last executing test programs: 10.605638058s ago: executing program 0 (id=2067): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305828, &(0x7f0000000040)=0x20000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) close(r2) socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffed1}, 0x70) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x151080, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffe, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x24048814) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES32], 0x18}, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) write$cgroup_pressure(r1, &(0x7f00000000c0)={'full', 0x20, 0xc8, 0x20, 0x1}, 0x2f) 8.841641391s ago: executing program 0 (id=2081): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8d, 0x8d, 0x4, [@enum64={0xc, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x4, 0x0, 0x3}, {0xb, 0x1, 0xb9a1}]}, @datasec={0xa, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x8, 0xffffffff}], '-'}, @var={0xb, 0x0, 0x0, 0xe, 0x5, 0x2}, @fwd={0xc}, @enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x3}, {0xe}]}, @fwd={0x9}, @ptr={0x4, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000b00)=""/189, 0xac, 0xbd, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000c80)}, 0x20) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0xde, &(0x7f00000006c0)=""/222, 0x41100, 0x20, '\x00', r0, 0x25, r1, 0x8, &(0x7f0000000840)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0x7, 0xffffffff, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[0x1, r2, 0xffffffffffffffff, r3], &(0x7f0000000dc0)=[{0x1, 0x5, 0x10, 0xb}, {0x0, 0x2, 0xa, 0xa}, {0x1, 0x3, 0xa}, {0x0, 0x1, 0x7, 0xb}], 0x10, 0xf}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfff}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0x1}, @func={0x1, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x30]}}, &(0x7f0000000340)=""/219, 0x38, 0xdb, 0x1, 0x2, 0x10000}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='.\x00\x00\x00', 0x4}], 0x1}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x800, '\x00', 0x0, r7, 0x1, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r12}, &(0x7f0000000280), &(0x7f0000000240)=r9}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffff8001, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400127a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 7.471085941s ago: executing program 0 (id=2091): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="06", 0x1}], 0x1}, 0x14013) bpf$PROG_LOAD(0x5, 0x0, 0xffffffb6) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab50a", @ANYRES32, @ANYRES8=r3], 0xfe33) (fail_nth: 1) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)={r3}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0300"}) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001c80)="3504000010000511d25a80648c63940d0324fc60040035480c0002000200002037153e373da4927f7a684e0150e4ac1e0c040180060410004500", 0x3a}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2765af8d3268d11b473d5d7544edd1ed0e507c319e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d59969e4dbee0a9208adb7bfa855556be06a666334a0612e4ff3fc6f4ddb9a0c209301081f34824496480d688ae9bd0c3c28ea8ecfe01a2b86dcb3750686a89891d9abf0d584c854b4bc6096293fbc8707312f424996361ef9261ef3ba7cd2ddffb0e3c81e6b962d680e02f7a672dc2643cc24ad64d86fb4780827ca784a8af3376c2567bfde74dc50e16c81b71450af026459e2c37d94b8461b56ff944edc1a8cd93d0258fcc2f094615c152be", 0x3fb}], 0x2}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) 3.181311776s ago: executing program 4 (id=2119): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x8, 0xeb, 0x6, 0x9, 0x0, 0x6, 0x10220, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xffffffffffffffc0, 0x2}, 0x90020, 0x1, 0x1, 0x1c, 0x24, 0x408, 0x1, 0x0, 0x483, 0x0, 0x20008}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}) 2.787286339s ago: executing program 1 (id=2125): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000000850000000800000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.786301369s ago: executing program 4 (id=2126): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x1800}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0xbc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r5 = socket$kcm(0x22, 0x2, 0x21) setsockopt$sock_attach_bpf(r5, 0x10e, 0xa, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, 0x10057) 2.314454796s ago: executing program 1 (id=2129): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8d, 0x8d, 0x4, [@enum64={0xc, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x4, 0x0, 0x3}, {0xb, 0x1, 0xb9a1}]}, @datasec={0xa, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x8, 0xffffffff}], '-'}, @var={0xb, 0x0, 0x0, 0xe, 0x5, 0x2}, @fwd={0xc}, @enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x3}, {0xe}]}, @fwd={0x9}, @ptr={0x4, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x30, 0x0]}}, 0x0, 0xac, 0x0, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0xde, &(0x7f00000006c0)=""/222, 0x41100, 0x20, '\x00', r0, 0x25, r1, 0x8, &(0x7f0000000840)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0x7, 0xffffffff, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[0x1, r2, 0xffffffffffffffff, r3], &(0x7f0000000dc0)=[{0x1, 0x5, 0x10, 0xb}, {0x0, 0x2, 0xa, 0xa}, {0x1, 0x3, 0xa}, {0x0, 0x1, 0x7, 0xb}], 0x10, 0xf}, 0x94) socket$kcm(0x10, 0x3, 0x10) r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfff}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0x1}, @func={0x1, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x30]}}, &(0x7f0000000340)=""/219, 0x38, 0xdb, 0x1, 0x2, 0x10000}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='.\x00\x00\x00', 0x4}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x800, '\x00', 0x0, r6, 0x1, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.13277819s ago: executing program 4 (id=2130): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xffffff7f, 0x0}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x6, 0x6, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYRESHEX=r6, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10c002, 0x2, 0x8, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, 0x0, 0xfe33) 2.124150488s ago: executing program 1 (id=2132): sendmsg(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x30, 0x29, 0x721a9f1, "af46bb611d11eb3fab72eb70e4a1a65d99900fb6efaf862c8e"}, {0xe0, 0x102, 0x3, "49f394be97cc1516ef430be51462576449854c094809927c7a74d24e0b0824ed364884f02d5a96216b674b27d6dfd345d816b46a100387964e7fb308511f499ec35e4d5cc0721939acae0d387c75e3b6d0617186305258f88e6cb618a2541bf2fe22bb9d727a4d492e7244d2322c25b49f0f626373db5b7dddc2c1dda1078ad1cfd0335356ad14b690e8240eb5d23ff9c6aa40b8632cf70390bd91b8d711844c9fdec1acc6d9d41a396da9e381a096b1a2550737f048eaee744b8c51ad1070beb88b18f193033a4b00"}, {0x48, 0x111, 0x0, "73ed2f181cbf2d9d2f85d317448b903645fe4a55dbe937ee8ef008d20cc813af460f044351ddcd3c8ee8727c7ec0379afa36"}, {0x68, 0x107, 0xfffffc00, "f4eb84d79b2a1f09a1e942b56f7d602a6ee2ffed81fd71678d61d1a8f9fbdc7cf7213064b68056121aa08496649c892305c2cd7a4e60c757071b715709329aab55075045c6ee209d9ee8fe71a084656c2ff8"}], 0x1c0}, 0x81) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892c"], 0xffbf) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b406150000000000711171000000000085100000fdffffff840000000000000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}, 0xc05, 0x0, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="1400000015000b63d25a80648c2594f94124fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.933834851s ago: executing program 3 (id=2134): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8916, &(0x7f00000007c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') sendmsg$kcm(r4, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x31}, 0x80, 0x0}, 0x0) 1.866308558s ago: executing program 0 (id=2135): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000000850000000800000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.730009821s ago: executing program 3 (id=2136): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x20, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="06", 0x1}], 0x1}, 0x14013) bpf$PROG_LOAD(0x5, 0x0, 0xffffffb6) r2 = socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x29, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab50a", @ANYRES32, @ANYRES8=r2], 0xfe33) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r2}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0300"}) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001c80)="3504000010000511d25a80648c63940d0324fc60040035480c0002000200002037153e373da4927f7a684e0150e4ac1e0c040180060410004500", 0x3a}, {&(0x7f0000000a40)="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", 0x3fb}], 0x2}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) 1.525646451s ago: executing program 1 (id=2138): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305828, &(0x7f0000000040)=0x20000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) close(r2) socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffed1}, 0x70) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x151080, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffe, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x24048814) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES32], 0x18}, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) write$cgroup_pressure(r1, &(0x7f00000000c0)={'full', 0x20, 0xc8, 0x20, 0x1}, 0x2f) 1.512547508s ago: executing program 0 (id=2139): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8d, 0x8d, 0x4, [@enum64={0xc, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x4, 0x0, 0x3}, {0xb, 0x1, 0xb9a1}]}, @datasec={0xa, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x8, 0xffffffff}], '-'}, @var={0xb, 0x0, 0x0, 0xe, 0x5, 0x2}, @fwd={0xc}, @enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x3}, {0xe}]}, @fwd={0x9}, @ptr={0x4, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000b00)=""/189, 0xac, 0xbd, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c40), 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0xde, &(0x7f00000006c0)=""/222, 0x41100, 0x20, '\x00', r0, 0x25, r1, 0x8, &(0x7f0000000840)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0x7, 0xffffffff, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[0x1, r2, 0xffffffffffffffff, r3], &(0x7f0000000dc0)=[{0x1, 0x5, 0x10, 0xb}, {0x0, 0x2, 0xa, 0xa}, {0x1, 0x3, 0xa}, {0x0, 0x1, 0x7, 0xb}], 0x10, 0xf}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfff}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0x1}, @func={0x1, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x30]}}, &(0x7f0000000340)=""/219, 0x38, 0xdb, 0x1, 0x2, 0x10000}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='.\x00\x00\x00', 0x4}], 0x1}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x800, '\x00', 0x0, r7, 0x1, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r12}, &(0x7f0000000280), &(0x7f0000000240)=r9}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffff8001, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400127a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.508967988s ago: executing program 2 (id=2140): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x1800}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0xbc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r5 = socket$kcm(0x22, 0x2, 0x21) setsockopt$sock_attach_bpf(r5, 0x10e, 0xa, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, 0x10057) 1.396704395s ago: executing program 3 (id=2141): openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) socketpair(0x28, 0x2, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x5, 0x1, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) sendmsg$kcm(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000100)="bb1ab98ad03306a4ab28c37e6a9517980e5634d214e667bce8a3a5b52c28ee01e1be1c1e0e9a11a2f3b619d2a963a4bb825dbb17c0a7528be6dcf9ab399bd700627d7bcb1c4ee6f77bfdd42289f012d42a3fb32d222712544f43febde9f865265c014a07a037da98b02db70edbc55f805d199114da3ea31f2caabc4539f2a7812a8c12240701b79bf1f16934104cba2133ffa0b17cb56e3aa34fd49c4dc23f4269e5f2fb44695794bc3b05933cdb5d7363795d0b608e5f2bab599b20d91b61c3325182e37ae3fbeca7bd647f161231d75c2eb98d571bcfcffbb9c807317caa164e88", 0xe2}, {&(0x7f0000000240)="da46239772703a7c57b6515a90e9424bda09e7e1f5a4c99cea52672d8b0e3f8a89801035d77d732137846190ae59b2b5cfe59b6387f5730458bff375", 0x3c}, {&(0x7f00000021c0)="43a3477cf9f4c0e7849020127d77", 0xe}], 0x3}, 0x4000041) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xb80b) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x220000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000025c0)={&(0x7f0000002800)=ANY=[@ANYBLOB="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"], &(0x7f00000024c0)=""/212, 0x149, 0xd4, 0x0, 0x6}, 0x28) close(r7) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}, {&(0x7f0000002280)="887fcc13a5e3b0f88a7873bd2cbabf9e0efe0c3cb4d1a6e20c7452f46c1b2c67fa59b2faef5a6704dc6bb27313215e2e4ab7ff380ce5fcfed272df9f463cb8a292d16dcbd60bdd6148cb484ef4e087c5f3cc181dea8c2d2018a50cb017a278e14560f6b6a90558e6158bb3d8ea8d374d7ab2c36161b2c1cd", 0x78}], 0x2}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) recvmsg(r8, &(0x7f0000004300)={0x0, 0x0, 0x0, 0x1c}, 0x140) recvmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="023900"], 0x33fe0) 961.694879ms ago: executing program 4 (id=2142): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0xa, 0x0, 0x0, 0x800, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x3, 0x2, 0x8}, 0x10, 0x29341, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00), 0x10, 0x7f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x72, 0x0, 0xc, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x110180, 0x0, 0x0, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x100}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2b, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2020) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc0ee}, 0x1801c, 0x9, 0x4, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x428, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x9}, 0x0, 0x0, 0xffffffff, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000a000000050000010000000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 941.612296ms ago: executing program 2 (id=2143): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xad, 0xad, 0x4, [@enum64={0xc, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x4, 0x0, 0x3}, {0xb, 0x1, 0xb9a1}]}, @datasec={0xa, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x8, 0xffffffff}], '-'}, @var={0xb, 0x0, 0x0, 0xe, 0x5, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x200}}, @fwd={0xc}, @enum={0xd, 0x3, 0x0, 0x6, 0x4, [{0x1, 0x3}, {0xe}, {0xc, 0x1}]}, @fwd={0x9}, @ptr={0x4, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000b00)=""/189, 0xcc, 0xbd, 0x0, 0x1}, 0x28) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0xde, &(0x7f00000006c0)=""/222, 0x41100, 0x20, '\x00', r0, 0x25, r1, 0x8, &(0x7f0000000840)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0x7, 0xffffffff, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[0x1, 0xffffffffffffffff, r2, r3], &(0x7f0000000dc0)=[{0x1, 0x5, 0x10, 0xb}, {0x0, 0x2, 0xa, 0xa}, {0x1, 0x3, 0xa}, {0x0, 0x1, 0x7, 0xb}], 0x10, 0xf}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r5 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfff}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 640.961426ms ago: executing program 0 (id=2144): sendmsg(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x30, 0x29, 0x721a9f1, "af46bb611d11eb3fab72eb70e4a1a65d99900fb6efaf862c8e"}, {0xe0, 0x102, 0x3, "49f394be97cc1516ef430be51462576449854c094809927c7a74d24e0b0824ed364884f02d5a96216b674b27d6dfd345d816b46a100387964e7fb308511f499ec35e4d5cc0721939acae0d387c75e3b6d0617186305258f88e6cb618a2541bf2fe22bb9d727a4d492e7244d2322c25b49f0f626373db5b7dddc2c1dda1078ad1cfd0335356ad14b690e8240eb5d23ff9c6aa40b8632cf70390bd91b8d711844c9fdec1acc6d9d41a396da9e381a096b1a2550737f048eaee744b8c51ad1070beb88b18f193033a4b00"}, {0x48, 0x111, 0x0, "73ed2f181cbf2d9d2f85d317448b903645fe4a55dbe937ee8ef008d20cc813af460f044351ddcd3c8ee8727c7ec0379afa36"}, {0x68, 0x107, 0xfffffc00, "f4eb84d79b2a1f09a1e942b56f7d602a6ee2ffed81fd71678d61d1a8f9fbdc7cf7213064b68056121aa08496649c892305c2cd7a4e60c757071b715709329aab55075045c6ee209d9ee8fe71a084656c2ff8"}], 0x1c0}, 0x81) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892c"], 0xffbf) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}, 0xc05, 0x0, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="1400000015000b63d25a80648c2594f94124fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 574.329033ms ago: executing program 4 (id=2145): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x13) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b20, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xde, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0xa, 0x0, 0x11) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48265, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x10320, 0x0, 0x8, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000340)=ANY=[@ANYRES64=r5, @ANYRES64=r2, @ANYRES32=r6], &(0x7f0000000c00)='GPL\x00'}, 0xcd) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r3], 0x48) r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x1402, 0x0, 0x3, 0x4, 0x4, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, r7, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8920, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x91, 0x0, 0x11}, 0x8850) r8 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 563.739551ms ago: executing program 1 (id=2146): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8916, &(0x7f00000007c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') sendmsg$kcm(r4, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x31}, 0x80, 0x0}, 0x0) 487.843756ms ago: executing program 3 (id=2147): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000713006bec9e3be35c6e17aa31076b87511d0000007ea60864160af3653c000cc004000202080003000300000707002100eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 388.707027ms ago: executing program 1 (id=2148): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000006f440000000000006b0a00fe000000007303000000000000b500feff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050cdcfc92f5daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf9bf04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff4e2c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc8230000065937f36f6490eb033b1ce0d4922701cb42aa86ee11cd5950b58ebffffae2aba1a21410e6cb3835bc2c19c9dacbb5f836d1c0de069c20c55fa567859aca8be3afdc3a14779e9181a382831580eac154d314974d209c00896548b04f80d68da1c7ecdfea1e05d0f442b81c4f2a38ae1f43688aff1d3eb14112da5d5289bedeeff7093a12faf47f55bd7ffc82893600042e761ec18de4cd287e176befc4af4063e5f091f8a50cbf02ad70682c0131d616ff6d999fc6fba6e9d4a3fc4e6430aca493d38db18ef4b2d46a22c1dc14910a49126684e453d30ea51dc537a0c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xffffff7f, 0x0}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x6, 0x6, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRESHEX=r6, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10c002, 0x2, 0x8, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, 0x0, 0xfe33) 388.328227ms ago: executing program 2 (id=2149): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000000850000000800000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 289.275567ms ago: executing program 3 (id=2150): socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0042, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x3, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013a000000000095000000000000006dd49ce32174533466dea5d576455601e2fb1b5f31e4419a986250033107fbd0a73eb80c10a24968f8126dd26538975e8b2d8755d6dec5bb047740716c1457a324f349bc95093f3982cbb72b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x240080, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 264.065362ms ago: executing program 2 (id=2151): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x0, @rand_addr=0x64010105}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="180000000000000084000000000000004805dc000000090020000000000000008400000008"], 0x38}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xc, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @fallback=0x24}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="1400000021000b0f6d5a805bb98222f90324fc60", 0x14}], 0x1}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="9903ab387300000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r8, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37f10c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000240)) r11 = socket$kcm(0xa, 0x2, 0x11) sendmsg$inet(r11, &(0x7f0000001800)={&(0x7f00000001c0)={0x2, 0x4e22, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@cipso={0x86, 0x29, 0x1, [{0x0, 0xa, "54cfaa29e4b83415"}, {0x6, 0x5, "92d041"}, {0x7, 0xb, "4f7f49529f4e76c62f"}, {0x1, 0x9, "b0588d71fb15ba"}]}]}}}], 0x40}, 0x0) write$cgroup_int(r10, 0x0, 0x0) 263.692342ms ago: executing program 4 (id=2152): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xffffff7f, 0x0}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x6, 0x6, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYRESHEX=r6, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10c002, 0x2, 0x8, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, 0x0, 0xfe33) 137.885417ms ago: executing program 3 (id=2153): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4ad3, 0x34c}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ffffffff00000000000000009500000000000004"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb9041c14000706007c09e8fe55a10a0015000200142603600e1208000f0000000401a8001600200003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000011006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c001ac00400020208000200030001001400000007b556a737c160f9555b4755bb05251e618200000051f60a84c9f4d4938037e786a6", 0x56}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047452, &(0x7f0000001200)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0), 0x8) 43.992429ms ago: executing program 2 (id=2154): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 2 (id=2155): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34, 0x8}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="b1", 0x34000}], 0x1}, 0xc8d4) sendmsg$inet(r2, &(0x7f0000000e40)={&(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000340)="d9", 0x4e4}], 0x1}, 0x4000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2404c140) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}, 0x20000810) kernel console output (not intermixed with test programs): 8 [ 281.394390][ T7251] RSP: 002b:00007fca743b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.402853][ T7251] RAX: ffffffffffffffda RBX: 00007fca763cffa0 RCX: 00007fca76156799 [ 281.410875][ T7251] RDX: 00002000000002c0 RSI: 0000000000008924 RDI: 0000000000000003 [ 281.418877][ T7251] RBP: 00007fca743b0090 R08: 0000000000000000 R09: 0000000000000000 [ 281.426887][ T7251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.434890][ T7251] R13: 00007fca763d0038 R14: 00007fca763cffa0 R15: 00007ffede587c78 [ 281.443117][ T7251] [ 282.091248][ T7264] validate_nla: 7 callbacks suppressed [ 282.091301][ T7264] netlink: 'syz.2.1071': attribute type 10 has an invalid length. [ 282.575346][ T7267] delete_channel: no stack [ 282.684302][ T7274] netlink: 'syz.1.1072': attribute type 21 has an invalid length. [ 282.727011][ T7274] netlink: 14530 bytes leftover after parsing attributes in process `syz.1.1072'. [ 282.875903][ T7284] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 282.882891][ T7284] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 282.944297][ T7279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.968131][ T7282] netlink: 'syz.3.1075': attribute type 10 has an invalid length. [ 283.378625][ T7297] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1082'. [ 283.465087][ T7302] device bridge_slave_0 left promiscuous mode [ 283.503069][ T7302] device bridge_slave_0 entered promiscuous mode [ 283.864720][ T7306] netlink: 'syz.1.1085': attribute type 9 has an invalid length. [ 283.876498][ T7306] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1085'. [ 284.192579][ T7308] delete_channel: no stack [ 284.218309][ T7311] delete_channel: no stack [ 284.224537][ T7309] netlink: 'syz.0.1087': attribute type 9 has an invalid length. [ 284.260622][ T7309] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1087'. [ 284.316761][ T7319] FAULT_INJECTION: forcing a failure. [ 284.316761][ T7319] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 284.358841][ T7319] CPU: 1 PID: 7319 Comm: syz.4.1091 Not tainted syzkaller #0 [ 284.366298][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.376406][ T7319] Call Trace: [ 284.379736][ T7319] [ 284.382889][ T7319] dump_stack_lvl+0x188/0x250 [ 284.387631][ T7319] ? show_regs_print_info+0x20/0x20 [ 284.392891][ T7319] ? load_image+0x400/0x400 [ 284.397473][ T7319] ? perf_trace_lock_acquire+0x340/0x3e0 [ 284.403201][ T7319] should_fail+0x38c/0x4c0 [ 284.407711][ T7319] prepare_alloc_pages+0x1e4/0x5f0 [ 284.412919][ T7319] __alloc_pages+0x11b/0x480 [ 284.417594][ T7319] ? zone_statistics+0x170/0x170 [ 284.422648][ T7319] new_slab+0xc0/0x4b0 [ 284.426789][ T7319] ___slab_alloc+0x80a/0xdd0 [ 284.431446][ T7319] ? tomoyo_realpath_from_path+0x118/0x610 [ 284.437329][ T7319] __kmalloc+0x1cd/0x330 [ 284.441664][ T7319] ? tomoyo_realpath_from_path+0x118/0x610 [ 284.447554][ T7319] tomoyo_realpath_from_path+0x118/0x610 [ 284.453295][ T7319] tomoyo_path_number_perm+0x242/0x660 [ 284.458812][ T7319] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 284.465479][ T7319] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 284.471200][ T7319] security_file_ioctl+0x6c/0xa0 [ 284.476216][ T7319] __se_sys_ioctl+0x48/0x170 [ 284.480870][ T7319] do_syscall_64+0x4c/0xa0 [ 284.485339][ T7319] ? clear_bhb_loop+0x30/0x80 [ 284.490061][ T7319] ? clear_bhb_loop+0x30/0x80 [ 284.494808][ T7319] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.500762][ T7319] RIP: 0033:0x7fca76156799 [ 284.505231][ T7319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.524891][ T7319] RSP: 002b:00007fca743b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.533383][ T7319] RAX: ffffffffffffffda RBX: 00007fca763cffa0 RCX: 00007fca76156799 [ 284.541412][ T7319] RDX: 0000200000000240 RSI: 000000000000541b RDI: 0000000000000003 [ 284.549529][ T7319] RBP: 00007fca743b0090 R08: 0000000000000000 R09: 0000000000000000 [ 284.557560][ T7319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.565584][ T7319] R13: 00007fca763d0038 R14: 00007fca763cffa0 R15: 00007ffede587c78 [ 284.573787][ T7319] [ 284.635253][ T7315] netlink: 'syz.3.1089': attribute type 10 has an invalid length. [ 284.758095][ T7317] netlink: 'syz.1.1090': attribute type 21 has an invalid length. [ 284.784386][ T7317] netlink: 14530 bytes leftover after parsing attributes in process `syz.1.1090'. [ 285.583073][ T7349] delete_channel: no stack [ 285.672020][ T652] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 285.799350][ T7355] delete_channel: no stack [ 285.824628][ T7352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.947184][ T7352] netlink: 'syz.0.1102': attribute type 10 has an invalid length. [ 286.025746][ T7358] netlink: 'syz.2.1105': attribute type 10 has an invalid length. [ 286.075601][ T7362] netlink: 'syz.4.1107': attribute type 21 has an invalid length. [ 286.096769][ T7362] netlink: 14530 bytes leftover after parsing attributes in process `syz.4.1107'. [ 286.341928][ T7375] FAULT_INJECTION: forcing a failure. [ 286.341928][ T7375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.369611][ T7371] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.1111'. [ 286.423671][ T7375] CPU: 0 PID: 7375 Comm: syz.2.1113 Not tainted syzkaller #0 [ 286.431140][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 286.441262][ T7375] Call Trace: [ 286.444602][ T7375] [ 286.447626][ T7375] dump_stack_lvl+0x188/0x250 [ 286.452398][ T7375] ? show_regs_print_info+0x20/0x20 [ 286.457687][ T7375] ? load_image+0x400/0x400 [ 286.462291][ T7375] ? __lock_acquire+0x7d10/0x7d10 [ 286.467425][ T7375] should_fail+0x38c/0x4c0 [ 286.472040][ T7375] _copy_from_user+0x2e/0x170 [ 286.476802][ T7375] __copy_msghdr_from_user+0x48a/0x630 [ 286.482327][ T7375] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 286.488132][ T7375] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 286.493563][ T7375] ___sys_sendmsg+0x19a/0x2e0 [ 286.498384][ T7375] ? __sys_sendmsg+0x2a0/0x2a0 [ 286.503288][ T7375] ? trace_event_raw_event_lock+0x270/0x270 [ 286.509243][ T7375] ? vfs_write+0x8b2/0xd60 [ 286.513835][ T7375] __se_sys_sendmsg+0x1af/0x290 [ 286.518783][ T7375] ? __x64_sys_sendmsg+0x80/0x80 [ 286.523781][ T7375] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 286.529885][ T7375] ? lockdep_hardirqs_on+0x94/0x140 [ 286.535173][ T7375] do_syscall_64+0x4c/0xa0 [ 286.539654][ T7375] ? clear_bhb_loop+0x30/0x80 [ 286.544397][ T7375] ? clear_bhb_loop+0x30/0x80 [ 286.549143][ T7375] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.555123][ T7375] RIP: 0033:0x7f73bd1e3799 [ 286.559615][ T7375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.579290][ T7375] RSP: 002b:00007f73bb43d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.587272][ T7371] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1111'. [ 286.587780][ T7375] RAX: ffffffffffffffda RBX: 00007f73bd45cfa0 RCX: 00007f73bd1e3799 [ 286.587807][ T7375] RDX: 0000000020000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 286.587828][ T7375] RBP: 00007f73bb43d090 R08: 0000000000000000 R09: 0000000000000000 [ 286.587848][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.587868][ T7375] R13: 00007f73bd45d038 R14: 00007f73bd45cfa0 R15: 00007ffee1e24b78 [ 286.587963][ T7375] [ 286.906403][ T7373] delete_channel: no stack [ 288.310678][ T7393] delete_channel: no stack [ 288.434390][ T7397] delete_channel: no stack [ 288.539168][ T7406] validate_nla: 2 callbacks suppressed [ 288.539186][ T7406] netlink: 'syz.2.1121': attribute type 10 has an invalid length. [ 288.713937][ T7412] can: request_module (can-proto-0) failed. [ 288.721381][ T7409] netlink: 'syz.1.1122': attribute type 21 has an invalid length. [ 288.757308][ T7409] netlink: 14530 bytes leftover after parsing attributes in process `syz.1.1122'. [ 288.890758][ T7422] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 288.897481][ T7418] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1125'. [ 288.900105][ T7422] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 289.030039][ T7426] netlink: 'syz.0.1124': attribute type 10 has an invalid length. [ 289.275183][ T7435] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.1131'. [ 289.301524][ T7441] netlink: 'syz.3.1131': attribute type 3 has an invalid length. [ 289.309355][ T7441] netlink: 'syz.3.1131': attribute type 1 has an invalid length. [ 289.377565][ T7441] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1131'. [ 289.378317][ T7438] delete_channel: no stack [ 289.998317][ T7449] delete_channel: no stack [ 290.155797][ T7452] netlink: 'syz.1.1137': attribute type 10 has an invalid length. [ 290.606661][ T7460] delete_channel: no stack [ 290.654086][ T7464] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 290.661123][ T7464] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 290.723989][ T7468] netlink: 'syz.2.1146': attribute type 2 has an invalid length. [ 290.770951][ T7468] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1146'. [ 290.963438][ T7471] delete_channel: no stack [ 291.235872][ T7480] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 291.242631][ T7480] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 291.260939][ T7475] delete_channel: no stack [ 291.308304][ T7466] netlink: 'syz.0.1144': attribute type 9 has an invalid length. [ 291.365395][ T7466] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1144'. [ 291.499119][ T7482] delete_channel: no stack [ 291.548785][ T7486] tun0: tun_chr_ioctl cmd 1074025677 [ 291.576004][ T7486] tun0: linktype set to 6 [ 291.736482][ T7489] delete_channel: no stack [ 291.896144][ T7494] FAULT_INJECTION: forcing a failure. [ 291.896144][ T7494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.983266][ T7494] CPU: 0 PID: 7494 Comm: syz.0.1157 Not tainted syzkaller #0 [ 291.990806][ T7494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 292.000915][ T7494] Call Trace: [ 292.004223][ T7494] [ 292.007187][ T7494] dump_stack_lvl+0x188/0x250 [ 292.011916][ T7494] ? show_regs_print_info+0x20/0x20 [ 292.017173][ T7494] ? load_image+0x400/0x400 [ 292.021724][ T7494] ? __lock_acquire+0x7d10/0x7d10 [ 292.026803][ T7494] should_fail+0x38c/0x4c0 [ 292.031258][ T7494] _copy_from_user+0x2e/0x170 [ 292.035971][ T7494] __copy_msghdr_from_user+0xc9/0x630 [ 292.041379][ T7494] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 292.047577][ T7494] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 292.053008][ T7494] ___sys_sendmsg+0x19a/0x2e0 [ 292.057745][ T7494] ? __sys_sendmsg+0x2a0/0x2a0 [ 292.062599][ T7494] __se_sys_sendmsg+0x1af/0x290 [ 292.067495][ T7494] ? __x64_sys_sendmsg+0x80/0x80 [ 292.072471][ T7494] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 292.078515][ T7494] ? lockdep_hardirqs_on+0x94/0x140 [ 292.083783][ T7494] do_syscall_64+0x4c/0xa0 [ 292.088245][ T7494] ? clear_bhb_loop+0x30/0x80 [ 292.092961][ T7494] ? clear_bhb_loop+0x30/0x80 [ 292.097691][ T7494] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 292.103631][ T7494] RIP: 0033:0x7f3a61578799 [ 292.108080][ T7494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.127729][ T7494] RSP: 002b:00007f3a5f7b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.136190][ T7494] RAX: ffffffffffffffda RBX: 00007f3a617f2090 RCX: 00007f3a61578799 [ 292.144202][ T7494] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000006 [ 292.152215][ T7494] RBP: 00007f3a5f7b1090 R08: 0000000000000000 R09: 0000000000000000 [ 292.160226][ T7494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.168232][ T7494] R13: 00007f3a617f2128 R14: 00007f3a617f2090 R15: 00007fff06b5b9c8 [ 292.176280][ T7494] [ 292.267523][ T7500] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 292.274054][ T7500] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 292.998715][ T7511] FAULT_INJECTION: forcing a failure. [ 292.998715][ T7511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.006786][ T7514] delete_channel: no stack [ 293.029756][ T7511] CPU: 1 PID: 7511 Comm: syz.1.1163 Not tainted syzkaller #0 [ 293.037195][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 293.047296][ T7511] Call Trace: [ 293.050596][ T7511] [ 293.053541][ T7511] dump_stack_lvl+0x188/0x250 [ 293.058234][ T7511] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 293.064412][ T7511] ? show_regs_print_info+0x20/0x20 [ 293.069630][ T7511] ? load_image+0x400/0x400 [ 293.074165][ T7511] should_fail+0x38c/0x4c0 [ 293.078604][ T7511] _copy_from_user+0x2e/0x170 [ 293.083299][ T7511] iovec_from_user+0x142/0x370 [ 293.088084][ T7511] __import_iovec+0x70/0x490 [ 293.092691][ T7511] ? lockdep_hardirqs_on+0x94/0x140 [ 293.097909][ T7511] import_iovec+0x6f/0xa0 [ 293.102271][ T7511] ___sys_sendmsg+0x1fd/0x2e0 [ 293.106968][ T7511] ? lock_release+0xa4/0x8a0 [ 293.111740][ T7511] ? __sys_sendmsg+0x2a0/0x2a0 [ 293.116554][ T7511] __se_sys_sendmsg+0x1af/0x290 [ 293.121424][ T7511] ? __x64_sys_sendmsg+0x80/0x80 [ 293.126476][ T7511] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 293.132494][ T7511] ? lockdep_hardirqs_on+0x94/0x140 [ 293.137888][ T7511] do_syscall_64+0x4c/0xa0 [ 293.142329][ T7511] ? clear_bhb_loop+0x30/0x80 [ 293.147028][ T7511] ? clear_bhb_loop+0x30/0x80 [ 293.151728][ T7511] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.157640][ T7511] RIP: 0033:0x7fcae2eb0799 [ 293.162077][ T7511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.181956][ T7511] RSP: 002b:00007fcae110a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.190391][ T7511] RAX: ffffffffffffffda RBX: 00007fcae3129fa0 RCX: 00007fcae2eb0799 [ 293.198499][ T7511] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 293.206485][ T7511] RBP: 00007fcae110a090 R08: 0000000000000000 R09: 0000000000000000 [ 293.214472][ T7511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.222458][ T7511] R13: 00007fcae312a038 R14: 00007fcae3129fa0 R15: 00007ffc29ca7518 [ 293.230458][ T7511] [ 293.342243][ T7519] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 293.348760][ T7519] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 293.412075][ T7524] netlink: 'syz.4.1177': attribute type 17 has an invalid length. [ 293.420132][ T7524] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1177'. [ 293.678623][ T7517] delete_channel: no stack [ 293.835501][ T7532] netlink: 'syz.2.1169': attribute type 3 has an invalid length. [ 293.876980][ T7532] netlink: 'syz.2.1169': attribute type 1 has an invalid length. [ 293.943783][ T7532] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1169'. [ 294.254543][ T7543] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1171'. [ 294.520962][ T7545] netlink: 'syz.0.1168': attribute type 9 has an invalid length. [ 294.528776][ T7545] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1168'. [ 294.672366][ T7546] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1172'. [ 294.931065][ T7560] delete_channel: no stack [ 295.132345][ T7563] FAULT_INJECTION: forcing a failure. [ 295.132345][ T7563] name failslab, interval 1, probability 0, space 0, times 0 [ 295.157666][ T7563] CPU: 1 PID: 7563 Comm: syz.2.1178 Not tainted syzkaller #0 [ 295.165110][ T7563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.175203][ T7563] Call Trace: [ 295.178511][ T7563] [ 295.181472][ T7563] dump_stack_lvl+0x188/0x250 [ 295.186167][ T7563] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 295.192346][ T7563] ? show_regs_print_info+0x20/0x20 [ 295.197567][ T7563] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 295.203752][ T7563] should_fail+0x38c/0x4c0 [ 295.208198][ T7563] should_failslab+0x5/0x20 [ 295.212801][ T7563] slab_pre_alloc_hook+0x51/0xc0 [ 295.217755][ T7563] __kmalloc+0x6b/0x330 [ 295.221927][ T7563] ? tomoyo_realpath_from_path+0x118/0x610 [ 295.227756][ T7563] tomoyo_realpath_from_path+0x118/0x610 [ 295.233444][ T7563] tomoyo_path_number_perm+0x242/0x660 [ 295.238926][ T7563] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 295.245542][ T7563] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 295.251018][ T7563] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 295.257057][ T7563] security_file_ioctl+0x6c/0xa0 [ 295.262012][ T7563] __se_sys_ioctl+0x48/0x170 [ 295.266622][ T7563] do_syscall_64+0x4c/0xa0 [ 295.271058][ T7563] ? clear_bhb_loop+0x30/0x80 [ 295.275749][ T7563] ? clear_bhb_loop+0x30/0x80 [ 295.280459][ T7563] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 295.286364][ T7563] RIP: 0033:0x7f73bd1e3799 [ 295.290792][ T7563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.310414][ T7563] RSP: 002b:00007f73bb43d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.318859][ T7563] RAX: ffffffffffffffda RBX: 00007f73bd45cfa0 RCX: 00007f73bd1e3799 [ 295.326963][ T7563] RDX: 0000200000000280 RSI: 0000000000008b26 RDI: 000000000000000a [ 295.334962][ T7563] RBP: 00007f73bb43d090 R08: 0000000000000000 R09: 0000000000000000 [ 295.342958][ T7563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.350946][ T7563] R13: 00007f73bd45d038 R14: 00007f73bd45cfa0 R15: 00007ffee1e24b78 [ 295.359067][ T7563] [ 295.408478][ T7563] ERROR: Out of memory at tomoyo_realpath_from_path. [ 295.447327][ T7567] delete_channel: no stack [ 295.632769][ T7575] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 295.640283][ T7575] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 295.848972][ T7572] delete_channel: no stack [ 296.156019][ T7591] netlink: 'syz.1.1190': attribute type 9 has an invalid length. [ 296.191941][ T7591] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1190'. [ 296.499446][ T7586] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1188'. [ 296.554214][ T7604] delete_channel: no stack [ 296.568891][ T7599] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1192'. [ 296.903426][ T7620] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 296.910046][ T7620] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 297.377611][ T7616] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.1199'. [ 297.470177][ T7629] delete_channel: no stack [ 297.979461][ T7637] netlink: 'syz.2.1205': attribute type 9 has an invalid length. [ 298.060212][ T7637] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1205'. [ 298.321838][ T7645] delete_channel: no stack [ 298.743860][ T7652] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1211'. [ 298.972164][ T7665] netlink: 'syz.3.1214': attribute type 29 has an invalid length. [ 299.308678][ T7665] netlink: 'syz.3.1214': attribute type 29 has an invalid length. [ 299.532941][ T7671] delete_channel: no stack [ 299.536053][ T7675] netlink: 'syz.2.1218': attribute type 16 has an invalid length. [ 299.965761][ T9] wlan1: Trigger new scan to find an IBSS to join [ 299.997587][ T7682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.068716][ T7684] netlink: 'syz.1.1219': attribute type 9 has an invalid length. [ 300.089054][ T7684] __nla_validate_parse: 1 callbacks suppressed [ 300.089100][ T7684] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1219'. [ 300.138564][ T7685] netlink: 'syz.0.1215': attribute type 10 has an invalid length. [ 300.320675][ T7690] delete_channel: no stack [ 301.429305][ T7704] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.1225'. [ 301.694132][ T7718] netlink: 'syz.1.1229': attribute type 10 has an invalid length. [ 302.009519][ T7717] netlink: 'syz.3.1230': attribute type 9 has an invalid length. [ 302.028648][ T7717] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1230'. [ 302.691162][ T3116] wlan1: Trigger new scan to find an IBSS to join [ 302.737894][ T7732] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 302.745956][ T7732] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 302.917185][ T7739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.931867][ T7737] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 302.940528][ T7737] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 302.966526][ T7739] netlink: 'syz.1.1238': attribute type 10 has an invalid length. [ 303.028597][ T7740] delete_channel: no stack [ 303.051146][ T7733] delete_channel: no stack [ 303.589630][ T7754] netlink: 'syz.1.1244': attribute type 10 has an invalid length. [ 303.637341][ T7749] netlink: 'syz.2.1243': attribute type 9 has an invalid length. [ 303.649220][ T7749] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1243'. [ 303.745383][ T7747] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.1241'. [ 303.890669][ T7760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.009464][ T7763] device bridge_slave_0 left promiscuous mode [ 304.308336][ T7768] validate_nla: 1 callbacks suppressed [ 304.308356][ T7768] netlink: 'syz.1.1250': attribute type 10 has an invalid length. [ 304.380098][ T7773] delete_channel: no stack [ 304.441957][ T7772] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 304.448464][ T7772] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 304.551109][ T7778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.581198][ T7778] netlink: 'syz.2.1254': attribute type 10 has an invalid length. [ 304.690545][ T1453] wlan1: Creating new IBSS network, BSSID 26:e2:27:73:69:5b [ 304.965028][ T7785] netlink: 'syz.3.1256': attribute type 21 has an invalid length. [ 304.980408][ T7785] netlink: 14530 bytes leftover after parsing attributes in process `syz.3.1256'. [ 305.318729][ T7793] netlink: 'syz.1.1261': attribute type 9 has an invalid length. [ 305.367328][ T7793] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1261'. [ 305.518560][ T7797] netlink: 'syz.2.1263': attribute type 39 has an invalid length. [ 305.694648][ T7803] delete_channel: no stack [ 305.764543][ T7810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.784624][ T7810] netlink: 'syz.3.1266': attribute type 10 has an invalid length. [ 305.845488][ T7808] netlink: 'syz.1.1265': attribute type 21 has an invalid length. [ 305.879479][ T7808] netlink: 14530 bytes leftover after parsing attributes in process `syz.1.1265'. [ 305.964213][ T7801] netlink: 56537 bytes leftover after parsing attributes in process `syz.0.1260'. [ 306.045293][ T7812] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 306.052782][ T7812] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 306.192001][ T7820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.228365][ T7820] netlink: 'syz.3.1271': attribute type 10 has an invalid length. [ 306.542912][ T7824] netlink: 'syz.1.1273': attribute type 21 has an invalid length. [ 306.574710][ T7824] netlink: 14530 bytes leftover after parsing attributes in process `syz.1.1273'. [ 306.999583][ T7827] netlink: 'syz.0.1272': attribute type 10 has an invalid length. [ 307.546696][ T7838] device syzkaller0 entered promiscuous mode [ 307.632331][ T7840] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1278'. [ 307.868729][ T7850] delete_channel: no stack [ 307.995779][ T7849] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1281'. [ 308.013819][ T7846] netlink: 14530 bytes leftover after parsing attributes in process `syz.1.1280'. [ 308.029860][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 308.169769][ T7858] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1284'. [ 308.656823][ T7867] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1290'. [ 309.190108][ T7886] delete_channel: no stack [ 309.528798][ T7897] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1301'. [ 309.652197][ T7902] validate_nla: 10 callbacks suppressed [ 309.652220][ T7902] netlink: 'syz.1.1303': attribute type 9 has an invalid length. [ 309.890381][ T7907] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 309.901131][ T7907] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 309.949909][ T7890] netlink: 'syz.0.1297': attribute type 9 has an invalid length. [ 310.278224][ T7914] netlink: 'syz.1.1308': attribute type 10 has an invalid length. [ 310.472405][ T7915] netlink: 'syz.2.1307': attribute type 9 has an invalid length. [ 310.518722][ T7915] __nla_validate_parse: 2 callbacks suppressed [ 310.518856][ T7915] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1307'. [ 311.234581][ T7938] netlink: 'syz.0.1320': attribute type 9 has an invalid length. [ 311.250540][ T7938] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1320'. [ 311.412674][ T7943] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1319'. [ 314.138213][ T7949] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 314.145675][ T7949] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 314.275734][ T7947] netlink: 'syz.4.1322': attribute type 10 has an invalid length. [ 314.379276][ T7954] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1325'. [ 314.411083][ T7951] netlink: 'syz.1.1323': attribute type 9 has an invalid length. [ 314.456827][ T7951] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1323'. [ 315.143234][ T7964] netlink: 'syz.2.1326': attribute type 9 has an invalid length. [ 315.172309][ T7964] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1326'. [ 315.186243][ T7967] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1328'. [ 315.264830][ T7967] device hsr_slave_0 left promiscuous mode [ 315.287966][ T7967] device hsr_slave_1 left promiscuous mode [ 315.433588][ T7973] delete_channel: no stack [ 315.539945][ T7978] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 315.547578][ T7978] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 315.768204][ T7987] netlink: 'syz.4.1335': attribute type 9 has an invalid length. [ 315.788921][ T7983] delete_channel: no stack [ 315.789825][ T7987] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1335'. [ 316.153470][ T8003] netlink: 'syz.2.1337': attribute type 10 has an invalid length. [ 316.333429][ T7997] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1338'. [ 316.768815][ T8008] netlink: 'syz.4.1340': attribute type 9 has an invalid length. [ 316.802637][ T8008] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1340'. [ 316.890548][ T7703] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 316.940735][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.947090][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.023670][ T8014] delete_channel: no stack [ 317.204036][ T8017] netlink: 'syz.2.1343': attribute type 21 has an invalid length. [ 317.243941][ T8017] netlink: 14530 bytes leftover after parsing attributes in process `syz.2.1343'. [ 317.428327][ T8028] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 317.438967][ T8028] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 317.591334][ T8035] netlink: 'syz.4.1351': attribute type 9 has an invalid length. [ 317.601377][ T8035] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1351'. [ 317.702124][ T8036] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1352'. [ 317.978712][ T8041] netlink: 'syz.1.1353': attribute type 10 has an invalid length. [ 318.068053][ T8037] delete_channel: no stack [ 318.476498][ T8071] netlink: 'syz.1.1359': attribute type 9 has an invalid length. [ 318.509180][ T8071] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1359'. [ 318.595051][ T8066] delete_channel: no stack [ 318.669377][ T8069] netlink: 'syz.0.1360': attribute type 21 has an invalid length. [ 318.685721][ T8069] netlink: 14530 bytes leftover after parsing attributes in process `syz.0.1360'. [ 318.727035][ T8073] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1361'. [ 318.787598][ T8080] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 318.794993][ T8080] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 319.236574][ T8084] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1365'. [ 319.256117][ T8086] netlink: 'syz.1.1366': attribute type 9 has an invalid length. [ 320.397398][ T8113] FAULT_INJECTION: forcing a failure. [ 320.397398][ T8113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.418445][ T8113] CPU: 0 PID: 8113 Comm: syz.4.1377 Not tainted syzkaller #0 [ 320.425879][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 320.435965][ T8113] Call Trace: [ 320.439273][ T8113] [ 320.442228][ T8113] dump_stack_lvl+0x188/0x250 [ 320.446944][ T8113] ? show_regs_print_info+0x20/0x20 [ 320.452190][ T8113] ? load_image+0x400/0x400 [ 320.456734][ T8113] ? __lock_acquire+0x7d10/0x7d10 [ 320.461958][ T8113] should_fail+0x38c/0x4c0 [ 320.466428][ T8113] _copy_from_user+0x2e/0x170 [ 320.471146][ T8113] __copy_msghdr_from_user+0xc9/0x630 [ 320.476663][ T8113] ? verify_lock_unused+0x140/0x140 [ 320.481919][ T8113] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 320.487252][ T8113] ? perf_tp_event+0xa92/0xbf0 [ 320.492074][ T8113] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 320.497928][ T8113] ___sys_sendmsg+0x19a/0x2e0 [ 320.502654][ T8113] ? __sys_sendmsg+0x2a0/0x2a0 [ 320.507612][ T8113] __se_sys_sendmsg+0x1af/0x290 [ 320.512500][ T8113] ? __x64_sys_sendmsg+0x80/0x80 [ 320.517463][ T8113] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 320.523499][ T8113] ? lockdep_hardirqs_on+0x94/0x140 [ 320.528738][ T8113] do_syscall_64+0x4c/0xa0 [ 320.533197][ T8113] ? clear_bhb_loop+0x30/0x80 [ 320.537911][ T8113] ? clear_bhb_loop+0x30/0x80 [ 320.542624][ T8113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 320.548550][ T8113] RIP: 0033:0x7fca76156799 [ 320.552994][ T8113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.572636][ T8113] RSP: 002b:00007fca7438f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.581129][ T8113] RAX: ffffffffffffffda RBX: 00007fca763d0090 RCX: 00007fca76156799 [ 320.589139][ T8113] RDX: 0000000000004000 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 320.597148][ T8113] RBP: 00007fca7438f090 R08: 0000000000000000 R09: 0000000000000000 [ 320.605150][ T8113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.613155][ T8113] R13: 00007fca763d0128 R14: 00007fca763d0090 R15: 00007ffede587c78 [ 320.621185][ T8113] [ 320.627267][ T8104] delete_channel: no stack [ 323.001556][ T8122] validate_nla: 1 callbacks suppressed [ 323.001594][ T8122] netlink: 'syz.4.1381': attribute type 21 has an invalid length. [ 323.042816][ T8122] __nla_validate_parse: 1 callbacks suppressed [ 323.042851][ T8122] netlink: 14530 bytes leftover after parsing attributes in process `syz.4.1381'. [ 323.134837][ T8128] netlink: 'syz.3.1385': attribute type 9 has an invalid length. [ 323.143089][ T8128] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1385'. [ 323.478530][ T8134] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1386'. [ 323.778089][ T8144] delete_channel: no stack [ 324.109743][ T8158] delete_channel: no stack [ 324.425695][ T8165] netlink: 'syz.3.1397': attribute type 21 has an invalid length. [ 324.442070][ T8165] netlink: 14530 bytes leftover after parsing attributes in process `syz.3.1397'. [ 324.490869][ T8167] netlink: 'syz.0.1398': attribute type 9 has an invalid length. [ 324.499044][ T8167] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1398'. [ 328.460346][ T8177] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1401'. [ 328.497554][ T8191] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1407'. [ 328.543820][ T8191] device hsr_slave_0 left promiscuous mode [ 328.603722][ T8191] device hsr_slave_1 left promiscuous mode [ 328.938021][ T8198] delete_channel: no stack [ 329.087711][ T8202] netlink: 'syz.3.1411': attribute type 21 has an invalid length. [ 329.111300][ T8202] netlink: 14530 bytes leftover after parsing attributes in process `syz.3.1411'. [ 329.135808][ T8206] netlink: 'syz.4.1412': attribute type 9 has an invalid length. [ 329.153681][ T8197] netlink: 'syz.1.1408': attribute type 10 has an invalid length. [ 329.164519][ T8206] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1412'. [ 329.201893][ T8195] delete_channel: no stack [ 329.315593][ T8209] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1423'. [ 329.344554][ T8209] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1423'. [ 329.378501][ T8212] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1423'. [ 329.410208][ T8209] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1423'. [ 329.844654][ T8216] netlink: 17023 bytes leftover after parsing attributes in process `syz.1.1416'. [ 332.371268][ T8225] delete_channel: no stack [ 332.433642][ T8228] FAULT_INJECTION: forcing a failure. [ 332.433642][ T8228] name failslab, interval 1, probability 0, space 0, times 0 [ 332.531116][ T8228] CPU: 0 PID: 8228 Comm: syz.1.1420 Not tainted syzkaller #0 [ 332.538693][ T8228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.548780][ T8228] Call Trace: [ 332.552095][ T8228] [ 332.555051][ T8228] dump_stack_lvl+0x188/0x250 [ 332.559764][ T8228] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 332.565957][ T8228] ? show_regs_print_info+0x20/0x20 [ 332.571215][ T8228] ? load_image+0x400/0x400 [ 332.575776][ T8228] should_fail+0x38c/0x4c0 [ 332.580235][ T8228] should_failslab+0x5/0x20 [ 332.584784][ T8228] slab_pre_alloc_hook+0x51/0xc0 [ 332.589761][ T8228] __kmalloc+0x6b/0x330 [ 332.594045][ T8228] ? tomoyo_realpath_from_path+0x118/0x610 [ 332.599894][ T8228] tomoyo_realpath_from_path+0x118/0x610 [ 332.605563][ T8228] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 332.611602][ T8228] tomoyo_path_number_perm+0x242/0x660 [ 332.617106][ T8228] ? lockdep_hardirqs_on+0x94/0x140 [ 332.622357][ T8228] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 332.627924][ T8228] security_file_ioctl+0x6c/0xa0 [ 332.633038][ T8228] __se_sys_ioctl+0x48/0x170 [ 332.637686][ T8228] do_syscall_64+0x4c/0xa0 [ 332.642133][ T8228] ? clear_bhb_loop+0x30/0x80 [ 332.646939][ T8228] ? clear_bhb_loop+0x30/0x80 [ 332.651647][ T8228] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 332.657579][ T8228] RIP: 0033:0x7fcae2eb0799 [ 332.662029][ T8228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.681673][ T8228] RSP: 002b:00007fcae110a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.690132][ T8228] RAX: ffffffffffffffda RBX: 00007fcae3129fa0 RCX: 00007fcae2eb0799 [ 332.698135][ T8228] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000a [ 332.706133][ T8228] RBP: 00007fcae110a090 R08: 0000000000000000 R09: 0000000000000000 [ 332.714126][ T8228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.722115][ T8228] R13: 00007fcae312a038 R14: 00007fcae3129fa0 R15: 00007ffc29ca7518 [ 332.730133][ T8228] [ 332.768798][ T8228] ERROR: Out of memory at tomoyo_realpath_from_path. [ 332.819335][ T8235] netlink: 'syz.2.1422': attribute type 10 has an invalid length. [ 332.974645][ T8241] FAULT_INJECTION: forcing a failure. [ 332.974645][ T8241] name failslab, interval 1, probability 0, space 0, times 0 [ 333.026339][ T8241] CPU: 0 PID: 8241 Comm: syz.2.1426 Not tainted syzkaller #0 [ 333.033779][ T8241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 333.043864][ T8241] Call Trace: [ 333.047181][ T8241] [ 333.050139][ T8241] dump_stack_lvl+0x188/0x250 [ 333.054939][ T8241] ? show_regs_print_info+0x20/0x20 [ 333.060184][ T8241] ? load_image+0x400/0x400 [ 333.064731][ T8241] ? __might_sleep+0xf0/0xf0 [ 333.069346][ T8241] ? __lock_acquire+0x7d10/0x7d10 [ 333.074836][ T8241] should_fail+0x38c/0x4c0 [ 333.079279][ T8241] should_failslab+0x5/0x20 [ 333.083800][ T8241] slab_pre_alloc_hook+0x51/0xc0 [ 333.088756][ T8241] kmem_cache_alloc_node+0x47/0x2d0 [ 333.093973][ T8241] ? dup_task_struct+0x57/0xb30 [ 333.098843][ T8241] ? _raw_spin_lock_irq+0xb7/0xf0 [ 333.103893][ T8241] dup_task_struct+0x57/0xb30 [ 333.108596][ T8241] ? _raw_spin_unlock_irq+0x1f/0x40 [ 333.113853][ T8241] ? lockdep_hardirqs_on+0x94/0x140 [ 333.119081][ T8241] copy_process+0x5f0/0x3e20 [ 333.123698][ T8241] ? __lock_acquire+0x13bc/0x7d10 [ 333.128771][ T8241] ? __pidfd_prepare+0x140/0x140 [ 333.133747][ T8241] kernel_clone+0x23f/0x990 [ 333.138395][ T8241] ? ktime_get_real_ts64+0x440/0x440 [ 333.143714][ T8241] ? create_io_thread+0x180/0x180 [ 333.148781][ T8241] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 333.154800][ T8241] __x64_sys_clone+0x19a/0x210 [ 333.159604][ T8241] ? __ia32_sys_vfork+0x130/0x130 [ 333.164662][ T8241] ? syscall_enter_from_user_mode+0x2a/0x70 [ 333.170580][ T8241] do_syscall_64+0x4c/0xa0 [ 333.175055][ T8241] ? clear_bhb_loop+0x30/0x80 [ 333.179765][ T8241] ? clear_bhb_loop+0x30/0x80 [ 333.184472][ T8241] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 333.190470][ T8241] RIP: 0033:0x7f73bd1e3799 [ 333.194906][ T8241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.214802][ T8241] RSP: 002b:00007f73bb43cfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 333.223235][ T8241] RAX: ffffffffffffffda RBX: 00007f73bd45cfa0 RCX: 00007f73bd1e3799 [ 333.231229][ T8241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008001600 [ 333.239215][ T8241] RBP: 00007f73bb43d090 R08: 0000000000000000 R09: 0000000000000000 [ 333.247200][ T8241] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 333.255185][ T8241] R13: 00007f73bd45d038 R14: 00007f73bd45cfa0 R15: 00007ffee1e24b78 [ 333.263191][ T8241] [ 333.292277][ T8239] delete_channel: no stack [ 333.344344][ T8248] netlink: 'syz.3.1428': attribute type 10 has an invalid length. [ 333.842857][ T8250] netlink: 'syz.4.1429': attribute type 9 has an invalid length. [ 333.855098][ T8250] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1429'. [ 334.042332][ T8238] netlink: 'syz.0.1424': attribute type 21 has an invalid length. [ 334.051004][ T8238] netlink: 14530 bytes leftover after parsing attributes in process `syz.0.1424'. [ 334.062072][ T8246] netlink: 'syz.1.1427': attribute type 10 has an invalid length. [ 334.276927][ T8252] netlink: 'syz.2.1430': attribute type 9 has an invalid length. [ 334.300079][ T8252] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1430'. [ 334.383251][ T8257] netlink: 'syz.1.1431': attribute type 39 has an invalid length. [ 334.395840][ T8259] delete_channel: no stack [ 334.553625][ T8267] netlink: 'syz.3.1437': attribute type 10 has an invalid length. [ 334.668323][ T8272] netlink: 'syz.2.1438': attribute type 7 has an invalid length. [ 334.721445][ T8272] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1438'. [ 335.467811][ T8278] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1436'. [ 335.600995][ T8287] netlink: 'syz.2.1441': attribute type 10 has an invalid length. [ 335.661152][ T8291] netlink: 'syz.0.1442': attribute type 10 has an invalid length. [ 335.675466][ T8293] netlink: 'syz.3.1443': attribute type 7 has an invalid length. [ 335.736147][ T8293] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1443'. [ 335.886733][ T8303] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1446'. [ 335.977396][ T8302] netlink: 'syz.1.1447': attribute type 39 has an invalid length. [ 336.007122][ T8308] netlink: 'syz.4.1449': attribute type 9 has an invalid length. [ 336.028647][ T8308] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1449'. [ 336.230374][ T8313] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1452'. [ 336.243207][ T8316] netlink: 'syz.1.1453': attribute type 2 has an invalid length. [ 336.257340][ T8316] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1453'. [ 336.512882][ T8318] FAULT_INJECTION: forcing a failure. [ 336.512882][ T8318] name failslab, interval 1, probability 0, space 0, times 0 [ 336.533622][ T8318] CPU: 1 PID: 8318 Comm: syz.0.1450 Not tainted syzkaller #0 [ 336.541051][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 336.551131][ T8318] Call Trace: [ 336.554428][ T8318] [ 336.557373][ T8318] dump_stack_lvl+0x188/0x250 [ 336.562077][ T8318] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 336.568263][ T8318] ? show_regs_print_info+0x20/0x20 [ 336.573481][ T8318] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 336.579668][ T8318] should_fail+0x38c/0x4c0 [ 336.584117][ T8318] should_failslab+0x5/0x20 [ 336.588655][ T8318] slab_pre_alloc_hook+0x51/0xc0 [ 336.593623][ T8318] kmem_cache_alloc_node_trace+0x4a/0x300 [ 336.599367][ T8318] ? __get_vm_area_node+0x119/0x2d0 [ 336.604595][ T8318] __get_vm_area_node+0x119/0x2d0 [ 336.609660][ T8318] __vmalloc_node_range+0xef/0x8b0 [ 336.614800][ T8318] ? netlink_sendmsg+0x5ec/0xbe0 [ 336.619758][ T8318] ? netlink_data_ready+0x10/0x10 [ 336.624924][ T8318] ? netlink_sendmsg+0x5ec/0xbe0 [ 336.629886][ T8318] vmalloc+0x75/0x80 [ 336.633861][ T8318] ? netlink_sendmsg+0x5ec/0xbe0 [ 336.638825][ T8318] netlink_sendmsg+0x5ec/0xbe0 [ 336.643617][ T8318] ? netlink_getsockopt+0x570/0x570 [ 336.648831][ T8318] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 336.654835][ T8318] ? aa_sock_msg_perm+0x94/0x150 [ 336.659806][ T8318] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 336.665120][ T8318] ? security_socket_sendmsg+0x7c/0xa0 [ 336.670607][ T8318] sock_write_iter+0x2a6/0x3a0 [ 336.675394][ T8318] ? sock_read_iter+0x380/0x380 [ 336.680275][ T8318] ? memset+0x1e/0x40 [ 336.684281][ T8318] ? iov_iter_init+0xb4/0x170 [ 336.688989][ T8318] vfs_write+0x745/0xd60 [ 336.693268][ T8318] ? file_end_write+0x250/0x250 [ 336.698154][ T8318] ? __fget_files+0x40f/0x480 [ 336.702870][ T8318] ? __fdget_pos+0x1e2/0x370 [ 336.707480][ T8318] ? ksys_write+0x71/0x260 [ 336.711928][ T8318] ksys_write+0x152/0x260 [ 336.716293][ T8318] ? __ia32_sys_read+0x80/0x80 [ 336.721080][ T8318] ? lockdep_hardirqs_on+0x94/0x140 [ 336.726324][ T8318] do_syscall_64+0x4c/0xa0 [ 336.730784][ T8318] ? clear_bhb_loop+0x30/0x80 [ 336.735493][ T8318] ? clear_bhb_loop+0x30/0x80 [ 336.740195][ T8318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 336.746143][ T8318] RIP: 0033:0x7f3a61578799 [ 336.750586][ T8318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.770212][ T8318] RSP: 002b:00007f3a5f7d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 336.778664][ T8318] RAX: ffffffffffffffda RBX: 00007f3a617f1fa0 RCX: 00007f3a61578799 [ 336.786666][ T8318] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000007 [ 336.794676][ T8318] RBP: 00007f3a5f7d2090 R08: 0000000000000000 R09: 0000000000000000 [ 336.802667][ T8318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.810656][ T8318] R13: 00007f3a617f2038 R14: 00007f3a617f1fa0 R15: 00007fff06b5b9c8 [ 336.818664][ T8318] [ 336.876029][ T8318] syz.0.1450: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 336.997387][ T1475] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 337.014484][ T8318] CPU: 1 PID: 8318 Comm: syz.0.1450 Not tainted syzkaller #0 [ 337.021921][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 337.030760][ T1475] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 337.032007][ T8318] Call Trace: [ 337.032018][ T8318] [ 337.032028][ T8318] dump_stack_lvl+0x188/0x250 [ 337.050233][ T8318] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 337.056422][ T8318] ? show_regs_print_info+0x20/0x20 [ 337.061653][ T8318] ? load_image+0x400/0x400 [ 337.066215][ T8318] warn_alloc+0x243/0x320 [ 337.070590][ T8318] ? zone_watermark_ok_safe+0x240/0x240 [ 337.076178][ T8318] ? kmem_cache_alloc_node_trace+0x16c/0x300 [ 337.082201][ T8318] ? __get_vm_area_node+0x119/0x2d0 [ 337.087469][ T8318] __vmalloc_node_range+0x2b1/0x8b0 [ 337.092704][ T8318] ? netlink_data_ready+0x10/0x10 [ 337.097779][ T8318] ? netlink_sendmsg+0x5ec/0xbe0 [ 337.102761][ T8318] vmalloc+0x75/0x80 [ 337.106792][ T8318] ? netlink_sendmsg+0x5ec/0xbe0 [ 337.111770][ T8318] netlink_sendmsg+0x5ec/0xbe0 [ 337.116581][ T8318] ? netlink_getsockopt+0x570/0x570 [ 337.121819][ T8318] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 337.127846][ T8318] ? aa_sock_msg_perm+0x94/0x150 [ 337.132820][ T8318] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 337.138141][ T8318] ? security_socket_sendmsg+0x7c/0xa0 [ 337.143645][ T8318] sock_write_iter+0x2a6/0x3a0 [ 337.148543][ T8318] ? sock_read_iter+0x380/0x380 [ 337.153440][ T8318] ? memset+0x1e/0x40 [ 337.157456][ T8318] ? iov_iter_init+0xb4/0x170 [ 337.162172][ T8318] vfs_write+0x745/0xd60 [ 337.166465][ T8318] ? file_end_write+0x250/0x250 [ 337.171355][ T8318] ? __fget_files+0x40f/0x480 [ 337.176072][ T8318] ? __fdget_pos+0x1e2/0x370 [ 337.180765][ T8318] ? ksys_write+0x71/0x260 [ 337.185286][ T8318] ksys_write+0x152/0x260 [ 337.189639][ T8318] ? __ia32_sys_read+0x80/0x80 [ 337.194425][ T8318] ? lockdep_hardirqs_on+0x94/0x140 [ 337.199651][ T8318] do_syscall_64+0x4c/0xa0 [ 337.204096][ T8318] ? clear_bhb_loop+0x30/0x80 [ 337.208793][ T8318] ? clear_bhb_loop+0x30/0x80 [ 337.213510][ T8318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 337.219425][ T8318] RIP: 0033:0x7f3a61578799 [ 337.223855][ T8318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.243484][ T8318] RSP: 002b:00007f3a5f7d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 337.251928][ T8318] RAX: ffffffffffffffda RBX: 00007f3a617f1fa0 RCX: 00007f3a61578799 [ 337.259935][ T8318] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000007 [ 337.267950][ T8318] RBP: 00007f3a5f7d2090 R08: 0000000000000000 R09: 0000000000000000 [ 337.275954][ T8318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.283947][ T8318] R13: 00007f3a617f2038 R14: 00007f3a617f1fa0 R15: 00007fff06b5b9c8 [ 337.291960][ T8318] [ 337.385800][ T8318] Mem-Info: [ 337.389067][ T8318] active_anon:274 inactive_anon:5945 isolated_anon:0 [ 337.389067][ T8318] active_file:16309 inactive_file:36492 isolated_file:0 [ 337.389067][ T8318] unevictable:768 dirty:268 writeback:0 [ 337.389067][ T8318] slab_reclaimable:21736 slab_unreclaimable:98356 [ 337.389067][ T8318] mapped:30122 shmem:1630 pagetables:631 bounce:0 [ 337.389067][ T8318] kernel_misc_reclaimable:0 [ 337.389067][ T8318] free:1369566 free_pcp:12813 free_cma:0 [ 337.443599][ T8318] Node 0 active_anon:1064kB inactive_anon:23172kB active_file:65036kB inactive_file:145968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120488kB dirty:1072kB writeback:0kB shmem:4444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9892kB pagetables:2424kB all_unreclaimable? no [ 338.292952][ T8318] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 338.423715][ T8318] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 338.671231][ T8318] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 338.677063][ T8318] Node 0 DMA32 free:1553776kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1064kB inactive_anon:23164kB active_file:65092kB inactive_file:145920kB unevictable:1536kB writepending:1112kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:38688kB local_pcp:20428kB free_cma:0kB [ 338.750425][ T8318] lowmem_reserve[]: 0 0 0 0 0 [ 338.755258][ T8318] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 338.876614][ T8365] delete_channel: no stack [ 338.912546][ T8318] lowmem_reserve[]: 0 0 0 0 0 [ 338.917340][ T8318] Node 1 Normal free:3910952kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:11148kB local_pcp:1444kB free_cma:0kB [ 338.970555][ T8318] lowmem_reserve[]: 0 0 0 0 0 [ 338.975364][ T8318] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 339.004757][ T8372] __nla_validate_parse: 11 callbacks suppressed [ 339.004775][ T8372] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1468'. [ 339.270890][ T8318] Node 0 DMA32: 1018*4kB (UME) 905*8kB (UM) 644*16kB (UM) 790*32kB (UME) 1271*64kB (UME) 340*128kB (UME) 216*256kB (UME) 180*512kB (UM) 81*1024kB (UM) 16*2048kB (UME) 273*4096kB (UM) = 1553136kB [ 339.316119][ T8318] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 339.530601][ T8381] delete_channel: no stack [ 339.553151][ T8380] validate_nla: 10 callbacks suppressed [ 339.553219][ T8380] netlink: 'syz.3.1474': attribute type 9 has an invalid length. [ 339.606035][ T8380] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1474'. [ 339.716814][ T8318] Node 1 Normal: 108*4kB (UE) 37*8kB (UME) 23*16kB (UME) 125*32kB (UE) 53*64kB (UME) 18*128kB (UME) 7*256kB (UM) 4*512kB (UE) 1*1024kB (U) 2*2048kB (ME) 950*4096kB (M) = 3910952kB [ 339.762465][ T8387] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1477'. [ 339.877590][ T8318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 339.890387][ T8318] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 339.952718][ T8318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 339.980527][ T8318] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 340.103601][ T8389] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 340.110082][ T8389] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 340.147396][ T8318] 54433 total pagecache pages [ 340.172138][ T8391] netlink: 'syz.3.1480': attribute type 10 has an invalid length. [ 340.223145][ T8318] 0 pages in swap cache [ 340.297226][ T8318] Swap cache stats: add 0, delete 0, find 0/0 [ 340.360553][ T8394] delete_channel: no stack [ 340.370837][ T8318] Free swap = 124996kB [ 340.375184][ T8318] Total swap = 124996kB [ 340.379627][ T8318] 2097051 pages RAM [ 340.384055][ T8318] 0 pages HighMem/MovableOnly [ 340.389303][ T8318] 411490 pages reserved [ 340.394024][ T8318] 0 pages cma reserved [ 340.629887][ T8398] netlink: 'syz.2.1483': attribute type 39 has an invalid length. [ 340.671024][ T8400] netlink: 'syz.1.1484': attribute type 21 has an invalid length. [ 340.699288][ T8400] netlink: 14530 bytes leftover after parsing attributes in process `syz.1.1484'. [ 341.081572][ T8409] netlink: 'syz.0.1485': attribute type 9 has an invalid length. [ 341.093049][ T8417] netlink: 'syz.4.1488': attribute type 10 has an invalid length. [ 341.150655][ T8409] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1485'. [ 341.307570][ T8425] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 341.314265][ T8425] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 341.390747][ T8423] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1493'. [ 341.409364][ T8426] delete_channel: no stack [ 341.431297][ T8422] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1492'. [ 341.677060][ T8431] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1496'. [ 341.803436][ T8440] netlink: 'syz.2.1500': attribute type 39 has an invalid length. [ 342.273456][ T8456] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1505'. [ 342.284938][ T8457] netlink: 'syz.3.1506': attribute type 9 has an invalid length. [ 342.293444][ T8457] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1506'. [ 342.369765][ T8462] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 342.376305][ T8462] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 342.431403][ T8458] delete_channel: no stack [ 342.711118][ T8470] delete_channel: no stack [ 342.816077][ T8477] netlink: 'syz.1.1515': attribute type 39 has an invalid length. [ 343.494495][ T8506] delete_channel: no stack [ 343.629306][ T8505] netlink: 'syz.1.1524': attribute type 10 has an invalid length. [ 343.842870][ T8514] delete_channel: no stack [ 344.422515][ T8520] __nla_validate_parse: 3 callbacks suppressed [ 344.422555][ T8520] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1529'. [ 344.703705][ T8533] delete_channel: no stack [ 344.906463][ T8530] validate_nla: 2 callbacks suppressed [ 344.906532][ T8530] netlink: 'syz.0.1533': attribute type 10 has an invalid length. [ 345.060609][ T8541] netlink: 'syz.1.1540': attribute type 10 has an invalid length. [ 345.109533][ T8543] netlink: 'syz.2.1539': attribute type 10 has an invalid length. [ 345.843798][ T8551] netlink: 'syz.0.1542': attribute type 2 has an invalid length. [ 345.855196][ T8551] netlink: 'syz.0.1542': attribute type 8 has an invalid length. [ 345.864132][ T8551] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1542'. [ 345.890455][ T8555] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1544'. [ 345.903540][ T8563] netlink: 'syz.3.1546': attribute type 39 has an invalid length. [ 346.176808][ T8566] netlink: 'syz.4.1547': attribute type 10 has an invalid length. [ 346.317196][ T8572] delete_channel: no stack [ 346.368057][ T8571] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 346.375715][ T8571] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 346.449465][ T8580] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1553'. [ 346.482900][ T8580] openvswitch: netlink: Flow actions attr not present in new flow. [ 346.551502][ T8582] netlink: 'syz.3.1554': attribute type 2 has an invalid length. [ 346.579995][ T8582] netlink: 'syz.3.1554': attribute type 8 has an invalid length. [ 346.603738][ T8582] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1554'. [ 346.785978][ T8587] netlink: 'syz.2.1557': attribute type 10 has an invalid length. [ 347.082053][ T8593] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1560'. [ 347.250736][ T8589] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1558'. [ 347.496947][ T8600] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1562'. [ 348.017225][ T1475] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 348.279197][ T8621] FAULT_INJECTION: forcing a failure. [ 348.279197][ T8621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.313374][ T8621] CPU: 1 PID: 8621 Comm: syz.3.1570 Not tainted syzkaller #0 [ 348.320870][ T8621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 348.330983][ T8621] Call Trace: [ 348.334338][ T8621] [ 348.337325][ T8621] dump_stack_lvl+0x188/0x250 [ 348.342075][ T8621] ? show_regs_print_info+0x20/0x20 [ 348.347383][ T8621] ? load_image+0x400/0x400 [ 348.351969][ T8621] ? __lock_acquire+0x7d10/0x7d10 [ 348.357111][ T8621] should_fail+0x38c/0x4c0 [ 348.361642][ T8621] _copy_from_user+0x2e/0x170 [ 348.366414][ T8621] __copy_msghdr_from_user+0xc9/0x630 [ 348.372059][ T8621] ? verify_lock_unused+0x140/0x140 [ 348.377375][ T8621] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 348.382809][ T8621] ___sys_sendmsg+0x19a/0x2e0 [ 348.387618][ T8621] ? __sys_sendmsg+0x2a0/0x2a0 [ 348.392547][ T8621] ? vfs_write+0x8b2/0xd60 [ 348.397139][ T8621] __se_sys_sendmsg+0x1af/0x290 [ 348.402266][ T8621] ? __x64_sys_sendmsg+0x80/0x80 [ 348.407295][ T8621] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 348.413512][ T8621] ? lockdep_hardirqs_on+0x94/0x140 [ 348.418814][ T8621] do_syscall_64+0x4c/0xa0 [ 348.423287][ T8621] ? clear_bhb_loop+0x30/0x80 [ 348.428024][ T8621] ? clear_bhb_loop+0x30/0x80 [ 348.432809][ T8621] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 348.438961][ T8621] RIP: 0033:0x7f3bbb02b799 [ 348.443452][ T8621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.463215][ T8621] RSP: 002b:00007f3bb9285028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.471717][ T8621] RAX: ffffffffffffffda RBX: 00007f3bbb2a4fa0 RCX: 00007f3bbb02b799 [ 348.479857][ T8621] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000009 [ 348.488143][ T8621] RBP: 00007f3bb9285090 R08: 0000000000000000 R09: 0000000000000000 [ 348.496168][ T8621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.504206][ T8621] R13: 00007f3bbb2a5038 R14: 00007f3bbb2a4fa0 R15: 00007ffcd9ea8ba8 [ 348.512295][ T8621] [ 348.541697][ T8625] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1571'. [ 348.597815][ T8626] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1573'. [ 348.778891][ T8633] netlink: 'syz.3.1575': attribute type 11 has an invalid length. [ 349.115916][ T8638] device syzkaller0 entered promiscuous mode [ 349.573537][ T8648] __nla_validate_parse: 3 callbacks suppressed [ 349.573576][ T8648] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1580'. [ 349.845802][ T8658] FAULT_INJECTION: forcing a failure. [ 349.845802][ T8658] name failslab, interval 1, probability 0, space 0, times 0 [ 349.858894][ T8658] CPU: 1 PID: 8658 Comm: syz.2.1583 Not tainted syzkaller #0 [ 349.866317][ T8658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 349.876412][ T8658] Call Trace: [ 349.879730][ T8658] [ 349.882693][ T8658] dump_stack_lvl+0x188/0x250 [ 349.887407][ T8658] ? show_regs_print_info+0x20/0x20 [ 349.892728][ T8658] ? load_image+0x400/0x400 [ 349.897404][ T8658] ? __might_sleep+0xf0/0xf0 [ 349.902084][ T8658] ? __lock_acquire+0x7d10/0x7d10 [ 349.907150][ T8658] ? netlink_insert+0xe95/0x11f0 [ 349.912124][ T8658] should_fail+0x38c/0x4c0 [ 349.916590][ T8658] should_failslab+0x5/0x20 [ 349.921138][ T8658] slab_pre_alloc_hook+0x51/0xc0 [ 349.926308][ T8658] kmem_cache_alloc_node+0x47/0x2d0 [ 349.931554][ T8658] ? __alloc_skb+0xf4/0x750 [ 349.936119][ T8658] __alloc_skb+0xf4/0x750 [ 349.940510][ T8658] netlink_sendmsg+0x654/0xbe0 [ 349.945338][ T8658] ? netlink_getsockopt+0x570/0x570 [ 349.950579][ T8658] ? aa_sock_msg_perm+0x94/0x150 [ 349.955558][ T8658] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 349.960899][ T8658] ? security_socket_sendmsg+0x7c/0xa0 [ 349.966405][ T8658] ? netlink_getsockopt+0x570/0x570 [ 349.971641][ T8658] ____sys_sendmsg+0x5b7/0x8f0 [ 349.976454][ T8658] ? __sys_sendmsg_sock+0x30/0x30 [ 349.981533][ T8658] ? import_iovec+0x6f/0xa0 [ 349.986078][ T8658] ___sys_sendmsg+0x236/0x2e0 [ 349.990805][ T8658] ? __sys_sendmsg+0x2a0/0x2a0 [ 349.995622][ T8658] ? vfs_write+0x8b2/0xd60 [ 350.000101][ T8658] __se_sys_sendmsg+0x1af/0x290 [ 350.004990][ T8658] ? __x64_sys_sendmsg+0x80/0x80 [ 350.009964][ T8658] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 350.016006][ T8658] ? lockdep_hardirqs_on+0x94/0x140 [ 350.021251][ T8658] do_syscall_64+0x4c/0xa0 [ 350.025701][ T8658] ? clear_bhb_loop+0x30/0x80 [ 350.030405][ T8658] ? clear_bhb_loop+0x30/0x80 [ 350.035129][ T8658] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 350.041064][ T8658] RIP: 0033:0x7f73bd1e3799 [ 350.045511][ T8658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.065151][ T8658] RSP: 002b:00007f73bb43d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.073930][ T8658] RAX: ffffffffffffffda RBX: 00007f73bd45cfa0 RCX: 00007f73bd1e3799 [ 350.081959][ T8658] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 350.089977][ T8658] RBP: 00007f73bb43d090 R08: 0000000000000000 R09: 0000000000000000 [ 350.097984][ T8658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.106094][ T8658] R13: 00007f73bd45d038 R14: 00007f73bd45cfa0 R15: 00007ffee1e24b78 [ 350.114116][ T8658] [ 350.197419][ T8660] delete_channel: no stack [ 350.475842][ T8668] validate_nla: 14 callbacks suppressed [ 350.475908][ T8668] netlink: 'syz.3.1587': attribute type 9 has an invalid length. [ 350.497362][ T8668] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1587'. [ 351.194390][ T8675] netlink: 'syz.2.1590': attribute type 11 has an invalid length. [ 351.215795][ T8675] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1590'. [ 351.434769][ T8683] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 351.441954][ T8683] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 351.456287][ T8685] netlink: 'syz.3.1595': attribute type 9 has an invalid length. [ 351.489911][ T8685] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1595'. [ 351.565782][ T8688] netlink: 'syz.2.1596': attribute type 39 has an invalid length. [ 351.717318][ T8692] delete_channel: no stack [ 351.841310][ T8696] netlink: 'syz.0.1594': attribute type 10 has an invalid length. [ 351.945219][ T8700] delete_channel: no stack [ 351.975630][ T8699] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1599'. [ 351.975709][ T8703] netlink: 'syz.4.1600': attribute type 11 has an invalid length. [ 351.975751][ T8703] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.1600'. [ 352.112084][ T8703] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 353.079688][ T8714] netlink: 'syz.2.1603': attribute type 9 has an invalid length. [ 353.089756][ T8714] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1603'. [ 353.258687][ T8723] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 353.265842][ T8723] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 353.380584][ T8730] netlink: 'syz.3.1611': attribute type 9 has an invalid length. [ 353.399616][ T8727] netlink: 'syz.1.1608': attribute type 11 has an invalid length. [ 353.425662][ T8727] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1608'. [ 353.462536][ T8730] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1611'. [ 353.521252][ T8732] delete_channel: no stack [ 353.578757][ T8736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.817981][ T8737] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1614'. [ 353.834963][ T8741] netlink: 'syz.1.1615': attribute type 9 has an invalid length. [ 353.864881][ T8739] netlink: 'syz.4.1616': attribute type 2 has an invalid length. [ 354.271569][ T8754] netlink: 'syz.1.1620': attribute type 11 has an invalid length. [ 354.345645][ T8754] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 354.596949][ T8768] delete_channel: no stack [ 354.656489][ T8765] __nla_validate_parse: 4 callbacks suppressed [ 354.656508][ T8765] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1624'. [ 354.720672][ T8771] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1627'. [ 354.812130][ T8777] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1628'. [ 355.025958][ T8780] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1629'. [ 355.333947][ T8787] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1630'. [ 355.458826][ T8788] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1632'. [ 355.487114][ T8792] validate_nla: 7 callbacks suppressed [ 355.487135][ T8792] netlink: 'syz.3.1633': attribute type 10 has an invalid length. [ 355.620061][ T8797] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 355.627384][ T8797] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 355.703228][ T8800] netlink: 'syz.3.1637': attribute type 2 has an invalid length. [ 355.767678][ T8800] netlink: 'syz.3.1637': attribute type 8 has an invalid length. [ 355.795547][ T8800] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1637'. [ 355.806422][ T8801] delete_channel: no stack [ 356.142861][ T8814] netlink: 'syz.4.1642': attribute type 3 has an invalid length. [ 356.162041][ T8814] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1642'. [ 356.185316][ T8818] netlink: 'syz.2.1644': attribute type 9 has an invalid length. [ 356.218019][ T8818] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1644'. [ 356.753633][ T8826] netlink: 'syz.3.1647': attribute type 10 has an invalid length. [ 356.905371][ T8842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.921794][ T8842] netlink: 'syz.1.1652': attribute type 10 has an invalid length. [ 356.949356][ T8838] delete_channel: no stack [ 357.326626][ T8848] netlink: 'syz.2.1654': attribute type 10 has an invalid length. [ 357.396612][ T8857] netlink: 'syz.0.1658': attribute type 2 has an invalid length. [ 357.410954][ T8857] netlink: 'syz.0.1658': attribute type 8 has an invalid length. [ 357.418778][ T8857] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1658'. [ 357.947687][ T8873] delete_channel: no stack [ 357.965522][ T8876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.919169][ T8905] delete_channel: no stack [ 359.901574][ T8923] __nla_validate_parse: 4 callbacks suppressed [ 359.901596][ T8923] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1681'. [ 359.965917][ T8926] device syzkaller0 left promiscuous mode [ 360.164376][ T8937] FAULT_INJECTION: forcing a failure. [ 360.164376][ T8937] name failslab, interval 1, probability 0, space 0, times 0 [ 360.180000][ T8937] CPU: 0 PID: 8937 Comm: syz.1.1685 Not tainted syzkaller #0 [ 360.187455][ T8937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 360.197560][ T8937] Call Trace: [ 360.200942][ T8937] [ 360.203913][ T8937] dump_stack_lvl+0x188/0x250 [ 360.208641][ T8937] ? show_regs_print_info+0x20/0x20 [ 360.213983][ T8937] ? load_image+0x400/0x400 [ 360.218565][ T8937] should_fail+0x38c/0x4c0 [ 360.223038][ T8937] should_failslab+0x5/0x20 [ 360.227586][ T8937] slab_pre_alloc_hook+0x51/0xc0 [ 360.232567][ T8937] kmem_cache_alloc_trace+0x47/0x2a0 [ 360.237899][ T8937] ? tipc_sub_subscribe+0x115/0x760 [ 360.243153][ T8937] tipc_sub_subscribe+0x115/0x760 [ 360.248241][ T8937] tipc_conn_rcv_sub+0x136/0x350 [ 360.253240][ T8937] tipc_topsrv_kern_subscr+0x185/0x250 [ 360.258752][ T8937] ? conn_put+0x310/0x310 [ 360.263150][ T8937] tipc_group_create+0x360/0x4f0 [ 360.268163][ T8937] tipc_sk_join+0x24f/0x6a0 [ 360.272705][ T8937] ? lockdep_hardirqs_on+0x94/0x140 [ 360.277955][ T8937] ? __local_bh_enable_ip+0x136/0x1c0 [ 360.283375][ T8937] ? __tipc_sendstream+0x1270/0x1270 [ 360.288834][ T8937] tipc_setsockopt+0x6bf/0x960 [ 360.293666][ T8937] ? tipc_shutdown+0x4d0/0x4d0 [ 360.298589][ T8937] ? aa_sock_opt_perm+0x74/0x100 [ 360.303569][ T8937] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 360.309154][ T8937] ? security_socket_setsockopt+0x7a/0xa0 [ 360.315004][ T8937] ? tipc_shutdown+0x4d0/0x4d0 [ 360.319815][ T8937] __sys_setsockopt+0x2bf/0x3d0 [ 360.324804][ T8937] __x64_sys_setsockopt+0xb1/0xc0 [ 360.329886][ T8937] do_syscall_64+0x4c/0xa0 [ 360.334339][ T8937] ? clear_bhb_loop+0x30/0x80 [ 360.339045][ T8937] ? clear_bhb_loop+0x30/0x80 [ 360.343749][ T8937] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 360.349665][ T8937] RIP: 0033:0x7fcae2eb0799 [ 360.354106][ T8937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.373854][ T8937] RSP: 002b:00007fcae110a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 360.382308][ T8937] RAX: ffffffffffffffda RBX: 00007fcae3129fa0 RCX: 00007fcae2eb0799 [ 360.390311][ T8937] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 360.398310][ T8937] RBP: 00007fcae110a090 R08: 0000000000000043 R09: 0000000000000000 [ 360.406309][ T8937] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 360.414317][ T8937] R13: 00007fcae312a038 R14: 00007fcae3129fa0 R15: 00007ffc29ca7518 [ 360.422350][ T8937] [ 360.469061][ T8937] tipc: Subscription rejected, no memory [ 360.544246][ T8940] validate_nla: 9 callbacks suppressed [ 360.544264][ T8940] netlink: 'syz.4.1687': attribute type 10 has an invalid length. [ 360.729639][ T8947] delete_channel: no stack [ 360.739465][ T8948] netlink: 'syz.2.1691': attribute type 2 has an invalid length. [ 360.748738][ T8948] netlink: 'syz.2.1691': attribute type 8 has an invalid length. [ 360.764863][ T8948] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1691'. [ 360.931061][ T8958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.939032][ T8957] netlink: 'syz.4.1693': attribute type 2 has an invalid length. [ 360.965854][ T8957] netlink: 'syz.4.1693': attribute type 8 has an invalid length. [ 361.018841][ T8955] netlink: 'syz.3.1694': attribute type 9 has an invalid length. [ 361.036354][ T8957] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1693'. [ 361.047458][ T8955] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1694'. [ 361.059300][ T8958] netlink: 'syz.1.1695': attribute type 10 has an invalid length. [ 361.765796][ T8968] netlink: 'syz.4.1698': attribute type 9 has an invalid length. [ 361.784985][ T8968] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1698'. [ 361.806574][ T8967] netlink: 'syz.0.1696': attribute type 12 has an invalid length. [ 361.827595][ T8972] netlink: 'syz.2.1699': attribute type 9 has an invalid length. [ 361.853470][ T8972] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1699'. [ 361.926588][ T8967] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1696'. [ 361.943576][ T8977] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1701'. [ 361.958499][ T8977] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 362.330338][ T8983] delete_channel: no stack [ 362.614480][ T8996] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1708'. [ 362.618420][ T8999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.700946][ T652] wlan1: Trigger new scan to find an IBSS to join [ 362.811985][ T9002] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1712'. [ 363.648495][ T9018] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 363.836199][ T9020] delete_channel: no stack [ 364.517033][ T9042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.946371][ T9051] delete_channel: no stack [ 365.718925][ T9071] validate_nla: 16 callbacks suppressed [ 365.719160][ T9071] netlink: 'syz.3.1737': attribute type 10 has an invalid length. [ 366.340338][ T9083] netlink: 'syz.3.1749': attribute type 9 has an invalid length. [ 366.351472][ T9083] __nla_validate_parse: 10 callbacks suppressed [ 366.351538][ T9083] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1749'. [ 366.388999][ T9088] netlink: 'syz.2.1743': attribute type 3 has an invalid length. [ 366.400407][ T9088] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1743'. [ 366.460059][ T9084] delete_channel: no stack [ 366.831833][ T9102] netlink: 'syz.4.1748': attribute type 10 has an invalid length. [ 367.027499][ T9096] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1747'. [ 367.379850][ T9089] netlink: 'syz.0.1742': attribute type 3 has an invalid length. [ 367.411357][ T9089] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1742'. [ 367.444419][ T9107] FAULT_INJECTION: forcing a failure. [ 367.444419][ T9107] name failslab, interval 1, probability 0, space 0, times 0 [ 367.495465][ T9107] CPU: 1 PID: 9107 Comm: syz.1.1751 Not tainted syzkaller #0 [ 367.502912][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 367.513007][ T9107] Call Trace: [ 367.516316][ T9107] [ 367.519326][ T9107] dump_stack_lvl+0x188/0x250 [ 367.524045][ T9107] ? show_regs_print_info+0x20/0x20 [ 367.529288][ T9107] ? load_image+0x400/0x400 [ 367.533830][ T9107] ? __might_sleep+0xf0/0xf0 [ 367.538467][ T9107] ? __lock_acquire+0x7d10/0x7d10 [ 367.543540][ T9107] should_fail+0x38c/0x4c0 [ 367.548004][ T9107] should_failslab+0x5/0x20 [ 367.552551][ T9107] slab_pre_alloc_hook+0x51/0xc0 [ 367.557530][ T9107] ? trace_event_raw_event_sys_enter+0x140/0x140 [ 367.563907][ T9107] __kmalloc+0x6b/0x330 [ 367.568097][ T9107] ? tracepoint_add_func+0x2f9/0x990 [ 367.573517][ T9107] ? trace_event_raw_event_sys_enter+0x140/0x140 [ 367.579881][ T9107] tracepoint_add_func+0x2f9/0x990 [ 367.585038][ T9107] ? trace_event_raw_event_sys_enter+0x140/0x140 [ 367.591438][ T9107] tracepoint_probe_register+0x5a/0x90 [ 367.596941][ T9107] ? trace_event_raw_event_sys_enter+0x140/0x140 [ 367.603315][ T9107] perf_trace_event_init+0x518/0xa10 [ 367.608644][ T9107] perf_trace_init+0x234/0x2d0 [ 367.613445][ T9107] perf_tp_event_init+0x89/0x110 [ 367.618420][ T9107] perf_try_init_event+0x12b/0x3d0 [ 367.623593][ T9107] perf_event_alloc+0xfcf/0x2240 [ 367.628628][ T9107] __se_sys_perf_event_open+0x6f5/0x1bb0 [ 367.634313][ T9107] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 367.639997][ T9107] ? syscall_enter_from_user_mode+0x2a/0x70 [ 367.645929][ T9107] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 367.651617][ T9107] do_syscall_64+0x4c/0xa0 [ 367.656067][ T9107] ? clear_bhb_loop+0x30/0x80 [ 367.660770][ T9107] ? clear_bhb_loop+0x30/0x80 [ 367.665477][ T9107] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 367.671854][ T9107] RIP: 0033:0x7fcae2eb0799 [ 367.676302][ T9107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.691114][ T144] wlan1: Trigger new scan to find an IBSS to join [ 367.696092][ T9107] RSP: 002b:00007fcae110a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 367.710987][ T9107] RAX: ffffffffffffffda RBX: 00007fcae3129fa0 RCX: 00007fcae2eb0799 [ 367.719098][ T9107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 367.727107][ T9107] RBP: 00007fcae110a090 R08: 0000000000000000 R09: 0000000000000000 [ 367.735198][ T9107] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 367.743204][ T9107] R13: 00007fcae312a038 R14: 00007fcae3129fa0 R15: 00007ffc29ca7518 [ 367.751232][ T9107] [ 367.898037][ T9117] netlink: 'syz.3.1753': attribute type 2 has an invalid length. [ 367.966938][ T9117] netlink: 'syz.3.1753': attribute type 9 has an invalid length. [ 368.027331][ T9117] netlink: 'syz.3.1753': attribute type 10 has an invalid length. [ 368.067785][ T9117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1753'. [ 368.233922][ T9113] netlink: 'syz.0.1752': attribute type 10 has an invalid length. [ 368.332812][ T9129] netlink: 'syz.4.1757': attribute type 9 has an invalid length. [ 368.380643][ T9129] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1757'. [ 368.446178][ T9134] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1759'. [ 368.504612][ T9131] delete_channel: no stack [ 368.530370][ T9137] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 368.537480][ T9137] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 368.637730][ T652] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 368.678370][ T9141] netlink: 14542 bytes leftover after parsing attributes in process `syz.4.1762'. [ 368.857492][ T9143] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1763'. [ 369.133183][ T9153] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1767'. [ 370.009647][ T9178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.082056][ T9175] delete_channel: no stack [ 370.937934][ T9206] validate_nla: 14 callbacks suppressed [ 370.937995][ T9206] netlink: 'syz.3.1787': attribute type 2 has an invalid length. [ 370.967652][ T9206] netlink: 'syz.3.1787': attribute type 8 has an invalid length. [ 371.219955][ T9215] netlink: 'syz.4.1790': attribute type 9 has an invalid length. [ 371.279512][ T9218] delete_channel: no stack [ 371.454623][ T9227] netlink: 'syz.2.1794': attribute type 10 has an invalid length. [ 371.799018][ T9237] netlink: 'syz.3.1809': attribute type 2 has an invalid length. [ 371.813858][ T9237] netlink: 'syz.3.1809': attribute type 8 has an invalid length. [ 371.829983][ T9237] __nla_validate_parse: 8 callbacks suppressed [ 371.830020][ T9237] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1809'. [ 372.253681][ T9253] netlink: 'syz.2.1802': attribute type 21 has an invalid length. [ 372.264375][ T9253] netlink: 'syz.2.1802': attribute type 20 has an invalid length. [ 372.383645][ T9249] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1802'. [ 372.673960][ T9257] netlink: 'syz.1.1805': attribute type 9 has an invalid length. [ 372.705563][ T9258] delete_channel: no stack [ 372.712426][ T9257] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1805'. [ 373.013698][ T9272] netlink: 'syz.4.1808': attribute type 10 has an invalid length. [ 373.046301][ T9267] delete_channel: no stack [ 373.754634][ T9300] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1819'. [ 374.180568][ T9303] delete_channel: no stack [ 374.457099][ T9307] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1821'. [ 374.611577][ T9315] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 374.620522][ T9315] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 374.697675][ T9316] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1824'. [ 374.793430][ T9322] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1823'. [ 375.346954][ T9331] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1831'. [ 375.745552][ T9343] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1836'. [ 376.166255][ T9349] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 376.176048][ T9349] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 376.311813][ T9354] FAULT_INJECTION: forcing a failure. [ 376.311813][ T9354] name failslab, interval 1, probability 0, space 0, times 0 [ 376.348821][ T9354] CPU: 0 PID: 9354 Comm: syz.2.1841 Not tainted syzkaller #0 [ 376.356269][ T9354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 376.366388][ T9354] Call Trace: [ 376.369726][ T9354] [ 376.372692][ T9354] dump_stack_lvl+0x188/0x250 [ 376.377431][ T9354] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 376.383649][ T9354] ? show_regs_print_info+0x20/0x20 [ 376.388904][ T9354] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 376.395374][ T9354] should_fail+0x38c/0x4c0 [ 376.399845][ T9354] should_failslab+0x5/0x20 [ 376.404391][ T9354] slab_pre_alloc_hook+0x51/0xc0 [ 376.409371][ T9354] kmem_cache_alloc_node+0x47/0x2d0 [ 376.414619][ T9354] ? __alloc_skb+0xf4/0x750 [ 376.419173][ T9354] __alloc_skb+0xf4/0x750 [ 376.423542][ T9354] __ip_append_data+0x2105/0x32d0 [ 376.428639][ T9354] ? lockdep_hardirqs_on+0x94/0x140 [ 376.433879][ T9354] ? raw_send_hdrinc+0x1110/0x1110 [ 376.439031][ T9354] ? ip_setup_cork+0x890/0x890 [ 376.443833][ T9354] ? ip_setup_cork+0x496/0x890 [ 376.448638][ T9354] ip_append_data+0x132/0x1a0 [ 376.453432][ T9354] ? raw_send_hdrinc+0x1110/0x1110 [ 376.458585][ T9354] raw_sendmsg+0x1433/0x1aa0 [ 376.463232][ T9354] ? compat_raw_ioctl+0x60/0x60 [ 376.468120][ T9354] ? aa_sk_perm+0x1ae/0x910 [ 376.472705][ T9354] ? aa_sk_perm+0x7dc/0x910 [ 376.477254][ T9354] ? sock_rps_record_flow+0x17/0x3b0 [ 376.482576][ T9354] ? inet_sendmsg+0x78/0x2f0 [ 376.487199][ T9354] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 376.492600][ T9354] ? security_socket_sendmsg+0x7c/0xa0 [ 376.498106][ T9354] ? inet_send_prepare+0x260/0x260 [ 376.503253][ T9354] ____sys_sendmsg+0x5b7/0x8f0 [ 376.508089][ T9354] ? __sys_sendmsg_sock+0x30/0x30 [ 376.513160][ T9354] ? import_iovec+0x6f/0xa0 [ 376.517701][ T9354] ___sys_sendmsg+0x236/0x2e0 [ 376.522429][ T9354] ? __sys_sendmsg+0x2a0/0x2a0 [ 376.527280][ T9354] ? trace_event_raw_event_lock+0x270/0x270 [ 376.533307][ T9354] ? vfs_write+0x8b2/0xd60 [ 376.537812][ T9354] __se_sys_sendmsg+0x1af/0x290 [ 376.542720][ T9354] ? __x64_sys_sendmsg+0x80/0x80 [ 376.547689][ T9354] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 376.553729][ T9354] ? trace_sys_enter+0x1f/0x80 [ 376.558523][ T9354] do_syscall_64+0x4c/0xa0 [ 376.562967][ T9354] ? clear_bhb_loop+0x30/0x80 [ 376.567690][ T9354] ? clear_bhb_loop+0x30/0x80 [ 376.572395][ T9354] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.578317][ T9354] RIP: 0033:0x7f73bd1e3799 [ 376.582753][ T9354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.602385][ T9354] RSP: 002b:00007f73bb43d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.610828][ T9354] RAX: ffffffffffffffda RBX: 00007f73bd45cfa0 RCX: 00007f73bd1e3799 [ 376.618825][ T9354] RDX: 0000000004008804 RSI: 0000200000003a80 RDI: 0000000000000009 [ 376.626811][ T9354] RBP: 00007f73bb43d090 R08: 0000000000000000 R09: 0000000000000000 [ 376.634796][ T9354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.642831][ T9354] R13: 00007f73bd45d038 R14: 00007f73bd45cfa0 R15: 00007ffee1e24b78 [ 376.650933][ T9354] [ 376.682048][ T9363] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.1838'. [ 377.311986][ T9374] validate_nla: 9 callbacks suppressed [ 377.312005][ T9374] netlink: 'syz.2.1846': attribute type 10 has an invalid length. [ 377.434413][ T9384] netlink: 'syz.4.1851': attribute type 9 has an invalid length. [ 377.448770][ T9384] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1851'. [ 377.469549][ T9378] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1849'. [ 377.675929][ T9389] netlink: 'syz.2.1852': attribute type 3 has an invalid length. [ 377.684419][ T9389] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1852'. [ 378.222641][ T9375] delete_channel: no stack [ 378.375469][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.381960][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.474610][ T9406] FAULT_INJECTION: forcing a failure. [ 378.474610][ T9406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.488605][ T9406] CPU: 0 PID: 9406 Comm: syz.4.1860 Not tainted syzkaller #0 [ 378.496022][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 378.506109][ T9406] Call Trace: [ 378.509410][ T9406] [ 378.512353][ T9406] dump_stack_lvl+0x188/0x250 [ 378.517055][ T9406] ? show_regs_print_info+0x20/0x20 [ 378.522286][ T9406] ? load_image+0x400/0x400 [ 378.526809][ T9406] ? __lock_acquire+0x7d10/0x7d10 [ 378.531878][ T9406] should_fail+0x38c/0x4c0 [ 378.536324][ T9406] _copy_from_user+0x2e/0x170 [ 378.541197][ T9406] ____sys_sendmsg+0x30a/0x8f0 [ 378.545989][ T9406] ? __sys_sendmsg_sock+0x30/0x30 [ 378.551042][ T9406] ? import_iovec+0x6f/0xa0 [ 378.555565][ T9406] ___sys_sendmsg+0x236/0x2e0 [ 378.560271][ T9406] ? __sys_sendmsg+0x2a0/0x2a0 [ 378.565084][ T9406] ? vfs_write+0x8b2/0xd60 [ 378.569568][ T9406] __se_sys_sendmsg+0x1af/0x290 [ 378.574453][ T9406] ? __x64_sys_sendmsg+0x80/0x80 [ 378.579409][ T9406] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 378.585433][ T9406] ? trace_sys_enter+0x1f/0x80 [ 378.590224][ T9406] do_syscall_64+0x4c/0xa0 [ 378.594657][ T9406] ? clear_bhb_loop+0x30/0x80 [ 378.599365][ T9406] ? clear_bhb_loop+0x30/0x80 [ 378.604058][ T9406] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 378.609969][ T9406] RIP: 0033:0x7fca76156799 [ 378.614399][ T9406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.634105][ T9406] RSP: 002b:00007fca743b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.642552][ T9406] RAX: ffffffffffffffda RBX: 00007fca763cffa0 RCX: 00007fca76156799 [ 378.650541][ T9406] RDX: 000000000000ff00 RSI: 0000200000001180 RDI: 0000000000000003 [ 378.658532][ T9406] RBP: 00007fca743b0090 R08: 0000000000000000 R09: 0000000000000000 [ 378.666522][ T9406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.674501][ T9406] R13: 00007fca763d0038 R14: 00007fca763cffa0 R15: 00007ffede587c78 [ 378.682517][ T9406] [ 379.112229][ T9426] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1865'. [ 379.194083][ T9425] netlink: 'syz.3.1864': attribute type 10 has an invalid length. [ 379.402165][ T9429] delete_channel: no stack [ 379.486924][ T9435] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1870'. [ 379.574852][ T9437] netlink: 'syz.2.1871': attribute type 21 has an invalid length. [ 379.587933][ T9437] IPv6: NLM_F_CREATE should be specified when creating new route [ 379.769035][ T9450] netlink: 'syz.0.1867': attribute type 3 has an invalid length. [ 379.783661][ T9450] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1867'. [ 379.986856][ T9455] netlink: 'syz.3.1876': attribute type 2 has an invalid length. [ 380.010298][ T9455] netlink: 'syz.3.1876': attribute type 8 has an invalid length. [ 380.018182][ T9455] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1876'. [ 380.082064][ T9463] netlink: 'syz.0.1877': attribute type 2 has an invalid length. [ 380.103775][ T9463] netlink: 'syz.0.1877': attribute type 8 has an invalid length. [ 380.120781][ T9463] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1877'. [ 380.239355][ T9468] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1879'. [ 380.598431][ T9477] IPv6: NLM_F_CREATE should be specified when creating new route [ 380.613507][ T9475] delete_channel: no stack [ 380.619272][ T9477] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1884'. [ 381.400921][ T9507] FAULT_INJECTION: forcing a failure. [ 381.400921][ T9507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.430534][ T9507] CPU: 1 PID: 9507 Comm: syz.1.1896 Not tainted syzkaller #0 [ 381.437983][ T9507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.448084][ T9507] Call Trace: [ 381.451424][ T9507] [ 381.454390][ T9507] dump_stack_lvl+0x188/0x250 [ 381.459110][ T9507] ? show_regs_print_info+0x20/0x20 [ 381.464365][ T9507] ? load_image+0x400/0x400 [ 381.468917][ T9507] ? lockdep_hardirqs_on+0x94/0x140 [ 381.474177][ T9507] should_fail+0x38c/0x4c0 [ 381.478642][ T9507] _copy_from_iter+0x22e/0x1170 [ 381.483532][ T9507] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 381.489736][ T9507] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 381.495156][ T9507] ? __phys_addr_symbol+0x2b/0x70 [ 381.500220][ T9507] ? __check_object_size+0x30c/0x410 [ 381.505544][ T9507] netlink_sendmsg+0x758/0xbe0 [ 381.510347][ T9507] ? netlink_getsockopt+0x570/0x570 [ 381.515579][ T9507] ? aa_sock_msg_perm+0x94/0x150 [ 381.520553][ T9507] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 381.525873][ T9507] ? security_socket_sendmsg+0x7c/0xa0 [ 381.531367][ T9507] ? netlink_getsockopt+0x570/0x570 [ 381.536601][ T9507] ____sys_sendmsg+0x5b7/0x8f0 [ 381.541403][ T9507] ? __sys_sendmsg_sock+0x30/0x30 [ 381.546475][ T9507] ? import_iovec+0x6f/0xa0 [ 381.551022][ T9507] ___sys_sendmsg+0x236/0x2e0 [ 381.555749][ T9507] ? __sys_sendmsg+0x2a0/0x2a0 [ 381.560591][ T9507] __se_sys_sendmsg+0x1af/0x290 [ 381.565481][ T9507] ? __x64_sys_sendmsg+0x80/0x80 [ 381.570455][ T9507] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 381.576492][ T9507] ? trace_sys_enter+0x1f/0x80 [ 381.581287][ T9507] do_syscall_64+0x4c/0xa0 [ 381.585741][ T9507] ? clear_bhb_loop+0x30/0x80 [ 381.590451][ T9507] ? clear_bhb_loop+0x30/0x80 [ 381.595167][ T9507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 381.601097][ T9507] RIP: 0033:0x7fcae2eb0799 [ 381.605545][ T9507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.625191][ T9507] RSP: 002b:00007fcae110a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.633645][ T9507] RAX: ffffffffffffffda RBX: 00007fcae3129fa0 RCX: 00007fcae2eb0799 [ 381.641663][ T9507] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 381.649673][ T9507] RBP: 00007fcae110a090 R08: 0000000000000000 R09: 0000000000000000 [ 381.657701][ T9507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.665831][ T9507] R13: 00007fcae312a038 R14: 00007fcae3129fa0 R15: 00007ffc29ca7518 [ 381.674253][ T9507] [ 382.835046][ T9542] __nla_validate_parse: 7 callbacks suppressed [ 382.835069][ T9542] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1909'. [ 383.041502][ T9546] validate_nla: 5 callbacks suppressed [ 383.041524][ T9546] netlink: 'syz.1.1920': attribute type 2 has an invalid length. [ 383.130493][ T9546] netlink: 'syz.1.1920': attribute type 8 has an invalid length. [ 383.180717][ T9546] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1920'. [ 383.255538][ T9548] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1910'. [ 383.619304][ T9566] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1914'. [ 383.730855][ T9571] FAULT_INJECTION: forcing a failure. [ 383.730855][ T9571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.836971][ T9573] FAULT_INJECTION: forcing a failure. [ 383.836971][ T9573] name failslab, interval 1, probability 0, space 0, times 0 [ 383.898801][ T9573] CPU: 0 PID: 9573 Comm: syz.1.1918 Not tainted syzkaller #0 [ 383.906259][ T9573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 383.916399][ T9573] Call Trace: [ 383.919727][ T9573] [ 383.922707][ T9573] dump_stack_lvl+0x188/0x250 [ 383.927446][ T9573] ? show_regs_print_info+0x20/0x20 [ 383.932731][ T9573] ? load_image+0x400/0x400 [ 383.937306][ T9573] ? __might_sleep+0xf0/0xf0 [ 383.941969][ T9573] ? __lock_acquire+0x7d10/0x7d10 [ 383.947093][ T9573] should_fail+0x38c/0x4c0 [ 383.951585][ T9573] should_failslab+0x5/0x20 [ 383.956244][ T9573] slab_pre_alloc_hook+0x51/0xc0 [ 383.961275][ T9573] ? __d_alloc+0x2a/0x6f0 [ 383.965657][ T9573] kmem_cache_alloc+0x3d/0x290 [ 383.970490][ T9573] __d_alloc+0x2a/0x6f0 [ 383.974721][ T9573] d_alloc_pseudo+0x19/0x70 [ 383.979285][ T9573] alloc_file_pseudo+0xe0/0x200 [ 383.984212][ T9573] ? alloc_empty_file_noaccount+0x80/0x80 [ 383.989996][ T9573] ? _raw_spin_unlock+0x24/0x40 [ 383.994913][ T9573] ? alloc_fd+0x598/0x630 [ 383.999323][ T9573] __anon_inode_getfd+0x26b/0x3d0 [ 384.004413][ T9573] ? anon_inode_getfd+0x40/0x40 [ 384.009320][ T9573] ? bpf_lsm_bpf_map+0x5/0x10 [ 384.014073][ T9573] map_create+0x1a91/0x2350 [ 384.018664][ T9573] __sys_bpf+0x30a/0x6f0 [ 384.022968][ T9573] ? bpf_link_show_fdinfo+0x380/0x380 [ 384.028474][ T9573] __x64_sys_bpf+0x78/0x90 [ 384.032966][ T9573] do_syscall_64+0x4c/0xa0 [ 384.037443][ T9573] ? clear_bhb_loop+0x30/0x80 [ 384.042171][ T9573] ? clear_bhb_loop+0x30/0x80 [ 384.046904][ T9573] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 384.052846][ T9573] RIP: 0033:0x7fcae2eb0799 [ 384.057322][ T9573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.076981][ T9573] RSP: 002b:00007fcae110a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.085461][ T9573] RAX: ffffffffffffffda RBX: 00007fcae3129fa0 RCX: 00007fcae2eb0799 [ 384.093575][ T9573] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 384.101599][ T9573] RBP: 00007fcae110a090 R08: 0000000000000000 R09: 0000000000000000 [ 384.109623][ T9573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.117646][ T9573] R13: 00007fcae312a038 R14: 00007fcae3129fa0 R15: 00007ffc29ca7518 [ 384.125781][ T9573] [ 384.182518][ T9571] CPU: 0 PID: 9571 Comm: syz.0.1913 Not tainted syzkaller #0 [ 384.189968][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 384.200090][ T9571] Call Trace: [ 384.203428][ T9571] [ 384.206409][ T9571] dump_stack_lvl+0x188/0x250 [ 384.211240][ T9571] ? show_regs_print_info+0x20/0x20 [ 384.216508][ T9571] ? load_image+0x400/0x400 [ 384.221101][ T9571] ? __lock_acquire+0x7d10/0x7d10 [ 384.226210][ T9571] should_fail+0x38c/0x4c0 [ 384.230703][ T9571] _copy_from_user+0x2e/0x170 [ 384.235448][ T9571] ____sys_sendmsg+0x30a/0x8f0 [ 384.240296][ T9571] ? __sys_sendmsg_sock+0x30/0x30 [ 384.245413][ T9571] ? import_iovec+0x6f/0xa0 [ 384.249986][ T9571] ___sys_sendmsg+0x236/0x2e0 [ 384.254737][ T9571] ? __sys_sendmsg+0x2a0/0x2a0 [ 384.259572][ T9571] ? vfs_write+0x8b2/0xd60 [ 384.264184][ T9571] __se_sys_sendmsg+0x1af/0x290 [ 384.269090][ T9571] ? __x64_sys_sendmsg+0x80/0x80 [ 384.274071][ T9571] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 384.280134][ T9571] ? trace_sys_enter+0x1f/0x80 [ 384.284944][ T9571] do_syscall_64+0x4c/0xa0 [ 384.289391][ T9571] ? clear_bhb_loop+0x30/0x80 [ 384.294100][ T9571] ? clear_bhb_loop+0x30/0x80 [ 384.298810][ T9571] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 384.304822][ T9571] RIP: 0033:0x7f3a61578799 [ 384.309282][ T9571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.328926][ T9571] RSP: 002b:00007f3a5f7d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.337399][ T9571] RAX: ffffffffffffffda RBX: 00007f3a617f1fa0 RCX: 00007f3a61578799 [ 384.345509][ T9571] RDX: 000000000000ff00 RSI: 0000200000001180 RDI: 0000000000000005 [ 384.353534][ T9571] RBP: 00007f3a5f7d2090 R08: 0000000000000000 R09: 0000000000000000 [ 384.361977][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.370056][ T9571] R13: 00007f3a617f2038 R14: 00007f3a617f1fa0 R15: 00007fff06b5b9c8 [ 384.378110][ T9571] [ 384.526231][ T9584] netlink: 'syz.3.1923': attribute type 2 has an invalid length. [ 384.555950][ T9584] netlink: 'syz.3.1923': attribute type 8 has an invalid length. [ 384.575387][ T9584] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1923'. [ 384.598405][ T9587] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1924'. [ 384.760795][ T9587] Ÿë: port 1(ip6gretap0) entered blocking state [ 384.799209][ T9587] Ÿë: port 1(ip6gretap0) entered disabled state [ 384.820644][ T9587] device ip6gretap0 entered promiscuous mode [ 384.865429][ T9590] netlink: 'syz.4.1921': attribute type 10 has an invalid length. [ 385.422218][ T9603] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1932'. [ 385.604254][ T9612] netlink: 'syz.3.1934': attribute type 9 has an invalid length. [ 385.614187][ T9612] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1934'. [ 385.659566][ T9617] netlink: 'syz.4.1936': attribute type 9 has an invalid length. [ 385.670647][ T9617] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1936'. [ 385.841571][ T9615] netlink: 'syz.2.1935': attribute type 10 has an invalid length. [ 385.983097][ T9628] netlink: 'syz.3.1937': attribute type 10 has an invalid length. [ 386.448644][ T9645] netlink: 'syz.0.1944': attribute type 2 has an invalid length. [ 386.457607][ T9645] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1944'. [ 386.613670][ T9648] delete_channel: no stack [ 387.463368][ T9676] team0: Device hsr_slave_0 failed to register rx_handler [ 388.049536][ T9687] __nla_validate_parse: 5 callbacks suppressed [ 388.049600][ T9687] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1962'. [ 388.204851][ T9693] validate_nla: 10 callbacks suppressed [ 388.204889][ T9693] netlink: 'syz.4.1965': attribute type 2 has an invalid length. [ 388.231374][ T9693] netlink: 'syz.4.1965': attribute type 8 has an invalid length. [ 388.239350][ T9693] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1965'. [ 388.338670][ T9696] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1964'. [ 388.423141][ T9702] netlink: 'syz.2.1968': attribute type 39 has an invalid length. [ 388.554432][ T9704] netlink: 'syz.1.1967': attribute type 10 has an invalid length. [ 390.248375][ T9728] netlink: 'syz.4.1975': attribute type 21 has an invalid length. [ 390.300474][ T9728] netlink: 14542 bytes leftover after parsing attributes in process `syz.4.1975'. [ 390.347597][ T9731] netlink: 'syz.1.1977': attribute type 9 has an invalid length. [ 390.380334][ T9731] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1977'. [ 390.557822][ T9734] device syzkaller0 left promiscuous mode [ 390.657908][ T9737] netlink: 'syz.2.1979': attribute type 3 has an invalid length. [ 390.681835][ T9736] netlink: 'syz.0.1978': attribute type 9 has an invalid length. [ 390.689631][ T9736] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1978'. [ 390.726616][ T9737] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1979'. [ 390.945248][ T9744] netlink: 'syz.4.1981': attribute type 39 has an invalid length. [ 391.250657][ T9756] netlink: 'syz.1.1984': attribute type 2 has an invalid length. [ 391.258462][ T9756] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1984'. [ 391.375656][ T9753] delete_channel: no stack [ 391.571982][ T9768] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1988'. [ 391.740439][ T9768] Ÿë: port 1(ip6gretap0) entered blocking state [ 391.777595][ T9768] Ÿë: port 1(ip6gretap0) entered disabled state [ 391.889425][ T9768] device ip6gretap0 entered promiscuous mode [ 392.215149][ T9779] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1993'. [ 392.358974][ T9776] delete_channel: no stack [ 392.742612][ T9790] device syzkaller0 entered promiscuous mode [ 393.164974][ T9805] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2003'. [ 393.267753][ T9807] validate_nla: 7 callbacks suppressed [ 393.267819][ T9807] netlink: 'syz.3.2005': attribute type 9 has an invalid length. [ 393.290873][ T9807] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2005'. [ 393.698245][ T9813] netlink: 'syz.0.2004': attribute type 2 has an invalid length. [ 393.721083][ T9813] netlink: 'syz.0.2004': attribute type 8 has an invalid length. [ 393.728862][ T9813] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2004'. [ 393.839063][ T9819] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.2007'. [ 394.115405][ T9827] netlink: 'syz.2.2009': attribute type 10 has an invalid length. [ 394.141042][ T9828] netlink: 'syz.3.2008': attribute type 10 has an invalid length. [ 394.336849][ T9832] netlink: 'syz.1.2010': attribute type 39 has an invalid length. [ 394.477680][ T9834] delete_channel: no stack [ 394.743282][ T9840] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2013'. [ 394.803139][ T9851] FAULT_INJECTION: forcing a failure. [ 394.803139][ T9851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.836462][ T9851] CPU: 1 PID: 9851 Comm: syz.0.2016 Not tainted syzkaller #0 [ 394.843933][ T9851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.854151][ T9851] Call Trace: [ 394.857467][ T9851] [ 394.860426][ T9851] dump_stack_lvl+0x188/0x250 [ 394.865149][ T9851] ? show_regs_print_info+0x20/0x20 [ 394.870409][ T9851] ? load_image+0x400/0x400 [ 394.874956][ T9851] ? __lock_acquire+0x7d10/0x7d10 [ 394.880030][ T9851] ? perf_trace_lock_acquire+0xed/0x3e0 [ 394.885626][ T9851] should_fail+0x38c/0x4c0 [ 394.890090][ T9851] _copy_from_user+0x2e/0x170 [ 394.894819][ T9851] iovec_from_user+0x142/0x370 [ 394.899622][ T9851] __import_iovec+0x70/0x490 [ 394.904251][ T9851] import_iovec+0x6f/0xa0 [ 394.908626][ T9851] ___sys_sendmsg+0x1fd/0x2e0 [ 394.913334][ T9851] ? __sys_sendmsg+0x2a0/0x2a0 [ 394.918143][ T9851] ? vfs_write+0x8b2/0xd60 [ 394.922604][ T9851] __se_sys_sendmsg+0x1af/0x290 [ 394.927479][ T9851] ? __x64_sys_sendmsg+0x80/0x80 [ 394.932434][ T9851] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 394.938450][ T9851] ? trace_sys_enter+0x1f/0x80 [ 394.943239][ T9851] do_syscall_64+0x4c/0xa0 [ 394.947696][ T9851] ? clear_bhb_loop+0x30/0x80 [ 394.952393][ T9851] ? clear_bhb_loop+0x30/0x80 [ 394.957085][ T9851] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 394.962993][ T9851] RIP: 0033:0x7f3a61578799 [ 394.967434][ T9851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.987063][ T9851] RSP: 002b:00007f3a5f7d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.995502][ T9851] RAX: ffffffffffffffda RBX: 00007f3a617f1fa0 RCX: 00007f3a61578799 [ 395.003497][ T9851] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 395.011485][ T9851] RBP: 00007f3a5f7d2090 R08: 0000000000000000 R09: 0000000000000000 [ 395.019477][ T9851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.027456][ T9851] R13: 00007f3a617f2038 R14: 00007f3a617f1fa0 R15: 00007fff06b5b9c8 [ 395.035465][ T9851] [ 395.128127][ T9850] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2018'. [ 395.461592][ T9861] netlink: 'syz.1.2020': attribute type 9 has an invalid length. [ 395.469667][ T9861] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2020'. [ 395.764485][ T9850] team0: Port device team_slave_0 removed [ 395.808081][ T9850] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 396.172901][ T9872] netlink: 'syz.1.2024': attribute type 39 has an invalid length. [ 396.327804][ T9883] netlink: 'syz.3.2026': attribute type 10 has an invalid length. [ 396.426961][ T9879] netlink: 'syz.0.2022': attribute type 10 has an invalid length. [ 396.481198][ T9877] delete_channel: no stack [ 397.096450][ T9891] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2030'. [ 397.821606][ T9920] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2039'. [ 397.948418][ T9918] delete_channel: no stack [ 398.258679][ T9932] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2044'. [ 398.352664][ T9938] validate_nla: 5 callbacks suppressed [ 398.352702][ T9938] netlink: 'syz.3.2045': attribute type 3 has an invalid length. [ 398.381607][ T9938] netlink: 'syz.3.2045': attribute type 8 has an invalid length. [ 398.394239][ T9938] netlink: 'syz.3.2045': attribute type 6 has an invalid length. [ 398.417507][ T9938] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.2045'. [ 398.437472][ T9939] netlink: 'syz.4.2046': attribute type 10 has an invalid length. [ 398.705161][ T1475] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 398.719404][ T9948] netlink: 'syz.3.2049': attribute type 10 has an invalid length. [ 399.493303][ T9966] netlink: 'syz.1.2056': attribute type 9 has an invalid length. [ 399.514860][ T9966] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2056'. [ 399.578362][ T9968] delete_channel: no stack [ 399.642363][ T9970] netlink: 'syz.4.2057': attribute type 39 has an invalid length. [ 399.829987][ T9976] netlink: 'syz.1.2061': attribute type 10 has an invalid length. [ 399.898953][ T9974] netlink: 'syz.3.2058': attribute type 10 has an invalid length. [ 400.057391][ T9984] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2062'. [ 400.119610][ T9984] device team_slave_0 left promiscuous mode [ 400.414660][ T9998] FAULT_INJECTION: forcing a failure. [ 400.414660][ T9998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.508534][ T9998] CPU: 0 PID: 9998 Comm: syz.3.2066 Not tainted syzkaller #0 [ 400.516086][ T9998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.526205][ T9998] Call Trace: [ 400.529617][ T9998] [ 400.532593][ T9998] dump_stack_lvl+0x188/0x250 [ 400.537332][ T9998] ? show_regs_print_info+0x20/0x20 [ 400.542600][ T9998] ? load_image+0x400/0x400 [ 400.547170][ T9998] ? __lock_acquire+0x7d10/0x7d10 [ 400.552252][ T9998] ? vfs_write+0x8b2/0xd60 [ 400.556749][ T9998] should_fail+0x38c/0x4c0 [ 400.561297][ T9998] _copy_from_user+0x2e/0x170 [ 400.566032][ T9998] __sys_bpf+0x26d/0x6f0 [ 400.570441][ T9998] ? bpf_link_show_fdinfo+0x380/0x380 [ 400.575914][ T9998] ? vtime_user_exit+0x2c8/0x3e0 [ 400.581108][ T9998] __x64_sys_bpf+0x78/0x90 [ 400.585626][ T9998] do_syscall_64+0x4c/0xa0 [ 400.590106][ T9998] ? clear_bhb_loop+0x30/0x80 [ 400.594835][ T9998] ? clear_bhb_loop+0x30/0x80 [ 400.599571][ T9998] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 400.605518][ T9998] RIP: 0033:0x7f3bbb02b799 [ 400.610000][ T9998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.629669][ T9998] RSP: 002b:00007f3bb9264028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 400.638146][ T9998] RAX: ffffffffffffffda RBX: 00007f3bbb2a5090 RCX: 00007f3bbb02b799 [ 400.646178][ T9998] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 400.654203][ T9998] RBP: 00007f3bb9264090 R08: 0000000000000000 R09: 0000000000000000 [ 400.662232][ T9998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.670268][ T9998] R13: 00007f3bbb2a5128 R14: 00007f3bbb2a5090 R15: 00007ffcd9ea8ba8 [ 400.678354][ T9998] [ 400.872125][ T9984] team0: Port device team_slave_0 removed [ 400.894585][ T9984] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 400.984118][ T9992] netlink: 'syz.2.2065': attribute type 2 has an invalid length. [ 401.100910][ T9992] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2065'. [ 401.250070][T10003] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2068'. [ 401.432200][T10012] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2071'. [ 401.492723][T10009] delete_channel: no stack [ 402.046047][T10024] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2075'. [ 402.077409][ T26] audit: type=1800 audit(1773203878.174:2): pid=10005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2067" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 402.111275][T10005] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 402.128726][T10005] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 402.139331][T10005] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 402.480541][T10033] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2079'. [ 402.635820][T10005] syz.0.2067 (10005) used greatest stack depth: 16728 bytes left [ 403.002497][T10047] delete_channel: no stack [ 403.003472][T10048] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2083'. [ 403.652999][T10055] validate_nla: 10 callbacks suppressed [ 403.653016][T10055] netlink: 'syz.1.2086': attribute type 9 has an invalid length. [ 403.679842][T10061] netlink: 'syz.2.2088': attribute type 10 has an invalid length. [ 403.688038][T10055] __nla_validate_parse: 1 callbacks suppressed [ 403.688057][T10055] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2086'. [ 403.857926][T10067] netlink: 'syz.4.2087': attribute type 10 has an invalid length. [ 403.994647][T10068] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2089'. [ 404.245833][T10079] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2091'. [ 404.310055][T10078] netlink: 'syz.3.2094': attribute type 10 has an invalid length. [ 404.338377][T10078] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2094'. [ 404.528356][T10083] delete_channel: no stack [ 404.596377][T10071] FAULT_INJECTION: forcing a failure. [ 404.596377][T10071] name failslab, interval 1, probability 0, space 0, times 0 [ 404.621241][T10071] CPU: 1 PID: 10071 Comm: syz.0.2091 Not tainted syzkaller #0 [ 404.628766][T10071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 404.638857][T10071] Call Trace: [ 404.642163][T10071] [ 404.645117][T10071] dump_stack_lvl+0x188/0x250 [ 404.649818][T10071] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 404.656016][T10071] ? show_regs_print_info+0x20/0x20 [ 404.661249][T10071] ? load_image+0x400/0x400 [ 404.665793][T10071] should_fail+0x38c/0x4c0 [ 404.670250][T10071] should_failslab+0x5/0x20 [ 404.674787][T10071] slab_pre_alloc_hook+0x51/0xc0 [ 404.679755][T10071] kmem_cache_alloc_node_trace+0x4a/0x300 [ 404.685499][T10071] ? __get_vm_area_node+0x119/0x2d0 [ 404.690735][T10071] __get_vm_area_node+0x119/0x2d0 [ 404.695791][T10071] __vmalloc_node_range+0xef/0x8b0 [ 404.700951][T10071] ? netlink_sendmsg+0x5ec/0xbe0 [ 404.705921][T10071] ? netlink_data_ready+0x10/0x10 [ 404.710986][T10071] ? netlink_sendmsg+0x5ec/0xbe0 [ 404.715958][T10071] vmalloc+0x75/0x80 [ 404.719890][T10071] ? netlink_sendmsg+0x5ec/0xbe0 [ 404.724868][T10071] netlink_sendmsg+0x5ec/0xbe0 [ 404.729677][T10071] ? netlink_getsockopt+0x570/0x570 [ 404.734915][T10071] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 404.740236][T10071] ? security_socket_sendmsg+0x7c/0xa0 [ 404.745744][T10071] sock_write_iter+0x2a6/0x3a0 [ 404.750547][T10071] ? sock_read_iter+0x380/0x380 [ 404.755418][T10071] ? lockdep_hardirqs_on+0x94/0x140 [ 404.760669][T10071] ? memset+0x1e/0x40 [ 404.764679][T10071] ? iov_iter_init+0xb4/0x170 [ 404.769389][T10071] vfs_write+0x745/0xd60 [ 404.773665][T10071] ? file_end_write+0x250/0x250 [ 404.778560][T10071] ? __fget_files+0x40f/0x480 [ 404.783286][T10071] ? __fdget_pos+0x1e2/0x370 [ 404.787907][T10071] ? ksys_write+0x71/0x260 [ 404.792370][T10071] ksys_write+0x152/0x260 [ 404.796738][T10071] ? __ia32_sys_read+0x80/0x80 [ 404.801547][T10071] ? trace_sys_enter+0x1f/0x80 [ 404.806344][T10071] do_syscall_64+0x4c/0xa0 [ 404.810791][T10071] ? clear_bhb_loop+0x30/0x80 [ 404.815499][T10071] ? clear_bhb_loop+0x30/0x80 [ 404.820205][T10071] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 404.826129][T10071] RIP: 0033:0x7f3a61578799 [ 404.830605][T10071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.850242][T10071] RSP: 002b:00007f3a5f7d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 404.858714][T10071] RAX: ffffffffffffffda RBX: 00007f3a617f1fa0 RCX: 00007f3a61578799 [ 404.866729][T10071] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000008 [ 404.874741][T10071] RBP: 00007f3a5f7d2090 R08: 0000000000000000 R09: 0000000000000000 [ 404.882762][T10071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.890769][T10071] R13: 00007f3a617f2038 R14: 00007f3a617f1fa0 R15: 00007fff06b5b9c8 [ 404.898795][T10071] [ 404.966274][T10092] netlink: 'syz.4.2107': attribute type 10 has an invalid length. [ 404.979530][T10092] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2107'. [ 405.023474][T10071] syz.0.2091: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 405.113390][T10071] CPU: 0 PID: 10071 Comm: syz.0.2091 Not tainted syzkaller #0 [ 405.121113][T10071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 405.131230][T10071] Call Trace: [ 405.134553][T10071] [ 405.137530][T10071] dump_stack_lvl+0x188/0x250 [ 405.142267][T10071] ? rcu_lock_release+0x5/0x20 [ 405.147101][T10071] ? show_regs_print_info+0x20/0x20 [ 405.152370][T10071] ? load_image+0x400/0x400 [ 405.156983][T10071] warn_alloc+0x243/0x320 [ 405.161400][T10071] ? zone_watermark_ok_safe+0x240/0x240 [ 405.167023][T10071] ? kmem_cache_alloc_node_trace+0x16c/0x300 [ 405.173067][T10071] ? __get_vm_area_node+0x119/0x2d0 [ 405.178388][T10071] __vmalloc_node_range+0x2b1/0x8b0 [ 405.183646][T10071] ? netlink_data_ready+0x10/0x10 [ 405.188771][T10071] ? netlink_sendmsg+0x5ec/0xbe0 [ 405.193775][T10071] vmalloc+0x75/0x80 [ 405.197747][T10071] ? netlink_sendmsg+0x5ec/0xbe0 [ 405.202763][T10071] netlink_sendmsg+0x5ec/0xbe0 [ 405.207624][T10071] ? netlink_getsockopt+0x570/0x570 [ 405.212913][T10071] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 405.218253][T10071] ? security_socket_sendmsg+0x7c/0xa0 [ 405.223882][T10071] sock_write_iter+0x2a6/0x3a0 [ 405.228715][T10071] ? sock_read_iter+0x380/0x380 [ 405.233617][T10071] ? lockdep_hardirqs_on+0x94/0x140 [ 405.238915][T10071] ? memset+0x1e/0x40 [ 405.242963][T10071] ? iov_iter_init+0xb4/0x170 [ 405.247715][T10071] vfs_write+0x745/0xd60 [ 405.252045][T10071] ? file_end_write+0x250/0x250 [ 405.256977][T10071] ? __fget_files+0x40f/0x480 [ 405.261749][T10071] ? __fdget_pos+0x1e2/0x370 [ 405.266399][T10071] ? ksys_write+0x71/0x260 [ 405.270880][T10071] ksys_write+0x152/0x260 [ 405.275276][T10071] ? __ia32_sys_read+0x80/0x80 [ 405.280126][T10071] ? trace_sys_enter+0x1f/0x80 [ 405.285041][T10071] do_syscall_64+0x4c/0xa0 [ 405.289506][T10071] ? clear_bhb_loop+0x30/0x80 [ 405.294232][T10071] ? clear_bhb_loop+0x30/0x80 [ 405.298973][T10071] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 405.304937][T10071] RIP: 0033:0x7f3a61578799 [ 405.309415][T10071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.329074][T10071] RSP: 002b:00007f3a5f7d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.337565][T10071] RAX: ffffffffffffffda RBX: 00007f3a617f1fa0 RCX: 00007f3a61578799 [ 405.345590][T10071] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000008 [ 405.353836][T10071] RBP: 00007f3a5f7d2090 R08: 0000000000000000 R09: 0000000000000000 [ 405.361863][T10071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.369891][T10071] R13: 00007f3a617f2038 R14: 00007f3a617f1fa0 R15: 00007fff06b5b9c8 [ 405.377989][T10071] [ 405.407497][T10095] netlink: 'syz.2.2098': attribute type 2 has an invalid length. [ 405.439128][T10095] netlink: 'syz.2.2098': attribute type 8 has an invalid length. [ 405.472170][T10095] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2098'. [ 405.712950][T10071] Mem-Info: [ 405.716311][T10071] active_anon:275 inactive_anon:18208 isolated_anon:0 [ 405.716311][T10071] active_file:18373 inactive_file:39721 isolated_file:0 [ 405.716311][T10071] unevictable:768 dirty:214 writeback:0 [ 405.716311][T10071] slab_reclaimable:22424 slab_unreclaimable:100007 [ 405.716311][T10071] mapped:40442 shmem:13856 pagetables:674 bounce:0 [ 405.716311][T10071] kernel_misc_reclaimable:0 [ 405.716311][T10071] free:1354678 free_pcp:7470 free_cma:0 [ 405.870669][T10071] Node 0 active_anon:1068kB inactive_anon:74424kB active_file:73292kB inactive_file:158884kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:161768kB dirty:852kB writeback:0kB shmem:55548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9768kB pagetables:2596kB all_unreclaimable? no [ 406.179600][T10112] netlink: 'syz.3.2103': attribute type 9 has an invalid length. [ 406.219442][T10112] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2103'. [ 406.240641][T10109] netlink: 'syz.2.2100': attribute type 10 has an invalid length. [ 406.530271][T10071] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 406.530962][T10110] netlink: 'syz.4.2102': attribute type 9 has an invalid length. [ 406.669008][T10110] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2102'. [ 406.769692][T10116] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2104'. [ 407.097651][T10071] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 407.155861][T10124] delete_channel: no stack [ 407.175923][T10129] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2112'. [ 407.215740][T10071] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 407.222666][T10071] Node 0 DMA32 free:1476284kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1068kB inactive_anon:86892kB active_file:73292kB inactive_file:158884kB unevictable:1536kB writepending:436kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:21356kB local_pcp:7788kB free_cma:0kB [ 407.340789][T10071] lowmem_reserve[]: 0 0 0 0 0 [ 407.345856][T10071] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 407.380949][T10071] lowmem_reserve[]: 0 0 0 0 0 [ 407.387952][T10071] Node 1 Normal free:3911208kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:10956kB local_pcp:9704kB free_cma:0kB [ 407.433219][T10071] lowmem_reserve[]: 0 0 0 0 0 [ 407.451471][T10071] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 407.681090][T10142] FAULT_INJECTION: forcing a failure. [ 407.681090][T10142] name failslab, interval 1, probability 0, space 0, times 0 [ 407.720536][T10142] CPU: 0 PID: 10142 Comm: syz.3.2117 Not tainted syzkaller #0 [ 407.728073][T10142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.738180][T10142] Call Trace: [ 407.741505][T10142] [ 407.744481][T10142] dump_stack_lvl+0x188/0x250 [ 407.749221][T10142] ? show_regs_print_info+0x20/0x20 [ 407.754487][T10142] ? load_image+0x400/0x400 [ 407.759052][T10142] ? __might_sleep+0xf0/0xf0 [ 407.763706][T10142] ? __lock_acquire+0x7d10/0x7d10 [ 407.768786][T10142] ? mark_lock+0x94/0x320 [ 407.773185][T10142] should_fail+0x38c/0x4c0 [ 407.777701][T10142] should_failslab+0x5/0x20 [ 407.782254][T10142] slab_pre_alloc_hook+0x51/0xc0 [ 407.787256][T10142] __kmalloc+0x6b/0x330 [ 407.791459][T10142] ? tomoyo_realpath_from_path+0x118/0x610 [ 407.797347][T10142] tomoyo_realpath_from_path+0x118/0x610 [ 407.803198][T10142] tomoyo_path_number_perm+0x242/0x660 [ 407.808754][T10142] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 407.814475][T10142] security_file_ioctl+0x6c/0xa0 [ 407.819479][T10142] __se_sys_ioctl+0x48/0x170 [ 407.824156][T10142] do_syscall_64+0x4c/0xa0 [ 407.828665][T10142] ? clear_bhb_loop+0x30/0x80 [ 407.833395][T10142] ? clear_bhb_loop+0x30/0x80 [ 407.838133][T10142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 407.844076][T10142] RIP: 0033:0x7f3bbb02b799 [ 407.848541][T10142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.868286][T10142] RSP: 002b:00007f3bb9285028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.876762][T10142] RAX: ffffffffffffffda RBX: 00007f3bbb2a4fa0 RCX: 00007f3bbb02b799 [ 407.884791][T10142] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 407.885128][T10071] Node 0 [ 407.892806][T10142] RBP: 00007f3bb9285090 R08: 0000000000000000 R09: 0000000000000000 [ 407.892843][T10142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.892861][T10142] R13: 00007f3bbb2a5038 R14: 00007f3bbb2a4fa0 R15: 00007ffcd9ea8ba8 [ 407.892940][T10142] [ 408.103890][T10142] ERROR: Out of memory at tomoyo_realpath_from_path. [ 408.209719][T10071] DMA32: 2*4kB (ME) 161*8kB (UE) 47*16kB (UM) 2*32kB (ME) 1035*64kB (U) 354*128kB (UM) 191*256kB (UME) 164*512kB (UME) 75*1024kB (UME) 16*2048kB (UME) 272*4096kB (M) = 1470208kB [ 408.430304][T10071] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 408.472901][T10071] Node 1 Normal: 108*4kB (UE) 37*8kB (UME) 23*16kB (UME) 129*32kB (UE) 53*64kB (UME) 17*128kB (UME) 6*256kB (UM) 5*512kB (UE) 1*1024kB (U) 2*2048kB (ME) 950*4096kB (M) = 3911208kB [ 408.540320][T10071] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 408.702617][T10071] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 408.724326][T10071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 408.731572][T10156] validate_nla: 6 callbacks suppressed [ 408.731632][T10156] netlink: 'syz.2.2123': attribute type 9 has an invalid length. [ 408.830636][T10156] __nla_validate_parse: 3 callbacks suppressed [ 408.830698][T10156] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2123'. [ 408.898735][T10071] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 408.939745][T10158] delete_channel: no stack [ 408.982500][T10071] 70643 total pagecache pages [ 408.987369][T10071] 0 pages in swap cache [ 409.031787][T10071] Swap cache stats: add 0, delete 0, find 0/0 [ 409.059797][T10164] netlink: 'syz.3.2127': attribute type 10 has an invalid length. [ 409.080695][T10164] netlink: 14530 bytes leftover after parsing attributes in process `syz.3.2127'. [ 409.101433][T10071] Free swap = 124996kB [ 409.131544][T10168] netlink: 'syz.2.2128': attribute type 39 has an invalid length. [ 409.136634][T10071] Total swap = 124996kB [ 409.200330][T10071] 2097051 pages RAM [ 409.293576][T10173] netlink: 'syz.4.2130': attribute type 2 has an invalid length. [ 409.302542][T10071] 0 pages HighMem/MovableOnly [ 409.307386][T10071] 411490 pages reserved [ 409.315965][T10173] netlink: 'syz.4.2130': attribute type 8 has an invalid length. [ 409.327054][T10173] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2130'. [ 409.350897][T10071] 0 pages cma reserved [ 409.503845][T10178] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2133'. [ 409.635894][T10187] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2136'. [ 409.677937][T10187] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2136'. [ 410.025520][T10196] delete_channel: no stack [ 410.419095][T10195] netlink: 'syz.0.2139': attribute type 9 has an invalid length. [ 410.512413][T10209] netlink: 'syz.3.2141': attribute type 10 has an invalid length. [ 410.536220][T10209] netlink: 14530 bytes leftover after parsing attributes in process `syz.3.2141'. [ 410.564214][T10195] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2139'. [ 410.606370][T10208] netlink: 'syz.4.2142': attribute type 39 has an invalid length. [ 410.623525][T10207] netlink: 'syz.2.2143': attribute type 9 has an invalid length. [ 410.632475][T10207] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2143'. [ 410.757107][T10214] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2145'. [ 411.120023][T10226] netlink: 'syz.1.2148': attribute type 2 has an invalid length. [ 516.450161][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 516.457177][ C1] rcu: 0-...!: (1 ticks this GP) idle=5f9/1/0x4000000000000002 softirq=29293/29298 fqs=3 [ 516.468093][ C1] (detected by 1, t=10506 jiffies, g=41985, q=17) [ 516.474645][ C1] Sending NMI from CPU 1 to CPUs 0: [ 516.479894][ C0] NMI backtrace for cpu 0 [ 516.479904][ C0] CPU: 0 PID: 10212 Comm: syz.0.2144 Not tainted syzkaller #0 [ 516.479922][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 516.479932][ C0] RIP: 0010:__kasan_check_read+0x0/0x10 [ 516.479960][ C0] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 86 d9 de 8b eb 0a 48 c7 c7 80 fe c4 8b 48 89 de e8 d8 93 f3 07 31 ed eb d7 00 00 cc cc <89> f6 48 8b 0c 24 31 d2 e9 43 ef ff ff 0f 1f 00 89 f6 48 8b 0c 24 [ 516.479975][ C0] RSP: 0018:ffffc90002f4f620 EFLAGS: 00000046 [ 516.479991][ C0] RAX: ffffffff817f4f55 RBX: 0000000000000000 RCX: ffff8880234f1dc0 [ 516.480004][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8d89e368 [ 516.480016][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 516.480026][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 516.480037][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 516.480047][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 516.480063][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.480076][ C0] CR2: 0000200000001200 CR3: 0000000022a2c000 CR4: 00000000003506f0 [ 516.480091][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 516.480102][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 516.480114][ C0] Call Trace: [ 516.480120][ C0] [ 516.480126][ C0] trace_hardirqs_off_finish+0x9d/0x1f0 [ 516.480160][ C0] irqentry_enter+0x33/0x50 [ 516.480181][ C0] sysvec_irq_work+0xa/0xc0 [ 516.480199][ C0] asm_sysvec_irq_work+0x16/0x20 [ 516.480218][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x4a0 [ 516.480237][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 12 f2 9c 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 516.480251][ C0] RSP: 0018:ffffc90002f4f720 EFLAGS: 00000206 [ 516.480265][ C0] RAX: 516ed785e6588c00 RBX: 1ffff920005e9ee8 RCX: 516ed785e6588c00 [ 516.480278][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f980 [ 516.480291][ C0] RBP: ffffc90002f4f7f0 R08: ffffffff901d40c7 R09: 1ffffffff203a818 [ 516.480304][ C0] R10: dffffc0000000000 R11: fffffbfff203a819 R12: ffffffff8c322f00 [ 516.480317][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 516.480346][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 516.480365][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 516.480404][ C0] ? mem_cgroup_get_oom_group+0x350/0x350 [ 516.480425][ C0] __rcu_read_unlock+0x78/0xd0 [ 516.480445][ C0] __unlock_page_memcg+0xea/0x100 [ 516.480464][ C0] __set_page_dirty_buffers+0x2bf/0x4a0 [ 516.480486][ C0] unmap_page_range+0xd5e/0x2500 [ 516.480531][ C0] unmap_vmas+0x131/0x250 [ 516.480556][ C0] ? unmap_page_range+0x2500/0x2500 [ 516.480572][ C0] ? __mutex_lock_common+0x465/0x2400 [ 516.480605][ C0] exit_mmap+0x3b9/0x640 [ 516.480627][ C0] ? vm_brk+0x20/0x20 [ 516.480657][ C0] ? uprobe_clear_state+0x2f6/0x460 [ 516.480676][ C0] ? mm_update_next_owner+0x522/0x640 [ 516.480698][ C0] __mmput+0x115/0x3b0 [ 516.480719][ C0] exit_mm+0x588/0x6e0 [ 516.480735][ C0] ? xacct_add_tsk+0x4a0/0x4a0 [ 516.480758][ C0] ? do_exit+0x20c0/0x20c0 [ 516.480775][ C0] ? taskstats_exit+0x439/0xab0 [ 516.480798][ C0] ? tty_audit_exit+0x14e/0x1f0 [ 516.480822][ C0] do_exit+0x5a9/0x20c0 [ 516.480841][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 516.480862][ C0] ? put_task_struct+0x80/0x80 [ 516.480879][ C0] ? lock_chain_count+0x20/0x20 [ 516.480901][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 516.480927][ C0] do_group_exit+0x12e/0x300 [ 516.480948][ C0] __x64_sys_exit_group+0x3b/0x40 [ 516.480965][ C0] do_syscall_64+0x4c/0xa0 [ 516.480981][ C0] ? clear_bhb_loop+0x30/0x80 [ 516.480998][ C0] ? clear_bhb_loop+0x30/0x80 [ 516.481016][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 516.481035][ C0] RIP: 0033:0x7f3a61578799 [ 516.481057][ C0] Code: Unable to access opcode bytes at RIP 0x7f3a6157876f. [ 516.481066][ C0] RSP: 002b:00007fff06b5bd08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 516.481083][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3a61578799 [ 516.481096][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 516.481107][ C0] RBP: 00007fff06b5bd6c R08: 0000000000000000 R09: 00000000000927c0 [ 516.481119][ C0] R10: 00007f3a617f2038 R11: 0000000000000246 R12: 000000000000014a [ 516.481131][ C0] R13: 00000000000927c0 R14: 00000000000643d9 R15: 00007fff06b5bdc0 [ 516.481155][ C0] [ 516.481898][ C1] rcu: rcu_preempt kthread starved for 10490 jiffies! g41985 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 516.937025][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 516.947016][ C1] rcu: RCU grace-period kthread stack dump: [ 516.952920][ C1] task:rcu_preempt state:R running task stack:26960 pid: 15 ppid: 2 flags:0x00004000 [ 516.963727][ C1] Call Trace: [ 516.967028][ C1] [ 516.969989][ C1] __schedule+0x11ef/0x43c0 [ 516.974548][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 516.980477][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 516.985730][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 516.991671][ C1] ? _raw_spin_unlock+0x40/0x40 [ 516.996551][ C1] ? release_firmware_map_entry+0x190/0x190 [ 517.002488][ C1] ? __mod_timer+0x91e/0xd00 [ 517.007124][ C1] schedule+0x11b/0x1e0 [ 517.011311][ C1] schedule_timeout+0x184/0x2d0 [ 517.016203][ C1] ? console_conditional_schedule+0x40/0x40 [ 517.022129][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 517.028055][ C1] ? update_process_times+0x200/0x200 [ 517.033474][ C1] ? prepare_to_swait_event+0x331/0x350 [ 517.039064][ C1] rcu_gp_fqs_loop+0x2be/0x11d0 [ 517.043972][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 517.049223][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 517.055411][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 517.060219][ C1] ? finish_swait+0xc0/0x1d0 [ 517.064848][ C1] rcu_gp_kthread+0x9b/0x370 [ 517.069471][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 517.075400][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 517.080542][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 517.086781][ C1] ? __kthread_parkme+0x157/0x1b0 [ 517.091842][ C1] kthread+0x436/0x520 [ 517.095949][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 517.101260][ C1] ? kthread_blkcg+0xd0/0xd0 [ 517.105888][ C1] ret_from_fork+0x1f/0x30 [ 517.110350][ C1] [ 517.113401][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 517.119736][ C1] NMI backtrace for cpu 1 [ 517.124110][ C1] CPU: 1 PID: 1453 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 517.131680][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 517.141765][ C1] Workqueue: writeback wb_workfn (flush-8:0) [ 517.147785][ C1] Call Trace: [ 517.151082][ C1] [ 517.153949][ C1] dump_stack_lvl+0x188/0x250 [ 517.158656][ C1] ? show_regs_print_info+0x20/0x20 [ 517.163885][ C1] ? load_image+0x400/0x400 [ 517.168458][ C1] nmi_cpu_backtrace+0x3a2/0x3d0 [ 517.173438][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 517.179622][ C1] ? _printk+0xda/0x130 [ 517.183891][ C1] ? cpu_online+0x1d/0x30 [ 517.188266][ C1] ? load_image+0x400/0x400 [ 517.192805][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 517.198902][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 517.204929][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 517.211129][ C1] print_other_cpu_stall+0x1110/0x1270 [ 517.216639][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 517.221612][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 517.226929][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 517.231997][ C1] rcu_sched_clock_irq+0x843/0x1120 [ 517.237248][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 517.242134][ C1] ? account_process_tick+0x22a/0x3a0 [ 517.247551][ C1] update_process_times+0x193/0x200 [ 517.252793][ C1] tick_sched_timer+0x37d/0x560 [ 517.257687][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 517.263265][ C1] __hrtimer_run_queues+0x4b4/0xb70 [ 517.268523][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 517.273668][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 517.279783][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 517.284794][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 517.290836][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 517.296505][ C1] [ 517.299456][ C1] [ 517.302422][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 517.308439][ C1] RIP: 0010:kvm_wait+0x159/0x1b0 [ 517.313409][ C1] Code: 89 df 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 4b 0f b6 1f e8 77 b3 4a 00 44 38 e3 75 10 66 90 0f 00 2d 99 e2 f3 08 fb f4 16 ff ff ff fb e9 10 ff ff ff e8 47 cf 87 08 89 f9 80 e1 07 38 [ 517.333043][ C1] RSP: 0018:ffffc90006126800 EFLAGS: 00000246 [ 517.339141][ C1] RAX: c678b729cb6b6900 RBX: 0000000000000003 RCX: c678b729cb6b6900 [ 517.347138][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f980 [ 517.355229][ C1] RBP: ffffc900061268b0 R08: ffffffff901d40c7 R09: 1ffffffff203a818 [ 517.363418][ C1] R10: dffffc0000000000 R11: fffffbfff203a819 R12: 0000000000000003 [ 517.371431][ C1] R13: ffff8880b913b154 R14: dffffc0000000000 R15: 1ffff92000c24d00 [ 517.379555][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 517.384726][ C1] __pv_queued_spin_lock_slowpath+0x60f/0x9c0 [ 517.390954][ C1] ? __pv_queued_spin_unlock_slowpath+0x290/0x290 [ 517.397567][ C1] queued_spin_lock_slowpath+0x43/0x50 [ 517.403078][ C1] do_raw_spin_lock+0x265/0x2f0 [ 517.407970][ C1] ? __rwlock_init+0x140/0x140 [ 517.412794][ C1] page_vma_mapped_walk+0x1468/0x1740 [ 517.418227][ C1] page_mkclean_one+0x17d/0x3e0 [ 517.423120][ C1] ? page_mkclean+0x400/0x400 [ 517.427835][ C1] ? __might_sleep+0xf0/0xf0 [ 517.432573][ C1] ? rcu_lock_acquire+0x30/0x30 [ 517.437469][ C1] ? vma_address+0x254/0x460 [ 517.442187][ C1] ? page_mkclean+0x400/0x400 [ 517.446892][ C1] rmap_walk_file+0x408/0x610 [ 517.451641][ C1] page_mkclean+0x2f4/0x400 [ 517.456184][ C1] ? rmap_walk+0x170/0x170 [ 517.460631][ C1] ? page_mkclean+0x400/0x400 [ 517.465333][ C1] ? page_mkclean_one+0x3e0/0x3e0 [ 517.470390][ C1] ? page_mapping+0x30e/0x440 [ 517.475236][ C1] clear_page_dirty_for_io+0x3f8/0x9f0 [ 517.480829][ C1] ? unlock_page+0x17c/0x1f0 [ 517.485457][ C1] ? ext4_bio_write_page+0x1af5/0x1f90 [ 517.490962][ C1] ? wait_on_page_writeback+0x180/0x180 [ 517.496558][ C1] mpage_submit_page+0x8a/0x210 [ 517.501467][ C1] ext4_writepages+0x1ae0/0x2df0 [ 517.506470][ C1] ? ext4_readpage+0x2e0/0x2e0 [ 517.511300][ C1] ? writeback_sb_inodes+0x418/0x1680 [ 517.516714][ C1] ? perf_trace_lock+0xe4/0x390 [ 517.521602][ C1] ? ext4_readpage+0x2e0/0x2e0 [ 517.526451][ C1] do_writepages+0x476/0x6e0 [ 517.531102][ C1] ? __writepage+0x130/0x130 [ 517.535725][ C1] ? writeback_sb_inodes+0x67d/0x1680 [ 517.541131][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 517.546187][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 517.551246][ C1] __writeback_single_inode+0x153/0xda0 [ 517.556827][ C1] writeback_sb_inodes+0xa4e/0x1680 [ 517.562084][ C1] ? queue_io+0x550/0x550 [ 517.566460][ C1] ? up_read+0x20/0x20 [ 517.570571][ C1] __writeback_inodes_wb+0x12a/0x3f0 [ 517.575921][ C1] wb_writeback+0x46f/0xbe0 [ 517.580470][ C1] ? rcu_lock_release+0x20/0x20 [ 517.585342][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 517.591369][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 517.596606][ C1] wb_workfn+0xb15/0xf20 [ 517.600902][ C1] ? inode_wait_for_writeback+0x220/0x220 [ 517.606671][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 517.612689][ C1] ? read_lock_is_recursive+0x10/0x10 [ 517.618104][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 517.624023][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 517.629246][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 517.634480][ C1] process_one_work+0x85f/0x1010 [ 517.639475][ C1] ? worker_detach_from_pool+0x240/0x240 [ 517.645127][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 517.650536][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 517.655598][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 517.661194][ C1] ? wq_worker_running+0x97/0x170 [ 517.666257][ C1] worker_thread+0xaa6/0x1290 [ 517.670982][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 517.676215][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 517.682158][ C1] kthread+0x436/0x520 [ 517.686369][ C1] ? rcu_lock_release+0x20/0x20 [ 517.691257][ C1] ? kthread_blkcg+0xd0/0xd0 [ 517.695883][ C1] ret_from_fork+0x1f/0x30 [ 517.700345][ C1]