last executing test programs: 2.627127499s ago: executing program 2 (id=2556): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x2, 0xd, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}, {0x0}], 0x2, 0x0, 0x0, 0x7}, 0x0) 1.777541981s ago: executing program 3 (id=2559): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e1406", 0x1b}], 0x1}, 0x40440e4) r1 = socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8902, &(0x7f0000000080)) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)='J', 0x1}], 0x1}, 0x1001) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) (fail_nth: 6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18}, 0x0) sendmsg$unix(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) close(r7) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) 1.735117263s ago: executing program 2 (id=2560): r0 = perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305829, &(0x7f0000000040)) perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0x9, 0x73, 0x2, 0x5, 0x0, 0x4c, 0x8080, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x2, 0x2}, 0xa11, 0x7, 0x6, 0x4, 0x10001, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x3}, r3, 0x2, r0, 0x8) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x2, 0x11, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)="99", 0x1}], 0x1}, 0x40844) 1.491905855s ago: executing program 3 (id=2563): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20020, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="9c9cf23dced2276564c3f79796ae6d20e30a9f72fa307739a72c18588120667f1b34adf81841202b96189b2f28", 0x1}], 0x3c}, 0x20008884) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="f568ca5c6de3a6716d76e0e3935b11939fac797b624e324b27976dcdba3ac6f843cdf5bc39c91cc2c05e613b92977a339323c808e98d037a01915ab6991a0624e6ff016d45bdae77a3", 0x49}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x120}, 0x4048845) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000240)={'netdevsim0\x00', 0x400}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x5, 0x80, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x8, 0x2, 0x5, 0x0, 0x7fff, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x10, 0x3}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000980)={&(0x7f0000000540)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000640)="37329ac39b3e9757c0060d80fffc923cce293baf2f8d82dc9e663b4012fef597a020e7961daef7bab6a71311b4907e3dfc41bb903f05c6147fa0e10aa41c8c1743006d5c8eddad10327ead45b98025bac94f4d2a5f809418cf6e22ab678e005f74f1f777abf3cc6d24ac6d0ad30174bad0426f79af2e376404f8877f2b6c1579b31fec07714f0a16745824168eb8fdc90586f3c2b1959bb2dc06c7", 0x9b}, {0x0}, {&(0x7f00000007c0)="a031521c83955a366935dbe5a8c65b5c200372697a348f87a99ba199d8569b60c1287cf5e93fc59dd2121766e021574c3eee1477b54e1057d90d079799a1a1d9d7e0c2264fd7a0013fcfa1f03c532e865e1cf05792851be51389f3888675346538da1047fde5525040a01ccf22bc969ce201f47a3ab2acc88140", 0x7a}], 0x3, &(0x7f0000000dc0)=[{0xc8, 0x0, 0xfe, "d88d53e30e024ee604a84499e822a62cc3f8eed184e8dab3e34d426d58303d8f33196caab8babb9bfb7d40e2ccb4d891f0c3a48082a6019a44f85a76e9c3cd4c36daf3f749d0cafbfbc8322d81717ae4cf60d3e13c2a08fb5b4b58b1f7384f0cf63fa4b4b62e1a4cff9a28f1ab19fb649ac7c79bab9c1918ab033a0058f96ee9e3035eb3b37fc0a478921f4993e374f7fe066b019a2004e01d85c16f2c8ea3809443216b7d3c4ca38891d17a9d799e2f929bde"}, {0x58, 0x102, 0x9, "8752f23adc8d9253c23d0a71cc1439822e7b4105f7f645f6673132cb40017806948817eec6f1ad0129f66543221cf37f9d0039b4ac54a792c48232e26afdfa61c5238d50b6a2"}, {0x10, 0x6, 0x7}, {0x88, 0x11, 0x4, "3773575c3cd22c4c07997ba05edfa858f060ed98576bc645a93a213ae4a90faddab2fb85a1ee53b5301ed1a8cd32a5afd4db5b1d96ae37a4703fb6361e7d373f91db72c01e14950a265cba8109d21c88356900ce6c5274f709a096ded41b173982ab7df36dd96a5044fc8f1d7cb122ba0073"}], 0x1b8}, 0x4000000) unlink(0x0) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) (async) socketpair(0x2, 0x2, 0x1, &(0x7f0000000500)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r0, @ANYBLOB="fb2ccd5cbfd7a6b23f99afa00d16465f4c697e9fa0e57c4792e430b66cb1817ff28a6b386273dd37b1d4fb43edee8d8b6877fe2f634561c2bb42d180f5304f2a86dc61e9a0618754952822f9fc0a6f741f3a15ac97"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.480745406s ago: executing program 4 (id=2564): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ef}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40010040) 1.4022694s ago: executing program 1 (id=2565): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18070000000000000000000000000000181100", @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180000600000000040000002cd65c65c3d7d756", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 1.365565272s ago: executing program 2 (id=2566): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x4, 0x80, 0x0, 0x2, 0x0, 0x0, 0x3718, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x7fffffff, 0x3, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00083300db5b6861589bcfe8875a060300000723000000000000000000000000ac1414aa"], 0xfdef) 1.364848432s ago: executing program 3 (id=2567): socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0}, 0x8000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000000000000000", @ANYRESHEX=r0, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x4de2, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x29, 0x3a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x35, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x80c4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) 1.308767165s ago: executing program 0 (id=2568): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d8bc001000ff05142603600e12080005007a010401a800160020000340040000fe035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 1.308155135s ago: executing program 4 (id=2569): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0xfdef) 1.228628128s ago: executing program 4 (id=2570): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0xa002a0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x4000, 0x18000000, 0x104, 0x0, 0x0, 0x0}, 0x48) 1.228004639s ago: executing program 2 (id=2571): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b ', @ANYRESOCT=r1], 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000480), &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f0000000540)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000000600)}}, 0xffeb) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061100c0000000900000048000000000095000900008e0000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4, 0x0, 0xffffffff}, 0x10}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb00e3bd6efb4400080000000a000f00000aba8000001201", 0x24}, {&(0x7f0000000200)="cc182c338cba61617516", 0xa}], 0x2}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007001a00050004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000ffff0000000000000000850000008100b2070fab5203a5a1ffff"], &(0x7f0000000140)='GPL\x00', 0x1, 0xa2, &(0x7f00000002c0)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd67}, 0x22) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x6cd9, 0x5}, 0x100c, 0x7f, 0x4, 0x0, 0x8, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) r10 = gettid() r11 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r11, 0x84, 0x64, &(0x7f0000000000)=r13, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r10, r13, 0x0, 0xd, &(0x7f00000003c0)='/dev/net/tun\x00'}, 0x30) r14 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x2000}) 1.187212751s ago: executing program 0 (id=2572): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000000) r0 = socket$kcm(0x10, 0x400000000, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000c", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x8, 0x12) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e0025740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x2000000) sendmsg$inet(r2, 0x0, 0x3000c085) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1400000022007d283840253ada4785391f890b0f", 0x14}], 0x1}, 0x4000010) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 1.132697433s ago: executing program 1 (id=2573): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000000) r0 = socket$kcm(0x10, 0x400000000, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000c", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8, 0x12) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e0025740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x2000000) sendmsg$inet(r1, 0x0, 0x3000c085) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1400000022007d283840253ada4785391f890b0f", 0x14}], 0x1}, 0x4000010) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 1.132066543s ago: executing program 4 (id=2574): socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, @perf_config_ext={0x8, 0x100000001}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x113, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f91524fc6010000a000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.098679775s ago: executing program 3 (id=2575): r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4, @local, 0x1a, 0x4}, 0x80, &(0x7f0000000100)=[{0x0, 0x21}], 0x1}, 0x4804) setsockopt$sock_attach_bpf(r0, 0x29, 0x3b, 0x0, 0x0) 1.045528088s ago: executing program 0 (id=2576): r0 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xdf, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0xb}, 0x801, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000041) socket$kcm(0x10, 0x2, 0x4) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0032070000000000000000004a8d5d36c20000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0xa, 0x2, 0x73) recvmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000280)=@xdp, 0x80, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000001440)=""/142, 0x8e}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x4, &(0x7f0000002500)=""/132, 0x84}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002fff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e54f8f", 0x48}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x43, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x4, @perf_config_ext={0x100, 0xffffffffffffffff}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x2e, 0xf6ffffff}, 0x6e, 0x0}, 0x0) r5 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xadd9da0e2909575e) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x7, 0x0, 0x3, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000400000008000000ffffffff00000000", @ANYRES32, @ANYBLOB="b900001000000000170000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x8020, 0xc8, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, r5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0xf}, {0x0, 0x0, 0x0, 0x81}]}) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 1.017605569s ago: executing program 1 (id=2577): r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x0, 0x1, 0x40000, 0x0, 0xffff}, 0x0, 0x200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x8, 0x0, 0x0, 0x100000007f, 0x442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x1010000200, 0x4, 0x1, 0x0, 0x400000a, 0x5d0, 0x0, 0x4000000, 0x0, 0x63}, 0x0, 0x1, r0, 0x8) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0, 0x0, 0x0, 0x20}, 0x0) 912.816375ms ago: executing program 4 (id=2578): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = syz_clone(0x800, &(0x7f0000000100)="b515f14eb342a42336fb4adfe1e384b44f05a1", 0x13, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)="dd227fcb53a857cdd3a4861d4113773de92a6b4fce429b5481006f36d11271c19d3791895d75ffb7d50320345a8baae790b49f162bc598371527da72e505b95577fce827fa584155e0c441a4295cf3f356c2ea1dc12170d5ceb08ebc0f452e4bdbb02f815007cee8f21e1a10e815baee1acd6febb4df67c35d292cb5d6fac2790cde37535f64da8f272154cde1cc8dad0a5429ef2a6ef7fdf9780e0ac343446d51b463071a95ac4e5c8d49548d0085359607d1ee299f3370eb2e2db4a3e75000aa8f37e0351766515c9f8b939bd28186e01c761eeb5dad1193a907") r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x33, 0x2, 0x0, 0x1, 0x0, 0x86, 0x41200, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0xe400, 0x10, 0xf, 0x1, 0xfffffffffffffff3, 0x1, 0xfffe, 0x0, 0x100, 0x0, 0xfffffffffffffffa}, r0, 0xb, r1, 0x3) 912.430705ms ago: executing program 1 (id=2579): socketpair(0x10, 0x3, 0x9, &(0x7f00000000c0)) (fail_nth: 14) 912.074455ms ago: executing program 3 (id=2580): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0xfdef) 892.676146ms ago: executing program 0 (id=2581): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700920101001101ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c750", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) 871.550586ms ago: executing program 4 (id=2582): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x18, &(0x7f0000000000)=r3, 0x8) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) close(r4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 640.863378ms ago: executing program 3 (id=2583): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000040), 0x4) r4 = socket$kcm(0x10, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000002000000000000000000850000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff1703000008000000b70400000000000085"], 0x0}, 0x90) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007600"], 0xfe33) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001080)=@bpf_ext={0x1c, 0x17, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4c600000, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x6, 0x1, 0x0, r6}, @ldst={0x1, 0x1, 0x0, 0x4, 0x3, 0x80}, @cb_func={0x18, 0xa}, @alu={0x4, 0x1, 0x7, 0x0, 0x3, 0x6, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x7, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5c9}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x5}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0x9f, &(0x7f0000000ec0)=""/159, 0x0, 0x4, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000340)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000f80)={0x0, 0xb, 0x0, 0xfe}, 0x10, 0x14df9, r2, 0x5, &(0x7f0000000fc0)=[0x1], &(0x7f0000001000)=[{0x4, 0x3, 0x3}, {0x3, 0x4, 0x5}, {0x1, 0x1, 0x7, 0x8}, {0x2, 0x4, 0x1}, {0x2, 0x1, 0x10, 0xa}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001a80016ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12da7a83248b009c81572d3a39b", 0xe4}], 0x1, 0x0, 0x0, 0x7400}, 0xc04) sendmsg(r3, &(0x7f0000002500)={&(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="ec", 0x1}], 0x1}, 0x80) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x29, 0x39, 0x0, 0x0) r10 = socket$kcm(0x29, 0x2, 0x0) close(r10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e0000001ffffffff000000001c"], 0x150}, 0x4840) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 592.8539ms ago: executing program 0 (id=2584): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000018000000000000008000000000", @ANYBLOB="00000000d3ec66ecc053c543da5f2e", @ANYRES8], 0x48) 592.48189ms ago: executing program 1 (id=2585): socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0}, 0x8000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000000000000000", @ANYRESHEX=r0, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x4de2, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x29, 0x3a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x35, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x80c4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) 550.026553ms ago: executing program 0 (id=2586): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000380)=@hci={0x1f, 0x5965, 0x31}, 0x80, &(0x7f0000000300)=[{0x0}], 0x1}, 0x4000080) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, 0x0, 0x8000) sendmsg$inet(r1, 0x0, 0x4048810) socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deda8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1b2ef4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f53d709959d7bd2f5cc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36fb0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4a7bce853249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8012392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccaca8154b8601213ee2296d2a27798c8ce2a305c0c8d1acf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c04701563816514f868a2b95319abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdff7f0000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977e37df17a321d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2c6aea1d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb89243a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a01040000a35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92de6b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250054f84b0fccd4f810bce02322b489b79aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58f0225f3390343c12aa51810134d4b8123de6516737be55c06d9cdcfb1e20280e14700eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b19128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dceedb2ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e1000000b81b6790062e61cd000000acb1b33c38ddd302e28e8e30b5c180d38bb1cd770195799c541a7481f5d34ca75d74b3833d399371c8f09f6745d0e43d46f7c82ff1b7d6c04467d083fc708348f35ae9bb9b78f2984a0ee55647d4c4a63c4f438fdec726e7d8228eaff2374b2300b9c35f4259e3452b2f53ee114bb8a6c0ea6fc89a55fef6673013d7dd4597660865423e978dd6e41e201bb3a584d6fe6f24e290613b677271603c558ee2021be29c4a06a057b2acc5bfd34898afac0d839079bbcb3acd43532563367ac8ae6c4379fb5fdcdab5fe55e1a3a521284209871216817338073cbc4ec9903725b788a25b5a6003b579b8f0e20d78be3d885557292971e65f4f1daefad2c5ccbca608b46406ffff25610c3cbae9f56cd47678f482e2c1f7cdfc5ce2a67c1545c1192f2ac3990f9c850788401469fbca801e73cd9efbcc6e44b2f414cdff5c49e706d699b5bfa75526f700c4e32611b826b2787f99532c02262a9c60e4b07a09377c38747c7f05e38b6db5d8cc625873af8fc5a7d362334c509f6bb4e36e1c9e08949679e0ed9f84e668588b9f1b21069bd5ffe263b1e6860c305d1faca4d6e4680ab6a6d491ecc97a904cc9c643e489d1a5f7d8a359bea93ba2d95bd3341d98d4918118e5f7b6fa6f603274c561f63ee337ad8d0017bbd1e17b5ce71a18c8572810029fe5d0ac2a661d8b346240c46f0223981cd53c067b65b579c144a4c918504888132a19a6a1702afb8646cf8fbcc5a4f5fbc072388f7bd7955138fc4919d78cfc5f2fd7dccf3a20896045698d2b6770773412029db69c099fda38be5f37adc5bd48f7f11b5632bb63fa18718c1a24e0bad8d21f51f6bf3fbd3786a00c4e8f8536f6af28c9b8cd210bc0e82112f9943fc0fa81c08e456983cbdd8d08053c128e122da8b758"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2f, 0xffffff99, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac14030a44079f03fe8000ff80000000000000000008ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380)="b101000000353b", &(0x7f0000000000), 0x0, 0x700}, 0x2c) 338.279183ms ago: executing program 2 (id=2587): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 264.519287ms ago: executing program 2 (id=2588): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x1, 0xf, 0x0, 0x482dc423}, 0x10, 0x1ae68, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f00000011c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000", @ANYRES32=r2, @ANYRES16=r1, @ANYRES32=r0], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394", 0xf}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000005000800"], 0x48) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000008847875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x66) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xff00) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x229, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0xffffffff}, 0x1c044, 0x4, 0x9, 0x1, 0xf, 0xffffffff, 0x1, 0x0, 0x6}, 0x0, 0x1, r0, 0x2) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000797dbc64107b42c556567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799ef4dca1e3c32158996e4b2abde5f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d65108006e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469deb0d81d7adee2ef7c2f058c2c262b97ecbfb32fe3e3ffcdf7b5c24d0ab0a7ae9e6be6c115c5663dd864d655a7babdcf8315dc29b6f18539abf1422502d7d53ce861d8a07dbb00c5a94e0186689f988628a0986d8f0419924348a32be8950099b4718e6109b9eed9e5b3e8ff86d22cf39479b26cc3e977df19f757432bf055090461", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r8) close(r8) 0s ago: executing program 1 (id=2589): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211dff", 0x2d}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e1208001800", 0x2c}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 00 R09: 0000000000000000 [ 156.433219][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.441210][ T6885] R13: 00007f20210eb038 R14: 00007f20210eafa0 R15: 00007ffc112bbb88 [ 156.449208][ T6885] [ 156.831843][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 156.891557][ T6897] netlink: 'syz.1.908': attribute type 10 has an invalid length. [ 157.172108][ T6914] netlink: 188 bytes leftover after parsing attributes in process `syz.4.914'. [ 157.186101][ T6901] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 157.197474][ T6901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.909'. [ 157.225118][ T6901] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 157.249928][ T6909] netlink: 132 bytes leftover after parsing attributes in process `syz.2.912'. [ 157.741788][ T6930] FAULT_INJECTION: forcing a failure. [ 157.741788][ T6930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.756845][ T154] wlan1: Trigger new scan to find an IBSS to join [ 157.805299][ T6930] CPU: 1 PID: 6930 Comm: syz.3.920 Not tainted syzkaller #0 [ 157.812725][ T6930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.822813][ T6930] Call Trace: [ 157.826286][ T6930] [ 157.829227][ T6930] dump_stack_lvl+0x188/0x250 [ 157.833929][ T6930] ? show_regs_print_info+0x20/0x20 [ 157.839163][ T6930] ? load_image+0x400/0x400 [ 157.843699][ T6930] ? __lock_acquire+0x7d10/0x7d10 [ 157.848765][ T6930] should_fail+0x38c/0x4c0 [ 157.853209][ T6930] _copy_to_user+0x2e/0x130 [ 157.857728][ T6930] simple_read_from_buffer+0xe3/0x150 [ 157.863118][ T6930] proc_fail_nth_read+0x1a6/0x220 [ 157.868166][ T6930] ? proc_fault_inject_write+0x310/0x310 [ 157.873822][ T6930] ? fsnotify_perm+0x254/0x560 [ 157.878608][ T6930] ? proc_fault_inject_write+0x310/0x310 [ 157.884257][ T6930] vfs_read+0x301/0xd60 [ 157.888453][ T6930] ? kernel_read+0x1e0/0x1e0 [ 157.893197][ T6930] ? __fget_files+0x40f/0x480 [ 157.897992][ T6930] ? mutex_lock_nested+0x17/0x20 [ 157.902950][ T6930] ? __fdget_pos+0x2bf/0x370 [ 157.907549][ T6930] ? ksys_read+0x71/0x260 [ 157.912007][ T6930] ksys_read+0x152/0x260 [ 157.916270][ T6930] ? vfs_write+0xd60/0xd60 [ 157.920714][ T6930] ? lockdep_hardirqs_on+0x94/0x140 [ 157.925933][ T6930] do_syscall_64+0x4c/0xa0 [ 157.930360][ T6930] ? clear_bhb_loop+0x30/0x80 [ 157.935167][ T6930] ? clear_bhb_loop+0x30/0x80 [ 157.939867][ T6930] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.945776][ T6930] RIP: 0033:0x7f6b29ce0fce [ 157.950209][ T6930] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.969918][ T6930] RSP: 002b:00007f6b27f79fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.978356][ T6930] RAX: ffffffffffffffda RBX: 00007f6b27f7a6c0 RCX: 00007f6b29ce0fce [ 157.986346][ T6930] RDX: 000000000000000f RSI: 00007f6b27f7a0a0 RDI: 0000000000000005 [ 157.994426][ T6930] RBP: 00007f6b27f7a090 R08: 0000000000000000 R09: 0000000000000000 [ 158.002412][ T6930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.010481][ T6930] R13: 00007f6b29f9a038 R14: 00007f6b29f99fa0 R15: 00007ffd0df5fab8 [ 158.018594][ T6930] [ 158.024444][ T1591] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 158.081613][ T6941] netlink: 'syz.4.922': attribute type 1 has an invalid length. [ 158.100236][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 160.221587][ T7022] netlink: 'syz.4.950': attribute type 10 has an invalid length. [ 160.230966][ T7023] netlink: 'syz.1.952': attribute type 29 has an invalid length. [ 160.326362][ T7022] team0: Device wg1 is of different type [ 160.375560][ T7024] netlink: 'syz.0.948': attribute type 2 has an invalid length. [ 160.384169][ T7024] __nla_validate_parse: 5 callbacks suppressed [ 160.384188][ T7024] netlink: 119 bytes leftover after parsing attributes in process `syz.0.948'. [ 160.426149][ T7023] netlink: 'syz.1.952': attribute type 29 has an invalid length. [ 160.452665][ T7030] netlink: 'syz.1.952': attribute type 29 has an invalid length. [ 160.714029][ T144] wlan1: Trigger new scan to find an IBSS to join [ 160.792539][ T4250] wlan1: Trigger new scan to find an IBSS to join [ 161.010963][ T7051] netlink: 'syz.3.959': attribute type 17 has an invalid length. [ 161.019471][ T7051] netlink: 148 bytes leftover after parsing attributes in process `syz.3.959'. [ 161.267866][ T7051] netlink: 144 bytes leftover after parsing attributes in process `syz.3.959'. [ 161.507411][ T7076] netlink: 'syz.4.969': attribute type 1 has an invalid length. [ 161.526045][ T7076] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.969'. [ 162.422014][ T7088] netlink: 180 bytes leftover after parsing attributes in process `syz.4.972'. [ 162.473122][ T7092] FAULT_INJECTION: forcing a failure. [ 162.473122][ T7092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.541729][ T7092] CPU: 1 PID: 7092 Comm: syz.0.974 Not tainted syzkaller #0 [ 162.549058][ T7092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 162.559122][ T7092] Call Trace: [ 162.562407][ T7092] [ 162.563581][ T7088] netlink: 'syz.4.972': attribute type 27 has an invalid length. [ 162.565338][ T7092] dump_stack_lvl+0x188/0x250 [ 162.577761][ T7092] ? show_regs_print_info+0x20/0x20 [ 162.582988][ T7092] ? load_image+0x400/0x400 [ 162.587597][ T7092] ? __might_sleep+0xf0/0xf0 [ 162.592389][ T7092] ? __lock_acquire+0x7d10/0x7d10 [ 162.597897][ T7092] ? mark_lock+0x94/0x320 [ 162.602862][ T7092] should_fail+0x38c/0x4c0 [ 162.607390][ T7092] copy_page_from_iter+0x33c/0x760 [ 162.612618][ T7092] pipe_write+0x96f/0x1aa0 [ 162.617062][ T7092] ? pipe_write+0x141/0x1aa0 [ 162.621858][ T7092] ? pipe_read+0x1260/0x1260 [ 162.626463][ T7092] ? end_current_label_crit_section+0x14b/0x170 [ 162.632721][ T7092] ? memset+0x1e/0x40 [ 162.636843][ T7092] ? iov_iter_init+0xb4/0x170 [ 162.641533][ T7092] vfs_write+0x745/0xd60 [ 162.645799][ T7092] ? file_end_write+0x250/0x250 [ 162.650667][ T7092] ? __fget_files+0x40f/0x480 [ 162.655387][ T7092] ? __fdget_pos+0x1e2/0x370 [ 162.659965][ T7092] ? ksys_write+0x71/0x260 [ 162.664377][ T7092] ksys_write+0x152/0x260 [ 162.668701][ T7092] ? __ia32_sys_read+0x80/0x80 [ 162.673458][ T7092] ? lockdep_hardirqs_on+0x94/0x140 [ 162.678650][ T7092] do_syscall_64+0x4c/0xa0 [ 162.683051][ T7092] ? clear_bhb_loop+0x30/0x80 [ 162.687808][ T7092] ? clear_bhb_loop+0x30/0x80 [ 162.692606][ T7092] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.698576][ T7092] RIP: 0033:0x7fbd27ac4799 [ 162.702983][ T7092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.722596][ T7092] RSP: 002b:00007fbd25d1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.731270][ T7092] RAX: ffffffffffffffda RBX: 00007fbd27d3dfa0 RCX: 00007fbd27ac4799 [ 162.739231][ T7092] RDX: 000000000000ffc0 RSI: 0000200000000000 RDI: 0000000000000000 [ 162.747189][ T7092] RBP: 00007fbd25d1e090 R08: 0000000000000000 R09: 0000000000000000 [ 162.755339][ T7092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.763316][ T7092] R13: 00007fbd27d3e038 R14: 00007fbd27d3dfa0 R15: 00007ffcb745fc68 [ 162.771850][ T7092] [ 162.793894][ T144] wlan1: Creating new IBSS network, BSSID fa:62:fb:63:a4:de [ 163.752954][ T9] wlan1: Trigger new scan to find an IBSS to join [ 164.199209][ T7132] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.989'. [ 164.763853][ T7146] device veth0_vlan left promiscuous mode [ 164.807259][ T7146] device veth0_vlan entered promiscuous mode [ 164.844052][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.880409][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.915752][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.927850][ T144] wlan1: Creating new IBSS network, BSSID 12:a8:67:82:0f:85 [ 165.103195][ T7152] sctp: [Deprecated]: syz.0.995 (pid 7152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.103195][ T7152] Use struct sctp_sack_info instead [ 165.222876][ T7161] netlink: 144 bytes leftover after parsing attributes in process `syz.3.997'. [ 166.815674][ T7211] netlink: 147988 bytes leftover after parsing attributes in process `syz.4.1019'. [ 167.037372][ T7221] netlink: 'syz.4.1022': attribute type 10 has an invalid length. [ 167.063989][ T7221] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1022'. [ 167.083583][ T7221] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 169.678435][ T7223] netlink: 'syz.1.1024': attribute type 10 has an invalid length. [ 169.733489][ T7223] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1024'. [ 169.860770][ T7223] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 170.154446][ T7243] netlink: 'syz.4.1031': attribute type 39 has an invalid length. [ 170.403782][ T7250] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1032'. [ 171.151543][ T7272] sctp: [Deprecated]: syz.2.1040 (pid 7272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.151543][ T7272] Use struct sctp_sack_info instead [ 171.299537][ T7274] device wlan0 left promiscuous mode [ 171.366241][ T7278] ref_ctr_offset mismatch. inode: 0x42e offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 171.378893][ T7281] netlink: 'syz.1.1044': attribute type 39 has an invalid length. [ 171.398245][ T7282] netlink: 'syz.3.1043': attribute type 10 has an invalid length. [ 171.420273][ T7282] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1043'. [ 171.447343][ T7282] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 171.569881][ T7295] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1047'. [ 171.653457][ T7294] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1048'. [ 173.636439][ T7337] netlink: 'syz.4.1059': attribute type 39 has an invalid length. [ 173.802299][ T7348] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1063'. [ 173.885331][ T7346] netlink: 'syz.1.1061': attribute type 1 has an invalid length. [ 173.942936][ T7346] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1061'. [ 175.136202][ T7387] netlink: 'syz.4.1076': attribute type 39 has an invalid length. [ 175.753026][ T1324] Bluetooth: hci0: command 0x0406 tx timeout [ 175.770253][ T1324] Bluetooth: hci2: command 0x0406 tx timeout [ 175.796371][ T1324] Bluetooth: hci3: command 0x0406 tx timeout [ 175.821082][ T1324] Bluetooth: hci1: command 0x0406 tx timeout [ 175.887623][ T1324] Bluetooth: hci4: command 0x0406 tx timeout [ 175.914038][ T7417] netlink: 'syz.3.1086': attribute type 1 has an invalid length. [ 175.922046][ T7417] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1086'. [ 175.955892][ T7414] device syzkaller0 entered promiscuous mode [ 175.989648][ T7421] netlink: 208644 bytes leftover after parsing attributes in process `syz.4.1089'. [ 176.011456][ T7421] netlink: 'syz.4.1089': attribute type 1 has an invalid length. [ 176.233843][ T7429] netlink: 'syz.1.1092': attribute type 39 has an invalid length. [ 176.259419][ T7432] netlink: 'syz.2.1090': attribute type 7 has an invalid length. [ 176.270213][ T7432] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1090'. [ 176.748011][ T7451] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1099'. [ 177.070681][ T7465] netlink: 'syz.0.1106': attribute type 39 has an invalid length. [ 177.240249][ T7475] FAULT_INJECTION: forcing a failure. [ 177.240249][ T7475] name failslab, interval 1, probability 0, space 0, times 0 [ 177.309476][ T7475] CPU: 0 PID: 7475 Comm: syz.4.1109 Not tainted syzkaller #0 [ 177.316917][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.327088][ T7475] Call Trace: [ 177.330369][ T7475] [ 177.333301][ T7475] dump_stack_lvl+0x188/0x250 [ 177.337995][ T7475] ? show_regs_print_info+0x20/0x20 [ 177.343337][ T7475] ? load_image+0x400/0x400 [ 177.348019][ T7475] ? __might_sleep+0xf0/0xf0 [ 177.352612][ T7475] ? __lock_acquire+0x7d10/0x7d10 [ 177.357739][ T7475] should_fail+0x38c/0x4c0 [ 177.362165][ T7475] should_failslab+0x5/0x20 [ 177.366662][ T7475] slab_pre_alloc_hook+0x51/0xc0 [ 177.371606][ T7475] kmem_cache_alloc_node+0x47/0x2d0 [ 177.376802][ T7475] ? __alloc_skb+0xf4/0x750 [ 177.381295][ T7475] __alloc_skb+0xf4/0x750 [ 177.385609][ T7475] __ip6_append_data+0x266c/0x38c0 [ 177.390728][ T7475] ? ip6_setup_cork+0x11e0/0x11e0 [ 177.395732][ T7475] ? ip6_setup_cork+0xc63/0x11e0 [ 177.400650][ T7475] ip6_append_data+0x1d4/0x310 [ 177.405396][ T7475] ? rawv6_send_hdrinc+0x1690/0x1690 [ 177.410669][ T7475] ? rawv6_send_hdrinc+0x1690/0x1690 [ 177.415936][ T7475] rawv6_sendmsg+0x1222/0x1700 [ 177.420780][ T7475] ? compat_rawv6_ioctl+0x60/0x60 [ 177.425843][ T7475] ? aa_af_perm+0x340/0x340 [ 177.430328][ T7475] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 177.436730][ T7475] ? sock_rps_record_flow+0x17/0x3b0 [ 177.442009][ T7475] ? inet_sendmsg+0x78/0x2f0 [ 177.446589][ T7475] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 177.451871][ T7475] ? security_socket_sendmsg+0x7c/0xa0 [ 177.457375][ T7475] ? inet_send_prepare+0x260/0x260 [ 177.462474][ T7475] ____sys_sendmsg+0x5b7/0x8f0 [ 177.467273][ T7475] ? __sys_sendmsg_sock+0x30/0x30 [ 177.472334][ T7475] ? import_iovec+0x6f/0xa0 [ 177.476825][ T7475] ___sys_sendmsg+0x236/0x2e0 [ 177.481491][ T7475] ? __sys_sendmsg+0x2a0/0x2a0 [ 177.486251][ T7475] ? vfs_write+0x8b2/0xd60 [ 177.490678][ T7475] __se_sys_sendmsg+0x1af/0x290 [ 177.495516][ T7475] ? __x64_sys_sendmsg+0x80/0x80 [ 177.500438][ T7475] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 177.506501][ T7475] ? lockdep_hardirqs_on+0x94/0x140 [ 177.511685][ T7475] do_syscall_64+0x4c/0xa0 [ 177.516085][ T7475] ? clear_bhb_loop+0x30/0x80 [ 177.520742][ T7475] ? clear_bhb_loop+0x30/0x80 [ 177.525400][ T7475] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.531276][ T7475] RIP: 0033:0x7f303fae3799 [ 177.535677][ T7475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.555785][ T7475] RSP: 002b:00007f303dd3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.564270][ T7475] RAX: ffffffffffffffda RBX: 00007f303fd5cfa0 RCX: 00007f303fae3799 [ 177.572247][ T7475] RDX: 0000000000000060 RSI: 0000200000000140 RDI: 0000000000000003 [ 177.580209][ T7475] RBP: 00007f303dd3d090 R08: 0000000000000000 R09: 0000000000000000 [ 177.588158][ T7475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.596112][ T7475] R13: 00007f303fd5d038 R14: 00007f303fd5cfa0 R15: 00007ffee43f5aa8 [ 177.604172][ T7475] [ 177.799296][ T7484] FAULT_INJECTION: forcing a failure. [ 177.799296][ T7484] name failslab, interval 1, probability 0, space 0, times 0 [ 177.881413][ T7484] CPU: 1 PID: 7484 Comm: syz.1.1114 Not tainted syzkaller #0 [ 177.888835][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.898906][ T7484] Call Trace: [ 177.902369][ T7484] [ 177.905393][ T7484] dump_stack_lvl+0x188/0x250 [ 177.910081][ T7484] ? show_regs_print_info+0x20/0x20 [ 177.915288][ T7484] ? load_image+0x400/0x400 [ 177.919801][ T7484] ? __might_sleep+0xf0/0xf0 [ 177.924396][ T7484] ? __lock_acquire+0x7d10/0x7d10 [ 177.929429][ T7484] should_fail+0x38c/0x4c0 [ 177.933862][ T7484] should_failslab+0x5/0x20 [ 177.938370][ T7484] slab_pre_alloc_hook+0x51/0xc0 [ 177.943318][ T7484] __kmalloc+0x6b/0x330 [ 177.947477][ T7484] ? tomoyo_encode+0x27e/0x540 [ 177.952256][ T7484] tomoyo_encode+0x27e/0x540 [ 177.956859][ T7484] tomoyo_realpath_from_path+0x5cd/0x610 [ 177.962498][ T7484] tomoyo_path_number_perm+0x242/0x660 [ 177.967945][ T7484] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 177.974612][ T7484] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 177.980107][ T7484] security_file_ioctl+0x6c/0xa0 [ 177.985040][ T7484] __se_sys_ioctl+0x48/0x170 [ 177.989612][ T7484] do_syscall_64+0x4c/0xa0 [ 177.994010][ T7484] ? clear_bhb_loop+0x30/0x80 [ 177.998669][ T7484] ? clear_bhb_loop+0x30/0x80 [ 178.003328][ T7484] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.009207][ T7484] RIP: 0033:0x7f2020e71799 [ 178.013606][ T7484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.033546][ T7484] RSP: 002b:00007f201f0cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.041950][ T7484] RAX: ffffffffffffffda RBX: 00007f20210eafa0 RCX: 00007f2020e71799 [ 178.049908][ T7484] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000003 [ 178.057860][ T7484] RBP: 00007f201f0cb090 R08: 0000000000000000 R09: 0000000000000000 [ 178.065811][ T7484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.073764][ T7484] R13: 00007f20210eb038 R14: 00007f20210eafa0 R15: 00007ffc112bbb88 [ 178.081824][ T7484] [ 178.348068][ T7498] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1118'. [ 178.450050][ T7484] ERROR: Out of memory at tomoyo_realpath_from_path. [ 179.178755][ T7552] netlink: 'syz.4.1131': attribute type 46 has an invalid length. [ 179.256241][ T7558] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1136'. [ 179.256422][ T7552] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1131'. [ 179.323638][ T7562] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1131'. [ 179.360306][ T7560] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1133'. [ 179.412414][ T7552] netlink: 'syz.4.1131': attribute type 21 has an invalid length. [ 179.437026][ T7552] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1131'. [ 179.487346][ T7552] netlink: 'syz.4.1131': attribute type 4 has an invalid length. [ 179.513903][ T7552] netlink: 'syz.4.1131': attribute type 5 has an invalid length. [ 179.551161][ T7552] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1131'. [ 180.003985][ T7586] netlink: 'syz.1.1141': attribute type 29 has an invalid length. [ 180.032586][ T7586] netlink: 'syz.1.1141': attribute type 29 has an invalid length. [ 180.059724][ T7586] netlink: 'syz.1.1141': attribute type 29 has an invalid length. [ 180.270165][ T7600] device wlan0 entered promiscuous mode [ 180.362973][ T7600] netlink: 196808 bytes leftover after parsing attributes in process `syz.3.1146'. [ 180.764072][ T7613] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1149'. [ 180.864079][ T7620] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1153'. [ 181.738481][ T7650] device wlan0 left promiscuous mode [ 181.781845][ T7656] device wlan0 entered promiscuous mode [ 181.830964][ T7655] netlink: 'syz.3.1166': attribute type 39 has an invalid length. [ 182.093997][ T7664] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1169'. [ 182.114156][ T7664] netlink: zone id is out of range [ 182.119628][ T7664] netlink: zone id is out of range [ 182.158749][ T7664] netlink: zone id is out of range [ 182.212424][ T7664] netlink: zone id is out of range [ 182.217672][ T7664] netlink: zone id is out of range [ 182.246595][ T7664] netlink: zone id is out of range [ 182.262049][ T7664] netlink: zone id is out of range [ 182.301013][ T7664] netlink: zone id is out of range [ 182.348190][ T7664] netlink: zone id is out of range [ 182.393200][ T7664] netlink: zone id is out of range [ 183.132531][ T7697] device wlan0 entered promiscuous mode [ 183.608935][ T7707] netlink: 'syz.1.1186': attribute type 10 has an invalid length. [ 183.765462][ T7704] netlink: 'syz.4.1185': attribute type 3 has an invalid length. [ 184.363660][ T7744] validate_nla: 1 callbacks suppressed [ 184.363677][ T7744] netlink: 'syz.1.1199': attribute type 10 has an invalid length. [ 184.446261][ T7744] team0: Device wg1 is of different type [ 184.682403][ T7745] netlink: 'syz.4.1196': attribute type 6 has an invalid length. [ 185.230022][ T7777] netlink: 'syz.1.1209': attribute type 39 has an invalid length. [ 185.347896][ T7787] __nla_validate_parse: 6 callbacks suppressed [ 185.347912][ T7787] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1212'. [ 185.790522][ T7799] netlink: 'syz.0.1216': attribute type 3 has an invalid length. [ 185.804013][ T7799] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1216'. [ 185.886116][ T7799] netlink: 'syz.0.1216': attribute type 21 has an invalid length. [ 188.190400][ T7809] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1218'. [ 188.375106][ T7820] netlink: 'syz.0.1224': attribute type 11 has an invalid length. [ 188.405506][ T7819] netlink: 'syz.3.1223': attribute type 16 has an invalid length. [ 188.466480][ T7819] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1223'. [ 191.583180][ T7848] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1234'. [ 191.850919][ T7860] netlink: 703 bytes leftover after parsing attributes in process `syz.1.1238'. [ 192.595305][ T7881] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1246'. [ 192.757666][ T7887] netlink: 'syz.3.1249': attribute type 10 has an invalid length. [ 194.057207][ T7935] netlink: 'syz.0.1261': attribute type 39 has an invalid length. [ 194.164343][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.170678][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.696325][ T7957] netlink: 'syz.1.1270': attribute type 10 has an invalid length. [ 194.726000][ T7957] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1270'. [ 194.770554][ T7959] netlink: 703 bytes leftover after parsing attributes in process `syz.3.1271'. [ 195.046936][ T7970] netlink: 'syz.2.1277': attribute type 29 has an invalid length. [ 195.067501][ T7974] netlink: 'syz.4.1276': attribute type 39 has an invalid length. [ 195.105320][ T7970] netlink: 'syz.2.1277': attribute type 29 has an invalid length. [ 195.123478][ T7977] FAULT_INJECTION: forcing a failure. [ 195.123478][ T7977] name failslab, interval 1, probability 0, space 0, times 0 [ 195.150344][ T7977] CPU: 1 PID: 7977 Comm: syz.0.1278 Not tainted syzkaller #0 [ 195.157755][ T7977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.167804][ T7977] Call Trace: [ 195.171073][ T7977] [ 195.173992][ T7977] dump_stack_lvl+0x188/0x250 [ 195.178666][ T7977] ? show_regs_print_info+0x20/0x20 [ 195.183853][ T7977] ? load_image+0x400/0x400 [ 195.188361][ T7977] ? __might_sleep+0xf0/0xf0 [ 195.192937][ T7977] ? __lock_acquire+0x7d10/0x7d10 [ 195.198054][ T7977] ? __mutex_lock_common+0x1552/0x2400 [ 195.203507][ T7977] should_fail+0x38c/0x4c0 [ 195.207920][ T7977] should_failslab+0x5/0x20 [ 195.212415][ T7977] slab_pre_alloc_hook+0x51/0xc0 [ 195.217345][ T7977] kmem_cache_alloc_node+0x47/0x2d0 [ 195.222873][ T7977] ? __alloc_skb+0xf4/0x750 [ 195.227369][ T7977] __alloc_skb+0xf4/0x750 [ 195.231700][ T7977] netlink_dump+0x1e8/0xcf0 [ 195.236206][ T7977] ? __netlink_dump_start+0x11f/0x700 [ 195.241572][ T7977] ? mutex_lock_io_nested+0x60/0x60 [ 195.246779][ T7977] ? netlink_lookup+0x1d0/0x1d0 [ 195.251636][ T7977] __netlink_dump_start+0x523/0x700 [ 195.257094][ T7977] rtnetlink_rcv_msg+0xdd9/0xf30 [ 195.262043][ T7977] ? neigh_get+0xd30/0xd30 [ 195.266554][ T7977] ? rtnetlink_bind+0x80/0x80 [ 195.271306][ T7977] ? __lock_acquire+0x12e8/0x7d10 [ 195.276366][ T7977] ? perf_trace_lock_acquire+0xed/0x3e0 [ 195.282015][ T7977] ? verify_lock_unused+0x140/0x140 [ 195.287357][ T7977] ? verify_lock_unused+0x140/0x140 [ 195.292780][ T7977] ? perf_trace_lock_acquire+0xed/0x3e0 [ 195.298431][ T7977] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 195.305035][ T7977] ? neigh_get+0xd30/0xd30 [ 195.309460][ T7977] netlink_rcv_skb+0x1f5/0x440 [ 195.314216][ T7977] ? rtnetlink_bind+0x80/0x80 [ 195.318888][ T7977] ? netlink_ack+0xb50/0xb50 [ 195.323489][ T7977] netlink_unicast+0x774/0x920 [ 195.328270][ T7977] netlink_sendmsg+0x8ba/0xbe0 [ 195.333223][ T7977] ? netlink_getsockopt+0x570/0x570 [ 195.338423][ T7977] ? aa_sock_msg_perm+0x94/0x150 [ 195.343354][ T7977] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 195.348624][ T7977] ? security_socket_sendmsg+0x7c/0xa0 [ 195.354068][ T7977] ? netlink_getsockopt+0x570/0x570 [ 195.359253][ T7977] ____sys_sendmsg+0x5b7/0x8f0 [ 195.364021][ T7977] ? __sys_sendmsg_sock+0x30/0x30 [ 195.369049][ T7977] ? import_iovec+0x6f/0xa0 [ 195.373631][ T7977] ___sys_sendmsg+0x236/0x2e0 [ 195.378452][ T7977] ? __sys_sendmsg+0x2a0/0x2a0 [ 195.383530][ T7977] ? vfs_write+0x8b2/0xd60 [ 195.387980][ T7977] __se_sys_sendmsg+0x1af/0x290 [ 195.392828][ T7977] ? __x64_sys_sendmsg+0x80/0x80 [ 195.397758][ T7977] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 195.403742][ T7977] ? lockdep_hardirqs_on+0x94/0x140 [ 195.409025][ T7977] do_syscall_64+0x4c/0xa0 [ 195.413446][ T7977] ? clear_bhb_loop+0x30/0x80 [ 195.418107][ T7977] ? clear_bhb_loop+0x30/0x80 [ 195.423029][ T7977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.428922][ T7977] RIP: 0033:0x7fbd27ac4799 [ 195.433331][ T7977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.452934][ T7977] RSP: 002b:00007fbd25d1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.461341][ T7977] RAX: ffffffffffffffda RBX: 00007fbd27d3dfa0 RCX: 00007fbd27ac4799 [ 195.469313][ T7977] RDX: 0000000000000804 RSI: 0000200000000040 RDI: 0000000000000003 [ 195.477280][ T7977] RBP: 00007fbd25d1e090 R08: 0000000000000000 R09: 0000000000000000 [ 195.485355][ T7977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.493338][ T7977] R13: 00007fbd27d3e038 R14: 00007fbd27d3dfa0 R15: 00007ffcb745fc68 [ 195.501325][ T7977] [ 195.538369][ T7975] netlink: 'syz.2.1277': attribute type 29 has an invalid length. [ 195.582701][ T7970] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1277'. [ 195.806365][ T7988] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1281'. [ 196.006585][ T7996] tap0: tun_chr_ioctl cmd 1074025675 [ 196.030854][ T7996] tap0: persist enabled [ 196.241351][ T8008] FAULT_INJECTION: forcing a failure. [ 196.241351][ T8008] name failslab, interval 1, probability 0, space 0, times 0 [ 196.292037][ T8008] CPU: 1 PID: 8008 Comm: syz.4.1289 Not tainted syzkaller #0 [ 196.299455][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 196.309604][ T8008] Call Trace: [ 196.312890][ T8008] [ 196.315823][ T8008] dump_stack_lvl+0x188/0x250 [ 196.320601][ T8008] ? show_regs_print_info+0x20/0x20 [ 196.325823][ T8008] ? load_image+0x400/0x400 [ 196.330347][ T8008] ? __might_sleep+0xf0/0xf0 [ 196.334957][ T8008] ? __lock_acquire+0x7d10/0x7d10 [ 196.340014][ T8008] should_fail+0x38c/0x4c0 [ 196.344468][ T8008] should_failslab+0x5/0x20 [ 196.348989][ T8008] slab_pre_alloc_hook+0x51/0xc0 [ 196.353971][ T8008] ? __d_alloc+0x2a/0x6f0 [ 196.358357][ T8008] kmem_cache_alloc+0x3d/0x290 [ 196.363137][ T8008] ? trace_event_raw_event_lock+0x270/0x270 [ 196.369075][ T8008] __d_alloc+0x2a/0x6f0 [ 196.373255][ T8008] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 196.379265][ T8008] d_alloc_pseudo+0x19/0x70 [ 196.383791][ T8008] alloc_file_pseudo+0xe0/0x200 [ 196.388672][ T8008] ? alloc_empty_file_noaccount+0x80/0x80 [ 196.394419][ T8008] ? __lock_acquire+0x7d10/0x7d10 [ 196.399547][ T8008] ? __local_bh_enable_ip+0x136/0x1c0 [ 196.404969][ T8008] ? _local_bh_enable+0xa0/0xa0 [ 196.409847][ T8008] anon_inode_getfile+0xc1/0x1a0 [ 196.414809][ T8008] bpf_link_prime+0x125/0x270 [ 196.419511][ T8008] bpf_xdp_link_attach+0x1f3/0x480 [ 196.424734][ T8008] ? dev_xdp_prog_id+0xe0/0xe0 [ 196.430193][ T8008] link_create+0x50e/0x690 [ 196.434660][ T8008] __sys_bpf+0x645/0x6f0 [ 196.438955][ T8008] ? bpf_link_show_fdinfo+0x380/0x380 [ 196.444662][ T8008] ? vtime_user_exit+0x2c8/0x3e0 [ 196.449644][ T8008] __x64_sys_bpf+0x78/0x90 [ 196.454090][ T8008] do_syscall_64+0x4c/0xa0 [ 196.458544][ T8008] ? clear_bhb_loop+0x30/0x80 [ 196.463262][ T8008] ? clear_bhb_loop+0x30/0x80 [ 196.468191][ T8008] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 196.474203][ T8008] RIP: 0033:0x7f303fae3799 [ 196.478836][ T8008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.498488][ T8008] RSP: 002b:00007f303dd3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.507040][ T8008] RAX: ffffffffffffffda RBX: 00007f303fd5cfa0 RCX: 00007f303fae3799 [ 196.515038][ T8008] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 196.523036][ T8008] RBP: 00007f303dd3d090 R08: 0000000000000000 R09: 0000000000000000 [ 196.531208][ T8008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.539201][ T8008] R13: 00007f303fd5d038 R14: 00007f303fd5cfa0 R15: 00007ffee43f5aa8 [ 196.547322][ T8008] [ 196.612339][ T8012] netlink: 'syz.1.1290': attribute type 39 has an invalid length. [ 196.875468][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'. [ 197.216926][ T8041] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1298'. [ 197.278867][ T8040] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 197.307254][ T8040] syzkaller0: linktype set to 769 [ 197.347852][ T8040] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 197.480716][ T8052] netlink: 'syz.1.1302': attribute type 10 has an invalid length. [ 197.489647][ T8052] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1302'. [ 197.821203][ T8062] netlink: 'syz.2.1307': attribute type 39 has an invalid length. [ 198.127959][ T8078] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1312'. [ 198.211695][ T8082] netlink: 'syz.2.1311': attribute type 21 has an invalid length. [ 198.268196][ T8082] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1311'. [ 198.354744][ T8082] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1311'. [ 198.416081][ T8089] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1314'. [ 198.547162][ T8095] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1317'. [ 198.652407][ T8095] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1317'. [ 198.807017][ T8103] netlink: 'syz.4.1321': attribute type 39 has an invalid length. [ 199.393843][ T8133] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1332'. [ 199.398570][ T8140] netlink: 'syz.0.1334': attribute type 3 has an invalid length. [ 199.578350][ T8140] netlink: 'syz.0.1334': attribute type 3 has an invalid length. [ 199.597205][ T8146] netlink: 'syz.4.1336': attribute type 39 has an invalid length. [ 199.671482][ T8140] netlink: 'syz.0.1334': attribute type 3 has an invalid length. [ 199.733124][ T8140] netlink: 'syz.0.1334': attribute type 3 has an invalid length. [ 199.769716][ T8140] netlink: 'syz.0.1334': attribute type 3 has an invalid length. [ 199.799792][ T8140] netlink: 'syz.0.1334': attribute type 3 has an invalid length. [ 202.106138][ T8232] __nla_validate_parse: 33 callbacks suppressed [ 202.106156][ T8232] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1364'. [ 202.486462][ T8247] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.1371'. [ 202.983095][ T8260] validate_nla: 30 callbacks suppressed [ 202.983112][ T8260] netlink: 'syz.3.1377': attribute type 1 has an invalid length. [ 203.021850][ T8260] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1377'. [ 203.155005][ T8264] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1376'. [ 203.234465][ T8266] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1376'. [ 203.495276][ T8274] netlink: 'syz.0.1381': attribute type 39 has an invalid length. [ 204.062424][ T8293] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1388'. [ 204.276358][ T8298] netlink: 'syz.3.1391': attribute type 1 has an invalid length. [ 204.314447][ T8298] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.1391'. [ 204.425718][ T8309] netlink: 'syz.4.1393': attribute type 10 has an invalid length. [ 204.583002][ T8309] team0: Port device geneve1 added [ 204.603579][ T8318] netlink: 'syz.0.1396': attribute type 39 has an invalid length. [ 204.898223][ T8329] netlink: 'syz.2.1399': attribute type 39 has an invalid length. [ 204.929905][ T8334] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.1401'. [ 205.570877][ T8360] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1409'. [ 205.616810][ T8361] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1410'. [ 205.819531][ T8376] netlink: 'syz.0.1412': attribute type 10 has an invalid length. [ 205.926527][ T8376] net_ratelimit: 313 callbacks suppressed [ 205.926544][ T8376] openvswitch: netlink: Flow key attr not present in new flow. [ 206.783640][ T8397] FAULT_INJECTION: forcing a failure. [ 206.783640][ T8397] name failslab, interval 1, probability 0, space 0, times 0 [ 206.853913][ T8397] CPU: 0 PID: 8397 Comm: syz.2.1419 Not tainted syzkaller #0 [ 206.861335][ T8397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 206.871396][ T8397] Call Trace: [ 206.874685][ T8397] [ 206.877625][ T8397] dump_stack_lvl+0x188/0x250 [ 206.882313][ T8397] ? show_regs_print_info+0x20/0x20 [ 206.887523][ T8397] ? load_image+0x400/0x400 [ 206.892036][ T8397] ? perf_trace_lock+0xe4/0x390 [ 206.896985][ T8397] ? perf_trace_lock+0xe4/0x390 [ 206.901845][ T8397] should_fail+0x38c/0x4c0 [ 206.906268][ T8397] should_failslab+0x5/0x20 [ 206.910771][ T8397] slab_pre_alloc_hook+0x51/0xc0 [ 206.915706][ T8397] ? skb_clone+0x1bd/0x350 [ 206.920123][ T8397] kmem_cache_alloc+0x3d/0x290 [ 206.924890][ T8397] skb_clone+0x1bd/0x350 [ 206.929141][ T8397] __netlink_deliver_tap+0x3cd/0x7c0 [ 206.934439][ T8397] netlink_deliver_tap+0x16c/0x180 [ 206.939548][ T8397] netlink_unicast+0x74f/0x920 [ 206.944326][ T8397] netlink_sendmsg+0x8ba/0xbe0 [ 206.949105][ T8397] ? netlink_getsockopt+0x570/0x570 [ 206.954299][ T8397] ? aa_sock_msg_perm+0x94/0x150 [ 206.959231][ T8397] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 206.964513][ T8397] ? security_socket_sendmsg+0x7c/0xa0 [ 206.969965][ T8397] ? netlink_getsockopt+0x570/0x570 [ 206.975155][ T8397] ____sys_sendmsg+0x5b7/0x8f0 [ 206.979930][ T8397] ? __sys_sendmsg_sock+0x30/0x30 [ 206.984984][ T8397] ? import_iovec+0x6f/0xa0 [ 206.990015][ T8397] ___sys_sendmsg+0x236/0x2e0 [ 206.994699][ T8397] ? __sys_sendmsg+0x2a0/0x2a0 [ 206.999472][ T8397] ? trace_event_raw_event_lock+0x270/0x270 [ 207.005358][ T8397] ? vfs_write+0x8b2/0xd60 [ 207.009792][ T8397] __se_sys_sendmsg+0x1af/0x290 [ 207.014644][ T8397] ? __x64_sys_sendmsg+0x80/0x80 [ 207.019574][ T8397] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 207.025571][ T8397] ? lockdep_hardirqs_on+0x94/0x140 [ 207.030794][ T8397] do_syscall_64+0x4c/0xa0 [ 207.035246][ T8397] ? clear_bhb_loop+0x30/0x80 [ 207.039929][ T8397] ? clear_bhb_loop+0x30/0x80 [ 207.044616][ T8397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 207.050633][ T8397] RIP: 0033:0x7f284eb5f799 [ 207.055051][ T8397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.074661][ T8397] RSP: 002b:00007f284cdb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.083082][ T8397] RAX: ffffffffffffffda RBX: 00007f284edd8fa0 RCX: 00007f284eb5f799 [ 207.091233][ T8397] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 207.099200][ T8397] RBP: 00007f284cdb9090 R08: 0000000000000000 R09: 0000000000000000 [ 207.107207][ T8397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.115176][ T8397] R13: 00007f284edd9038 R14: 00007f284edd8fa0 R15: 00007fffcd57a1e8 [ 207.123154][ T8397] [ 207.300239][ T8407] netlink: 'syz.0.1423': attribute type 39 has an invalid length. [ 207.474913][ T8417] netlink: 'syz.3.1428': attribute type 2 has an invalid length. [ 207.498257][ T8417] netlink: 'syz.3.1428': attribute type 1 has an invalid length. [ 207.639368][ T8412] __nla_validate_parse: 3 callbacks suppressed [ 207.639405][ T8412] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1426'. [ 207.791330][ T8430] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 207.829514][ T8437] FAULT_INJECTION: forcing a failure. [ 207.829514][ T8437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.858727][ T8430] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 207.888525][ T8437] CPU: 1 PID: 8437 Comm: syz.1.1433 Not tainted syzkaller #0 [ 207.895932][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 207.899538][ T8430] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 207.905984][ T8437] Call Trace: [ 207.905993][ T8437] [ 207.906000][ T8437] dump_stack_lvl+0x188/0x250 [ 207.906025][ T8437] ? show_regs_print_info+0x20/0x20 [ 207.906046][ T8437] ? load_image+0x400/0x400 [ 207.938852][ T8437] ? __lock_acquire+0x7d10/0x7d10 [ 207.943889][ T8437] ? vfs_write+0x8b2/0xd60 [ 207.948441][ T8437] should_fail+0x38c/0x4c0 [ 207.952977][ T8437] _copy_from_user+0x2e/0x170 [ 207.957663][ T8437] __sys_bpf+0x26d/0x6f0 [ 207.961918][ T8437] ? bpf_link_show_fdinfo+0x380/0x380 [ 207.967293][ T8437] ? vtime_user_exit+0x2c8/0x3e0 [ 207.972240][ T8437] __x64_sys_bpf+0x78/0x90 [ 207.976649][ T8437] do_syscall_64+0x4c/0xa0 [ 207.981049][ T8437] ? clear_bhb_loop+0x30/0x80 [ 207.985715][ T8437] ? clear_bhb_loop+0x30/0x80 [ 207.990389][ T8437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 207.996267][ T8437] RIP: 0033:0x7f2020e71799 [ 208.000668][ T8437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.020256][ T8437] RSP: 002b:00007f201f0cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 208.028656][ T8437] RAX: ffffffffffffffda RBX: 00007f20210eafa0 RCX: 00007f2020e71799 [ 208.036616][ T8437] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 208.044569][ T8437] RBP: 00007f201f0cb090 R08: 0000000000000000 R09: 0000000000000000 [ 208.052699][ T8437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.060657][ T8437] R13: 00007f20210eb038 R14: 00007f20210eafa0 R15: 00007ffc112bbb88 [ 208.068623][ T8437] [ 208.081949][ T8430] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 208.201874][ T8445] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1438'. [ 208.277145][ T8449] validate_nla: 1 callbacks suppressed [ 208.277181][ T8449] netlink: 'syz.3.1440': attribute type 39 has an invalid length. [ 209.304639][ T8492] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1454'. [ 209.313729][ T8494] FAULT_INJECTION: forcing a failure. [ 209.313729][ T8494] name failslab, interval 1, probability 0, space 0, times 0 [ 209.381275][ T8494] CPU: 1 PID: 8494 Comm: syz.3.1456 Not tainted syzkaller #0 [ 209.388687][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 209.398747][ T8494] Call Trace: [ 209.402048][ T8494] [ 209.404997][ T8494] dump_stack_lvl+0x188/0x250 [ 209.409684][ T8494] ? show_regs_print_info+0x20/0x20 [ 209.414886][ T8494] ? load_image+0x400/0x400 [ 209.419408][ T8494] ? __lock_acquire+0x7d10/0x7d10 [ 209.424461][ T8494] should_fail+0x38c/0x4c0 [ 209.428890][ T8494] should_failslab+0x5/0x20 [ 209.433392][ T8494] slab_pre_alloc_hook+0x51/0xc0 [ 209.438331][ T8494] ? sockfs_init_fs_context+0xa0/0xa0 [ 209.443709][ T8494] ? sock_alloc_inode+0x17/0xb0 [ 209.448560][ T8494] kmem_cache_alloc+0x3d/0x290 [ 209.453332][ T8494] ? sockfs_init_fs_context+0xa0/0xa0 [ 209.458713][ T8494] sock_alloc_inode+0x17/0xb0 [ 209.463390][ T8494] ? sockfs_init_fs_context+0xa0/0xa0 [ 209.468760][ T8494] new_inode_pseudo+0x5f/0x210 [ 209.473632][ T8494] __sock_create+0x129/0x900 [ 209.478338][ T8494] __sys_socketpair+0x232/0x540 [ 209.483206][ T8494] __x64_sys_socketpair+0x97/0xb0 [ 209.488260][ T8494] do_syscall_64+0x4c/0xa0 [ 209.492687][ T8494] ? clear_bhb_loop+0x30/0x80 [ 209.497361][ T8494] ? clear_bhb_loop+0x30/0x80 [ 209.502060][ T8494] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.507984][ T8494] RIP: 0033:0x7f6b29d20799 [ 209.512418][ T8494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.532044][ T8494] RSP: 002b:00007f6b27f7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 209.540649][ T8494] RAX: ffffffffffffffda RBX: 00007f6b29f99fa0 RCX: 00007f6b29d20799 [ 209.548635][ T8494] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 209.556619][ T8494] RBP: 00007f6b27f7a090 R08: 0000000000000000 R09: 0000000000000000 [ 209.564600][ T8494] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 209.572843][ T8494] R13: 00007f6b29f9a038 R14: 00007f6b29f99fa0 R15: 00007ffd0df5fab8 [ 209.580842][ T8494] [ 209.754836][ T8504] netlink: 'syz.0.1467': attribute type 6 has an invalid length. [ 209.785212][ T8504] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1467'. [ 209.862470][ T8494] socket: no more sockets [ 210.118142][ T8517] netlink: 'syz.0.1460': attribute type 11 has an invalid length. [ 210.176155][ T8517] netlink: 198172 bytes leftover after parsing attributes in process `syz.0.1460'. [ 210.523652][ T8532] netlink: 'syz.3.1466': attribute type 16 has an invalid length. [ 211.021976][ T8559] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1474'. [ 211.194785][ T8567] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1479'. [ 211.275504][ T8573] netlink: 207508 bytes leftover after parsing attributes in process `syz.4.1480'. [ 211.280414][ T8570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1481'. [ 211.392309][ T8576] netlink: 26 bytes leftover after parsing attributes in process `syz.4.1480'. [ 211.567812][ T8589] netlink: set zone limit has 8 unknown bytes [ 211.665271][ T8585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.170356][ T8609] netlink: 'syz.4.1495': attribute type 49 has an invalid length. [ 213.362607][ T4533] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 213.652404][ T8646] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 213.678802][ T8651] FAULT_INJECTION: forcing a failure. [ 213.678802][ T8651] name failslab, interval 1, probability 0, space 0, times 0 [ 213.693196][ T8646] syzkaller0: linktype set to 825 [ 213.730444][ T8646] netlink: 'syz.3.1505': attribute type 9 has an invalid length. [ 213.754883][ T8646] __nla_validate_parse: 2 callbacks suppressed [ 213.754902][ T8646] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1505'. [ 213.776361][ T8651] CPU: 1 PID: 8651 Comm: syz.1.1507 Not tainted syzkaller #0 [ 213.783769][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 213.793816][ T8651] Call Trace: [ 213.797082][ T8651] [ 213.799994][ T8651] dump_stack_lvl+0x188/0x250 [ 213.804660][ T8651] ? show_regs_print_info+0x20/0x20 [ 213.809846][ T8651] ? load_image+0x400/0x400 [ 213.814336][ T8651] ? __lock_acquire+0x7d10/0x7d10 [ 213.819350][ T8651] should_fail+0x38c/0x4c0 [ 213.823762][ T8651] should_failslab+0x5/0x20 [ 213.828248][ T8651] slab_pre_alloc_hook+0x51/0xc0 [ 213.833170][ T8651] __kmalloc+0x6b/0x330 [ 213.837322][ T8651] ? sk_prot_alloc+0xe7/0x210 [ 213.841990][ T8651] sk_prot_alloc+0xe7/0x210 [ 213.846492][ T8651] ? sk_alloc+0x1d/0x310 [ 213.850721][ T8651] sk_alloc+0x2f/0x310 [ 213.854796][ T8651] bpf_prog_test_run_skb+0x240/0x1180 [ 213.860164][ T8651] ? __fget_files+0x40f/0x480 [ 213.864837][ T8651] ? cpu_online+0x60/0x60 [ 213.869160][ T8651] bpf_prog_test_run+0x31e/0x390 [ 213.874084][ T8651] __sys_bpf+0x5a5/0x6f0 [ 213.878310][ T8651] ? bpf_link_show_fdinfo+0x380/0x380 [ 213.883681][ T8651] __x64_sys_bpf+0x78/0x90 [ 213.888085][ T8651] do_syscall_64+0x4c/0xa0 [ 213.892489][ T8651] ? clear_bhb_loop+0x30/0x80 [ 213.897245][ T8651] ? clear_bhb_loop+0x30/0x80 [ 213.901904][ T8651] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.907828][ T8651] RIP: 0033:0x7f2020e71799 [ 213.912232][ T8651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.931823][ T8651] RSP: 002b:00007f201f0cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.940226][ T8651] RAX: ffffffffffffffda RBX: 00007f20210eafa0 RCX: 00007f2020e71799 [ 213.948276][ T8651] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 000000000000000a [ 213.956241][ T8651] RBP: 00007f201f0cb090 R08: 0000000000000000 R09: 0000000000000000 [ 213.964206][ T8651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.972174][ T8651] R13: 00007f20210eb038 R14: 00007f20210eafa0 R15: 00007ffc112bbb88 [ 213.980279][ T8651] [ 214.151566][ T8667] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1509'. [ 214.393760][ T8676] netlink: 'syz.0.1512': attribute type 10 has an invalid length. [ 214.626388][ T8683] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1514'. [ 215.139132][ T8711] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1523'. [ 215.489483][ T8731] netlink: 'syz.0.1528': attribute type 29 has an invalid length. [ 215.573297][ T8731] netlink: 'syz.0.1528': attribute type 29 has an invalid length. [ 216.531618][ T8775] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1538'. [ 217.097257][ T8802] netlink: 'syz.1.1547': attribute type 10 has an invalid length. [ 217.141955][ T8802] device hsr0 left promiscuous mode [ 217.189693][ T8802] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 217.244276][ T8802] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 217.324001][ T8802] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 217.358182][ T8802] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 217.400690][ T8806] netlink: 'syz.1.1547': attribute type 1 has an invalid length. [ 217.479510][ T8806] netlink: 'syz.1.1547': attribute type 4 has an invalid length. [ 217.513721][ T8806] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1547'. [ 217.587649][ T8814] netlink: 'syz.2.1549': attribute type 10 has an invalid length. [ 217.780737][ T8822] FAULT_INJECTION: forcing a failure. [ 217.780737][ T8822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.814584][ T8822] CPU: 1 PID: 8822 Comm: syz.0.1553 Not tainted syzkaller #0 [ 217.821994][ T8822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.832314][ T8822] Call Trace: [ 217.835593][ T8822] [ 217.838521][ T8822] dump_stack_lvl+0x188/0x250 [ 217.843197][ T8822] ? show_regs_print_info+0x20/0x20 [ 217.848426][ T8822] ? load_image+0x400/0x400 [ 217.852920][ T8822] ? __lock_acquire+0x7d10/0x7d10 [ 217.857932][ T8822] ? bpf_test_run+0x78e/0x800 [ 217.862593][ T8822] should_fail+0x38c/0x4c0 [ 217.867002][ T8822] _copy_to_user+0x2e/0x130 [ 217.871493][ T8822] bpf_test_finish+0x215/0x2f0 [ 217.876239][ T8822] ? convert_skb_to___skb+0x360/0x360 [ 217.881597][ T8822] ? __build_skb+0x1e2/0x2e0 [ 217.886180][ T8822] ? convert_skb_to___skb+0x1ff/0x360 [ 217.891535][ T8822] bpf_prog_test_run_skb+0xb8f/0x1180 [ 217.896903][ T8822] ? cpu_online+0x60/0x60 [ 217.901215][ T8822] bpf_prog_test_run+0x31e/0x390 [ 217.906227][ T8822] __sys_bpf+0x5a5/0x6f0 [ 217.910540][ T8822] ? bpf_link_show_fdinfo+0x380/0x380 [ 217.915905][ T8822] __x64_sys_bpf+0x78/0x90 [ 217.920304][ T8822] do_syscall_64+0x4c/0xa0 [ 217.924700][ T8822] ? clear_bhb_loop+0x30/0x80 [ 217.929359][ T8822] ? clear_bhb_loop+0x30/0x80 [ 217.934017][ T8822] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.939901][ T8822] RIP: 0033:0x7fbd27ac4799 [ 217.944298][ T8822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.964147][ T8822] RSP: 002b:00007fbd25d1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.972553][ T8822] RAX: ffffffffffffffda RBX: 00007fbd27d3dfa0 RCX: 00007fbd27ac4799 [ 217.980630][ T8822] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 217.988589][ T8822] RBP: 00007fbd25d1e090 R08: 0000000000000000 R09: 0000000000000000 [ 217.996545][ T8822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.004506][ T8822] R13: 00007fbd27d3e038 R14: 00007fbd27d3dfa0 R15: 00007ffcb745fc68 [ 218.012475][ T8822] [ 218.042068][ T8821] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1550'. [ 218.428530][ T8838] netlink: 'syz.2.1560': attribute type 39 has an invalid length. [ 218.500144][ T8842] netlink: 'syz.3.1562': attribute type 10 has an invalid length. [ 218.621814][ T8851] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 218.681708][ T8851] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 218.743737][ T8851] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 218.791220][ T8851] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 218.895659][ T8861] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1568'. [ 219.298518][ T8883] validate_nla: 1 callbacks suppressed [ 219.298533][ T8883] netlink: 'syz.4.1577': attribute type 21 has an invalid length. [ 219.687887][ T8902] netlink: 'syz.3.1585': attribute type 10 has an invalid length. [ 219.804090][ T8911] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1584'. [ 220.294171][ T8926] device wg2 entered promiscuous mode [ 220.373598][ T8933] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1596'. [ 220.967614][ T8955] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1600'. [ 221.421480][ T8972] FAULT_INJECTION: forcing a failure. [ 221.421480][ T8972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.490970][ T8972] CPU: 0 PID: 8972 Comm: syz.4.1605 Not tainted syzkaller #0 [ 221.498389][ T8972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.508544][ T8972] Call Trace: [ 221.511940][ T8972] [ 221.514893][ T8972] dump_stack_lvl+0x188/0x250 [ 221.519586][ T8972] ? show_regs_print_info+0x20/0x20 [ 221.524800][ T8972] ? load_image+0x400/0x400 [ 221.529317][ T8972] ? __kasan_kmalloc+0xcc/0xf0 [ 221.534105][ T8972] ? __lock_acquire+0x7d10/0x7d10 [ 221.539148][ T8972] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.545236][ T8972] should_fail+0x38c/0x4c0 [ 221.549764][ T8972] _copy_from_iter+0x22e/0x1170 [ 221.554630][ T8972] ? __lock_acquire+0x7d10/0x7d10 [ 221.559733][ T8972] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 221.565230][ T8972] ? __virt_addr_valid+0x3c6/0x470 [ 221.570366][ T8972] ? __phys_addr_symbol+0x2b/0x70 [ 221.575490][ T8972] ? __check_object_size+0x30c/0x410 [ 221.580795][ T8972] kernfs_fop_write_iter+0x1a4/0x4c0 [ 221.586132][ T8972] ? iov_iter_init+0xb4/0x170 [ 221.590834][ T8972] vfs_write+0x745/0xd60 [ 221.595090][ T8972] ? file_end_write+0x250/0x250 [ 221.599976][ T8972] ? __fget_files+0x40f/0x480 [ 221.600478][ T8983] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1610'. [ 221.604765][ T8972] ? mutex_lock_nested+0x17/0x20 [ 221.604806][ T8972] ? __fdget_pos+0x2bf/0x370 [ 221.604820][ T8972] ? ksys_write+0x71/0x260 [ 221.604838][ T8972] ksys_write+0x152/0x260 [ 221.604857][ T8972] ? __ia32_sys_read+0x80/0x80 [ 221.604875][ T8972] ? lockdep_hardirqs_on+0x94/0x140 [ 221.604898][ T8972] do_syscall_64+0x4c/0xa0 [ 221.604913][ T8972] ? clear_bhb_loop+0x30/0x80 [ 221.604927][ T8972] ? clear_bhb_loop+0x30/0x80 [ 221.604942][ T8972] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.604959][ T8972] RIP: 0033:0x7f303fae3799 [ 221.666466][ T8972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.686257][ T8972] RSP: 002b:00007f303dd3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 221.695139][ T8972] RAX: ffffffffffffffda RBX: 00007f303fd5cfa0 RCX: 00007f303fae3799 [ 221.703100][ T8972] RDX: 0000000000000027 RSI: 0000200000000340 RDI: 0000000000000005 [ 221.711316][ T8972] RBP: 00007f303dd3d090 R08: 0000000000000000 R09: 0000000000000000 [ 221.719268][ T8972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.727308][ T8972] R13: 00007f303fd5d038 R14: 00007f303fd5cfa0 R15: 00007ffee43f5aa8 [ 221.735289][ T8972] [ 222.208008][ T8992] device syzkaller0 entered promiscuous mode [ 222.306201][ T9000] netlink: 'syz.1.1616': attribute type 39 has an invalid length. [ 222.354124][ T9007] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1617'. [ 223.500105][ T9030] netlink: 'syz.0.1622': attribute type 10 has an invalid length. [ 223.828663][ T9030] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 224.694327][ T9069] netlink: 'syz.3.1637': attribute type 9 has an invalid length. [ 224.726253][ T9069] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1637'. [ 224.842817][ T9074] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1638'. [ 224.886404][ T9078] netlink: 'syz.4.1639': attribute type 27 has an invalid length. [ 224.932421][ T9078] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1639'. [ 224.993792][ T9076] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 225.064555][ T9076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.598685][ T9094] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1643'. [ 225.652395][ T9094] netlink: 'syz.4.1643': attribute type 3 has an invalid length. [ 226.301638][ T9109] device syzkaller0 entered promiscuous mode [ 226.452118][ T9125] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1662'. [ 226.520695][ T9132] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1656'. [ 226.826158][ T9148] netlink: 'syz.1.1659': attribute type 2 has an invalid length. [ 226.938102][ T9148] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 227.055549][ T9157] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1661'. [ 227.361770][ T9168] FAULT_INJECTION: forcing a failure. [ 227.361770][ T9168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.404361][ T9165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.423928][ T9168] CPU: 1 PID: 9168 Comm: syz.2.1668 Not tainted syzkaller #0 [ 227.431466][ T9168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.441529][ T9168] Call Trace: [ 227.444807][ T9168] [ 227.447752][ T9168] dump_stack_lvl+0x188/0x250 [ 227.452426][ T9168] ? show_regs_print_info+0x20/0x20 [ 227.457613][ T9168] ? load_image+0x400/0x400 [ 227.462103][ T9168] ? __might_sleep+0xf0/0xf0 [ 227.466819][ T9168] ? __lock_acquire+0x7d10/0x7d10 [ 227.471847][ T9168] should_fail+0x38c/0x4c0 [ 227.476262][ T9168] copy_page_from_iter+0x33c/0x760 [ 227.481376][ T9168] skb_copy_datagram_from_iter+0x2b6/0x6a0 [ 227.487198][ T9168] packet_sendmsg+0x3840/0x5060 [ 227.492323][ T9168] ? __might_sleep+0xf0/0xf0 [ 227.496915][ T9168] ? aa_sk_perm+0x7dc/0x910 [ 227.501405][ T9168] ? packet_getsockopt+0x9a0/0x9a0 [ 227.506511][ T9168] ? aa_sock_msg_perm+0x94/0x150 [ 227.511448][ T9168] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 227.516725][ T9168] ? security_socket_sendmsg+0x7c/0xa0 [ 227.522173][ T9168] ? packet_getsockopt+0x9a0/0x9a0 [ 227.527271][ T9168] ____sys_sendmsg+0x5b7/0x8f0 [ 227.532037][ T9168] ? __sys_sendmsg_sock+0x30/0x30 [ 227.537053][ T9168] ? import_iovec+0x6f/0xa0 [ 227.541631][ T9168] ___sys_sendmsg+0x236/0x2e0 [ 227.546299][ T9168] ? __sys_sendmsg+0x2a0/0x2a0 [ 227.551056][ T9168] ? trace_event_raw_event_lock+0x270/0x270 [ 227.556933][ T9168] ? vfs_write+0x8b2/0xd60 [ 227.561359][ T9168] __se_sys_sendmsg+0x1af/0x290 [ 227.566195][ T9168] ? __x64_sys_sendmsg+0x80/0x80 [ 227.571116][ T9168] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 227.577094][ T9168] ? lockdep_hardirqs_on+0x94/0x140 [ 227.582283][ T9168] do_syscall_64+0x4c/0xa0 [ 227.586685][ T9168] ? clear_bhb_loop+0x30/0x80 [ 227.591629][ T9168] ? clear_bhb_loop+0x30/0x80 [ 227.596399][ T9168] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 227.602298][ T9168] RIP: 0033:0x7f284eb5f799 [ 227.606708][ T9168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.626687][ T9168] RSP: 002b:00007f284cdb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.635094][ T9168] RAX: ffffffffffffffda RBX: 00007f284edd8fa0 RCX: 00007f284eb5f799 [ 227.643060][ T9168] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 227.651016][ T9168] RBP: 00007f284cdb9090 R08: 0000000000000000 R09: 0000000000000000 [ 227.659067][ T9168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.667032][ T9168] R13: 00007f284edd9038 R14: 00007f284edd8fa0 R15: 00007fffcd57a1e8 [ 227.675106][ T9168] [ 227.977815][ T9175] device sit0 entered promiscuous mode [ 228.171778][ T9189] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1672'. [ 228.210204][ T9190] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1671'. [ 228.467740][ T9200] netlink: 'syz.0.1676': attribute type 39 has an invalid length. [ 228.517017][ T9207] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1680'. [ 228.552899][ T9207] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 228.759079][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 228.854310][ T9216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.660007][ T9239] netlink: 'syz.1.1693': attribute type 39 has an invalid length. [ 229.733825][ T9243] __nla_validate_parse: 1 callbacks suppressed [ 229.733861][ T9243] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1692'. [ 229.812849][ T9249] netlink: 'syz.0.1694': attribute type 3 has an invalid length. [ 229.820613][ T9249] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1694'. [ 230.390722][ T9273] FAULT_INJECTION: forcing a failure. [ 230.390722][ T9273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.543783][ T9277] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1702'. [ 230.553915][ T9273] CPU: 1 PID: 9273 Comm: syz.2.1705 Not tainted syzkaller #0 [ 230.561306][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 230.571440][ T9273] Call Trace: [ 230.574712][ T9273] [ 230.577651][ T9273] dump_stack_lvl+0x188/0x250 [ 230.582490][ T9273] ? show_regs_print_info+0x20/0x20 [ 230.587681][ T9273] ? load_image+0x400/0x400 [ 230.592257][ T9273] ? __lock_acquire+0x7d10/0x7d10 [ 230.597276][ T9273] ? perf_trace_lock_acquire+0xed/0x3e0 [ 230.602912][ T9273] should_fail+0x38c/0x4c0 [ 230.607325][ T9273] _copy_from_user+0x2e/0x170 [ 230.611986][ T9273] kstrtouint_from_user+0xd3/0x220 [ 230.617080][ T9273] ? kstrtol_from_user+0x2a0/0x2a0 [ 230.622188][ T9273] proc_fail_nth_write+0x8b/0x200 [ 230.627206][ T9273] ? proc_fail_nth_read+0x220/0x220 [ 230.632390][ T9273] ? common_file_perm+0x171/0x1c0 [ 230.637401][ T9273] ? proc_fail_nth_read+0x220/0x220 [ 230.642583][ T9273] vfs_write+0x30b/0xd60 [ 230.646824][ T9273] ? file_end_write+0x250/0x250 [ 230.651663][ T9273] ? __fget_files+0x40f/0x480 [ 230.656331][ T9273] ? mutex_lock_nested+0x17/0x20 [ 230.661255][ T9273] ? __fdget_pos+0x2bf/0x370 [ 230.665942][ T9273] ? ksys_write+0x71/0x260 [ 230.670367][ T9273] ksys_write+0x152/0x260 [ 230.674724][ T9273] ? __ia32_sys_read+0x80/0x80 [ 230.679504][ T9273] ? lockdep_hardirqs_on+0x94/0x140 [ 230.684692][ T9273] do_syscall_64+0x4c/0xa0 [ 230.689093][ T9273] ? clear_bhb_loop+0x30/0x80 [ 230.693752][ T9273] ? clear_bhb_loop+0x30/0x80 [ 230.698419][ T9273] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.704307][ T9273] RIP: 0033:0x7f284eb1ffce [ 230.708725][ T9273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 230.728327][ T9273] RSP: 002b:00007f284cd97fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.736733][ T9273] RAX: ffffffffffffffda RBX: 00007f284cd986c0 RCX: 00007f284eb1ffce [ 230.744690][ T9273] RDX: 0000000000000001 RSI: 00007f284cd980a0 RDI: 000000000000000d [ 230.752642][ T9273] RBP: 00007f284cd98090 R08: 0000000000000000 R09: 0000000000000000 [ 230.760596][ T9273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.768549][ T9273] R13: 00007f284edd9128 R14: 00007f284edd9090 R15: 00007fffcd57a1e8 [ 230.776523][ T9273] [ 231.017249][ T9282] netlink: 'syz.2.1708': attribute type 39 has an invalid length. [ 231.461208][ T9284] netlink: 'syz.4.1707': attribute type 3 has an invalid length. [ 231.479454][ T9284] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1707'. [ 231.574744][ T9295] FAULT_INJECTION: forcing a failure. [ 231.574744][ T9295] name failslab, interval 1, probability 0, space 0, times 0 [ 231.641459][ T9295] CPU: 0 PID: 9295 Comm: syz.2.1712 Not tainted syzkaller #0 [ 231.648868][ T9295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 231.658929][ T9295] Call Trace: [ 231.662214][ T9295] [ 231.665144][ T9295] dump_stack_lvl+0x188/0x250 [ 231.669829][ T9295] ? show_regs_print_info+0x20/0x20 [ 231.675037][ T9295] ? load_image+0x400/0x400 [ 231.679562][ T9295] ? __might_sleep+0xf0/0xf0 [ 231.684164][ T9295] ? __lock_acquire+0x7d10/0x7d10 [ 231.689396][ T9295] should_fail+0x38c/0x4c0 [ 231.693916][ T9295] should_failslab+0x5/0x20 [ 231.698435][ T9295] slab_pre_alloc_hook+0x51/0xc0 [ 231.703416][ T9295] ? trace_probe_init+0x2af/0x380 [ 231.708998][ T9295] __kmalloc_track_caller+0x69/0x330 [ 231.714502][ T9295] ? trace_probe_init+0x2af/0x380 [ 231.719817][ T9295] kstrdup+0x32/0x70 [ 231.724110][ T9295] trace_probe_init+0x2af/0x380 [ 231.729073][ T9295] create_local_trace_uprobe+0x17f/0x6e0 [ 231.734921][ T9295] ? bpf_get_uprobe_info+0x480/0x480 [ 231.740752][ T9295] ? _copy_from_user+0x111/0x170 [ 231.745716][ T9295] perf_uprobe_init+0xef/0x190 [ 231.750890][ T9295] perf_uprobe_event_init+0xe2/0x170 [ 231.756377][ T9295] perf_try_init_event+0x12b/0x3d0 [ 231.761520][ T9295] perf_event_alloc+0xfcf/0x2240 [ 231.766564][ T9295] __se_sys_perf_event_open+0x6f5/0x1bb0 [ 231.772399][ T9295] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 231.778060][ T9295] ? lockdep_hardirqs_on+0x94/0x140 [ 231.783270][ T9295] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 231.788921][ T9295] do_syscall_64+0x4c/0xa0 [ 231.793461][ T9295] ? clear_bhb_loop+0x30/0x80 [ 231.798146][ T9295] ? clear_bhb_loop+0x30/0x80 [ 231.802845][ T9295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.808850][ T9295] RIP: 0033:0x7f284eb5f799 [ 231.813277][ T9295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.833165][ T9295] RSP: 002b:00007f284cdb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 231.841588][ T9295] RAX: ffffffffffffffda RBX: 00007f284edd8fa0 RCX: 00007f284eb5f799 [ 231.849571][ T9295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001080 [ 231.857548][ T9295] RBP: 00007f284cdb9090 R08: 0000000000000000 R09: 0000000000000000 [ 231.865535][ T9295] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 231.873533][ T9295] R13: 00007f284edd9038 R14: 00007f284edd8fa0 R15: 00007fffcd57a1e8 [ 231.881612][ T9295] [ 232.098377][ T9295] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 235.076005][ T9332] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1725'. [ 235.076322][ T9334] netlink: 'syz.4.1724': attribute type 3 has an invalid length. [ 235.137411][ T9334] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1724'. [ 235.251268][ T9346] netlink: 'syz.4.1729': attribute type 39 has an invalid length. [ 235.737821][ T9368] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1737'. [ 235.754005][ T9368] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 235.825983][ T9331] delete_channel: no stack [ 235.906853][ T9376] FAULT_INJECTION: forcing a failure. [ 235.906853][ T9376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.932286][ T9376] CPU: 0 PID: 9376 Comm: syz.3.1740 Not tainted syzkaller #0 [ 235.939702][ T9376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.950061][ T9376] Call Trace: [ 235.953355][ T9376] [ 235.956306][ T9376] dump_stack_lvl+0x188/0x250 [ 235.961012][ T9376] ? show_regs_print_info+0x20/0x20 [ 235.966412][ T9376] ? load_image+0x400/0x400 [ 235.970954][ T9376] ? __lock_acquire+0x7d10/0x7d10 [ 235.976025][ T9376] should_fail+0x38c/0x4c0 [ 235.980479][ T9376] _copy_from_user+0x2e/0x170 [ 235.985181][ T9376] sctp_setsockopt+0x191/0xf80 [ 235.989969][ T9376] ? sock_common_recvmsg+0x1c0/0x1c0 [ 235.995421][ T9376] __sys_setsockopt+0x2bf/0x3d0 [ 236.000300][ T9376] __x64_sys_setsockopt+0xb1/0xc0 [ 236.005347][ T9376] do_syscall_64+0x4c/0xa0 [ 236.009784][ T9376] ? clear_bhb_loop+0x30/0x80 [ 236.014471][ T9376] ? clear_bhb_loop+0x30/0x80 [ 236.019169][ T9376] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 236.025089][ T9376] RIP: 0033:0x7f6b29d20799 [ 236.029535][ T9376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.049169][ T9376] RSP: 002b:00007f6b27f7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 236.057616][ T9376] RAX: ffffffffffffffda RBX: 00007f6b29f99fa0 RCX: 00007f6b29d20799 [ 236.065610][ T9376] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000004 [ 236.073581][ T9376] RBP: 00007f6b27f7a090 R08: 0000000000000010 R09: 0000000000000000 [ 236.081633][ T9376] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.089627][ T9376] R13: 00007f6b29f9a038 R14: 00007f6b29f99fa0 R15: 00007ffd0df5fab8 [ 236.097764][ T9376] [ 236.121286][ T9378] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1742'. [ 236.402933][ T9387] netlink: 'syz.1.1745': attribute type 39 has an invalid length. [ 236.646601][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1749'. [ 236.719448][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1749'. [ 236.833491][ T9400] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1749'. [ 236.892000][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1749'. [ 236.914726][ T9400] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1749'. [ 236.930310][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1749'. [ 237.249828][ T9416] delete_channel: no stack [ 237.272690][ T9416] delete_channel: no stack [ 237.338391][ T9416] netlink: 'syz.0.1752': attribute type 9 has an invalid length. [ 237.380401][ T9426] netlink: 'syz.1.1756': attribute type 6 has an invalid length. [ 238.930514][ T9475] netlink: 'syz.4.1774': attribute type 10 has an invalid length. [ 239.221885][ T9495] netlink: 'syz.4.1782': attribute type 3 has an invalid length. [ 239.258976][ T9496] netlink: 'syz.3.1781': attribute type 39 has an invalid length. [ 239.285812][ T9499] netlink: 'syz.2.1783': attribute type 21 has an invalid length. [ 239.885999][ T9521] netlink: del zone limit has 4 unknown bytes [ 240.060430][ T9528] delete_channel: no stack [ 240.069714][ T9528] delete_channel: no stack [ 240.086089][ T9524] __nla_validate_parse: 11 callbacks suppressed [ 240.086104][ T9524] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1800'. [ 240.264075][ T9528] netlink: 'syz.3.1792': attribute type 9 has an invalid length. [ 240.278317][ T9528] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.1792'. [ 240.491908][ T9543] netlink: 'syz.0.1795': attribute type 2 has an invalid length. [ 240.525159][ T9550] netlink: 'syz.3.1797': attribute type 39 has an invalid length. [ 240.640842][ T9556] netlink: 'syz.2.1798': attribute type 6 has an invalid length. [ 240.696387][ T9553] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1798'. [ 240.767753][ T9559] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1799'. [ 241.210858][ T9578] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1806'. [ 241.592751][ T9583] delete_channel: no stack [ 241.620557][ T9583] delete_channel: no stack [ 241.686944][ T9588] netlink: 'syz.0.1809': attribute type 1 has an invalid length. [ 241.703876][ T9583] netlink: 'syz.2.1808': attribute type 9 has an invalid length. [ 241.732798][ T9583] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.1808'. [ 241.737761][ T9588] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.1809'. [ 241.964400][ T9594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.047699][ T9602] netlink: 'syz.0.1812': attribute type 39 has an invalid length. [ 242.083811][ T9600] netlink: 'syz.1.1813': attribute type 10 has an invalid length. [ 242.112663][ T9600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1813'. [ 242.128148][ T9600] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 242.147659][ T9606] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1815'. [ 242.369229][ T9620] netlink: 'syz.1.1820': attribute type 2 has an invalid length. [ 242.402554][ T9620] netlink: 198692 bytes leftover after parsing attributes in process `syz.1.1820'. [ 242.991749][ T9638] netlink: 'syz.3.1827': attribute type 3 has an invalid length. [ 244.713387][ T9] wlan1: Trigger new scan to find an IBSS to join [ 245.276967][ T9758] __nla_validate_parse: 6 callbacks suppressed [ 245.277001][ T9758] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1868'. [ 245.353501][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 245.375412][ T9761] validate_nla: 8 callbacks suppressed [ 245.375427][ T9761] netlink: 'syz.2.1872': attribute type 3 has an invalid length. [ 245.390080][ T9761] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1872'. [ 245.566853][ T9776] netlink: 'syz.4.1876': attribute type 39 has an invalid length. [ 246.041716][ T9796] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1883'. [ 246.699155][ T9808] __sock_release: fasync list not empty! [ 247.157359][ T9810] netlink: 'syz.3.1884': attribute type 21 has an invalid length. [ 247.308151][ T9822] netlink: 'syz.2.1891': attribute type 39 has an invalid length. [ 247.576031][ T9832] netlink: 'syz.0.1896': attribute type 40 has an invalid length. [ 247.711198][ T9843] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1896'. [ 247.774738][ T4533] wlan1: Trigger new scan to find an IBSS to join [ 247.814380][ T9843] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1896'. [ 247.853000][ T9847] netlink: 'syz.2.1901': attribute type 21 has an invalid length. [ 247.861093][ T9847] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1901'. [ 248.288302][ T9858] netlink: 'syz.0.1907': attribute type 39 has an invalid length. [ 248.620418][ T9881] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1912'. [ 248.706955][ T9886] netlink: 'syz.1.1916': attribute type 10 has an invalid length. [ 248.739864][ T9886] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1916'. [ 248.758073][ T9894] raw_sendmsg: syz.1.1916 forgot to set AF_INET. Fix it! [ 249.053464][ T9902] netlink: 'syz.1.1922': attribute type 39 has an invalid length. [ 249.080362][ T9905] FAULT_INJECTION: forcing a failure. [ 249.080362][ T9905] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 249.103862][ T9905] CPU: 0 PID: 9905 Comm: syz.4.1923 Not tainted syzkaller #0 [ 249.111274][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.121335][ T9905] Call Trace: [ 249.124606][ T9905] [ 249.127523][ T9905] dump_stack_lvl+0x188/0x250 [ 249.132195][ T9905] ? show_regs_print_info+0x20/0x20 [ 249.137559][ T9905] ? load_image+0x400/0x400 [ 249.142051][ T9905] ? __lock_acquire+0x7d10/0x7d10 [ 249.147062][ T9905] ? lock_chain_count+0x20/0x20 [ 249.151997][ T9905] should_fail+0x38c/0x4c0 [ 249.156407][ T9905] prepare_alloc_pages+0x1e4/0x5f0 [ 249.161508][ T9905] __alloc_pages+0x11b/0x480 [ 249.166081][ T9905] ? zone_statistics+0x170/0x170 [ 249.171002][ T9905] ? copy_page_from_iter+0x49d/0x760 [ 249.176278][ T9905] ? alloc_pages+0x438/0x550 [ 249.180857][ T9905] pipe_write+0x5d2/0x1aa0 [ 249.185278][ T9905] ? pipe_write+0x141/0x1aa0 [ 249.190034][ T9905] ? pipe_read+0x1260/0x1260 [ 249.194719][ T9905] ? end_current_label_crit_section+0x14b/0x170 [ 249.200953][ T9905] ? memset+0x1e/0x40 [ 249.204920][ T9905] ? iov_iter_init+0xb4/0x170 [ 249.209586][ T9905] vfs_write+0x745/0xd60 [ 249.214077][ T9905] ? file_end_write+0x250/0x250 [ 249.219000][ T9905] ? __fget_files+0x40f/0x480 [ 249.223690][ T9905] ? __fdget_pos+0x1e2/0x370 [ 249.228259][ T9905] ? ksys_write+0x71/0x260 [ 249.232715][ T9905] ksys_write+0x152/0x260 [ 249.237062][ T9905] ? __ia32_sys_read+0x80/0x80 [ 249.241808][ T9905] ? lockdep_hardirqs_on+0x94/0x140 [ 249.247079][ T9905] do_syscall_64+0x4c/0xa0 [ 249.251490][ T9905] ? clear_bhb_loop+0x30/0x80 [ 249.256170][ T9905] ? clear_bhb_loop+0x30/0x80 [ 249.260915][ T9905] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 249.266877][ T9905] RIP: 0033:0x7f303fae3799 [ 249.271277][ T9905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.290957][ T9905] RSP: 002b:00007f303dd3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 249.299371][ T9905] RAX: ffffffffffffffda RBX: 00007f303fd5cfa0 RCX: 00007f303fae3799 [ 249.307416][ T9905] RDX: 000000000000ffc0 RSI: 0000200000000000 RDI: 0000000000000000 [ 249.315699][ T9905] RBP: 00007f303dd3d090 R08: 0000000000000000 R09: 0000000000000000 [ 249.323839][ T9905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.332204][ T9905] R13: 00007f303fd5d038 R14: 00007f303fd5cfa0 R15: 00007ffee43f5aa8 [ 249.340620][ T9905] [ 249.486734][ T9909] netlink: 'syz.4.1925': attribute type 3 has an invalid length. [ 249.504089][ T9909] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1925'. [ 249.818386][ T9924] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1930'. [ 250.628218][ T9948] validate_nla: 1 callbacks suppressed [ 250.628237][ T9948] netlink: 'syz.4.1938': attribute type 21 has an invalid length. [ 251.093242][ T9974] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1948'. [ 251.174959][ T9978] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1949'. [ 251.224405][ T9981] netlink: 'syz.0.1950': attribute type 39 has an invalid length. [ 251.753448][ T9] wlan1: Trigger new scan to find an IBSS to join [ 252.075067][T10013] netlink: 'syz.1.1965': attribute type 39 has an invalid length. [ 252.123831][T10018] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1962'. [ 252.623664][T10037] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1974'. [ 252.690973][T10037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.722645][T10037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.794236][ T4533] wlan1: Creating new IBSS network, BSSID 7e:46:34:7f:54:5d [ 252.804210][T10037] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 252.852306][T10037] batman_adv: batadv0: Removing interface: virt_wifi0 [ 254.006393][T10092] device macsec0 entered promiscuous mode [ 254.067948][T10094] netlink: 'syz.1.1997': attribute type 3 has an invalid length. [ 254.125961][T10099] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1996'. [ 254.143869][T10094] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1997'. [ 254.435826][T10108] netlink: 'syz.2.2003': attribute type 39 has an invalid length. [ 254.940247][T10132] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2015'. [ 255.611155][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.617888][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.464147][T10179] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2033'. [ 256.548378][T10179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.572413][T10179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.606507][T10179] batman_adv: batadv0: Removing interface: virt_wifi0 [ 256.686607][T10184] netlink: 'syz.1.2035': attribute type 49 has an invalid length. [ 256.995284][T10197] netlink: 147988 bytes leftover after parsing attributes in process `syz.1.2041'. [ 257.267165][T10197] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 257.733943][T10220] netlink: 'syz.1.2049': attribute type 10 has an invalid length. [ 258.065555][T10235] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2055'. [ 258.143040][T10235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.185081][T10235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.235984][T10235] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 258.267233][T10235] batman_adv: batadv0: Removing interface: virt_wifi0 [ 258.715401][T10249] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2059'. [ 259.301599][T10262] netlink: 'syz.3.2065': attribute type 10 has an invalid length. [ 259.479177][T10276] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2072'. [ 260.028518][T10298] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2077'. [ 260.853748][T10330] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2093'. [ 260.995046][T10340] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 262.537315][T10374] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2107'. [ 262.693416][T10381] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2111'. [ 262.741301][T10381] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 262.756891][T10383] FAULT_INJECTION: forcing a failure. [ 262.756891][T10383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.807478][T10383] CPU: 0 PID: 10383 Comm: syz.4.2112 Not tainted syzkaller #0 [ 262.814979][T10383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.825046][T10383] Call Trace: [ 262.828322][T10383] [ 262.831255][T10383] dump_stack_lvl+0x188/0x250 [ 262.835944][T10383] ? show_regs_print_info+0x20/0x20 [ 262.841155][T10383] ? load_image+0x400/0x400 [ 262.845663][T10383] ? __lock_acquire+0x7d10/0x7d10 [ 262.850783][T10383] should_fail+0x38c/0x4c0 [ 262.855215][T10383] _copy_from_user+0x2e/0x170 [ 262.859888][T10383] __copy_msghdr_from_user+0xc9/0x630 [ 262.865262][T10383] ? verify_lock_unused+0x140/0x140 [ 262.870471][T10383] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 262.875880][T10383] ___sys_sendmsg+0x19a/0x2e0 [ 262.880580][T10383] ? __sys_sendmsg+0x2a0/0x2a0 [ 262.885360][T10383] ? vfs_write+0x8b2/0xd60 [ 262.889796][T10383] __se_sys_sendmsg+0x1af/0x290 [ 262.894741][T10383] ? __x64_sys_sendmsg+0x80/0x80 [ 262.899680][T10383] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 262.905679][T10383] ? lockdep_hardirqs_on+0x94/0x140 [ 262.910889][T10383] do_syscall_64+0x4c/0xa0 [ 262.915300][T10383] ? clear_bhb_loop+0x30/0x80 [ 262.919972][T10383] ? clear_bhb_loop+0x30/0x80 [ 262.924644][T10383] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 262.930536][T10383] RIP: 0033:0x7f303fae3799 [ 262.934959][T10383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.954565][T10383] RSP: 002b:00007f303dd3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.962986][T10383] RAX: ffffffffffffffda RBX: 00007f303fd5cfa0 RCX: 00007f303fae3799 [ 262.970955][T10383] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 262.978923][T10383] RBP: 00007f303dd3d090 R08: 0000000000000000 R09: 0000000000000000 [ 262.986889][T10383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.994858][T10383] R13: 00007f303fd5d038 R14: 00007f303fd5cfa0 R15: 00007ffee43f5aa8 [ 263.002840][T10383] [ 263.140745][T10398] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2102'. [ 263.247925][T10403] netlink: 'syz.4.2118': attribute type 2 has an invalid length. [ 263.262565][T10403] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2118'. [ 263.318509][T10403] netlink: 'syz.4.2118': attribute type 8 has an invalid length. [ 263.403044][T10403] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.2118'. [ 263.627485][T10421] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2122'. [ 264.357185][T10446] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2132'. [ 264.589860][T10465] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 264.696643][T10471] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2142'. [ 265.009278][T10483] netlink: 'syz.4.2149': attribute type 10 has an invalid length. [ 265.033790][T10483] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2149'. [ 265.070279][T10483] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 265.589604][T10501] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2152'. [ 265.800431][T10521] netlink: 'syz.3.2159': attribute type 10 has an invalid length. [ 265.826457][T10521] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 266.254450][T10539] FAULT_INJECTION: forcing a failure. [ 266.254450][T10539] name failslab, interval 1, probability 0, space 0, times 0 [ 266.308141][T10539] CPU: 0 PID: 10539 Comm: syz.0.2169 Not tainted syzkaller #0 [ 266.315737][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 266.325800][T10539] Call Trace: [ 266.329181][T10539] [ 266.332111][T10539] dump_stack_lvl+0x188/0x250 [ 266.336806][T10539] ? show_regs_print_info+0x20/0x20 [ 266.342053][T10539] ? load_image+0x400/0x400 [ 266.346657][T10539] ? __might_sleep+0xf0/0xf0 [ 266.351266][T10539] ? __lock_acquire+0x7d10/0x7d10 [ 266.356298][T10539] should_fail+0x38c/0x4c0 [ 266.360727][T10539] should_failslab+0x5/0x20 [ 266.365240][T10539] slab_pre_alloc_hook+0x51/0xc0 [ 266.370182][T10539] __kmalloc_node_track_caller+0x68/0x3a0 [ 266.375904][T10539] ? __ip6_append_data+0x266c/0x38c0 [ 266.381197][T10539] ? kmem_cache_alloc_node+0x162/0x2d0 [ 266.386657][T10539] ? __alloc_skb+0xf4/0x750 [ 266.391179][T10539] ? __ip6_append_data+0x266c/0x38c0 [ 266.396568][T10539] __alloc_skb+0x22c/0x750 [ 266.401000][T10539] __ip6_append_data+0x266c/0x38c0 [ 266.406165][T10539] ? ip6_setup_cork+0x11e0/0x11e0 [ 266.411208][T10539] ? ip6_setup_cork+0xc63/0x11e0 [ 266.416258][T10539] ip6_append_data+0x1d4/0x310 [ 266.421160][T10539] ? rawv6_send_hdrinc+0x1690/0x1690 [ 266.426458][T10539] ? rawv6_send_hdrinc+0x1690/0x1690 [ 266.431754][T10539] rawv6_sendmsg+0x1222/0x1700 [ 266.436546][T10539] ? compat_rawv6_ioctl+0x60/0x60 [ 266.441602][T10539] ? aa_af_perm+0x340/0x340 [ 266.446107][T10539] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 266.452534][T10539] ? sock_rps_record_flow+0x17/0x3b0 [ 266.457835][T10539] ? inet_sendmsg+0x78/0x2f0 [ 266.462451][T10539] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 266.467740][T10539] ? security_socket_sendmsg+0x7c/0xa0 [ 266.473217][T10539] ? inet_send_prepare+0x260/0x260 [ 266.478352][T10539] ____sys_sendmsg+0x5b7/0x8f0 [ 266.483228][T10539] ? __sys_sendmsg_sock+0x30/0x30 [ 266.488278][T10539] ? import_iovec+0x6f/0xa0 [ 266.492885][T10539] ___sys_sendmsg+0x236/0x2e0 [ 266.497598][T10539] ? __sys_sendmsg+0x2a0/0x2a0 [ 266.502608][T10539] ? trace_event_raw_event_lock+0x270/0x270 [ 266.508516][T10539] ? vfs_write+0x8b2/0xd60 [ 266.513026][T10539] __se_sys_sendmsg+0x1af/0x290 [ 266.517899][T10539] ? __x64_sys_sendmsg+0x80/0x80 [ 266.522963][T10539] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 266.529005][T10539] ? lockdep_hardirqs_on+0x94/0x140 [ 266.534230][T10539] do_syscall_64+0x4c/0xa0 [ 266.538660][T10539] ? clear_bhb_loop+0x30/0x80 [ 266.543345][T10539] ? clear_bhb_loop+0x30/0x80 [ 266.548047][T10539] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.553950][T10539] RIP: 0033:0x7fbd27ac4799 [ 266.558379][T10539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.578090][T10539] RSP: 002b:00007fbd25d1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.586520][T10539] RAX: ffffffffffffffda RBX: 00007fbd27d3dfa0 RCX: 00007fbd27ac4799 [ 266.594505][T10539] RDX: 0000000000000060 RSI: 0000200000000140 RDI: 0000000000000003 [ 266.602488][T10539] RBP: 00007fbd25d1e090 R08: 0000000000000000 R09: 0000000000000000 [ 266.610468][T10539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.618540][T10539] R13: 00007fbd27d3e038 R14: 00007fbd27d3dfa0 R15: 00007ffcb745fc68 [ 266.626552][T10539] [ 266.915557][T10553] netlink: 'syz.1.2175': attribute type 39 has an invalid length. [ 267.700936][T10587] netlink: 'syz.3.2185': attribute type 7 has an invalid length. [ 267.775702][T10587] __nla_validate_parse: 2 callbacks suppressed [ 267.775817][T10587] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2185'. [ 267.845618][T10594] netlink: 'syz.0.2189': attribute type 39 has an invalid length. [ 267.955702][T10601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2191'. [ 268.091256][T10605] device wlan0 entered promiscuous mode [ 268.156477][T10605] netlink: 'syz.1.2193': attribute type 9 has an invalid length. [ 268.172870][T10605] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2193'. [ 268.289347][T10617] netlink: 'syz.2.2199': attribute type 29 has an invalid length. [ 268.396626][T10617] netlink: 'syz.2.2199': attribute type 29 has an invalid length. [ 268.547435][T10627] netlink: 'syz.1.2203': attribute type 39 has an invalid length. [ 268.617167][T10628] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2204'. [ 268.649164][T10630] netlink: 'syz.2.2204': attribute type 29 has an invalid length. [ 268.694643][T10636] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2205'. [ 268.734074][T10628] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2204'. [ 271.678759][T10659] netlink: 'syz.0.2211': attribute type 10 has an invalid length. [ 271.955282][T10673] device wlan0 left promiscuous mode [ 271.989068][T10678] netlink: 'syz.4.2220': attribute type 39 has an invalid length. [ 272.022655][T10673] device wlan0 entered promiscuous mode [ 272.053716][T10685] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2221'. [ 272.055270][T10687] netlink: 'syz.3.2217': attribute type 9 has an invalid length. [ 272.086458][T10687] netlink: 179708 bytes leftover after parsing attributes in process `syz.3.2217'. [ 272.207527][T10695] netlink: 'syz.0.2222': attribute type 1 has an invalid length. [ 272.240851][T10695] netlink: 'syz.0.2222': attribute type 3 has an invalid length. [ 272.252063][T10695] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2222'. [ 272.651039][T10710] netlink: 'syz.3.2228': attribute type 10 has an invalid length. [ 272.842982][T10732] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2232'. [ 273.324052][T10731] device wlan0 entered promiscuous mode [ 273.335547][T10730] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2234'. [ 273.502649][T10736] validate_nla: 1 callbacks suppressed [ 273.502769][T10736] netlink: 'syz.1.2236': attribute type 7 has an invalid length. [ 273.535053][T10745] netlink: 'syz.2.2238': attribute type 3 has an invalid length. [ 273.544054][T10736] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2236'. [ 273.573683][T10745] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2238'. [ 273.767355][T10755] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2243'. [ 274.162687][T10766] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2247'. [ 274.356828][T10785] netlink: 'syz.0.2251': attribute type 10 has an invalid length. [ 274.399300][T10785] device wg1 entered promiscuous mode [ 274.416611][T10785] team0: Device wg1 is of different type [ 274.416946][T10786] netlink: 15007 bytes leftover after parsing attributes in process `syz.4.2250'. [ 274.650650][T10791] device wlan0 left promiscuous mode [ 274.704745][T10794] device wlan0 entered promiscuous mode [ 274.783889][T10791] netlink: 'syz.2.2253': attribute type 9 has an invalid length. [ 274.800364][T10791] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2253'. [ 274.880533][T10797] bond0: (slave geneve0): Error: Slave device does not support XDP [ 275.277400][T10801] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.2257'. [ 275.347438][T10801] netlink: 'syz.1.2257': attribute type 10 has an invalid length. [ 275.393238][T10809] netlink: 'syz.2.2261': attribute type 40 has an invalid length. [ 275.624924][T10807] device wlan0 left promiscuous mode [ 275.689079][T10816] device wlan0 entered promiscuous mode [ 275.751715][T10807] netlink: 'syz.0.2260': attribute type 9 has an invalid length. [ 275.795358][T10807] netlink: 179708 bytes leftover after parsing attributes in process `syz.0.2260'. [ 275.839139][T10828] netlink: 'syz.4.2268': attribute type 39 has an invalid length. [ 275.982027][T10832] netlink: 'syz.2.2269': attribute type 39 has an invalid length. [ 276.314246][T10852] netlink: 'syz.3.2274': attribute type 3 has an invalid length. [ 276.903159][T10885] pimreg: tun_chr_ioctl cmd 1074025677 [ 276.954216][T10885] pimreg: linktype set to 1 [ 277.270568][T10898] device syzkaller0 entered promiscuous mode [ 277.359459][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 278.260857][T10952] FAULT_INJECTION: forcing a failure. [ 278.260857][T10952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.284396][T10952] CPU: 0 PID: 10952 Comm: syz.2.2316 Not tainted syzkaller #0 [ 278.291892][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 278.302158][T10952] Call Trace: [ 278.305463][T10952] [ 278.308400][T10952] dump_stack_lvl+0x188/0x250 [ 278.313086][T10952] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 278.319258][T10952] ? show_regs_print_info+0x20/0x20 [ 278.324473][T10952] ? load_image+0x400/0x400 [ 278.329059][T10952] should_fail+0x38c/0x4c0 [ 278.333492][T10952] _copy_from_user+0x2e/0x170 [ 278.338198][T10952] sock_do_ioctl+0x18c/0x320 [ 278.342796][T10952] ? sock_show_fdinfo+0xb0/0xb0 [ 278.347770][T10952] sock_ioctl+0x4d2/0x710 [ 278.352112][T10952] ? sock_poll+0x410/0x410 [ 278.356544][T10952] ? bpf_lsm_file_ioctl+0x5/0x10 [ 278.361489][T10952] ? security_file_ioctl+0x7c/0xa0 [ 278.366612][T10952] ? sock_poll+0x410/0x410 [ 278.371033][T10952] __se_sys_ioctl+0xfa/0x170 [ 278.375641][T10952] do_syscall_64+0x4c/0xa0 [ 278.380067][T10952] ? clear_bhb_loop+0x30/0x80 [ 278.384749][T10952] ? clear_bhb_loop+0x30/0x80 [ 278.389438][T10952] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 278.395338][T10952] RIP: 0033:0x7f284eb5f799 [ 278.399764][T10952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.419379][T10952] RSP: 002b:00007f284cdb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.427892][T10952] RAX: ffffffffffffffda RBX: 00007f284edd8fa0 RCX: 00007f284eb5f799 [ 278.435936][T10952] RDX: 0000200000001a80 RSI: 0000000000008927 RDI: 0000000000000005 [ 278.444030][T10952] RBP: 00007f284cdb9090 R08: 0000000000000000 R09: 0000000000000000 [ 278.452088][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.460076][T10952] R13: 00007f284edd9038 R14: 00007f284edd8fa0 R15: 00007fffcd57a1e8 [ 278.468063][T10952] [ 278.735509][T10971] syz.3.2324[10971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.735883][T10971] syz.3.2324[10971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.804514][T10971] validate_nla: 3 callbacks suppressed [ 278.804543][T10971] netlink: 'syz.3.2324': attribute type 1 has an invalid length. [ 278.847336][T10979] __nla_validate_parse: 9 callbacks suppressed [ 278.847358][T10979] netlink: 7551 bytes leftover after parsing attributes in process `syz.1.2326'. [ 278.865496][T10979] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2326'. [ 278.876368][T10971] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2324'. [ 278.897280][T10971] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2324'. [ 278.914131][T10981] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2329'. [ 278.928663][T10979] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2326'. [ 278.954898][T10979] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 279.000818][T10979] CPU: 0 PID: 10979 Comm: syz.1.2326 Not tainted syzkaller #0 [ 279.008418][T10979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 279.018501][T10979] Call Trace: [ 279.021799][T10979] [ 279.024744][T10979] dump_stack_lvl+0x188/0x250 [ 279.029447][T10979] ? show_regs_print_info+0x20/0x20 [ 279.034667][T10979] ? load_image+0x400/0x400 [ 279.039229][T10979] sysfs_warn_dup+0x8a/0xa0 [ 279.043758][T10979] sysfs_do_create_link_sd+0xc0/0x110 [ 279.049205][T10979] device_add+0x7ed/0xfb0 [ 279.053593][T10979] wiphy_register+0x1e81/0x2c30 [ 279.058544][T10979] ? cfg80211_event_work+0x40/0x40 [ 279.063829][T10979] ? minstrel_ht_alloc+0x808/0x980 [ 279.068977][T10979] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 279.075085][T10979] ieee80211_register_hw+0x2aa1/0x3af0 [ 279.080589][T10979] ? ieee80211_tasklet_handler+0x20/0x20 [ 279.086246][T10979] ? rcu_is_watching+0x11/0xa0 [ 279.091021][T10979] ? memset+0x1e/0x40 [ 279.095010][T10979] ? hrtimer_init+0x10c/0x220 [ 279.099688][T10979] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 279.105694][T10979] hwsim_new_radio_nl+0xa6f/0xc40 [ 279.110746][T10979] genl_rcv_msg+0xcea/0xf90 [ 279.115438][T10979] ? genl_bind+0x380/0x380 [ 279.119859][T10979] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 279.125662][T10979] ? verify_lock_unused+0x140/0x140 [ 279.130875][T10979] ? perf_trace_lock_acquire+0x340/0x3e0 [ 279.136511][T10979] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 279.143107][T10979] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 279.149716][T10979] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 279.156250][T10979] netlink_rcv_skb+0x1f5/0x440 [ 279.161018][T10979] ? genl_bind+0x380/0x380 [ 279.165445][T10979] ? netlink_ack+0xb50/0xb50 [ 279.170036][T10979] ? __lock_acquire+0x7d10/0x7d10 [ 279.175068][T10979] ? down_read+0x1aa/0x2e0 [ 279.179485][T10979] genl_rcv+0x24/0x40 [ 279.183459][T10979] netlink_unicast+0x774/0x920 [ 279.188648][T10979] netlink_sendmsg+0x8ba/0xbe0 [ 279.193534][T10979] ? netlink_getsockopt+0x570/0x570 [ 279.198747][T10979] ? aa_sock_msg_perm+0x94/0x150 [ 279.203694][T10979] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 279.208985][T10979] ? security_socket_sendmsg+0x7c/0xa0 [ 279.214531][T10979] ? netlink_getsockopt+0x570/0x570 [ 279.219729][T10979] ____sys_sendmsg+0x5b7/0x8f0 [ 279.224513][T10979] ? __sys_sendmsg_sock+0x30/0x30 [ 279.229579][T10979] ? import_iovec+0x6f/0xa0 [ 279.234100][T10979] ___sys_sendmsg+0x236/0x2e0 [ 279.238794][T10979] ? __sys_sendmsg+0x2a0/0x2a0 [ 279.243585][T10979] ? percpu_counter_add_batch+0x13b/0x160 [ 279.249362][T10979] __se_sys_sendmsg+0x1af/0x290 [ 279.254221][T10979] ? __x64_sys_sendmsg+0x80/0x80 [ 279.259153][T10979] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 279.265158][T10979] ? lockdep_hardirqs_on+0x94/0x140 [ 279.270361][T10979] do_syscall_64+0x4c/0xa0 [ 279.274768][T10979] ? clear_bhb_loop+0x30/0x80 [ 279.279536][T10979] ? clear_bhb_loop+0x30/0x80 [ 279.284341][T10979] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.290463][T10979] RIP: 0033:0x7f2020e71799 [ 279.294899][T10979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.314563][T10979] RSP: 002b:00007f201f0cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.322980][T10979] RAX: ffffffffffffffda RBX: 00007f20210eafa0 RCX: 00007f2020e71799 [ 279.330941][T10979] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 279.338900][T10979] RBP: 00007f2020f07c99 R08: 0000000000000000 R09: 0000000000000000 [ 279.346858][T10979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.354845][T10979] R13: 00007f20210eb038 R14: 00007f20210eafa0 R15: 00007ffc112bbb88 [ 279.362837][T10979] [ 279.409172][T10982] netlink: 'syz.3.2324': attribute type 1 has an invalid length. [ 279.439750][T10982] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2324'. [ 279.570534][T10994] netlink: 'syz.2.2332': attribute type 10 has an invalid length. [ 279.604211][T10994] device hsr0 entered promiscuous mode [ 279.637603][T10994] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 279.670498][T10994] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 279.683907][T10994] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 279.714076][T10994] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 279.786631][T10998] netlink: 'syz.1.2335': attribute type 10 has an invalid length. [ 279.799244][T10998] device hsr0 entered promiscuous mode [ 279.818358][T10998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.833764][T10998] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 280.147248][T11030] netlink: 'syz.3.2347': attribute type 12 has an invalid length. [ 280.160256][T11030] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2347'. [ 280.259046][T11032] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2348'. [ 280.328744][T11032] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2348'. [ 280.577125][T11041] FAULT_INJECTION: forcing a failure. [ 280.577125][T11041] name failslab, interval 1, probability 0, space 0, times 0 [ 280.619915][T11041] CPU: 1 PID: 11041 Comm: syz.0.2351 Not tainted syzkaller #0 [ 280.627416][T11041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.637562][T11041] Call Trace: [ 280.640848][T11041] [ 280.643927][T11041] dump_stack_lvl+0x188/0x250 [ 280.648750][T11041] ? show_regs_print_info+0x20/0x20 [ 280.654047][T11041] ? load_image+0x400/0x400 [ 280.658555][T11041] ? __might_sleep+0xf0/0xf0 [ 280.663141][T11041] ? __lock_acquire+0x7d10/0x7d10 [ 280.668172][T11041] should_fail+0x38c/0x4c0 [ 280.672602][T11041] should_failslab+0x5/0x20 [ 280.677105][T11041] slab_pre_alloc_hook+0x51/0xc0 [ 280.682046][T11041] __kmalloc_node_track_caller+0x68/0x3a0 [ 280.687766][T11041] ? netlink_sendmsg+0x654/0xbe0 [ 280.692709][T11041] ? kmem_cache_alloc_node+0x162/0x2d0 [ 280.698167][T11041] ? __alloc_skb+0xf4/0x750 [ 280.702684][T11041] ? netlink_sendmsg+0x654/0xbe0 [ 280.707623][T11041] __alloc_skb+0x22c/0x750 [ 280.712043][T11041] netlink_sendmsg+0x654/0xbe0 [ 280.716814][T11041] ? netlink_getsockopt+0x570/0x570 [ 280.722014][T11041] ? aa_sock_msg_perm+0x94/0x150 [ 280.726983][T11041] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 280.732276][T11041] ? security_socket_sendmsg+0x7c/0xa0 [ 280.737791][T11041] ? netlink_getsockopt+0x570/0x570 [ 280.743031][T11041] ____sys_sendmsg+0x5b7/0x8f0 [ 280.747818][T11041] ? __sys_sendmsg_sock+0x30/0x30 [ 280.752860][T11041] ? import_iovec+0x6f/0xa0 [ 280.757372][T11041] ___sys_sendmsg+0x236/0x2e0 [ 280.762334][T11041] ? __sys_sendmsg+0x2a0/0x2a0 [ 280.767110][T11041] ? vfs_write+0x8b2/0xd60 [ 280.771753][T11041] __se_sys_sendmsg+0x1af/0x290 [ 280.776718][T11041] ? __x64_sys_sendmsg+0x80/0x80 [ 280.781706][T11041] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 280.787710][T11041] ? lockdep_hardirqs_on+0x94/0x140 [ 280.792930][T11041] do_syscall_64+0x4c/0xa0 [ 280.797354][T11041] ? clear_bhb_loop+0x30/0x80 [ 280.802044][T11041] ? clear_bhb_loop+0x30/0x80 [ 280.806723][T11041] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.812710][T11041] RIP: 0033:0x7fbd27ac4799 [ 280.817134][T11041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.836824][T11041] RSP: 002b:00007fbd25d1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.845260][T11041] RAX: ffffffffffffffda RBX: 00007fbd27d3dfa0 RCX: 00007fbd27ac4799 [ 280.853327][T11041] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 280.861399][T11041] RBP: 00007fbd25d1e090 R08: 0000000000000000 R09: 0000000000000000 [ 280.869401][T11041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.877375][T11041] R13: 00007fbd27d3e038 R14: 00007fbd27d3dfa0 R15: 00007ffcb745fc68 [ 280.885369][T11041] [ 283.382959][T11066] FAULT_INJECTION: forcing a failure. [ 283.382959][T11066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.490242][T11066] CPU: 1 PID: 11066 Comm: syz.3.2360 Not tainted syzkaller #0 [ 283.497828][T11066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.508038][T11066] Call Trace: [ 283.511330][T11066] [ 283.512515][T11071] device syzkaller0 entered promiscuous mode [ 283.514278][T11066] dump_stack_lvl+0x188/0x250 [ 283.524923][T11066] ? show_regs_print_info+0x20/0x20 [ 283.530164][T11066] ? load_image+0x400/0x400 [ 283.534727][T11066] ? __lock_acquire+0x7d10/0x7d10 [ 283.539861][T11066] ? __alloc_skb+0x473/0x750 [ 283.544464][T11066] should_fail+0x38c/0x4c0 [ 283.548984][T11066] _copy_from_iter+0x22e/0x1170 [ 283.553950][T11066] ? __lock_acquire+0x7d10/0x7d10 [ 283.559062][T11066] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 283.564426][T11066] ? __virt_addr_valid+0x3c6/0x470 [ 283.569538][T11066] ? __phys_addr_symbol+0x2b/0x70 [ 283.574554][T11066] ? __check_object_size+0x30c/0x410 [ 283.579832][T11066] skb_copy_datagram_from_iter+0xf2/0x6a0 [ 283.585547][T11066] ? skb_put+0x117/0x210 [ 283.589794][T11066] tun_get_user+0xaf9/0x3a70 [ 283.594411][T11066] ? tun_ring_recv+0xc40/0xc40 [ 283.599446][T11066] ? rcu_lock_release+0x5/0x20 [ 283.604235][T11066] ? __lock_acquire+0x7d10/0x7d10 [ 283.609286][T11066] tun_chr_write_iter+0x112/0x1e0 [ 283.614324][T11066] vfs_write+0x745/0xd60 [ 283.618575][T11066] ? file_end_write+0x250/0x250 [ 283.623418][T11066] ? __fget_files+0x40f/0x480 [ 283.628094][T11066] ? __fdget_pos+0x1e2/0x370 [ 283.632668][T11066] ? ksys_write+0x71/0x260 [ 283.637087][T11066] ksys_write+0x152/0x260 [ 283.641412][T11066] ? __ia32_sys_read+0x80/0x80 [ 283.646189][T11066] ? lockdep_hardirqs_on+0x94/0x140 [ 283.651664][T11066] do_syscall_64+0x4c/0xa0 [ 283.656096][T11066] ? clear_bhb_loop+0x30/0x80 [ 283.660769][T11066] ? clear_bhb_loop+0x30/0x80 [ 283.665534][T11066] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.671432][T11066] RIP: 0033:0x7f6b29d20799 [ 283.676034][T11066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.695816][T11066] RSP: 002b:00007f6b27f7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 283.704232][T11066] RAX: ffffffffffffffda RBX: 00007f6b29f99fa0 RCX: 00007f6b29d20799 [ 283.712279][T11066] RDX: 000000000000fdef RSI: 00002000000006c0 RDI: 00000000000000c8 [ 283.720479][T11066] RBP: 00007f6b27f7a090 R08: 0000000000000000 R09: 0000000000000000 [ 283.728436][T11066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.736402][T11066] R13: 00007f6b29f9a038 R14: 00007f6b29f99fa0 R15: 00007ffd0df5fab8 [ 283.744384][T11066] [ 284.017485][T11093] netlink: 'syz.2.2366': attribute type 2 has an invalid length. [ 284.074892][T11093] __nla_validate_parse: 2 callbacks suppressed [ 284.074943][T11093] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2366'. [ 284.193809][T11100] netlink: 'syz.3.2370': attribute type 10 has an invalid length. [ 284.206896][T11100] team0: Device ip6_vti0 is of different type [ 284.541088][T11114] netlink: 'syz.1.2374': attribute type 10 has an invalid length. [ 284.592011][T11114] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2374'. [ 284.651188][T11120] bond0: (slave geneve0): Error: Slave device does not support XDP [ 284.867384][T11129] FAULT_INJECTION: forcing a failure. [ 284.867384][T11129] name failslab, interval 1, probability 0, space 0, times 0 [ 284.887710][T11129] CPU: 1 PID: 11129 Comm: syz.0.2382 Not tainted syzkaller #0 [ 284.895296][T11129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.905468][T11129] Call Trace: [ 284.908760][T11129] [ 284.911712][T11129] dump_stack_lvl+0x188/0x250 [ 284.916413][T11129] ? show_regs_print_info+0x20/0x20 [ 284.921646][T11129] ? load_image+0x400/0x400 [ 284.926176][T11129] ? __might_sleep+0xf0/0xf0 [ 284.930779][T11129] ? __lock_acquire+0x7d10/0x7d10 [ 284.935863][T11129] should_fail+0x38c/0x4c0 [ 284.940312][T11129] should_failslab+0x5/0x20 [ 284.944916][T11129] slab_pre_alloc_hook+0x51/0xc0 [ 284.949888][T11129] ? __alloc_file+0x25/0x240 [ 284.954498][T11129] kmem_cache_alloc+0x3d/0x290 [ 284.959285][T11129] __alloc_file+0x25/0x240 [ 284.963734][T11129] alloc_empty_file+0x90/0x180 [ 284.968531][T11129] alloc_file+0x5b/0x4f0 [ 284.972885][T11129] ? do_raw_spin_unlock+0x11d/0x230 [ 284.978118][T11129] alloc_file_pseudo+0x180/0x200 [ 284.983097][T11129] ? alloc_empty_file_noaccount+0x80/0x80 [ 284.988852][T11129] ? __lock_acquire+0x7d10/0x7d10 [ 284.993889][T11129] ? __local_bh_enable_ip+0x136/0x1c0 [ 284.999288][T11129] ? _local_bh_enable+0xa0/0xa0 [ 285.004186][T11129] anon_inode_getfile+0xc1/0x1a0 [ 285.009157][T11129] bpf_link_prime+0x125/0x270 [ 285.013875][T11129] bpf_xdp_link_attach+0x1f3/0x480 [ 285.019040][T11129] ? dev_xdp_prog_id+0xe0/0xe0 [ 285.023856][T11129] link_create+0x50e/0x690 [ 285.028316][T11129] __sys_bpf+0x645/0x6f0 [ 285.032584][T11129] ? bpf_link_show_fdinfo+0x380/0x380 [ 285.038015][T11129] ? vtime_user_exit+0x2c8/0x3e0 [ 285.042990][T11129] __x64_sys_bpf+0x78/0x90 [ 285.047436][T11129] do_syscall_64+0x4c/0xa0 [ 285.051870][T11129] ? clear_bhb_loop+0x30/0x80 [ 285.056550][T11129] ? clear_bhb_loop+0x30/0x80 [ 285.061241][T11129] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.067143][T11129] RIP: 0033:0x7fbd27ac4799 [ 285.071569][T11129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.091191][T11129] RSP: 002b:00007fbd25d1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.099742][T11129] RAX: ffffffffffffffda RBX: 00007fbd27d3dfa0 RCX: 00007fbd27ac4799 [ 285.107813][T11129] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 285.115805][T11129] RBP: 00007fbd25d1e090 R08: 0000000000000000 R09: 0000000000000000 [ 285.123795][T11129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.131867][T11129] R13: 00007fbd27d3e038 R14: 00007fbd27d3dfa0 R15: 00007ffcb745fc68 [ 285.139891][T11129] [ 285.150492][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 285.161653][T11131] netlink: 'syz.4.2379': attribute type 28 has an invalid length. [ 285.207172][T11132] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2383'. [ 285.427772][T11143] netlink: 'syz.3.2388': attribute type 1 has an invalid length. [ 285.446126][T11143] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2388'. [ 285.570177][T11150] netlink: 'syz.2.2391': attribute type 10 has an invalid length. [ 285.751492][T11150] team0: Device wg1 is of different type [ 285.855330][T11151] netlink: 'syz.1.2387': attribute type 10 has an invalid length. [ 285.884996][T11151] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2387'. [ 286.331771][T11175] device syzkaller0 entered promiscuous mode [ 286.369995][T11183] syz.4.2403[11183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.371429][T11183] syz.4.2403[11183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.405239][T11186] netlink: 'syz.4.2403': attribute type 1 has an invalid length. [ 286.479237][T11186] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.2403'. [ 286.563212][T11186] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2403'. [ 286.733802][T11194] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2407'. [ 286.956939][T11205] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2411'. [ 287.115359][T11212] netlink: 'syz.4.2413': attribute type 39 has an invalid length. [ 287.513757][T11234] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2419'. [ 288.636178][T11289] netlink: 'syz.0.2442': attribute type 10 has an invalid length. [ 289.244678][T11315] netlink: 'syz.0.2450': attribute type 3 has an invalid length. [ 289.272505][T11315] __nla_validate_parse: 6 callbacks suppressed [ 289.272523][T11315] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.2450'. [ 289.404452][T11320] netlink: 'syz.3.2453': attribute type 39 has an invalid length. [ 289.445438][T11315] syz.0.2450[11315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.450432][T11315] syz.0.2450[11315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.455444][T11322] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2452'. [ 289.979870][T11358] netlink: 'syz.4.2467': attribute type 39 has an invalid length. [ 290.117585][T11366] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2469'. [ 290.963827][T11407] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2485'. [ 291.858014][T11419] netlink: 'syz.2.2489': attribute type 3 has an invalid length. [ 291.912325][T11419] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2489'. [ 293.143466][T11459] netlink: 'syz.0.2506': attribute type 10 has an invalid length. [ 293.197316][T11459] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.2506'. [ 293.265663][T11459] openvswitch: netlink: Flow key attr not present in new flow. [ 293.628351][T11468] netlink: 204732 bytes leftover after parsing attributes in process `syz.4.2509'. [ 293.694877][T11468] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 294.432814][T11509] FAULT_INJECTION: forcing a failure. [ 294.432814][T11509] name failslab, interval 1, probability 0, space 0, times 0 [ 294.485273][T11509] CPU: 1 PID: 11509 Comm: syz.4.2525 Not tainted syzkaller #0 [ 294.492870][T11509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 294.503052][T11509] Call Trace: [ 294.506349][T11509] [ 294.509296][T11509] dump_stack_lvl+0x188/0x250 [ 294.514081][T11509] ? show_regs_print_info+0x20/0x20 [ 294.519284][T11509] ? load_image+0x400/0x400 [ 294.523896][T11509] ? __might_sleep+0xf0/0xf0 [ 294.528584][T11509] ? __lock_acquire+0x7d10/0x7d10 [ 294.533913][T11509] should_fail+0x38c/0x4c0 [ 294.538354][T11509] should_failslab+0x5/0x20 [ 294.542873][T11509] slab_pre_alloc_hook+0x51/0xc0 [ 294.547914][T11509] kmem_cache_alloc_trace+0x47/0x2a0 [ 294.553392][T11509] ? __inet_diag_dump_start+0x8b/0x970 [ 294.558902][T11509] __inet_diag_dump_start+0x8b/0x970 [ 294.564215][T11509] __netlink_dump_start+0x3e8/0x700 [ 294.569434][T11509] inet_diag_rcv_msg_compat+0x207/0x420 [ 294.575000][T11509] ? inet_diag_unregister+0xb0/0xb0 [ 294.580210][T11509] ? __mutex_trylock_common+0x155/0x260 [ 294.585789][T11509] ? mutex_lock_io_nested+0x60/0x60 [ 294.590983][T11509] ? __inet_diag_dump+0x380/0x380 [ 294.596022][T11509] ? inet_diag_dump_start_compat+0x20/0x20 [ 294.601845][T11509] ? inet_diag_dump+0x50/0x50 [ 294.606626][T11509] ? inet_diag_unregister+0xb0/0xb0 [ 294.611816][T11509] sock_diag_rcv_msg+0x164/0x3e0 [ 294.616758][T11509] netlink_rcv_skb+0x1f5/0x440 [ 294.621519][T11509] ? sock_diag_bind+0xa0/0xa0 [ 294.626284][T11509] ? netlink_ack+0xb50/0xb50 [ 294.630956][T11509] ? __lock_acquire+0x7d10/0x7d10 [ 294.636015][T11509] sock_diag_rcv+0x26/0x40 [ 294.640504][T11509] netlink_unicast+0x774/0x920 [ 294.645262][T11509] netlink_sendmsg+0x8ba/0xbe0 [ 294.650017][T11509] ? netlink_getsockopt+0x570/0x570 [ 294.655205][T11509] ? aa_sock_msg_perm+0x94/0x150 [ 294.660149][T11509] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 294.665439][T11509] ? security_socket_sendmsg+0x7c/0xa0 [ 294.671063][T11509] ? netlink_getsockopt+0x570/0x570 [ 294.676566][T11509] ____sys_sendmsg+0x5b7/0x8f0 [ 294.681346][T11509] ? __sys_sendmsg_sock+0x30/0x30 [ 294.686372][T11509] ? import_iovec+0x6f/0xa0 [ 294.690899][T11509] ___sys_sendmsg+0x236/0x2e0 [ 294.695667][T11509] ? __sys_sendmsg+0x2a0/0x2a0 [ 294.700430][T11509] ? vfs_write+0x8b2/0xd60 [ 294.704858][T11509] __se_sys_sendmsg+0x1af/0x290 [ 294.709792][T11509] ? __x64_sys_sendmsg+0x80/0x80 [ 294.714763][T11509] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 294.720917][T11509] ? lockdep_hardirqs_on+0x94/0x140 [ 294.726138][T11509] do_syscall_64+0x4c/0xa0 [ 294.730629][T11509] ? clear_bhb_loop+0x30/0x80 [ 294.735296][T11509] ? clear_bhb_loop+0x30/0x80 [ 294.739970][T11509] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.745881][T11509] RIP: 0033:0x7f303fae3799 [ 294.750312][T11509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.771083][T11509] RSP: 002b:00007f303dd3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.779496][T11509] RAX: ffffffffffffffda RBX: 00007f303fd5cfa0 RCX: 00007f303fae3799 [ 294.787563][T11509] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 294.795523][T11509] RBP: 00007f303dd3d090 R08: 0000000000000000 R09: 0000000000000000 [ 294.803483][T11509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.811439][T11509] R13: 00007f303fd5d038 R14: 00007f303fd5cfa0 R15: 00007ffee43f5aa8 [ 294.819672][T11509] [ 295.339679][T11539] ref_ctr_offset mismatch. inode: 0xa59 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 295.421196][T11545] FAULT_INJECTION: forcing a failure. [ 295.421196][T11545] name failslab, interval 1, probability 0, space 0, times 0 [ 295.469660][T11545] CPU: 0 PID: 11545 Comm: syz.3.2541 Not tainted syzkaller #0 [ 295.477159][T11545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.487226][T11545] Call Trace: [ 295.490514][T11545] [ 295.493455][T11545] dump_stack_lvl+0x188/0x250 [ 295.498146][T11545] ? show_regs_print_info+0x20/0x20 [ 295.503371][T11545] ? load_image+0x400/0x400 [ 295.507895][T11545] ? __lock_acquire+0x7d10/0x7d10 [ 295.513116][T11545] ? aa_get_newest_label+0xf5/0x5a0 [ 295.518324][T11545] should_fail+0x38c/0x4c0 [ 295.522747][T11545] should_failslab+0x5/0x20 [ 295.527259][T11545] slab_pre_alloc_hook+0x51/0xc0 [ 295.532204][T11545] kmem_cache_alloc_trace+0x47/0x2a0 [ 295.537501][T11545] ? btf_new_fd+0x110/0x910 [ 295.542027][T11545] btf_new_fd+0x110/0x910 [ 295.546377][T11545] ? capable+0x84/0xe0 [ 295.550459][T11545] __sys_bpf+0x58c/0x6f0 [ 295.554705][T11545] ? bpf_link_show_fdinfo+0x380/0x380 [ 295.560092][T11545] __x64_sys_bpf+0x78/0x90 [ 295.564621][T11545] do_syscall_64+0x4c/0xa0 [ 295.569034][T11545] ? clear_bhb_loop+0x30/0x80 [ 295.573792][T11545] ? clear_bhb_loop+0x30/0x80 [ 295.578468][T11545] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 295.584480][T11545] RIP: 0033:0x7f6b29d20799 [ 295.588939][T11545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.608809][T11545] RSP: 002b:00007f6b27f7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.617312][T11545] RAX: ffffffffffffffda RBX: 00007f6b29f99fa0 RCX: 00007f6b29d20799 [ 295.625289][T11545] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 295.633790][T11545] RBP: 00007f6b27f7a090 R08: 0000000000000000 R09: 0000000000000000 [ 295.641933][T11545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.649977][T11545] R13: 00007f6b29f9a038 R14: 00007f6b29f99fa0 R15: 00007ffd0df5fab8 [ 295.657967][T11545] [ 295.969281][T11567] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2550'. [ 297.148151][T11594] FAULT_INJECTION: forcing a failure. [ 297.148151][T11594] name failslab, interval 1, probability 0, space 0, times 0 [ 297.167770][T11594] CPU: 1 PID: 11594 Comm: syz.3.2559 Not tainted syzkaller #0 [ 297.175279][T11594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.185542][T11594] Call Trace: [ 297.188846][T11594] [ 297.191905][T11594] dump_stack_lvl+0x188/0x250 [ 297.196783][T11594] ? show_regs_print_info+0x20/0x20 [ 297.202088][T11594] ? load_image+0x400/0x400 [ 297.206614][T11594] ? __might_sleep+0xf0/0xf0 [ 297.211226][T11594] ? __lock_acquire+0x7d10/0x7d10 [ 297.216350][T11594] ? lockdep_init_map_type+0x98/0x900 [ 297.221741][T11594] should_fail+0x38c/0x4c0 [ 297.226180][T11594] should_failslab+0x5/0x20 [ 297.230886][T11594] slab_pre_alloc_hook+0x51/0xc0 [ 297.235844][T11594] ? security_inode_alloc+0x30/0x110 [ 297.241313][T11594] kmem_cache_alloc+0x3d/0x290 [ 297.246083][T11594] security_inode_alloc+0x30/0x110 [ 297.251308][T11594] inode_init_always+0x8f4/0xcb0 [ 297.256240][T11594] new_inode_pseudo+0x8e/0x210 [ 297.260996][T11594] __sock_create+0x129/0x900 [ 297.265596][T11594] __sys_socketpair+0x232/0x540 [ 297.270521][T11594] __x64_sys_socketpair+0x97/0xb0 [ 297.275531][T11594] do_syscall_64+0x4c/0xa0 [ 297.279934][T11594] ? clear_bhb_loop+0x30/0x80 [ 297.284593][T11594] ? clear_bhb_loop+0x30/0x80 [ 297.289255][T11594] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.295224][T11594] RIP: 0033:0x7f6b29d20799 [ 297.299622][T11594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.319308][T11594] RSP: 002b:00007f6b27f7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 297.327723][T11594] RAX: ffffffffffffffda RBX: 00007f6b29f99fa0 RCX: 00007f6b29d20799 [ 297.335682][T11594] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 297.343738][T11594] RBP: 00007f6b27f7a090 R08: 0000000000000000 R09: 0000000000000000 [ 297.351793][T11594] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 297.359764][T11594] R13: 00007f6b29f9a038 R14: 00007f6b29f99fa0 R15: 00007ffd0df5fab8 [ 297.368083][T11594] [ 297.380021][T11594] socket: no more sockets [ 297.637278][T11612] netlink: set zone limit has 8 unknown bytes [ 297.675730][T11618] netlink: 'syz.0.2568': attribute type 16 has an invalid length. [ 297.694688][T11610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.779055][T11623] netlink: 'syz.2.2571': attribute type 16 has an invalid length. [ 297.807845][T11623] netlink: 'syz.2.2571': attribute type 3 has an invalid length. [ 297.853095][T11623] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2571'. [ 297.861805][T11629] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2574'. [ 297.880983][T11630] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2571'. [ 298.032026][T11641] FAULT_INJECTION: forcing a failure. [ 298.032026][T11641] name failslab, interval 1, probability 0, space 0, times 0 [ 298.082003][T11641] CPU: 1 PID: 11641 Comm: syz.1.2579 Not tainted syzkaller #0 [ 298.089509][T11641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.099573][T11641] Call Trace: [ 298.102857][T11641] [ 298.105792][T11641] dump_stack_lvl+0x188/0x250 [ 298.110478][T11641] ? show_regs_print_info+0x20/0x20 [ 298.115709][T11641] ? load_image+0x400/0x400 [ 298.120226][T11641] ? __might_sleep+0xf0/0xf0 [ 298.124822][T11641] ? __lock_acquire+0x7d10/0x7d10 [ 298.129865][T11641] ? lockdep_init_map_type+0x98/0x900 [ 298.135247][T11641] should_fail+0x38c/0x4c0 [ 298.139678][T11641] should_failslab+0x5/0x20 [ 298.144179][T11641] slab_pre_alloc_hook+0x51/0xc0 [ 298.149209][T11641] ? security_inode_alloc+0x30/0x110 [ 298.154597][T11641] kmem_cache_alloc+0x3d/0x290 [ 298.159372][T11641] security_inode_alloc+0x30/0x110 [ 298.164491][T11641] inode_init_always+0x8f4/0xcb0 [ 298.169442][T11641] new_inode_pseudo+0x8e/0x210 [ 298.174211][T11641] __sock_create+0x129/0x900 [ 298.178919][T11641] __sys_socketpair+0x232/0x540 [ 298.183801][T11641] __x64_sys_socketpair+0x97/0xb0 [ 298.188837][T11641] do_syscall_64+0x4c/0xa0 [ 298.193541][T11641] ? clear_bhb_loop+0x30/0x80 [ 298.198327][T11641] ? clear_bhb_loop+0x30/0x80 [ 298.203020][T11641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.208917][T11641] RIP: 0033:0x7f2020e71799 [ 298.213343][T11641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.233247][T11641] RSP: 002b:00007f201f0cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 298.241818][T11641] RAX: ffffffffffffffda RBX: 00007f20210eafa0 RCX: 00007f2020e71799 [ 298.249887][T11641] RDX: 0000000000000009 RSI: 0000000000000003 RDI: 0000000000000010 [ 298.257868][T11641] RBP: 00007f201f0cb090 R08: 0000000000000000 R09: 0000000000000000 [ 298.265857][T11641] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 298.273832][T11641] R13: 00007f20210eb038 R14: 00007f20210eafa0 R15: 00007ffc112bbb88 [ 298.281827][T11641] [ 298.289448][T11641] socket: no more sockets [ 298.433514][T11658] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2583'. [ 298.959317][ C1] ------------[ cut here ]------------ [ 298.959331][ C1] WARNING: CPU: 1 PID: 11669 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 298.959368][ C1] Modules linked in: [ 298.959378][ C1] CPU: 1 PID: 11669 Comm: syz.1.2589 Not tainted syzkaller #0 [ 298.959394][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.959401][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 298.959418][ C1] Code: 24 45 31 f6 31 ff 89 de e8 fd 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 80 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 298.959432][ C1] RSP: 0018:fffffe000005d8e8 EFLAGS: 00010006 [ 298.959445][ C1] RAX: ffffffff81a08f90 RBX: 0000000000000008 RCX: ffff888026f1bb80 [ 298.959457][ C1] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.959472][ C1] RBP: 0000000000000000 R08: ffff888026f1bb87 R09: 1ffff11004de3770 [ 298.959483][ C1] R10: dffffc0000000000 R11: ffffed1004de3771 R12: ffff888026f1d308 [ 298.959495][ C1] R13: 00007ffffffff000 R14: fffffe000005d958 R15: 0000000020000000 [ 298.959507][ C1] FS: 00007f201f0cb6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 298.959522][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.959533][ C1] CR2: 000000110c321c1b CR3: 000000007bffb000 CR4: 00000000003506e0 [ 298.959547][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 298.959562][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 298.959572][ C1] Call Trace: [ 298.959577][ C1] <#DB> [ 298.959585][ C1] bpf_probe_read_compat+0xdd/0x170 [ 298.959607][ C1] bpf_prog_ca2ebcd76953ac02_F+0x2c/0xb44 [ 298.959623][ C1] bpf_prog_b89d7ca37128ef40+0x1a/0x988 [ 298.959636][ C1] bpf_overflow_handler+0x3fd/0x4a0 [ 298.959657][ C1] ? perf_event_switch_output+0x730/0x730 [ 298.959679][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 298.959701][ C1] __perf_event_overflow+0x364/0x530 [ 298.959719][ C1] perf_swevent_event+0x4ad/0x530 [ 298.959738][ C1] perf_bp_event+0x276/0x320 [ 298.959755][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 298.959785][ C1] ? rcu_lock_acquire+0x9/0x30 [ 298.959803][ C1] ? read_lock_is_recursive+0x10/0x10 [ 298.959826][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 298.959845][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 298.959864][ C1] notify_die+0x141/0x1a0 [ 298.959881][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 298.959900][ C1] ? exc_debug+0x6e/0x130 [ 298.959915][ C1] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 298.959934][ C1] notify_debug+0x20/0x30 [ 298.959950][ C1] exc_debug+0xcf/0x130 [ 298.959966][ C1] asm_exc_debug+0x1a/0x40 [ 298.959981][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 298.960000][ C1] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 298.960012][ C1] RSP: 0018:ffffc9000308f938 EFLAGS: 00050206 [ 298.960025][ C1] RAX: ffffffff83e1d601 RBX: 0000000000033fe0 RCX: 0000000000033cdc [ 298.960036][ C1] RDX: 0000000000033fe0 RSI: 0000200000000304 RDI: ffffc90003121304 [ 298.960047][ C1] RBP: ffffc9000308fa90 R08: ffffc90003154fdf R09: 1ffff9200062a9fb [ 298.960058][ C1] R10: dffffc0000000000 R11: fffff5200062a9fc R12: ffffc90003121000 [ 298.960069][ C1] R13: dffffc00000000ff R14: 0000200000000000 R15: 0000000000000000 [ 298.960084][ C1] ? _copy_from_iter+0x251/0x1170 [ 298.960104][ C1] [ 298.960109][ C1] [ 298.960113][ C1] _copy_from_iter+0x318/0x1170 [ 298.960136][ C1] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 298.960151][ C1] ? __build_skb+0x26/0x2e0 [ 298.960168][ C1] ? rcu_is_watching+0x11/0xa0 [ 298.960183][ C1] ? __build_skb+0x26/0x2e0 [ 298.960198][ C1] ? kmem_cache_alloc+0x133/0x290 [ 298.960212][ C1] ? __virt_addr_valid+0xbd/0x470 [ 298.960227][ C1] ? __phys_addr_symbol+0x2b/0x70 [ 298.960242][ C1] ? __check_object_size+0x30c/0x410 [ 298.960260][ C1] netlink_sendmsg+0x758/0xbe0 [ 298.960280][ C1] ? netlink_getsockopt+0x570/0x570 [ 298.960296][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 298.960313][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 298.960329][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 298.960347][ C1] sock_write_iter+0x2a6/0x3a0 [ 298.960362][ C1] ? sock_read_iter+0x380/0x380 [ 298.960381][ C1] ? memset+0x1e/0x40 [ 298.960397][ C1] ? iov_iter_init+0xb4/0x170 [ 298.960414][ C1] vfs_write+0x745/0xd60 [ 298.960431][ C1] ? file_end_write+0x250/0x250 [ 298.960450][ C1] ? __fget_files+0x40f/0x480 [ 298.960469][ C1] ? __fdget_pos+0x1e2/0x370 [ 298.960483][ C1] ? ksys_write+0x71/0x260 [ 298.960498][ C1] ksys_write+0x152/0x260 [ 298.960514][ C1] ? __ia32_sys_read+0x80/0x80 [ 298.960530][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 298.960548][ C1] do_syscall_64+0x4c/0xa0 [ 298.960562][ C1] ? clear_bhb_loop+0x30/0x80 [ 298.960576][ C1] ? clear_bhb_loop+0x30/0x80 [ 298.960591][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.960607][ C1] RIP: 0033:0x7f2020e71799 [ 298.960620][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.960632][ C1] RSP: 002b:00007f201f0cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.960667][ C1] RAX: ffffffffffffffda RBX: 00007f20210eafa0 RCX: 00007f2020e71799 [ 298.960678][ C1] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000007 [ 298.960692][ C1] RBP: 00007f2020f07c99 R08: 0000000000000000 R09: 0000000000000000 [ 298.960703][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.960712][ C1] R13: 00007f20210eb038 R14: 00007f20210eafa0 R15: 00007ffc112bbb88 [ 298.960731][ C1] [ 298.960743][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 298.960750][ C1] CPU: 1 PID: 11669 Comm: syz.1.2589 Not tainted syzkaller #0 [ 298.960767][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.960774][ C1] Call Trace: [ 298.960778][ C1] <#DB> [ 298.960783][ C1] dump_stack_lvl+0x188/0x250 [ 298.960800][ C1] ? show_regs_print_info+0x20/0x20 [ 298.960818][ C1] ? load_image+0x400/0x400 [ 298.960838][ C1] panic+0x2e5/0x810 [ 298.960858][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 298.960880][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 298.960897][ C1] __warn+0x248/0x2b0 [ 298.960913][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 298.960930][ C1] report_bug+0x1b7/0x2e0 [ 298.960955][ C1] handle_bug+0x3a/0x70 [ 298.960970][ C1] exc_invalid_op+0x16/0x40 [ 298.960984][ C1] asm_exc_invalid_op+0x16/0x20 [ 298.960998][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 298.961016][ C1] Code: 24 45 31 f6 31 ff 89 de e8 fd 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 80 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 298.961028][ C1] RSP: 0018:fffffe000005d8e8 EFLAGS: 00010006 [ 298.961041][ C1] RAX: ffffffff81a08f90 RBX: 0000000000000008 RCX: ffff888026f1bb80 [ 298.961052][ C1] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.961061][ C1] RBP: 0000000000000000 R08: ffff888026f1bb87 R09: 1ffff11004de3770 [ 298.961072][ C1] R10: dffffc0000000000 R11: ffffed1004de3771 R12: ffff888026f1d308 [ 298.961084][ C1] R13: 00007ffffffff000 R14: fffffe000005d958 R15: 0000000020000000 [ 298.961099][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 298.961118][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 298.961135][ C1] bpf_probe_read_compat+0xdd/0x170 [ 298.961155][ C1] bpf_prog_ca2ebcd76953ac02_F+0x2c/0xb44 [ 298.961169][ C1] bpf_prog_b89d7ca37128ef40+0x1a/0x988 [ 298.961182][ C1] bpf_overflow_handler+0x3fd/0x4a0 [ 298.961201][ C1] ? perf_event_switch_output+0x730/0x730 [ 298.961221][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 298.961239][ C1] __perf_event_overflow+0x364/0x530 [ 298.961257][ C1] perf_swevent_event+0x4ad/0x530 [ 298.961275][ C1] perf_bp_event+0x276/0x320 [ 298.961293][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 298.961322][ C1] ? rcu_lock_acquire+0x9/0x30 [ 298.961339][ C1] ? read_lock_is_recursive+0x10/0x10 [ 298.961360][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 298.961378][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 298.961396][ C1] notify_die+0x141/0x1a0 [ 298.961413][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 298.961432][ C1] ? exc_debug+0x6e/0x130 [ 298.961446][ C1] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 298.961464][ C1] notify_debug+0x20/0x30 [ 298.961479][ C1] exc_debug+0xcf/0x130 [ 298.961495][ C1] asm_exc_debug+0x1a/0x40 [ 298.961509][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 298.961526][ C1] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 298.961538][ C1] RSP: 0018:ffffc9000308f938 EFLAGS: 00050206 [ 298.961550][ C1] RAX: ffffffff83e1d601 RBX: 0000000000033fe0 RCX: 0000000000033cdc [ 298.961560][ C1] RDX: 0000000000033fe0 RSI: 0000200000000304 RDI: ffffc90003121304 [ 298.961571][ C1] RBP: ffffc9000308fa90 R08: ffffc90003154fdf R09: 1ffff9200062a9fb [ 298.961583][ C1] R10: dffffc0000000000 R11: fffff5200062a9fc R12: ffffc90003121000 [ 298.961595][ C1] R13: dffffc00000000ff R14: 0000200000000000 R15: 0000000000000000 [ 298.961609][ C1] ? _copy_from_iter+0x251/0x1170 [ 298.961628][ C1] [ 298.961632][ C1] [ 298.961636][ C1] _copy_from_iter+0x318/0x1170 [ 298.961658][ C1] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 298.961673][ C1] ? __build_skb+0x26/0x2e0 [ 298.961693][ C1] ? rcu_is_watching+0x11/0xa0 [ 298.961707][ C1] ? __build_skb+0x26/0x2e0 [ 298.961721][ C1] ? kmem_cache_alloc+0x133/0x290 [ 298.961735][ C1] ? __virt_addr_valid+0xbd/0x470 [ 298.961749][ C1] ? __phys_addr_symbol+0x2b/0x70 [ 298.961764][ C1] ? __check_object_size+0x30c/0x410 [ 298.961781][ C1] netlink_sendmsg+0x758/0xbe0 [ 298.961800][ C1] ? netlink_getsockopt+0x570/0x570 [ 298.961816][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 298.961832][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 298.961848][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 298.961864][ C1] sock_write_iter+0x2a6/0x3a0 [ 298.961880][ C1] ? sock_read_iter+0x380/0x380 [ 298.961898][ C1] ? memset+0x1e/0x40 [ 298.961914][ C1] ? iov_iter_init+0xb4/0x170 [ 298.961930][ C1] vfs_write+0x745/0xd60 [ 298.961946][ C1] ? file_end_write+0x250/0x250 [ 298.961969][ C1] ? __fget_files+0x40f/0x480 [ 298.961987][ C1] ? __fdget_pos+0x1e2/0x370 [ 298.962000][ C1] ? ksys_write+0x71/0x260 [ 298.962016][ C1] ksys_write+0x152/0x260 [ 298.962031][ C1] ? __ia32_sys_read+0x80/0x80 [ 298.962047][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 298.962065][ C1] do_syscall_64+0x4c/0xa0 [ 298.962078][ C1] ? clear_bhb_loop+0x30/0x80 [ 298.962092][ C1] ? clear_bhb_loop+0x30/0x80 [ 298.962107][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.962124][ C1] RIP: 0033:0x7f2020e71799 [ 298.962134][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.962144][ C1] RSP: 002b:00007f201f0cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.962156][ C1] RAX: ffffffffffffffda RBX: 00007f20210eafa0 RCX: 00007f2020e71799 [ 298.962166][ C1] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000007 [ 298.962174][ C1] RBP: 00007f2020f07c99 R08: 0000000000000000 R09: 0000000000000000 [ 298.962182][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.962190][ C1] R13: 00007f20210eb038 R14: 00007f20210eafa0 R15: 00007ffc112bbb88 [ 298.962205][ C1] [ 298.962502][ C1] Kernel Offset: disabled [ 298.962515][ C1] [ 298.962518][ C1] ================================ [ 298.962520][ C1] WARNING: inconsistent lock state [ 298.962525][ C1] syzkaller #0 Not tainted [ 298.962529][ C1] -------------------------------- [ 298.962532][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 298.962536][ C1] syz.1.2589/11669 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 298.962546][ C1] ffffffff8c313578 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0x1c/0xa0 [ 298.962567][ C1] {INITIAL USE} state was registered at: [ 298.962571][ C1] irq event stamp: 1354 [ 298.962574][ C1] hardirqs last enabled at (1353): [] exc_debug+0xe6/0x130 [ 298.962584][ C1] hardirqs last disabled at (1354): [] exc_debug+0x6e/0x130 [ 298.962594][ C1] softirqs last enabled at (1110): [] netlink_insert+0xe95/0x11f0 [ 298.962603][ C1] softirqs last disabled at (1108): [] release_sock+0x2b/0x1b0 [ 298.962613][ C1] [ 298.962613][ C1] other info that might help us debug this: [ 298.962615][ C1] Possible unsafe locking scenario: [ 298.962615][ C1] [ 298.962618][ C1] CPU0 [ 298.962619][ C1] ---- [ 298.962621][ C1] lock((console_sem).lock); [ 298.962625][ C1] [ 298.962627][ C1] lock((console_sem).lock); [ 298.962631][ C1] [ 298.962631][ C1] *** DEADLOCK *** [ 298.962631][ C1] [ 298.962633][ C1] no locks held by syz.1.2589/11669. [ 298.962637][ C1] [ 298.962637][ C1] stack backtrace: [ 298.962639][ C1] CPU: 1 PID: 11669 Comm: syz.1.2589 Not tainted syzkaller #0 [ 298.962647][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.962651][ C1] Call Trace: [ 298.962654][ C1] <#DB> [ 298.962657][ C1] dump_stack_lvl+0x188/0x250 [ 298.962666][ C1] ? show_regs_print_info+0x20/0x20 [ 298.962677][ C1] ? print_usage_bug+0x42a/0x690 [ 298.962684][ C1] ? verify_lock_unused+0x18/0x140 [ 298.962699][ C1] lock_acquire+0x2c3/0x400 [ 298.962709][ C1] ? down_trylock+0x1c/0xa0 [ 298.962717][ C1] ? read_lock_is_recursive+0x10/0x10 [ 298.962728][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 298.962737][ C1] ? down_trylock+0x1c/0xa0 [ 298.962744][ C1] ? _raw_spin_lock+0x40/0x40 [ 298.962751][ C1] ? verify_lock_unused+0x18/0x140 [ 298.962762][ C1] down_trylock+0x1c/0xa0 [ 298.962771][ C1] __down_trylock_console_sem+0xd4/0x1f0 [ 298.962779][ C1] ? is_console_locked+0x5/0x10 [ 298.962787][ C1] ? panic+0x37b/0x810 [ 298.962795][ C1] ? console_trylock+0x70/0x70 [ 298.962802][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 298.962811][ C1] ? give_up_console+0x20/0x20 [ 298.962823][ C1] console_unblank+0x28/0x180 [ 298.962831][ C1] panic+0x37b/0x810 [ 298.962840][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 298.962851][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 298.962861][ C1] __warn+0x248/0x2b0 [ 298.962869][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 298.962878][ C1] report_bug+0x1b7/0x2e0 [ 298.962888][ C1] handle_bug+0x3a/0x70 [ 298.962896][ C1] exc_invalid_op+0x16/0x40 [ 298.962904][ C1] asm_exc_invalid_op+0x16/0x20 [ 298.962912][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 298.962921][ C1] Code: 24 45 31 f6 31 ff 89 de e8 fd 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 80 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 298.962928][ C1] RSP: 0018:fffffe000005d8e8 EFLAGS: 00010006 [ 298.962935][ C1] RAX: ffffffff81a08f90 RBX: 0000000000000008 RCX: ffff888026f1bb80 [ 298.962943][ C1] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.962948][ C1] RBP: 0000000000000000 R08: ffff888026f1bb87 R09: 1ffff11004de3770 [ 298.962954][ C1] R10: dffffc0000000000 R11: ffffed1004de3771 R12: ffff888026f1d308 [ 298.962959][ C1] R13: 00007ffffffff000 R14: fffffe000005d958 R15: 0000000020000000 [ 298.962967][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 298.962977][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 298.962986][ C1] bpf_probe_read_compat+0xdd/0x170 [ 298.963001][ C1] bpf_prog_ca2ebcd76953ac02_F+0x2c/0xb44 [ 298.963008][ C1] bpf_prog_b89d7ca37128ef40+0x1a/0x988 [ 298.963015][ C1] bpf_overflow_handler+0x3fd/0x4a0 [ 298.963025][ C1] ? perf_event_switch_output+0x730/0x730 [ 298.963036][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 298.963045][ C1] __perf_event_overflow+0x364/0x530 [ 298.963054][ C1] perf_swevent_event+0x4ad/0x530 [ 298.963063][ C1] perf_bp_event+0x276/0x320 [ 298.963072][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 298.963085][ C1] ? rcu_lock_acquire+0x9/0x30 [ 298.963094][ C1] ? read_lock_is_recursive+0x10/0x10 [ 298.963104][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 298.963113][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 298.963123][ C1] notify_die+0x141/0x1a0 [ 298.963131][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 298.963141][ C1] ? exc_debug+0x6e/0x130 [ 298.963148][ C1] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 298.963157][ C1] notify_debug+0x20/0x30 [ 298.963166][ C1] exc_debug+0xcf/0x130 [ 298.963174][ C1] asm_exc_debug+0x1a/0x40 [ 298.963181][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 298.963191][ C1] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 298.963198][ C1] RSP: 0018:ffffc9000308f938 EFLAGS: 00050206 [ 298.963204][ C1] RAX: ffffffff83e1d601 RBX: 0000000000033fe0 RCX: 0000000000033cdc [ 298.963210][ C1] RDX: 0000000000033fe0 RSI: 0000200000000304 RDI: ffffc90003121304 [ 298.963216][ C1] RBP: ffffc9000308fa90 R08: ffffc90003154fdf R09: 1ffff9200062a9fb [ 298.963222][ C1] R10: dffffc0000000000 R11: fffff5200062a9fc R12: ffffc90003121000 [ 298.963228][ C1] R13: dffffc00000000ff R14: 0000200000000000 R15: 0000000000000000 [ 298.963235][ C1] ? _copy_from_iter+0x251/0x1170 [ 298.963245][ C1] [ 298.963247][ C1] [ 298.963250][ C1] _copy_from_iter+0x318/0x1170 [ 298.963261][ C1] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 298.963269][ C1] ? __build_skb+0x26/0x2e0 [ 298.963277][ C1] ? rcu_is_watching+0x11/0xa0 [ 298.963285][ C1] ? __build_skb+0x26/0x2e0 [ 298.963292][ C1] ? kmem_cache_alloc+0x133/0x290 [ 298.963300][ C1] ? __virt_addr_valid+0xbd/0x470 [ 298.963307][ C1] ? __phys_addr_symbol+0x2b/0x70 [ 298.963315][ C1] ? __check_object_size+0x30c/0x410 [ 298.963324][ C1] netlink_sendmsg+0x758/0xbe0 [ 298.963333][ C1] ? netlink_getsockopt+0x570/0x570 [ 298.963341][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 298.963349][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 298.963358][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 298.963366][ C1] sock_write_iter+0x2a6/0x3a0 [ 298.963374][ C1] ? sock_read_iter+0x380/0x380 [ 298.963383][ C1] ? memset+0x1e/0x40 [ 298.963391][ C1] ? iov_iter_init+0xb4/0x170 [ 298.963400][ C1] vfs_write+0x745/0xd60 [ 298.963408][ C1] ? file_end_write+0x250/0x250 [ 298.963417][ C1] ? __fget_files+0x40f/0x480 [ 298.963426][ C1] ? __fdget_pos+0x1e2/0x370 [ 298.963433][ C1] ? ksys_write+0x71/0x260 [ 298.963441][ C1] ksys_write+0x152/0x260 [ 298.963449][ C1] ? __ia32_sys_read+0x80/0x80 [ 298.963457][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 298.963466][ C1] do_syscall_64+0x4c/0xa0 [ 298.963473][ C1] ? clear_bhb_loop+0x30/0x80 [ 298.963480][ C1] ? clear_bhb_loop+0x30/0x80 [ 298.963488][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.963496][ C1] RIP: 0033:0x7f2020e71799 [ 298.963503][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.963509][ C1] RSP: 002b:00007f201f0cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.963517][ C1] RAX: ffffffffffffffda RBX: 00007f20210eafa0 RCX: 00007f2020e71799 [ 298.963523][ C1] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000007 [ 298.963528][ C1] RBP: 00007f2020f07c99 R08: 0000000000000000 R09: 0000000000000000 [ 298.963533][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.963538][ C1] R13: 00007f20210eb038 R14: 00007f20210eafa0 R15: 00007ffc112bbb88 [ 298.963547][ C1]