last executing test programs: 5.51253873s ago: executing program 3 (id=2090): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x3a) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a0038001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x1088c, 0x0, 0x8000, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e8a9b", 0xd8}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012100) 5.063893675s ago: executing program 3 (id=2093): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000200)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xee2, 0xfffffffffffffffa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/net\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ec0)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x20) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x204000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x7}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 4.654355078s ago: executing program 1 (id=2094): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0x8840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x7}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x26, 0x300, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000ac0), 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c200000095", @ANYRESDEC=r2], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d000000000100000000", 0x1e}], 0x1}, 0x40000) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT=r4], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 4.364513728s ago: executing program 1 (id=2095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) 4.331509719s ago: executing program 0 (id=2096): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x2, 0x0, 0x0, 0x7400}, 0x10) 4.29436406s ago: executing program 1 (id=2097): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x10001}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100000000000001, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_int(r1, &(0x7f00000000c0)=0x7, 0x12) 4.190943984s ago: executing program 0 (id=2099): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, &(0x7f0000000380)}, 0x40000000) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000380)={'ip6tnl0\x00', 0x26be10e30700451d}) syz_clone(0x1814000, &(0x7f00000005c0)="feaf6c6576bd3aeb5708b1ed87e25477b036a149598a7e9796dc22ee4e6bc977f99ab39b32fed4efd63c669273a262115c13d934e62ac05021b55d3783c6177552ce4b5c0767ea7db634a7f14c55a97e714b6066620ea69a02456a3e06b62e6768cba0bc118b1cd1c1fab58615a69df04256661008b41745d87ec242a67c7efbbe8e97899b6bff7addbb906a52557d7054e869736067da1d5a6ca32a0bf083ce2bf8cbb42062d9d844af8c27f7295fd44bdd085379dd36ccecf622b8a1cfec0ce3da09e8ccc4ec886f0e41c7ff336897f74a5e1b2879f33da33e90d1542c277b06aa4a", 0xe3, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="ca72058fa2a88c022c7af6e58be403833333b883a727ae5fac682711b675c7f13ce62fc7d2da8a99c2bd81457a230cce24305ec36d3a0c3b8898bb051ca7768281bcfd0a7e9fc647c7f35d5c4e5b074a77bcc3") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x11, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xbc}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0xfffffff9, 0x3, 0xb12e, 0x64d60, r1, 0xe, '\x00', r6, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94aa3c92b", 0x14}], 0x1}, 0x0) 3.918317192s ago: executing program 0 (id=2101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e02000004000000040000000f000000009b8550a504000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r4) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, &(0x7f0000000580)="bca13f58108937270789108abef62fc69699d33b5b5ef0def2fb77dbb117902c28122e2f2fb8ac793c47db676efd92aeacef4f223cdb490d7eaa0860b0f1abaaad5a58cd7e5855b48a7272e2854fda05f41a005d555f788cac0ce588812f48ec13a49b934fcfa64f4862f43adc0335ee9a202360de774f6123ff", 0x7, r4, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000440), 0x1}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r6 = getpid() perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0xe, 0x3b, 0x4, 0x2, 0x0, 0x40, 0x1208, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x8000000000000001, 0x1, 0x3, 0x5, 0x4, 0x3, 0x0, 0x9de, 0x0, 0x9}, r6, 0x2, r5, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000006c0)="d80000001a0081184e81f782db4cb904021d08007b49b08ef0fdd4ef7ad01dba44540a0d51eda46f634f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x4c}], 0x1}, 0x4000800) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f00000000c0)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x6, 0x0, &(0x7f0000000040)=""/8, 0x4001f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.232123507s ago: executing program 1 (id=2103): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4", 0x9}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x8100) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$TUNSETIFF(r1, 0xb701, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100), 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 2.110865861s ago: executing program 0 (id=2105): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4", 0x9}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x8100) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$TUNSETIFF(r1, 0xb701, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100), 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 1.963926886s ago: executing program 3 (id=2107): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="015aabe76a000000000000020400000005000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000000)='\r', 0x1}], 0x1}, 0x4000044) (fail_nth: 4) 1.476510732s ago: executing program 3 (id=2110): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x0, 0x0, 0x0, 0x209, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x19}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000600)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0x26}, {&(0x7f0000001a40)="e969b9ca2a9a2732559840ec1ed4bfe607b21531c4e677ffe27da0a9157d", 0x1e}], 0x2}, 0x0) 1.402954984s ago: executing program 2 (id=2111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000003c0)=@in6={0xa, 0x4e20, 0x0, @mcast1, 0x81}, 0x80, 0x0}, 0x20004074) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000046c0)="ed57", 0x2}], 0x1}, 0x400c000) sendmsg(r1, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000100)='<', 0x1}], 0x1}, 0x44041) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x2001, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x1}, 0x1410, 0x401, 0x0, 0x5, 0x1b, 0xffff0001, 0x2, 0x0, 0x4, 0x0, 0x727}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r6, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000180), &(0x7f0000000180)=""/94}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x8, 0x8}, 0x20) r8 = socket$kcm(0x2b, 0x8, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x24, &(0x7f0000000200), 0x4) 1.387422044s ago: executing program 3 (id=2112): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x3a) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a0038001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x1088c, 0x0, 0x8000, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r2, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e8a9b", 0xd8}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012100) 1.20704204s ago: executing program 1 (id=2113): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x83}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x9, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000080004000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f0000000140)=r7, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.034858786s ago: executing program 0 (id=2114): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0x8840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x7}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x26, 0x300, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000ac0), 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c200000095", @ANYRESDEC=r2], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d000000000100000000", 0x1e}], 0x1}, 0x40000) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT=r4], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 881.72452ms ago: executing program 3 (id=2115): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000200)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xee2, 0xfffffffffffffffa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/net\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ec0)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x20) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x204000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x7}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 784.244904ms ago: executing program 0 (id=2116): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x4, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x120) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x66) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000680)='i', 0x1}], 0x1}, 0xc0) sendmsg$kcm(r7, &(0x7f00000055c0)={0x0, 0x0, 0x0}, 0x40010) sendmsg$inet(r7, &(0x7f0000007d00)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x8}, 0x10}, 0x94) 735.395346ms ago: executing program 2 (id=2117): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) 587.82549ms ago: executing program 2 (id=2118): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x2, 0xa, 0x73) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c050000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000540)="259a53f271a76d2673004c6588a8", 0x0, 0x10d01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000100)=""/146, 0x92}, {&(0x7f00000001c0)=""/215, 0xd7}, {&(0x7f0000000300)=""/47, 0x2f}], 0x4, &(0x7f0000000380)=""/140, 0x8c}, 0x101) mkdir(&(0x7f0000000000)='./file0\x00', 0xe2) 300.24514ms ago: executing program 2 (id=2119): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x20}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1f, 0x8, 0x1e, 0xfffffff8, 0x40000, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x9}, 0xc) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xd, &(0x7f0000000100)=@raw=[@ringbuf_query, @alu={0x4, 0x1, 0x3, 0xa, 0x3, 0xfffffffffffffff8, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f00000001c0)='syzkaller\x00', 0xe, 0xf6, &(0x7f0000000200)=""/246, 0x0, 0x58, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x1, 0xf, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r4, r5, r6, r7, r8, r10, r11], 0x0, 0x10, 0x400}, 0x94) 153.181005ms ago: executing program 2 (id=2120): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000002000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 105.961766ms ago: executing program 1 (id=2121): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4", 0x9}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x8100) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$TUNSETIFF(r1, 0xb701, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100), 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=2122): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000280)="5c00000013006bcc9e3be35c6e17aa35066b876c3d0000007ea6e763160af36504001ac0080010000500e7daeb660000ef64bc76bd7b6278c206d83f38d833aa516adc24eab556a705251e618294ff0051f60a9553adac000e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)=""/69, 0x45}], 0x1}, 0x100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000801801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r7, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) (async) openat$cgroup_devices(r7, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): .170130][ T9178] CPU: 0 PID: 9178 Comm: syz.3.1302 Not tainted syzkaller #0 [ 233.177526][ T9178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.187586][ T9178] Call Trace: [ 233.190861][ T9178] [ 233.193786][ T9178] dump_stack_lvl+0x18c/0x250 [ 233.198471][ T9178] ? show_regs_print_info+0x20/0x20 [ 233.203667][ T9178] ? load_image+0x420/0x420 [ 233.208171][ T9178] ? __lock_acquire+0x7d40/0x7d40 [ 233.213194][ T9178] ? snprintf+0xe9/0x140 [ 233.217439][ T9178] should_fail_ex+0x39d/0x4d0 [ 233.222125][ T9178] _copy_to_user+0x2f/0xa0 [ 233.226541][ T9178] simple_read_from_buffer+0xe7/0x150 [ 233.231919][ T9178] proc_fail_nth_read+0x1e8/0x260 [ 233.236944][ T9178] ? proc_fault_inject_write+0x360/0x360 [ 233.242577][ T9178] ? fsnotify_perm+0x271/0x5e0 [ 233.247334][ T9178] ? proc_fault_inject_write+0x360/0x360 [ 233.252961][ T9178] vfs_read+0x28b/0x970 [ 233.257119][ T9178] ? kernel_read+0x1e0/0x1e0 [ 233.261705][ T9178] ? __fget_files+0x28/0x4b0 [ 233.266296][ T9178] ? __fget_files+0x28/0x4b0 [ 233.270883][ T9178] ? __fget_files+0x43d/0x4b0 [ 233.275567][ T9178] ? __fdget_pos+0x2a3/0x330 [ 233.280154][ T9178] ? ksys_read+0x75/0x260 [ 233.284481][ T9178] ksys_read+0x150/0x260 [ 233.288722][ T9178] ? vfs_write+0x990/0x990 [ 233.293144][ T9178] ? lockdep_hardirqs_on+0x98/0x150 [ 233.298348][ T9178] do_syscall_64+0x55/0xb0 [ 233.302760][ T9178] ? clear_bhb_loop+0x40/0x90 [ 233.307427][ T9178] ? clear_bhb_loop+0x40/0x90 [ 233.312112][ T9178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.318005][ T9178] RIP: 0033:0x7faf1a35d68e [ 233.322417][ T9178] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 233.342015][ T9178] RSP: 002b:00007faf1b30dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 233.350425][ T9178] RAX: ffffffffffffffda RBX: 00007faf1b30e6c0 RCX: 00007faf1a35d68e [ 233.358392][ T9178] RDX: 000000000000000f RSI: 00007faf1b30e0a0 RDI: 000000000000000b [ 233.366352][ T9178] RBP: 00007faf1b30e090 R08: 0000000000000000 R09: 0000000000000000 [ 233.374313][ T9178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.382276][ T9178] R13: 00007faf1a616038 R14: 00007faf1a615fa0 R15: 00007ffe8cd2d9d8 [ 233.390255][ T9178] [ 233.659007][ T9191] FAULT_INJECTION: forcing a failure. [ 233.659007][ T9191] name failslab, interval 1, probability 0, space 0, times 0 [ 233.676358][ T9191] CPU: 1 PID: 9191 Comm: syz.0.1307 Not tainted syzkaller #0 [ 233.683762][ T9191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.693822][ T9191] Call Trace: [ 233.697106][ T9191] [ 233.700036][ T9191] dump_stack_lvl+0x18c/0x250 [ 233.704899][ T9191] ? show_regs_print_info+0x20/0x20 [ 233.710109][ T9191] ? load_image+0x420/0x420 [ 233.714623][ T9191] ? __might_sleep+0xe0/0xe0 [ 233.719223][ T9191] ? __lock_acquire+0x7d40/0x7d40 [ 233.724251][ T9191] ? __asan_memset+0x22/0x40 [ 233.728853][ T9191] should_fail_ex+0x39d/0x4d0 [ 233.733543][ T9191] should_failslab+0x9/0x20 [ 233.738058][ T9191] slab_pre_alloc_hook+0x59/0x310 [ 233.743091][ T9191] ? verify_lock_unused+0x140/0x140 [ 233.748294][ T9191] ? __kthread_create_on_node+0x116/0x3f0 [ 233.754015][ T9191] __kmem_cache_alloc_node+0x53/0x250 [ 233.759395][ T9191] ? __kthread_create_on_node+0x116/0x3f0 [ 233.765113][ T9191] kmalloc_trace+0x2a/0xe0 [ 233.769535][ T9191] ? rxrpc_direct_abort+0x330/0x330 [ 233.774743][ T9191] __kthread_create_on_node+0x116/0x3f0 [ 233.780295][ T9191] ? kthread_create_on_node+0x140/0x140 [ 233.785849][ T9191] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 233.791833][ T9191] ? rxrpc_direct_abort+0x330/0x330 [ 233.797038][ T9191] ? rxrpc_direct_abort+0x330/0x330 [ 233.802246][ T9191] kthread_create_on_node+0xec/0x140 [ 233.807538][ T9191] ? __local_bh_enable_ip+0x13a/0x1c0 [ 233.812919][ T9191] ? tsk_fork_get_node+0x70/0x70 [ 233.817857][ T9191] ? __local_bh_enable_ip+0x13a/0x1c0 [ 233.823245][ T9191] rxrpc_lookup_local+0xff3/0x1610 [ 233.828377][ T9191] ? rxrpc_local_dont_fragment+0x70/0x70 [ 233.834018][ T9191] ? none_clear+0x10/0x10 [ 233.838353][ T9191] ? rxrpc_client_conn_reap_timeout+0xd0/0xd0 [ 233.844428][ T9191] ? lockdep_hardirqs_on+0x98/0x150 [ 233.849634][ T9191] ? _local_bh_enable+0xa0/0xa0 [ 233.854494][ T9191] rxrpc_sendmsg+0x30a/0x5b0 [ 233.859095][ T9191] ? rxrpc_getsockopt+0x150/0x150 [ 233.864122][ T9191] ____sys_sendmsg+0x5ba/0x960 [ 233.868897][ T9191] ? __asan_memset+0x22/0x40 [ 233.873493][ T9191] ? __sys_sendmsg_sock+0x30/0x30 [ 233.878517][ T9191] ? __import_iovec+0x3fa/0x850 [ 233.883376][ T9191] ? import_iovec+0x73/0xa0 [ 233.887888][ T9191] ___sys_sendmsg+0x2a6/0x360 [ 233.892570][ T9191] ? get_pid_task+0x20/0x1e0 [ 233.897176][ T9191] ? __sys_sendmsg+0x2a0/0x2a0 [ 233.901972][ T9191] ? __lock_acquire+0x7d40/0x7d40 [ 233.907025][ T9191] __se_sys_sendmsg+0x1c2/0x2b0 [ 233.911885][ T9191] ? __x64_sys_sendmsg+0x80/0x80 [ 233.916841][ T9191] ? lockdep_hardirqs_on+0x98/0x150 [ 233.922045][ T9191] do_syscall_64+0x55/0xb0 [ 233.926464][ T9191] ? clear_bhb_loop+0x40/0x90 [ 233.931136][ T9191] ? clear_bhb_loop+0x40/0x90 [ 233.935820][ T9191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.941722][ T9191] RIP: 0033:0x7f463a79ce59 [ 233.946138][ T9191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.965744][ T9191] RSP: 002b:00007f463b5c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.974162][ T9191] RAX: ffffffffffffffda RBX: 00007f463aa15fa0 RCX: 00007f463a79ce59 [ 233.982135][ T9191] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 233.990108][ T9191] RBP: 00007f463b5c6090 R08: 0000000000000000 R09: 0000000000000000 [ 233.998078][ T9191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.006047][ T9191] R13: 00007f463aa16038 R14: 00007f463aa15fa0 R15: 00007fff51f64508 [ 234.014035][ T9191] [ 234.374919][ T9207] FAULT_INJECTION: forcing a failure. [ 234.374919][ T9207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.394780][ T9207] CPU: 0 PID: 9207 Comm: syz.1.1314 Not tainted syzkaller #0 [ 234.402190][ T9207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 234.412257][ T9207] Call Trace: [ 234.415548][ T9207] [ 234.418491][ T9207] dump_stack_lvl+0x18c/0x250 [ 234.423190][ T9207] ? show_regs_print_info+0x20/0x20 [ 234.428402][ T9207] ? load_image+0x420/0x420 [ 234.432923][ T9207] ? __lock_acquire+0x7d40/0x7d40 [ 234.437969][ T9207] ? snprintf+0xe9/0x140 [ 234.442237][ T9207] should_fail_ex+0x39d/0x4d0 [ 234.446940][ T9207] _copy_to_user+0x2f/0xa0 [ 234.451379][ T9207] simple_read_from_buffer+0xe7/0x150 [ 234.456780][ T9207] proc_fail_nth_read+0x1e8/0x260 [ 234.461831][ T9207] ? proc_fault_inject_write+0x360/0x360 [ 234.467487][ T9207] ? fsnotify_perm+0x271/0x5e0 [ 234.472355][ T9207] ? proc_fault_inject_write+0x360/0x360 [ 234.478010][ T9207] vfs_read+0x28b/0x970 [ 234.482191][ T9207] ? kernel_read+0x1e0/0x1e0 [ 234.486800][ T9207] ? __fget_files+0x28/0x4b0 [ 234.491409][ T9207] ? __fget_files+0x28/0x4b0 [ 234.496019][ T9207] ? __fget_files+0x43d/0x4b0 [ 234.500730][ T9207] ? __fdget_pos+0x2a3/0x330 [ 234.505344][ T9207] ? ksys_read+0x75/0x260 [ 234.509697][ T9207] ksys_read+0x150/0x260 [ 234.513965][ T9207] ? vfs_write+0x990/0x990 [ 234.518405][ T9207] ? lockdep_hardirqs_on+0x98/0x150 [ 234.523628][ T9207] do_syscall_64+0x55/0xb0 [ 234.528060][ T9207] ? clear_bhb_loop+0x40/0x90 [ 234.532748][ T9207] ? clear_bhb_loop+0x40/0x90 [ 234.537442][ T9207] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.543361][ T9207] RIP: 0033:0x7ff05155d68e [ 234.547793][ T9207] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 234.567419][ T9207] RSP: 002b:00007ff0523c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 234.575851][ T9207] RAX: ffffffffffffffda RBX: 00007ff0523c16c0 RCX: 00007ff05155d68e [ 234.583832][ T9207] RDX: 000000000000000f RSI: 00007ff0523c10a0 RDI: 0000000000000004 [ 234.591813][ T9207] RBP: 00007ff0523c1090 R08: 0000000000000000 R09: 0000000000000000 [ 234.599792][ T9207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.607768][ T9207] R13: 00007ff051816038 R14: 00007ff051815fa0 R15: 00007ffd12147ce8 [ 234.615763][ T9207] [ 234.754777][ T9211] netlink: 'syz.3.1312': attribute type 9 has an invalid length. [ 235.127115][ T51] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 235.693917][ T9234] FAULT_INJECTION: forcing a failure. [ 235.693917][ T9234] name failslab, interval 1, probability 0, space 0, times 0 [ 235.716135][ T9234] CPU: 0 PID: 9234 Comm: syz.2.1322 Not tainted syzkaller #0 [ 235.723553][ T9234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.733623][ T9234] Call Trace: [ 235.736912][ T9234] [ 235.739852][ T9234] dump_stack_lvl+0x18c/0x250 [ 235.744559][ T9234] ? show_regs_print_info+0x20/0x20 [ 235.749781][ T9234] ? load_image+0x420/0x420 [ 235.754302][ T9234] ? verify_lock_unused+0x140/0x140 [ 235.759525][ T9234] ? verify_lock_unused+0x140/0x140 [ 235.764757][ T9234] should_fail_ex+0x39d/0x4d0 [ 235.769463][ T9234] should_failslab+0x9/0x20 [ 235.773986][ T9234] slab_pre_alloc_hook+0x59/0x310 [ 235.779041][ T9234] ? sctp_sched_prio_set+0x3ec/0x9b0 [ 235.784354][ T9234] __kmem_cache_alloc_node+0x53/0x250 [ 235.789756][ T9234] ? sctp_sched_prio_set+0x3ec/0x9b0 [ 235.795074][ T9234] kmalloc_trace+0x2a/0xe0 [ 235.799516][ T9234] sctp_sched_prio_set+0x3ec/0x9b0 [ 235.800183][ T9238] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1323'. [ 235.804649][ T9234] sctp_sched_set_sched+0x3ab/0x750 [ 235.804723][ T9234] sctp_setsockopt_scheduler+0x493/0x6f0 [ 235.804754][ T9234] sctp_setsockopt+0x252/0x11e0 [ 235.804775][ T9234] ? sock_common_recvmsg+0x190/0x190 [ 235.804795][ T9234] do_sock_setsockopt+0x175/0x1a0 [ 235.839944][ T9234] ? __fdget+0x180/0x210 [ 235.844208][ T9234] __x64_sys_setsockopt+0x182/0x200 [ 235.849436][ T9234] do_syscall_64+0x55/0xb0 [ 235.853871][ T9234] ? clear_bhb_loop+0x40/0x90 [ 235.858566][ T9234] ? clear_bhb_loop+0x40/0x90 [ 235.863264][ T9234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.869181][ T9234] RIP: 0033:0x7fcde799ce59 [ 235.873614][ T9234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.893240][ T9234] RSP: 002b:00007fcde5bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 235.901674][ T9234] RAX: ffffffffffffffda RBX: 00007fcde7c16090 RCX: 00007fcde799ce59 [ 235.909660][ T9234] RDX: 000000000000007b RSI: 0000000000000084 RDI: 0000000000000003 [ 235.917649][ T9234] RBP: 00007fcde5bd5090 R08: 0000000000000008 R09: 0000000000000000 [ 235.925633][ T9234] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.933618][ T9234] R13: 00007fcde7c16128 R14: 00007fcde7c16090 R15: 00007ffe927cf7d8 [ 235.941623][ T9234] [ 236.640271][ T9252] netlink: 'syz.3.1329': attribute type 10 has an invalid length. [ 236.663968][ T9255] FAULT_INJECTION: forcing a failure. [ 236.663968][ T9255] name failslab, interval 1, probability 0, space 0, times 0 [ 236.676723][ T9255] CPU: 1 PID: 9255 Comm: syz.2.1330 Not tainted syzkaller #0 [ 236.684111][ T9255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 236.694183][ T9255] Call Trace: [ 236.697476][ T9255] [ 236.700423][ T9255] dump_stack_lvl+0x18c/0x250 [ 236.702560][ T9252] team0: Port device geneve1 added [ 236.705106][ T9255] ? lock_chain_count+0x20/0x20 [ 236.705140][ T9255] ? show_regs_print_info+0x20/0x20 [ 236.705160][ T9255] ? load_image+0x420/0x420 [ 236.705182][ T9255] ? finish_task_switch+0x326/0x8f0 [ 236.705203][ T9255] should_fail_ex+0x39d/0x4d0 [ 236.705234][ T9255] should_failslab+0x9/0x20 [ 236.739165][ T9255] slab_pre_alloc_hook+0x59/0x310 [ 236.744190][ T9255] kmem_cache_alloc+0x5a/0x2d0 [ 236.748961][ T9255] ? skb_clone+0x1eb/0x370 [ 236.753373][ T9255] skb_clone+0x1eb/0x370 [ 236.757615][ T9255] bpf_clone_redirect+0x167/0x4a0 [ 236.762638][ T9255] ? bpf_test_run+0x174/0x870 [ 236.767318][ T9255] bpf_prog_c6f54bbad6dab1ee+0x5e/0x63 [ 236.772778][ T9255] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 236.778767][ T9255] ? preempt_schedule+0xc0/0xd0 [ 236.783601][ T9255] ? bpf_test_run+0x174/0x870 [ 236.788272][ T9255] ? preempt_schedule_common+0x82/0xc0 [ 236.793723][ T9255] ? schedule_preempt_disabled+0x20/0x20 [ 236.799339][ T9255] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 236.805305][ T9255] ? lockdep_softirqs_on+0x580/0x580 [ 236.810596][ T9255] ? lock_chain_count+0x20/0x20 [ 236.815434][ T9255] ? preempt_schedule_thunk+0x1a/0x30 [ 236.820798][ T9255] ? __local_bh_disable_ip+0x108/0x1a0 [ 236.826328][ T9255] ? __cant_sleep+0x220/0x220 [ 236.830993][ T9255] ? __local_bh_enable_ip+0x14b/0x1c0 [ 236.836352][ T9255] ? _local_bh_enable+0xa0/0xa0 [ 236.841189][ T9255] ? bpf_test_run+0x174/0x870 [ 236.845862][ T9255] ? kvm_sched_clock_read+0x11/0x20 [ 236.851050][ T9255] bpf_test_run+0x4fa/0x870 [ 236.855562][ T9255] ? bpf_test_run+0x174/0x870 [ 236.860239][ T9255] ? dst_hold+0x70/0x70 [ 236.864386][ T9255] ? eth_get_headlen+0x210/0x210 [ 236.869314][ T9255] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 236.874686][ T9255] ? cpu_online+0x60/0x60 [ 236.879001][ T9255] bpf_prog_test_run+0x321/0x390 [ 236.883924][ T9255] __sys_bpf+0x49d/0x890 [ 236.888167][ T9255] ? bpf_link_show_fdinfo+0x390/0x390 [ 236.893550][ T9255] ? lock_chain_count+0x20/0x20 [ 236.898396][ T9255] __x64_sys_bpf+0x7c/0x90 [ 236.902799][ T9255] do_syscall_64+0x55/0xb0 [ 236.907211][ T9255] ? clear_bhb_loop+0x40/0x90 [ 236.911879][ T9255] ? clear_bhb_loop+0x40/0x90 [ 236.916557][ T9255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.922440][ T9255] RIP: 0033:0x7fcde799ce59 [ 236.926841][ T9255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.946432][ T9255] RSP: 002b:00007fcde5bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.954840][ T9255] RAX: ffffffffffffffda RBX: 00007fcde7c15fa0 RCX: 00007fcde799ce59 [ 236.962812][ T9255] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 236.970769][ T9255] RBP: 00007fcde5bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 236.978723][ T9255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.986682][ T9255] R13: 00007fcde7c16038 R14: 00007fcde7c15fa0 R15: 00007ffe927cf7d8 [ 236.994661][ T9255] [ 237.134732][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 237.493722][ T9262] netlink: 'syz.3.1333': attribute type 46 has an invalid length. [ 237.537339][ T9262] netlink: 'syz.3.1333': attribute type 46 has an invalid length. [ 237.762365][ T9270] netlink: 'syz.3.1335': attribute type 10 has an invalid length. [ 237.784720][ T9270] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1335'. [ 237.827971][ T9270] À: port 1(vlan0) entered disabled state [ 237.852961][ T9270] vlan0 (unregistering): left allmulticast mode [ 237.860605][ T9270] veth0_vlan: left allmulticast mode [ 237.866323][ T9270] vlan0 (unregistering): left promiscuous mode [ 237.872944][ T9270] À: port 1(vlan0) entered disabled state [ 237.891930][ T9275] FAULT_INJECTION: forcing a failure. [ 237.891930][ T9275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.905418][ T9275] CPU: 0 PID: 9275 Comm: syz.0.1336 Not tainted syzkaller #0 [ 237.912802][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.922851][ T9275] Call Trace: [ 237.926133][ T9275] [ 237.929063][ T9275] dump_stack_lvl+0x18c/0x250 [ 237.933734][ T9275] ? show_regs_print_info+0x20/0x20 [ 237.938926][ T9275] ? load_image+0x420/0x420 [ 237.943415][ T9275] ? __lock_acquire+0x7d40/0x7d40 [ 237.948442][ T9275] ? snprintf+0xe9/0x140 [ 237.952683][ T9275] should_fail_ex+0x39d/0x4d0 [ 237.957355][ T9275] _copy_to_user+0x2f/0xa0 [ 237.961763][ T9275] simple_read_from_buffer+0xe7/0x150 [ 237.967155][ T9275] proc_fail_nth_read+0x1e8/0x260 [ 237.972187][ T9275] ? proc_fault_inject_write+0x360/0x360 [ 237.977810][ T9275] ? fsnotify_perm+0x271/0x5e0 [ 237.982560][ T9275] ? proc_fault_inject_write+0x360/0x360 [ 237.988197][ T9275] vfs_read+0x28b/0x970 [ 237.992363][ T9275] ? kernel_read+0x1e0/0x1e0 [ 237.996947][ T9275] ? __fget_files+0x28/0x4b0 [ 238.001524][ T9275] ? __fget_files+0x28/0x4b0 [ 238.006114][ T9275] ? __fget_files+0x43d/0x4b0 [ 238.010803][ T9275] ? __fdget_pos+0x2a3/0x330 [ 238.015383][ T9275] ? ksys_read+0x75/0x260 [ 238.019711][ T9275] ksys_read+0x150/0x260 [ 238.023952][ T9275] ? vfs_write+0x990/0x990 [ 238.028369][ T9275] ? lockdep_hardirqs_on+0x98/0x150 [ 238.033578][ T9275] do_syscall_64+0x55/0xb0 [ 238.037984][ T9275] ? clear_bhb_loop+0x40/0x90 [ 238.042644][ T9275] ? clear_bhb_loop+0x40/0x90 [ 238.047317][ T9275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.053216][ T9275] RIP: 0033:0x7f463a75d68e [ 238.057616][ T9275] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 238.077219][ T9275] RSP: 002b:00007f463b5c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 238.085642][ T9275] RAX: ffffffffffffffda RBX: 00007f463b5c66c0 RCX: 00007f463a75d68e [ 238.093615][ T9275] RDX: 000000000000000f RSI: 00007f463b5c60a0 RDI: 0000000000000004 [ 238.101572][ T9275] RBP: 00007f463b5c6090 R08: 0000000000000000 R09: 0000000000000000 [ 238.109532][ T9275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.117491][ T9275] R13: 00007f463aa16038 R14: 00007f463aa15fa0 R15: 00007fff51f64508 [ 238.125483][ T9275] [ 238.403986][ T9282] delete_channel: no stack [ 238.928659][ T9294] netlink: 'syz.2.1344': attribute type 46 has an invalid length. [ 238.937643][ T9294] netlink: 'syz.2.1344': attribute type 46 has an invalid length. [ 239.072825][ T9281] netlink: 'syz.0.1339': attribute type 1 has an invalid length. [ 239.127802][ T9281] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1339'. [ 240.091668][ T9312] netlink: 2058 bytes leftover after parsing attributes in process `syz.3.1350'. [ 241.899298][ T9347] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1362'. [ 241.927718][ T9347] netlink: zone id is out of range [ 241.933902][ T9347] netlink: del zone limit has 8 unknown bytes [ 241.960803][ T9347] netlink: 'syz.2.1362': attribute type 10 has an invalid length. [ 242.020692][ T9347] team0: Device wg1 is of different type [ 242.276888][ T9353] sock: sock_set_timeout: `syz.2.1365' (pid 9353) tries to set negative timeout [ 242.295956][ T9353] netlink: 'syz.2.1365': attribute type 15 has an invalid length. [ 242.304904][ T9353] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1365'. [ 242.353260][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1373'. [ 242.760478][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1367'. [ 242.835254][ T9367] netlink: 'syz.3.1369': attribute type 10 has an invalid length. [ 242.909385][ T9368] netlink: 'syz.3.1369': attribute type 3 has an invalid length. [ 242.929541][ T9368] netlink: 'syz.3.1369': attribute type 6 has an invalid length. [ 242.952251][ T9368] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.1369'. [ 243.231452][ T9367] bridge0: port 4(hsr0) entered disabled state [ 243.237953][ T9367] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.245643][ T9367] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.345642][ T9367] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 243.398430][ T9367] bridge0: port 4(hsr0) entered blocking state [ 243.404768][ T9367] bridge0: port 4(hsr0) entered forwarding state [ 243.411397][ T9367] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.418605][ T9367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.426142][ T9367] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.433326][ T9367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.473732][ T9367] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 243.486674][ T9372] netlink: 'syz.2.1370': attribute type 27 has an invalid length. [ 243.529451][ T9372] netlink: 'syz.2.1370': attribute type 4 has an invalid length. [ 243.540218][ T9372] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1370'. [ 243.983560][ T9381] sctp: [Deprecated]: syz.2.1374 (pid 9381) Use of int in maxseg socket option. [ 243.983560][ T9381] Use struct sctp_assoc_value instead [ 244.657714][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1375'. [ 244.792856][ T9390] netlink: 'syz.1.1375': attribute type 1 has an invalid length. [ 244.908674][ T9395] netlink: 'syz.3.1377': attribute type 21 has an invalid length. [ 245.430790][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1382'. [ 245.919150][ T9411] netlink: 'syz.3.1385': attribute type 21 has an invalid length. [ 245.931269][ T9411] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1385'. [ 245.962239][ T9411] netlink: 'syz.3.1385': attribute type 10 has an invalid length. [ 245.979537][ T9411] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1385'. [ 246.637660][ T9418] netlink: 'syz.3.1388': attribute type 1 has an invalid length. [ 247.470895][ T9433] __nla_validate_parse: 3 callbacks suppressed [ 247.470926][ T9433] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1391'. [ 247.986737][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1392'. [ 248.498041][ T9449] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1394'. [ 249.506110][ T9460] validate_nla: 2 callbacks suppressed [ 249.506127][ T9460] netlink: 'syz.0.1397': attribute type 21 has an invalid length. [ 249.520422][ T9460] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1397'. [ 249.527712][ T9457] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1396'. [ 249.538144][ T9460] netlink: 'syz.0.1397': attribute type 10 has an invalid length. [ 249.562695][ T9460] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1397'. [ 250.001822][ T6217] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 250.230554][ T9468] sctp: [Deprecated]: syz.1.1399 (pid 9468) Use of int in maxseg socket option. [ 250.230554][ T9468] Use struct sctp_assoc_value instead [ 250.852941][ T9470] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1402'. [ 250.933620][ T9476] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1404'. [ 251.743744][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'. [ 251.967955][ T9485] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1408'. [ 252.806315][ T9497] netlink: 'syz.2.1413': attribute type 21 has an invalid length. [ 252.814197][ T9497] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1413'. [ 252.865549][ T9497] netlink: 'syz.2.1413': attribute type 10 has an invalid length. [ 252.876246][ T9497] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1413'. [ 253.734255][ T9503] sctp: [Deprecated]: syz.3.1414 (pid 9503) Use of int in maxseg socket option. [ 253.734255][ T9503] Use struct sctp_assoc_value instead [ 253.892320][ T9508] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1415'. [ 254.061307][ T9511] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1416'. [ 254.446913][ T9517] netlink: 'syz.0.1418': attribute type 10 has an invalid length. [ 254.535879][ T9517] netlink: 'syz.0.1418': attribute type 3 has an invalid length. [ 254.578399][ T9517] netlink: 'syz.0.1418': attribute type 6 has an invalid length. [ 254.644834][ T9517] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.1418'. [ 255.333522][ T9535] sctp: [Deprecated]: syz.2.1424 (pid 9535) Use of int in max_burst socket option deprecated. [ 255.333522][ T9535] Use struct sctp_assoc_value instead [ 255.720351][ T9541] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1424'. [ 255.871225][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.887517][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.903236][ T9541] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 256.392923][ T9553] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1430'. [ 256.402881][ T9553] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 256.903099][ T9560] netlink: 'syz.2.1431': attribute type 10 has an invalid length. [ 257.079544][ T9560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.102026][ T9560] team0: Port device bond0 added [ 257.290389][ T9565] netlink: 'syz.1.1434': attribute type 10 has an invalid length. [ 258.565547][ T9571] ref_ctr_offset mismatch. inode: 0x6fc offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 258.644216][ T9576] IPv6: Can't replace route, no match found [ 259.610270][ T9610] raw_sendmsg: syz.1.1452 forgot to set AF_INET. Fix it! [ 259.763971][ T9619] netlink: 826 bytes leftover after parsing attributes in process `syz.3.1455'. [ 260.134934][ T9630] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1459'. [ 260.423948][ T9640] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1464'. [ 260.679488][ T9646] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1466'. [ 260.693194][ T9646] netlink: 'syz.1.1466': attribute type 21 has an invalid length. [ 260.993824][ T9658] netlink: 'syz.0.1477': attribute type 29 has an invalid length. [ 261.008729][ T9658] netlink: 'syz.0.1477': attribute type 29 has an invalid length. [ 261.034345][ T9658] netlink: 'syz.0.1477': attribute type 29 has an invalid length. [ 261.505008][ T9668] netlink: 'syz.0.1473': attribute type 10 has an invalid length. [ 261.513164][ T9668] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1473'. [ 261.576397][ T9668] vlan0 (unregistering): left allmulticast mode [ 261.582795][ T9668] veth0_vlan: left allmulticast mode [ 261.589034][ T9668] vlan0 (unregistering): left promiscuous mode [ 261.596679][ T9668] À: port 1(vlan0) entered disabled state [ 262.705895][ T9675] netlink: 703 bytes leftover after parsing attributes in process `syz.0.1475'. [ 262.722087][ T9682] FAULT_INJECTION: forcing a failure. [ 262.722087][ T9682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.737010][ T9682] CPU: 1 PID: 9682 Comm: syz.1.1478 Not tainted syzkaller #0 [ 262.744500][ T9682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.754641][ T9682] Call Trace: [ 262.757968][ T9682] [ 262.760945][ T9682] dump_stack_lvl+0x18c/0x250 [ 262.765700][ T9682] ? show_regs_print_info+0x20/0x20 [ 262.770958][ T9682] ? load_image+0x420/0x420 [ 262.775538][ T9682] ? __lock_acquire+0x7d40/0x7d40 [ 262.780625][ T9682] ? snprintf+0xe9/0x140 [ 262.784950][ T9682] should_fail_ex+0x39d/0x4d0 [ 262.789714][ T9682] _copy_to_user+0x2f/0xa0 [ 262.794193][ T9682] simple_read_from_buffer+0xe7/0x150 [ 262.799649][ T9682] proc_fail_nth_read+0x1e8/0x260 [ 262.804747][ T9682] ? proc_fault_inject_write+0x360/0x360 [ 262.810462][ T9682] ? fsnotify_perm+0x271/0x5e0 [ 262.815278][ T9682] ? proc_fault_inject_write+0x360/0x360 [ 262.820974][ T9682] vfs_read+0x28b/0x970 [ 262.825220][ T9682] ? kernel_read+0x1e0/0x1e0 [ 262.829872][ T9682] ? __fget_files+0x28/0x4b0 [ 262.834530][ T9682] ? __fget_files+0x28/0x4b0 [ 262.839187][ T9682] ? __fget_files+0x43d/0x4b0 [ 262.843967][ T9682] ? __fdget_pos+0x2a3/0x330 [ 262.848601][ T9682] ? ksys_read+0x75/0x260 [ 262.853001][ T9682] ksys_read+0x150/0x260 [ 262.857316][ T9682] ? vfs_write+0x990/0x990 [ 262.861813][ T9682] ? lockdep_hardirqs_on+0x98/0x150 [ 262.867098][ T9682] do_syscall_64+0x55/0xb0 [ 262.871559][ T9682] ? clear_bhb_loop+0x40/0x90 [ 262.876280][ T9682] ? clear_bhb_loop+0x40/0x90 [ 262.881011][ T9682] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.886954][ T9682] RIP: 0033:0x7ff05155d68e [ 262.891422][ T9682] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 262.911073][ T9682] RSP: 002b:00007ff0523c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 262.919553][ T9682] RAX: ffffffffffffffda RBX: 00007ff0523c16c0 RCX: 00007ff05155d68e [ 262.927570][ T9682] RDX: 000000000000000f RSI: 00007ff0523c10a0 RDI: 0000000000000005 [ 262.935586][ T9682] RBP: 00007ff0523c1090 R08: 0000000000000000 R09: 0000000000000000 [ 262.943598][ T9682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.951611][ T9682] R13: 00007ff051816038 R14: 00007ff051815fa0 R15: 00007ffd12147ce8 [ 262.959722][ T9682] [ 263.103040][ T9686] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 263.368765][ T9699] netlink: 'syz.1.1485': attribute type 10 has an invalid length. [ 263.384670][ T9699] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1485'. [ 263.876085][ T9712] netlink: 'syz.0.1488': attribute type 9 has an invalid length. [ 263.887973][ T9712] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1488'. [ 264.008750][ T9721] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.1490'. [ 264.328432][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'. [ 264.893086][ T9744] IPv6: Can't replace route, no match found [ 265.382039][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1501'. [ 265.582916][ T9755] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.696127][ T9761] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1507'. [ 265.708508][ T9761] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1507'. [ 265.720556][ T9761] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1507'. [ 265.753705][ T9763] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 265.926920][ T9770] netlink: 'syz.1.1509': attribute type 21 has an invalid length. [ 266.214108][ T9775] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1510'. [ 266.224251][ T9775] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.1510'. [ 266.950275][ T9798] netlink: 'syz.0.1518': attribute type 13 has an invalid length. [ 266.958517][ T9798] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1518'. [ 267.048272][ T9801] FAULT_INJECTION: forcing a failure. [ 267.048272][ T9801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.062087][ T9801] CPU: 0 PID: 9801 Comm: syz.2.1520 Not tainted syzkaller #0 [ 267.069496][ T9801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 267.079555][ T9801] Call Trace: [ 267.082844][ T9801] [ 267.085796][ T9801] dump_stack_lvl+0x18c/0x250 [ 267.090495][ T9801] ? show_regs_print_info+0x20/0x20 [ 267.095713][ T9801] ? load_image+0x420/0x420 [ 267.100242][ T9801] ? __lock_acquire+0x7d40/0x7d40 [ 267.105292][ T9801] ? snprintf+0xe9/0x140 [ 267.109558][ T9801] should_fail_ex+0x39d/0x4d0 [ 267.114260][ T9801] _copy_to_user+0x2f/0xa0 [ 267.118696][ T9801] simple_read_from_buffer+0xe7/0x150 [ 267.124101][ T9801] proc_fail_nth_read+0x1e8/0x260 [ 267.129157][ T9801] ? proc_fault_inject_write+0x360/0x360 [ 267.134822][ T9801] ? fsnotify_perm+0x271/0x5e0 [ 267.139604][ T9801] ? proc_fault_inject_write+0x360/0x360 [ 267.145246][ T9801] vfs_read+0x28b/0x970 [ 267.149418][ T9801] ? kernel_read+0x1e0/0x1e0 [ 267.154014][ T9801] ? __fget_files+0x28/0x4b0 [ 267.158603][ T9801] ? __fget_files+0x28/0x4b0 [ 267.163194][ T9801] ? __fget_files+0x43d/0x4b0 [ 267.167880][ T9801] ? __fdget_pos+0x2a3/0x330 [ 267.172470][ T9801] ? ksys_read+0x75/0x260 [ 267.176801][ T9801] ksys_read+0x150/0x260 [ 267.181043][ T9801] ? vfs_write+0x990/0x990 [ 267.185462][ T9801] ? lockdep_hardirqs_on+0x98/0x150 [ 267.190666][ T9801] do_syscall_64+0x55/0xb0 [ 267.195078][ T9801] ? clear_bhb_loop+0x40/0x90 [ 267.199751][ T9801] ? clear_bhb_loop+0x40/0x90 [ 267.204432][ T9801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.210330][ T9801] RIP: 0033:0x7fcde795d68e [ 267.214745][ T9801] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 267.234353][ T9801] RSP: 002b:00007fcde5bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 267.242771][ T9801] RAX: ffffffffffffffda RBX: 00007fcde5bf66c0 RCX: 00007fcde795d68e [ 267.250739][ T9801] RDX: 000000000000000f RSI: 00007fcde5bf60a0 RDI: 0000000000000005 [ 267.258712][ T9801] RBP: 00007fcde5bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 267.266679][ T9801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.274648][ T9801] R13: 00007fcde7c16038 R14: 00007fcde7c15fa0 R15: 00007ffe927cf7d8 [ 267.282627][ T9801] [ 267.721326][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1526'. [ 267.793283][ T9821] netlink: 'syz.1.1527': attribute type 12 has an invalid length. [ 267.806165][ T9821] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1527'. [ 268.197838][ T9827] netlink: 'syz.1.1529': attribute type 29 has an invalid length. [ 268.212550][ T9827] netlink: 'syz.1.1529': attribute type 29 has an invalid length. [ 268.226329][ T9827] netlink: 'syz.1.1529': attribute type 29 has an invalid length. [ 268.237378][ T9827] netlink: 'syz.1.1529': attribute type 29 has an invalid length. [ 268.459870][ T9836] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 268.803901][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1535'. [ 269.094130][ T9848] FAULT_INJECTION: forcing a failure. [ 269.094130][ T9848] name failslab, interval 1, probability 0, space 0, times 0 [ 269.107637][ T9848] CPU: 1 PID: 9848 Comm: syz.1.1537 Not tainted syzkaller #0 [ 269.115045][ T9848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.125119][ T9848] Call Trace: [ 269.128412][ T9848] [ 269.131351][ T9848] dump_stack_lvl+0x18c/0x250 [ 269.136037][ T9848] ? show_regs_print_info+0x20/0x20 [ 269.141255][ T9848] ? load_image+0x420/0x420 [ 269.145778][ T9848] ? __might_sleep+0xe0/0xe0 [ 269.150377][ T9848] ? __lock_acquire+0x7d40/0x7d40 [ 269.155410][ T9848] should_fail_ex+0x39d/0x4d0 [ 269.160103][ T9848] should_failslab+0x9/0x20 [ 269.164614][ T9848] slab_pre_alloc_hook+0x59/0x310 [ 269.169654][ T9848] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 269.175369][ T9848] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 269.181081][ T9848] __kmem_cache_alloc_node+0x53/0x250 [ 269.186458][ T9848] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 269.192171][ T9848] __kmalloc+0xa4/0x230 [ 269.196326][ T9848] tomoyo_realpath_from_path+0xe3/0x5d0 [ 269.201874][ T9848] tomoyo_path_number_perm+0x248/0x620 [ 269.207325][ T9848] ? tomoyo_path_number_perm+0x217/0x620 [ 269.212953][ T9848] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 269.218406][ T9848] ? ksys_write+0x1c4/0x260 [ 269.222929][ T9848] ? __fget_files+0x28/0x4b0 [ 269.227512][ T9848] ? __fget_files+0x28/0x4b0 [ 269.232108][ T9848] security_file_ioctl+0x70/0xa0 [ 269.237043][ T9848] __se_sys_ioctl+0x48/0x170 [ 269.241639][ T9848] do_syscall_64+0x55/0xb0 [ 269.246052][ T9848] ? clear_bhb_loop+0x40/0x90 [ 269.250719][ T9848] ? clear_bhb_loop+0x40/0x90 [ 269.255388][ T9848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.261278][ T9848] RIP: 0033:0x7ff05159ce59 [ 269.265689][ T9848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.285287][ T9848] RSP: 002b:00007ff0523c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.293693][ T9848] RAX: ffffffffffffffda RBX: 00007ff051815fa0 RCX: 00007ff05159ce59 [ 269.301657][ T9848] RDX: 0000200000000200 RSI: 0000000000008994 RDI: 0000000000000003 [ 269.309627][ T9848] RBP: 00007ff0523c1090 R08: 0000000000000000 R09: 0000000000000000 [ 269.317590][ T9848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.325559][ T9848] R13: 00007ff051816038 R14: 00007ff051815fa0 R15: 00007ffd12147ce8 [ 269.333535][ T9848] [ 269.350373][ T9848] ERROR: Out of memory at tomoyo_realpath_from_path. [ 269.783561][ T9860] FAULT_INJECTION: forcing a failure. [ 269.783561][ T9860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.809765][ T9860] CPU: 0 PID: 9860 Comm: syz.2.1542 Not tainted syzkaller #0 [ 269.817176][ T9860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.827246][ T9860] Call Trace: [ 269.830541][ T9860] [ 269.833482][ T9860] dump_stack_lvl+0x18c/0x250 [ 269.838188][ T9860] ? show_regs_print_info+0x20/0x20 [ 269.843409][ T9860] ? load_image+0x420/0x420 [ 269.847928][ T9860] ? __might_fault+0xaa/0x120 [ 269.852624][ T9860] ? __lock_acquire+0x7d40/0x7d40 [ 269.857681][ T9860] should_fail_ex+0x39d/0x4d0 [ 269.862389][ T9860] _copy_from_user+0x2f/0xe0 [ 269.867007][ T9860] sock_do_ioctl+0x190/0x310 [ 269.871623][ T9860] ? sock_show_fdinfo+0xb0/0xb0 [ 269.876511][ T9860] sock_ioctl+0x5ba/0x7e0 [ 269.880863][ T9860] ? sock_poll+0x3e0/0x3e0 [ 269.885311][ T9860] ? bpf_lsm_file_ioctl+0x9/0x10 [ 269.890269][ T9860] ? security_file_ioctl+0x80/0xa0 [ 269.895400][ T9860] ? sock_poll+0x3e0/0x3e0 [ 269.899842][ T9860] __se_sys_ioctl+0xfd/0x170 [ 269.904456][ T9860] do_syscall_64+0x55/0xb0 [ 269.908892][ T9860] ? clear_bhb_loop+0x40/0x90 [ 269.913582][ T9860] ? clear_bhb_loop+0x40/0x90 [ 269.918274][ T9860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.924192][ T9860] RIP: 0033:0x7fcde799ce59 [ 269.928621][ T9860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.948243][ T9860] RSP: 002b:00007fcde5bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.956679][ T9860] RAX: ffffffffffffffda RBX: 00007fcde7c15fa0 RCX: 00007fcde799ce59 [ 269.964667][ T9860] RDX: 0000200000000080 RSI: 0000000000008924 RDI: 0000000000000005 [ 269.972657][ T9860] RBP: 00007fcde5bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 269.980644][ T9860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.988633][ T9860] R13: 00007fcde7c16038 R14: 00007fcde7c15fa0 R15: 00007ffe927cf7d8 [ 269.996635][ T9860] [ 270.366516][ T9878] IPv6: Can't replace route, no match found [ 270.468554][ T9885] netlink: 'syz.0.1551': attribute type 29 has an invalid length. [ 270.488159][ T9885] netlink: 'syz.0.1551': attribute type 29 has an invalid length. [ 270.498200][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1550'. [ 270.536359][ T9885] netlink: 'syz.0.1551': attribute type 29 has an invalid length. [ 270.562562][ T9885] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1551'. [ 270.811079][ T9890] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1552'. [ 271.145415][ T9904] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1557'. [ 271.209231][ T9907] validate_nla: 2 callbacks suppressed [ 271.209247][ T9907] netlink: 'syz.3.1558': attribute type 10 has an invalid length. [ 271.498217][ T9911] netlink: 'syz.1.1560': attribute type 10 has an invalid length. [ 271.506653][ T9911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1560'. [ 271.518348][ T9911] batman_adv: batadv0: Adding interface: vlan1 [ 271.524844][ T9911] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.551950][ T9911] batman_adv: batadv0: Interface activated: vlan1 [ 271.958025][ T9928] netlink: 'syz.2.1566': attribute type 10 has an invalid length. [ 271.970798][ T9928] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1566'. [ 271.983205][ T9928] FAULT_INJECTION: forcing a failure. [ 271.983205][ T9928] name failslab, interval 1, probability 0, space 0, times 0 [ 272.015516][ T9928] CPU: 1 PID: 9928 Comm: syz.2.1566 Not tainted syzkaller #0 [ 272.022908][ T9928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 272.032970][ T9928] Call Trace: [ 272.036255][ T9928] [ 272.039199][ T9928] dump_stack_lvl+0x18c/0x250 [ 272.043892][ T9928] ? show_regs_print_info+0x20/0x20 [ 272.049102][ T9928] ? load_image+0x420/0x420 [ 272.053625][ T9928] ? __might_sleep+0xe0/0xe0 [ 272.058241][ T9928] ? __lock_acquire+0x7d40/0x7d40 [ 272.063286][ T9928] should_fail_ex+0x39d/0x4d0 [ 272.067987][ T9928] should_failslab+0x9/0x20 [ 272.072505][ T9928] slab_pre_alloc_hook+0x59/0x310 [ 272.077551][ T9928] kmem_cache_alloc_node+0x60/0x320 [ 272.082759][ T9928] ? __alloc_skb+0x103/0x2c0 [ 272.087363][ T9928] __alloc_skb+0x103/0x2c0 [ 272.091796][ T9928] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 272.097102][ T9928] rtmsg_ifinfo+0x8c/0x1a0 [ 272.101539][ T9928] netdev_state_change+0xfe/0x170 [ 272.106582][ T9928] ? netdev_features_change+0xd0/0xd0 [ 272.111973][ T9928] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 272.117895][ T9928] ? mutex_is_locked+0x12/0x40 [ 272.122674][ T9928] ? rtnl_is_locked+0x15/0x20 [ 272.127356][ T9928] do_setlink+0x84a/0x4130 [ 272.131795][ T9928] ? load_image+0x420/0x420 [ 272.136306][ T9928] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 272.142463][ T9928] ? rcu_is_watching+0x15/0xb0 [ 272.147226][ T9928] ? do_trace_netlink_extack+0x7e/0x1a0 [ 272.152771][ T9928] ? __nla_validate_parse+0x262c/0x2ea0 [ 272.158329][ T9928] ? perf_trace_preemptirq_template+0xac/0x330 [ 272.164484][ T9928] ? __nla_validate+0x50/0x50 [ 272.169161][ T9928] ? mark_lock+0x94/0x320 [ 272.173487][ T9928] ? __lock_acquire+0x1347/0x7d40 [ 272.178516][ T9928] ? validate_linkmsg+0x719/0x910 [ 272.183538][ T9928] rtnl_setlink+0x3d9/0x4e0 [ 272.188042][ T9928] ? rtnl_dump_ifinfo+0x13c0/0x13c0 [ 272.193235][ T9928] ? __lock_acquire+0x1273/0x7d40 [ 272.198263][ T9928] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 272.204464][ T9928] ? lock_is_held_type+0x13e/0x190 [ 272.209579][ T9928] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 272.214690][ T9928] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 272.219800][ T9928] ? rtnl_dump_ifinfo+0x13c0/0x13c0 [ 272.224992][ T9928] rtnetlink_rcv_msg+0x869/0xfa0 [ 272.229934][ T9928] ? lockdep_hardirqs_on+0x98/0x150 [ 272.235136][ T9928] ? rtnetlink_bind+0x80/0x80 [ 272.239811][ T9928] ? perf_trace_preemptirq_template+0xac/0x330 [ 272.245969][ T9928] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 272.251947][ T9928] ? lock_chain_count+0x20/0x20 [ 272.256796][ T9928] ? __local_bh_enable_ip+0x13a/0x1c0 [ 272.262161][ T9928] ? lockdep_hardirqs_on+0x98/0x150 [ 272.267360][ T9928] ? __local_bh_enable_ip+0x13a/0x1c0 [ 272.272728][ T9928] ? _local_bh_enable+0xa0/0xa0 [ 272.277577][ T9928] ? __dev_queue_xmit+0x265/0x3660 [ 272.282685][ T9928] ? __dev_queue_xmit+0x265/0x3660 [ 272.287804][ T9928] ? __dev_queue_xmit+0x1b2c/0x3660 [ 272.293008][ T9928] ? __dev_queue_xmit+0x265/0x3660 [ 272.298125][ T9928] ? ref_tracker_free+0x690/0x840 [ 272.303153][ T9928] netlink_rcv_skb+0x241/0x4d0 [ 272.307920][ T9928] ? rtnetlink_bind+0x80/0x80 [ 272.312597][ T9928] ? netlink_ack+0x1180/0x1180 [ 272.317366][ T9928] ? __lock_acquire+0x7d40/0x7d40 [ 272.322390][ T9928] ? netlink_deliver_tap+0x2e/0x1b0 [ 272.327585][ T9928] netlink_unicast+0x751/0x8d0 [ 272.332356][ T9928] netlink_sendmsg+0x8d0/0xbf0 [ 272.337124][ T9928] ? netlink_getsockopt+0x590/0x590 [ 272.342321][ T9928] ? aa_sock_msg_perm+0x94/0x150 [ 272.347261][ T9928] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 272.352541][ T9928] ? security_socket_sendmsg+0x80/0xa0 [ 272.357997][ T9928] ? netlink_getsockopt+0x590/0x590 [ 272.363194][ T9928] ____sys_sendmsg+0x5ba/0x960 [ 272.367964][ T9928] ? __asan_memset+0x22/0x40 [ 272.372551][ T9928] ? __sys_sendmsg_sock+0x30/0x30 [ 272.377573][ T9928] ? __import_iovec+0x5f2/0x850 [ 272.382424][ T9928] ? import_iovec+0x73/0xa0 [ 272.386926][ T9928] ___sys_sendmsg+0x2a6/0x360 [ 272.391604][ T9928] ? __sys_sendmsg+0x2a0/0x2a0 [ 272.396384][ T9928] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 272.402643][ T9928] __se_sys_sendmsg+0x1c2/0x2b0 [ 272.407493][ T9928] ? __x64_sys_sendmsg+0x80/0x80 [ 272.412438][ T9928] ? lockdep_hardirqs_on+0x98/0x150 [ 272.417637][ T9928] do_syscall_64+0x55/0xb0 [ 272.422050][ T9928] ? clear_bhb_loop+0x40/0x90 [ 272.426722][ T9928] ? clear_bhb_loop+0x40/0x90 [ 272.431390][ T9928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.437279][ T9928] RIP: 0033:0x7fcde799ce59 [ 272.441691][ T9928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.461295][ T9928] RSP: 002b:00007fcde5bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.469703][ T9928] RAX: ffffffffffffffda RBX: 00007fcde7c15fa0 RCX: 00007fcde799ce59 [ 272.477670][ T9928] RDX: 0200000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 272.485633][ T9928] RBP: 00007fcde5bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 272.493595][ T9928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.501567][ T9928] R13: 00007fcde7c16038 R14: 00007fcde7c15fa0 R15: 00007ffe927cf7d8 [ 272.509550][ T9928] [ 272.868360][ T9939] IPv6: Can't replace route, no match found [ 273.337598][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1572'. [ 274.268596][ T9958] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1575'. [ 274.283589][ T9958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.334896][ T9978] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.956748][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1583'. [ 280.363201][T10000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1588'. [ 280.755239][T10008] FAULT_INJECTION: forcing a failure. [ 280.755239][T10008] name failslab, interval 1, probability 0, space 0, times 0 [ 280.768365][T10006] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1589'. [ 280.784894][T10008] CPU: 1 PID: 10008 Comm: syz.3.1590 Not tainted syzkaller #0 [ 280.792407][T10008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 280.802496][T10008] Call Trace: [ 280.805817][T10008] [ 280.808783][T10008] dump_stack_lvl+0x18c/0x250 [ 280.813524][T10008] ? show_regs_print_info+0x20/0x20 [ 280.818764][T10008] ? load_image+0x420/0x420 [ 280.823313][T10008] ? __local_bh_enable_ip+0x13a/0x1c0 [ 280.828735][T10008] ? lockdep_hardirqs_on+0x98/0x150 [ 280.833988][T10008] ? __local_bh_enable_ip+0x13a/0x1c0 [ 280.839423][T10008] should_fail_ex+0x39d/0x4d0 [ 280.844164][T10008] should_failslab+0x9/0x20 [ 280.848708][T10008] slab_pre_alloc_hook+0x59/0x310 [ 280.853771][T10008] ? sctp_get_port_local+0xe65/0x1620 [ 280.859191][T10008] ? sctp_add_bind_addr+0x8c/0x360 [ 280.864355][T10008] __kmem_cache_alloc_node+0x53/0x250 [ 280.869771][T10008] ? sctp_add_bind_addr+0x8c/0x360 [ 280.874920][T10008] kmalloc_trace+0x2a/0xe0 [ 280.879380][T10008] sctp_add_bind_addr+0x8c/0x360 [ 280.884332][T10008] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 280.889821][T10008] sctp_do_bind+0x616/0x990 [ 280.894373][T10008] sctp_connect_new_asoc+0x26a/0x6a0 [ 280.899688][T10008] ? __sctp_connect+0xd80/0xd80 [ 280.904560][T10008] ? __local_bh_enable_ip+0x13a/0x1c0 [ 280.909972][T10008] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 280.915536][T10008] ? security_sctp_bind_connect+0x89/0xb0 [ 280.921280][T10008] sctp_sendmsg+0x15d2/0x2910 [ 280.926005][T10008] ? sctp_getsockopt+0xb60/0xb60 [ 280.930966][T10008] ? aa_sk_perm+0x83c/0x970 [ 280.935504][T10008] ? aa_af_perm+0x330/0x330 [ 280.940015][T10008] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 280.946458][T10008] ? sock_rps_record_flow+0x19/0x3f0 [ 280.951765][T10008] ? inet_sendmsg+0xe9/0x2f0 [ 280.956374][T10008] ? inet_send_prepare+0x260/0x260 [ 280.961512][T10008] ____sys_sendmsg+0x5ba/0x960 [ 280.966290][T10008] ? __lock_acquire+0x7d40/0x7d40 [ 280.971351][T10008] ? __asan_memset+0x22/0x40 [ 280.975959][T10008] ? __sys_sendmsg_sock+0x30/0x30 [ 280.980997][T10008] ? __import_iovec+0x5f2/0x850 [ 280.985883][T10008] ? import_iovec+0x73/0xa0 [ 280.990414][T10008] ___sys_sendmsg+0x2a6/0x360 [ 280.995123][T10008] ? __sys_sendmsg+0x2a0/0x2a0 [ 280.999958][T10008] ? __lock_acquire+0x7d40/0x7d40 [ 281.005060][T10008] __se_sys_sendmsg+0x1c2/0x2b0 [ 281.009930][T10008] ? __x64_sys_sendmsg+0x80/0x80 [ 281.014934][T10008] ? lockdep_hardirqs_on+0x98/0x150 [ 281.020160][T10008] do_syscall_64+0x55/0xb0 [ 281.024598][T10008] ? clear_bhb_loop+0x40/0x90 [ 281.029288][T10008] ? clear_bhb_loop+0x40/0x90 [ 281.033985][T10008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.039894][T10008] RIP: 0033:0x7faf1a39ce59 [ 281.044329][T10008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.063950][T10008] RSP: 002b:00007faf1b30e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.072383][T10008] RAX: ffffffffffffffda RBX: 00007faf1a615fa0 RCX: 00007faf1a39ce59 [ 281.080376][T10008] RDX: 0000000004000044 RSI: 00002000000003c0 RDI: 0000000000000003 [ 281.088358][T10008] RBP: 00007faf1b30e090 R08: 0000000000000000 R09: 0000000000000000 [ 281.096339][T10008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.104323][T10008] R13: 00007faf1a616038 R14: 00007faf1a615fa0 R15: 00007ffe8cd2d9d8 [ 281.112348][T10008] [ 281.540156][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1592'. [ 281.630584][T10015] FAULT_INJECTION: forcing a failure. [ 281.630584][T10015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.678526][T10015] CPU: 0 PID: 10015 Comm: syz.3.1593 Not tainted syzkaller #0 [ 281.686049][T10015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.696140][T10015] Call Trace: [ 281.699454][T10015] [ 281.702419][T10015] dump_stack_lvl+0x18c/0x250 [ 281.707151][T10015] ? show_regs_print_info+0x20/0x20 [ 281.712392][T10015] ? load_image+0x420/0x420 [ 281.716939][T10015] ? __might_fault+0xaa/0x120 [ 281.721658][T10015] ? __lock_acquire+0x7d40/0x7d40 [ 281.726745][T10015] should_fail_ex+0x39d/0x4d0 [ 281.731487][T10015] _copy_from_iter+0x1d9/0x12e0 [ 281.736373][T10015] ? slab_post_alloc_hook+0x8a/0x4b0 [ 281.741699][T10015] ? __virt_addr_valid+0x18c/0x540 [ 281.746864][T10015] ? __lock_acquire+0x7d40/0x7d40 [ 281.751935][T10015] ? rcu_is_watching+0x15/0xb0 [ 281.756772][T10015] ? copyout_mc+0x70/0x70 [ 281.761145][T10015] ? __virt_addr_valid+0x18c/0x540 [ 281.766305][T10015] ? __virt_addr_valid+0x18c/0x540 [ 281.771460][T10015] ? __virt_addr_valid+0x469/0x540 [ 281.776622][T10015] ? __check_object_size+0x506/0xa20 [ 281.781962][T10015] netlink_sendmsg+0x76b/0xbf0 [ 281.786774][T10015] ? perf_trace_lock+0x304/0x3b0 [ 281.791781][T10015] ? netlink_getsockopt+0x590/0x590 [ 281.797020][T10015] ? aa_sock_msg_perm+0x94/0x150 [ 281.801980][T10015] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 281.807273][T10015] ? security_socket_sendmsg+0x80/0xa0 [ 281.812740][T10015] ? netlink_getsockopt+0x590/0x590 [ 281.817953][T10015] ____sys_sendmsg+0x5ba/0x960 [ 281.822752][T10015] ? __asan_memset+0x22/0x40 [ 281.827360][T10015] ? __sys_sendmsg_sock+0x30/0x30 [ 281.832393][T10015] ? __import_iovec+0x5f2/0x850 [ 281.837295][T10015] ? import_iovec+0x73/0xa0 [ 281.841819][T10015] ___sys_sendmsg+0x2a6/0x360 [ 281.846524][T10015] ? __sys_sendmsg+0x2a0/0x2a0 [ 281.851350][T10015] ? __lock_acquire+0x7d40/0x7d40 [ 281.856449][T10015] __se_sys_sendmsg+0x1c2/0x2b0 [ 281.861321][T10015] ? __x64_sys_sendmsg+0x80/0x80 [ 281.866311][T10015] ? lockdep_hardirqs_on+0x98/0x150 [ 281.871532][T10015] do_syscall_64+0x55/0xb0 [ 281.875963][T10015] ? clear_bhb_loop+0x40/0x90 [ 281.880649][T10015] ? clear_bhb_loop+0x40/0x90 [ 281.885343][T10015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.891255][T10015] RIP: 0033:0x7faf1a39ce59 [ 281.895681][T10015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.915294][T10015] RSP: 002b:00007faf1b30e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.923722][T10015] RAX: ffffffffffffffda RBX: 00007faf1a615fa0 RCX: 00007faf1a39ce59 [ 281.931704][T10015] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 281.939686][T10015] RBP: 00007faf1b30e090 R08: 0000000000000000 R09: 0000000000000000 [ 281.947666][T10015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.955648][T10015] R13: 00007faf1a616038 R14: 00007faf1a615fa0 R15: 00007ffe8cd2d9d8 [ 281.963663][T10015] [ 282.335955][T10028] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1596'. [ 282.742759][T10039] netlink: 'syz.0.1597': attribute type 10 has an invalid length. [ 282.776143][T10039] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1597'. [ 282.918274][T10039] team0: Port device bond0 removed [ 282.935211][T10039] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 282.951270][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1599'. [ 283.415198][T10051] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1601'. [ 283.541370][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1603'. [ 284.142926][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1608'. [ 285.259705][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1609'. [ 285.985548][T10091] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1611'. [ 286.466776][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1612'. [ 286.534252][T10100] netlink: 'syz.1.1613': attribute type 10 has an invalid length. [ 286.564963][T10100] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1613'. [ 286.600143][T10100] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 287.949439][T10113] __nla_validate_parse: 1 callbacks suppressed [ 287.949476][T10113] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1620'. [ 287.969348][T10113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.941576][T10140] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1627'. [ 289.157653][T10145] FAULT_INJECTION: forcing a failure. [ 289.157653][T10145] name failslab, interval 1, probability 0, space 0, times 0 [ 289.251028][T10145] CPU: 0 PID: 10145 Comm: syz.3.1632 Not tainted syzkaller #0 [ 289.258535][T10145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.268584][T10145] Call Trace: [ 289.271860][T10145] [ 289.274786][T10145] dump_stack_lvl+0x18c/0x250 [ 289.279465][T10145] ? show_regs_print_info+0x20/0x20 [ 289.284659][T10145] ? load_image+0x420/0x420 [ 289.289156][T10145] ? __local_bh_enable_ip+0x13a/0x1c0 [ 289.294532][T10145] ? lockdep_hardirqs_on+0x98/0x150 [ 289.299726][T10145] ? __local_bh_enable_ip+0x13a/0x1c0 [ 289.305097][T10145] should_fail_ex+0x39d/0x4d0 [ 289.309779][T10145] should_failslab+0x9/0x20 [ 289.314279][T10145] slab_pre_alloc_hook+0x59/0x310 [ 289.319300][T10145] ? sctp_get_port_local+0xe65/0x1620 [ 289.324668][T10145] ? sctp_add_bind_addr+0x8c/0x360 [ 289.329775][T10145] __kmem_cache_alloc_node+0x53/0x250 [ 289.335144][T10145] ? sctp_add_bind_addr+0x8c/0x360 [ 289.340254][T10145] kmalloc_trace+0x2a/0xe0 [ 289.344669][T10145] sctp_add_bind_addr+0x8c/0x360 [ 289.349598][T10145] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 289.355056][T10145] sctp_do_bind+0x616/0x990 [ 289.359565][T10145] sctp_connect_new_asoc+0x26a/0x6a0 [ 289.364848][T10145] ? __sctp_connect+0xd80/0xd80 [ 289.369692][T10145] ? __local_bh_enable_ip+0x13a/0x1c0 [ 289.375060][T10145] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 289.380603][T10145] ? security_sctp_bind_connect+0x89/0xb0 [ 289.386324][T10145] sctp_sendmsg+0x15d2/0x2910 [ 289.391003][T10145] ? sctp_getsockopt+0xb60/0xb60 [ 289.395938][T10145] ? aa_sk_perm+0x83c/0x970 [ 289.400437][T10145] ? aa_af_perm+0x330/0x330 [ 289.404932][T10145] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 289.411351][T10145] ? sock_rps_record_flow+0x19/0x3f0 [ 289.416639][T10145] ? inet_sendmsg+0xe9/0x2f0 [ 289.421229][T10145] ? inet_send_prepare+0x260/0x260 [ 289.426352][T10145] ____sys_sendmsg+0x5ba/0x960 [ 289.431113][T10145] ? __lock_acquire+0x7d40/0x7d40 [ 289.436138][T10145] ? __asan_memset+0x22/0x40 [ 289.440817][T10145] ? __sys_sendmsg_sock+0x30/0x30 [ 289.445833][T10145] ? __import_iovec+0x5f2/0x850 [ 289.450683][T10145] ? import_iovec+0x73/0xa0 [ 289.455189][T10145] ___sys_sendmsg+0x2a6/0x360 [ 289.459859][T10145] ? get_pid_task+0x20/0x1e0 [ 289.464448][T10145] ? __sys_sendmsg+0x2a0/0x2a0 [ 289.469222][T10145] ? __lock_acquire+0x7d40/0x7d40 [ 289.474258][T10145] __se_sys_sendmsg+0x1c2/0x2b0 [ 289.479105][T10145] ? __x64_sys_sendmsg+0x80/0x80 [ 289.484048][T10145] ? lockdep_hardirqs_on+0x98/0x150 [ 289.489246][T10145] do_syscall_64+0x55/0xb0 [ 289.493653][T10145] ? clear_bhb_loop+0x40/0x90 [ 289.498321][T10145] ? clear_bhb_loop+0x40/0x90 [ 289.502989][T10145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.508879][T10145] RIP: 0033:0x7faf1a39ce59 [ 289.513287][T10145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.532884][T10145] RSP: 002b:00007faf1b30e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.541294][T10145] RAX: ffffffffffffffda RBX: 00007faf1a615fa0 RCX: 00007faf1a39ce59 [ 289.549262][T10145] RDX: 0000000004000044 RSI: 00002000000003c0 RDI: 0000000000000003 [ 289.557227][T10145] RBP: 00007faf1b30e090 R08: 0000000000000000 R09: 0000000000000000 [ 289.565190][T10145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.573157][T10145] R13: 00007faf1a616038 R14: 00007faf1a615fa0 R15: 00007ffe8cd2d9d8 [ 289.581132][T10145] [ 289.973725][T10148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1630'. [ 290.002423][T10151] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1633'. [ 290.362338][T10151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.467291][T10155] FAULT_INJECTION: forcing a failure. [ 290.467291][T10155] name failslab, interval 1, probability 0, space 0, times 0 [ 290.483690][T10155] CPU: 0 PID: 10155 Comm: syz.2.1634 Not tainted syzkaller #0 [ 290.491188][T10155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 290.501260][T10155] Call Trace: [ 290.504542][T10155] [ 290.507482][T10155] dump_stack_lvl+0x18c/0x250 [ 290.512163][T10155] ? show_regs_print_info+0x20/0x20 [ 290.517366][T10155] ? load_image+0x420/0x420 [ 290.521859][T10155] should_fail_ex+0x39d/0x4d0 [ 290.526546][T10155] should_failslab+0x9/0x20 [ 290.531045][T10155] slab_pre_alloc_hook+0x59/0x310 [ 290.536069][T10155] ? verify_lock_unused+0x140/0x140 [ 290.541283][T10155] ? trace_call_bpf+0x5e9/0x6c0 [ 290.546158][T10155] kmem_cache_alloc+0x5a/0x2d0 [ 290.550945][T10155] ? skb_clone+0x1eb/0x370 [ 290.555389][T10155] skb_clone+0x1eb/0x370 [ 290.559658][T10155] bpf_clone_redirect+0x167/0x4a0 [ 290.564721][T10155] bpf_prog_e97454e6a39c6b06+0x61/0x66 [ 290.570205][T10155] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 290.576209][T10155] ? lock_chain_count+0x20/0x20 [ 290.581081][T10155] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 290.587343][T10155] ? lockdep_softirqs_on+0x580/0x580 [ 290.592645][T10155] ? ktime_get+0x7f/0x280 [ 290.596990][T10155] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 290.603247][T10155] ? ktime_get_real_ts64+0x440/0x440 [ 290.608551][T10155] ? bpf_prog_test_run+0x321/0x390 [ 290.613690][T10155] ? __local_bh_disable_ip+0x108/0x1a0 [ 290.619167][T10155] ? __cant_sleep+0x220/0x220 [ 290.623853][T10155] ? read_tsc+0x9/0x20 [ 290.627911][T10155] ? ktime_get+0x24b/0x280 [ 290.632319][T10155] ? bpf_test_run+0x174/0x870 [ 290.636997][T10155] bpf_test_run+0x2df/0x870 [ 290.641514][T10155] ? bpf_test_run+0x174/0x870 [ 290.646182][T10155] ? dst_hold+0x70/0x70 [ 290.650337][T10155] ? eth_get_headlen+0x210/0x210 [ 290.655278][T10155] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 290.660674][T10155] ? cpu_online+0x60/0x60 [ 290.665010][T10155] bpf_prog_test_run+0x321/0x390 [ 290.669935][T10155] __sys_bpf+0x49d/0x890 [ 290.674167][T10155] ? bpf_link_show_fdinfo+0x390/0x390 [ 290.679533][T10155] ? lock_chain_count+0x20/0x20 [ 290.684378][T10155] __x64_sys_bpf+0x7c/0x90 [ 290.688795][T10155] do_syscall_64+0x55/0xb0 [ 290.693228][T10155] ? clear_bhb_loop+0x40/0x90 [ 290.697909][T10155] ? clear_bhb_loop+0x40/0x90 [ 290.702574][T10155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.708465][T10155] RIP: 0033:0x7fcde799ce59 [ 290.712867][T10155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.732463][T10155] RSP: 002b:00007fcde5bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 290.740878][T10155] RAX: ffffffffffffffda RBX: 00007fcde7c15fa0 RCX: 00007fcde799ce59 [ 290.748869][T10155] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 290.756849][T10155] RBP: 00007fcde5bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 290.764812][T10155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.772778][T10155] R13: 00007fcde7c16038 R14: 00007fcde7c15fa0 R15: 00007ffe927cf7d8 [ 290.780750][T10155] [ 291.033996][T10170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1640'. [ 291.697480][T10181] netlink: 'syz.2.1643': attribute type 10 has an invalid length. [ 291.705403][T10181] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1643'. [ 291.732507][T10181] team0: Port device bond0 removed [ 291.738216][T10181] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 292.051482][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1644'. [ 292.304240][T10187] netlink: 'syz.3.1645': attribute type 10 has an invalid length. [ 292.312726][T10187] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1645'. [ 292.404318][T10191] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1647'. [ 292.435116][T10191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.734491][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 293.819760][T10214] netlink: 'syz.2.1655': attribute type 10 has an invalid length. [ 293.828476][T10214] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1655'. [ 294.137775][T10226] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1661'. [ 294.625609][T10226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.660515][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1662'. [ 295.282522][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1665'. [ 295.356021][T10245] netlink: 'syz.0.1666': attribute type 10 has an invalid length. [ 295.366998][T10245] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1666'. [ 295.593195][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1671'. [ 296.717837][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1677'. [ 296.852706][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1680'. [ 297.082384][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1682'. [ 297.887556][T10296] netlink: 'syz.1.1684': attribute type 2 has an invalid length. [ 297.934959][T10296] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.1684'. [ 297.940970][T10298] netlink: 'syz.1.1684': attribute type 10 has an invalid length. [ 298.986176][T10320] netlink: 'syz.0.1691': attribute type 10 has an invalid length. [ 298.994056][T10320] __nla_validate_parse: 1 callbacks suppressed [ 298.994070][T10320] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1691'. [ 299.078567][T10320] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 299.401455][T10329] netlink: 'syz.2.1696': attribute type 10 has an invalid length. [ 299.419545][T10329] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1696'. [ 299.513516][T10331] netlink: 'syz.3.1698': attribute type 153 has an invalid length. [ 299.531190][T10331] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1698'. [ 299.882940][T10337] syzkaller0: entered promiscuous mode [ 299.888702][T10337] syzkaller0: entered allmulticast mode [ 301.953270][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1705'. [ 301.970561][T10357] netlink: 'syz.1.1707': attribute type 10 has an invalid length. [ 301.993083][T10357] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1707'. [ 302.876051][T10372] netlink: 'syz.3.1710': attribute type 10 has an invalid length. [ 302.883923][T10372] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1710'. [ 302.900580][T10372] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 303.236880][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1715'. [ 303.258652][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1714'. [ 303.650519][T10392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1717'. [ 303.795844][T10397] netlink: 'syz.0.1719': attribute type 10 has an invalid length. [ 303.803729][T10397] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1719'. [ 304.090796][T10411] netlink: 'syz.2.1723': attribute type 10 has an invalid length. [ 304.098980][T10411] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1723'. [ 304.113341][T10411] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 304.129310][T10412] netlink: 'syz.0.1722': attribute type 10 has an invalid length. [ 304.137896][T10412] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1722'. [ 304.156240][T10412] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 304.220256][T10417] FAULT_INJECTION: forcing a failure. [ 304.220256][T10417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.233661][T10417] CPU: 0 PID: 10417 Comm: syz.1.1726 Not tainted syzkaller #0 [ 304.241134][T10417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 304.251188][T10417] Call Trace: [ 304.254454][T10417] [ 304.257374][T10417] dump_stack_lvl+0x18c/0x250 [ 304.262044][T10417] ? show_regs_print_info+0x20/0x20 [ 304.267234][T10417] ? load_image+0x420/0x420 [ 304.271732][T10417] ? __lock_acquire+0x7d40/0x7d40 [ 304.276746][T10417] ? snprintf+0xe9/0x140 [ 304.280980][T10417] should_fail_ex+0x39d/0x4d0 [ 304.285670][T10417] _copy_to_user+0x2f/0xa0 [ 304.290108][T10417] simple_read_from_buffer+0xe7/0x150 [ 304.295507][T10417] proc_fail_nth_read+0x1e8/0x260 [ 304.300551][T10417] ? proc_fault_inject_write+0x360/0x360 [ 304.306197][T10417] ? fsnotify_perm+0x271/0x5e0 [ 304.310954][T10417] ? proc_fault_inject_write+0x360/0x360 [ 304.316582][T10417] vfs_read+0x28b/0x970 [ 304.320739][T10417] ? kernel_read+0x1e0/0x1e0 [ 304.325323][T10417] ? __fget_files+0x28/0x4b0 [ 304.329902][T10417] ? __fget_files+0x28/0x4b0 [ 304.334481][T10417] ? __fget_files+0x43d/0x4b0 [ 304.339165][T10417] ? __fdget_pos+0x2a3/0x330 [ 304.343746][T10417] ? ksys_read+0x75/0x260 [ 304.348070][T10417] ksys_read+0x150/0x260 [ 304.352307][T10417] ? vfs_write+0x990/0x990 [ 304.356721][T10417] ? lockdep_hardirqs_on+0x98/0x150 [ 304.361915][T10417] do_syscall_64+0x55/0xb0 [ 304.366323][T10417] ? clear_bhb_loop+0x40/0x90 [ 304.370986][T10417] ? clear_bhb_loop+0x40/0x90 [ 304.375654][T10417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.381546][T10417] RIP: 0033:0x7ff05155d68e [ 304.385966][T10417] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 304.405573][T10417] RSP: 002b:00007ff0523c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 304.413984][T10417] RAX: ffffffffffffffda RBX: 00007ff0523c16c0 RCX: 00007ff05155d68e [ 304.421954][T10417] RDX: 000000000000000f RSI: 00007ff0523c10a0 RDI: 0000000000000004 [ 304.429918][T10417] RBP: 00007ff0523c1090 R08: 0000000000000000 R09: 0000000000000000 [ 304.437882][T10417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.445845][T10417] R13: 00007ff051816038 R14: 00007ff051815fa0 R15: 00007ffd12147ce8 [ 304.453822][T10417] [ 304.536590][T10419] netlink: 'syz.3.1728': attribute type 10 has an invalid length. [ 304.550241][T10419] macvlan1: entered allmulticast mode [ 304.602512][T10421] syzkaller0: entered promiscuous mode [ 304.608098][T10421] syzkaller0: entered allmulticast mode [ 306.331518][T10430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1729'. [ 306.340996][T10436] netlink: 'syz.0.1732': attribute type 10 has an invalid length. [ 306.364685][T10436] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1732'. [ 306.384896][T10436] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 306.458259][T10438] bridge0: port 4(syz_tun) entered blocking state [ 306.465622][T10438] bridge0: port 4(syz_tun) entered disabled state [ 306.472535][T10438] syz_tun: entered allmulticast mode [ 306.481631][T10438] syz_tun: entered promiscuous mode [ 306.574384][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1735'. [ 306.926554][T10456] netlink: 'syz.2.1738': attribute type 10 has an invalid length. [ 306.937907][T10456] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1738'. [ 306.947605][T10456] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 307.141472][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1741'. [ 307.505948][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1742'. [ 307.573849][T10468] netlink: 'syz.1.1743': attribute type 10 has an invalid length. [ 307.584702][T10468] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1743'. [ 307.601748][T10468] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 308.329020][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1745'. [ 308.442553][T10478] netlink: 'syz.0.1753': attribute type 10 has an invalid length. [ 308.450873][T10478] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 308.618262][T10480] FAULT_INJECTION: forcing a failure. [ 308.618262][T10480] name failslab, interval 1, probability 0, space 0, times 0 [ 308.639297][T10480] CPU: 0 PID: 10480 Comm: syz.3.1747 Not tainted syzkaller #0 [ 308.646797][T10480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 308.656863][T10480] Call Trace: [ 308.660167][T10480] [ 308.663120][T10480] dump_stack_lvl+0x18c/0x250 [ 308.667840][T10480] ? show_regs_print_info+0x20/0x20 [ 308.673063][T10480] ? load_image+0x420/0x420 [ 308.677584][T10480] ? __might_sleep+0xe0/0xe0 [ 308.682186][T10480] ? __lock_acquire+0x7d40/0x7d40 [ 308.687226][T10480] should_fail_ex+0x39d/0x4d0 [ 308.691919][T10480] should_failslab+0x9/0x20 [ 308.696430][T10480] slab_pre_alloc_hook+0x59/0x310 [ 308.701465][T10480] ? tomoyo_encode+0x28b/0x540 [ 308.706234][T10480] ? tomoyo_encode+0x28b/0x540 [ 308.711000][T10480] __kmem_cache_alloc_node+0x53/0x250 [ 308.716384][T10480] ? tomoyo_encode+0x28b/0x540 [ 308.721151][T10480] __kmalloc+0xa4/0x230 [ 308.725324][T10480] tomoyo_encode+0x28b/0x540 [ 308.729924][T10480] tomoyo_realpath_from_path+0x592/0x5d0 [ 308.735598][T10480] tomoyo_path_number_perm+0x248/0x620 [ 308.741083][T10480] ? tomoyo_path_number_perm+0x217/0x620 [ 308.746730][T10480] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 308.752196][T10480] ? ksys_write+0x1c4/0x260 [ 308.756757][T10480] ? __fget_files+0x28/0x4b0 [ 308.761350][T10480] ? __fget_files+0x28/0x4b0 [ 308.765965][T10480] security_file_ioctl+0x70/0xa0 [ 308.770907][T10480] __se_sys_ioctl+0x48/0x170 [ 308.775509][T10480] do_syscall_64+0x55/0xb0 [ 308.779929][T10480] ? clear_bhb_loop+0x40/0x90 [ 308.784612][T10480] ? clear_bhb_loop+0x40/0x90 [ 308.789301][T10480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.795204][T10480] RIP: 0033:0x7faf1a39ce59 [ 308.799621][T10480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.819230][T10480] RSP: 002b:00007faf1b30e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.827648][T10480] RAX: ffffffffffffffda RBX: 00007faf1a615fa0 RCX: 00007faf1a39ce59 [ 308.835623][T10480] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000007 [ 308.843594][T10480] RBP: 00007faf1b30e090 R08: 0000000000000000 R09: 0000000000000000 [ 308.851569][T10480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.859546][T10480] R13: 00007faf1a616038 R14: 00007faf1a615fa0 R15: 00007ffe8cd2d9d8 [ 308.867549][T10480] [ 308.889458][T10480] ERROR: Out of memory at tomoyo_realpath_from_path. [ 308.980442][T10484] syzkaller0: entered promiscuous mode [ 308.987215][T10484] syzkaller0: entered allmulticast mode [ 311.031831][T10502] netlink: 'syz.1.1752': attribute type 10 has an invalid length. [ 311.039759][T10502] __nla_validate_parse: 1 callbacks suppressed [ 311.039770][T10502] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1752'. [ 311.056288][T10502] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 311.075991][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1754'. [ 311.589772][T10533] netlink: 'syz.2.1764': attribute type 10 has an invalid length. [ 311.598277][T10533] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1764'. [ 311.612226][T10533] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 312.014233][T10538] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1766'. [ 312.174750][T10546] syzkaller0: entered promiscuous mode [ 312.180421][T10546] syzkaller0: entered allmulticast mode [ 313.708385][T10570] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1776'. [ 314.300082][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1770'. [ 314.323928][T10570] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.1776'. [ 314.334045][T10570] tipc: Started in network mode [ 314.339268][T10570] tipc: Node identity b, cluster identity 73 [ 314.374834][T10570] tipc: Node number set to 11 [ 314.535568][T10574] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1777'. [ 314.587265][T10580] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 314.611188][T10581] netlink: 'syz.0.1778': attribute type 10 has an invalid length. [ 314.619285][T10581] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1778'. [ 314.633798][T10581] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 315.572250][T10610] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1790'. [ 316.061328][T10624] netlink: 'syz.1.1795': attribute type 10 has an invalid length. [ 316.074737][T10624] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1795'. [ 316.109559][T10624] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 316.408415][T10637] sit0: entered promiscuous mode [ 316.748381][T10646] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1804'. [ 317.081866][T10646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.244141][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.250581][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.860860][T10677] netlink: 'syz.2.1816': attribute type 2 has an invalid length. [ 317.872922][T10677] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1816'. [ 318.149311][T10681] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1817'. [ 318.166638][T10681] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1817'. [ 318.667628][T10704] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.1828'. [ 318.810801][T10710] netlink: 'syz.2.1825': attribute type 10 has an invalid length. [ 318.821749][T10710] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1825'. [ 318.837563][T10710] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 319.428519][T10730] FAULT_INJECTION: forcing a failure. [ 319.428519][T10730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.442436][T10730] CPU: 1 PID: 10730 Comm: syz.2.1836 Not tainted syzkaller #0 [ 319.449907][T10730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.459970][T10730] Call Trace: [ 319.463246][T10730] [ 319.466188][T10730] dump_stack_lvl+0x18c/0x250 [ 319.470872][T10730] ? show_regs_print_info+0x20/0x20 [ 319.476070][T10730] ? load_image+0x420/0x420 [ 319.480584][T10730] ? __might_fault+0xaa/0x120 [ 319.485273][T10730] ? __lock_acquire+0x7d40/0x7d40 [ 319.490318][T10730] should_fail_ex+0x39d/0x4d0 [ 319.495021][T10730] _copy_from_user+0x2f/0xe0 [ 319.499635][T10730] ____sys_sendmsg+0x2fd/0x960 [ 319.504417][T10730] ? __lock_acquire+0x7d40/0x7d40 [ 319.509464][T10730] ? __sys_sendmsg_sock+0x30/0x30 [ 319.514503][T10730] ? __import_iovec+0x3fa/0x850 [ 319.519369][T10730] ? import_iovec+0x73/0xa0 [ 319.523869][T10730] ___sys_sendmsg+0x2a6/0x360 [ 319.528546][T10730] ? get_pid_task+0x20/0x1e0 [ 319.533132][T10730] ? __sys_sendmsg+0x2a0/0x2a0 [ 319.537905][T10730] ? __lock_acquire+0x7d40/0x7d40 [ 319.542943][T10730] __se_sys_sendmsg+0x1c2/0x2b0 [ 319.547789][T10730] ? __x64_sys_sendmsg+0x80/0x80 [ 319.552733][T10730] ? lockdep_hardirqs_on+0x98/0x150 [ 319.557938][T10730] do_syscall_64+0x55/0xb0 [ 319.562348][T10730] ? clear_bhb_loop+0x40/0x90 [ 319.567014][T10730] ? clear_bhb_loop+0x40/0x90 [ 319.571680][T10730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.577568][T10730] RIP: 0033:0x7fcde799ce59 [ 319.581973][T10730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.601568][T10730] RSP: 002b:00007fcde5bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.609980][T10730] RAX: ffffffffffffffda RBX: 00007fcde7c15fa0 RCX: 00007fcde799ce59 [ 319.617946][T10730] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000004 [ 319.625905][T10730] RBP: 00007fcde5bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 319.633865][T10730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.641826][T10730] R13: 00007fcde7c16038 R14: 00007fcde7c15fa0 R15: 00007ffe927cf7d8 [ 319.649797][T10730] [ 320.264278][T10749] netlink: 'syz.2.1844': attribute type 25 has an invalid length. [ 320.282443][T10749] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1844'. [ 320.309817][T10749] netlink: 'syz.2.1844': attribute type 25 has an invalid length. [ 320.330060][T10749] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1844'. [ 320.369674][T10749] netlink: 'syz.2.1844': attribute type 25 has an invalid length. [ 320.384382][T10749] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1844'. [ 320.394641][T10749] netlink: 'syz.2.1844': attribute type 25 has an invalid length. [ 320.403736][T10749] netlink: 'syz.2.1844': attribute type 25 has an invalid length. [ 320.412750][T10749] netlink: 'syz.2.1844': attribute type 25 has an invalid length. [ 320.422399][T10749] netlink: 'syz.2.1844': attribute type 25 has an invalid length. [ 320.492183][T10758] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 320.615481][T10765] FAULT_INJECTION: forcing a failure. [ 320.615481][T10765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.637428][T10765] CPU: 1 PID: 10765 Comm: syz.2.1850 Not tainted syzkaller #0 [ 320.644918][T10765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 320.654986][T10765] Call Trace: [ 320.658286][T10765] [ 320.661235][T10765] dump_stack_lvl+0x18c/0x250 [ 320.665927][T10765] ? show_regs_print_info+0x20/0x20 [ 320.671121][T10765] ? load_image+0x420/0x420 [ 320.675616][T10765] ? __might_fault+0xaa/0x120 [ 320.680291][T10765] ? __lock_acquire+0x7d40/0x7d40 [ 320.685314][T10765] should_fail_ex+0x39d/0x4d0 [ 320.689993][T10765] _copy_from_user+0x2f/0xe0 [ 320.694579][T10765] ____sys_sendmsg+0x2fd/0x960 [ 320.699339][T10765] ? __lock_acquire+0x7d40/0x7d40 [ 320.704360][T10765] ? __sys_sendmsg_sock+0x30/0x30 [ 320.709377][T10765] ? __import_iovec+0x3fa/0x850 [ 320.714224][T10765] ? import_iovec+0x73/0xa0 [ 320.718726][T10765] ___sys_sendmsg+0x2a6/0x360 [ 320.723406][T10765] ? __sys_sendmsg+0x2a0/0x2a0 [ 320.728179][T10765] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 320.734430][T10765] __se_sys_sendmsg+0x1c2/0x2b0 [ 320.739276][T10765] ? __x64_sys_sendmsg+0x80/0x80 [ 320.744218][T10765] ? lockdep_hardirqs_on+0x98/0x150 [ 320.749414][T10765] do_syscall_64+0x55/0xb0 [ 320.753827][T10765] ? clear_bhb_loop+0x40/0x90 [ 320.758498][T10765] ? clear_bhb_loop+0x40/0x90 [ 320.763165][T10765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.769054][T10765] RIP: 0033:0x7fcde799ce59 [ 320.773462][T10765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.793061][T10765] RSP: 002b:00007fcde5bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.801466][T10765] RAX: ffffffffffffffda RBX: 00007fcde7c15fa0 RCX: 00007fcde799ce59 [ 320.809427][T10765] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000004 [ 320.817387][T10765] RBP: 00007fcde5bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 320.825347][T10765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.833306][T10765] R13: 00007fcde7c16038 R14: 00007fcde7c15fa0 R15: 00007ffe927cf7d8 [ 320.841279][T10765] [ 321.026887][T10772] syzkaller0: entered promiscuous mode [ 321.034179][T10772] syzkaller0: entered allmulticast mode [ 323.394669][T10780] __nla_validate_parse: 63 callbacks suppressed [ 323.394684][T10780] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1856'. [ 323.410675][T10780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.426769][T10785] validate_nla: 59 callbacks suppressed [ 323.426781][T10785] netlink: 'syz.0.1858': attribute type 2 has an invalid length. [ 323.440264][T10785] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1858'. [ 323.877187][T10813] netlink: 'syz.2.1865': attribute type 10 has an invalid length. [ 323.885728][T10813] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1865'. [ 326.486513][T10824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.721493][T10830] netlink: 'syz.3.1872': attribute type 2 has an invalid length. [ 326.734762][T10830] netlink: 119 bytes leftover after parsing attributes in process `syz.3.1872'. [ 326.850501][T10835] netlink: 'syz.0.1880': attribute type 10 has an invalid length. [ 326.859583][T10835] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1880'. [ 326.895368][T10835] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 327.098800][T10843] netlink: 'syz.1.1877': attribute type 10 has an invalid length. [ 327.110396][T10843] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1877'. [ 327.350608][T10847] FAULT_INJECTION: forcing a failure. [ 327.350608][T10847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.366233][T10847] CPU: 0 PID: 10847 Comm: syz.2.1879 Not tainted syzkaller #0 [ 327.373736][T10847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 327.383791][T10847] Call Trace: [ 327.387068][T10847] [ 327.389998][T10847] dump_stack_lvl+0x18c/0x250 [ 327.394700][T10847] ? show_regs_print_info+0x20/0x20 [ 327.399895][T10847] ? load_image+0x420/0x420 [ 327.404395][T10847] ? __might_fault+0xaa/0x120 [ 327.409068][T10847] ? __lock_acquire+0x7d40/0x7d40 [ 327.414107][T10847] should_fail_ex+0x39d/0x4d0 [ 327.418797][T10847] _copy_from_user+0x2f/0xe0 [ 327.423405][T10847] __sys_bpf+0x23e/0x890 [ 327.427663][T10847] ? bpf_link_show_fdinfo+0x390/0x390 [ 327.433083][T10847] ? lock_chain_count+0x20/0x20 [ 327.437982][T10847] __x64_sys_bpf+0x7c/0x90 [ 327.442424][T10847] do_syscall_64+0x55/0xb0 [ 327.446868][T10847] ? clear_bhb_loop+0x40/0x90 [ 327.451557][T10847] ? clear_bhb_loop+0x40/0x90 [ 327.456236][T10847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.462134][T10847] RIP: 0033:0x7fcde799ce59 [ 327.466553][T10847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.486170][T10847] RSP: 002b:00007fcde5bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 327.494612][T10847] RAX: ffffffffffffffda RBX: 00007fcde7c15fa0 RCX: 00007fcde799ce59 [ 327.502624][T10847] RDX: 0000000000000048 RSI: 0000200000004440 RDI: e4ffffff00000000 [ 327.510634][T10847] RBP: 00007fcde5bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 327.518638][T10847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.526636][T10847] R13: 00007fcde7c16038 R14: 00007fcde7c15fa0 R15: 00007ffe927cf7d8 [ 327.534680][T10847] [ 327.723635][T10851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.849492][T10858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1885'. [ 328.261132][T10873] netlink: 'syz.0.1889': attribute type 10 has an invalid length. [ 328.290475][T10876] FAULT_INJECTION: forcing a failure. [ 328.290475][T10876] name failslab, interval 1, probability 0, space 0, times 0 [ 328.312148][T10873] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1889'. [ 328.330399][T10876] CPU: 0 PID: 10876 Comm: syz.3.1893 Not tainted syzkaller #0 [ 328.337899][T10876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 328.347963][T10876] Call Trace: [ 328.351254][T10876] [ 328.354195][T10876] dump_stack_lvl+0x18c/0x250 [ 328.358890][T10876] ? show_regs_print_info+0x20/0x20 [ 328.364102][T10876] ? load_image+0x420/0x420 [ 328.368621][T10876] ? verify_lock_unused+0x140/0x140 [ 328.373838][T10876] should_fail_ex+0x39d/0x4d0 [ 328.378538][T10876] should_failslab+0x9/0x20 [ 328.383058][T10876] slab_pre_alloc_hook+0x59/0x310 [ 328.388106][T10876] kmem_cache_alloc+0x5a/0x2d0 [ 328.392890][T10876] ? skb_clone+0x1eb/0x370 [ 328.397329][T10876] skb_clone+0x1eb/0x370 [ 328.401587][T10876] __netlink_deliver_tap+0x41c/0x830 [ 328.406896][T10876] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.412105][T10876] netlink_deliver_tap+0x19c/0x1b0 [ 328.417230][T10876] netlink_unicast+0x72c/0x8d0 [ 328.422017][T10876] netlink_sendmsg+0x8d0/0xbf0 [ 328.426805][T10876] ? netlink_getsockopt+0x590/0x590 [ 328.432018][T10876] ? aa_sock_msg_perm+0x94/0x150 [ 328.436974][T10876] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 328.442277][T10876] ? security_socket_sendmsg+0x80/0xa0 [ 328.447747][T10876] ? netlink_getsockopt+0x590/0x590 [ 328.452960][T10876] ____sys_sendmsg+0x5ba/0x960 [ 328.457746][T10876] ? __asan_memset+0x22/0x40 [ 328.462351][T10876] ? __sys_sendmsg_sock+0x30/0x30 [ 328.467383][T10876] ? __import_iovec+0x5f2/0x850 [ 328.472258][T10876] ? import_iovec+0x73/0xa0 [ 328.476777][T10876] ___sys_sendmsg+0x2a6/0x360 [ 328.481475][T10876] ? __sys_sendmsg+0x2a0/0x2a0 [ 328.486304][T10876] __se_sys_sendmsg+0x1c2/0x2b0 [ 328.491177][T10876] ? __x64_sys_sendmsg+0x80/0x80 [ 328.496147][T10876] ? syscall_enter_from_user_mode+0x2e/0x80 [ 328.502061][T10876] do_syscall_64+0x55/0xb0 [ 328.506491][T10876] ? clear_bhb_loop+0x40/0x90 [ 328.511180][T10876] ? clear_bhb_loop+0x40/0x90 [ 328.515868][T10876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.521773][T10876] RIP: 0033:0x7faf1a39ce59 [ 328.526199][T10876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.545819][T10876] RSP: 002b:00007faf1b30e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.554252][T10876] RAX: ffffffffffffffda RBX: 00007faf1a615fa0 RCX: 00007faf1a39ce59 [ 328.562233][T10876] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000009 [ 328.570211][T10876] RBP: 00007faf1b30e090 R08: 0000000000000000 R09: 0000000000000000 [ 328.578189][T10876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.586167][T10876] R13: 00007faf1a616038 R14: 00007faf1a615fa0 R15: 00007ffe8cd2d9d8 [ 328.594168][T10876] [ 328.611919][T10873] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 328.668861][T10876] netlink: 'syz.3.1893': attribute type 10 has an invalid length. [ 328.778802][T10876] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.812633][T10876] bond0: (slave team0): Enslaving as an active interface with an up link [ 328.968603][T10880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.004137][T10889] netlink: 'syz.1.1895': attribute type 10 has an invalid length. [ 329.025552][T10889] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1895'. [ 329.269006][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1898'. [ 329.381757][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1899'. [ 329.470295][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1900'. [ 330.332268][T10923] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1908'. [ 330.362091][T10923] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 330.370987][T10923] CPU: 0 PID: 10923 Comm: syz.2.1908 Not tainted syzkaller #0 [ 330.378453][T10923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.388519][T10923] Call Trace: [ 330.391807][T10923] [ 330.394738][T10923] dump_stack_lvl+0x18c/0x250 [ 330.399415][T10923] ? show_regs_print_info+0x20/0x20 [ 330.404612][T10923] ? load_image+0x420/0x420 [ 330.409124][T10923] sysfs_warn_dup+0x8e/0xa0 [ 330.413625][T10923] sysfs_do_create_link_sd+0xc0/0x110 [ 330.419000][T10923] device_add_class_symlinks+0x1cf/0x240 [ 330.424656][T10923] device_add+0x507/0xc50 [ 330.429049][T10923] wiphy_register+0x1dad/0x2ae0 [ 330.433941][T10923] ? cfg80211_event_work+0x40/0x40 [ 330.439052][T10923] ? minstrel_ht_alloc+0x88a/0x990 [ 330.444193][T10923] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 330.450301][T10923] ieee80211_register_hw+0x3464/0x4250 [ 330.455831][T10923] ? ieee80211_tasklet_handler+0x20/0x20 [ 330.461490][T10923] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 330.467415][T10923] ? __debug_object_init+0xec/0x450 [ 330.472653][T10923] ? __asan_memset+0x22/0x40 [ 330.477261][T10923] ? __hrtimer_init+0x186/0x270 [ 330.482131][T10923] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 330.487878][T10923] ? mac80211_hwsim_free+0x220/0x220 [ 330.493161][T10923] ? rcu_is_watching+0x15/0xb0 [ 330.497923][T10923] ? kstrndup+0xbd/0x140 [ 330.502181][T10923] hwsim_new_radio_nl+0xdc9/0x1a90 [ 330.507300][T10923] ? __nla_validate+0x50/0x50 [ 330.512010][T10923] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 330.518374][T10923] ? __nla_parse+0x40/0x50 [ 330.522798][T10923] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 330.529152][T10923] genl_family_rcv_msg_doit+0x211/0x310 [ 330.534733][T10923] ? end_current_label_crit_section+0x170/0x170 [ 330.540997][T10923] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 330.546897][T10923] ? bpf_lsm_capable+0x9/0x10 [ 330.551585][T10923] ? security_capable+0x89/0xb0 [ 330.556461][T10923] genl_rcv_msg+0x619/0x7a0 [ 330.560969][T10923] ? genl_bind+0x360/0x360 [ 330.565383][T10923] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 330.571735][T10923] ? netlink_rcv_skb+0x220/0x4d0 [ 330.576717][T10923] netlink_rcv_skb+0x241/0x4d0 [ 330.581518][T10923] ? genl_bind+0x360/0x360 [ 330.585931][T10923] ? netlink_ack+0x1180/0x1180 [ 330.590702][T10923] ? __lock_acquire+0x7d40/0x7d40 [ 330.595752][T10923] ? down_read+0x1ac/0x2e0 [ 330.600192][T10923] genl_rcv+0x28/0x40 [ 330.604189][T10923] netlink_unicast+0x751/0x8d0 [ 330.608968][T10923] netlink_sendmsg+0x8d0/0xbf0 [ 330.613746][T10923] ? tomoyo_socket_sendmsg_permission+0xb9/0x2f0 [ 330.620079][T10923] ? netlink_getsockopt+0x590/0x590 [ 330.625377][T10923] ? aa_sock_msg_perm+0x94/0x150 [ 330.630337][T10923] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 330.635621][T10923] ? security_socket_sendmsg+0x80/0xa0 [ 330.641074][T10923] ? netlink_getsockopt+0x590/0x590 [ 330.646283][T10923] ____sys_sendmsg+0x5ba/0x960 [ 330.651054][T10923] ? __asan_memset+0x22/0x40 [ 330.655641][T10923] ? __sys_sendmsg_sock+0x30/0x30 [ 330.660661][T10923] ? __import_iovec+0x5f2/0x850 [ 330.665515][T10923] ? import_iovec+0x73/0xa0 [ 330.670015][T10923] ___sys_sendmsg+0x2a6/0x360 [ 330.674712][T10923] ? __sys_sendmsg+0x2a0/0x2a0 [ 330.679598][T10923] __se_sys_sendmsg+0x1c2/0x2b0 [ 330.684470][T10923] ? __x64_sys_sendmsg+0x80/0x80 [ 330.689430][T10923] ? lockdep_hardirqs_on+0x98/0x150 [ 330.694634][T10923] do_syscall_64+0x55/0xb0 [ 330.699045][T10923] ? clear_bhb_loop+0x40/0x90 [ 330.703711][T10923] ? clear_bhb_loop+0x40/0x90 [ 330.708394][T10923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.714303][T10923] RIP: 0033:0x7fcde799ce59 [ 330.718746][T10923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.738369][T10923] RSP: 002b:00007fcde5bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.746782][T10923] RAX: ffffffffffffffda RBX: 00007fcde7c15fa0 RCX: 00007fcde799ce59 [ 330.754764][T10923] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 330.762743][T10923] RBP: 00007fcde7a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 330.770706][T10923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.778689][T10923] R13: 00007fcde7c16038 R14: 00007fcde7c15fa0 R15: 00007ffe927cf7d8 [ 330.786691][T10923] [ 330.808535][T10932] netlink: 'syz.1.1909': attribute type 10 has an invalid length. [ 330.816974][T10932] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1909'. [ 330.827768][T10932] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 330.880836][T10929] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1908'. [ 330.906240][T10929] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 330.921289][T10929] CPU: 1 PID: 10929 Comm: syz.2.1908 Not tainted syzkaller #0 [ 330.928785][T10929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.938847][T10929] Call Trace: [ 330.942135][T10929] [ 330.945077][T10929] dump_stack_lvl+0x18c/0x250 [ 330.949777][T10929] ? show_regs_print_info+0x20/0x20 [ 330.954990][T10929] ? load_image+0x420/0x420 [ 330.959517][T10929] sysfs_warn_dup+0x8e/0xa0 [ 330.964033][T10929] sysfs_do_create_link_sd+0xc0/0x110 [ 330.969420][T10929] device_add_class_symlinks+0x1cf/0x240 [ 330.975074][T10929] device_add+0x507/0xc50 [ 330.979423][T10929] wiphy_register+0x1dad/0x2ae0 [ 330.984308][T10929] ? cfg80211_event_work+0x40/0x40 [ 330.989428][T10929] ? minstrel_ht_alloc+0x88a/0x990 [ 330.994562][T10929] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 331.000655][T10929] ieee80211_register_hw+0x3464/0x4250 [ 331.006186][T10929] ? ieee80211_tasklet_handler+0x20/0x20 [ 331.011841][T10929] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 331.017765][T10929] ? __debug_object_init+0xec/0x450 [ 331.022997][T10929] ? __asan_memset+0x22/0x40 [ 331.027617][T10929] ? __hrtimer_init+0x186/0x270 [ 331.032490][T10929] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 331.038255][T10929] ? mac80211_hwsim_free+0x220/0x220 [ 331.043572][T10929] ? rcu_is_watching+0x15/0xb0 [ 331.048347][T10929] ? kstrndup+0xbd/0x140 [ 331.052587][T10929] hwsim_new_radio_nl+0xdc9/0x1a90 [ 331.057700][T10929] ? __nla_validate+0x50/0x50 [ 331.062372][T10929] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 331.068701][T10929] ? __nla_parse+0x40/0x50 [ 331.073108][T10929] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 331.079433][T10929] genl_family_rcv_msg_doit+0x211/0x310 [ 331.084985][T10929] ? end_current_label_crit_section+0x170/0x170 [ 331.091237][T10929] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 331.097125][T10929] ? bpf_lsm_capable+0x9/0x10 [ 331.101797][T10929] ? security_capable+0x89/0xb0 [ 331.106660][T10929] genl_rcv_msg+0x619/0x7a0 [ 331.111179][T10929] ? genl_bind+0x360/0x360 [ 331.115593][T10929] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 331.121925][T10929] ? perf_trace_lock+0xfc/0x3b0 [ 331.126792][T10929] netlink_rcv_skb+0x241/0x4d0 [ 331.131566][T10929] ? genl_bind+0x360/0x360 [ 331.135974][T10929] ? netlink_ack+0x1180/0x1180 [ 331.140731][T10929] ? __lock_acquire+0x7d40/0x7d40 [ 331.145765][T10929] ? down_read+0x1ac/0x2e0 [ 331.150189][T10929] genl_rcv+0x28/0x40 [ 331.154159][T10929] netlink_unicast+0x751/0x8d0 [ 331.158917][T10929] netlink_sendmsg+0x8d0/0xbf0 [ 331.163674][T10929] ? netlink_getsockopt+0x590/0x590 [ 331.168862][T10929] ? aa_sock_msg_perm+0x94/0x150 [ 331.173791][T10929] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 331.179063][T10929] ? security_socket_sendmsg+0x80/0xa0 [ 331.184518][T10929] ? netlink_getsockopt+0x590/0x590 [ 331.189720][T10929] ____sys_sendmsg+0x5ba/0x960 [ 331.194477][T10929] ? __asan_memset+0x22/0x40 [ 331.199066][T10929] ? __sys_sendmsg_sock+0x30/0x30 [ 331.204075][T10929] ? __import_iovec+0x5f2/0x850 [ 331.208916][T10929] ? import_iovec+0x73/0xa0 [ 331.213406][T10929] ___sys_sendmsg+0x2a6/0x360 [ 331.218084][T10929] ? __sys_sendmsg+0x2a0/0x2a0 [ 331.222872][T10929] __se_sys_sendmsg+0x1c2/0x2b0 [ 331.227727][T10929] ? __x64_sys_sendmsg+0x80/0x80 [ 331.232681][T10929] ? lockdep_hardirqs_on+0x98/0x150 [ 331.237878][T10929] do_syscall_64+0x55/0xb0 [ 331.242283][T10929] ? clear_bhb_loop+0x40/0x90 [ 331.246964][T10929] ? clear_bhb_loop+0x40/0x90 [ 331.251641][T10929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.257526][T10929] RIP: 0033:0x7fcde799ce59 [ 331.261930][T10929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.281525][T10929] RSP: 002b:00007fcde5bb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.289928][T10929] RAX: ffffffffffffffda RBX: 00007fcde7c16180 RCX: 00007fcde799ce59 [ 331.297892][T10929] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 331.305859][T10929] RBP: 00007fcde7a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 331.313829][T10929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.321786][T10929] R13: 00007fcde7c16218 R14: 00007fcde7c16180 R15: 00007ffe927cf7d8 [ 331.329757][T10929] [ 331.752576][T10938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.772748][T10942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1910'. [ 331.969004][T10948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1914'. [ 332.491718][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1917'. [ 332.622632][T10956] netlink: 'syz.0.1916': attribute type 10 has an invalid length. [ 332.677847][T10956] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.740665][T10956] bond0: (slave team0): Enslaving as an active interface with an up link [ 333.082708][T10967] netlink: 'syz.1.1922': attribute type 10 has an invalid length. [ 333.860756][T10967] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.901223][T10967] bond0: (slave team0): Enslaving as an active interface with an up link [ 333.909858][T10970] netlink: 'syz.0.1921': attribute type 10 has an invalid length. [ 333.921094][T10970] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 334.236084][T10985] __nla_validate_parse: 2 callbacks suppressed [ 334.236103][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1926'. [ 334.534037][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1931'. [ 334.562068][T10994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1929'. [ 335.048089][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1932'. [ 335.323659][T11008] netlink: 'syz.1.1934': attribute type 10 has an invalid length. [ 335.344698][T11008] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1934'. [ 335.364016][T11008] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 335.473625][T11010] syzkaller0: entered promiscuous mode [ 335.484222][T11010] syzkaller0: entered allmulticast mode [ 337.475507][T11032] FAULT_INJECTION: forcing a failure. [ 337.475507][T11032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.488939][T11032] CPU: 0 PID: 11032 Comm: syz.1.1943 Not tainted syzkaller #0 [ 337.496430][T11032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 337.506492][T11032] Call Trace: [ 337.509773][T11032] [ 337.512711][T11032] dump_stack_lvl+0x18c/0x250 [ 337.517383][T11032] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 337.523534][T11032] ? show_regs_print_info+0x20/0x20 [ 337.528730][T11032] ? load_image+0x420/0x420 [ 337.533236][T11032] should_fail_ex+0x39d/0x4d0 [ 337.537929][T11032] _copy_to_user+0x2f/0xa0 [ 337.542350][T11032] bpf_test_finish+0x19f/0x650 [ 337.547121][T11032] ? dst_hold+0x70/0x70 [ 337.551279][T11032] ? convert_skb_to___skb+0x420/0x420 [ 337.556672][T11032] ? slab_build_skb+0x25f/0x3f0 [ 337.561529][T11032] bpf_prog_test_run_skb+0x1122/0x18c0 [ 337.567000][T11032] ? cpu_online+0x60/0x60 [ 337.571328][T11032] bpf_prog_test_run+0x321/0x390 [ 337.576265][T11032] __sys_bpf+0x49d/0x890 [ 337.580505][T11032] ? bpf_link_show_fdinfo+0x390/0x390 [ 337.585881][T11032] ? lock_chain_count+0x20/0x20 [ 337.590722][T11032] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 337.596716][T11032] __x64_sys_bpf+0x7c/0x90 [ 337.601127][T11032] do_syscall_64+0x55/0xb0 [ 337.605537][T11032] ? clear_bhb_loop+0x40/0x90 [ 337.610205][T11032] ? clear_bhb_loop+0x40/0x90 [ 337.614875][T11032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.620765][T11032] RIP: 0033:0x7ff05159ce59 [ 337.625171][T11032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.644778][T11032] RSP: 002b:00007ff0523c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 337.653202][T11032] RAX: ffffffffffffffda RBX: 00007ff051815fa0 RCX: 00007ff05159ce59 [ 337.661201][T11032] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 337.669174][T11032] RBP: 00007ff0523c1090 R08: 0000000000000000 R09: 0000000000000000 [ 337.677143][T11032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.685107][T11032] R13: 00007ff051816038 R14: 00007ff051815fa0 R15: 00007ffd12147ce8 [ 337.693090][T11032] [ 338.223022][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1939'. [ 338.242315][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1942'. [ 338.364181][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1946'. [ 338.618209][T11051] netlink: 'syz.2.1948': attribute type 10 has an invalid length. [ 338.628461][T11051] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1948'. [ 338.641941][T11051] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 339.356727][T11064] syzkaller0: entered promiscuous mode [ 339.378421][T11064] syzkaller0: entered allmulticast mode [ 341.409065][T11074] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1959'. [ 341.420989][T11074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.446923][T11077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1960'. [ 341.475402][T11077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.512228][T11081] netlink: 'syz.2.1961': attribute type 1 has an invalid length. [ 341.540768][T11081] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1961'. [ 341.873192][T11096] netlink: 'syz.2.1965': attribute type 10 has an invalid length. [ 341.889924][T11096] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1965'. [ 341.909670][T11096] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 342.594270][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1969'. [ 342.698247][T11108] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1970'. [ 342.717551][T11108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.885360][T11110] syzkaller0: entered promiscuous mode [ 342.890891][T11110] syzkaller0: entered allmulticast mode [ 344.914272][T11117] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1973'. [ 344.923697][T11117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.943405][T11135] netlink: 'syz.0.1978': attribute type 10 has an invalid length. [ 344.957682][T11135] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1978'. [ 344.989805][T11135] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 345.132270][T11141] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1981'. [ 345.142642][T11141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.250780][T11143] netlink: 'syz.1.1980': attribute type 10 has an invalid length. [ 345.261061][T11143] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1980'. [ 345.478889][T11151] netlink: 'syz.3.1983': attribute type 39 has an invalid length. [ 345.563644][T11156] netlink: 'syz.3.1983': attribute type 1 has an invalid length. [ 346.349232][T11173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.388888][T11174] netlink: 'syz.1.1989': attribute type 10 has an invalid length. [ 346.413410][T11174] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 347.286663][T11189] __nla_validate_parse: 4 callbacks suppressed [ 347.286697][T11189] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1994'. [ 347.331074][T11189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.765777][T11197] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1995'. [ 347.828158][T11197] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 348.560405][T11211] netlink: 'syz.0.1998': attribute type 10 has an invalid length. [ 348.588985][T11211] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1998'. [ 348.869234][T11222] netlink: 'syz.2.2002': attribute type 10 has an invalid length. [ 348.892718][T11222] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2002'. [ 348.920445][T11222] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 349.330991][T11226] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2006'. [ 349.351095][T11226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.579991][T11230] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2007'. [ 350.034155][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2016'. [ 351.063906][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'. [ 351.105410][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2010'. [ 351.139831][T11248] netlink: 'syz.0.2012': attribute type 2 has an invalid length. [ 351.158040][T11248] netlink: 'syz.0.2012': attribute type 8 has an invalid length. [ 351.194988][T11248] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2012'. [ 351.612129][T11260] netlink: 'syz.0.2015': attribute type 10 has an invalid length. [ 352.894695][T11270] __nla_validate_parse: 3 callbacks suppressed [ 352.894713][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2019'. [ 352.925562][T11273] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2020'. [ 354.228074][T11273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.296930][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2030'. [ 354.315088][T11281] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2022'. [ 354.736831][T11297] netlink: 'syz.3.2024': attribute type 10 has an invalid length. [ 354.762823][T11297] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2024'. [ 354.802288][T11297] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 355.710274][T11316] netlink: 'syz.3.2032': attribute type 2 has an invalid length. [ 355.724995][T11316] netlink: 'syz.3.2032': attribute type 8 has an invalid length. [ 355.732770][T11316] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2032'. [ 356.080445][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2033'. [ 357.361795][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2037'. [ 357.663712][T11343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.000043][T11357] netlink: 'syz.1.2039': attribute type 10 has an invalid length. [ 358.014574][T11357] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2039'. [ 358.055438][T11357] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 359.294608][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2047'. [ 359.610442][T11381] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2050'. [ 359.644040][T11383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 359.671965][T11381] FAULT_INJECTION: forcing a failure. [ 359.671965][T11381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.712334][T11381] CPU: 1 PID: 11381 Comm: syz.3.2050 Not tainted syzkaller #0 [ 359.719832][T11381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 359.729893][T11381] Call Trace: [ 359.733167][T11381] [ 359.736090][T11381] dump_stack_lvl+0x18c/0x250 [ 359.740910][T11381] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 359.747157][T11381] ? show_regs_print_info+0x20/0x20 [ 359.752348][T11381] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 359.758502][T11381] ? dump_stack+0x9/0x20 [ 359.762736][T11381] should_fail_ex+0x39d/0x4d0 [ 359.767444][T11381] _copy_from_user+0x2f/0xe0 [ 359.772036][T11381] do_tcp_setsockopt+0x5cb/0x1e10 [ 359.777085][T11381] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 359.782450][T11381] ? lockdep_hardirqs_on+0x98/0x150 [ 359.787645][T11381] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 359.793795][T11381] ? sock_common_recvmsg+0x190/0x190 [ 359.799137][T11381] ? tcp_enable_tx_delay+0x70/0x70 [ 359.804237][T11381] ? tcp_setsockopt+0x3d/0xe0 [ 359.808904][T11381] ? tcp_enable_tx_delay+0x70/0x70 [ 359.814006][T11381] ? sock_common_recvmsg+0x190/0x190 [ 359.819286][T11381] smc_setsockopt+0x243/0xac0 [ 359.824027][T11381] ? smc_shutdown+0x9b0/0x9b0 [ 359.828698][T11381] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 359.834174][T11381] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 359.839725][T11381] ? security_socket_setsockopt+0x7e/0xa0 [ 359.845449][T11381] ? smc_shutdown+0x9b0/0x9b0 [ 359.850122][T11381] do_sock_setsockopt+0x175/0x1a0 [ 359.855146][T11381] ? __fdget+0x180/0x210 [ 359.859406][T11381] __x64_sys_setsockopt+0x182/0x200 [ 359.864603][T11381] do_syscall_64+0x55/0xb0 [ 359.869018][T11381] ? clear_bhb_loop+0x40/0x90 [ 359.873682][T11381] ? clear_bhb_loop+0x40/0x90 [ 359.878361][T11381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.884258][T11381] RIP: 0033:0x7faf1a39ce59 [ 359.888663][T11381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.908263][T11381] RSP: 002b:00007faf1b30e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 359.916669][T11381] RAX: ffffffffffffffda RBX: 00007faf1a615fa0 RCX: 00007faf1a39ce59 [ 359.924632][T11381] RDX: 0000000000000004 RSI: 0000000000000006 RDI: 000000000000000b [ 359.932593][T11381] RBP: 00007faf1b30e090 R08: 0000000000000021 R09: 0000000000000000 [ 359.940556][T11381] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 359.948519][T11381] R13: 00007faf1a616038 R14: 00007faf1a615fa0 R15: 00007ffe8cd2d9d8 [ 359.956492][T11381] [ 360.057859][T11389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.478138][T11398] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2055'. [ 360.527022][T11398] bridge_slave_0: entered allmulticast mode [ 361.249733][T11405] netlink: 'syz.2.2056': attribute type 10 has an invalid length. [ 361.261230][T11405] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2056'. [ 361.287262][T11405] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 361.319051][T11406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2057'. [ 361.731944][T11419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.398453][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2067'. [ 362.655636][T11441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.687057][T11442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2068'. [ 363.365324][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2077'. [ 363.398482][T11460] netlink: 150036 bytes leftover after parsing attributes in process `syz.1.2078'. [ 363.528162][T11462] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.2079'. [ 363.700481][T11464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.918201][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2082'. [ 364.660409][T11478] netlink: 'syz.1.2086': attribute type 3 has an invalid length. [ 364.684585][T11478] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.2086'. [ 365.182745][T11496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.321011][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2100'. [ 365.357689][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2092'. [ 365.934158][T11509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2094'. [ 366.333122][T11516] syzkaller0: entered promiscuous mode [ 366.354275][T11516] syzkaller0: entered allmulticast mode [ 368.058780][T11524] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 368.068626][T11528] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2101'. [ 368.104103][T11533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.303385][T11540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2104'. [ 368.473226][T11549] FAULT_INJECTION: forcing a failure. [ 368.473226][T11549] name failslab, interval 1, probability 0, space 0, times 0 [ 368.490607][T11549] CPU: 0 PID: 11549 Comm: syz.3.2107 Not tainted syzkaller #0 [ 368.498104][T11549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 368.508174][T11549] Call Trace: [ 368.511468][T11549] [ 368.514413][T11549] dump_stack_lvl+0x18c/0x250 [ 368.519105][T11549] ? show_regs_print_info+0x20/0x20 [ 368.524307][T11549] ? load_image+0x420/0x420 [ 368.528863][T11549] ? __local_bh_enable_ip+0x13a/0x1c0 [ 368.534279][T11549] ? lockdep_hardirqs_on+0x98/0x150 [ 368.539508][T11549] ? __local_bh_enable_ip+0x13a/0x1c0 [ 368.544898][T11549] should_fail_ex+0x39d/0x4d0 [ 368.549601][T11549] should_failslab+0x9/0x20 [ 368.554140][T11549] slab_pre_alloc_hook+0x59/0x310 [ 368.559196][T11549] ? sctp_get_port_local+0xe65/0x1620 [ 368.564665][T11549] ? sctp_add_bind_addr+0x8c/0x360 [ 368.569799][T11549] __kmem_cache_alloc_node+0x53/0x250 [ 368.575196][T11549] ? sctp_add_bind_addr+0x8c/0x360 [ 368.580327][T11549] kmalloc_trace+0x2a/0xe0 [ 368.584761][T11549] sctp_add_bind_addr+0x8c/0x360 [ 368.589713][T11549] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 368.595196][T11549] sctp_do_bind+0x616/0x990 [ 368.599731][T11549] sctp_connect_new_asoc+0x26a/0x6a0 [ 368.605039][T11549] ? __sctp_connect+0xd80/0xd80 [ 368.609909][T11549] ? __local_bh_enable_ip+0x13a/0x1c0 [ 368.615301][T11549] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 368.620869][T11549] ? security_sctp_bind_connect+0x89/0xb0 [ 368.626607][T11549] sctp_sendmsg+0x15d2/0x2910 [ 368.631317][T11549] ? sctp_getsockopt+0xb60/0xb60 [ 368.636276][T11549] ? aa_sk_perm+0x83c/0x970 [ 368.640821][T11549] ? aa_af_perm+0x330/0x330 [ 368.645338][T11549] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 368.651770][T11549] ? sock_rps_record_flow+0x19/0x3f0 [ 368.657094][T11549] ? inet_sendmsg+0xe9/0x2f0 [ 368.661692][T11549] ? inet_send_prepare+0x260/0x260 [ 368.666814][T11549] ____sys_sendmsg+0x5ba/0x960 [ 368.671583][T11549] ? __lock_acquire+0x7d40/0x7d40 [ 368.676634][T11549] ? __asan_memset+0x22/0x40 [ 368.681235][T11549] ? __sys_sendmsg_sock+0x30/0x30 [ 368.686263][T11549] ? __import_iovec+0x5f2/0x850 [ 368.691127][T11549] ? import_iovec+0x73/0xa0 [ 368.695638][T11549] ___sys_sendmsg+0x2a6/0x360 [ 368.700320][T11549] ? get_pid_task+0x20/0x1e0 [ 368.704922][T11549] ? __sys_sendmsg+0x2a0/0x2a0 [ 368.709710][T11549] ? __lock_acquire+0x7d40/0x7d40 [ 368.714757][T11549] __se_sys_sendmsg+0x1c2/0x2b0 [ 368.719614][T11549] ? __x64_sys_sendmsg+0x80/0x80 [ 368.724567][T11549] ? lockdep_hardirqs_on+0x98/0x150 [ 368.729774][T11549] do_syscall_64+0x55/0xb0 [ 368.734195][T11549] ? clear_bhb_loop+0x40/0x90 [ 368.738880][T11549] ? clear_bhb_loop+0x40/0x90 [ 368.743561][T11549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.749460][T11549] RIP: 0033:0x7faf1a39ce59 [ 368.753885][T11549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.773503][T11549] RSP: 002b:00007faf1b30e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.781931][T11549] RAX: ffffffffffffffda RBX: 00007faf1a615fa0 RCX: 00007faf1a39ce59 [ 368.789911][T11549] RDX: 0000000004000044 RSI: 00002000000003c0 RDI: 0000000000000003 [ 368.797887][T11549] RBP: 00007faf1b30e090 R08: 0000000000000000 R09: 0000000000000000 [ 368.805862][T11549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.813835][T11549] R13: 00007faf1a616038 R14: 00007faf1a615fa0 R15: 00007ffe8cd2d9d8 [ 368.821826][T11549] [ 369.319913][T11564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.438688][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2114'. [ 369.488546][T11567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2113'. [ 369.550201][T11567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 369.945640][T11579] netlink: 'syz.2.2118': attribute type 5 has an invalid length. [ 372.581964][T11572] ------------[ cut here ]------------ [ 372.588162][T11572] WARNING: CPU: 1 PID: 11572 at kernel/events/core.c:6808 perf_pending_task+0x35c/0x470 [ 372.598041][T11572] Modules linked in: [ 372.601959][T11572] CPU: 1 PID: 11572 Comm: syz.3.2115 Not tainted syzkaller #0 [ 372.609491][T11572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.619611][T11572] RIP: 0010:perf_pending_task+0x35c/0x470 [ 372.625538][T11572] Code: ff 84 db 75 14 e8 74 cb d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 cb d5 ff e8 4b 3d 4f ff eb e5 e8 54 cb d5 ff <0f> 0b e9 f3 fe ff ff e8 48 cb d5 ff 48 c7 c7 10 f9 1c 8d 4c 89 f6 [ 372.645296][T11572] RSP: 0018:ffffc90019bdf9c0 EFLAGS: 00010293 [ 372.651510][T11572] RAX: ffffffff81b1603c RBX: ffff8880423bd9b8 RCX: ffff88801eac8000 [ 372.659566][T11572] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 372.667579][T11572] RBP: 0000000000000001 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 372.675876][T11572] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffff88801eac8000 [ 372.683869][T11572] R13: ffff88803129f930 R14: ffff8880423bd778 R15: 1ffff11008477aef [ 372.691914][T11572] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 372.701158][T11572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.707809][T11572] CR2: 000055557ac6e4e8 CR3: 00000000244ee000 CR4: 00000000003506e0 [ 372.715827][T11572] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 372.723810][T11572] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 372.731839][T11572] Call Trace: [ 372.735178][T11572] [ 372.738132][T11572] task_work_run+0x1d4/0x260 [ 372.742749][T11572] ? task_work_cancel+0x220/0x220 [ 372.747863][T11572] do_exit+0x95a/0x2460 [ 372.752055][T11572] ? put_task_struct+0xc0/0xc0 [ 372.756892][T11572] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 372.762893][T11572] ? get_signal+0x1068/0x13f0 [ 372.767646][T11572] ? lock_chain_count+0x20/0x20 [ 372.772523][T11572] ? _raw_spin_lock_irq+0xbb/0xf0 [ 372.777973][T11572] do_group_exit+0x21b/0x2d0 [ 372.782593][T11572] ? lockdep_hardirqs_on+0x98/0x150 [ 372.787862][T11572] get_signal+0x12fc/0x13f0 [ 372.792400][T11572] arch_do_signal_or_restart+0xc2/0x800 [ 372.798072][T11572] ? get_sigframe_size+0x20/0x20 [ 372.803056][T11572] ? exit_to_user_mode_loop+0x3b/0x110 [ 372.808633][T11572] exit_to_user_mode_loop+0x70/0x110 [ 372.813940][T11572] exit_to_user_mode_prepare+0xee/0x180 [ 372.819626][T11572] syscall_exit_to_user_mode+0x1a/0x50 [ 372.825152][T11572] do_syscall_64+0x61/0xb0 [ 372.829600][T11572] ? clear_bhb_loop+0x40/0x90 [ 372.834284][T11572] ? clear_bhb_loop+0x40/0x90 [ 372.839016][T11572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.844965][T11572] RIP: 0033:0x7faf1a39ce59 [ 372.849385][T11572] Code: Unable to access opcode bytes at 0x7faf1a39ce2f. [ 372.856449][T11572] RSP: 002b:00007faf1b30e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 372.864937][T11572] RAX: fffffffffffffe00 RBX: 00007faf1a615fa0 RCX: 00007faf1a39ce59 [ 372.872916][T11572] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000016 [ 372.881181][T11572] RBP: 00007faf1a432d6f R08: 0000000000000000 R09: 0000000000000000 [ 372.889186][T11572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.897443][T11572] R13: 00007faf1a616038 R14: 00007faf1a615fa0 R15: 00007ffe8cd2d9d8 [ 372.905487][T11572] [ 372.908524][T11572] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 372.915797][T11572] CPU: 1 PID: 11572 Comm: syz.3.2115 Not tainted syzkaller #0 [ 372.923240][T11572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.933284][T11572] Call Trace: [ 372.936555][T11572] [ 372.939478][T11572] dump_stack_lvl+0x18c/0x250 [ 372.944153][T11572] ? show_regs_print_info+0x20/0x20 [ 372.949341][T11572] ? load_image+0x420/0x420 [ 372.953842][T11572] panic+0x2dc/0x730 [ 372.957758][T11572] ? bpf_jit_dump+0xd0/0xd0 [ 372.962272][T11572] __warn+0x2e0/0x470 [ 372.966250][T11572] ? perf_pending_task+0x35c/0x470 [ 372.971359][T11572] ? perf_pending_task+0x35c/0x470 [ 372.976463][T11572] report_bug+0x2be/0x4f0 [ 372.980801][T11572] ? perf_pending_task+0x35c/0x470 [ 372.985905][T11572] ? perf_pending_task+0x35c/0x470 [ 372.991011][T11572] ? perf_pending_task+0x35e/0x470 [ 372.996117][T11572] handle_bug+0xcf/0x120 [ 373.000351][T11572] exc_invalid_op+0x1a/0x50 [ 373.004846][T11572] asm_exc_invalid_op+0x1a/0x20 [ 373.009696][T11572] RIP: 0010:perf_pending_task+0x35c/0x470 [ 373.015411][T11572] Code: ff 84 db 75 14 e8 74 cb d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 cb d5 ff e8 4b 3d 4f ff eb e5 e8 54 cb d5 ff <0f> 0b e9 f3 fe ff ff e8 48 cb d5 ff 48 c7 c7 10 f9 1c 8d 4c 89 f6 [ 373.035009][T11572] RSP: 0018:ffffc90019bdf9c0 EFLAGS: 00010293 [ 373.041065][T11572] RAX: ffffffff81b1603c RBX: ffff8880423bd9b8 RCX: ffff88801eac8000 [ 373.049030][T11572] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 373.056990][T11572] RBP: 0000000000000001 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 373.064952][T11572] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffff88801eac8000 [ 373.072912][T11572] R13: ffff88803129f930 R14: ffff8880423bd778 R15: 1ffff11008477aef [ 373.080882][T11572] ? perf_pending_task+0x35c/0x470 [ 373.086001][T11572] task_work_run+0x1d4/0x260 [ 373.090590][T11572] ? task_work_cancel+0x220/0x220 [ 373.095617][T11572] do_exit+0x95a/0x2460 [ 373.099776][T11572] ? put_task_struct+0xc0/0xc0 [ 373.104542][T11572] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 373.110517][T11572] ? get_signal+0x1068/0x13f0 [ 373.115186][T11572] ? lock_chain_count+0x20/0x20 [ 373.120027][T11572] ? _raw_spin_lock_irq+0xbb/0xf0 [ 373.125046][T11572] do_group_exit+0x21b/0x2d0 [ 373.129630][T11572] ? lockdep_hardirqs_on+0x98/0x150 [ 373.134826][T11572] get_signal+0x12fc/0x13f0 [ 373.139334][T11572] arch_do_signal_or_restart+0xc2/0x800 [ 373.144880][T11572] ? get_sigframe_size+0x20/0x20 [ 373.149821][T11572] ? exit_to_user_mode_loop+0x3b/0x110 [ 373.155279][T11572] exit_to_user_mode_loop+0x70/0x110 [ 373.160555][T11572] exit_to_user_mode_prepare+0xee/0x180 [ 373.166096][T11572] syscall_exit_to_user_mode+0x1a/0x50 [ 373.171548][T11572] do_syscall_64+0x61/0xb0 [ 373.175956][T11572] ? clear_bhb_loop+0x40/0x90 [ 373.180624][T11572] ? clear_bhb_loop+0x40/0x90 [ 373.185291][T11572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.191181][T11572] RIP: 0033:0x7faf1a39ce59 [ 373.195587][T11572] Code: Unable to access opcode bytes at 0x7faf1a39ce2f. [ 373.202594][T11572] RSP: 002b:00007faf1b30e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 373.210999][T11572] RAX: fffffffffffffe00 RBX: 00007faf1a615fa0 RCX: 00007faf1a39ce59 [ 373.218962][T11572] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000016 [ 373.226926][T11572] RBP: 00007faf1a432d6f R08: 0000000000000000 R09: 0000000000000000 [ 373.234887][T11572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.242850][T11572] R13: 00007faf1a616038 R14: 00007faf1a615fa0 R15: 00007ffe8cd2d9d8 [ 373.250824][T11572] [ 373.254081][T11572] Kernel Offset: disabled [ 373.258393][T11572] Rebooting in 86400 seconds..