last executing test programs: 20.791105107s ago: executing program 1 (id=2412): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2b, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x10000}, 0x114b8f, 0x4, 0x9, 0x6, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x4}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg$kcm(r7, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/80, 0x50}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000340)="b8e9", 0x2}], 0x1}, 0x4000001) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x20048811) recvmsg$kcm(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/102, 0x66}], 0x1}, 0x40) setsockopt$sock_attach_bpf(r5, 0x0, 0x4, 0x0, 0x11) perf_event_open(&(0x7f0000000500)={0x2, 0xa2, 0x28, 0x2, 0x0, 0x0, 0x0, 0x4000000009, 0x6c07b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xc5e4, 0xe}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x8, 0x9, 0x2, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r8, 0x6, 0xd, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b70800000a0000007b8af0ff5d63404f0af3b18bdc8fa44000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001838000005000000000000000000000018440000070000000000000000000000184a00000500"/72], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 20.459754726s ago: executing program 1 (id=2416): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x4}, 0x100e64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000700)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x20, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@ifindex=r1, 0xffffffffffffffff, 0x73, 0x4}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000010000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xdc0, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="000000000000000025000000000018000000b310b40000000017000000000000001500000000000000570300002200000095000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) gettid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r4, 0x0, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf20"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, 0x0, 0xfe33) 11.315891749s ago: executing program 2 (id=2458): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x7, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r1, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x1, 0x80, 0x6, 0x7, 0x80, 0x1, 0x0, 0x200, 0xa3, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x81, 0xe}, 0x4001, 0xa3, 0x3, 0x0, 0x8, 0x3, 0x7ff, 0x0, 0x1ff, 0x0, 0x6}) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff00000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000240)={0x0, 0x4, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r4}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) r6 = socket$kcm(0x2, 0x1, 0x0) recvmsg(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x81) socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080)) 10.824578975s ago: executing program 2 (id=2461): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0xfffffffffffffffd, 0xe100, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x3, 0x71, 0x10, 0x8a}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0x23, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117200000000008510001202000000850000004800000095000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000140), &(0x7f0000000200)=r3}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c, 0x0, 0x1, 0x1}, {0xb1, 0x0, 0x28, 0x1ff}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f0000000180)) 10.532378724s ago: executing program 0 (id=2463): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r0}, 0x18) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001b80)={&(0x7f0000000300)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000000000034"], 0x18}, 0x0) r2 = syz_clone(0x5000, &(0x7f00000000c0)="9d60a36fc722598af9be7ca02604b889429677ededa5d67adac9b3b9871cad7f7dc1966ebc7be3ef8df504dbd2b65fd61d842916b9762eccb5607079bf894da468c03bff565acd4ac93b1934f3819850346a4affb6808db0f540b778938f4096e717719e350a6f", 0x67, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)="805bf9c74cc02639f7b6e850704feebf74dc9f1f5411d1b9d018f44d970fe91b414951fb28733e54761cf428c5cc247034a1d642930dff40e8b5a6fa1c270c6357d6faf998d8a9c22d687db2d70df70a1c32ccd1015c60b94e73909e2c3036f07326d30a14a0a96b4401ca3a9b53b7489d560a9b4473eba678d635980fd9fb425a21eda9c55b7453e0f65130a7a069a7cd1fac915c74dd893ed0ef51") r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r3}) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x7, 0x7, 0x7, 0x2b, 0x0, 0x5, 0x80000, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfd89, 0x4, @perf_config_ext={0x6, 0x1}, 0x4, 0x3, 0x6, 0x3, 0x4d, 0x7, 0x3, 0x0, 0xc6, 0x0, 0x8}, r2, 0xb, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000600)='@\xe3\x99:\x00') recvmsg$kcm(r4, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/79, 0x4f}, {&(0x7f0000002c40)=""/86, 0x56}, {&(0x7f0000002cc0)=""/26, 0x1a}, {&(0x7f0000002d00)=""/190, 0xbe}], 0x7}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)="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", 0x100}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x80000) 9.988064381s ago: executing program 2 (id=2464): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000c00050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000c00050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x1}, 0x0, 0x35, 0x1e7e7df9, 0x7, 0x9, 0x6, 0xa, 0x0, 0x8000000, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) (async) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x2f, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x29, 0x2f, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r4}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) syz_clone(0x40005000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.67932244s ago: executing program 2 (id=2466): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)="89", 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x40000) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @flow_dissector}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000740), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r1, 0x0, 0x30004001) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004"], 0x50) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000006c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r5, 0x13, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x5db1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x1, 0x4, 0x0, 0x37f, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) r7 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) 9.3880509s ago: executing program 0 (id=2467): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x92, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 9.03775764s ago: executing program 2 (id=2468): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40401, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22ffff) 8.846586186s ago: executing program 2 (id=2469): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1004, 0x0, r1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) socket$kcm(0x10, 0x3, 0x10) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1004, 0x0, r1}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) (async) 8.267287554s ago: executing program 0 (id=2470): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0xbcc, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, 0x0, &(0x7f0000000180)}, 0x20) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r4], 0xfe33) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x6a0a1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x590f}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x6, &(0x7f0000000c80)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x4}, {0x85, 0x0, 0x0, 0x8c}}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r3}, 0xc) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115f00000000008510000002000000850000000000000095000000000000009500a50500000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93824fc60100c024002000009053582c137153e370248078000f01700d1", 0x2d}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 7.255852285s ago: executing program 0 (id=2472): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xe}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf942071763", 0x5a}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x5, 0x0, 0x13, 0x0, 0x10000000000, 0x8880, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x6}, 0x4, 0x3, 0x0, 0x6, 0x7, 0xffff, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x18) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) syz_clone(0x2000, &(0x7f00000001c0)="8db08c7a659a27511ac72ffa497a4585213a165dd5d1de74f2f4ff30eea47b7abdba8c2e0ed0e1606dde09757586b68724df6f9742b6a18ca161d16eafd999d7d22c85b81dbd84bead68b2b7eb045fbe9f336b75", 0x54, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000001980)="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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.111152321s ago: executing program 0 (id=2475): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018002100000000002800000028000000020000000100000000000001e5ff00001000000000000000010000840600000000"], 0x0, 0x42}, 0x28) 5.81193445s ago: executing program 0 (id=2477): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x92, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 5.270137447s ago: executing program 3 (id=2478): socket$kcm(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000580)='%-010d \x00'}, 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42fbd5dcab7bee29, @perf_bp={0x0, 0x5}, 0x106c48, 0xc8, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x8905, &(0x7f0000000100)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715", 0x31}, {&(0x7f0000001980)="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", 0x7c0}], 0x2}, 0x24000008) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000c}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x19, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000005c0)={0x2, 0x80, 0x0, 0x5, 0xa7, 0x2, 0x0, 0x9, 0x4000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0xcc7b21ddafbd64a7, 0x8815, 0x0, 0x1, 0x8, 0x2, 0x838, 0x0, 0x0, 0x0, 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) 4.964974226s ago: executing program 1 (id=2421): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xf}, 0x8000, 0x2, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)=ANY=[], 0x50) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="c40700000000000063116d00006d8d000700fd00000000009500000200000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003000000060000000000000700000000070000000000000e01000000010000f40b00000000000008030000000a00000001cc04"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) r2 = gettid() bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="000500000020"}) sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee00}}}, @rights={{0x10}}], 0x30, 0x800}, 0x40800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000200)="897aa04fe9a493b879d64517030767930900ea83375a933a5bd48f3b029ef29b036efefdb602dfb20cdaba94b95ab22cc9c4444e", 0x34}], 0x1, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0x50, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@rand_addr=0x64010100, 0x5}, {@loopback, 0x6}, {@multicast2}, {@remote, 0xd6}, {@multicast1, 0x1}, {@empty, 0x5}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x4a}, {@rand_addr=0x64010100, 0x3}]}, @timestamp={0x44, 0x4, 0x6f, 0x0, 0x6}, @rr={0x7, 0x13, 0xf0, [@remote, @rand_addr=0x64010100, @multicast1, @multicast2]}, @noop]}}}], 0xb8}, 0x40841) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000740)="ecfd5dd05d6c0e6578521ac4e478af07c681a27448cc50044f340c5dc69cc58e120af98a620e851653d5faa8f685f8d3fc9db17b661ea653826bc6f0b912291acd05d2e8defb939fdb46ed4e5d3ee7e2fa62617977c3e3ec5370804dd0630720b5dc04a43c1fa19f4b14a46589d79849e4efb468e2149e7a256f0beeb2f36ff416e61e0ca1037f77375ee261912ef24892cbc7b198091681e0fca61ecc5326b11f0f0f93007e", 0xa6}, {&(0x7f0000000040)="68ca218686a9c9e719fa8197085e22ebd0f1", 0x12}, {&(0x7f0000002800)="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", 0xff37}], 0x3}, 0x40e4804) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b70000e0000000006111900000000000c6000000140000007200000000000000dbd7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) socket$kcm(0x11, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 1.27170812s ago: executing program 1 (id=2480): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xffa6, &(0x7f0000000340)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x0) (fail_nth: 10) 1.26751178s ago: executing program 3 (id=2481): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000280)=@x25, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 1.145784055s ago: executing program 3 (id=2482): r0 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x11, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x101}, 0x104046, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={r3, r2, 0x0, 0xffffffffffffff8f, 0xfffffffffffffffe}, 0x30) syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/mnt\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x1, 0x80, 0x8b, 0x5, 0x81, 0x4, 0x0, 0x6, 0x100, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x3ff, 0xfff}, 0x486, 0xfffffffffffffff7, 0xdbe, 0x7, 0xb5, 0x8, 0x5, 0x0, 0x2, 0x0, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711218000000000095000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0xfd, 0x0, 0x0, 0x1, 0x3240, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40005, 0x5, @perf_bp={&(0x7f0000000100), 0x1}, 0x0, 0x4, 0x0, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$cgroup_devices(r4, 0x0, 0xfffffeff) socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[], 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020fe8107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000004680)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x8470}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0xff, 0x0, 0x0, 0x0, 0x1000003, 0x8c221, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x10320, 0x0, 0x8, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 724.062957ms ago: executing program 1 (id=2483): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xe}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf942071763", 0x5a}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x5, 0x0, 0x13, 0x0, 0x10000000000, 0x8880, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x6}, 0x4, 0x3, 0x0, 0x6, 0x7, 0xffff, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x18) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) syz_clone(0x2000, &(0x7f00000001c0)="8db08c7a659a27511ac72ffa497a4585213a165dd5d1de74f2f4ff30eea47b7abdba8c2e0ed0e1606dde09757586b68724df6f9742b6a18ca161d16eafd999d7d22c85b81dbd84bead68b2b7eb045fbe9f336b75", 0x54, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000001980)="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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 666.040379ms ago: executing program 3 (id=2484): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x28, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4) 271.892382ms ago: executing program 3 (id=2485): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0xfd, 0x8, 0x8, 0x0, 0x3, 0x94, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0xa10, 0x8, 0xfffffffd, 0x0, 0x8, 0x8, 0x0, 0x0, 0x40000, 0x0, 0xfffffffffffffffd}) ioctl$TUNGETVNETLE(r0, 0x8953, &(0x7f0000000040)) 183.894174ms ago: executing program 1 (id=2486): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xe0}, 0x10140) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1fc}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0xa, 0x2, 0x73) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000e3ffffff0085105e8984b2000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000f9000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 0s ago: executing program 3 (id=2487): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xf}, 0x8000, 0x2, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)=ANY=[], 0x50) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="c40700000000000063116d00006d8d000700fd00000000009500000200000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003000000060000000000000700000000070000000000000e01000000010000f40b00000000000008030000000a00000001cc04"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) r2 = gettid() bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="000500000020"}) sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee00}}}, @rights={{0x10}}], 0x30, 0x800}, 0x40800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000200)="897aa04fe9a493b879d64517030767930900ea83375a933a5bd48f3b029ef29b036efefdb602dfb20cdaba94b95ab22cc9c4444e", 0x34}], 0x1, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0x50, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@rand_addr=0x64010100, 0x5}, {@loopback, 0x6}, {@multicast2}, {@remote, 0xd6}, {@multicast1, 0x1}, {@empty, 0x5}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x4a}, {@rand_addr=0x64010100, 0x3}]}, @timestamp={0x44, 0x4, 0x6f, 0x0, 0x6}, @rr={0x7, 0x13, 0xf0, [@remote, @rand_addr=0x64010100, @multicast1, @multicast2]}, @noop]}}}], 0xb8}, 0x40841) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000740)="ecfd5dd05d6c0e6578521ac4e478af07c681a27448cc50044f340c5dc69cc58e120af98a620e851653d5faa8f685f8d3fc9db17b661ea653826bc6f0b912291acd05d2e8defb939fdb46ed4e5d3ee7e2fa62617977c3e3ec5370804dd0630720b5dc04a43c1fa19f4b14a46589d79849e4efb468e2149e7a256f0beeb2f36ff416e61e0ca1037f77375ee261912ef24892cbc7b198091681e0fca61ecc5326b11f0f0f93007e", 0xa6}, {&(0x7f0000000040)="68ca218686a9c9e719fa8197085e22ebd0f1", 0x12}, {&(0x7f0000002800)="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", 0xff37}], 0x3}, 0x40e4804) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b70000e0000000006111900000000000c6000000140000007200000000000000dbd7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) socket$kcm(0x11, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) kernel console output (not intermixed with test programs): T10742] CPU: 0 PID: 10742 Comm: syz.0.1709 Not tainted syzkaller #0 [ 358.345462][T10742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 358.355558][T10742] Call Trace: [ 358.358989][T10742] [ 358.361954][T10742] dump_stack_lvl+0x18c/0x250 [ 358.366760][T10742] ? show_regs_print_info+0x20/0x20 [ 358.371988][T10742] ? load_image+0x420/0x420 [ 358.376518][T10742] ? __might_sleep+0xe0/0xe0 [ 358.381178][T10742] ? __lock_acquire+0x7d40/0x7d40 [ 358.386323][T10742] ? __kmem_cache_free+0xba/0x1e0 [ 358.391473][T10742] should_fail_ex+0x39d/0x4d0 [ 358.396191][T10742] should_failslab+0x9/0x20 [ 358.400723][T10742] slab_pre_alloc_hook+0x59/0x310 [ 358.405772][T10742] ? __netdev_printk+0x4a0/0x4a0 [ 358.410835][T10742] ? register_netdevice+0x573/0x1bb0 [ 358.416145][T10742] __kmem_cache_alloc_node+0x53/0x250 [ 358.421545][T10742] ? register_netdevice+0x573/0x1bb0 [ 358.426858][T10742] kmalloc_trace+0x2a/0xe0 [ 358.431307][T10742] register_netdevice+0x573/0x1bb0 [ 358.436462][T10742] ? netif_stacked_transfer_operstate+0x210/0x210 [ 358.442988][T10742] ? __lock_acquire+0x7d40/0x7d40 [ 358.448045][T10742] ? net_generic+0x1e/0x240 [ 358.452679][T10742] vti6_tnl_create2+0x80/0x140 [ 358.457468][T10742] vti6_locate+0x682/0x770 [ 358.461912][T10742] ? vti6_parm_from_user+0x250/0x250 [ 358.467225][T10742] ? __might_fault+0xaa/0x120 [ 358.471936][T10742] ? __might_fault+0xc6/0x120 [ 358.476630][T10742] ? __might_fault+0xaa/0x120 [ 358.481326][T10742] ? vti6_siocdevprivate+0x696/0xa90 [ 358.486645][T10742] vti6_siocdevprivate+0x6ba/0xa90 [ 358.491786][T10742] ? do_raw_spin_unlock+0x121/0x230 [ 358.497027][T10742] ? vti6_tnl_xmit+0x1910/0x1910 [ 358.501992][T10742] ? __mutex_lock+0x956/0xcc0 [ 358.507244][T10742] ? dev_ioctl+0x83c/0x1140 [ 358.511869][T10742] ? dev_ifsioc+0x958/0xc40 [ 358.516410][T10742] dev_ioctl+0x84c/0x1140 [ 358.520861][T10742] sock_ioctl+0x74c/0x7e0 [ 358.525297][T10742] ? sock_poll+0x3e0/0x3e0 [ 358.529756][T10742] ? bpf_lsm_file_ioctl+0x9/0x10 [ 358.534716][T10742] ? security_file_ioctl+0x80/0xa0 [ 358.539894][T10742] ? sock_poll+0x3e0/0x3e0 [ 358.544343][T10742] __se_sys_ioctl+0xfd/0x170 [ 358.548978][T10742] do_syscall_64+0x55/0xb0 [ 358.553431][T10742] ? clear_bhb_loop+0x40/0x90 [ 358.558121][T10742] ? clear_bhb_loop+0x40/0x90 [ 358.562830][T10742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.568755][T10742] RIP: 0033:0x7f88b659ce59 [ 358.573186][T10742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.592998][T10742] RSP: 002b:00007f88b752e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.601453][T10742] RAX: ffffffffffffffda RBX: 00007f88b6815fa0 RCX: 00007f88b659ce59 [ 358.609460][T10742] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 358.617457][T10742] RBP: 00007f88b752e090 R08: 0000000000000000 R09: 0000000000000000 [ 358.625554][T10742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 358.633731][T10742] R13: 00007f88b6816038 R14: 00007f88b6815fa0 R15: 00007ffdd8421678 [ 358.641753][T10742] [ 359.773863][T10771] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1719'. [ 360.004323][T10778] syzkaller0: entered promiscuous mode [ 360.009855][T10778] syzkaller0: entered allmulticast mode [ 360.079519][T10778] syzkaller0: left promiscuous mode [ 360.147826][T10782] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1723'. [ 360.208113][T10782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.218140][T10782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.264303][T10782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.289018][T10782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.378736][T10782] bridge0: port 3(batadv0) entered disabled state [ 360.496964][T10782] bridge0: port 3(batadv0) entered disabled state [ 360.517694][T10798] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1724'. [ 361.207717][T10807] netlink: 'syz.3.1732': attribute type 29 has an invalid length. [ 361.373664][T10807] netlink: 'syz.3.1732': attribute type 29 has an invalid length. [ 361.393520][T10810] netlink: 'syz.3.1732': attribute type 29 has an invalid length. [ 361.809403][T10818] netlink: 'syz.1.1742': attribute type 10 has an invalid length. [ 361.981994][T10818] hsr_slave_0: entered promiscuous mode [ 361.997923][T10818] hsr_slave_0: entered allmulticast mode [ 362.020550][T10818] team0: Port device hsr_slave_0 added [ 362.036474][T10826] netlink: 'syz.1.1742': attribute type 9 has an invalid length. [ 362.054009][T10826] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1742'. [ 362.073005][T10824] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1735'. [ 364.982478][T10881] netlink: 'syz.3.1754': attribute type 13 has an invalid length. [ 365.005809][T10881] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.1754'. [ 366.760718][T10929] netlink: 'syz.0.1772': attribute type 11 has an invalid length. [ 366.784676][T10929] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1772'. [ 367.226826][T10945] FAULT_INJECTION: forcing a failure. [ 367.226826][T10945] name failslab, interval 1, probability 0, space 0, times 0 [ 367.230815][T10942] netlink: 'syz.0.1777': attribute type 4 has an invalid length. [ 367.266115][T10946] FAULT_INJECTION: forcing a failure. [ 367.266115][T10946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.293245][T10945] CPU: 0 PID: 10945 Comm: syz.3.1778 Not tainted syzkaller #0 [ 367.300784][T10945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 367.310897][T10945] Call Trace: [ 367.314222][T10945] [ 367.317206][T10945] dump_stack_lvl+0x18c/0x250 [ 367.321956][T10945] ? show_regs_print_info+0x20/0x20 [ 367.327209][T10945] ? load_image+0x420/0x420 [ 367.331771][T10945] ? __lock_acquire+0x7d40/0x7d40 [ 367.336879][T10945] should_fail_ex+0x39d/0x4d0 [ 367.341761][T10945] should_failslab+0x9/0x20 [ 367.346312][T10945] slab_pre_alloc_hook+0x59/0x310 [ 367.351378][T10945] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 367.358021][T10945] ? bpf_test_init+0x9f/0x140 [ 367.362748][T10945] ? bpf_test_init+0x9f/0x140 [ 367.367466][T10945] __kmem_cache_alloc_node+0x53/0x250 [ 367.372988][T10945] ? bpf_test_init+0x9f/0x140 [ 367.377797][T10945] __kmalloc+0xa4/0x230 [ 367.382062][T10945] bpf_test_init+0x9f/0x140 [ 367.386631][T10945] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 367.392102][T10945] ? dev_put+0x80/0x80 [ 367.396261][T10945] ? dev_put+0x80/0x80 [ 367.400383][T10945] bpf_prog_test_run+0x321/0x390 [ 367.405375][T10945] __sys_bpf+0x49d/0x890 [ 367.409674][T10945] ? bpf_link_show_fdinfo+0x390/0x390 [ 367.415177][T10945] ? lock_chain_count+0x20/0x20 [ 367.420083][T10945] __x64_sys_bpf+0x7c/0x90 [ 367.424522][T10945] do_syscall_64+0x55/0xb0 [ 367.428953][T10945] ? clear_bhb_loop+0x40/0x90 [ 367.433641][T10945] ? clear_bhb_loop+0x40/0x90 [ 367.440634][T10945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.447685][T10945] RIP: 0033:0x7fd04899ce59 [ 367.452482][T10945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.473599][T10945] RSP: 002b:00007fd04989e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 367.482533][T10945] RAX: ffffffffffffffda RBX: 00007fd048c15fa0 RCX: 00007fd04899ce59 [ 367.491328][T10945] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 367.499675][T10945] RBP: 00007fd04989e090 R08: 0000000000000000 R09: 0000000000000000 [ 367.508209][T10945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.516488][T10945] R13: 00007fd048c16038 R14: 00007fd048c15fa0 R15: 00007ffe906f2a58 [ 367.524975][T10945] [ 367.572931][T10946] CPU: 0 PID: 10946 Comm: syz.2.1776 Not tainted syzkaller #0 [ 367.580475][T10946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 367.590662][T10946] Call Trace: [ 367.593994][T10946] [ 367.596963][T10946] dump_stack_lvl+0x18c/0x250 [ 367.601718][T10946] ? show_regs_print_info+0x20/0x20 [ 367.606978][T10946] ? load_image+0x420/0x420 [ 367.611540][T10946] ? __lock_acquire+0x7d40/0x7d40 [ 367.616609][T10946] ? snprintf+0xe9/0x140 [ 367.620940][T10946] should_fail_ex+0x39d/0x4d0 [ 367.625682][T10946] _copy_to_user+0x2f/0xa0 [ 367.630584][T10946] simple_read_from_buffer+0xe7/0x150 [ 367.636025][T10946] proc_fail_nth_read+0x1e8/0x260 [ 367.641162][T10946] ? proc_fault_inject_write+0x360/0x360 [ 367.646949][T10946] ? fsnotify_perm+0x271/0x5e0 [ 367.651776][T10946] ? proc_fault_inject_write+0x360/0x360 [ 367.657482][T10946] vfs_read+0x28b/0x970 [ 367.661717][T10946] ? kernel_read+0x1e0/0x1e0 [ 367.666384][T10946] ? __fget_files+0x28/0x4b0 [ 367.671016][T10946] ? __fget_files+0x28/0x4b0 [ 367.675660][T10946] ? __fget_files+0x43d/0x4b0 [ 367.680416][T10946] ? __fdget_pos+0x2a3/0x330 [ 367.685053][T10946] ? ksys_read+0x75/0x260 [ 367.689446][T10946] ksys_read+0x150/0x260 [ 367.693757][T10946] ? vfs_write+0x990/0x990 [ 367.698233][T10946] ? lockdep_hardirqs_on+0x98/0x150 [ 367.703503][T10946] do_syscall_64+0x55/0xb0 [ 367.707973][T10946] ? clear_bhb_loop+0x40/0x90 [ 367.712694][T10946] ? clear_bhb_loop+0x40/0x90 [ 367.717430][T10946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.723474][T10946] RIP: 0033:0x7f9aedd5d68e [ 367.728036][T10946] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 367.749277][T10946] RSP: 002b:00007f9aeebc2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 367.757937][T10946] RAX: ffffffffffffffda RBX: 00007f9aeebc36c0 RCX: 00007f9aedd5d68e [ 367.765963][T10946] RDX: 000000000000000f RSI: 00007f9aeebc30a0 RDI: 0000000000000004 [ 367.773985][T10946] RBP: 00007f9aeebc3090 R08: 0000000000000000 R09: 0000000000000000 [ 367.782014][T10946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.790403][T10946] R13: 00007f9aee016128 R14: 00007f9aee016090 R15: 00007ffdcd0a4b28 [ 367.798488][T10946] [ 368.013290][T10950] netlink: 'syz.1.1779': attribute type 27 has an invalid length. [ 368.064702][T10950] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.1779'. [ 369.188781][T10983] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1791'. [ 369.988515][T11007] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1802'. [ 370.723730][T11022] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1806'. [ 371.598811][T11037] FAULT_INJECTION: forcing a failure. [ 371.598811][T11037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.617735][T11037] CPU: 1 PID: 11037 Comm: syz.1.1811 Not tainted syzkaller #0 [ 371.625243][T11037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 371.635493][T11037] Call Trace: [ 371.638787][T11037] [ 371.641730][T11037] dump_stack_lvl+0x18c/0x250 [ 371.646784][T11037] ? show_regs_print_info+0x20/0x20 [ 371.652010][T11037] ? load_image+0x420/0x420 [ 371.656532][T11037] ? __lock_acquire+0x7d40/0x7d40 [ 371.661579][T11037] ? snprintf+0xe9/0x140 [ 371.665849][T11037] should_fail_ex+0x39d/0x4d0 [ 371.670581][T11037] _copy_to_user+0x2f/0xa0 [ 371.675035][T11037] simple_read_from_buffer+0xe7/0x150 [ 371.680437][T11037] proc_fail_nth_read+0x1e8/0x260 [ 371.685484][T11037] ? proc_fault_inject_write+0x360/0x360 [ 371.691750][T11037] ? fsnotify_perm+0x271/0x5e0 [ 371.696546][T11037] ? proc_fault_inject_write+0x360/0x360 [ 371.702210][T11037] vfs_read+0x28b/0x970 [ 371.706398][T11037] ? kernel_read+0x1e0/0x1e0 [ 371.711013][T11037] ? __fget_files+0x28/0x4b0 [ 371.715618][T11037] ? __fget_files+0x28/0x4b0 [ 371.720228][T11037] ? __fget_files+0x43d/0x4b0 [ 371.724940][T11037] ? __fdget_pos+0x2a3/0x330 [ 371.729548][T11037] ? ksys_read+0x75/0x260 [ 371.733898][T11037] ksys_read+0x150/0x260 [ 371.738256][T11037] ? vfs_write+0x990/0x990 [ 371.742705][T11037] ? lockdep_hardirqs_on+0x98/0x150 [ 371.748026][T11037] do_syscall_64+0x55/0xb0 [ 371.752473][T11037] ? clear_bhb_loop+0x40/0x90 [ 371.757166][T11037] ? clear_bhb_loop+0x40/0x90 [ 371.761855][T11037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.767775][T11037] RIP: 0033:0x7f4899b5d68e [ 371.772292][T11037] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 371.792185][T11037] RSP: 002b:00007f4897df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 371.800635][T11037] RAX: ffffffffffffffda RBX: 00007f4897df66c0 RCX: 00007f4899b5d68e [ 371.808629][T11037] RDX: 000000000000000f RSI: 00007f4897df60a0 RDI: 0000000000000006 [ 371.816615][T11037] RBP: 00007f4897df6090 R08: 0000000000000000 R09: 0000000000000000 [ 371.824613][T11037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.832703][T11037] R13: 00007f4899e16038 R14: 00007f4899e15fa0 R15: 00007ffc641c4808 [ 371.840715][T11037] [ 372.080400][T11047] FAULT_INJECTION: forcing a failure. [ 372.080400][T11047] name failslab, interval 1, probability 0, space 0, times 0 [ 372.128590][T11047] CPU: 1 PID: 11047 Comm: syz.1.1815 Not tainted syzkaller #0 [ 372.136116][T11047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.146278][T11047] Call Trace: [ 372.149589][T11047] [ 372.152542][T11047] dump_stack_lvl+0x18c/0x250 [ 372.157433][T11047] ? show_regs_print_info+0x20/0x20 [ 372.162668][T11047] ? load_image+0x420/0x420 [ 372.167198][T11047] ? __might_sleep+0xe0/0xe0 [ 372.171812][T11047] ? __lock_acquire+0x7d40/0x7d40 [ 372.176860][T11047] should_fail_ex+0x39d/0x4d0 [ 372.181589][T11047] should_failslab+0x9/0x20 [ 372.186190][T11047] slab_pre_alloc_hook+0x59/0x310 [ 372.191408][T11047] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 372.197142][T11047] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 372.202867][T11047] __kmem_cache_alloc_node+0x53/0x250 [ 372.208268][T11047] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 372.214019][T11047] __kmalloc+0xa4/0x230 [ 372.218226][T11047] tomoyo_realpath_from_path+0xe3/0x5d0 [ 372.223804][T11047] tomoyo_path_number_perm+0x248/0x620 [ 372.229372][T11047] ? tomoyo_path_number_perm+0x217/0x620 [ 372.235004][T11047] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 372.240648][T11047] ? ksys_write+0x1c4/0x260 [ 372.245183][T11047] ? __fget_files+0x28/0x4b0 [ 372.249776][T11047] ? __fget_files+0x28/0x4b0 [ 372.254376][T11047] security_file_ioctl+0x70/0xa0 [ 372.259316][T11047] __se_sys_ioctl+0x48/0x170 [ 372.263908][T11047] do_syscall_64+0x55/0xb0 [ 372.268326][T11047] ? clear_bhb_loop+0x40/0x90 [ 372.272998][T11047] ? clear_bhb_loop+0x40/0x90 [ 372.277675][T11047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.283569][T11047] RIP: 0033:0x7f4899b9ce59 [ 372.287978][T11047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.307599][T11047] RSP: 002b:00007f4897df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.316025][T11047] RAX: ffffffffffffffda RBX: 00007f4899e15fa0 RCX: 00007f4899b9ce59 [ 372.323998][T11047] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000015 [ 372.331968][T11047] RBP: 00007f4897df6090 R08: 0000000000000000 R09: 0000000000000000 [ 372.340120][T11047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.348179][T11047] R13: 00007f4899e16038 R14: 00007f4899e15fa0 R15: 00007ffc641c4808 [ 372.356161][T11047] [ 372.470615][T11050] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1816'. [ 372.473087][T11047] ERROR: Out of memory at tomoyo_realpath_from_path. [ 374.071579][T11073] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 374.085540][T11073] dvmrp1: linktype set to 823 [ 375.306142][T11097] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1833'. [ 375.372735][T11097] hsr_slave_0: left promiscuous mode [ 376.138103][T11106] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1837'. [ 376.275320][T11110] FAULT_INJECTION: forcing a failure. [ 376.275320][T11110] name failslab, interval 1, probability 0, space 0, times 0 [ 376.289090][T11110] CPU: 1 PID: 11110 Comm: syz.2.1840 Not tainted syzkaller #0 [ 376.296942][T11110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 376.307721][T11110] Call Trace: [ 376.312158][T11110] [ 376.315201][T11110] dump_stack_lvl+0x18c/0x250 [ 376.320733][T11110] ? show_regs_print_info+0x20/0x20 [ 376.325991][T11110] ? load_image+0x420/0x420 [ 376.330701][T11110] ? perf_trace_preemptirq_template+0xac/0x330 [ 376.337185][T11110] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 376.343568][T11110] should_fail_ex+0x39d/0x4d0 [ 376.348562][T11110] should_failslab+0x9/0x20 [ 376.353273][T11110] slab_pre_alloc_hook+0x59/0x310 [ 376.358556][T11110] ? __local_bh_enable_ip+0x13a/0x1c0 [ 376.364768][T11110] kmem_cache_alloc+0x5a/0x2d0 [ 376.369831][T11110] ? dst_alloc+0x105/0x170 [ 376.374725][T11110] dst_alloc+0x105/0x170 [ 376.379451][T11110] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 376.386979][T11110] ? ip_route_output_key_hash+0x13d/0x330 [ 376.393966][T11110] ip_route_output_key_hash+0x1f3/0x330 [ 376.399716][T11110] ? ip_route_input_rcu+0x30f0/0x30f0 [ 376.406032][T11110] ? __asan_memset+0x22/0x40 [ 376.410698][T11110] ip_route_output_flow+0x2a/0x150 [ 376.416383][T11110] ip_tunnel_xmit+0x9b1/0x2410 [ 376.421406][T11110] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 376.428119][T11110] ? validate_xmit_xfrm+0xbc/0x12c0 [ 376.433724][T11110] ? gre_build_header+0x25b/0x990 [ 376.439147][T11110] ipgre_xmit+0x7a6/0xb20 [ 376.443527][T11110] dev_hard_start_xmit+0x246/0x740 [ 376.448908][T11110] __dev_queue_xmit+0x19a3/0x3660 [ 376.454175][T11110] ? __dev_queue_xmit+0x265/0x3660 [ 376.459784][T11110] ? __kmem_cache_alloc_node+0x13a/0x250 [ 376.465466][T11110] ? netdev_core_pick_tx+0x340/0x340 [ 376.470794][T11110] ? skb_release_data+0x1d1/0x7b0 [ 376.475973][T11110] __bpf_tx_skb+0x189/0x250 [ 376.480518][T11110] bpf_clone_redirect+0x30f/0x4a0 [ 376.485842][T11110] bpf_prog_973cd02a7a0e8181+0x5e/0x63 [ 376.491332][T11110] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 376.498069][T11110] ? perf_trace_preemptirq_template+0xac/0x330 [ 376.504698][T11110] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 376.511311][T11110] ? lockdep_softirqs_on+0x580/0x580 [ 376.516979][T11110] ? lock_chain_count+0x20/0x20 [ 376.522294][T11110] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 376.529141][T11110] ? __local_bh_disable_ip+0x108/0x1a0 [ 376.535593][T11110] ? __cant_sleep+0x220/0x220 [ 376.540393][T11110] ? __local_bh_enable_ip+0x13a/0x1c0 [ 376.545882][T11110] ? _local_bh_enable+0xa0/0xa0 [ 376.550744][T11110] ? bpf_test_timer_continue+0x135/0x380 [ 376.556738][T11110] ? bpf_test_run+0x174/0x870 [ 376.561859][T11110] bpf_test_run+0x2df/0x870 [ 376.566456][T11110] ? bpf_test_run+0x174/0x870 [ 376.571308][T11110] ? dst_hold+0x70/0x70 [ 376.575524][T11110] ? eth_get_headlen+0x210/0x210 [ 376.580592][T11110] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 376.586068][T11110] ? cpu_online+0x60/0x60 [ 376.590481][T11110] bpf_prog_test_run+0x321/0x390 [ 376.595530][T11110] __sys_bpf+0x49d/0x890 [ 376.599796][T11110] ? bpf_link_show_fdinfo+0x390/0x390 [ 376.605388][T11110] ? lock_chain_count+0x20/0x20 [ 376.610310][T11110] __x64_sys_bpf+0x7c/0x90 [ 376.615621][T11110] do_syscall_64+0x55/0xb0 [ 376.620043][T11110] ? clear_bhb_loop+0x40/0x90 [ 376.624720][T11110] ? clear_bhb_loop+0x40/0x90 [ 376.629398][T11110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.636614][T11110] RIP: 0033:0x7f9aedd9ce59 [ 376.641121][T11110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.661354][T11110] RSP: 002b:00007f9aeebe4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.670677][T11110] RAX: ffffffffffffffda RBX: 00007f9aee015fa0 RCX: 00007f9aedd9ce59 [ 376.678753][T11110] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 376.686834][T11110] RBP: 00007f9aeebe4090 R08: 0000000000000000 R09: 0000000000000000 [ 376.694996][T11110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 376.703094][T11110] R13: 00007f9aee016038 R14: 00007f9aee015fa0 R15: 00007ffdcd0a4b28 [ 376.711171][T11110] [ 376.875269][T11119] netlink: 'syz.0.1841': attribute type 10 has an invalid length. [ 376.991129][T11122] netlink: 'syz.0.1841': attribute type 9 has an invalid length. [ 377.002512][T11122] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1841'. [ 377.105466][T11119] team0: Device hsr_slave_0 failed to register rx_handler [ 378.632588][T11141] netlink: 'syz.2.1846': attribute type 4 has an invalid length. [ 378.758405][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.766448][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.096146][T11159] netlink: 'syz.0.1853': attribute type 1 has an invalid length. [ 379.114737][T11159] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1853'. [ 379.153033][T11159] netlink: 'syz.0.1853': attribute type 27 has an invalid length. [ 379.175931][T11159] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1853'. [ 382.528834][T11176] sit0: entered allmulticast mode [ 382.563785][T11178] sit0: entered promiscuous mode [ 382.687434][T11181] netlink: 'syz.1.1858': attribute type 19 has an invalid length. [ 382.713058][T11181] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.1858'. [ 383.602803][T11191] netlink: 'syz.3.1862': attribute type 4 has an invalid length. [ 383.870350][T11193] netlink: 'syz.1.1863': attribute type 39 has an invalid length. [ 383.930940][T11198] FAULT_INJECTION: forcing a failure. [ 383.930940][T11198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.954119][T11198] CPU: 0 PID: 11198 Comm: syz.2.1859 Not tainted syzkaller #0 [ 383.962074][T11198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 383.972237][T11198] Call Trace: [ 383.975525][T11198] [ 383.978545][T11198] dump_stack_lvl+0x18c/0x250 [ 383.983242][T11198] ? show_regs_print_info+0x20/0x20 [ 383.988459][T11198] ? load_image+0x420/0x420 [ 383.992977][T11198] ? __lock_acquire+0x7d40/0x7d40 [ 383.998121][T11198] ? snprintf+0xe9/0x140 [ 384.002398][T11198] should_fail_ex+0x39d/0x4d0 [ 384.007199][T11198] _copy_to_user+0x2f/0xa0 [ 384.011643][T11198] simple_read_from_buffer+0xe7/0x150 [ 384.017243][T11198] proc_fail_nth_read+0x1e8/0x260 [ 384.022592][T11198] ? proc_fault_inject_write+0x360/0x360 [ 384.029948][T11198] ? fsnotify_perm+0x271/0x5e0 [ 384.035169][T11198] ? proc_fault_inject_write+0x360/0x360 [ 384.040944][T11198] vfs_read+0x28b/0x970 [ 384.045136][T11198] ? kernel_read+0x1e0/0x1e0 [ 384.049748][T11198] ? __fget_files+0x28/0x4b0 [ 384.054363][T11198] ? __fget_files+0x28/0x4b0 [ 384.059219][T11198] ? __fget_files+0x43d/0x4b0 [ 384.063931][T11198] ? __fdget_pos+0x2a3/0x330 [ 384.068536][T11198] ? ksys_read+0x75/0x260 [ 384.073069][T11198] ksys_read+0x150/0x260 [ 384.077341][T11198] ? vfs_write+0x990/0x990 [ 384.081773][T11198] ? lockdep_hardirqs_on+0x98/0x150 [ 384.086993][T11198] do_syscall_64+0x55/0xb0 [ 384.091419][T11198] ? clear_bhb_loop+0x40/0x90 [ 384.096097][T11198] ? clear_bhb_loop+0x40/0x90 [ 384.100782][T11198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.106881][T11198] RIP: 0033:0x7f9aedd5d68e [ 384.111301][T11198] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 384.131001][T11198] RSP: 002b:00007f9aeebe3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 384.139528][T11198] RAX: ffffffffffffffda RBX: 00007f9aeebe46c0 RCX: 00007f9aedd5d68e [ 384.147522][T11198] RDX: 000000000000000f RSI: 00007f9aeebe40a0 RDI: 0000000000000005 [ 384.155601][T11198] RBP: 00007f9aeebe4090 R08: 0000000000000000 R09: 0000000000000000 [ 384.163615][T11198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.172043][T11198] R13: 00007f9aee016038 R14: 00007f9aee015fa0 R15: 00007ffdcd0a4b28 [ 384.180120][T11198] [ 384.708531][T11216] netlink: 'syz.0.1872': attribute type 9 has an invalid length. [ 384.734720][T11216] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1872'. [ 384.942110][T11224] netlink: 'syz.2.1875': attribute type 1 has an invalid length. [ 384.955122][T11224] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1875'. [ 384.977469][T11224] netlink: 'syz.2.1875': attribute type 27 has an invalid length. [ 384.985920][T11224] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1875'. [ 385.490389][T11235] netlink: 'syz.1.1877': attribute type 4 has an invalid length. [ 385.731971][T11245] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1880'. [ 385.741520][T11245] openvswitch: netlink: Key type 29 is not supported [ 385.900737][T11250] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1882'. [ 386.117701][T11253] netlink: 'syz.0.1884': attribute type 29 has an invalid length. [ 386.134448][T11253] netlink: 'syz.0.1884': attribute type 29 has an invalid length. [ 386.897609][T11276] netlink: 'syz.2.1893': attribute type 4 has an invalid length. [ 386.935711][T11276] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1893'. [ 387.035659][T11283] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1896'. [ 387.042677][T11287] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1895'. [ 387.212283][T11290] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1898'. [ 388.054740][T11296] netlink: 'syz.0.1900': attribute type 19 has an invalid length. [ 388.233963][T11304] delete_channel: no stack [ 388.639032][T11302] macvlan1: entered promiscuous mode [ 388.662432][T11302] macvlan1: entered allmulticast mode [ 388.701289][T11302] veth1_vlan: entered allmulticast mode [ 388.768945][T11315] FAULT_INJECTION: forcing a failure. [ 388.768945][T11315] name failslab, interval 1, probability 0, space 0, times 0 [ 388.788752][T11315] CPU: 0 PID: 11315 Comm: syz.0.1905 Not tainted syzkaller #0 [ 388.796408][T11315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 388.806851][T11315] Call Trace: [ 388.810245][T11315] [ 388.813527][T11315] dump_stack_lvl+0x18c/0x250 [ 388.818248][T11315] ? show_regs_print_info+0x20/0x20 [ 388.823488][T11315] ? load_image+0x420/0x420 [ 388.828212][T11315] ? __might_sleep+0xe0/0xe0 [ 388.832845][T11315] ? __lock_acquire+0x7d40/0x7d40 [ 388.837997][T11315] should_fail_ex+0x39d/0x4d0 [ 388.843065][T11315] should_failslab+0x9/0x20 [ 388.847709][T11315] slab_pre_alloc_hook+0x59/0x310 [ 388.852959][T11315] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 388.859246][T11315] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 388.865006][T11315] __kmem_cache_alloc_node+0x53/0x250 [ 388.871036][T11315] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 388.876878][T11315] __kmalloc+0xa4/0x230 [ 388.881160][T11315] tomoyo_realpath_from_path+0xe3/0x5d0 [ 388.887027][T11315] tomoyo_path_number_perm+0x248/0x620 [ 388.892795][T11315] ? tomoyo_path_number_perm+0x217/0x620 [ 388.899075][T11315] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 388.904575][T11315] ? ksys_write+0x1c4/0x260 [ 388.909159][T11315] ? __fget_files+0x28/0x4b0 [ 388.913805][T11315] ? __fget_files+0x28/0x4b0 [ 388.918618][T11315] security_file_ioctl+0x70/0xa0 [ 388.923595][T11315] __se_sys_ioctl+0x48/0x170 [ 388.928671][T11315] do_syscall_64+0x55/0xb0 [ 388.933830][T11315] ? clear_bhb_loop+0x40/0x90 [ 388.938663][T11315] ? clear_bhb_loop+0x40/0x90 [ 388.944948][T11315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.951056][T11315] RIP: 0033:0x7f88b659ce59 [ 388.955499][T11315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.975398][T11315] RSP: 002b:00007f88b752e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.983937][T11315] RAX: ffffffffffffffda RBX: 00007f88b6815fa0 RCX: 00007f88b659ce59 [ 388.992553][T11315] RDX: 0000000000000000 RSI: 0000000000005411 RDI: 0000000000000003 [ 389.000559][T11315] RBP: 00007f88b752e090 R08: 0000000000000000 R09: 0000000000000000 [ 389.008735][T11315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.016921][T11315] R13: 00007f88b6816038 R14: 00007f88b6815fa0 R15: 00007ffdd8421678 [ 389.025048][T11315] [ 389.045668][T11317] netlink: 'syz.1.1906': attribute type 1 has an invalid length. [ 389.084187][T11317] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1906'. [ 389.104712][T11315] ERROR: Out of memory at tomoyo_realpath_from_path. [ 389.115140][T11317] netlink: set zone limit has 8 unknown bytes [ 389.797824][T11336] netlink: 'syz.0.1914': attribute type 21 has an invalid length. [ 389.824962][T11336] __nla_validate_parse: 1 callbacks suppressed [ 389.824980][T11336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1914'. [ 391.105621][T11353] netlink: 'syz.2.1918': attribute type 1 has an invalid length. [ 391.163801][T11353] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1918'. [ 392.859456][T11370] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1925'. [ 394.805691][T11405] netlink: 'syz.2.1933': attribute type 1 has an invalid length. [ 394.837794][T11405] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1933'. [ 394.894607][T11405] netlink: set zone limit has 8 unknown bytes [ 395.249644][T11415] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1938'. [ 395.614869][T11429] netlink: 'syz.2.1944': attribute type 15 has an invalid length. [ 395.648087][T11429] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1944'. [ 396.773110][T11443] netlink: 'syz.1.1948': attribute type 10 has an invalid length. [ 396.798453][T11443] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1948'. [ 396.855311][T11444] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1949'. [ 397.437423][T11452] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1952'. [ 397.945284][T11469] netlink: 'syz.2.1958': attribute type 1 has an invalid length. [ 397.980440][T11469] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1958'. [ 398.313912][T11476] netlink: 'syz.0.1960': attribute type 33 has an invalid length. [ 398.322140][T11476] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1960'. [ 398.429533][T11480] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1962'. [ 398.454791][T11482] netlink: 'syz.2.1963': attribute type 10 has an invalid length. [ 398.474773][T11482] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1963'. [ 398.809050][T11485] netlink: 'syz.2.1965': attribute type 7 has an invalid length. [ 399.887200][T11499] __nla_validate_parse: 1 callbacks suppressed [ 399.887222][T11499] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1968'. [ 399.944026][T11499] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.1968'. [ 400.694738][T11502] netlink: 'syz.3.1969': attribute type 10 has an invalid length. [ 400.718353][T11502] geneve0: entered promiscuous mode [ 400.865424][T11502] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 401.884105][T11522] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1975'. [ 404.811464][T11531] bridge0: port 3(syz_tun) entered blocking state [ 404.827461][T11531] bridge0: port 3(syz_tun) entered disabled state [ 404.835901][T11539] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 404.839229][T11531] syz_tun: entered allmulticast mode [ 404.898221][T11531] syz_tun: entered promiscuous mode [ 404.911840][T11531] bridge0: port 3(syz_tun) entered blocking state [ 404.922177][T11531] bridge0: port 3(syz_tun) entered forwarding state [ 405.940295][T11555] netlink: 'syz.1.1988': attribute type 9 has an invalid length. [ 405.983376][T11555] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1988'. [ 406.513877][T11568] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1991'. [ 406.628715][T11563] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1987'. [ 406.856942][T11576] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1993'. [ 407.448515][T11596] netlink: 'syz.2.1998': attribute type 3 has an invalid length. [ 407.472907][T11596] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1998'. [ 410.277085][T11621] netlink: 'syz.0.2007': attribute type 10 has an invalid length. [ 410.285349][T11621] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2007'. [ 411.646962][T11647] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2015'. [ 412.204002][T11660] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2019'. [ 412.228160][T11660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.914402][T11681] syz.0.2027: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 412.963398][T11681] CPU: 1 PID: 11681 Comm: syz.0.2027 Not tainted syzkaller #0 [ 412.970942][T11681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 412.981379][T11681] Call Trace: [ 412.984801][T11681] [ 412.987774][T11681] dump_stack_lvl+0x18c/0x250 [ 412.992584][T11681] ? show_regs_print_info+0x20/0x20 [ 412.997841][T11681] ? load_image+0x420/0x420 [ 413.002383][T11681] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 413.008843][T11681] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 413.015469][T11681] warn_alloc+0x246/0x340 [ 413.019844][T11681] ? stack_trace_save+0xaa/0x100 [ 413.025092][T11681] ? zone_watermark_ok_safe+0x230/0x230 [ 413.030680][T11681] ? kasan_set_track+0x5f/0x70 [ 413.035453][T11681] ? kasan_set_track+0x4e/0x70 [ 413.040243][T11681] ? __kasan_kmalloc+0x8f/0xa0 [ 413.045021][T11681] ? xsk_init_queue+0xad/0x100 [ 413.049869][T11681] ? xsk_setsockopt+0x4e5/0x760 [ 413.054732][T11681] ? do_sock_setsockopt+0x175/0x1a0 [ 413.060121][T11681] ? __x64_sys_setsockopt+0x182/0x200 [ 413.065780][T11681] __vmalloc_node_range+0x126/0x1330 [ 413.071194][T11681] ? free_vm_area+0x50/0x50 [ 413.075713][T11681] vmalloc_user+0x74/0x80 [ 413.080048][T11681] ? xskq_create+0xbf/0x170 [ 413.084565][T11681] xskq_create+0xbf/0x170 [ 413.088897][T11681] xsk_init_queue+0xad/0x100 [ 413.093491][T11681] xsk_setsockopt+0x4e5/0x760 [ 413.098168][T11681] ? xsk_poll+0x680/0x680 [ 413.102497][T11681] ? __fget_files+0x28/0x4b0 [ 413.107180][T11681] ? __fget_files+0x28/0x4b0 [ 413.111874][T11681] ? aa_sock_opt_perm+0x74/0x100 [ 413.116907][T11681] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 413.122544][T11681] ? security_socket_setsockopt+0x7e/0xa0 [ 413.128449][T11681] ? xsk_poll+0x680/0x680 [ 413.132779][T11681] do_sock_setsockopt+0x175/0x1a0 [ 413.137947][T11681] ? __fdget+0x180/0x210 [ 413.142224][T11681] __x64_sys_setsockopt+0x182/0x200 [ 413.147446][T11681] do_syscall_64+0x55/0xb0 [ 413.152064][T11681] ? clear_bhb_loop+0x40/0x90 [ 413.156749][T11681] ? clear_bhb_loop+0x40/0x90 [ 413.161432][T11681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.167338][T11681] RIP: 0033:0x7f88b659ce59 [ 413.172281][T11681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.192716][T11681] RSP: 002b:00007f88b750d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 413.201225][T11681] RAX: ffffffffffffffda RBX: 00007f88b6816090 RCX: 00007f88b659ce59 [ 413.209312][T11681] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 413.217375][T11681] RBP: 00007f88b6632d6f R08: 0000000000000004 R09: 0000000000000000 [ 413.225522][T11681] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 413.233525][T11681] R13: 00007f88b6816128 R14: 00007f88b6816090 R15: 00007ffdd8421678 [ 413.242329][T11681] [ 413.265575][T11681] Mem-Info: [ 413.268976][T11681] active_anon:33496 inactive_anon:0 isolated_anon:0 [ 413.268976][T11681] active_file:19355 inactive_file:40077 isolated_file:0 [ 413.268976][T11681] unevictable:768 dirty:177 writeback:0 [ 413.268976][T11681] slab_reclaimable:12868 slab_unreclaimable:106484 [ 413.268976][T11681] mapped:36811 shmem:22865 pagetables:645 [ 413.268976][T11681] sec_pagetables:0 bounce:0 [ 413.268976][T11681] kernel_misc_reclaimable:0 [ 413.268976][T11681] free:1301921 free_pcp:5006 free_cma:0 [ 413.330297][T11681] Node 0 active_anon:136884kB inactive_anon:0kB active_file:77420kB inactive_file:160108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147320kB dirty:740kB writeback:0kB shmem:92888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11636kB pagetables:2636kB sec_pagetables:0kB all_unreclaimable? no [ 413.404187][T11681] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 413.492896][T11681] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 413.540651][T11687] netlink: 'syz.2.2029': attribute type 10 has an invalid length. [ 413.572968][T11687] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2029'. [ 413.594082][T11681] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 413.600034][T11681] Node 0 DMA32 free:1284024kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:149148kB inactive_anon:0kB active_file:77420kB inactive_file:159284kB unevictable:1536kB writepending:740kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:4076kB local_pcp:2220kB free_cma:0kB [ 413.682962][T11681] lowmem_reserve[]: 0 0 0 0 0 [ 413.687791][T11681] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 413.829529][T11681] lowmem_reserve[]: 0 0 0 0 0 [ 413.888147][T11681] Node 1 Normal free:3893184kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16224kB local_pcp:11232kB free_cma:0kB [ 414.016880][T11697] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2033'. [ 414.028681][T11681] lowmem_reserve[]: 0 0 0 0 0 [ 414.033573][T11681] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 414.084118][T11681] Node 0 DMA32: 1*4kB (E) 260*8kB (UE) 274*16kB (UME) 312*32kB (UE) 185*64kB (UE) 88*128kB (UME) 125*256kB (UME) 49*512kB (M) 40*1024kB (UM) 15*2048kB (UM) 267*4096kB (UME) = 1261956kB [ 414.175325][T11681] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 414.214134][T11681] Node 1 Normal: 216*4kB (UE) 44*8kB (UE) 46*16kB (UE) 105*32kB (UE) 26*64kB (UME) 7*128kB (UME) 3*256kB (UE) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 947*4096kB (M) = 3893184kB [ 414.242931][T11681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 414.252625][T11681] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 414.284777][T11681] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 414.304220][T11681] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 414.324286][T11681] 95113 total pagecache pages [ 414.329044][T11681] 0 pages in swap cache [ 414.334393][T11681] Free swap = 124996kB [ 414.339502][T11681] Total swap = 124996kB [ 414.352956][T11681] 2097051 pages RAM [ 414.356939][T11681] 0 pages HighMem/MovableOnly [ 414.361648][T11681] 416933 pages reserved [ 414.371329][T11681] 0 pages cma reserved [ 415.194852][T11722] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.2043'. [ 415.232074][T11721] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.2043'. [ 415.867159][T11730] netlink: 'syz.0.2046': attribute type 10 has an invalid length. [ 415.973845][T11730] team0: Device hsr_slave_0 failed to register rx_handler [ 416.459607][T11742] netlink: 'syz.3.2049': attribute type 1 has an invalid length. [ 416.510731][T11742] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2049'. [ 417.060881][T11751] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2051'. [ 417.408015][T11753] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2052'. [ 419.321892][T11790] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2065'. [ 420.193086][T11796] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2067'. [ 420.451725][T11803] netlink: 'syz.2.2069': attribute type 10 has an invalid length. [ 420.637636][T11803] team0: Port device hsr_slave_0 added [ 421.597835][T11827] netlink: 'syz.3.2077': attribute type 21 has an invalid length. [ 421.608048][T11827] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2077'. [ 421.994860][T11831] netlink: 'syz.0.2078': attribute type 10 has an invalid length. [ 422.013065][T11831] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2078'. [ 422.067515][T11831] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 422.122613][T11831] netlink: 'syz.0.2078': attribute type 64 has an invalid length. [ 422.869880][T11849] netlink: 'syz.3.2084': attribute type 10 has an invalid length. [ 422.881150][T11849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2084'. [ 422.890920][T11849] ipvlan1: entered promiscuous mode [ 422.896466][T11849] ipvlan1: entered allmulticast mode [ 422.947960][T11849] veth0_vlan: entered allmulticast mode [ 422.983618][T11849] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 423.129282][T11847] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2083'. [ 424.400572][T11870] netlink: 'syz.2.2091': attribute type 29 has an invalid length. [ 424.421530][T11870] netlink: 'syz.2.2091': attribute type 29 has an invalid length. [ 424.441870][T11870] netlink: 'syz.2.2091': attribute type 29 has an invalid length. [ 424.545230][T11870] netlink: 'syz.2.2091': attribute type 29 has an invalid length. [ 424.630001][T11870] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 424.646064][T11870] dvmrp1: linktype set to 768 [ 425.212664][T11895] FAULT_INJECTION: forcing a failure. [ 425.212664][T11895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.237956][T11895] CPU: 1 PID: 11895 Comm: syz.2.2099 Not tainted syzkaller #0 [ 425.245483][T11895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 425.255560][T11895] Call Trace: [ 425.258855][T11895] [ 425.261810][T11895] dump_stack_lvl+0x18c/0x250 [ 425.266524][T11895] ? show_regs_print_info+0x20/0x20 [ 425.271757][T11895] ? load_image+0x420/0x420 [ 425.276288][T11895] ? __might_fault+0xaa/0x120 [ 425.280999][T11895] ? __lock_acquire+0x7d40/0x7d40 [ 425.286076][T11895] should_fail_ex+0x39d/0x4d0 [ 425.290786][T11895] _copy_from_user+0x2f/0xe0 [ 425.295407][T11895] kstrtouint_from_user+0xde/0x170 [ 425.300567][T11895] ? kstrtol_from_user+0x190/0x190 [ 425.305837][T11895] proc_fail_nth_write+0x8f/0x250 [ 425.310908][T11895] ? proc_fail_nth_read+0x260/0x260 [ 425.316145][T11895] ? proc_fail_nth_read+0x260/0x260 [ 425.321368][T11895] vfs_write+0x296/0x990 [ 425.326076][T11895] ? file_end_write+0x250/0x250 [ 425.330944][T11895] ? __fget_files+0x28/0x4b0 [ 425.335630][T11895] ? __fget_files+0x28/0x4b0 [ 425.340499][T11895] ? __fget_files+0x43d/0x4b0 [ 425.345714][T11895] ? __fdget_pos+0x2a3/0x330 [ 425.350308][T11895] ? ksys_write+0x75/0x260 [ 425.355598][T11895] ksys_write+0x150/0x260 [ 425.359966][T11895] ? __ia32_sys_read+0x90/0x90 [ 425.365736][T11895] ? lockdep_hardirqs_on+0x98/0x150 [ 425.370961][T11895] do_syscall_64+0x55/0xb0 [ 425.375395][T11895] ? clear_bhb_loop+0x40/0x90 [ 425.380098][T11895] ? clear_bhb_loop+0x40/0x90 [ 425.384819][T11895] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.390729][T11895] RIP: 0033:0x7f9aedd5d68e [ 425.395148][T11895] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 425.414814][T11895] RSP: 002b:00007f9aeebe3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 425.423233][T11895] RAX: ffffffffffffffda RBX: 00007f9aeebe46c0 RCX: 00007f9aedd5d68e [ 425.431208][T11895] RDX: 0000000000000001 RSI: 00007f9aeebe40a0 RDI: 0000000000000007 [ 425.439192][T11895] RBP: 00007f9aeebe4090 R08: 0000000000000000 R09: 0000000000000000 [ 425.447180][T11895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.455159][T11895] R13: 00007f9aee016038 R14: 00007f9aee015fa0 R15: 00007ffdcd0a4b28 [ 425.463169][T11895] [ 425.771384][T11903] FAULT_INJECTION: forcing a failure. [ 425.771384][T11903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.813854][T11903] CPU: 1 PID: 11903 Comm: syz.2.2102 Not tainted syzkaller #0 [ 425.821379][T11903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 425.831545][T11903] Call Trace: [ 425.834840][T11903] [ 425.837770][T11903] dump_stack_lvl+0x18c/0x250 [ 425.842452][T11903] ? show_regs_print_info+0x20/0x20 [ 425.847656][T11903] ? load_image+0x420/0x420 [ 425.852195][T11903] ? __lock_acquire+0x7d40/0x7d40 [ 425.857324][T11903] ? __virt_addr_valid+0x18c/0x540 [ 425.862545][T11903] should_fail_ex+0x39d/0x4d0 [ 425.867229][T11903] _copy_from_user+0x2f/0xe0 [ 425.871836][T11903] bpf_test_init+0xde/0x140 [ 425.876366][T11903] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 425.881761][T11903] ? dev_put+0x80/0x80 [ 425.885854][T11903] ? dev_put+0x80/0x80 [ 425.889925][T11903] bpf_prog_test_run+0x321/0x390 [ 425.894866][T11903] __sys_bpf+0x49d/0x890 [ 425.899112][T11903] ? bpf_link_show_fdinfo+0x390/0x390 [ 425.904492][T11903] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 425.910661][T11903] __x64_sys_bpf+0x7c/0x90 [ 425.915076][T11903] do_syscall_64+0x55/0xb0 [ 425.919506][T11903] ? clear_bhb_loop+0x40/0x90 [ 425.924202][T11903] ? clear_bhb_loop+0x40/0x90 [ 425.928885][T11903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.934782][T11903] RIP: 0033:0x7f9aedd9ce59 [ 425.939201][T11903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.958823][T11903] RSP: 002b:00007f9aeebe4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 425.967351][T11903] RAX: ffffffffffffffda RBX: 00007f9aee015fa0 RCX: 00007f9aedd9ce59 [ 425.975959][T11903] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 425.985157][T11903] RBP: 00007f9aeebe4090 R08: 0000000000000000 R09: 0000000000000000 [ 425.993127][T11903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.001180][T11903] R13: 00007f9aee016038 R14: 00007f9aee015fa0 R15: 00007ffdcd0a4b28 [ 426.009179][T11903] [ 426.222361][T11907] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2103'. [ 427.289767][T11941] netlink: 'syz.0.2116': attribute type 2 has an invalid length. [ 427.519302][T11944] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2117'. [ 427.530458][T11945] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2117'. [ 427.544528][T11944] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2117'. [ 427.770014][T11949] syzkaller0: entered promiscuous mode [ 427.778926][T11949] syzkaller0: entered allmulticast mode [ 427.812171][T11947] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2118'. [ 430.246542][T11961] netlink: 'syz.1.2123': attribute type 10 has an invalid length. [ 430.261990][T11961] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2123'. [ 430.446519][T11969] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2127'. [ 430.828801][T11980] IPv6: Can't replace route, no match found [ 431.149119][T11992] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2133'. [ 431.817426][T12005] netlink: 'syz.3.2137': attribute type 10 has an invalid length. [ 431.839950][T12005] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2137'. [ 431.854941][T12005] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 432.329709][T12016] netlink: 'syz.0.2142': attribute type 10 has an invalid length. [ 432.343469][T12016] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2142'. [ 432.355886][T12016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 432.389680][T12016] hsr0: entered promiscuous mode [ 432.500921][ T51] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 432.511512][T12016] syz.0.2142 (12016) used greatest stack depth: 17800 bytes left [ 432.639544][T12027] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2147'. [ 432.881381][T12038] netlink: 'syz.0.2152': attribute type 10 has an invalid length. [ 433.656736][T12060] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2156'. [ 433.693585][T12062] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2156'. [ 435.526673][T12082] netlink: 'syz.1.2164': attribute type 2 has an invalid length. [ 435.537111][T12082] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2164'. [ 435.887845][T12094] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2168'. [ 435.933819][T12094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.968085][T12095] netlink: 'syz.1.2169': attribute type 49 has an invalid length. [ 435.990966][T12095] netlink: set zone limit has 8 unknown bytes [ 436.618333][T12117] netlink: 'syz.1.2176': attribute type 10 has an invalid length. [ 436.629116][T12117] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2176'. [ 436.675994][T12117] .`: (slave team0): Releasing backup interface [ 436.735770][T12117] bridge0: port 4(team0) entered blocking state [ 436.763574][T12117] bridge0: port 4(team0) entered disabled state [ 436.820229][T12119] netlink: 'syz.0.2175': attribute type 2 has an invalid length. [ 436.843110][T12119] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2175'. [ 437.131250][T12133] FAULT_INJECTION: forcing a failure. [ 437.131250][T12133] name failslab, interval 1, probability 0, space 0, times 0 [ 437.165102][T12133] CPU: 0 PID: 12133 Comm: syz.0.2181 Not tainted syzkaller #0 [ 437.172735][T12133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 437.182911][T12133] Call Trace: [ 437.186216][T12133] [ 437.189176][T12133] dump_stack_lvl+0x18c/0x250 [ 437.193915][T12133] ? show_regs_print_info+0x20/0x20 [ 437.194182][T12124] Ÿë: port 1(ip6gretap0) entered blocking state [ 437.199229][T12133] ? load_image+0x420/0x420 [ 437.199291][T12133] ? __might_sleep+0xe0/0xe0 [ 437.199318][T12133] ? __lock_acquire+0x7d40/0x7d40 [ 437.199355][T12133] should_fail_ex+0x39d/0x4d0 [ 437.199393][T12133] should_failslab+0x9/0x20 [ 437.217041][T12124] Ÿë: port 1(ip6gretap0) entered disabled state [ 437.220112][T12133] slab_pre_alloc_hook+0x59/0x310 [ 437.220163][T12133] kmem_cache_alloc_node+0x60/0x320 [ 437.220189][T12133] ? __alloc_skb+0x103/0x2c0 [ 437.220223][T12133] __alloc_skb+0x103/0x2c0 [ 437.220255][T12133] netlink_dump+0x1ec/0xe50 [ 437.240316][T12124] ip6gretap0: entered allmulticast mode [ 437.240976][T12133] ? __mutex_lock+0x315/0xcc0 [ 437.241011][T12133] ? netlink_lookup+0x200/0x200 [ 437.241061][T12133] ? netlink_autobind+0x300/0x300 [ 437.241091][T12133] ? netlink_lookup+0x30/0x200 [ 437.285077][T12133] ? netlink_lookup+0x30/0x200 [ 437.289867][T12133] __netlink_dump_start+0x5f1/0x810 [ 437.295108][T12133] unix_diag_handler_dump+0x1b7/0x920 [ 437.301385][T12133] ? sock_diag_lock_handler+0x19/0x280 [ 437.306917][T12133] ? __lock_acquire+0x7d40/0x7d40 [ 437.311974][T12133] ? __unix_recvmsg+0xb0/0xb0 [ 437.316667][T12133] ? unix_diag_handler_dump+0x920/0x920 [ 437.322229][T12133] ? sock_diag_lock_handler+0x19/0x280 [ 437.327704][T12133] ? sock_diag_lock_handler+0x19/0x280 [ 437.333195][T12133] ? __unix_recvmsg+0xb0/0xb0 [ 437.337898][T12133] sock_diag_rcv_msg+0x3d8/0x600 [ 437.342870][T12133] netlink_rcv_skb+0x241/0x4d0 [ 437.347659][T12133] ? sock_diag_bind+0xb0/0xb0 [ 437.352346][T12133] ? netlink_ack+0x1180/0x1180 [ 437.357135][T12133] ? __lock_acquire+0x7d40/0x7d40 [ 437.362192][T12133] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.367414][T12133] sock_diag_rcv+0x2a/0x40 [ 437.371868][T12133] netlink_unicast+0x751/0x8d0 [ 437.376666][T12133] netlink_sendmsg+0x8d0/0xbf0 [ 437.381454][T12133] ? netlink_getsockopt+0x590/0x590 [ 437.386751][T12133] ? aa_sock_msg_perm+0x94/0x150 [ 437.391880][T12133] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 437.397436][T12133] ? security_socket_sendmsg+0x80/0xa0 [ 437.403012][T12133] ? netlink_getsockopt+0x590/0x590 [ 437.408239][T12133] ____sys_sendmsg+0x5ba/0x960 [ 437.413027][T12133] ? __asan_memset+0x22/0x40 [ 437.417632][T12133] ? __sys_sendmsg_sock+0x30/0x30 [ 437.422657][T12133] ? __import_iovec+0x5f2/0x850 [ 437.427524][T12133] ? import_iovec+0x73/0xa0 [ 437.432071][T12133] ___sys_sendmsg+0x2a6/0x360 [ 437.436842][T12133] ? get_pid_task+0x20/0x1e0 [ 437.441458][T12133] ? __sys_sendmsg+0x2a0/0x2a0 [ 437.446265][T12133] ? __lock_acquire+0x7d40/0x7d40 [ 437.451379][T12133] __se_sys_sendmsg+0x1c2/0x2b0 [ 437.456266][T12133] ? __x64_sys_sendmsg+0x80/0x80 [ 437.461267][T12133] ? lockdep_hardirqs_on+0x98/0x150 [ 437.466511][T12133] do_syscall_64+0x55/0xb0 [ 437.470949][T12133] ? clear_bhb_loop+0x40/0x90 [ 437.475722][T12133] ? clear_bhb_loop+0x40/0x90 [ 437.480493][T12133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.486399][T12133] RIP: 0033:0x7f88b659ce59 [ 437.490822][T12133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.510533][T12133] RSP: 002b:00007f88b752e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.518986][T12133] RAX: ffffffffffffffda RBX: 00007f88b6815fa0 RCX: 00007f88b659ce59 [ 437.526990][T12133] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 437.534971][T12133] RBP: 00007f88b752e090 R08: 0000000000000000 R09: 0000000000000000 [ 437.543007][T12133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.550995][T12133] R13: 00007f88b6816038 R14: 00007f88b6815fa0 R15: 00007ffdd8421678 [ 437.558997][T12133] [ 437.593627][T12124] ip6gretap0: entered promiscuous mode [ 438.189551][T12152] FAULT_INJECTION: forcing a failure. [ 438.189551][T12152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.229500][T12152] CPU: 0 PID: 12152 Comm: syz.1.2185 Not tainted syzkaller #0 [ 438.237019][T12152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 438.247882][T12152] Call Trace: [ 438.251191][T12152] [ 438.254139][T12152] dump_stack_lvl+0x18c/0x250 [ 438.258855][T12152] ? show_regs_print_info+0x20/0x20 [ 438.264090][T12152] ? load_image+0x420/0x420 [ 438.268618][T12152] ? __lock_acquire+0x7d40/0x7d40 [ 438.273672][T12152] ? __virt_addr_valid+0x18c/0x540 [ 438.278821][T12152] should_fail_ex+0x39d/0x4d0 [ 438.283702][T12152] _copy_from_user+0x2f/0xe0 [ 438.288328][T12152] bpf_test_init+0xde/0x140 [ 438.292849][T12152] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 438.298279][T12152] ? dev_put+0x80/0x80 [ 438.302383][T12152] ? dev_put+0x80/0x80 [ 438.306481][T12152] bpf_prog_test_run+0x321/0x390 [ 438.311430][T12152] __sys_bpf+0x49d/0x890 [ 438.316374][T12152] ? bpf_link_show_fdinfo+0x390/0x390 [ 438.322195][T12152] ? lock_chain_count+0x20/0x20 [ 438.327132][T12152] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 438.333120][T12152] __x64_sys_bpf+0x7c/0x90 [ 438.337760][T12152] do_syscall_64+0x55/0xb0 [ 438.342259][T12152] ? clear_bhb_loop+0x40/0x90 [ 438.346927][T12152] ? clear_bhb_loop+0x40/0x90 [ 438.351861][T12152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.357776][T12152] RIP: 0033:0x7f4899b9ce59 [ 438.362303][T12152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.381921][T12152] RSP: 002b:00007f4897df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 438.390486][T12152] RAX: ffffffffffffffda RBX: 00007f4899e15fa0 RCX: 00007f4899b9ce59 [ 438.398546][T12152] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 438.406513][T12152] RBP: 00007f4897df6090 R08: 0000000000000000 R09: 0000000000000000 [ 438.415017][T12152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.423087][T12152] R13: 00007f4899e16038 R14: 00007f4899e15fa0 R15: 00007ffc641c4808 [ 438.431271][T12152] [ 439.203388][T12166] netlink: 'syz.0.2198': attribute type 21 has an invalid length. [ 439.223036][T12166] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2198'. [ 439.240545][T12166] netlink: 'syz.0.2198': attribute type 5 has an invalid length. [ 439.256362][T12166] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2198'. [ 439.453043][T12177] netlink: 'syz.2.2190': attribute type 2 has an invalid length. [ 439.460849][T12177] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2190'. [ 440.200085][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.209109][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.434719][T12186] FAULT_INJECTION: forcing a failure. [ 441.434719][T12186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.498933][T12186] CPU: 0 PID: 12186 Comm: syz.2.2196 Not tainted syzkaller #0 [ 441.506500][T12186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 441.516844][T12186] Call Trace: [ 441.520168][T12186] [ 441.523140][T12186] dump_stack_lvl+0x18c/0x250 [ 441.528043][T12186] ? show_regs_print_info+0x20/0x20 [ 441.533273][T12186] ? load_image+0x420/0x420 [ 441.537799][T12186] ? __might_fault+0xaa/0x120 [ 441.542498][T12186] should_fail_ex+0x39d/0x4d0 [ 441.547255][T12186] copyin+0x1a/0x90 [ 441.551099][T12186] _copy_from_iter+0x404/0x12e0 [ 441.555996][T12186] ? copyin+0x70/0x90 [ 441.560025][T12186] ? copyout_mc+0x70/0x70 [ 441.564573][T12186] ? copyout_mc+0x70/0x70 [ 441.568930][T12186] ? __virt_addr_valid+0x18c/0x540 [ 441.574066][T12186] ? page_copy_sane+0x16a/0x270 [ 441.579117][T12186] copy_page_from_iter+0x7b/0x100 [ 441.584198][T12186] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 441.590041][T12186] packet_sendmsg+0x33ff/0x4c30 [ 441.594966][T12186] ? __might_sleep+0xe0/0xe0 [ 441.599587][T12186] ? mark_lock+0x94/0x320 [ 441.603945][T12186] ? __lock_acquire+0x1273/0x7d40 [ 441.609064][T12186] ? verify_lock_unused+0x140/0x140 [ 441.615786][T12186] ? aa_sk_perm+0x83c/0x970 [ 441.620342][T12186] ? packet_getsockopt+0xad0/0xad0 [ 441.625473][T12186] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 441.631052][T12186] ? aa_sock_msg_perm+0x94/0x150 [ 441.636009][T12186] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 441.641512][T12186] ? security_socket_sendmsg+0x80/0xa0 [ 441.647099][T12186] ? packet_getsockopt+0xad0/0xad0 [ 441.652247][T12186] ____sys_sendmsg+0x5ba/0x960 [ 441.657036][T12186] ? __lock_acquire+0x7d40/0x7d40 [ 441.662112][T12186] ? __asan_memset+0x22/0x40 [ 441.666829][T12186] ? __sys_sendmsg_sock+0x30/0x30 [ 441.671892][T12186] ? __import_iovec+0x3fa/0x850 [ 441.676794][T12186] ? import_iovec+0x73/0xa0 [ 441.681327][T12186] ___sys_sendmsg+0x2a6/0x360 [ 441.686139][T12186] ? get_pid_task+0x20/0x1e0 [ 441.690777][T12186] ? __sys_sendmsg+0x2a0/0x2a0 [ 441.695582][T12186] ? __lock_acquire+0x7d40/0x7d40 [ 441.700733][T12186] __se_sys_sendmsg+0x1c2/0x2b0 [ 441.705689][T12186] ? __x64_sys_sendmsg+0x80/0x80 [ 441.710839][T12186] ? lockdep_hardirqs_on+0x98/0x150 [ 441.716323][T12186] do_syscall_64+0x55/0xb0 [ 441.721033][T12186] ? clear_bhb_loop+0x40/0x90 [ 441.725803][T12186] ? clear_bhb_loop+0x40/0x90 [ 441.731754][T12186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.737855][T12186] RIP: 0033:0x7f9aedd9ce59 [ 441.742293][T12186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.762105][T12186] RSP: 002b:00007f9aeebe4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.770893][T12186] RAX: ffffffffffffffda RBX: 00007f9aee015fa0 RCX: 00007f9aedd9ce59 [ 441.778879][T12186] RDX: 0000000000008045 RSI: 0000200000000040 RDI: 0000000000000003 [ 441.786863][T12186] RBP: 00007f9aeebe4090 R08: 0000000000000000 R09: 0000000000000000 [ 441.794852][T12186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 441.802835][T12186] R13: 00007f9aee016038 R14: 00007f9aee015fa0 R15: 00007ffdcd0a4b28 [ 441.810850][T12186] [ 442.376745][T12190] FAULT_INJECTION: forcing a failure. [ 442.376745][T12190] name failslab, interval 1, probability 0, space 0, times 0 [ 442.401054][T12190] CPU: 1 PID: 12190 Comm: syz.1.2193 Not tainted syzkaller #0 [ 442.408614][T12190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 442.418870][T12190] Call Trace: [ 442.422281][T12190] [ 442.429527][T12190] dump_stack_lvl+0x18c/0x250 [ 442.437736][T12190] ? show_regs_print_info+0x20/0x20 [ 442.443182][T12190] ? load_image+0x420/0x420 [ 442.448259][T12190] ? __might_sleep+0xe0/0xe0 [ 442.453094][T12190] ? __lock_acquire+0x7d40/0x7d40 [ 442.459082][T12190] should_fail_ex+0x39d/0x4d0 [ 442.463879][T12190] should_failslab+0x9/0x20 [ 442.468926][T12190] slab_pre_alloc_hook+0x59/0x310 [ 442.474340][T12190] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 442.480578][T12190] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 442.487012][T12190] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 442.492843][T12190] __kmem_cache_alloc_node+0x53/0x250 [ 442.499696][T12190] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 442.505979][T12190] __kmalloc+0xa4/0x230 [ 442.511042][T12190] tomoyo_realpath_from_path+0xe3/0x5d0 [ 442.517440][T12190] tomoyo_path_number_perm+0x248/0x620 [ 442.522936][T12190] ? tomoyo_path_number_perm+0x217/0x620 [ 442.528964][T12190] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 442.534459][T12190] ? ksys_write+0x1c4/0x260 [ 442.540004][T12190] ? __fget_files+0x28/0x4b0 [ 442.545226][T12190] ? __fget_files+0x28/0x4b0 [ 442.549933][T12190] security_file_ioctl+0x70/0xa0 [ 442.554964][T12190] __se_sys_ioctl+0x48/0x170 [ 442.560101][T12190] do_syscall_64+0x55/0xb0 [ 442.564566][T12190] ? clear_bhb_loop+0x40/0x90 [ 442.569269][T12190] ? clear_bhb_loop+0x40/0x90 [ 442.574208][T12190] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.580106][T12190] RIP: 0033:0x7f4899b9ce59 [ 442.584526][T12190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.605443][T12190] RSP: 002b:00007f4897df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.615110][T12190] RAX: ffffffffffffffda RBX: 00007f4899e15fa0 RCX: 00007f4899b9ce59 [ 442.623193][T12190] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000016 [ 442.631294][T12190] RBP: 00007f4897df6090 R08: 0000000000000000 R09: 0000000000000000 [ 442.640153][T12190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.648499][T12190] R13: 00007f4899e16038 R14: 00007f4899e15fa0 R15: 00007ffc641c4808 [ 442.656766][T12190] [ 442.713237][T12190] ERROR: Out of memory at tomoyo_realpath_from_path. [ 443.035926][T12204] FAULT_INJECTION: forcing a failure. [ 443.035926][T12204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.050625][T12204] CPU: 0 PID: 12204 Comm: syz.2.2204 Not tainted syzkaller #0 [ 443.058115][T12204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 443.068208][T12204] Call Trace: [ 443.071505][T12204] [ 443.074446][T12204] dump_stack_lvl+0x18c/0x250 [ 443.079174][T12204] ? show_regs_print_info+0x20/0x20 [ 443.084434][T12204] ? load_image+0x420/0x420 [ 443.086252][T12207] IPv6: Can't replace route, no match found [ 443.089159][T12204] ? __might_fault+0xaa/0x120 [ 443.089183][T12204] ? __lock_acquire+0x7d40/0x7d40 [ 443.105162][T12204] should_fail_ex+0x39d/0x4d0 [ 443.110049][T12204] _copy_from_user+0x2f/0xe0 [ 443.114689][T12204] generic_map_update_batch+0x54b/0x810 [ 443.120280][T12204] ? rcu_read_unlock+0xa0/0xa0 [ 443.125077][T12204] ? __fdget+0x180/0x210 [ 443.129346][T12204] ? rcu_read_unlock+0xa0/0xa0 [ 443.134125][T12204] bpf_map_do_batch+0x3d7/0x610 [ 443.139003][T12204] __sys_bpf+0x381/0x890 [ 443.143269][T12204] ? bpf_link_show_fdinfo+0x390/0x390 [ 443.148679][T12204] ? lock_chain_count+0x20/0x20 [ 443.153650][T12204] __x64_sys_bpf+0x7c/0x90 [ 443.158088][T12204] do_syscall_64+0x55/0xb0 [ 443.162522][T12204] ? clear_bhb_loop+0x40/0x90 [ 443.167214][T12204] ? clear_bhb_loop+0x40/0x90 [ 443.171909][T12204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.177913][T12204] RIP: 0033:0x7f9aedd9ce59 [ 443.182352][T12204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.202094][T12204] RSP: 002b:00007f9aeebe4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 443.210706][T12204] RAX: ffffffffffffffda RBX: 00007f9aee015fa0 RCX: 00007f9aedd9ce59 [ 443.218710][T12204] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 443.226703][T12204] RBP: 00007f9aeebe4090 R08: 0000000000000000 R09: 0000000000000000 [ 443.234701][T12204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 443.242702][T12204] R13: 00007f9aee016038 R14: 00007f9aee015fa0 R15: 00007ffdcd0a4b28 [ 443.250713][T12204] [ 443.451189][T12214] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2207'. [ 443.600106][T12214] C (unregistering): left promiscuous mode [ 443.607463][T12214] C (unregistering): left allmulticast mode [ 443.626094][T12214] team0: Port device C removed [ 443.850832][T12224] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2210'. [ 443.902292][T12228] netlink: 'syz.0.2211': attribute type 3 has an invalid length. [ 443.973309][T12228] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2211'. [ 444.328601][T12227] mac80211_hwsim hwsim7 ..ãc¤±: renamed from wlan1 (while UP) [ 444.405776][T12230] netlink: 'syz.2.2212': attribute type 25 has an invalid length. [ 444.425241][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2212'. [ 444.776743][T12236] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2214'. [ 444.830397][T12236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.216527][T12256] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2220'. [ 445.255449][T12247] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 445.522037][T12247] netlink: 'syz.0.2218': attribute type 3 has an invalid length. [ 445.580968][T12247] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.2218'. [ 445.991774][T12271] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2225'. [ 446.211223][T12277] netlink: 'syz.3.2227': attribute type 3 has an invalid length. [ 446.262446][T12277] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2227'. [ 446.354442][T12280] netlink: 'syz.3.2227': attribute type 33 has an invalid length. [ 446.362509][T12280] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2227'. [ 447.069016][T12296] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 447.124515][T12296] netlink: 'syz.3.2233': attribute type 3 has an invalid length. [ 448.023517][T10508] wlan1: Trigger new scan to find an IBSS to join [ 448.222516][T12322] sock: sock_timestamping_bind_phc: sock not bind to device [ 448.725410][T12333] __nla_validate_parse: 3 callbacks suppressed [ 448.725461][T12333] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2246'. [ 448.880604][T12333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.092602][T12344] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2249'. [ 449.195679][T12344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.814832][T12352] FAULT_INJECTION: forcing a failure. [ 449.814832][T12352] name failslab, interval 1, probability 0, space 0, times 0 [ 449.910335][T12352] CPU: 1 PID: 12352 Comm: syz.3.2251 Not tainted syzkaller #0 [ 449.917864][T12352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 449.928115][T12352] Call Trace: [ 449.931408][T12352] [ 449.934350][T12352] dump_stack_lvl+0x18c/0x250 [ 449.939062][T12352] ? show_regs_print_info+0x20/0x20 [ 449.944294][T12352] ? load_image+0x420/0x420 [ 449.948817][T12352] ? __might_sleep+0xe0/0xe0 [ 449.953429][T12352] ? __lock_acquire+0x7d40/0x7d40 [ 449.958474][T12352] should_fail_ex+0x39d/0x4d0 [ 449.963315][T12352] should_failslab+0x9/0x20 [ 449.967833][T12352] slab_pre_alloc_hook+0x59/0x310 [ 449.972984][T12352] ? call_usermodehelper_setup+0x8e/0x260 [ 449.978728][T12352] __kmem_cache_alloc_node+0x53/0x250 [ 449.985404][T12352] ? call_usermodehelper_setup+0x8e/0x260 [ 449.991143][T12352] kmalloc_trace+0x2a/0xe0 [ 449.995591][T12352] call_usermodehelper_setup+0x8e/0x260 [ 450.001247][T12352] ? __request_module+0x600/0x600 [ 450.006307][T12352] __request_module+0x3bb/0x600 [ 450.011187][T12352] ? module_enforce_rwx_sections+0x150/0x150 [ 450.017277][T12352] ? dev_load+0x21/0x1f0 [ 450.021552][T12352] ? bpf_lsm_capable+0x9/0x10 [ 450.026258][T12352] ? dev_load+0x21/0x1f0 [ 450.030525][T12352] dev_load+0x18b/0x1f0 [ 450.034699][T12352] dev_ioctl+0x384/0x1140 [ 450.039059][T12352] sock_do_ioctl+0x239/0x310 [ 450.043681][T12352] ? sock_show_fdinfo+0xb0/0xb0 [ 450.048570][T12352] sock_ioctl+0x5ba/0x7e0 [ 450.052912][T12352] ? sock_poll+0x3e0/0x3e0 [ 450.057373][T12352] ? bpf_lsm_file_ioctl+0x9/0x10 [ 450.062340][T12352] ? security_file_ioctl+0x80/0xa0 [ 450.067485][T12352] ? sock_poll+0x3e0/0x3e0 [ 450.071932][T12352] __se_sys_ioctl+0xfd/0x170 [ 450.076552][T12352] do_syscall_64+0x55/0xb0 [ 450.080999][T12352] ? clear_bhb_loop+0x40/0x90 [ 450.085690][T12352] ? clear_bhb_loop+0x40/0x90 [ 450.090380][T12352] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.096293][T12352] RIP: 0033:0x7fd04899ce59 [ 450.100717][T12352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.120349][T12352] RSP: 002b:00007fd04989e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.129432][T12352] RAX: ffffffffffffffda RBX: 00007fd048c15fa0 RCX: 00007fd04899ce59 [ 450.137428][T12352] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000011 [ 450.145414][T12352] RBP: 00007fd04989e090 R08: 0000000000000000 R09: 0000000000000000 [ 450.153659][T12352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.161762][T12352] R13: 00007fd048c16038 R14: 00007fd048c15fa0 R15: 00007ffe906f2a58 [ 450.169766][T12352] [ 450.377588][T12360] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2253'. [ 450.442901][T12360] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 450.605885][T12360] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 451.063874][T10509] wlan1: Trigger new scan to find an IBSS to join [ 451.070523][T10505] wlan1: Trigger new scan to find an IBSS to join [ 451.510187][T12378] FAULT_INJECTION: forcing a failure. [ 451.510187][T12378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.600698][T12378] CPU: 0 PID: 12378 Comm: syz.0.2260 Not tainted syzkaller #0 [ 451.608221][T12378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 451.618385][T12378] Call Trace: [ 451.621707][T12378] [ 451.624657][T12378] dump_stack_lvl+0x18c/0x250 [ 451.629362][T12378] ? show_regs_print_info+0x20/0x20 [ 451.634580][T12378] ? load_image+0x420/0x420 [ 451.639094][T12378] ? __might_fault+0xaa/0x120 [ 451.644039][T12378] ? __lock_acquire+0x7d40/0x7d40 [ 451.649103][T12378] should_fail_ex+0x39d/0x4d0 [ 451.653806][T12378] _copy_to_user+0x2f/0xa0 [ 451.658440][T12378] bpf_obj_get_info_by_fd+0x192e/0x3080 [ 451.664273][T12378] ? bpf_map_get_fd_by_id+0x310/0x310 [ 451.669874][T12378] ? file_end_write+0x159/0x250 [ 451.674907][T12378] ? __might_fault+0xaa/0x120 [ 451.679791][T12378] ? __might_fault+0xc6/0x120 [ 451.684489][T12378] ? __might_fault+0xaa/0x120 [ 451.689268][T12378] ? bpf_lsm_bpf+0x9/0x10 [ 451.693603][T12378] ? security_bpf+0x7e/0xa0 [ 451.698113][T12378] __sys_bpf+0x7eb/0x890 [ 451.702362][T12378] ? bpf_link_show_fdinfo+0x390/0x390 [ 451.707760][T12378] ? lock_chain_count+0x20/0x20 [ 451.712620][T12378] __x64_sys_bpf+0x7c/0x90 [ 451.717039][T12378] do_syscall_64+0x55/0xb0 [ 451.721453][T12378] ? clear_bhb_loop+0x40/0x90 [ 451.726124][T12378] ? clear_bhb_loop+0x40/0x90 [ 451.730808][T12378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.736718][T12378] RIP: 0033:0x7f88b659ce59 [ 451.741150][T12378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.760870][T12378] RSP: 002b:00007f88b752e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 451.769292][T12378] RAX: ffffffffffffffda RBX: 00007f88b6815fa0 RCX: 00007f88b659ce59 [ 451.777369][T12378] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 000000000000000f [ 451.785361][T12378] RBP: 00007f88b752e090 R08: 0000000000000000 R09: 0000000000000000 [ 451.793336][T12378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.801505][T12378] R13: 00007f88b6816038 R14: 00007f88b6815fa0 R15: 00007ffdd8421678 [ 451.809612][T12378] [ 452.352568][T12391] sit0: entered allmulticast mode [ 452.386093][T12391] sit0: entered promiscuous mode [ 452.578770][T12396] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2266'. [ 452.891323][T12403] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2267'. [ 453.530191][T12420] netlink: 'syz.0.2270': attribute type 2 has an invalid length. [ 453.565467][T12421] netlink: 'syz.0.2270': attribute type 2 has an invalid length. [ 453.579673][T12420] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.2270'. [ 453.584765][T12422] netlink: 'syz.2.2271': attribute type 3 has an invalid length. [ 453.606176][T12421] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.2270'. [ 453.622936][T12422] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2271'. [ 454.286240][T12437] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2276'. [ 454.362730][T12440] netlink: 'syz.3.2277': attribute type 29 has an invalid length. [ 455.003151][T10509] wlan1: Trigger new scan to find an IBSS to join [ 455.012972][T10510] wlan1: Trigger new scan to find an IBSS to join [ 455.182957][T12440] netlink: 'syz.3.2277': attribute type 29 has an invalid length. [ 455.212507][T12442] netlink: 'syz.2.2278': attribute type 29 has an invalid length. [ 455.275890][T12442] netlink: 'syz.2.2278': attribute type 29 has an invalid length. [ 455.600053][T12455] bridge0: port 5(ip6gretap0) entered blocking state [ 455.628978][T12455] bridge0: port 5(ip6gretap0) entered disabled state [ 455.654134][T12455] ip6gretap0: entered allmulticast mode [ 455.680286][T12455] ip6gretap0: entered promiscuous mode [ 455.694840][T12455] bridge0: port 5(ip6gretap0) entered blocking state [ 455.702582][T12455] bridge0: port 5(ip6gretap0) entered forwarding state [ 455.831190][T12438] delete_channel: no stack [ 456.019717][T10512] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 456.084484][T10510] wlan1: Creating new IBSS network, BSSID 5a:fb:47:f7:ac:74 [ 456.764508][ T5089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 456.764618][ T5779] bridge0: port 3(syz_tun) entered disabled state [ 456.783995][ T5089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 456.794856][ T5089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 456.806039][ T5089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 456.814019][ T5089] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 456.821566][ T5089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 456.890389][ T5779] syz_tun (unregistering): left allmulticast mode [ 456.916501][ T5779] syz_tun (unregistering): left promiscuous mode [ 456.932078][ T5779] bridge0: port 3(syz_tun) entered disabled state [ 457.429615][T12471] chnl_net:caif_netlink_parms(): no params data found [ 457.749212][T12471] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.775255][T12471] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.816268][T12471] bridge_slave_0: entered allmulticast mode [ 457.824055][T12471] bridge_slave_0: entered promiscuous mode [ 457.843082][T12471] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.863256][T12471] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.872057][T12471] bridge_slave_1: entered allmulticast mode [ 457.881984][T12471] bridge_slave_1: entered promiscuous mode [ 457.992577][T12471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.018443][T12471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.095922][T12471] team0: Port device team_slave_0 added [ 458.107819][T12489] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2288'. [ 458.146169][T12471] team0: Port device team_slave_1 added [ 458.207206][T12471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.222865][T12471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.281708][T12471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.311757][T12471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.326692][T12471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.402227][T12471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.581118][T12471] hsr_slave_0: entered promiscuous mode [ 458.643525][T12471] hsr_slave_1: entered promiscuous mode [ 458.910284][ T5089] Bluetooth: hci4: command tx timeout [ 459.005964][T12498] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2291'. [ 459.270526][T12471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.769382][T12499] delete_channel: no stack [ 459.938905][T12471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.191121][T12471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.477736][T12471] .`: (slave netdevsim0): Releasing backup interface [ 460.515975][T12471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.992142][ T5089] Bluetooth: hci4: command tx timeout [ 461.568111][T12527] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2299'. [ 461.650011][T12527] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2299'. [ 461.688390][T12471] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 461.732725][T12471] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 461.747060][T12527] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2299'. [ 461.781745][T12531] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2299'. [ 461.826292][T12471] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 461.886286][T12471] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 462.297117][T12471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.343980][T12471] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.368076][T10510] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.375362][T10510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.409224][T10510] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.416421][T10510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.456159][T12544] syz.3.2303[12544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 462.456466][T12544] syz.3.2303[12544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 462.667832][T12548] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2304'. [ 463.063305][ T5089] Bluetooth: hci4: command tx timeout [ 463.161520][T12471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.299168][T12471] veth0_vlan: entered promiscuous mode [ 463.330421][T12471] veth1_vlan: entered promiscuous mode [ 463.345736][T12564] FAULT_INJECTION: forcing a failure. [ 463.345736][T12564] name failslab, interval 1, probability 0, space 0, times 0 [ 463.407566][T12471] veth0_macvtap: entered promiscuous mode [ 463.437640][T12564] CPU: 0 PID: 12564 Comm: syz.1.2308 Not tainted syzkaller #0 [ 463.445253][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 463.455687][T12564] Call Trace: [ 463.458989][T12564] [ 463.461956][T12564] dump_stack_lvl+0x18c/0x250 [ 463.466678][T12564] ? show_regs_print_info+0x20/0x20 [ 463.471999][T12564] ? load_image+0x420/0x420 [ 463.476552][T12564] ? __might_sleep+0xe0/0xe0 [ 463.481169][T12564] ? __lock_acquire+0x7d40/0x7d40 [ 463.486303][T12564] ? __asan_memset+0x22/0x40 [ 463.490927][T12564] should_fail_ex+0x39d/0x4d0 [ 463.495642][T12564] should_failslab+0x9/0x20 [ 463.500177][T12564] slab_pre_alloc_hook+0x59/0x310 [ 463.505324][T12564] ? __kthread_create_on_node+0x116/0x3f0 [ 463.511078][T12564] __kmem_cache_alloc_node+0x53/0x250 [ 463.516487][T12564] ? __kthread_create_on_node+0x116/0x3f0 [ 463.522236][T12564] kmalloc_trace+0x2a/0xe0 [ 463.526685][T12564] ? rxrpc_direct_abort+0x330/0x330 [ 463.532113][T12564] __kthread_create_on_node+0x116/0x3f0 [ 463.537778][T12564] ? kthread_create_on_node+0x140/0x140 [ 463.543351][T12564] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 463.549347][T12564] ? rxrpc_direct_abort+0x330/0x330 [ 463.554555][T12564] ? rxrpc_direct_abort+0x330/0x330 [ 463.559772][T12564] kthread_create_on_node+0xec/0x140 [ 463.565069][T12564] ? __local_bh_enable_ip+0x13a/0x1c0 [ 463.570453][T12564] ? tsk_fork_get_node+0x70/0x70 [ 463.575388][T12564] ? __local_bh_enable_ip+0x13a/0x1c0 [ 463.580771][T12564] rxrpc_lookup_local+0xff3/0x1610 [ 463.586139][T12564] ? rxrpc_local_dont_fragment+0x70/0x70 [ 463.591777][T12564] ? none_clear+0x10/0x10 [ 463.596113][T12564] ? rxrpc_client_conn_reap_timeout+0xd0/0xd0 [ 463.602237][T12564] ? lockdep_hardirqs_on+0x98/0x150 [ 463.607442][T12564] ? _local_bh_enable+0xa0/0xa0 [ 463.612386][T12564] rxrpc_sendmsg+0x30a/0x5b0 [ 463.617081][T12564] ? rxrpc_getsockopt+0x150/0x150 [ 463.622111][T12564] ____sys_sendmsg+0x5ba/0x960 [ 463.626892][T12564] ? __sys_sendmsg_sock+0x30/0x30 [ 463.632114][T12564] ? __import_iovec+0x3fa/0x850 [ 463.636992][T12564] ? import_iovec+0x73/0xa0 [ 463.641499][T12564] ___sys_sendmsg+0x2a6/0x360 [ 463.646189][T12564] ? __sys_sendmsg+0x2a0/0x2a0 [ 463.650972][T12564] ? __lock_acquire+0x7d40/0x7d40 [ 463.656044][T12564] __se_sys_sendmsg+0x1c2/0x2b0 [ 463.660908][T12564] ? __x64_sys_sendmsg+0x80/0x80 [ 463.665906][T12564] ? lockdep_hardirqs_on+0x98/0x150 [ 463.671306][T12564] do_syscall_64+0x55/0xb0 [ 463.675741][T12564] ? clear_bhb_loop+0x40/0x90 [ 463.680420][T12564] ? clear_bhb_loop+0x40/0x90 [ 463.685101][T12564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.691002][T12564] RIP: 0033:0x7f4899b9ce59 [ 463.695414][T12564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.715156][T12564] RSP: 002b:00007f4897df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.723655][T12564] RAX: ffffffffffffffda RBX: 00007f4899e15fa0 RCX: 00007f4899b9ce59 [ 463.731625][T12564] RDX: 000000000000ff00 RSI: 0000200000000000 RDI: 0000000000000003 [ 463.740319][T12564] RBP: 00007f4897df6090 R08: 0000000000000000 R09: 0000000000000000 [ 463.748480][T12564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 463.756466][T12564] R13: 00007f4899e16038 R14: 00007f4899e15fa0 R15: 00007ffc641c4808 [ 463.764587][T12564] [ 463.770609][T12471] veth1_macvtap: entered promiscuous mode [ 463.791319][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.801926][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.814643][T12471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.858060][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.883109][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.904414][T12471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.917834][T12471] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.962884][T12471] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.971642][T12471] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.016104][T12471] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.188061][T12574] netlink: 'syz.1.2310': attribute type 10 has an invalid length. [ 464.243481][T12574] veth1_vlan: left allmulticast mode [ 464.258657][T12577] netlink: 'syz.0.2311': attribute type 3 has an invalid length. [ 464.283433][T12577] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2311'. [ 464.324356][T12574] team0: Port device macvlan0 removed [ 464.337479][T12574] veth1_vlan: entered allmulticast mode [ 464.349569][T12574] .`: (slave macvlan0): Enslaving as an active interface with an up link [ 464.404419][T10509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.414886][T10509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.490803][T10505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.495966][T12579] netlink: 'syz.3.2312': attribute type 21 has an invalid length. [ 464.511186][T10505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.042097][T12589] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2315'. [ 465.083269][T12585] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2314'. [ 465.144045][ T5089] Bluetooth: hci4: command tx timeout [ 466.126083][T12609] netlink: 'syz.2.2319': attribute type 19 has an invalid length. [ 466.161074][T12609] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.2319'. [ 466.306263][T10507] bridge0: port 5(ip6gretap0) entered disabled state [ 466.517043][T10507] ip6gretap0 (unregistering): left allmulticast mode [ 466.557282][T10507] ip6gretap0 (unregistering): left promiscuous mode [ 466.580237][T10507] bridge0: port 5(ip6gretap0) entered disabled state [ 467.138852][T12624] netlink: 'syz.2.2324': attribute type 10 has an invalid length. [ 467.169383][T12624] veth1_vlan: entered allmulticast mode [ 467.966196][T12645] netlink: 6579 bytes leftover after parsing attributes in process `syz.2.2329'. [ 468.036967][T12642] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2330'. [ 469.530343][T12656] netlink: 175 bytes leftover after parsing attributes in process `syz.1.2334'. [ 470.013857][T12669] netlink: 'syz.1.2339': attribute type 33 has an invalid length. [ 470.064042][T12669] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2339'. [ 471.666008][T12714] netlink: 'syz.2.2346': attribute type 4 has an invalid length. [ 471.697554][T12714] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2346'. [ 471.783280][T12722] netlink: 21 bytes leftover after parsing attributes in process `syz.3.2351'. [ 471.805774][T12722] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 472.105897][T12728] FAULT_INJECTION: forcing a failure. [ 472.105897][T12728] name failslab, interval 1, probability 0, space 0, times 0 [ 472.167277][T12728] CPU: 0 PID: 12728 Comm: syz.2.2353 Not tainted syzkaller #0 [ 472.174910][T12728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 472.188230][T12728] Call Trace: [ 472.191935][T12728] [ 472.196591][T12728] dump_stack_lvl+0x18c/0x250 [ 472.205428][T12728] ? show_regs_print_info+0x20/0x20 [ 472.212626][T12728] ? load_image+0x420/0x420 [ 472.219122][T12728] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 472.229430][T12728] ? lock_chain_count+0x20/0x20 [ 472.236722][T12728] should_fail_ex+0x39d/0x4d0 [ 472.243960][T12728] should_failslab+0x9/0x20 [ 472.250864][T12728] slab_pre_alloc_hook+0x59/0x310 [ 472.256143][T12728] ? sctp_add_bind_addr+0x8c/0x360 [ 472.266535][T12728] __kmem_cache_alloc_node+0x53/0x250 [ 472.273243][T12728] ? sctp_add_bind_addr+0x8c/0x360 [ 472.280339][T12728] kmalloc_trace+0x2a/0xe0 [ 472.287389][T12728] sctp_add_bind_addr+0x8c/0x360 [ 472.294929][T12728] sctp_copy_local_addr_list+0x315/0x4f0 [ 472.302606][T12728] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 472.310177][T12728] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 472.317158][T12728] ? sctp_v4_is_any+0x35/0x60 [ 472.323645][T12728] ? sctp_copy_one_addr+0x8c/0x350 [ 472.329995][T12728] sctp_bind_addr_copy+0xb3/0x3c0 [ 472.337511][T12728] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 472.345571][T12728] sctp_connect_new_asoc+0x2f9/0x6a0 [ 472.351767][T12728] ? __sctp_connect+0xd80/0xd80 [ 472.356954][T12728] ? __local_bh_enable_ip+0x13a/0x1c0 [ 472.362465][T12728] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 472.368136][T12728] ? security_sctp_bind_connect+0x89/0xb0 [ 472.373915][T12728] sctp_sendmsg+0x15d2/0x2910 [ 472.379233][T12728] ? sctp_getsockopt+0xb60/0xb60 [ 472.384228][T12728] ? aa_sk_perm+0x83c/0x970 [ 472.389109][T12728] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 472.395479][T12728] ? lockdep_hardirqs_on+0x98/0x150 [ 472.400834][T12728] ? aa_af_perm+0x330/0x330 [ 472.405364][T12728] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 472.411924][T12728] ? sock_rps_record_flow+0x19/0x3f0 [ 472.417564][T12728] ? inet_sendmsg+0xe9/0x2f0 [ 472.423227][T12728] ? inet_send_prepare+0x260/0x260 [ 472.430581][T12728] ____sys_sendmsg+0x5ba/0x960 [ 472.436348][T12728] ? __lock_acquire+0x7d40/0x7d40 [ 472.442486][T12728] ? __asan_memset+0x22/0x40 [ 472.447934][T12728] ? __sys_sendmsg_sock+0x30/0x30 [ 472.454824][T12728] ? __import_iovec+0x5f2/0x850 [ 472.461541][T12728] ? import_iovec+0x73/0xa0 [ 472.468176][T12728] ___sys_sendmsg+0x2a6/0x360 [ 472.474933][T12728] ? __sys_sendmsg+0x2a0/0x2a0 [ 472.480941][T12728] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 472.488587][T12728] __se_sys_sendmsg+0x1c2/0x2b0 [ 472.494835][T12728] ? __x64_sys_sendmsg+0x80/0x80 [ 472.501168][T12728] ? lockdep_hardirqs_on+0x98/0x150 [ 472.507574][T12728] do_syscall_64+0x55/0xb0 [ 472.512379][T12728] ? clear_bhb_loop+0x40/0x90 [ 472.517614][T12728] ? clear_bhb_loop+0x40/0x90 [ 472.522877][T12728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.529593][T12728] RIP: 0033:0x7fb83279ce59 [ 472.534234][T12728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.556767][T12728] RSP: 002b:00007fb833744028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.566007][T12728] RAX: ffffffffffffffda RBX: 00007fb832a15fa0 RCX: 00007fb83279ce59 [ 472.576245][T12728] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 000000000000003a [ 472.585931][T12728] RBP: 00007fb833744090 R08: 0000000000000000 R09: 0000000000000000 [ 472.594640][T12728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 472.602648][T12728] R13: 00007fb832a16038 R14: 00007fb832a15fa0 R15: 00007ffd4d1657d8 [ 472.610675][T12728] [ 472.913298][T12735] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 472.968265][T12735] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 473.021720][T12739] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2357'. [ 473.048126][T12739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.321368][T12743] syzkaller0: entered promiscuous mode [ 473.355211][T12743] syzkaller0: entered allmulticast mode [ 473.390106][T12746] FAULT_INJECTION: forcing a failure. [ 473.390106][T12746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.459849][T12746] CPU: 0 PID: 12746 Comm: syz.3.2359 Not tainted syzkaller #0 [ 473.467481][T12746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 473.477834][T12746] Call Trace: [ 473.481135][T12746] [ 473.484104][T12746] dump_stack_lvl+0x18c/0x250 [ 473.488817][T12746] ? show_regs_print_info+0x20/0x20 [ 473.494144][T12746] ? load_image+0x420/0x420 [ 473.498710][T12746] ? __lock_acquire+0x7d40/0x7d40 [ 473.503789][T12746] ? snprintf+0xe9/0x140 [ 473.508077][T12746] should_fail_ex+0x39d/0x4d0 [ 473.512794][T12746] _copy_to_user+0x2f/0xa0 [ 473.517245][T12746] simple_read_from_buffer+0xe7/0x150 [ 473.522671][T12746] proc_fail_nth_read+0x1e8/0x260 [ 473.527825][T12746] ? proc_fault_inject_write+0x360/0x360 [ 473.533524][T12746] ? fsnotify_perm+0x271/0x5e0 [ 473.538324][T12746] ? proc_fault_inject_write+0x360/0x360 [ 473.544009][T12746] vfs_read+0x28b/0x970 [ 473.548324][T12746] ? kernel_read+0x1e0/0x1e0 [ 473.553218][T12746] ? __fget_files+0x28/0x4b0 [ 473.557924][T12746] ? __fget_files+0x28/0x4b0 [ 473.562925][T12746] ? __fget_files+0x43d/0x4b0 [ 473.569998][T12746] ? __fdget_pos+0x2a3/0x330 [ 473.574722][T12746] ? ksys_read+0x75/0x260 [ 473.579059][T12746] ksys_read+0x150/0x260 [ 473.583311][T12746] ? vfs_write+0x990/0x990 [ 473.587763][T12746] ? lockdep_hardirqs_on+0x98/0x150 [ 473.592968][T12746] do_syscall_64+0x55/0xb0 [ 473.597559][T12746] ? clear_bhb_loop+0x40/0x90 [ 473.602240][T12746] ? clear_bhb_loop+0x40/0x90 [ 473.606935][T12746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.612842][T12746] RIP: 0033:0x7fd04895d68e [ 473.617266][T12746] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 473.638203][T12746] RSP: 002b:00007fd04989dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 473.648524][T12746] RAX: ffffffffffffffda RBX: 00007fd04989e6c0 RCX: 00007fd04895d68e [ 473.656793][T12746] RDX: 000000000000000f RSI: 00007fd04989e0a0 RDI: 000000000000000a [ 473.664887][T12746] RBP: 00007fd04989e090 R08: 0000000000000000 R09: 0000000000000000 [ 473.672967][T12746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.680965][T12746] R13: 00007fd048c16038 R14: 00007fd048c15fa0 R15: 00007ffe906f2a58 [ 473.689058][T12746] [ 477.263683][T12792] netlink: 'syz.1.2372': attribute type 5 has an invalid length. [ 478.009594][T12806] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 478.024042][T12806] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 478.567837][T12822] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 478.591256][T12822] pim6reg0: ignored: set checksum disabled [ 478.663637][T10507] bridge0: port 4(dummy0) entered disabled state [ 478.674139][T10507] bridge_slave_1: left allmulticast mode [ 478.680808][T10507] bridge_slave_1: left promiscuous mode [ 478.693133][T10507] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.702716][T10507] bridge_slave_0: left allmulticast mode [ 478.725173][T10507] bridge_slave_0: left promiscuous mode [ 478.730978][T10507] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.788240][T10507] veth1_vlan: left allmulticast mode [ 478.803183][T10507] veth1_vlan: left promiscuous mode [ 478.809404][T10507] veth0_vlan: left promiscuous mode [ 481.852177][T12840] FAULT_INJECTION: forcing a failure. [ 481.852177][T12840] name failslab, interval 1, probability 0, space 0, times 0 [ 481.883567][T12840] CPU: 1 PID: 12840 Comm: syz.0.2390 Not tainted syzkaller #0 [ 481.891274][T12840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 481.901623][T12840] Call Trace: [ 481.905100][T12840] [ 481.908060][T12840] dump_stack_lvl+0x18c/0x250 [ 481.912767][T12840] ? show_regs_print_info+0x20/0x20 [ 481.917993][T12840] ? load_image+0x420/0x420 [ 481.922614][T12840] ? __might_sleep+0xe0/0xe0 [ 481.927236][T12840] ? __lock_acquire+0x7d40/0x7d40 [ 481.932313][T12840] should_fail_ex+0x39d/0x4d0 [ 481.937026][T12840] should_failslab+0x9/0x20 [ 481.941570][T12840] slab_pre_alloc_hook+0x59/0x310 [ 481.946630][T12840] ? __lock_acquire+0x7d40/0x7d40 [ 481.952114][T12840] ? kvmalloc_node+0x70/0x180 [ 481.956821][T12840] ? kvmalloc_node+0x70/0x180 [ 481.961533][T12840] __kmem_cache_alloc_node+0x53/0x250 [ 481.967120][T12840] ? __schedule_delayed_monitor_work+0x200/0x200 [ 481.973478][T12840] ? kvmalloc_node+0x70/0x180 [ 481.978179][T12840] __kmalloc_node+0xa4/0x230 [ 481.982801][T12840] kvmalloc_node+0x70/0x180 [ 481.987324][T12840] bpf_test_run_xdp_live+0x1c2/0x1b20 [ 481.992744][T12840] ? 0xffffffffa0004740 [ 481.996946][T12840] ? 0xffffffffa0004740 [ 482.001101][T12840] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 482.007006][T12840] ? 0xffffffffa0004740 [ 482.011232][T12840] ? xdp_convert_md_to_buff+0x330/0x330 [ 482.016809][T12840] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 482.023064][T12840] ? _copy_from_user+0xa5/0xe0 [ 482.027832][T12840] ? bpf_test_init+0x119/0x140 [ 482.032611][T12840] ? xdp_convert_md_to_buff+0x5b/0x330 [ 482.038089][T12840] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 482.043496][T12840] ? dev_put+0x80/0x80 [ 482.047689][T12840] ? dev_put+0x80/0x80 [ 482.051762][T12840] bpf_prog_test_run+0x321/0x390 [ 482.056800][T12840] __sys_bpf+0x49d/0x890 [ 482.061046][T12840] ? bpf_link_show_fdinfo+0x390/0x390 [ 482.066429][T12840] ? lock_chain_count+0x20/0x20 [ 482.071329][T12840] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 482.077345][T12840] __x64_sys_bpf+0x7c/0x90 [ 482.081759][T12840] do_syscall_64+0x55/0xb0 [ 482.086219][T12840] ? clear_bhb_loop+0x40/0x90 [ 482.090901][T12840] ? clear_bhb_loop+0x40/0x90 [ 482.095668][T12840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.101569][T12840] RIP: 0033:0x7f88b659ce59 [ 482.106069][T12840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.125905][T12840] RSP: 002b:00007f88b752e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 482.134332][T12840] RAX: ffffffffffffffda RBX: 00007f88b6815fa0 RCX: 00007f88b659ce59 [ 482.142305][T12840] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 482.150283][T12840] RBP: 00007f88b752e090 R08: 0000000000000000 R09: 0000000000000000 [ 482.158252][T12840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.166571][T12840] R13: 00007f88b6816038 R14: 00007f88b6815fa0 R15: 00007ffdd8421678 [ 482.174567][T12840] [ 482.318035][T12845] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2391'. [ 482.467188][T10507] .` (unregistering): (slave geneve0): Releasing backup interface [ 482.701312][T12852] FAULT_INJECTION: forcing a failure. [ 482.701312][T12852] name failslab, interval 1, probability 0, space 0, times 0 [ 482.738163][T12852] CPU: 0 PID: 12852 Comm: syz.0.2393 Not tainted syzkaller #0 [ 482.745695][T12852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 482.755948][T12852] Call Trace: [ 482.759246][T12852] [ 482.762194][T12852] dump_stack_lvl+0x18c/0x250 [ 482.766908][T12852] ? show_regs_print_info+0x20/0x20 [ 482.772241][T12852] ? load_image+0x420/0x420 [ 482.776779][T12852] ? __local_bh_enable_ip+0x13a/0x1c0 [ 482.782194][T12852] ? lockdep_hardirqs_on+0x98/0x150 [ 482.787431][T12852] ? __local_bh_enable_ip+0x13a/0x1c0 [ 482.792832][T12852] should_fail_ex+0x39d/0x4d0 [ 482.797542][T12852] should_failslab+0x9/0x20 [ 482.802141][T12852] slab_pre_alloc_hook+0x59/0x310 [ 482.807177][T12852] ? sctp_get_port_local+0xe65/0x1620 [ 482.812558][T12852] ? sctp_add_bind_addr+0x8c/0x360 [ 482.817672][T12852] __kmem_cache_alloc_node+0x53/0x250 [ 482.823144][T12852] ? sctp_add_bind_addr+0x8c/0x360 [ 482.828260][T12852] kmalloc_trace+0x2a/0xe0 [ 482.832673][T12852] sctp_add_bind_addr+0x8c/0x360 [ 482.837778][T12852] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 482.843270][T12852] sctp_do_bind+0x616/0x990 [ 482.847795][T12852] sctp_connect_new_asoc+0x26a/0x6a0 [ 482.853357][T12852] ? __sctp_connect+0xd80/0xd80 [ 482.858508][T12852] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 482.864516][T12852] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 482.870713][T12852] __sctp_connect+0x5b7/0xd80 [ 482.875548][T12852] ? sctp_send_asconf+0x170/0x170 [ 482.880575][T12852] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 482.886220][T12852] ? sctp_setsockopt_connectx_old+0xbc/0x150 [ 482.892370][T12852] sctp_setsockopt+0x458/0x11e0 [ 482.897341][T12852] ? sock_common_recvmsg+0x190/0x190 [ 482.902745][T12852] do_sock_setsockopt+0x175/0x1a0 [ 482.907782][T12852] ? __fdget+0x180/0x210 [ 482.912028][T12852] __x64_sys_setsockopt+0x182/0x200 [ 482.917251][T12852] do_syscall_64+0x55/0xb0 [ 482.921690][T12852] ? clear_bhb_loop+0x40/0x90 [ 482.926378][T12852] ? clear_bhb_loop+0x40/0x90 [ 482.931239][T12852] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.937142][T12852] RIP: 0033:0x7f88b659ce59 [ 482.941920][T12852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.961879][T12852] RSP: 002b:00007f88b74ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 482.970293][T12852] RAX: ffffffffffffffda RBX: 00007f88b6816180 RCX: 00007f88b659ce59 [ 482.978432][T12852] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004 [ 482.986513][T12852] RBP: 00007f88b74ec090 R08: 0000000000000010 R09: 0000000000000000 [ 482.994483][T12852] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.002554][T12852] R13: 00007f88b6816218 R14: 00007f88b6816180 R15: 00007ffdd8421678 [ 483.010629][T12852] [ 483.159832][T10507] team0 (unregistering): Port device hsr_slave_0 removed [ 483.430525][T10507] team0 (unregistering): Port device team_slave_1 removed [ 483.495935][T10507] team0 (unregistering): Port device team_slave_0 removed [ 483.546106][T10507] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.890644][T10507] .` (unregistering): (slave team0): Releasing backup interface [ 483.937183][T10507] .` (unregistering): Released all slaves [ 484.747428][T12872] netlink: 'syz.3.2402': attribute type 29 has an invalid length. [ 484.768250][T12872] netlink: 'syz.3.2402': attribute type 29 has an invalid length. [ 484.791031][T12872] netlink: 'syz.3.2402': attribute type 29 has an invalid length. [ 484.827114][T12873] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2399'. [ 484.852906][T12873] netlink: 3064 bytes leftover after parsing attributes in process `syz.1.2399'. [ 484.911634][T12875] netlink: 'syz.3.2403': attribute type 13 has an invalid length. [ 484.936037][T12875] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.2403'. [ 484.951791][T12875] netlink: 'syz.3.2403': attribute type 4 has an invalid length. [ 484.983238][T12875] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2403'. [ 485.146305][T12879] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2405'. [ 485.755187][T12902] netlink: 'syz.0.2414': attribute type 10 has an invalid length. [ 485.917001][T12911] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2417'. [ 486.096162][T10506] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 486.727172][T12926] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2420'. [ 486.787129][T12926] netlink: 3064 bytes leftover after parsing attributes in process `syz.0.2420'. [ 487.226299][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 487.236480][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 487.247799][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 487.260663][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 487.270982][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 487.279005][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 487.558833][T12948] FAULT_INJECTION: forcing a failure. [ 487.558833][T12948] name failslab, interval 1, probability 0, space 0, times 0 [ 487.586724][T12948] CPU: 0 PID: 12948 Comm: syz.3.2429 Not tainted syzkaller #0 [ 487.594505][T12948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 487.604756][T12948] Call Trace: [ 487.608125][T12948] [ 487.611110][T12948] dump_stack_lvl+0x18c/0x250 [ 487.616256][T12948] ? show_regs_print_info+0x20/0x20 [ 487.621839][T12948] ? load_image+0x420/0x420 [ 487.627790][T12948] ? __might_sleep+0xe0/0xe0 [ 487.632417][T12948] ? __lock_acquire+0x7d40/0x7d40 [ 487.637908][T12948] should_fail_ex+0x39d/0x4d0 [ 487.642622][T12948] should_failslab+0x9/0x20 [ 487.647171][T12948] slab_pre_alloc_hook+0x59/0x310 [ 487.652412][T12948] ? sk_prot_alloc+0xe7/0x210 [ 487.657183][T12948] ? sk_prot_alloc+0xe7/0x210 [ 487.662153][T12948] __kmem_cache_alloc_node+0x53/0x250 [ 487.668237][T12948] ? sk_prot_alloc+0xe7/0x210 [ 487.672926][T12948] __kmalloc+0xa4/0x230 [ 487.677092][T12948] sk_prot_alloc+0xe7/0x210 [ 487.681613][T12948] ? sk_alloc+0x24/0x360 [ 487.685870][T12948] sk_alloc+0x3a/0x360 [ 487.689958][T12948] ? bpf_ctx_init+0x163/0x1a0 [ 487.694729][T12948] ? bpf_prog_test_run_skb+0x279/0x18c0 [ 487.700887][T12948] bpf_prog_test_run_skb+0x3d1/0x18c0 [ 487.706278][T12948] ? __fget_files+0x28/0x4b0 [ 487.710964][T12948] ? __fget_files+0x43d/0x4b0 [ 487.715660][T12948] ? cpu_online+0x60/0x60 [ 487.720429][T12948] bpf_prog_test_run+0x321/0x390 [ 487.725644][T12948] __sys_bpf+0x49d/0x890 [ 487.729883][T12948] ? bpf_link_show_fdinfo+0x390/0x390 [ 487.735535][T12948] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 487.741705][T12948] __x64_sys_bpf+0x7c/0x90 [ 487.746212][T12948] do_syscall_64+0x55/0xb0 [ 487.750625][T12948] ? clear_bhb_loop+0x40/0x90 [ 487.755835][T12948] ? clear_bhb_loop+0x40/0x90 [ 487.760640][T12948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.766641][T12948] RIP: 0033:0x7fd04899ce59 [ 487.771327][T12948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.791208][T12948] RSP: 002b:00007fd04989e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.799634][T12948] RAX: ffffffffffffffda RBX: 00007fd048c15fa0 RCX: 00007fd04899ce59 [ 487.807750][T12948] RDX: 0000000000000024 RSI: 0000200000000640 RDI: 000000000000000a [ 487.815717][T12948] RBP: 00007fd04989e090 R08: 0000000000000000 R09: 0000000000000000 [ 487.823687][T12948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.831845][T12948] R13: 00007fd048c16038 R14: 00007fd048c15fa0 R15: 00007ffe906f2a58 [ 487.840031][T12948] [ 487.903393][T12950] netlink: 'syz.0.2428': attribute type 3 has an invalid length. [ 487.920520][T12950] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2428'. [ 487.992305][T12944] syzkaller0: entered promiscuous mode [ 488.003003][T12944] syzkaller0: entered allmulticast mode [ 489.307294][ T51] Bluetooth: hci0: command tx timeout [ 489.525382][T12965] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2432'. [ 490.938340][T12952] netlink: 'syz.3.2430': attribute type 10 has an invalid length. [ 490.951335][T12965] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.2432'. [ 491.257439][T12938] chnl_net:caif_netlink_parms(): no params data found [ 491.389581][ T51] Bluetooth: hci0: command tx timeout [ 491.524935][T12981] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2437'. [ 491.536463][T12981] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2437'. [ 491.869992][T12985] netlink: 'syz.0.2436': attribute type 21 has an invalid length. [ 491.893086][T12985] netlink: 'syz.0.2436': attribute type 6 has an invalid length. [ 491.900889][T12985] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2436'. [ 491.939828][T12938] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.955974][T12938] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.968311][T12938] bridge_slave_0: entered allmulticast mode [ 491.990460][T12938] bridge_slave_0: entered promiscuous mode [ 492.008721][T12938] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.016341][T12938] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.043072][T12938] bridge_slave_1: entered allmulticast mode [ 492.050447][T12938] bridge_slave_1: entered promiscuous mode [ 492.135348][T12938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.260498][T12938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.319833][T10507] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.451470][T10507] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.483654][T12938] team0: Port device team_slave_0 added [ 492.498187][T12938] team0: Port device team_slave_1 added [ 492.605607][T10507] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.651692][T12938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.660376][T12938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.687844][T12938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.738100][T10507] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.760315][T12938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.775614][T12938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.805202][T12938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.925717][T12938] hsr_slave_0: entered promiscuous mode [ 492.958267][T12938] hsr_slave_1: entered promiscuous mode [ 492.965355][T12938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.973456][T12938] Cannot create hsr debugfs directory [ 493.462939][ T51] Bluetooth: hci0: command tx timeout [ 493.551413][T13015] netlink: 'syz.3.2447': attribute type 21 has an invalid length. [ 493.612133][T13015] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2447'. [ 494.091377][T13051] netlink: 'syz.2.2452': attribute type 1 has an invalid length. [ 494.125138][T13051] netlink: 'syz.2.2452': attribute type 3 has an invalid length. [ 494.157240][T13051] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2452'. [ 494.526673][T13055] netlink: 'syz.0.2454': attribute type 10 has an invalid length. [ 494.538823][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 495.016596][T13067] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2457'. [ 495.330264][T12938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 495.477219][T12938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 495.542999][ T51] Bluetooth: hci0: command tx timeout [ 495.703989][T12938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 495.719082][T12938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 496.328134][T13108] netlink: 'syz.2.2464': attribute type 12 has an invalid length. [ 496.392943][T13108] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2464'. [ 496.430146][T13107] netlink: 'syz.2.2464': attribute type 12 has an invalid length. [ 496.474234][T13107] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2464'. [ 496.758178][T12938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.761300][T13116] netlink: 'syz.3.2465': attribute type 9 has an invalid length. [ 496.807025][T12938] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.822125][T10510] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.829333][T10510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.864058][T10510] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.871230][T10510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.923045][T13116] netlink: 123820 bytes leftover after parsing attributes in process `syz.3.2465'. [ 496.926150][T12938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 496.950787][T12938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.559529][T13132] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2469'. [ 497.589802][T13132] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 498.178549][T12938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.269066][T13136] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.2470'. [ 498.465946][T13139] FAULT_INJECTION: forcing a failure. [ 498.465946][T13139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.492890][T13139] CPU: 1 PID: 13139 Comm: syz.3.2471 Not tainted syzkaller #0 [ 498.499884][T12938] veth0_vlan: entered promiscuous mode [ 498.500394][T13139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 498.515926][T13139] Call Trace: [ 498.519224][T13139] [ 498.522340][T13139] dump_stack_lvl+0x18c/0x250 [ 498.527045][T13139] ? show_regs_print_info+0x20/0x20 [ 498.532274][T13139] ? load_image+0x420/0x420 [ 498.536793][T13139] ? __might_fault+0xaa/0x120 [ 498.541471][T13139] ? __lock_acquire+0x7d40/0x7d40 [ 498.546500][T13139] should_fail_ex+0x39d/0x4d0 [ 498.551183][T13139] _copy_from_iter+0x1d9/0x12e0 [ 498.556037][T13139] ? __virt_addr_valid+0x18c/0x540 [ 498.561268][T13139] ? __lock_acquire+0x7d40/0x7d40 [ 498.566316][T13139] ? copyout_mc+0x70/0x70 [ 498.571270][T13139] ? __virt_addr_valid+0x18c/0x540 [ 498.576388][T13139] ? __virt_addr_valid+0x18c/0x540 [ 498.581508][T13139] ? __virt_addr_valid+0x469/0x540 [ 498.586625][T13139] ? __check_object_size+0x506/0xa20 [ 498.591914][T13139] rxrpc_send_data+0xd04/0x2950 [ 498.596810][T13139] ? rxrpc_do_sendmsg+0x12d0/0x12d0 [ 498.602103][T13139] ? do_task_dead+0xd0/0xd0 [ 498.606601][T13139] ? do_raw_spin_unlock+0x121/0x230 [ 498.611808][T13139] rxrpc_do_sendmsg+0x10c6/0x12d0 [ 498.617631][T13139] ? rxrpc_propose_abort+0x200/0x200 [ 498.622928][T13139] ? rxrpc_sendmsg+0x391/0x5b0 [ 498.627684][T13139] ? rxrpc_getsockopt+0x150/0x150 [ 498.632812][T13139] ____sys_sendmsg+0x5ba/0x960 [ 498.637607][T13139] ? __lock_acquire+0x7d40/0x7d40 [ 498.642642][T13139] ? __sys_sendmsg_sock+0x30/0x30 [ 498.647748][T13139] ? __import_iovec+0x5f2/0x850 [ 498.652604][T13139] ? import_iovec+0x73/0xa0 [ 498.657115][T13139] ___sys_sendmsg+0x2a6/0x360 [ 498.661873][T13139] ? __sys_sendmsg+0x2a0/0x2a0 [ 498.666657][T13139] ? trace_call_bpf+0xc3/0x6c0 [ 498.671442][T13139] __se_sys_sendmsg+0x1c2/0x2b0 [ 498.676294][T13139] ? __x64_sys_sendmsg+0x80/0x80 [ 498.681327][T13139] ? lockdep_hardirqs_on+0x98/0x150 [ 498.686650][T13139] do_syscall_64+0x55/0xb0 [ 498.691063][T13139] ? clear_bhb_loop+0x40/0x90 [ 498.695777][T13139] ? clear_bhb_loop+0x40/0x90 [ 498.700453][T13139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 498.706431][T13139] RIP: 0033:0x7fd04899ce59 [ 498.710851][T13139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.730647][T13139] RSP: 002b:00007fd04989e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.739068][T13139] RAX: ffffffffffffffda RBX: 00007fd048c15fa0 RCX: 00007fd04899ce59 [ 498.747040][T13139] RDX: 000000000000ff00 RSI: 0000200000000000 RDI: 0000000000000003 [ 498.755026][T13139] RBP: 00007fd04989e090 R08: 0000000000000000 R09: 0000000000000000 [ 498.762998][T13139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 498.771069][T13139] R13: 00007fd048c16038 R14: 00007fd048c15fa0 R15: 00007ffe906f2a58 [ 498.779233][T13139] [ 498.792093][T12938] veth1_vlan: entered promiscuous mode [ 498.971109][T12938] veth0_macvtap: entered promiscuous mode [ 499.058780][T12938] veth1_macvtap: entered promiscuous mode [ 499.165393][T12938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.204274][T12938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.233004][T12938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.252810][T12938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.264774][T12938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.285165][T12938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.299486][T12938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.321778][T12938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.335929][T12938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.354599][T12938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.500546][T12938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.546367][T12938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.572628][T12938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.589235][T12938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.606109][T10505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.624668][T10505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.057204][T10504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.074438][T10504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.725413][T13163] syzkaller0: entered promiscuous mode [ 501.742976][T13163] syzkaller0: entered allmulticast mode [ 501.833587][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.843191][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.987172][T13170] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2421'. [ 502.807399][ T5089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 502.816960][ T5089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 502.826056][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 502.842669][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 502.957449][ T5089] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 502.967519][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 505.064390][ T51] Bluetooth: hci1: command tx timeout [ 505.098393][T13179] FAULT_INJECTION: forcing a failure. [ 505.098393][T13179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.116909][T13179] CPU: 1 PID: 13179 Comm: syz.1.2480 Not tainted syzkaller #0 [ 505.124596][T13179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 505.134679][T13179] Call Trace: [ 505.137975][T13179] [ 505.140918][T13179] dump_stack_lvl+0x18c/0x250 [ 505.145645][T13179] ? show_regs_print_info+0x20/0x20 [ 505.150880][T13179] ? load_image+0x420/0x420 [ 505.155415][T13179] ? __might_fault+0xaa/0x120 [ 505.160231][T13179] ? __lock_acquire+0x7d40/0x7d40 [ 505.165319][T13179] should_fail_ex+0x39d/0x4d0 [ 505.170025][T13179] _copy_from_user+0x2f/0xe0 [ 505.174622][T13179] kstrtouint_from_user+0xde/0x170 [ 505.179879][T13179] ? kstrtol_from_user+0x190/0x190 [ 505.185121][T13179] proc_fail_nth_write+0x8f/0x250 [ 505.190172][T13179] ? proc_fail_nth_read+0x260/0x260 [ 505.195383][T13179] ? proc_fail_nth_read+0x260/0x260 [ 505.200591][T13179] vfs_write+0x296/0x990 [ 505.204852][T13179] ? file_end_write+0x250/0x250 [ 505.209705][T13179] ? __fget_files+0x28/0x4b0 [ 505.214381][T13179] ? __fget_files+0x28/0x4b0 [ 505.218986][T13179] ? __fget_files+0x43d/0x4b0 [ 505.223671][T13179] ? __fdget_pos+0x2a3/0x330 [ 505.228257][T13179] ? ksys_write+0x75/0x260 [ 505.233328][T13179] ksys_write+0x150/0x260 [ 505.238123][T13179] ? __ia32_sys_read+0x90/0x90 [ 505.242914][T13179] ? lockdep_hardirqs_on+0x98/0x150 [ 505.248136][T13179] do_syscall_64+0x55/0xb0 [ 505.252556][T13179] ? clear_bhb_loop+0x40/0x90 [ 505.257235][T13179] ? clear_bhb_loop+0x40/0x90 [ 505.261917][T13179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.267820][T13179] RIP: 0033:0x7f153315d68e [ 505.272234][T13179] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 505.291852][T13179] RSP: 002b:00007f153406afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 505.300285][T13179] RAX: ffffffffffffffda RBX: 00007f153406b6c0 RCX: 00007f153315d68e [ 505.308262][T13179] RDX: 0000000000000001 RSI: 00007f153406b0a0 RDI: 0000000000000004 [ 505.316233][T13179] RBP: 00007f153406b090 R08: 0000000000000000 R09: 0000000000000000 [ 505.324296][T13179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.332265][T13179] R13: 00007f1533416038 R14: 00007f1533415fa0 R15: 00007ffdf43bb438 [ 505.340248][T13179] [ 506.048907][T13174] chnl_net:caif_netlink_parms(): no params data found [ 506.480167][T13174] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.528153][T13174] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.534919][T13197] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2487'. [ 506.546474][T13174] bridge_slave_0: entered allmulticast mode [ 506.554807][T13174] bridge_slave_0: entered promiscuous mode [ 506.600929][T13174] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.620524][T13194] ================================================================== [ 506.622413][T13174] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.628814][T13194] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 506.628855][T13194] Write of size 32 at addr ffff888078d0b010 by task syz.1.2486/13194 [ 506.628871][T13194] [ 506.628877][T13194] CPU: 0 PID: 13194 Comm: syz.1.2486 Not tainted syzkaller #0 [ 506.628894][T13194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 506.628906][T13194] Call Trace: [ 506.628913][T13194] [ 506.628921][T13194] dump_stack_lvl+0x18c/0x250 [ 506.628946][T13194] ? __lock_acquire+0x7d40/0x7d40 [ 506.643031][T13174] bridge_slave_1: entered allmulticast mode [ 506.643947][T13194] ? show_regs_print_info+0x20/0x20 [ 506.664482][T13174] bridge_slave_1: entered promiscuous mode [ 506.672443][T13194] ? load_image+0x420/0x420 [ 506.711402][T13194] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 506.717337][T13194] ? __virt_addr_valid+0x18c/0x540 [ 506.722487][T13194] ? __virt_addr_valid+0x469/0x540 [ 506.728071][T13194] print_report+0xa8/0x210 [ 506.732537][T13194] ? __bpf_get_stackid+0x6bf/0x900 [ 506.737710][T13194] kasan_report+0x117/0x150 [ 506.742330][T13194] ? __bpf_get_stackid+0x6bf/0x900 [ 506.747473][T13194] kasan_check_range+0x241/0x290 [ 506.752447][T13194] ? __bpf_get_stackid+0x6bf/0x900 [ 506.757591][T13194] __asan_memcpy+0x40/0x70 [ 506.762055][T13194] __bpf_get_stackid+0x6bf/0x900 [ 506.767037][T13194] bpf_get_stackid_pe+0x2f0/0x410 [ 506.772107][T13194] bpf_prog_63958b2bb0b64835+0x33/0x48 [ 506.777872][T13194] bpf_overflow_handler+0x1fc/0x510 [ 506.783377][T13194] ? bpf_overflow_handler+0xde/0x510 [ 506.788786][T13194] ? tp_perf_event_destroy+0x20/0x20 [ 506.794103][T13194] ? perf_trace_preemptirq_template+0x144/0x330 [ 506.800391][T13194] ? __perf_event_account_interrupt+0x187/0x280 [ 506.806699][T13194] __perf_event_overflow+0x447/0x630 [ 506.812232][T13194] perf_swevent_event+0x319/0x570 [ 506.817479][T13194] ? perf_tp_event+0x1520/0x1520 [ 506.822458][T13194] ___perf_sw_event+0x4a7/0x730 [ 506.827349][T13194] ? ___perf_sw_event+0x199/0x730 [ 506.832637][T13194] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 506.839085][T13194] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 506.844854][T13194] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 506.851139][T13194] ? lockdep_hardirqs_on+0x98/0x150 [ 506.856373][T13194] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 506.862651][T13194] __perf_sw_event+0x139/0x270 [ 506.867468][T13194] do_user_addr_fault+0x123e/0x12c0 [ 506.872697][T13194] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 506.879058][T13194] ? rcu_is_watching+0x15/0xb0 [ 506.883866][T13194] exc_page_fault+0x64/0x100 [ 506.888492][T13194] asm_exc_page_fault+0x26/0x30 [ 506.893465][T13194] RIP: 0033:0x7ffdf43d7a21 [ 506.898206][T13194] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 [ 506.918367][T13194] RSP: 002b:00007f153406aff0 EFLAGS: 00010202 [ 506.924467][T13194] RAX: 0021efef86f10cb4 RBX: 00007ffdf43d30b0 RCX: 0000000000000018 [ 506.932515][T13194] RDX: 00000000226f3989 RSI: 00007f153406b0b0 RDI: 7fffffffffffffff [ 506.940517][T13194] RBP: 00007f153406b030 R08: 00000000000001fa R09: 0000000000745a32 [ 506.948597][T13194] R10: 000001083e1f9716 R11: 0000000000017fee R12: 0000000000000010 [ 506.956598][T13194] R13: 00007f1533416038 R14: 00007ffdf43d3080 R15: 0000000000017fee [ 506.964604][T13194] [ 506.967728][T13194] [ 506.970056][T13194] Allocated by task 13194: [ 506.974485][T13194] kasan_set_track+0x4e/0x70 [ 506.979094][T13194] __kasan_kmalloc+0x8f/0xa0 [ 506.983754][T13194] __kmalloc_node+0xb4/0x230 [ 506.988363][T13194] bpf_map_area_alloc+0x5e/0x110 [ 506.993330][T13194] prealloc_elems_and_freelist+0x86/0x1c0 [ 506.999165][T13194] stack_map_alloc+0x33a/0x4c0 [ 507.003948][T13194] map_create+0x877/0x12f0 [ 507.008392][T13194] __sys_bpf+0x651/0x890 [ 507.012649][T13194] __x64_sys_bpf+0x7c/0x90 [ 507.017081][T13194] do_syscall_64+0x55/0xb0 [ 507.021527][T13194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.027458][T13194] [ 507.029794][T13194] Last potentially related work creation: [ 507.035518][T13194] kasan_save_stack+0x3e/0x60 [ 507.040311][T13194] __kasan_record_aux_stack+0xaf/0xc0 [ 507.045804][T13194] call_rcu+0x153/0x950 [ 507.049988][T13194] __nf_register_net_hook+0x788/0x910 [ 507.055606][T13194] nf_register_net_hook+0xb2/0x190 [ 507.060739][T13194] nf_register_net_hooks+0x44/0x1b0 [ 507.065975][T13194] nf_ct_netns_do_get+0x213/0x5c0 [ 507.071093][T13194] nf_ct_netns_inet_get+0x3b/0x150 [ 507.076213][T13194] nf_conncount_init+0x127/0x380 [ 507.081238][T13194] ovs_ct_init+0x316/0x490 [ 507.085735][T13194] ovs_init_net+0x1e6/0x250 [ 507.090320][T13194] ops_init+0x397/0x640 [ 507.094472][T13194] setup_net+0x3b6/0xa30 [ 507.098706][T13194] copy_net_ns+0x36d/0x5e0 [ 507.103113][T13194] create_new_namespaces+0x3d3/0x6f0 [ 507.108408][T13194] copy_namespaces+0x430/0x4a0 [ 507.113858][T13194] copy_process+0x1724/0x3dc0 [ 507.118528][T13194] kernel_clone+0x24b/0x8a0 [ 507.123043][T13194] __x64_sys_clone+0x1b7/0x230 [ 507.127802][T13194] do_syscall_64+0x55/0xb0 [ 507.132211][T13194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.138413][T13194] [ 507.140741][T13194] The buggy address belongs to the object at ffff888078d0b000 [ 507.140741][T13194] which belongs to the cache kmalloc-cg-64 of size 64 [ 507.155147][T13194] The buggy address is located 16 bytes inside of [ 507.155147][T13194] allocated 40-byte region [ffff888078d0b000, ffff888078d0b028) [ 507.169148][T13194] [ 507.171467][T13194] The buggy address belongs to the physical page: [ 507.177892][T13194] page:ffffea0001e342c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78d0b [ 507.188230][T13194] memcg:ffff88802f9cf201 [ 507.192481][T13194] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 507.200028][T13194] page_type: 0xffffffff() [ 507.204353][T13194] raw: 00fff00000000800 ffff888017c4da00 ffffea00018078c0 0000000000000006 [ 507.212931][T13194] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88802f9cf201 [ 507.221507][T13194] page dumped because: kasan: bad access detected [ 507.227929][T13194] page_owner tracks the page as allocated [ 507.233730][T13194] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5779, tgid 5779 (syz-executor), ts 270677449450, free_ts 270677034908 [ 507.252479][T13194] post_alloc_hook+0x1c1/0x200 [ 507.257248][T13194] get_page_from_freelist+0x1951/0x19e0 [ 507.262783][T13194] __alloc_pages+0x1f0/0x460 [ 507.267362][T13194] alloc_slab_page+0x5d/0x160 [ 507.272118][T13194] new_slab+0x87/0x2d0 [ 507.276182][T13194] ___slab_alloc+0xc5d/0x12f0 [ 507.280857][T13194] __kmem_cache_alloc_node+0x19e/0x250 [ 507.286307][T13194] kmalloc_trace+0x2a/0xe0 [ 507.290713][T13194] alloc_fdtable+0xca/0x2c0 [ 507.295207][T13194] dup_fd+0x786/0xa50 [ 507.299198][T13194] copy_files+0xc3/0x120 [ 507.303443][T13194] copy_process+0x15ab/0x3dc0 [ 507.308120][T13194] kernel_clone+0x24b/0x8a0 [ 507.312663][T13194] __x64_sys_clone+0x1b7/0x230 [ 507.317423][T13194] do_syscall_64+0x55/0xb0 [ 507.321833][T13194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.327730][T13194] page last free stack trace: [ 507.332388][T13194] free_unref_page_prepare+0x7b2/0x8c0 [ 507.337859][T13194] free_unref_page+0x32/0x2e0 [ 507.342557][T13194] vfree+0x1a6/0x320 [ 507.346548][T13194] do_ip6t_get_ctl+0xf21/0x1210 [ 507.351481][T13194] nf_getsockopt+0x262/0x280 [ 507.356155][T13194] ipv6_getsockopt+0x226/0x2e0 [ 507.361070][T13194] do_sock_getsockopt+0x379/0x450 [ 507.366096][T13194] __x64_sys_getsockopt+0x1d6/0x280 [ 507.371304][T13194] do_syscall_64+0x55/0xb0 [ 507.375736][T13194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.381694][T13194] [ 507.384209][T13194] Memory state around the buggy address: [ 507.389931][T13194] ffff888078d0af00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 507.398350][T13194] ffff888078d0af80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 507.407028][T13194] >ffff888078d0b000: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 507.415186][T13194] ^ [ 507.420575][T13194] ffff888078d0b080: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 507.428635][T13194] ffff888078d0b100: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 507.436779][T13194] ================================================================== [ 507.444859][T13194] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 507.452141][T13194] CPU: 0 PID: 13194 Comm: syz.1.2486 Not tainted syzkaller #0 [ 507.459594][T13194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 507.469641][T13194] Call Trace: [ 507.472918][T13194] [ 507.475849][T13194] dump_stack_lvl+0x18c/0x250 [ 507.480530][T13194] ? show_regs_print_info+0x20/0x20 [ 507.485723][T13194] ? load_image+0x420/0x420 [ 507.490221][T13194] panic+0x2dc/0x730 [ 507.494137][T13194] ? __lock_acquire+0x7d40/0x7d40 [ 507.499162][T13194] ? bpf_jit_dump+0xd0/0xd0 [ 507.503747][T13194] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 507.509666][T13194] ? _raw_spin_unlock+0x40/0x40 [ 507.514536][T13194] ? __bpf_get_stackid+0x6bf/0x900 [ 507.519648][T13194] check_panic_on_warn+0x84/0xa0 [ 507.524857][T13194] ? __bpf_get_stackid+0x6bf/0x900 [ 507.529974][T13194] end_report+0x6f/0x130 [ 507.534212][T13194] kasan_report+0x128/0x150 [ 507.538807][T13194] ? __bpf_get_stackid+0x6bf/0x900 [ 507.543937][T13194] kasan_check_range+0x241/0x290 [ 507.548883][T13194] ? __bpf_get_stackid+0x6bf/0x900 [ 507.553996][T13194] __asan_memcpy+0x40/0x70 [ 507.558427][T13194] __bpf_get_stackid+0x6bf/0x900 [ 507.563369][T13194] bpf_get_stackid_pe+0x2f0/0x410 [ 507.568396][T13194] bpf_prog_63958b2bb0b64835+0x33/0x48 [ 507.573852][T13194] bpf_overflow_handler+0x1fc/0x510 [ 507.579051][T13194] ? bpf_overflow_handler+0xde/0x510 [ 507.584332][T13194] ? tp_perf_event_destroy+0x20/0x20 [ 507.589610][T13194] ? perf_trace_preemptirq_template+0x144/0x330 [ 507.595849][T13194] ? __perf_event_account_interrupt+0x187/0x280 [ 507.602088][T13194] __perf_event_overflow+0x447/0x630 [ 507.607462][T13194] perf_swevent_event+0x319/0x570 [ 507.612482][T13194] ? perf_tp_event+0x1520/0x1520 [ 507.617419][T13194] ___perf_sw_event+0x4a7/0x730 [ 507.622350][T13194] ? ___perf_sw_event+0x199/0x730 [ 507.627893][T13194] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 507.634305][T13194] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 507.640029][T13194] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 507.646183][T13194] ? lockdep_hardirqs_on+0x98/0x150 [ 507.651385][T13194] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 507.657626][T13194] __perf_sw_event+0x139/0x270 [ 507.662385][T13194] do_user_addr_fault+0x123e/0x12c0 [ 507.667580][T13194] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 507.673560][T13194] ? rcu_is_watching+0x15/0xb0 [ 507.678341][T13194] exc_page_fault+0x64/0x100 [ 507.682967][T13194] asm_exc_page_fault+0x26/0x30 [ 507.687826][T13194] RIP: 0033:0x7ffdf43d7a21 [ 507.692234][T13194] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 [ 507.711852][T13194] RSP: 002b:00007f153406aff0 EFLAGS: 00010202 [ 507.717922][T13194] RAX: 0021efef86f10cb4 RBX: 00007ffdf43d30b0 RCX: 0000000000000018 [ 507.725980][T13194] RDX: 00000000226f3989 RSI: 00007f153406b0b0 RDI: 7fffffffffffffff [ 507.734220][T13194] RBP: 00007f153406b030 R08: 00000000000001fa R09: 0000000000745a32 [ 507.742188][T13194] R10: 000001083e1f9716 R11: 0000000000017fee R12: 0000000000000010 [ 507.750178][T13194] R13: 00007f1533416038 R14: 00007ffdf43d3080 R15: 0000000000017fee [ 507.758180][T13194] [ 507.761457][T13194] Kernel Offset: disabled [ 507.765839][T13194] Rebooting in 86400 seconds..