb41dfa06cccf06680fa0957f984c61f01efc970481d07518cd86e749a69206db0a"}, {0x90, 0x10c, 0x3ff, "3564e77e710a34c1fdc7673bef67c821a5d4c0f50f354765b9b8577b20aa4073b67939789e223a36e66835fa1c5e6ab0c08f81c62eba23d24fedef48f8c339148644c6e8d57a1c8cacb666bd81fa3ef5ae493224d1405fa7bbd6f07b6ebe00c2a197146c6e4da0ab94392b9813684058b079390a4bb1029c457b03"}, {0xd8, 0x0, 0xffff, "5d290465b64e7b1a9c3dfdae9a74f52cf9c1c71c585d05baf3dc4b95e0cdf7dae7277cb32b56cc9ef1927e4226d4af927ca9057965a2908f617b2cbe8b89e6909e2443e733bb532a481e10bdacb13bb3daca293c2e866e2bc4d63234ce75f7b5c3e16712d3128341845492201dd2e383188692090b8eee77396df6ba02d4651b9c54751bcd1293ceb686baf23a09699dbe09756058f13a6999fbc6bd0ece6974cc4525fe8efee91944415dd5f84da424481cecc5acc8d607eb2a39ac429e4c974ea95c"}, {0x100, 0x118, 0x8000, "119680de4507f594281d4f1e2aa2136c3b7cf5dabddb84df7c9ced2fd040e09fced439342a1f91293b3b6d92ebc9fe6d7b753974db9275b5175fdc5ea30a438e6ff13ea741c5a367e9f3c17e9e405d7182410db18e436ea80b1f4743e2038cdc68384c16fe05f296bee6c5fe4591f7253a28b9e242f1bb9cf9033bb2f2c554616165e11dfab13aa59a86150e6198ba80b2b72dc18346880b33e370a7c96d065129a7334541d724675cead4d64439d784e1f16179b7ce557364e773b6dfdf64d33027ecdaefdb462951a361173c21dccaf407c584a075239c01be55fa7bdb09d53643d3ad359e247d8265a6317cd1"}, {0x90, 0x8d01ba5145e67cad, 0x40, "9af205431ffa9b8428a0f9a80cb28be711094c341ba72ab00f5de819356fbdb6cdf210133ad75bd1f5344c55de86c552321626a76f621bd5b53d6e2e467efbdafccaef581983223fca6328bdd456afca9da4a3477884601a1ba8a565c2c0e15c983df4a26f81bd183d17fd2cfc026f6aacb75cb051512c87fd7178ae"}, {0x90, 0x3a, 0x6, "a4bd2febe7eb8da92f14119efa17be8b6946d4482d5441d783c3a9d68de779747f4a19e04b43fe0f2e05889665e1395023e77098a3c359ee6916fc19e869018bf7dbdf595fe5d4e014324268c5f572556ad40eab2e70716fb41fc3ee5d90a4be3101b327e34f61d8f18ac9f0d2be9818abe58047216502d7f8c64e4fb41369ac"}, {0x98, 0x114, 0xc0a, "1537d89ebbc6ba9f81416dccfb873d8445e9b984be400b6fd956b194af1ee2a34c27171a33db53c89f099390ec1ff4148663f2a1021af61d85e704357731f7661b71e926b687094031532f544e3f3d6696f69bf9eeac5b56e9ffacb66796b6dbbd390d17d5d9b1dc7e0b57dc889c90f01f01c0319c983f3ba86e5c024bc707febe70faf5"}], 0x1430}, 0x40) 1.397720263s ago: executing program 2 (id=2539): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x12010, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 919.600309ms ago: executing program 2 (id=2540): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000001c0)=""/117, 0x75}], 0x1, 0x0, 0x0, 0x7000000}, 0x102) 577.147681ms ago: executing program 3 (id=2541): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfefefffd}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000240), &(0x7f00000000c0)=r2}, 0xfffffffffffffe80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000180), &(0x7f0000000280)='%pi6 \x00'}, 0x20) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r4}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0xc0a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000009c0)="d80000001e0081064e81f782db44b9040002080006007c09e8fe11a10a0015c00200142603600e120800080024000000a80009001100014003001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x24000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000880), 0xde9, r6}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) 500.408503ms ago: executing program 0 (id=2542): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000c80)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000008000000675c44f18840a6cc329c1f784531300341720c7f23195dbddea830510000000000000100000000000000000000c3a56cb712e5f69bd09ab62f3ff685ec02e56ecac16c71145223f1c5000000000000000738f1cd66dce6d124a083cb182eac9336f861fc853eb25f985062a0c685c33fb70d75611f598cebb022829c2e5fadd3e9271132564e162dc065ca476f"], 0x50) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e80), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)="84"}, 0x50) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x3) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000640)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], 0x0, 0x9, 0x1000, &(0x7f0000002440)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xa, 0x0, 0x1}, 0x10, 0x25a7e, r3, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000006c0)="5c00000012006bab9a3fe37ea60864160af36504001d0000001d001931a0e69ee517d344ac8f06000000a705251eff82949a3651f60a84c9f4d4938037e70e45c5bbfbffa8499c69dd752d0017675e403f1143e40967c4246eeb65bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000080) r7 = socket$kcm(0x1e, 0x4, 0x0) r8 = syz_clone(0x10080, &(0x7f0000000900)="f8d2ddbe5d8b35af25b4979016a11a1463a3df835d2632b82d4d07e142f10deceab5fb1e8ef97e6445e47bab19b3ec8a4f6b8c0cc2b6addc99148a7d1649f8d566295932d09263d4929209becfeb4bab611d31b17923fbe50ac500e4395352cdf70e739e4ab262abdc0b0cdfba9192e8498c9da0ecd1958fb4dee094db86c3df376cdfe8e5f79a1489752d16a601f2ca7ce3cfda812a318edc8449aa52a577be047ab79eb365ad55a0cddae3cb7c660547da23b50ec48a6464948683981b2373501d0e94bddbe844a3e8571f0954e42e4283e9389871a2", 0xd7, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)="f6bf033afd2714702c8f0cb65e1a4ecbf215476882481171a6b94b4d825a6d71d0d3d89046b490750d57f750f970be3b35e921bb3110b2308ca53765db30f5e6bb89af995a77bb2d164a08e1d62154646a16d5aef0d59b5d0fcf83f997e90119b246d18ec12885477a8bd0a060144d60ebc2bcb72adb3afadc735a15befa610e027832ce1f88286cee197b4601b2d1db5076") perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x40, 0xb, 0x7f, 0x8, 0x0, 0x3, 0x1, 0x7, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040), 0xd}, 0x9, 0x9, 0x9, 0x0, 0xcc, 0x1000, 0x6, 0x0, 0x800, 0x0, 0x80000001}, r8, 0xb, r5, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080), 0x4) close(0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a01000000000061114c0000000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 394.811836ms ago: executing program 2 (id=2543): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x80000005, 0x2a224, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000007020000f8b70400000000000085000000030000009500"/69], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7fff}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x400, 0x0, 0x10000000, 0x0, 0x7, 0x10000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r9, 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r9, 0x58, &(0x7f0000000340)}, 0x10) 32.533489ms ago: executing program 0 (id=2544): r0 = socket$kcm(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000002000000000085000000ae"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="1800000068006b0041000000000000000a00000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010) close(0x3) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x90) close(0x3) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000800000000000000018d8adca981100006fac250bf9b0b059af5c6a55e40eade9e5b525", @ANYRES32], &(0x7f0000000680)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000140)=""/108, 0x6c}, {&(0x7f0000000ac0)=""/246, 0xf6}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000000540)=""/234, 0xea}, {&(0x7f0000000700)=""/171, 0xab}, {0x0}], 0x8}, 0x102) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x8) 0s ago: executing program 2 (id=2545): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000500) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x5) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x0, 0x10000}, 0x8000, 0x5, 0x43a1bd79, 0x8, 0x9, 0x6, 0x8, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0x7}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) socketpair(0x1d, 0x2, 0x7, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69ee517d34442bc24", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): 9] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1431'. [ 336.864083][ T9581] netlink: 183836 bytes leftover after parsing attributes in process `syz.3.1440'. [ 336.983838][ T9579] netlink: 'syz.2.1439': attribute type 10 has an invalid length. [ 337.027406][ T9579] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1439'. [ 337.082644][ T9579] hsr0: entered promiscuous mode [ 337.106463][ T9584] netlink: 'syz.2.1439': attribute type 11 has an invalid length. [ 337.110774][ T9579] bridge0: port 3(hsr0) entered blocking state [ 337.128337][ T9579] bridge0: port 3(hsr0) entered disabled state [ 337.139017][ T9579] hsr0: entered allmulticast mode [ 337.147681][ T9579] hsr_slave_0: entered allmulticast mode [ 337.180683][ T9579] hsr_slave_1: entered allmulticast mode [ 337.202057][ T9584] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.1439'. [ 337.380400][ T9590] netlink: 'syz.3.1443': attribute type 10 has an invalid length. [ 337.423439][ T9590] veth1_macvtap: left promiscuous mode [ 338.303627][ T9600] hsr0: entered allmulticast mode [ 338.324690][ T9600] hsr_slave_0: entered allmulticast mode [ 338.330830][ T9600] hsr_slave_1: entered allmulticast mode [ 338.375943][ T9606] tun0: tun_chr_ioctl cmd 2147767507 [ 338.760342][ T9611] netlink: 183836 bytes leftover after parsing attributes in process `syz.1.1451'. [ 338.879936][ T9621] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1455'. [ 339.183352][ T9631] FAULT_INJECTION: forcing a failure. [ 339.183352][ T9631] name failslab, interval 1, probability 0, space 0, times 0 [ 339.199906][ T9631] CPU: 0 PID: 9631 Comm: syz.0.1459 Not tainted syzkaller #0 [ 339.207362][ T9631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 339.217469][ T9631] Call Trace: [ 339.220797][ T9631] [ 339.223865][ T9631] dump_stack_lvl+0x18c/0x250 [ 339.228606][ T9631] ? show_regs_print_info+0x20/0x20 [ 339.233877][ T9631] ? load_image+0x420/0x420 [ 339.238442][ T9631] ? __might_sleep+0xe0/0xe0 [ 339.243089][ T9631] ? __lock_acquire+0x7d40/0x7d40 [ 339.248170][ T9631] should_fail_ex+0x39d/0x4d0 [ 339.252907][ T9631] should_failslab+0x9/0x20 [ 339.257464][ T9631] slab_pre_alloc_hook+0x59/0x310 [ 339.262640][ T9631] ? sock_kmalloc+0x96/0xf0 [ 339.267192][ T9631] ? sock_kmalloc+0x96/0xf0 [ 339.271745][ T9631] __kmem_cache_alloc_node+0x53/0x250 [ 339.277184][ T9631] ? sock_kmalloc+0x96/0xf0 [ 339.281731][ T9631] __kmalloc+0xa4/0x230 [ 339.285947][ T9631] sock_kmalloc+0x96/0xf0 [ 339.290317][ T9631] ____sys_sendmsg+0x1be/0x960 [ 339.295134][ T9631] ? __lock_acquire+0x7d40/0x7d40 [ 339.300209][ T9631] ? __asan_memset+0x22/0x40 [ 339.304865][ T9631] ? __sys_sendmsg_sock+0x30/0x30 [ 339.309941][ T9631] ? __import_iovec+0x5f2/0x850 [ 339.314857][ T9631] ? import_iovec+0x73/0xa0 [ 339.319416][ T9631] ___sys_sendmsg+0x2a6/0x360 [ 339.324147][ T9631] ? get_pid_task+0x20/0x1e0 [ 339.328795][ T9631] ? __sys_sendmsg+0x2a0/0x2a0 [ 339.333639][ T9631] ? __lock_acquire+0x7d40/0x7d40 [ 339.338740][ T9631] __se_sys_sendmsg+0x1c2/0x2b0 [ 339.343649][ T9631] ? __x64_sys_sendmsg+0x80/0x80 [ 339.348653][ T9631] ? lockdep_hardirqs_on+0x98/0x150 [ 339.353916][ T9631] do_syscall_64+0x55/0xb0 [ 339.358383][ T9631] ? clear_bhb_loop+0x40/0x90 [ 339.363104][ T9631] ? clear_bhb_loop+0x40/0x90 [ 339.367832][ T9631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.373789][ T9631] RIP: 0033:0x7f535ef9ce59 [ 339.378535][ T9631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.398457][ T9631] RSP: 002b:00007f535fde9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.406931][ T9631] RAX: ffffffffffffffda RBX: 00007f535f215fa0 RCX: 00007f535ef9ce59 [ 339.415479][ T9631] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 339.423502][ T9631] RBP: 00007f535fde9090 R08: 0000000000000000 R09: 0000000000000000 [ 339.431962][ T9631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.440077][ T9631] R13: 00007f535f216038 R14: 00007f535f215fa0 R15: 00007ffcc1a8c528 [ 339.448132][ T9631] [ 339.589710][ T9638] FAULT_INJECTION: forcing a failure. [ 339.589710][ T9638] name failslab, interval 1, probability 0, space 0, times 0 [ 339.607644][ T9638] CPU: 1 PID: 9638 Comm: syz.1.1462 Not tainted syzkaller #0 [ 339.615278][ T9638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 339.625756][ T9638] Call Trace: [ 339.629217][ T9638] [ 339.632191][ T9638] dump_stack_lvl+0x18c/0x250 [ 339.637231][ T9638] ? show_regs_print_info+0x20/0x20 [ 339.643107][ T9638] ? load_image+0x420/0x420 [ 339.647769][ T9638] ? __might_sleep+0xe0/0xe0 [ 339.652448][ T9638] ? __lock_acquire+0x7d40/0x7d40 [ 339.657619][ T9638] should_fail_ex+0x39d/0x4d0 [ 339.662651][ T9638] should_failslab+0x9/0x20 [ 339.667214][ T9638] slab_pre_alloc_hook+0x59/0x310 [ 339.672405][ T9638] ? __get_vm_area_node+0x125/0x370 [ 339.677671][ T9638] __kmem_cache_alloc_node+0x53/0x250 [ 339.683115][ T9638] ? __get_vm_area_node+0x125/0x370 [ 339.688378][ T9638] kmalloc_node_trace+0x26/0xe0 [ 339.693398][ T9638] __get_vm_area_node+0x125/0x370 [ 339.698593][ T9638] __vmalloc_node_range+0x36e/0x1330 [ 339.704196][ T9638] ? netlink_sendmsg+0x602/0xbf0 [ 339.709186][ T9638] ? netlink_insert+0x109f/0x13a0 [ 339.715263][ T9638] ? netlink_data_ready+0x10/0x10 [ 339.720625][ T9638] ? free_vm_area+0x50/0x50 [ 339.725239][ T9638] ? netlink_sendmsg+0x602/0xbf0 [ 339.730340][ T9638] vmalloc+0x79/0x90 [ 339.734385][ T9638] ? netlink_sendmsg+0x602/0xbf0 [ 339.739386][ T9638] netlink_sendmsg+0x602/0xbf0 [ 339.744207][ T9638] ? netlink_getsockopt+0x590/0x590 [ 339.749554][ T9638] ? aa_sock_msg_perm+0x94/0x150 [ 339.754554][ T9638] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 339.760064][ T9638] ? security_socket_sendmsg+0x80/0xa0 [ 339.765578][ T9638] ? netlink_getsockopt+0x590/0x590 [ 339.771274][ T9638] ____sys_sendmsg+0x5ba/0x960 [ 339.776110][ T9638] ? __asan_memset+0x22/0x40 [ 339.780782][ T9638] ? __sys_sendmsg_sock+0x30/0x30 [ 339.786237][ T9638] ? __import_iovec+0x3fa/0x850 [ 339.791158][ T9638] ? import_iovec+0x73/0xa0 [ 339.795818][ T9638] ___sys_sendmsg+0x2a6/0x360 [ 339.800726][ T9638] ? get_pid_task+0x20/0x1e0 [ 339.805440][ T9638] ? __sys_sendmsg+0x2a0/0x2a0 [ 339.810501][ T9638] ? __lock_acquire+0x7d40/0x7d40 [ 339.815984][ T9638] __se_sys_sendmsg+0x1c2/0x2b0 [ 339.821889][ T9638] ? __x64_sys_sendmsg+0x80/0x80 [ 339.826986][ T9638] ? lockdep_hardirqs_on+0x98/0x150 [ 339.832241][ T9638] do_syscall_64+0x55/0xb0 [ 339.836707][ T9638] ? clear_bhb_loop+0x40/0x90 [ 339.841443][ T9638] ? clear_bhb_loop+0x40/0x90 [ 339.846178][ T9638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.852177][ T9638] RIP: 0033:0x7f173899ce59 [ 339.857127][ T9638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.876791][ T9638] RSP: 002b:00007f1739780028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.885348][ T9638] RAX: ffffffffffffffda RBX: 00007f1738c15fa0 RCX: 00007f173899ce59 [ 339.893716][ T9638] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 339.901736][ T9638] RBP: 00007f1739780090 R08: 0000000000000000 R09: 0000000000000000 [ 339.909757][ T9638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.917776][ T9638] R13: 00007f1738c16038 R14: 00007f1738c15fa0 R15: 00007ffcc9c576f8 [ 339.925816][ T9638] [ 339.979450][ T9638] syz.1.1462: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 340.021021][ T9638] CPU: 0 PID: 9638 Comm: syz.1.1462 Not tainted syzkaller #0 [ 340.028500][ T9638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 340.038616][ T9638] Call Trace: [ 340.041954][ T9638] [ 340.044938][ T9638] dump_stack_lvl+0x18c/0x250 [ 340.049753][ T9638] ? show_regs_print_info+0x20/0x20 [ 340.055031][ T9638] ? load_image+0x420/0x420 [ 340.059612][ T9638] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 340.066100][ T9638] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 340.072946][ T9638] warn_alloc+0x246/0x340 [ 340.077356][ T9638] ? __get_vm_area_node+0x125/0x370 [ 340.082663][ T9638] ? zone_watermark_ok_safe+0x230/0x230 [ 340.088297][ T9638] ? rcu_is_watching+0x15/0xb0 [ 340.093133][ T9638] ? __get_vm_area_node+0x356/0x370 [ 340.098414][ T9638] __vmalloc_node_range+0x393/0x1330 [ 340.103782][ T9638] ? netlink_insert+0x109f/0x13a0 [ 340.109059][ T9638] ? netlink_data_ready+0x10/0x10 [ 340.114156][ T9638] ? free_vm_area+0x50/0x50 [ 340.118753][ T9638] ? netlink_sendmsg+0x602/0xbf0 [ 340.123773][ T9638] vmalloc+0x79/0x90 [ 340.127725][ T9638] ? netlink_sendmsg+0x602/0xbf0 [ 340.132745][ T9638] netlink_sendmsg+0x602/0xbf0 [ 340.137572][ T9638] ? netlink_getsockopt+0x590/0x590 [ 340.142951][ T9638] ? aa_sock_msg_perm+0x94/0x150 [ 340.147991][ T9638] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 340.153343][ T9638] ? security_socket_sendmsg+0x80/0xa0 [ 340.158853][ T9638] ? netlink_getsockopt+0x590/0x590 [ 340.164115][ T9638] ____sys_sendmsg+0x5ba/0x960 [ 340.168952][ T9638] ? __asan_memset+0x22/0x40 [ 340.173942][ T9638] ? __sys_sendmsg_sock+0x30/0x30 [ 340.179016][ T9638] ? __import_iovec+0x3fa/0x850 [ 340.184364][ T9638] ? import_iovec+0x73/0xa0 [ 340.189342][ T9638] ___sys_sendmsg+0x2a6/0x360 [ 340.194258][ T9638] ? get_pid_task+0x20/0x1e0 [ 340.198939][ T9638] ? __sys_sendmsg+0x2a0/0x2a0 [ 340.203903][ T9638] ? __lock_acquire+0x7d40/0x7d40 [ 340.209314][ T9638] __se_sys_sendmsg+0x1c2/0x2b0 [ 340.215091][ T9638] ? __x64_sys_sendmsg+0x80/0x80 [ 340.220235][ T9638] ? lockdep_hardirqs_on+0x98/0x150 [ 340.225604][ T9638] do_syscall_64+0x55/0xb0 [ 340.230071][ T9638] ? clear_bhb_loop+0x40/0x90 [ 340.234789][ T9638] ? clear_bhb_loop+0x40/0x90 [ 340.239533][ T9638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.245492][ T9638] RIP: 0033:0x7f173899ce59 [ 340.249968][ T9638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.270252][ T9638] RSP: 002b:00007f1739780028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.278734][ T9638] RAX: ffffffffffffffda RBX: 00007f1738c15fa0 RCX: 00007f173899ce59 [ 340.286766][ T9638] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 340.296040][ T9638] RBP: 00007f1739780090 R08: 0000000000000000 R09: 0000000000000000 [ 340.305231][ T9638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.313367][ T9638] R13: 00007f1738c16038 R14: 00007f1738c15fa0 R15: 00007ffcc9c576f8 [ 340.321481][ T9638] [ 340.350535][ T9643] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1465'. [ 340.368538][ T9638] Mem-Info: [ 340.371929][ T9638] active_anon:5525 inactive_anon:0 isolated_anon:0 [ 340.371929][ T9638] active_file:17308 inactive_file:40047 isolated_file:0 [ 340.371929][ T9638] unevictable:768 dirty:132 writeback:0 [ 340.371929][ T9638] slab_reclaimable:10325 slab_unreclaimable:93700 [ 340.371929][ T9638] mapped:24648 shmem:1361 pagetables:579 [ 340.371929][ T9638] sec_pagetables:0 bounce:0 [ 340.371929][ T9638] kernel_misc_reclaimable:0 [ 340.371929][ T9638] free:1320622 free_pcp:10277 free_cma:0 [ 340.425538][ T9638] Node 0 active_anon:22100kB inactive_anon:0kB active_file:69232kB inactive_file:159984kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98592kB dirty:524kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10512kB pagetables:2316kB sec_pagetables:0kB all_unreclaimable? no [ 340.462458][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 340.550748][ T9638] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 340.790765][ T9638] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 340.857883][ T9638] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 340.871124][ T9638] Node 0 DMA32 free:1365868kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21860kB inactive_anon:0kB active_file:69232kB inactive_file:159168kB unevictable:1536kB writepending:524kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:27332kB local_pcp:16528kB free_cma:0kB [ 340.922957][ T9638] lowmem_reserve[]: 0 0 0 0 0 [ 340.942312][ T9638] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 341.003387][ T9638] lowmem_reserve[]: 0 0 0 0 0 [ 341.016338][ T9638] Node 1 Normal free:3901516kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15648kB local_pcp:4448kB free_cma:0kB [ 341.049884][ T9638] lowmem_reserve[]: 0 0 0 0 0 [ 341.056681][ T9638] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 341.077004][ T9638] Node 0 DMA32: 2377*4kB (UME) 1879*8kB (UME) 1867*16kB (UME) 923*32kB (UME) 226*64kB (UME) 92*128kB (UME) 37*256kB (UME) 12*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 301*4096kB (UM) = 1365868kB [ 341.078130][ T9663] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1471'. [ 341.107873][ T9638] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 341.109212][ T9663] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1471'. [ 341.121699][ T9638] Node 1 [ 341.137471][ T9665] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1471'. [ 341.150377][ T9638] Normal: 229*4kB (UME) 59*8kB (UME) 48*16kB (UME) 115*32kB (UME) 36*64kB (UE) 7*128kB (UME) 1*256kB (E) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3901516kB [ 341.158381][ T9666] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1471'. [ 341.169945][ T9638] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 341.187685][ T9638] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 341.197995][ T9638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 341.209126][ T9638] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 341.222647][ T9638] 58716 total pagecache pages [ 341.227784][ T9638] 0 pages in swap cache [ 341.232111][ T9638] Free swap = 124996kB [ 341.239084][ T9638] Total swap = 124996kB [ 341.285636][ T9638] 2097051 pages RAM [ 341.306259][ T9638] 0 pages HighMem/MovableOnly [ 341.331352][ T9638] 416933 pages reserved [ 341.344435][ T9638] 0 pages cma reserved [ 341.455037][ T9670] FAULT_INJECTION: forcing a failure. [ 341.455037][ T9670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.469206][ T9670] CPU: 0 PID: 9670 Comm: syz.0.1473 Not tainted syzkaller #0 [ 341.476639][ T9670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 341.486767][ T9670] Call Trace: [ 341.490095][ T9670] [ 341.493063][ T9670] dump_stack_lvl+0x18c/0x250 [ 341.497813][ T9670] ? lock_chain_count+0x20/0x20 [ 341.502717][ T9670] ? show_regs_print_info+0x20/0x20 [ 341.507980][ T9670] ? load_image+0x420/0x420 [ 341.512540][ T9670] ? lockdep_hardirqs_on+0x98/0x150 [ 341.517809][ T9670] should_fail_ex+0x39d/0x4d0 [ 341.522557][ T9670] _copy_from_user+0x2f/0xe0 [ 341.527209][ T9670] __sys_bpf+0x23e/0x890 [ 341.531523][ T9670] ? bpf_link_show_fdinfo+0x390/0x390 [ 341.536968][ T9670] ? lock_chain_count+0x20/0x20 [ 341.541882][ T9670] __x64_sys_bpf+0x7c/0x90 [ 341.546353][ T9670] do_syscall_64+0x55/0xb0 [ 341.550829][ T9670] ? clear_bhb_loop+0x40/0x90 [ 341.555553][ T9670] ? clear_bhb_loop+0x40/0x90 [ 341.560290][ T9670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.566264][ T9670] RIP: 0033:0x7f535ef9ce59 [ 341.570730][ T9670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.590392][ T9670] RSP: 002b:00007f535fde9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 341.598864][ T9670] RAX: ffffffffffffffda RBX: 00007f535f215fa0 RCX: 00007f535ef9ce59 [ 341.606893][ T9670] RDX: 0000000000000038 RSI: 0000200000000900 RDI: 000000000000001a [ 341.614915][ T9670] RBP: 00007f535fde9090 R08: 0000000000000000 R09: 0000000000000000 [ 341.622937][ T9670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.630970][ T9670] R13: 00007f535f216038 R14: 00007f535f215fa0 R15: 00007ffcc1a8c528 [ 341.639030][ T9670] [ 341.761195][ T9677] FAULT_INJECTION: forcing a failure. [ 341.761195][ T9677] name failslab, interval 1, probability 0, space 0, times 0 [ 341.774423][ T9677] CPU: 1 PID: 9677 Comm: syz.0.1475 Not tainted syzkaller #0 [ 341.781876][ T9677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 341.792078][ T9677] Call Trace: [ 341.795409][ T9677] [ 341.798384][ T9677] dump_stack_lvl+0x18c/0x250 [ 341.803133][ T9677] ? show_regs_print_info+0x20/0x20 [ 341.808395][ T9677] ? load_image+0x420/0x420 [ 341.812957][ T9677] should_fail_ex+0x39d/0x4d0 [ 341.817682][ T9677] should_failslab+0x9/0x20 [ 341.822231][ T9677] slab_pre_alloc_hook+0x59/0x310 [ 341.827303][ T9677] kmem_cache_alloc+0x5a/0x2d0 [ 341.832107][ T9677] ? sctp_get_port_local+0x6d4/0x1620 [ 341.837520][ T9677] sctp_get_port_local+0x6d4/0x1620 [ 341.842783][ T9677] ? sctp_do_bind+0x990/0x990 [ 341.847521][ T9677] ? sctp_bind_addr_match+0x30/0x2a0 [ 341.852841][ T9677] sctp_do_bind+0x555/0x990 [ 341.857382][ T9677] sctp_connect_new_asoc+0x26a/0x6a0 [ 341.862700][ T9677] ? __sctp_connect+0xd80/0xd80 [ 341.867589][ T9677] ? mark_lock+0x94/0x320 [ 341.871949][ T9677] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 341.877793][ T9677] __sctp_connect+0x5b7/0xd80 [ 341.882519][ T9677] ? sctp_send_asconf+0x170/0x170 [ 341.887576][ T9677] ? __local_bh_enable_ip+0x13a/0x1c0 [ 341.892971][ T9677] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 341.898544][ T9677] ? security_sctp_bind_connect+0x89/0xb0 [ 341.904325][ T9677] sctp_setsockopt_connectx+0x104/0x1a0 [ 341.909910][ T9677] sctp_setsockopt+0x6d8/0x11e0 [ 341.914795][ T9677] ? sock_common_recvmsg+0x190/0x190 [ 341.920113][ T9677] do_sock_setsockopt+0x175/0x1a0 [ 341.925165][ T9677] ? __fdget+0x180/0x210 [ 341.929441][ T9677] __x64_sys_setsockopt+0x182/0x200 [ 341.934679][ T9677] do_syscall_64+0x55/0xb0 [ 341.939123][ T9677] ? clear_bhb_loop+0x40/0x90 [ 341.943822][ T9677] ? clear_bhb_loop+0x40/0x90 [ 341.948527][ T9677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.954452][ T9677] RIP: 0033:0x7f535ef9ce59 [ 341.958903][ T9677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.978536][ T9677] RSP: 002b:00007f535fde9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 341.987068][ T9677] RAX: ffffffffffffffda RBX: 00007f535f215fa0 RCX: 00007f535ef9ce59 [ 341.995064][ T9677] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 342.003099][ T9677] RBP: 00007f535fde9090 R08: 0000000000000010 R09: 0000000000000000 [ 342.011097][ T9677] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.019090][ T9677] R13: 00007f535f216038 R14: 00007f535f215fa0 R15: 00007ffcc1a8c528 [ 342.027104][ T9677] [ 342.625773][ T9688] netlink: 'syz.0.1480': attribute type 10 has an invalid length. [ 342.644707][ T9688] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1480'. [ 342.657809][ T9688] hsr0: entered promiscuous mode [ 342.682538][ T9688] bridge0: port 2(hsr0) entered blocking state [ 342.698326][ T9689] netlink: 'syz.0.1480': attribute type 11 has an invalid length. [ 342.722272][ T9688] bridge0: port 2(hsr0) entered disabled state [ 342.747952][ T9691] netlink: 'syz.3.1481': attribute type 3 has an invalid length. [ 342.756469][ T9689] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.1480'. [ 342.772164][ T9691] netlink: 'syz.3.1481': attribute type 1 has an invalid length. [ 342.782148][ T9691] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1481'. [ 342.785543][ T9688] hsr0: entered allmulticast mode [ 342.808499][ T9688] hsr_slave_0: entered allmulticast mode [ 342.832481][ T9688] hsr_slave_1: entered allmulticast mode [ 343.812218][ T9714] netlink: 'syz.0.1490': attribute type 10 has an invalid length. [ 343.820761][ T9714] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 344.031668][ T9722] netlink: 'syz.1.1494': attribute type 10 has an invalid length. [ 344.080562][ T9722] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 344.155290][ T9714] netlink: 'syz.0.1490': attribute type 39 has an invalid length. [ 344.642666][ T9742] netlink: 'syz.0.1499': attribute type 2 has an invalid length. [ 344.665200][ T9742] netlink: 'syz.0.1499': attribute type 1 has an invalid length. [ 344.673291][ T9742] __nla_validate_parse: 1 callbacks suppressed [ 344.673305][ T9742] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1499'. [ 345.464218][ T9739] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1499'. [ 345.473355][ T9739] FAULT_INJECTION: forcing a failure. [ 345.473355][ T9739] name failslab, interval 1, probability 0, space 0, times 0 [ 345.524382][ T9739] CPU: 1 PID: 9739 Comm: syz.0.1499 Not tainted syzkaller #0 [ 345.531855][ T9739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 345.541961][ T9739] Call Trace: [ 345.545295][ T9739] [ 345.548272][ T9739] dump_stack_lvl+0x18c/0x250 [ 345.553019][ T9739] ? verify_lock_unused+0x140/0x140 [ 345.558289][ T9739] ? show_regs_print_info+0x20/0x20 [ 345.563547][ T9739] ? load_image+0x420/0x420 [ 345.568112][ T9739] ? __nla_validate_parse+0x262c/0x2ea0 [ 345.573718][ T9739] should_fail_ex+0x39d/0x4d0 [ 345.578477][ T9739] should_failslab+0x9/0x20 [ 345.583131][ T9739] slab_pre_alloc_hook+0x59/0x310 [ 345.588220][ T9739] ? ___neigh_create+0x6d2/0x2440 [ 345.593323][ T9739] ? ___neigh_create+0x6d2/0x2440 [ 345.598417][ T9739] __kmem_cache_alloc_node+0x53/0x250 [ 345.603854][ T9739] ? ___neigh_create+0x6d2/0x2440 [ 345.608952][ T9739] __kmalloc+0xa4/0x230 [ 345.613173][ T9739] ___neigh_create+0x6d2/0x2440 [ 345.618099][ T9739] ? neigh_lookup+0xb1/0x400 [ 345.622850][ T9739] ? neigh_ifdown+0x30/0x30 [ 345.627431][ T9739] ? lockdep_rtnl_is_held+0x26/0x30 [ 345.632722][ T9739] neigh_add+0xb18/0xdf0 [ 345.637039][ T9739] ? do_raw_spin_unlock+0x121/0x230 [ 345.642315][ T9739] ? neigh_proc_dointvec_unres_qlen+0x2a0/0x2a0 [ 345.648640][ T9739] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 345.653821][ T9739] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 345.658998][ T9739] ? neigh_proc_dointvec_unres_qlen+0x2a0/0x2a0 [ 345.665300][ T9739] rtnetlink_rcv_msg+0x869/0xfa0 [ 345.670411][ T9739] ? rtnetlink_bind+0x80/0x80 [ 345.675150][ T9739] ? perf_trace_preemptirq_template+0x269/0x330 [ 345.681476][ T9739] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 345.687507][ T9739] ? lock_chain_count+0x20/0x20 [ 345.692395][ T9739] ? __local_bh_enable_ip+0x13a/0x1c0 [ 345.697806][ T9739] ? lockdep_hardirqs_on+0x98/0x150 [ 345.703042][ T9739] ? __local_bh_enable_ip+0x13a/0x1c0 [ 345.708462][ T9739] ? _local_bh_enable+0xa0/0xa0 [ 345.713374][ T9739] ? __dev_queue_xmit+0x265/0x3660 [ 345.718569][ T9739] ? __dev_queue_xmit+0x265/0x3660 [ 345.723733][ T9739] ? __dev_queue_xmit+0x1b2c/0x3660 [ 345.728978][ T9739] ? __dev_queue_xmit+0x265/0x3660 [ 345.734142][ T9739] ? ref_tracker_free+0x690/0x840 [ 345.739220][ T9739] netlink_rcv_skb+0x241/0x4d0 [ 345.744018][ T9739] ? rtnetlink_bind+0x80/0x80 [ 345.748730][ T9739] ? netlink_ack+0x1180/0x1180 [ 345.753530][ T9739] ? __lock_acquire+0x7d40/0x7d40 [ 345.758611][ T9739] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.763841][ T9739] netlink_unicast+0x751/0x8d0 [ 345.768647][ T9739] netlink_sendmsg+0x8d0/0xbf0 [ 345.773448][ T9739] ? netlink_getsockopt+0x590/0x590 [ 345.778672][ T9739] ? aa_sock_msg_perm+0x94/0x150 [ 345.783646][ T9739] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 345.788967][ T9739] ? security_socket_sendmsg+0x80/0xa0 [ 345.794456][ T9739] ? netlink_getsockopt+0x590/0x590 [ 345.799687][ T9739] ____sys_sendmsg+0x5ba/0x960 [ 345.804487][ T9739] ? __asan_memset+0x22/0x40 [ 345.809110][ T9739] ? __sys_sendmsg_sock+0x30/0x30 [ 345.814192][ T9739] ? __import_iovec+0x5f2/0x850 [ 345.819075][ T9739] ? import_iovec+0x73/0xa0 [ 345.823610][ T9739] ___sys_sendmsg+0x2a6/0x360 [ 345.828327][ T9739] ? __sys_sendmsg+0x2a0/0x2a0 [ 345.833148][ T9739] ? trace_call_bpf+0xc3/0x6c0 [ 345.837968][ T9739] __se_sys_sendmsg+0x1c2/0x2b0 [ 345.842854][ T9739] ? __x64_sys_sendmsg+0x80/0x80 [ 345.847837][ T9739] ? lockdep_hardirqs_on+0x98/0x150 [ 345.853076][ T9739] do_syscall_64+0x55/0xb0 [ 345.857526][ T9739] ? clear_bhb_loop+0x40/0x90 [ 345.862244][ T9739] ? clear_bhb_loop+0x40/0x90 [ 345.866963][ T9739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.872903][ T9739] RIP: 0033:0x7f535ef9ce59 [ 345.877348][ T9739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.897008][ T9739] RSP: 002b:00007f535fde9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.905597][ T9739] RAX: ffffffffffffffda RBX: 00007f535f215fa0 RCX: 00007f535ef9ce59 [ 345.913594][ T9739] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 345.921593][ T9739] RBP: 00007f535fde9090 R08: 0000000000000000 R09: 0000000000000000 [ 345.929596][ T9739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.937722][ T9739] R13: 00007f535f216038 R14: 00007f535f215fa0 R15: 00007ffcc1a8c528 [ 345.945755][ T9739] [ 346.283885][ T9756] netlink: 'syz.2.1507': attribute type 2 has an invalid length. [ 346.305986][ T9756] netlink: 'syz.2.1507': attribute type 1 has an invalid length. [ 346.313812][ T9756] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1507'. [ 346.784270][ T9772] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1512'. [ 346.893927][ T9772] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1512'. [ 348.056428][ T9791] can: request_module (can-proto-5) failed. [ 348.200312][ T9796] can: request_module (can-proto-5) failed. [ 349.576724][ T9828] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.1531'. [ 350.251890][ T9841] validate_nla: 2 callbacks suppressed [ 350.251906][ T9841] netlink: 'syz.1.1536': attribute type 10 has an invalid length. [ 350.286773][ T9841] team0: Device ipvlan1 failed to register rx_handler [ 350.301240][ T9826] netlink: 'syz.3.1529': attribute type 27 has an invalid length. [ 350.356867][ T9826] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1529'. [ 351.461515][ T9873] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 351.493030][ T9873] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 351.723188][ T9878] FAULT_INJECTION: forcing a failure. [ 351.723188][ T9878] name failslab, interval 1, probability 0, space 0, times 0 [ 351.768495][ T9878] CPU: 0 PID: 9878 Comm: syz.2.1550 Not tainted syzkaller #0 [ 351.775960][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 351.786058][ T9878] Call Trace: [ 351.789390][ T9878] [ 351.792367][ T9878] dump_stack_lvl+0x18c/0x250 [ 351.797107][ T9878] ? show_regs_print_info+0x20/0x20 [ 351.802367][ T9878] ? lockdep_hardirqs_on+0x98/0x150 [ 351.807634][ T9878] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 351.813872][ T9878] should_fail_ex+0x39d/0x4d0 [ 351.818624][ T9878] should_failslab+0x9/0x20 [ 351.823194][ T9878] slab_pre_alloc_hook+0x59/0x310 [ 351.828276][ T9878] ? lockdep_hardirqs_on+0x98/0x150 [ 351.833526][ T9878] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 351.839126][ T9878] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 351.844734][ T9878] __kmem_cache_alloc_node+0x53/0x250 [ 351.850175][ T9878] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 351.855777][ T9878] __kmalloc+0xa4/0x230 [ 351.859996][ T9878] bpf_prog_test_run_skb+0x245/0x18c0 [ 351.865420][ T9878] ? __fget_files+0x28/0x4b0 [ 351.870057][ T9878] ? __fget_files+0x28/0x4b0 [ 351.874706][ T9878] ? __fget_files+0x43d/0x4b0 [ 351.879469][ T9878] ? cpu_online+0x60/0x60 [ 351.883865][ T9878] bpf_prog_test_run+0x321/0x390 [ 351.888920][ T9878] __sys_bpf+0x49d/0x890 [ 351.893230][ T9878] ? bpf_link_show_fdinfo+0x390/0x390 [ 351.898693][ T9878] ? lock_chain_count+0x20/0x20 [ 351.903607][ T9878] __x64_sys_bpf+0x7c/0x90 [ 351.908079][ T9878] do_syscall_64+0x55/0xb0 [ 351.912546][ T9878] ? clear_bhb_loop+0x40/0x90 [ 351.917279][ T9878] ? clear_bhb_loop+0x40/0x90 [ 351.922011][ T9878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.927962][ T9878] RIP: 0033:0x7fcc7ed9ce59 [ 351.932415][ T9878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.952076][ T9878] RSP: 002b:00007fcc7fcf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.960554][ T9878] RAX: ffffffffffffffda RBX: 00007fcc7f015fa0 RCX: 00007fcc7ed9ce59 [ 351.968582][ T9878] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 351.976609][ T9878] RBP: 00007fcc7fcf9090 R08: 0000000000000000 R09: 0000000000000000 [ 351.984659][ T9878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.992677][ T9878] R13: 00007fcc7f016038 R14: 00007fcc7f015fa0 R15: 00007fffc54a0eb8 [ 352.000712][ T9878] [ 352.355476][ T9892] netlink: 183836 bytes leftover after parsing attributes in process `syz.3.1556'. [ 353.302333][ T9918] netlink: 183836 bytes leftover after parsing attributes in process `syz.1.1567'. [ 355.412554][ T9974] ªªªªªª: renamed from vlan0 (while UP) [ 356.763427][T10004] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 356.815198][T10004] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 357.489980][T10012] ªªªªªª: renamed from vlan0 (while UP) [ 358.553051][T10038] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 358.584342][T10038] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 358.647101][T10030] netlink: 'syz.2.1611': attribute type 39 has an invalid length. [ 359.377895][T10048] ªªªªªª: renamed from vlan0 (while UP) [ 359.548971][T10056] netlink: 'syz.3.1622': attribute type 29 has an invalid length. [ 359.601334][T10056] netlink: 'syz.3.1622': attribute type 29 has an invalid length. [ 359.629714][T10056] netlink: 'syz.3.1622': attribute type 29 has an invalid length. [ 359.639887][T10056] netlink: 'syz.3.1622': attribute type 29 has an invalid length. [ 359.650596][T10056] netlink: 'syz.3.1622': attribute type 29 has an invalid length. [ 360.146908][T10071] netlink: 'syz.1.1629': attribute type 29 has an invalid length. [ 360.170383][T10071] netlink: 'syz.1.1629': attribute type 29 has an invalid length. [ 360.196047][T10073] netlink: 'syz.1.1629': attribute type 29 has an invalid length. [ 360.216459][T10071] netlink: 'syz.1.1629': attribute type 29 has an invalid length. [ 361.782180][T10093] ªªªªªª: renamed from vlan0 (while UP) [ 364.325328][T10136] validate_nla: 3 callbacks suppressed [ 364.325348][T10136] netlink: 'syz.3.1653': attribute type 21 has an invalid length. [ 365.867278][T10192] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1684'. [ 366.038461][T10196] netlink: 12535 bytes leftover after parsing attributes in process `syz.1.1677'. [ 366.047907][T10196] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.1677'. [ 366.360345][T10205] netlink: 'syz.0.1681': attribute type 10 has an invalid length. [ 366.381867][T10205] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1681'. [ 366.397521][T10205] vcan0: entered promiscuous mode [ 366.420641][T10205] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 366.697652][T10214] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1686'. [ 367.452714][T10241] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1697'. [ 370.772053][T10248] netlink: 'syz.1.1700': attribute type 10 has an invalid length. [ 370.982295][T10251] netlink: 'syz.1.1700': attribute type 21 has an invalid length. [ 371.232054][T10259] netlink: 'syz.0.1704': attribute type 1 has an invalid length. [ 371.254813][T10259] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1704'. [ 371.939046][T10265] netlink: 203068 bytes leftover after parsing attributes in process `syz.3.1706'. [ 372.068772][T10268] netlink: 'syz.0.1707': attribute type 7 has an invalid length. [ 372.141963][T10275] bridge_slave_1: left allmulticast mode [ 372.161844][T10275] bridge_slave_1: left promiscuous mode [ 372.181891][T10275] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.341708][T10273] raw_sendmsg: syz.0.1707 forgot to set AF_INET. Fix it! [ 372.604561][ T1145] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 372.705473][T10275] bridge_slave_0: left allmulticast mode [ 372.734495][T10275] bridge_slave_0: left promiscuous mode [ 372.744992][T10275] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.132240][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1709'. [ 373.474803][T10299] netlink: 203068 bytes leftover after parsing attributes in process `syz.0.1719'. [ 373.843704][T10305] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1721'. [ 374.129201][T10317] hsr0: left allmulticast mode [ 374.142054][T10317] hsr_slave_0: left allmulticast mode [ 374.150122][T10317] hsr_slave_1: left allmulticast mode [ 374.165587][T10317] bridge0: port 3(hsr0) entered disabled state [ 374.239786][T10317] bridge_slave_1: left allmulticast mode [ 374.255457][T10317] bridge_slave_1: left promiscuous mode [ 374.279792][T10317] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.716442][T10317] bridge_slave_0: left promiscuous mode [ 374.728174][T10317] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.161167][T10335] netlink: 203068 bytes leftover after parsing attributes in process `syz.1.1732'. [ 375.182978][T10319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1727'. [ 375.456685][T10341] netlink: 'syz.2.1734': attribute type 10 has an invalid length. [ 375.547490][T10345] netlink: 'syz.2.1734': attribute type 3 has an invalid length. [ 375.581082][T10345] netlink: 166948 bytes leftover after parsing attributes in process `syz.2.1734'. [ 376.524053][T10364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1744'. [ 377.135013][T10381] netlink: 'syz.0.1750': attribute type 2 has an invalid length. [ 377.150110][T10381] netlink: 'syz.0.1750': attribute type 1 has an invalid length. [ 377.163396][T10381] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1750'. [ 378.471787][T10395] hsr0: left allmulticast mode [ 378.499343][T10395] hsr_slave_0: left allmulticast mode [ 378.521974][T10395] hsr_slave_1: left allmulticast mode [ 378.591517][T10395] bridge0: port 2(hsr0) entered disabled state [ 379.916398][T10395] batadv0: left allmulticast mode [ 379.922028][T10395] bridge0: port 3(batadv0) entered disabled state [ 379.939805][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.946493][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.009261][T10395] bridge_slave_0: left allmulticast mode [ 380.051062][T10395] bridge_slave_0: left promiscuous mode [ 380.091380][T10395] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.337804][T10400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1757'. [ 381.509918][T10426] netlink: 'syz.1.1767': attribute type 7 has an invalid length. [ 381.586139][T10432] netlink: 203068 bytes leftover after parsing attributes in process `syz.2.1770'. [ 381.716120][T10428] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1768'. [ 381.848306][T10439] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1771'. [ 381.884566][T10439] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1771'. [ 381.944713][T10437] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1771'. [ 381.984231][T10439] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1771'. [ 382.014075][T10439] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1771'. [ 382.024617][T10438] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1771'. [ 382.064412][T10439] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1771'. [ 382.927724][T10458] can: request_module (can-proto-5) failed. [ 383.182157][T10462] netlink: 203068 bytes leftover after parsing attributes in process `syz.0.1780'. [ 383.459924][T10467] netlink: 'syz.3.1782': attribute type 7 has an invalid length. [ 384.676981][T10490] netlink: 'syz.1.1790': attribute type 10 has an invalid length. [ 384.785955][T10490] geneve0: entered promiscuous mode [ 385.015478][T10490] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 387.153970][T10534] netlink: 'syz.3.1807': attribute type 7 has an invalid length. [ 387.314025][T10536] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 387.386949][T10536] netlink: 'syz.2.1809': attribute type 3 has an invalid length. [ 387.395913][T10536] __nla_validate_parse: 11 callbacks suppressed [ 387.395929][T10536] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1809'. [ 387.419951][T10543] netlink: 'syz.2.1809': attribute type 12 has an invalid length. [ 387.437253][T10543] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1809'. [ 388.395047][T10558] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1817'. [ 388.689000][T10563] netlink: 'syz.3.1819': attribute type 7 has an invalid length. [ 388.889946][T10569] netlink: 'syz.2.1821': attribute type 10 has an invalid length. [ 390.134458][ T59] wlan1: Trigger new scan to find an IBSS to join [ 390.552148][T10599] netlink: 203068 bytes leftover after parsing attributes in process `syz.0.1830'. [ 390.879841][T10603] netlink: 'syz.0.1832': attribute type 7 has an invalid length. [ 391.123871][T10608] netlink: 'syz.3.1834': attribute type 2 has an invalid length. [ 391.161599][T10608] netlink: 'syz.3.1834': attribute type 1 has an invalid length. [ 391.206952][T10608] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1834'. [ 392.227703][T10623] netlink: 203068 bytes leftover after parsing attributes in process `syz.1.1840'. [ 392.615736][T10631] netlink: 'syz.2.1844': attribute type 7 has an invalid length. [ 392.876788][T10645] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 392.903220][T10645] netlink: 'syz.3.1849': attribute type 3 has an invalid length. [ 392.916157][T10645] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1849'. [ 392.983293][T10645] netlink: 'syz.3.1849': attribute type 12 has an invalid length. [ 393.003084][T10645] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1849'. [ 393.422549][T10653] netlink: 203068 bytes leftover after parsing attributes in process `syz.3.1852'. [ 393.903542][T10665] netlink: 'syz.0.1858': attribute type 7 has an invalid length. [ 394.459046][T10677] netlink: 203068 bytes leftover after parsing attributes in process `syz.3.1864'. [ 395.184486][ T1145] wlan1: Trigger new scan to find an IBSS to join [ 395.492093][T10707] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1875'. [ 395.553452][T10707] netlink: zone id is out of range [ 395.584767][T10707] netlink: zone id is out of range [ 395.616480][T10707] netlink: zone id is out of range [ 395.642459][T10707] netlink: del zone limit has 8 unknown bytes [ 395.964633][T10710] netlink: 203068 bytes leftover after parsing attributes in process `syz.0.1877'. [ 396.207354][ T1145] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 396.270364][T10715] delete_channel: no stack [ 397.067430][T10743] netlink: 203068 bytes leftover after parsing attributes in process `syz.2.1891'. [ 398.936274][T10769] netlink: 203068 bytes leftover after parsing attributes in process `syz.1.1902'. [ 399.948228][T10804] netlink: 203068 bytes leftover after parsing attributes in process `syz.2.1914'. [ 400.427950][T10810] FAULT_INJECTION: forcing a failure. [ 400.427950][T10810] name failslab, interval 1, probability 0, space 0, times 0 [ 400.467763][T10810] CPU: 0 PID: 10810 Comm: syz.3.1917 Not tainted syzkaller #0 [ 400.475412][T10810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 400.486091][T10810] Call Trace: [ 400.489429][T10810] [ 400.492405][T10810] dump_stack_lvl+0x18c/0x250 [ 400.497155][T10810] ? show_regs_print_info+0x20/0x20 [ 400.500300][T10813] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1920'. [ 400.502487][T10810] ? load_image+0x420/0x420 [ 400.516313][T10810] ? __might_sleep+0xe0/0xe0 [ 400.520980][T10810] ? __lock_acquire+0x7d40/0x7d40 [ 400.526065][T10810] ? trace_contention_end+0x39/0xe0 [ 400.531330][T10810] should_fail_ex+0x39d/0x4d0 [ 400.536180][T10810] should_failslab+0x9/0x20 [ 400.540759][T10810] slab_pre_alloc_hook+0x59/0x310 [ 400.545863][T10810] ? mutex_lock_nested+0x20/0x20 [ 400.550865][T10810] ? rxrpc_lookup_local+0x579/0x1610 [ 400.556303][T10810] __kmem_cache_alloc_node+0x53/0x250 [ 400.561748][T10810] ? rxrpc_lookup_local+0x579/0x1610 [ 400.567092][T10810] kmalloc_trace+0x2a/0xe0 [ 400.571559][T10810] rxrpc_lookup_local+0x579/0x1610 [ 400.576781][T10810] ? rxrpc_local_dont_fragment+0x70/0x70 [ 400.582466][T10810] ? __local_bh_enable_ip+0x13a/0x1c0 [ 400.587971][T10810] ? lockdep_hardirqs_on+0x98/0x150 [ 400.593222][T10810] ? __local_bh_enable_ip+0x13a/0x1c0 [ 400.598629][T10810] ? _local_bh_enable+0xa0/0xa0 [ 400.603534][T10810] rxrpc_sendmsg+0x30a/0x5b0 [ 400.608172][T10810] ? rxrpc_getsockopt+0x150/0x150 [ 400.613258][T10810] ____sys_sendmsg+0x5ba/0x960 [ 400.618078][T10810] ? __lock_acquire+0x7d40/0x7d40 [ 400.623158][T10810] ? __sys_sendmsg_sock+0x30/0x30 [ 400.628307][T10810] ? __import_iovec+0x5f2/0x850 [ 400.633204][T10810] ? import_iovec+0x73/0xa0 [ 400.637866][T10810] ___sys_sendmsg+0x2a6/0x360 [ 400.642704][T10810] ? get_pid_task+0x20/0x1e0 [ 400.648425][T10810] ? __sys_sendmsg+0x2a0/0x2a0 [ 400.653545][T10810] ? __lock_acquire+0x7d40/0x7d40 [ 400.658853][T10810] __se_sys_sendmsg+0x1c2/0x2b0 [ 400.663760][T10810] ? __x64_sys_sendmsg+0x80/0x80 [ 400.669645][T10810] ? lockdep_hardirqs_on+0x98/0x150 [ 400.675013][T10810] do_syscall_64+0x55/0xb0 [ 400.679582][T10810] ? clear_bhb_loop+0x40/0x90 [ 400.684322][T10810] ? clear_bhb_loop+0x40/0x90 [ 400.689256][T10810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.696113][T10810] RIP: 0033:0x7f646439ce59 [ 400.701118][T10810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.722265][T10810] RSP: 002b:00007f6465265028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.731461][T10810] RAX: ffffffffffffffda RBX: 00007f6464615fa0 RCX: 00007f646439ce59 [ 400.739998][T10810] RDX: 000000000000ff00 RSI: 0000200000000000 RDI: 0000000000000005 [ 400.749137][T10810] RBP: 00007f6465265090 R08: 0000000000000000 R09: 0000000000000000 [ 400.757138][T10810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.765709][T10810] R13: 00007f6464616038 R14: 00007f6464615fa0 R15: 00007ffc95e73438 [ 400.775968][T10810] [ 401.002348][T10821] FAULT_INJECTION: forcing a failure. [ 401.002348][T10821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.032223][T10821] CPU: 1 PID: 10821 Comm: syz.3.1923 Not tainted syzkaller #0 [ 401.042635][T10821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.053185][T10821] Call Trace: [ 401.056518][T10821] [ 401.059645][T10821] dump_stack_lvl+0x18c/0x250 [ 401.064658][T10821] ? show_regs_print_info+0x20/0x20 [ 401.070355][T10821] ? load_image+0x420/0x420 [ 401.075034][T10821] ? __lock_acquire+0x7d40/0x7d40 [ 401.080145][T10821] should_fail_ex+0x39d/0x4d0 [ 401.085426][T10821] _copy_from_user+0x2f/0xe0 [ 401.090383][T10821] __copy_msghdr+0x3bb/0x580 [ 401.095729][T10821] ___sys_sendmsg+0x214/0x360 [ 401.101099][T10821] ? get_pid_task+0x20/0x1e0 [ 401.105997][T10821] ? __sys_sendmsg+0x2a0/0x2a0 [ 401.111548][T10821] ? __lock_acquire+0x7d40/0x7d40 [ 401.117184][T10821] __se_sys_sendmsg+0x1c2/0x2b0 [ 401.122277][T10821] ? __x64_sys_sendmsg+0x80/0x80 [ 401.127559][T10821] ? lockdep_hardirqs_on+0x98/0x150 [ 401.133265][T10821] do_syscall_64+0x55/0xb0 [ 401.137928][T10821] ? clear_bhb_loop+0x40/0x90 [ 401.143074][T10821] ? clear_bhb_loop+0x40/0x90 [ 401.148294][T10821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.157650][T10821] RIP: 0033:0x7f646439ce59 [ 401.162144][T10821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.182069][T10821] RSP: 002b:00007f6465265028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.190747][T10821] RAX: ffffffffffffffda RBX: 00007f6464615fa0 RCX: 00007f646439ce59 [ 401.199653][T10821] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 401.207978][T10821] RBP: 00007f6465265090 R08: 0000000000000000 R09: 0000000000000000 [ 401.216016][T10821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.224392][T10821] R13: 00007f6464616038 R14: 00007f6464615fa0 R15: 00007ffc95e73438 [ 401.233596][T10821] [ 401.436176][T10824] netlink: 203068 bytes leftover after parsing attributes in process `syz.2.1924'. [ 401.771376][T10837] FAULT_INJECTION: forcing a failure. [ 401.771376][T10837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.785690][T10837] CPU: 1 PID: 10837 Comm: syz.3.1930 Not tainted syzkaller #0 [ 401.793341][T10837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.803490][T10837] Call Trace: [ 401.806926][T10837] [ 401.810179][T10837] dump_stack_lvl+0x18c/0x250 [ 401.815301][T10837] ? show_regs_print_info+0x20/0x20 [ 401.820584][T10837] ? load_image+0x420/0x420 [ 401.825345][T10837] ? __lock_acquire+0x7d40/0x7d40 [ 401.830444][T10837] ? snprintf+0xe9/0x140 [ 401.834773][T10837] should_fail_ex+0x39d/0x4d0 [ 401.839627][T10837] _copy_to_user+0x2f/0xa0 [ 401.844141][T10837] simple_read_from_buffer+0xe7/0x150 [ 401.849749][T10837] proc_fail_nth_read+0x1e8/0x260 [ 401.854875][T10837] ? proc_fault_inject_write+0x360/0x360 [ 401.860631][T10837] ? fsnotify_perm+0x271/0x5e0 [ 401.865469][T10837] ? proc_fault_inject_write+0x360/0x360 [ 401.871229][T10837] vfs_read+0x28b/0x970 [ 401.875479][T10837] ? kernel_read+0x1e0/0x1e0 [ 401.880146][T10837] ? __fget_files+0x28/0x4b0 [ 401.884898][T10837] ? __fget_files+0x28/0x4b0 [ 401.890015][T10837] ? __fget_files+0x43d/0x4b0 [ 401.895501][T10837] ? __fdget_pos+0x2a3/0x330 [ 401.900173][T10837] ? ksys_read+0x75/0x260 [ 401.904593][T10837] ksys_read+0x150/0x260 [ 401.908951][T10837] ? vfs_write+0x990/0x990 [ 401.913539][T10837] ? lockdep_hardirqs_on+0x98/0x150 [ 401.918793][T10837] do_syscall_64+0x55/0xb0 [ 401.923249][T10837] ? clear_bhb_loop+0x40/0x90 [ 401.927984][T10837] ? clear_bhb_loop+0x40/0x90 [ 401.932727][T10837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.938679][T10837] RIP: 0033:0x7f646435d68e [ 401.943142][T10837] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 401.962817][T10837] RSP: 002b:00007f6465264fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 401.971649][T10837] RAX: ffffffffffffffda RBX: 00007f64652656c0 RCX: 00007f646435d68e [ 401.979724][T10837] RDX: 000000000000000f RSI: 00007f64652650a0 RDI: 0000000000000004 [ 401.988346][T10837] RBP: 00007f6465265090 R08: 0000000000000000 R09: 0000000000000000 [ 401.996632][T10837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.004777][T10837] R13: 00007f6464616038 R14: 00007f6464615fa0 R15: 00007ffc95e73438 [ 402.012920][T10837] [ 402.405518][T10847] netlink: 'syz.3.1933': attribute type 7 has an invalid length. [ 402.645368][T10855] €Â0: renamed from batadv_slave_1 (while UP) [ 402.873329][T10857] netlink: 203068 bytes leftover after parsing attributes in process `syz.1.1936'. [ 403.167712][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1943'. [ 403.435141][T10879] netlink: 'syz.1.1947': attribute type 13 has an invalid length. [ 403.452693][T10879] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.1947'. [ 403.570165][T10876] netlink: 'syz.2.1946': attribute type 7 has an invalid length. [ 403.948594][T10886] netlink: 'syz.1.1950': attribute type 7 has an invalid length. [ 404.060383][T10889] netlink: 203068 bytes leftover after parsing attributes in process `syz.0.1951'. [ 404.483719][T10897] veth1_to_bond: entered allmulticast mode [ 404.492875][T10897] FAULT_INJECTION: forcing a failure. [ 404.492875][T10897] name failslab, interval 1, probability 0, space 0, times 0 [ 404.528368][T10897] CPU: 1 PID: 10897 Comm: syz.0.1954 Not tainted syzkaller #0 [ 404.535986][T10897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 404.546470][T10897] Call Trace: [ 404.549804][T10897] [ 404.552802][T10897] dump_stack_lvl+0x18c/0x250 [ 404.557832][T10897] ? show_regs_print_info+0x20/0x20 [ 404.563209][T10897] ? load_image+0x420/0x420 [ 404.567876][T10897] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 404.574017][T10897] ? lock_chain_count+0x20/0x20 [ 404.579093][T10897] should_fail_ex+0x39d/0x4d0 [ 404.584400][T10897] should_failslab+0x9/0x20 [ 404.589168][T10897] slab_pre_alloc_hook+0x59/0x310 [ 404.594284][T10897] kmem_cache_alloc_node+0x60/0x320 [ 404.599637][T10897] ? __alloc_skb+0x103/0x2c0 [ 404.604521][T10897] __alloc_skb+0x103/0x2c0 [ 404.609037][T10897] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 404.614841][T10897] ? __local_bh_enable_ip+0x13a/0x1c0 [ 404.620350][T10897] rtmsg_ifinfo+0x8c/0x1a0 [ 404.624942][T10897] __dev_notify_flags+0xf3/0x310 [ 404.630055][T10897] ? __dev_change_flags+0x6a0/0x6a0 [ 404.635397][T10897] ? __dev_change_flags+0x529/0x6a0 [ 404.641429][T10897] ? dev_get_flags+0x1c0/0x1c0 [ 404.646293][T10897] ? mutex_lock_nested+0x20/0x20 [ 404.651732][T10897] dev_change_flags+0xe8/0x1a0 [ 404.656932][T10897] dev_ioctl+0x7b4/0x1140 [ 404.661446][T10897] sock_do_ioctl+0x239/0x310 [ 404.666633][T10897] ? sock_show_fdinfo+0xb0/0xb0 [ 404.671695][T10897] sock_ioctl+0x5ba/0x7e0 [ 404.676144][T10897] ? sock_poll+0x3e0/0x3e0 [ 404.680652][T10897] ? bpf_lsm_file_ioctl+0x9/0x10 [ 404.685632][T10897] ? security_file_ioctl+0x80/0xa0 [ 404.690802][T10897] ? sock_poll+0x3e0/0x3e0 [ 404.695364][T10897] __se_sys_ioctl+0xfd/0x170 [ 404.699997][T10897] do_syscall_64+0x55/0xb0 [ 404.704450][T10897] ? clear_bhb_loop+0x40/0x90 [ 404.709614][T10897] ? clear_bhb_loop+0x40/0x90 [ 404.714685][T10897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.720716][T10897] RIP: 0033:0x7f535ef9ce59 [ 404.725173][T10897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.744913][T10897] RSP: 002b:00007f535fde9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.755204][T10897] RAX: ffffffffffffffda RBX: 00007f535f215fa0 RCX: 00007f535ef9ce59 [ 404.765067][T10897] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000005 [ 404.773189][T10897] RBP: 00007f535fde9090 R08: 0000000000000000 R09: 0000000000000000 [ 404.781229][T10897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.789248][T10897] R13: 00007f535f216038 R14: 00007f535f215fa0 R15: 00007ffcc1a8c528 [ 404.797653][T10897] [ 405.373352][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1959'. [ 406.032076][T10922] netlink: 203068 bytes leftover after parsing attributes in process `syz.3.1962'. [ 406.349456][T10930] netlink: 'syz.0.1965': attribute type 10 has an invalid length. [ 406.384300][T10930] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 406.455177][T10930] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 406.792100][T10932] netlink: 'syz.2.1966': attribute type 7 has an invalid length. [ 407.845999][T10948] FAULT_INJECTION: forcing a failure. [ 407.845999][T10948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.859654][T10948] CPU: 0 PID: 10948 Comm: syz.1.1973 Not tainted syzkaller #0 [ 407.867179][T10948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 407.877292][T10948] Call Trace: [ 407.880622][T10948] [ 407.883605][T10948] dump_stack_lvl+0x18c/0x250 [ 407.888350][T10948] ? shmem_get_folio_gfp+0x138f/0x2aa0 [ 407.893873][T10948] ? show_regs_print_info+0x20/0x20 [ 407.899127][T10948] ? load_image+0x420/0x420 [ 407.903695][T10948] ? shmem_get_folio_gfp+0x138f/0x2aa0 [ 407.909200][T10948] ? __lock_acquire+0x7d40/0x7d40 [ 407.914269][T10948] ? __rwlock_init+0x150/0x150 [ 407.919075][T10948] should_fail_ex+0x39d/0x4d0 [ 407.923799][T10948] copy_page_from_iter_atomic+0x2a8/0x1580 [ 407.929641][T10948] ? shmem_get_folio_gfp+0x26d8/0x2aa0 [ 407.935160][T10948] ? iov_iter_zero+0x1170/0x1170 [ 407.940153][T10948] ? shmem_write_begin+0x1cf/0x420 [ 407.945320][T10948] generic_perform_write+0x353/0x5c0 [ 407.950660][T10948] ? generic_file_direct_write+0x3e0/0x3e0 [ 407.956503][T10948] ? down_write+0x16e/0x200 [ 407.961046][T10948] ? file_update_time+0x98/0x1a0 [ 407.966030][T10948] shmem_file_write_iter+0xfb/0x120 [ 407.971262][T10948] vfs_write+0x46c/0x990 [ 407.975543][T10948] ? file_end_write+0x250/0x250 [ 407.980432][T10948] ? __fget_files+0x43d/0x4b0 [ 407.985177][T10948] ? __fdget_pos+0x2a3/0x330 [ 407.989798][T10948] ? ksys_write+0x75/0x260 [ 407.994252][T10948] ksys_write+0x150/0x260 [ 407.998622][T10948] ? __ia32_sys_read+0x90/0x90 [ 408.003418][T10948] ? lockdep_hardirqs_on+0x98/0x150 [ 408.008656][T10948] do_syscall_64+0x55/0xb0 [ 408.013104][T10948] ? clear_bhb_loop+0x40/0x90 [ 408.017808][T10948] ? clear_bhb_loop+0x40/0x90 [ 408.022509][T10948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.028437][T10948] RIP: 0033:0x7f173899ce59 [ 408.032898][T10948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.052532][T10948] RSP: 002b:00007f1739780028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 408.060981][T10948] RAX: ffffffffffffffda RBX: 00007f1738c15fa0 RCX: 00007f173899ce59 [ 408.068999][T10948] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000004 [ 408.077006][T10948] RBP: 00007f1739780090 R08: 0000000000000000 R09: 0000000000000000 [ 408.085004][T10948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.093020][T10948] R13: 00007f1738c16038 R14: 00007f1738c15fa0 R15: 00007ffcc9c576f8 [ 408.101038][T10948] [ 408.228151][T10955] FAULT_INJECTION: forcing a failure. [ 408.228151][T10955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.284643][T10955] CPU: 0 PID: 10955 Comm: syz.2.1974 Not tainted syzkaller #0 [ 408.292224][T10955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 408.302342][T10955] Call Trace: [ 408.305679][T10955] [ 408.308661][T10955] dump_stack_lvl+0x18c/0x250 [ 408.313458][T10955] ? show_regs_print_info+0x20/0x20 [ 408.318817][T10955] ? load_image+0x420/0x420 [ 408.323380][T10955] ? __might_fault+0xaa/0x120 [ 408.328114][T10955] ? __lock_acquire+0x7d40/0x7d40 [ 408.333209][T10955] should_fail_ex+0x39d/0x4d0 [ 408.337957][T10955] _copy_from_user+0x2f/0xe0 [ 408.342617][T10955] kstrtouint_from_user+0xde/0x170 [ 408.347798][T10955] ? kstrtol_from_user+0x190/0x190 [ 408.353000][T10955] proc_fail_nth_write+0x8f/0x250 [ 408.358093][T10955] ? proc_fail_nth_read+0x260/0x260 [ 408.363361][T10955] ? proc_fail_nth_read+0x260/0x260 [ 408.368623][T10955] vfs_write+0x296/0x990 [ 408.372936][T10955] ? file_end_write+0x250/0x250 [ 408.377854][T10955] ? __fget_files+0x28/0x4b0 [ 408.382524][T10955] ? __fget_files+0x28/0x4b0 [ 408.387186][T10955] ? __fget_files+0x43d/0x4b0 [ 408.391911][T10955] ? __fdget_pos+0x2a3/0x330 [ 408.396542][T10955] ? ksys_write+0x75/0x260 [ 408.401000][T10955] ksys_write+0x150/0x260 [ 408.405373][T10955] ? __ia32_sys_read+0x90/0x90 [ 408.410174][T10955] ? lockdep_hardirqs_on+0x98/0x150 [ 408.415413][T10955] do_syscall_64+0x55/0xb0 [ 408.419853][T10955] ? clear_bhb_loop+0x40/0x90 [ 408.424560][T10955] ? clear_bhb_loop+0x40/0x90 [ 408.429264][T10955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.435204][T10955] RIP: 0033:0x7fcc7ed5d68e [ 408.439647][T10955] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 408.459321][T10955] RSP: 002b:00007fcc7fcf8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 408.467783][T10955] RAX: ffffffffffffffda RBX: 00007fcc7fcf96c0 RCX: 00007fcc7ed5d68e [ 408.475783][T10955] RDX: 0000000000000001 RSI: 00007fcc7fcf90a0 RDI: 0000000000000004 [ 408.483784][T10955] RBP: 00007fcc7fcf9090 R08: 0000000000000000 R09: 0000000000000000 [ 408.491784][T10955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.499786][T10955] R13: 00007fcc7f016038 R14: 00007fcc7f015fa0 R15: 00007fffc54a0eb8 [ 408.507889][T10955] [ 408.660958][T10957] netlink: 203068 bytes leftover after parsing attributes in process `syz.3.1975'. [ 408.795356][T10962] FAULT_INJECTION: forcing a failure. [ 408.795356][T10962] name failslab, interval 1, probability 0, space 0, times 0 [ 408.824348][T10962] CPU: 1 PID: 10962 Comm: syz.2.1977 Not tainted syzkaller #0 [ 408.831899][T10962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 408.842021][T10962] Call Trace: [ 408.845351][T10962] [ 408.848330][T10962] dump_stack_lvl+0x18c/0x250 [ 408.853072][T10962] ? show_regs_print_info+0x20/0x20 [ 408.858331][T10962] ? load_image+0x420/0x420 [ 408.862885][T10962] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 408.868929][T10962] ? __asan_memset+0x22/0x40 [ 408.873582][T10962] should_fail_ex+0x39d/0x4d0 [ 408.878330][T10962] should_failslab+0x9/0x20 [ 408.882892][T10962] slab_pre_alloc_hook+0x59/0x310 [ 408.887984][T10962] kmem_cache_alloc+0x5a/0x2d0 [ 408.892816][T10962] ? slab_build_skb+0x2b/0x3f0 [ 408.897728][T10962] slab_build_skb+0x2b/0x3f0 [ 408.902391][T10962] bpf_prog_test_run_skb+0x3ef/0x18c0 [ 408.907839][T10962] ? __fget_files+0x28/0x4b0 [ 408.912511][T10962] ? __fget_files+0x43d/0x4b0 [ 408.917259][T10962] ? cpu_online+0x60/0x60 [ 408.921646][T10962] bpf_prog_test_run+0x321/0x390 [ 408.926644][T10962] __sys_bpf+0x49d/0x890 [ 408.930936][T10962] ? bpf_link_show_fdinfo+0x390/0x390 [ 408.936375][T10962] ? lock_chain_count+0x20/0x20 [ 408.941305][T10962] __x64_sys_bpf+0x7c/0x90 [ 408.945771][T10962] do_syscall_64+0x55/0xb0 [ 408.950240][T10962] ? clear_bhb_loop+0x40/0x90 [ 408.954965][T10962] ? clear_bhb_loop+0x40/0x90 [ 408.959686][T10962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.965634][T10962] RIP: 0033:0x7fcc7ed9ce59 [ 408.970114][T10962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.989778][T10962] RSP: 002b:00007fcc7fcf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.998340][T10962] RAX: ffffffffffffffda RBX: 00007fcc7f015fa0 RCX: 00007fcc7ed9ce59 [ 409.006363][T10962] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 409.014385][T10962] RBP: 00007fcc7fcf9090 R08: 0000000000000000 R09: 0000000000000000 [ 409.022411][T10962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.030442][T10962] R13: 00007fcc7f016038 R14: 00007fcc7f015fa0 R15: 00007fffc54a0eb8 [ 409.038487][T10962] [ 409.110705][T10960] netlink: 'syz.0.1976': attribute type 7 has an invalid length. [ 410.116692][T10988] netlink: 203068 bytes leftover after parsing attributes in process `syz.2.1987'. [ 411.290097][T11011] netlink: 'syz.0.1999': attribute type 1 has an invalid length. [ 411.351329][T11011] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.1999'. [ 411.967719][T11022] netlink: 203068 bytes leftover after parsing attributes in process `syz.3.2000'. [ 412.536759][T11039] netlink: 'syz.3.2008': attribute type 7 has an invalid length. [ 412.822019][T11042] FAULT_INJECTION: forcing a failure. [ 412.822019][T11042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.848346][T11042] CPU: 0 PID: 11042 Comm: syz.2.2009 Not tainted syzkaller #0 [ 412.855900][T11042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.866101][T11042] Call Trace: [ 412.869431][T11042] [ 412.872498][T11042] dump_stack_lvl+0x18c/0x250 [ 412.877244][T11042] ? show_regs_print_info+0x20/0x20 [ 412.882507][T11042] ? load_image+0x420/0x420 [ 412.887073][T11042] ? __lock_acquire+0x7d40/0x7d40 [ 412.892152][T11042] ? snprintf+0xe9/0x140 [ 412.896555][T11042] should_fail_ex+0x39d/0x4d0 [ 412.901313][T11042] _copy_to_user+0x2f/0xa0 [ 412.905799][T11042] simple_read_from_buffer+0xe7/0x150 [ 412.911233][T11042] proc_fail_nth_read+0x1e8/0x260 [ 412.916318][T11042] ? proc_fault_inject_write+0x360/0x360 [ 412.922042][T11042] ? fsnotify_perm+0x271/0x5e0 [ 412.926848][T11042] ? proc_fault_inject_write+0x360/0x360 [ 412.932532][T11042] vfs_read+0x28b/0x970 [ 412.936756][T11042] ? kernel_read+0x1e0/0x1e0 [ 412.941399][T11042] ? __fget_files+0x28/0x4b0 [ 412.946042][T11042] ? __fget_files+0x28/0x4b0 [ 412.950697][T11042] ? __fget_files+0x43d/0x4b0 [ 412.955447][T11042] ? __fdget_pos+0x2a3/0x330 [ 412.960093][T11042] ? ksys_read+0x75/0x260 [ 412.964484][T11042] ksys_read+0x150/0x260 [ 412.968788][T11042] ? vfs_write+0x990/0x990 [ 412.973268][T11042] ? lockdep_hardirqs_on+0x98/0x150 [ 412.978537][T11042] do_syscall_64+0x55/0xb0 [ 412.983021][T11042] ? clear_bhb_loop+0x40/0x90 [ 412.987749][T11042] ? clear_bhb_loop+0x40/0x90 [ 412.992482][T11042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.998471][T11042] RIP: 0033:0x7fcc7ed5d68e [ 413.002944][T11042] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 413.022845][T11042] RSP: 002b:00007fcc7fcd7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.031782][T11042] RAX: ffffffffffffffda RBX: 00007fcc7fcd86c0 RCX: 00007fcc7ed5d68e [ 413.039817][T11042] RDX: 000000000000000f RSI: 00007fcc7fcd80a0 RDI: 0000000000000005 [ 413.048157][T11042] RBP: 00007fcc7fcd8090 R08: 0000000000000000 R09: 0000000000000000 [ 413.056535][T11042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.064564][T11042] R13: 00007fcc7f016128 R14: 00007fcc7f016090 R15: 00007fffc54a0eb8 [ 413.073136][T11042] [ 413.638491][T11062] netlink: 203068 bytes leftover after parsing attributes in process `syz.3.2016'. [ 414.109684][T11074] netlink: 'syz.2.2019': attribute type 7 has an invalid length. [ 417.328256][T11090] netlink: 'syz.3.2024': attribute type 10 has an invalid length. [ 417.373728][T11090] team0: Device hsr_slave_0 failed to register rx_handler [ 417.645360][T11103] netlink: 203068 bytes leftover after parsing attributes in process `syz.1.2029'. [ 418.415203][T11131] netlink: 203068 bytes leftover after parsing attributes in process `syz.2.2042'. [ 418.671286][T11143] netlink: 'syz.1.2045': attribute type 2 has an invalid length. [ 418.688866][T11143] netlink: 'syz.1.2045': attribute type 1 has an invalid length. [ 418.699089][T11143] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2045'. [ 418.735521][T11143] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2045'. [ 418.756716][T11147] netlink: 'syz.3.2049': attribute type 29 has an invalid length. [ 418.767411][T11147] netlink: 'syz.3.2049': attribute type 29 has an invalid length. [ 418.783220][T11147] netlink: 'syz.3.2049': attribute type 29 has an invalid length. [ 418.794287][T11147] netlink: 'syz.3.2049': attribute type 29 has an invalid length. [ 420.060714][T11165] netlink: 203068 bytes leftover after parsing attributes in process `syz.0.2056'. [ 420.376723][T11178] FAULT_INJECTION: forcing a failure. [ 420.376723][T11178] name failslab, interval 1, probability 0, space 0, times 0 [ 420.453156][T11178] CPU: 0 PID: 11178 Comm: syz.2.2062 Not tainted syzkaller #0 [ 420.460714][T11178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 420.470817][T11178] Call Trace: [ 420.474141][T11178] [ 420.477125][T11178] dump_stack_lvl+0x18c/0x250 [ 420.481868][T11178] ? show_regs_print_info+0x20/0x20 [ 420.487141][T11178] ? load_image+0x420/0x420 [ 420.491705][T11178] ? __might_sleep+0xe0/0xe0 [ 420.496354][T11178] ? __lock_acquire+0x7d40/0x7d40 [ 420.501441][T11178] should_fail_ex+0x39d/0x4d0 [ 420.506191][T11178] should_failslab+0x9/0x20 [ 420.511306][T11178] slab_pre_alloc_hook+0x59/0x310 [ 420.517108][T11178] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 420.523244][T11178] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 420.529373][T11178] __kmem_cache_alloc_node+0x53/0x250 [ 420.534918][T11178] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 420.540705][T11178] __kmalloc+0xa4/0x230 [ 420.545365][T11178] tomoyo_realpath_from_path+0xe3/0x5d0 [ 420.551667][T11178] tomoyo_path_number_perm+0x248/0x620 [ 420.557337][T11178] ? tomoyo_path_number_perm+0x217/0x620 [ 420.563060][T11178] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 420.569221][T11178] ? ksys_write+0x1c4/0x260 [ 420.574240][T11178] ? __fget_files+0x28/0x4b0 [ 420.579037][T11178] ? __fget_files+0x28/0x4b0 [ 420.583843][T11178] security_file_ioctl+0x70/0xa0 [ 420.589081][T11178] __se_sys_ioctl+0x48/0x170 [ 420.594007][T11178] do_syscall_64+0x55/0xb0 [ 420.598635][T11178] ? clear_bhb_loop+0x40/0x90 [ 420.604125][T11178] ? clear_bhb_loop+0x40/0x90 [ 420.609016][T11178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.615007][T11178] RIP: 0033:0x7fcc7ed9ce59 [ 420.619449][T11178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.639969][T11178] RSP: 002b:00007fcc7fcf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.649205][T11178] RAX: ffffffffffffffda RBX: 00007fcc7f015fa0 RCX: 00007fcc7ed9ce59 [ 420.657694][T11178] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000007 [ 420.666143][T11178] RBP: 00007fcc7fcf9090 R08: 0000000000000000 R09: 0000000000000000 [ 420.674230][T11178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.682313][T11178] R13: 00007fcc7f016038 R14: 00007fcc7f015fa0 R15: 00007fffc54a0eb8 [ 420.690467][T11178] [ 420.821087][T11178] ERROR: Out of memory at tomoyo_realpath_from_path. [ 421.327038][T11197] sit0: entered allmulticast mode [ 421.349228][T11197] sit0: entered promiscuous mode [ 421.369390][T11197] FAULT_INJECTION: forcing a failure. [ 421.369390][T11197] name failslab, interval 1, probability 0, space 0, times 0 [ 421.387834][T11198] netlink: 203068 bytes leftover after parsing attributes in process `syz.1.2070'. [ 421.425180][T11197] CPU: 1 PID: 11197 Comm: syz.2.2069 Not tainted syzkaller #0 [ 421.432727][T11197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 421.442821][T11197] Call Trace: [ 421.446128][T11197] [ 421.449084][T11197] dump_stack_lvl+0x18c/0x250 [ 421.453797][T11197] ? show_regs_print_info+0x20/0x20 [ 421.459025][T11197] ? load_image+0x420/0x420 [ 421.463562][T11197] ? __lock_acquire+0x7d40/0x7d40 [ 421.468621][T11197] should_fail_ex+0x39d/0x4d0 [ 421.473339][T11197] should_failslab+0x9/0x20 [ 421.477873][T11197] slab_pre_alloc_hook+0x59/0x310 [ 421.482939][T11197] kmem_cache_alloc+0x5a/0x2d0 [ 421.487736][T11197] ? fib_table_insert+0x4b8/0x1b20 [ 421.492886][T11197] fib_table_insert+0x4b8/0x1b20 [ 421.497875][T11197] fib_magic+0x2e5/0x3c0 [ 421.502240][T11197] ? fib_add_ifaddr+0x5e0/0x5e0 [ 421.507128][T11197] ? lockdep_rtnl_is_held+0x26/0x30 [ 421.512350][T11197] ? ip_mc_up+0x283/0x300 [ 421.516706][T11197] fib_add_ifaddr+0x38d/0x5e0 [ 421.521417][T11197] fib_netdev_event+0x389/0x490 [ 421.526307][T11197] notifier_call_chain+0x197/0x380 [ 421.531475][T11197] __dev_notify_flags+0x1aa/0x310 [ 421.536614][T11197] ? __dev_change_flags+0x6a0/0x6a0 [ 421.541838][T11197] ? __dev_change_flags+0x4d4/0x6a0 [ 421.547065][T11197] ? dev_get_flags+0x1c0/0x1c0 [ 421.551856][T11197] ? mutex_lock_nested+0x20/0x20 [ 421.556835][T11197] dev_change_flags+0xe8/0x1a0 [ 421.561630][T11197] dev_ioctl+0x7b4/0x1140 [ 421.566000][T11197] sock_do_ioctl+0x239/0x310 [ 421.570621][T11197] ? sock_show_fdinfo+0xb0/0xb0 [ 421.575508][T11197] sock_ioctl+0x5ba/0x7e0 [ 421.579907][T11197] ? sock_poll+0x3e0/0x3e0 [ 421.585727][T11197] ? bpf_lsm_file_ioctl+0x9/0x10 [ 421.592767][T11197] ? security_file_ioctl+0x80/0xa0 [ 421.599712][T11197] ? sock_poll+0x3e0/0x3e0 [ 421.605338][T11197] __se_sys_ioctl+0xfd/0x170 [ 421.610509][T11197] do_syscall_64+0x55/0xb0 [ 421.615671][T11197] ? clear_bhb_loop+0x40/0x90 [ 421.620641][T11197] ? clear_bhb_loop+0x40/0x90 [ 421.625527][T11197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.631940][T11197] RIP: 0033:0x7fcc7ed9ce59 [ 421.636742][T11197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.661342][T11197] RSP: 002b:00007fcc7fcf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.671023][T11197] RAX: ffffffffffffffda RBX: 00007fcc7f015fa0 RCX: 00007fcc7ed9ce59 [ 421.680194][T11197] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000009 [ 421.688729][T11197] RBP: 00007fcc7fcf9090 R08: 0000000000000000 R09: 0000000000000000 [ 421.697519][T11197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 421.705885][T11197] R13: 00007fcc7f016038 R14: 00007fcc7f015fa0 R15: 00007fffc54a0eb8 [ 421.714342][T11197] [ 422.115765][T11206] netlink: 203068 bytes leftover after parsing attributes in process `syz.0.2080'. [ 422.306810][T11212] netlink: 'syz.2.2074': attribute type 10 has an invalid length. [ 422.755286][T11212] team0: Port device geneve1 added [ 423.185031][ T60] wlan1: Trigger new scan to find an IBSS to join [ 423.288398][T11223] FAULT_INJECTION: forcing a failure. [ 423.288398][T11223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.355018][T11223] CPU: 0 PID: 11223 Comm: syz.2.2079 Not tainted syzkaller #0 [ 423.362573][T11223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 423.372676][T11223] Call Trace: [ 423.375999][T11223] [ 423.378976][T11223] dump_stack_lvl+0x18c/0x250 [ 423.383706][T11223] ? show_regs_print_info+0x20/0x20 [ 423.388971][T11223] ? load_image+0x420/0x420 [ 423.393562][T11223] ? __might_fault+0xaa/0x120 [ 423.398287][T11223] ? __lock_acquire+0x7d40/0x7d40 [ 423.403366][T11223] should_fail_ex+0x39d/0x4d0 [ 423.408112][T11223] _copy_from_user+0x2f/0xe0 [ 423.412763][T11223] __sys_bpf+0x23e/0x890 [ 423.417154][T11223] ? bpf_link_show_fdinfo+0x390/0x390 [ 423.422589][T11223] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 423.428821][T11223] __x64_sys_bpf+0x7c/0x90 [ 423.433353][T11223] do_syscall_64+0x55/0xb0 [ 423.437856][T11223] ? clear_bhb_loop+0x40/0x90 [ 423.442574][T11223] ? clear_bhb_loop+0x40/0x90 [ 423.447301][T11223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.453259][T11223] RIP: 0033:0x7fcc7ed9ce59 [ 423.457724][T11223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.477383][T11223] RSP: 002b:00007fcc7fcf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 423.485856][T11223] RAX: ffffffffffffffda RBX: 00007fcc7f015fa0 RCX: 00007fcc7ed9ce59 [ 423.493875][T11223] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 423.501894][T11223] RBP: 00007fcc7fcf9090 R08: 0000000000000000 R09: 0000000000000000 [ 423.509913][T11223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.517928][T11223] R13: 00007fcc7f016038 R14: 00007fcc7f015fa0 R15: 00007fffc54a0eb8 [ 423.525967][T11223] [ 424.011014][T11240] netlink: 203068 bytes leftover after parsing attributes in process `syz.1.2087'. [ 424.654742][T11265] netlink: 203068 bytes leftover after parsing attributes in process `syz.0.2097'. [ 425.349535][T11294] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2108'. [ 425.720684][T11303] netlink: 203068 bytes leftover after parsing attributes in process `syz.3.2110'. [ 426.190179][T11322] sit0: entered allmulticast mode [ 426.722322][T11337] netlink: 203068 bytes leftover after parsing attributes in process `syz.0.2122'. [ 426.796773][T11339] netlink: 'syz.1.2123': attribute type 10 has an invalid length. [ 426.920349][T11339] team0: Port device geneve1 added [ 426.984532][T11344] netlink: 'syz.0.2125': attribute type 10 has an invalid length. [ 427.015836][T11345] netlink: 'syz.0.2125': attribute type 10 has an invalid length. [ 427.095622][ T1145] wlan1: Trigger new scan to find an IBSS to join [ 427.603781][T11364] netlink: 203068 bytes leftover after parsing attributes in process `syz.3.2133'. [ 428.046699][T11379] netlink: 'syz.3.2137': attribute type 10 has an invalid length. [ 428.278667][ T59] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 428.337747][T11379] team0: Port device geneve1 added [ 428.647515][T11389] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2142'. [ 428.732359][T11385] netlink: 'syz.3.2141': attribute type 10 has an invalid length. [ 428.792410][T11385] team0: Device hsr_slave_0 failed to register rx_handler [ 430.090097][T11418] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2153'. [ 430.136793][T11418] netlink: zone id is out of range [ 430.154004][T11418] netlink: zone id is out of range [ 430.536963][T11434] netlink: 'syz.3.2161': attribute type 13 has an invalid length. [ 430.557605][T11434] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2161'. [ 430.593424][T11434] erspan0: refused to change device tx_queue_len [ 430.609208][T11434] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 430.686709][T11438] netlink: 'syz.1.2162': attribute type 29 has an invalid length. [ 430.714950][T11438] netlink: 'syz.1.2162': attribute type 29 has an invalid length. [ 430.737830][T11438] netlink: 'syz.1.2162': attribute type 29 has an invalid length. [ 430.785065][T11438] netlink: 'syz.1.2162': attribute type 29 has an invalid length. [ 432.283112][T11456] netlink: 'syz.3.2168': attribute type 29 has an invalid length. [ 432.305718][T11456] netlink: 'syz.3.2168': attribute type 29 has an invalid length. [ 432.338238][T11456] netlink: 'syz.3.2168': attribute type 29 has an invalid length. [ 432.364676][T11456] netlink: 'syz.3.2168': attribute type 29 has an invalid length. [ 432.383164][T11456] netlink: 'syz.3.2168': attribute type 29 has an invalid length. [ 432.523779][T11465] netlink: 'syz.3.2175': attribute type 7 has an invalid length. [ 432.548480][T11463] netlink: 'syz.0.2172': attribute type 29 has an invalid length. [ 432.575232][T11463] netlink: 'syz.0.2172': attribute type 29 has an invalid length. [ 432.605223][T11469] netlink: 'syz.0.2172': attribute type 29 has an invalid length. [ 432.634247][T11463] netlink: 'syz.0.2172': attribute type 29 has an invalid length. [ 432.652073][T11463] FAULT_INJECTION: forcing a failure. [ 432.652073][T11463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.669373][T11463] CPU: 0 PID: 11463 Comm: syz.0.2172 Not tainted syzkaller #0 [ 432.677081][T11463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 432.687246][T11463] Call Trace: [ 432.690840][T11463] [ 432.693814][T11463] dump_stack_lvl+0x18c/0x250 [ 432.698561][T11463] ? show_regs_print_info+0x20/0x20 [ 432.703884][T11463] ? load_image+0x420/0x420 [ 432.709498][T11463] ? __might_fault+0xaa/0x120 [ 432.714492][T11463] ? __lock_acquire+0x7d40/0x7d40 [ 432.719828][T11463] should_fail_ex+0x39d/0x4d0 [ 432.725080][T11463] _copy_from_user+0x2f/0xe0 [ 432.730065][T11463] ___sys_recvmsg+0x176/0x590 [ 432.734879][T11463] ? __sys_recvmsg+0x2a0/0x2a0 [ 432.740081][T11463] ? ksys_write+0x1c4/0x260 [ 432.745085][T11463] ? __fget_files+0x43d/0x4b0 [ 432.750179][T11463] __x64_sys_recvmsg+0x20c/0x2e0 [ 432.755373][T11463] ? ___sys_recvmsg+0x590/0x590 [ 432.760553][T11463] ? lockdep_hardirqs_on+0x98/0x150 [ 432.765927][T11463] do_syscall_64+0x55/0xb0 [ 432.770381][T11463] ? clear_bhb_loop+0x40/0x90 [ 432.775097][T11463] ? clear_bhb_loop+0x40/0x90 [ 432.779803][T11463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.785741][T11463] RIP: 0033:0x7f535ef9ce59 [ 432.790190][T11463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.810821][T11463] RSP: 002b:00007f535fde9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 432.819617][T11463] RAX: ffffffffffffffda RBX: 00007f535f215fa0 RCX: 00007f535ef9ce59 [ 432.828950][T11463] RDX: 0000000000000000 RSI: 0000200000001c80 RDI: 0000000000000003 [ 432.837341][T11463] RBP: 00007f535fde9090 R08: 0000000000000000 R09: 0000000000000000 [ 432.845407][T11463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.853615][T11463] R13: 00007f535f216038 R14: 00007f535f215fa0 R15: 00007ffcc1a8c528 [ 432.861819][T11463] [ 433.512372][T11499] FAULT_INJECTION: forcing a failure. [ 433.512372][T11499] name failslab, interval 1, probability 0, space 0, times 0 [ 433.525711][T11499] CPU: 0 PID: 11499 Comm: syz.2.2188 Not tainted syzkaller #0 [ 433.533839][T11499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 433.544479][T11499] Call Trace: [ 433.547867][T11499] [ 433.551236][T11499] dump_stack_lvl+0x18c/0x250 [ 433.556682][T11499] ? show_regs_print_info+0x20/0x20 [ 433.561954][T11499] ? load_image+0x420/0x420 [ 433.566517][T11499] ? __might_sleep+0xe0/0xe0 [ 433.571177][T11499] ? __lock_acquire+0x7d40/0x7d40 [ 433.576277][T11499] should_fail_ex+0x39d/0x4d0 [ 433.581019][T11499] should_failslab+0x9/0x20 [ 433.585602][T11499] slab_pre_alloc_hook+0x59/0x310 [ 433.590686][T11499] ? tomoyo_encode+0x28b/0x540 [ 433.595506][T11499] ? tomoyo_encode+0x28b/0x540 [ 433.600688][T11499] __kmem_cache_alloc_node+0x53/0x250 [ 433.606116][T11499] ? tomoyo_encode+0x28b/0x540 [ 433.610916][T11499] __kmalloc+0xa4/0x230 [ 433.615121][T11499] tomoyo_encode+0x28b/0x540 [ 433.619770][T11499] tomoyo_realpath_from_path+0x592/0x5d0 [ 433.625476][T11499] tomoyo_path_number_perm+0x248/0x620 [ 433.631416][T11499] ? tomoyo_path_number_perm+0x217/0x620 [ 433.637195][T11499] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 433.642807][T11499] ? ksys_write+0x1c4/0x260 [ 433.647414][T11499] ? __fget_files+0x28/0x4b0 [ 433.652061][T11499] ? __fget_files+0x28/0x4b0 [ 433.656702][T11499] security_file_ioctl+0x70/0xa0 [ 433.662715][T11499] __se_sys_ioctl+0x48/0x170 [ 433.667349][T11499] do_syscall_64+0x55/0xb0 [ 433.671985][T11499] ? clear_bhb_loop+0x40/0x90 [ 433.676783][T11499] ? clear_bhb_loop+0x40/0x90 [ 433.681608][T11499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 433.687558][T11499] RIP: 0033:0x7fcc7ed9ce59 [ 433.692030][T11499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.712712][T11499] RSP: 002b:00007fcc7fcd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.721383][T11499] RAX: ffffffffffffffda RBX: 00007fcc7f016090 RCX: 00007fcc7ed9ce59 [ 433.729471][T11499] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000006 [ 433.737523][T11499] RBP: 00007fcc7fcd8090 R08: 0000000000000000 R09: 0000000000000000 [ 433.745530][T11499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.753576][T11499] R13: 00007fcc7f016128 R14: 00007fcc7f016090 R15: 00007fffc54a0eb8 [ 433.762258][T11499] [ 433.779351][T11499] ERROR: Out of memory at tomoyo_realpath_from_path. [ 433.901464][T11499] syzkaller0: entered promiscuous mode [ 433.909130][T11499] syzkaller0: entered allmulticast mode [ 436.361156][T11512] syzkaller0: entered promiscuous mode [ 436.381198][T11512] syzkaller0: entered allmulticast mode [ 436.440424][T11533] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2201'. [ 437.077589][T11549] FAULT_INJECTION: forcing a failure. [ 437.077589][T11549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.101366][T11549] CPU: 1 PID: 11549 Comm: syz.3.2207 Not tainted syzkaller #0 [ 437.108928][T11549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 437.119047][T11549] Call Trace: [ 437.122380][T11549] [ 437.125364][T11549] dump_stack_lvl+0x18c/0x250 [ 437.130124][T11549] ? show_regs_print_info+0x20/0x20 [ 437.135386][T11549] ? load_image+0x420/0x420 [ 437.139951][T11549] ? __might_fault+0xaa/0x120 [ 437.144711][T11549] ? __lock_acquire+0x7d40/0x7d40 [ 437.149798][T11549] ? unix_ioctl+0x261/0x670 [ 437.154402][T11549] should_fail_ex+0x39d/0x4d0 [ 437.159156][T11549] _copy_from_user+0x2f/0xe0 [ 437.163820][T11549] sock_do_ioctl+0x190/0x310 [ 437.168481][T11549] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 437.174708][T11549] ? sock_show_fdinfo+0xb0/0xb0 [ 437.179723][T11549] ? sock_ioctl+0x5a8/0x7e0 [ 437.184382][T11549] sock_ioctl+0x5ba/0x7e0 [ 437.188960][T11549] ? sock_poll+0x3e0/0x3e0 [ 437.193553][T11549] ? bpf_lsm_file_ioctl+0x9/0x10 [ 437.198559][T11549] ? security_file_ioctl+0x80/0xa0 [ 437.203756][T11549] ? sock_poll+0x3e0/0x3e0 [ 437.208219][T11549] __se_sys_ioctl+0xfd/0x170 [ 437.213377][T11549] do_syscall_64+0x55/0xb0 [ 437.218002][T11549] ? clear_bhb_loop+0x40/0x90 [ 437.222711][T11549] ? clear_bhb_loop+0x40/0x90 [ 437.227442][T11549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.233373][T11549] RIP: 0033:0x7f646439ce59 [ 437.237818][T11549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.257544][T11549] RSP: 002b:00007f6465265028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 437.269034][T11549] RAX: ffffffffffffffda RBX: 00007f6464615fa0 RCX: 00007f646439ce59 [ 437.277036][T11549] RDX: 00002000000002c0 RSI: 0000000000008924 RDI: 0000000000000009 [ 437.285385][T11549] RBP: 00007f6465265090 R08: 0000000000000000 R09: 0000000000000000 [ 437.293492][T11549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.301667][T11549] R13: 00007f6464616038 R14: 00007f6464615fa0 R15: 00007ffc95e73438 [ 437.310288][T11549] [ 439.113836][T11564] netlink: 'syz.0.2214': attribute type 33 has an invalid length. [ 439.128215][T11564] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2214'. [ 439.140213][T11564] `: renamed from syz_tun (while UP) [ 439.837513][T11601] netlink: 'syz.3.2228': attribute type 7 has an invalid length. [ 440.095799][T11615] netlink: 'syz.1.2234': attribute type 2 has an invalid length. [ 440.109295][T11615] netlink: 'syz.1.2234': attribute type 1 has an invalid length. [ 440.119814][T11615] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2234'. [ 440.149198][T11615] netlink: 'syz.1.2234': attribute type 33 has an invalid length. [ 440.157690][T11615] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2234'. [ 440.309864][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.316822][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.060920][T11643] netlink: 'syz.1.2243': attribute type 7 has an invalid length. [ 444.487695][T11687] netlink: 'syz.2.2258': attribute type 7 has an invalid length. [ 445.715839][T11725] netlink: 'syz.1.2274': attribute type 10 has an invalid length. [ 445.749229][T11725] team0: Device vxcan1 is of different type [ 446.995208][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 447.004940][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 447.013725][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 447.023167][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 447.034614][ T5786] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 447.042191][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 447.379589][T11764] netlink: 203068 bytes leftover after parsing attributes in process `syz.0.2287'. [ 448.119837][T11761] chnl_net:caif_netlink_parms(): no params data found [ 448.305029][T11789] netlink: 203068 bytes leftover after parsing attributes in process `syz.0.2296'. [ 448.693559][T11761] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.704280][T11761] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.720065][T11761] bridge_slave_0: entered allmulticast mode [ 448.731709][T11761] bridge_slave_0: entered promiscuous mode [ 448.768988][T11761] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.810245][T11761] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.818028][T11761] bridge_slave_1: entered allmulticast mode [ 448.826378][T11761] bridge_slave_1: entered promiscuous mode [ 448.921467][T11761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.965414][T11761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.050197][T11761] team0: Port device team_slave_0 added [ 449.083141][T11761] team0: Port device team_slave_1 added [ 449.104306][ T5786] Bluetooth: hci4: command tx timeout [ 449.238049][T11761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.271751][T11761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.314150][T11761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.354994][T11761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.373191][T11761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.465563][T11761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.526137][T11815] netlink: 203068 bytes leftover after parsing attributes in process `syz.0.2305'. [ 449.789427][T11761] hsr_slave_0: entered promiscuous mode [ 449.812761][T11761] hsr_slave_1: entered promiscuous mode [ 449.820214][T11761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.834184][T11761] Cannot create hsr debugfs directory [ 450.338973][T11761] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.499333][T11845] netlink: 203068 bytes leftover after parsing attributes in process `syz.0.2317'. [ 450.527986][T11761] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.733560][T11761] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.982145][T11761] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.141366][T11859] netlink: 'syz.2.2322': attribute type 2 has an invalid length. [ 451.179682][ T5786] Bluetooth: hci4: command tx timeout [ 451.393945][T11761] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 451.424596][T11761] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 451.447151][T11761] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 451.490636][T11761] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 451.561065][T11865] FAULT_INJECTION: forcing a failure. [ 451.561065][T11865] name failslab, interval 1, probability 0, space 0, times 0 [ 451.581644][T11865] CPU: 1 PID: 11865 Comm: syz.0.2326 Not tainted syzkaller #0 [ 451.589205][T11865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 451.599378][T11865] Call Trace: [ 451.602712][T11865] [ 451.605697][T11865] dump_stack_lvl+0x18c/0x250 [ 451.610453][T11865] ? show_regs_print_info+0x20/0x20 [ 451.615722][T11865] ? load_image+0x420/0x420 [ 451.620283][T11865] ? mark_lock+0x94/0x320 [ 451.624677][T11865] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 451.630731][T11865] should_fail_ex+0x39d/0x4d0 [ 451.635478][T11865] should_failslab+0x9/0x20 [ 451.640045][T11865] slab_pre_alloc_hook+0x59/0x310 [ 451.645623][T11865] ? lockdep_hardirqs_on+0x98/0x150 [ 451.651176][T11865] kmem_cache_alloc+0x5a/0x2d0 [ 451.656079][T11865] ? skb_clone+0x1eb/0x370 [ 451.660721][T11865] skb_clone+0x1eb/0x370 [ 451.665388][T11865] __netlink_deliver_tap+0x41c/0x830 [ 451.672139][T11865] ? netlink_deliver_tap+0x2e/0x1b0 [ 451.677652][T11865] netlink_deliver_tap+0x19c/0x1b0 [ 451.682895][T11865] netlink_dump+0x94b/0xe50 [ 451.687447][T11865] ? netlink_lookup+0x200/0x200 [ 451.692476][T11865] ? __inet_diag_dump_start+0x88d/0x9f0 [ 451.698086][T11865] __netlink_dump_start+0x5f1/0x810 [ 451.703457][T11865] inet_diag_rcv_msg_compat+0x215/0x440 [ 451.709320][T11865] ? __inet_diag_dump+0x380/0x380 [ 451.714411][T11865] ? sock_diag_rcv_msg+0xd1/0x600 [ 451.719484][T11865] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 451.725271][T11865] ? inet_diag_dump_start_compat+0x20/0x20 [ 451.731127][T11865] ? inet_diag_dump+0x50/0x50 [ 451.735846][T11865] ? __inet_diag_dump+0x380/0x380 [ 451.740905][T11865] sock_diag_rcv_msg+0x3d8/0x600 [ 451.745893][T11865] netlink_rcv_skb+0x241/0x4d0 [ 451.751051][T11865] ? sock_diag_bind+0xb0/0xb0 [ 451.755947][T11865] ? netlink_ack+0x1180/0x1180 [ 451.761047][T11865] ? __lock_acquire+0x7d40/0x7d40 [ 451.766302][T11865] ? netlink_deliver_tap+0x2e/0x1b0 [ 451.771545][T11865] sock_diag_rcv+0x2a/0x40 [ 451.776032][T11865] netlink_unicast+0x751/0x8d0 [ 451.780838][T11865] netlink_sendmsg+0x8d0/0xbf0 [ 451.785725][T11865] ? lockdep_hardirqs_on+0x98/0x150 [ 451.791052][T11865] ? netlink_getsockopt+0x590/0x590 [ 451.796470][T11865] ? netlink_getsockopt+0x590/0x590 [ 451.801878][T11865] ____sys_sendmsg+0x5ba/0x960 [ 451.806948][T11865] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 451.813584][T11865] ? __asan_memset+0x22/0x40 [ 451.818208][T11865] ? __sys_sendmsg_sock+0x30/0x30 [ 451.823282][T11865] ? __import_iovec+0x5f2/0x850 [ 451.828172][T11865] ? import_iovec+0x73/0xa0 [ 451.833383][T11865] ___sys_sendmsg+0x2a6/0x360 [ 451.838116][T11865] ? __sys_sendmsg+0x2a0/0x2a0 [ 451.842977][T11865] __se_sys_sendmsg+0x1c2/0x2b0 [ 451.847875][T11865] ? __x64_sys_sendmsg+0x80/0x80 [ 451.852860][T11865] ? syscall_enter_from_user_mode+0x2e/0x80 [ 451.858796][T11865] do_syscall_64+0x55/0xb0 [ 451.863249][T11865] ? clear_bhb_loop+0x40/0x90 [ 451.867972][T11865] ? clear_bhb_loop+0x40/0x90 [ 451.872679][T11865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.878613][T11865] RIP: 0033:0x7f535ef9ce59 [ 451.883062][T11865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.902694][T11865] RSP: 002b:00007f535fde9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.911139][T11865] RAX: ffffffffffffffda RBX: 00007f535f215fa0 RCX: 00007f535ef9ce59 [ 451.919135][T11865] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000005 [ 451.927170][T11865] RBP: 00007f535fde9090 R08: 0000000000000000 R09: 0000000000000000 [ 451.935167][T11865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 451.943163][T11865] R13: 00007f535f216038 R14: 00007f535f215fa0 R15: 00007ffcc1a8c528 [ 451.951176][T11865] [ 451.996356][T11867] netlink: 203068 bytes leftover after parsing attributes in process `syz.1.2328'. [ 452.220050][T11761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.273266][T11761] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.299860][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.307570][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.382592][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.389845][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.486994][T11761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 452.843375][T11761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.988665][T11761] veth0_vlan: entered promiscuous mode [ 453.029099][T11761] veth1_vlan: entered promiscuous mode [ 453.081100][T11761] veth0_macvtap: entered promiscuous mode [ 453.096444][T11901] netlink: 203068 bytes leftover after parsing attributes in process `syz.0.2340'. [ 453.126125][T11761] veth1_macvtap: entered promiscuous mode [ 453.180928][T11761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.209723][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.230830][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.254120][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.264367][ T5786] Bluetooth: hci4: command tx timeout [ 453.279658][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.303338][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 453.314982][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.327443][T11761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.350530][T11761] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.359515][T11761] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.369896][T11761] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.381055][T11761] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.597081][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.624349][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.702494][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.734713][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.025580][T11916] FAULT_INJECTION: forcing a failure. [ 454.025580][T11916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.090973][T11916] CPU: 1 PID: 11916 Comm: syz.2.2346 Not tainted syzkaller #0 [ 454.098643][T11916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 454.108785][T11916] Call Trace: [ 454.112139][T11916] [ 454.115142][T11916] dump_stack_lvl+0x18c/0x250 [ 454.119960][T11916] ? show_regs_print_info+0x20/0x20 [ 454.125247][T11916] ? load_image+0x420/0x420 [ 454.129830][T11916] ? __might_fault+0xaa/0x120 [ 454.134586][T11916] ? __lock_acquire+0x7d40/0x7d40 [ 454.139720][T11916] should_fail_ex+0x39d/0x4d0 [ 454.144505][T11916] _copy_from_user+0x2f/0xe0 [ 454.149188][T11916] ___sys_sendmsg+0x1c7/0x360 [ 454.153944][T11916] ? get_pid_task+0x20/0x1e0 [ 454.158627][T11916] ? __sys_sendmsg+0x2a0/0x2a0 [ 454.163556][T11916] ? __lock_acquire+0x7d40/0x7d40 [ 454.168748][T11916] __se_sys_sendmsg+0x1c2/0x2b0 [ 454.173696][T11916] ? __x64_sys_sendmsg+0x80/0x80 [ 454.178781][T11916] ? lockdep_hardirqs_on+0x98/0x150 [ 454.184083][T11916] do_syscall_64+0x55/0xb0 [ 454.188579][T11916] ? clear_bhb_loop+0x40/0x90 [ 454.193331][T11916] ? clear_bhb_loop+0x40/0x90 [ 454.198088][T11916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.204059][T11916] RIP: 0033:0x7fcc7ed9ce59 [ 454.208538][T11916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.228207][T11916] RSP: 002b:00007fcc7fcf9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.236695][T11916] RAX: ffffffffffffffda RBX: 00007fcc7f015fa0 RCX: 00007fcc7ed9ce59 [ 454.244725][T11916] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 454.252756][T11916] RBP: 00007fcc7fcf9090 R08: 0000000000000000 R09: 0000000000000000 [ 454.260779][T11916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.268808][T11916] R13: 00007fcc7f016038 R14: 00007fcc7f015fa0 R15: 00007fffc54a0eb8 [ 454.276956][T11916] [ 454.682597][T11925] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 455.097460][T11928] netlink: 203068 bytes leftover after parsing attributes in process `syz.3.2349'. [ 455.336310][ T5786] Bluetooth: hci4: command tx timeout [ 455.740641][T11950] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2360'. [ 455.770746][T11950] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2360'. [ 455.802578][T11950] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2360'. [ 456.829638][T11959] netlink: 203068 bytes leftover after parsing attributes in process `syz.3.2363'. [ 456.884354][T11955] netlink: 'syz.2.2358': attribute type 10 has an invalid length. [ 457.006192][T11955] team0: Device vxcan1 is of different type [ 457.374741][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 457.387889][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 457.400854][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 457.417556][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 457.449721][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 457.464316][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 457.828291][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.000307][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.170556][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.228215][T11989] netlink: 203068 bytes leftover after parsing attributes in process `syz.1.2373'. [ 458.279288][ T1145] .`: (slave netdevsim0): Releasing backup interface [ 458.296921][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.361443][T11988] netlink: 'syz.3.2374': attribute type 21 has an invalid length. [ 458.371682][T11988] netlink: 'syz.3.2374': attribute type 6 has an invalid length. [ 458.394393][T11988] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2374'. [ 458.663241][T11970] chnl_net:caif_netlink_parms(): no params data found [ 459.075194][T12017] netlink: 'syz.3.2377': attribute type 10 has an invalid length. [ 459.129408][T12017] team0: Device vxcan1 is of different type [ 459.576713][ T5786] Bluetooth: hci3: command tx timeout [ 459.604457][ T1145] ip6gretap0 (unregistering): left allmulticast mode [ 459.611648][ T1145] ip6gretap0 (unregistering): left promiscuous mode [ 459.620807][ T1145] : port 1(ip6gretap0) entered disabled state [ 459.637732][T11970] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.661825][T11970] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.695311][T11970] bridge_slave_0: entered allmulticast mode [ 459.703094][T11970] bridge_slave_0: entered promiscuous mode [ 459.719300][T12028] netlink: 203068 bytes leftover after parsing attributes in process `syz.1.2384'. [ 459.804887][T11970] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.812134][T11970] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.860395][T11970] bridge_slave_1: entered allmulticast mode [ 459.884357][T11970] bridge_slave_1: entered promiscuous mode [ 460.157315][T11970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.190856][T11970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.500166][T11970] team0: Port device team_slave_0 added [ 460.597113][T11970] team0: Port device team_slave_1 added [ 460.701441][ T1145] gretap0 (unregistering): left allmulticast mode [ 460.719761][ T1145] gretap0 (unregistering): left promiscuous mode [ 460.750087][T12059] netlink: 203068 bytes leftover after parsing attributes in process `syz.2.2393'. [ 460.762752][ T1145] Ÿë: port 1(gretap0) entered disabled state [ 461.134952][T11970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.142016][T11970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.256423][T11970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.488767][T11970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.518801][T11970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.606396][T11970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.654648][ T5786] Bluetooth: hci3: command tx timeout [ 461.709326][T12070] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 461.997954][T11970] hsr_slave_0: entered promiscuous mode [ 462.022543][T11970] hsr_slave_1: entered promiscuous mode [ 462.038006][T11970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.051252][T11970] Cannot create hsr debugfs directory [ 462.367567][ T1145] veth0_to_team: left allmulticast mode [ 462.373284][ T1145] veth0_to_team: left promiscuous mode [ 462.387795][ T1145] Ÿë: port 2(veth0_to_team) entered disabled state [ 462.440387][ T1145] hsr_slave_0: left promiscuous mode [ 462.447983][ T1145] hsr_slave_1: left promiscuous mode [ 462.455382][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.462917][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.519792][ T1145] veth1_macvtap: left allmulticast mode [ 462.534428][ T1145] veth1_macvtap: left promiscuous mode [ 462.540730][ T1145] veth0_macvtap: left promiscuous mode [ 462.551073][ T1145] veth0_vlan: left promiscuous mode [ 463.730146][ T1145] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 463.738945][ T5786] Bluetooth: hci3: command tx timeout [ 463.811676][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 463.872332][ T1145] team0 (unregistering): Port device C removed [ 463.927177][ T1145] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.986106][ T1145] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.034960][ T1145] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 464.299972][ T1145] .` (unregistering): (slave dummy0): Releasing backup interface [ 464.359529][ T1145] .` (unregistering): Released all slaves [ 465.116730][T11970] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 465.133915][T11970] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 465.166600][T11970] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 465.178786][T11970] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 465.382377][T11970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.408114][T11970] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.445989][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.453161][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.471313][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.478534][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.819540][ T5786] Bluetooth: hci3: command tx timeout [ 465.966159][T11970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.108212][T11970] veth0_vlan: entered promiscuous mode [ 466.122203][T11970] veth1_vlan: entered promiscuous mode [ 466.249080][T11970] veth0_macvtap: entered promiscuous mode [ 466.263992][T11970] veth1_macvtap: entered promiscuous mode [ 466.288854][ T1145] hsr_slave_0: left promiscuous mode [ 466.299679][ T1145] hsr_slave_1: left promiscuous mode [ 466.319170][ T1145] veth0_macvtap: left promiscuous mode [ 466.325499][ T1145] veth0_vlan: left promiscuous mode [ 466.464885][ T1145] team0 (unregistering): Port device geneve1 removed [ 466.935641][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 467.435088][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.466727][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.490937][T11970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.509482][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.520974][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.531642][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 467.541879][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.554159][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.565529][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.581411][T11970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.601849][T11970] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.612457][T11970] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.624290][T11970] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.633072][T11970] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.866074][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.873983][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.935939][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.949250][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.147776][T12140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 468.155577][T12140] IPv6: NLM_F_CREATE should be set when creating new route [ 468.163474][T12140] IPv6: NLM_F_CREATE should be set when creating new route [ 468.171388][T12140] IPv6: NLM_F_CREATE should be set when creating new route [ 468.235464][T12142] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2406'. [ 469.908641][T12176] netlink: 203068 bytes leftover after parsing attributes in process `syz.2.2402'. [ 470.108644][T12183] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2404'. [ 470.697488][T12203] FAULT_INJECTION: forcing a failure. [ 470.697488][T12203] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 470.765904][T12203] CPU: 0 PID: 12203 Comm: syz.2.2413 Not tainted syzkaller #0 [ 470.773453][T12203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 470.783562][T12203] Call Trace: [ 470.786890][T12203] [ 470.789864][T12203] dump_stack_lvl+0x18c/0x250 [ 470.794892][T12203] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 470.801205][T12203] ? show_regs_print_info+0x20/0x20 [ 470.806460][T12203] ? load_image+0x420/0x420 [ 470.811094][T12203] should_fail_ex+0x39d/0x4d0 [ 470.815867][T12203] prepare_alloc_pages+0x1e2/0x5f0 [ 470.821072][T12203] __alloc_pages+0x134/0x460 [ 470.825722][T12203] ? zone_statistics+0x170/0x170 [ 470.830722][T12203] ? alloc_pages+0x4dc/0x740 [ 470.835358][T12203] ? do_raw_spin_unlock+0x121/0x230 [ 470.840660][T12203] __get_free_pages+0xc/0x30 [ 470.845312][T12203] kasan_populate_vmalloc_pte+0x35/0x100 [ 470.851014][T12203] __apply_to_page_range+0x860/0xdd0 [ 470.856384][T12203] ? kasan_populate_vmalloc+0x70/0x70 [ 470.861833][T12203] ? apply_to_page_range+0x50/0x50 [ 470.867030][T12203] alloc_vmap_area+0x1d0c/0x1e30 [ 470.872057][T12203] ? vm_map_ram+0xcb0/0xcb0 [ 470.876705][T12203] ? rcu_is_watching+0x15/0xb0 [ 470.881526][T12203] __get_vm_area_node+0x162/0x370 [ 470.886620][T12203] __vmalloc_node_range+0x36e/0x1330 [ 470.891967][T12203] ? array_map_alloc+0x280/0x6f0 [ 470.897020][T12203] ? lock_chain_count+0x20/0x20 [ 470.901936][T12203] ? end_current_label_crit_section+0x170/0x170 [ 470.908348][T12203] ? free_vm_area+0x50/0x50 [ 470.912942][T12203] ? bpf_lsm_capable+0x9/0x10 [ 470.917690][T12203] bpf_map_area_alloc+0xf1/0x110 [ 470.922700][T12203] ? array_map_alloc+0x280/0x6f0 [ 470.927706][T12203] array_map_alloc+0x280/0x6f0 [ 470.932568][T12203] map_create+0x877/0x12f0 [ 470.937058][T12203] ? bpf_lsm_bpf+0x9/0x10 [ 470.941468][T12203] __sys_bpf+0x651/0x890 [ 470.945785][T12203] ? bpf_link_show_fdinfo+0x390/0x390 [ 470.951235][T12203] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 470.957486][T12203] __x64_sys_bpf+0x7c/0x90 [ 470.961968][T12203] do_syscall_64+0x55/0xb0 [ 470.966446][T12203] ? clear_bhb_loop+0x40/0x90 [ 470.971187][T12203] ? clear_bhb_loop+0x40/0x90 [ 470.975969][T12203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 470.981942][T12203] RIP: 0033:0x7fcc7ed9ce59 [ 470.986409][T12203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.006072][T12203] RSP: 002b:00007fcc7fcf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 471.014549][T12203] RAX: ffffffffffffffda RBX: 00007fcc7f015fa0 RCX: 00007fcc7ed9ce59 [ 471.022575][T12203] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 0000000000000000 [ 471.030608][T12203] RBP: 00007fcc7fcf9090 R08: 0000000000000000 R09: 0000000000000000 [ 471.038640][T12203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 471.045787][T12206] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2412'. [ 471.046637][T12203] R13: 00007fcc7f016038 R14: 00007fcc7f015fa0 R15: 00007fffc54a0eb8 [ 471.046675][T12203] [ 471.480510][T12218] netlink: 203068 bytes leftover after parsing attributes in process `syz.1.2416'. [ 472.820096][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 472.839107][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 472.850392][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 472.877218][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 472.896072][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 472.904868][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 473.109469][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.168573][T12254] netlink: 203068 bytes leftover after parsing attributes in process `syz.0.2427'. [ 473.323252][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.437922][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.659216][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.889950][T12271] netlink: 'syz.1.2432': attribute type 39 has an invalid length. [ 474.077621][T12247] chnl_net:caif_netlink_parms(): no params data found [ 474.276950][T12285] netlink: 203068 bytes leftover after parsing attributes in process `syz.3.2437'. [ 474.487168][T12247] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.495513][T12247] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.502895][T12247] bridge_slave_0: entered allmulticast mode [ 474.511279][T12247] bridge_slave_0: entered promiscuous mode [ 474.539426][T12291] netlink: 'syz.1.2438': attribute type 7 has an invalid length. [ 474.571290][T12247] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.611431][T12247] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.624436][T12247] bridge_slave_1: entered allmulticast mode [ 474.633180][T12247] bridge_slave_1: entered promiscuous mode [ 474.923656][T12247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.984210][T12247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.015366][ T5781] Bluetooth: hci0: command tx timeout [ 475.591029][T12247] team0: Port device team_slave_0 added [ 475.617216][T12247] team0: Port device team_slave_1 added [ 475.825021][T12247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.832059][T12247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.862444][T12328] netlink: 203068 bytes leftover after parsing attributes in process `syz.3.2448'. [ 475.913092][T12247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.029613][T12247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.053674][T12247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.120153][T12247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.394862][T12338] netlink: 'syz.3.2451': attribute type 7 has an invalid length. [ 476.533391][T12352] netlink: 'syz.0.2455': attribute type 29 has an invalid length. [ 476.592645][T12352] netlink: 'syz.0.2455': attribute type 29 has an invalid length. [ 476.601537][T12354] netlink: 'syz.0.2455': attribute type 29 has an invalid length. [ 476.630258][T12247] hsr_slave_0: entered promiscuous mode [ 476.652281][T12247] hsr_slave_1: entered promiscuous mode [ 476.726929][T12352] netlink: 'syz.0.2455': attribute type 29 has an invalid length. [ 476.982345][T12362] netlink: 203068 bytes leftover after parsing attributes in process `syz.3.2458'. [ 477.095857][ T5781] Bluetooth: hci0: command tx timeout [ 477.344180][ T11] hsr_slave_0: left promiscuous mode [ 477.406155][ T11] hsr_slave_1: left promiscuous mode [ 477.494718][ T11] batman_adv: batadv0: Interface deactivated: €Â0 [ 477.509403][ T11] batman_adv: batadv0: Removing interface: €Â0 [ 477.641345][ T11] veth1_macvtap: left promiscuous mode [ 477.687059][ T11] veth0_macvtap: left promiscuous mode [ 478.409986][ T11] team0 (unregistering): Port device geneve1 removed [ 478.798044][T12406] netlink: 203068 bytes leftover after parsing attributes in process `syz.0.2467'. [ 479.041256][ T11] team0 (unregistering): Port device team_slave_1 removed [ 479.112130][ T11] team0 (unregistering): Port device C removed [ 479.174425][ T5781] Bluetooth: hci0: command tx timeout [ 479.844010][T12389] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2463'. [ 480.117934][T12426] netlink: 203068 bytes leftover after parsing attributes in process `syz.1.2475'. [ 480.365118][T12434] netlink: 'syz.0.2476': attribute type 9 has an invalid length. [ 480.372937][T12434] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2476'. [ 480.835065][T12441] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 480.847185][T12430] netlink: 'syz.0.2476': attribute type 9 has an invalid length. [ 480.875020][T12430] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2476'. [ 481.257114][ T5781] Bluetooth: hci0: command tx timeout [ 481.290071][T12247] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 481.332968][T12247] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 481.374809][T12247] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 481.412663][T12247] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 481.770216][T12247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.863685][T12467] netlink: 203068 bytes leftover after parsing attributes in process `syz.1.2485'. [ 481.898677][T12247] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.928419][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.935815][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.986683][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.993915][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.129282][T12247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 482.811672][T12247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.868489][T12502] netlink: 203068 bytes leftover after parsing attributes in process `syz.1.2495'. [ 483.009216][T12247] veth0_vlan: entered promiscuous mode [ 483.050408][T12247] veth1_vlan: entered promiscuous mode [ 483.148179][T12247] veth0_macvtap: entered promiscuous mode [ 483.192127][T12247] veth1_macvtap: entered promiscuous mode [ 483.242493][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.263598][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.280749][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.294024][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.316118][T12247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.362403][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.386273][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.408257][T12520] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2499'. [ 483.414278][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.421944][T12520] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 483.446519][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.461356][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.472142][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.497540][T12247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.522445][T12520] netlink: 'syz.3.2499': attribute type 10 has an invalid length. [ 483.550572][T12520] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.558522][T12520] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.647795][T12520] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.655107][T12520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.662712][T12520] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.670366][T12520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.706565][T12520] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 483.732359][T12247] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.762218][T12247] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.786560][T12247] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.819174][T12247] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.031052][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.056693][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.286755][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.317631][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.430305][T12538] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 484.456795][T12534] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2505'. [ 484.520586][ T5781] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 485.535672][T12572] netlink: 'syz.0.2514': attribute type 1 has an invalid length. [ 485.543515][T12572] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.2514'. [ 486.917556][T12591] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 486.963930][T12590] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2518'. [ 487.081794][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 487.105809][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 487.117729][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 487.139345][ T1330] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.164362][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 487.177619][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 487.192006][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 487.358270][ T1330] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.614940][ T1330] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.806573][ T1330] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.617873][T12601] chnl_net:caif_netlink_parms(): no params data found [ 489.254462][ T5781] Bluetooth: hci1: command tx timeout [ 489.415771][T12601] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.423988][T12601] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.437042][T12601] bridge_slave_0: entered allmulticast mode [ 489.457146][T12601] bridge_slave_0: entered promiscuous mode [ 489.545569][T12601] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.552940][T12601] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.580747][T12601] bridge_slave_1: entered allmulticast mode [ 489.606063][T12601] bridge_slave_1: entered promiscuous mode [ 489.630040][T12657] syzkaller0: entered promiscuous mode [ 489.644584][T12657] syzkaller0: entered allmulticast mode [ 490.413989][T12601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.452809][T12601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.890826][ T1330] gretap0 (unregistering): left allmulticast mode [ 490.929557][ T1330] gretap0 (unregistering): left promiscuous mode [ 490.970554][ T1330] Ÿë: port 2(gretap0) entered disabled state [ 491.078654][T12601] team0: Port device team_slave_0 added [ 491.154492][T12693] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2538'. [ 491.266556][T12601] team0: Port device team_slave_1 added [ 491.334686][ T5781] Bluetooth: hci1: command tx timeout [ 491.487976][T12601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.538867][T12601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.574991][T12601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.646827][T12601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.676343][T12601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.755451][T12601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.790373][T12711] netlink: 'syz.3.2541': attribute type 9 has an invalid length. [ 493.424771][ T5781] Bluetooth: hci1: command tx timeout [ 495.504551][ T5781] Bluetooth: hci1: command tx timeout [ 501.740414][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.747258][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.200094][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.206671][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 597.014067][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 597.020823][ C1] rcu: 1-....: (1 GPs behind) idle=a534/1/0x4000000000000000 softirq=44966/44967 fqs=4424 [ 597.031847][ C1] rcu: hardirqs softirqs csw/system [ 597.038298][ C1] rcu: number: 1413453 0 0 [ 597.044754][ C1] rcu: cputime: 18106 34363 62 ==> 52470(ms) [ 597.052598][ C1] rcu: (t=10500 jiffies g=55729 q=520 ncpus=2) [ 597.058870][ C1] CPU: 1 PID: 12714 Comm: syz.0.2544 Not tainted syzkaller #0 [ 597.066449][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 597.076636][ C1] RIP: 0010:__local_bh_enable_ip+0x142/0x1c0 [ 597.082702][ C1] Code: 8a e8 12 06 36 09 65 66 8b 05 ca 4a b1 7e 66 85 c0 75 54 bf 01 00 00 00 e8 0b 22 0a 00 e8 16 33 3b 00 fb 65 8b 05 96 4a b1 7e <85> c0 75 05 e8 95 31 ae ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 597.102433][ C1] RSP: 0018:ffffc900001f01e0 EFLAGS: 00000282 [ 597.108570][ C1] RAX: 0000000000000301 RBX: 0000000000000200 RCX: 25cedee056433f00 [ 597.116643][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9c20 [ 597.124985][ C1] RBP: ffffc900001f0270 R08: ffffffff911cd5f7 R09: 1ffffffff2239abe [ 597.132994][ C1] R10: dffffc0000000000 R11: fffffbfff2239abf R12: ffffffff85af376b [ 597.140999][ C1] R13: ffff88807f516a28 R14: dffffc0000000000 R15: 1ffff9200003e03c [ 597.148986][ C1] FS: 00007f6a318056c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 597.157945][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 597.165177][ C1] CR2: 00007f02c6c4f156 CR3: 000000005fb51000 CR4: 00000000003506e0 [ 597.173454][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 597.181460][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 00000000000f0602 [ 597.189453][ C1] Call Trace: [ 597.192766][ C1] [ 597.195634][ C1] ? _local_bh_enable+0xa0/0xa0 [ 597.200593][ C1] ? lock_chain_count+0x20/0x20 [ 597.205455][ C1] ? lookup+0x18b/0x940 [ 597.209623][ C1] lookup+0x832/0x940 [ 597.213644][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 597.218862][ C1] ? lookup+0x18b/0x940 [ 597.223028][ C1] ? wg_allowedips_lookup_dst+0x1a0/0x1a0 [ 597.228775][ C1] wg_xmit+0x12a/0xec0 [ 597.232866][ C1] ? wg_stop+0x5d0/0x5d0 [ 597.237146][ C1] dev_hard_start_xmit+0x246/0x740 [ 597.242360][ C1] __dev_queue_xmit+0x19a3/0x3660 [ 597.247414][ C1] ? __dev_queue_xmit+0x265/0x3660 [ 597.252554][ C1] ? mark_lock+0x94/0x320 [ 597.256896][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 597.262886][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 597.268192][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 597.274369][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 597.279595][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 597.285778][ C1] ? neigh_connected_output+0x3b0/0x450 [ 597.291403][ C1] ip6_finish_output2+0xe3d/0x1630 [ 597.296580][ C1] ? ip6_finish_output2+0x645/0x1630 [ 597.301886][ C1] ? nf_hook+0x390/0x390 [ 597.306145][ C1] ? ip6_finish_output+0x145/0x820 [ 597.311273][ C1] ? ip6_finish_output+0x57b/0x820 [ 597.316409][ C1] ndisc_send_skb+0xc26/0x14f0 [ 597.321228][ C1] ? ndisc_send_skb+0x1f5/0x14f0 [ 597.326189][ C1] ? ndisc_mc_map+0x680/0x680 [ 597.330876][ C1] ? skb_dst+0xd0/0xd0 [ 597.334969][ C1] ? ipv6_get_lladdr+0x378/0x3e0 [ 597.339934][ C1] addrconf_rs_timer+0x2d5/0x630 [ 597.344892][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 597.350977][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 597.357007][ C1] call_timer_fn+0x189/0x540 [ 597.361605][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 597.367683][ C1] ? call_timer_fn+0xd2/0x540 [ 597.372380][ C1] ? __run_timers+0x800/0x800 [ 597.377074][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 597.383152][ C1] __run_timers+0x542/0x800 [ 597.387672][ C1] ? detach_timer+0x2b0/0x2b0 [ 597.392374][ C1] run_timer_softirq+0x67/0xf0 [ 597.397151][ C1] handle_softirqs+0x280/0x820 [ 597.401942][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 597.406725][ C1] ? do_softirq+0x1a0/0x1a0 [ 597.411237][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 597.416456][ C1] __irq_exit_rcu+0xd3/0x190 [ 597.421050][ C1] ? irq_exit_rcu+0x20/0x20 [ 597.425571][ C1] irq_exit_rcu+0x9/0x20 [ 597.429826][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 597.435480][ C1] [ 597.438424][ C1] [ 597.441366][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 597.447369][ C1] RIP: 0010:generic_exec_single+0x481/0x4f0 [ 597.453317][ C1] Code: 75 11 e8 c2 06 0b 00 48 85 db 75 16 e8 b8 06 0b 00 eb 15 e8 b1 06 0b 00 e8 9c 36 0c 09 48 85 db 74 ea e8 a2 06 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 597.472960][ C1] RSP: 0018:ffffc900035efa00 EFLAGS: 00000246 [ 597.479164][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 597.487169][ C1] RDX: ffffc9001bf31000 RSI: 0000000000002c9d RDI: 0000000000002c9e [ 597.495159][ C1] RBP: ffffc900035efad0 R08: ffffffff911cd5ff R09: 1ffffffff2239abf [ 597.503143][ C1] R10: dffffc0000000000 R11: fffffbfff2239ac0 R12: 1ffff920006bdf44 [ 597.511121][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920006bdf65 [ 597.519118][ C1] ? event_function+0x300/0x300 [ 597.523990][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 597.529720][ C1] ? percpu_counter_add_batch+0x24f/0x2a0 [ 597.535455][ C1] ? percpu_counter_add_batch+0x259/0x2a0 [ 597.541191][ C1] ? smp_call_function_single+0xb0/0x5a0 [ 597.546839][ C1] smp_call_function_single+0x36d/0x5a0 [ 597.552395][ C1] ? event_function+0x300/0x300 [ 597.557260][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 597.563427][ C1] ? event_function+0x300/0x300 [ 597.568302][ C1] perf_install_in_context+0x5be/0x920 [ 597.573776][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 597.579768][ C1] ? add_event_to_ctx+0x1180/0x1180 [ 597.585031][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 597.590256][ C1] ? perf_event__header_size+0x165/0x220 [ 597.595926][ C1] __se_sys_perf_event_open+0x1836/0x1c50 [ 597.601672][ C1] ? clockevents_program_event+0x230/0x310 [ 597.607492][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 597.613144][ C1] ? lock_chain_count+0x20/0x20 [ 597.618014][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 597.624098][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 597.629312][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 597.634964][ C1] do_syscall_64+0x55/0xb0 [ 597.639393][ C1] ? clear_bhb_loop+0x40/0x90 [ 597.644077][ C1] ? clear_bhb_loop+0x40/0x90 [ 597.648763][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.654690][ C1] RIP: 0033:0x7f6a3099ce59 [ 597.659133][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.678774][ C1] RSP: 002b:00007f6a31805028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 597.687311][ C1] RAX: ffffffffffffffda RBX: 00007f6a30c15fa0 RCX: 00007f6a3099ce59 [ 597.695301][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 597.703485][ C1] RBP: 00007f6a30a32d6f R08: 0000000000000002 R09: 0000000000000000 [ 597.711643][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 597.719644][ C1] R13: 00007f6a30c16038 R14: 00007f6a30c15fa0 R15: 00007fff16bdb9f8 [ 597.728304][ C1]