last executing test programs: 20.04887764s ago: executing program 1 (id=4869): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x44}, 0x28) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x8, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x140, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad01409bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33", 0x79}, {&(0x7f0000000000)="24e84b13d10b8197015df07dcf473260", 0x10}], 0x2}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="f8363c677c008a6677f1a9bab6053b555601b1d32186221c9f1252303ebbc227d343f7bdaf06b16c182deb669208a84dc406422a4fbfa58c8ac13f23364aea27d7a6d9fc9f249e1479779dfb73bea698cf42e2aecf600d2943d4bc35a89a6fa4e96de40de9077a8acc1ff8d8f588db944f5e744765ba931d08a3bcf138fac02d2c2ad6bf7c23a246aa5a15ce36f083e3582e35145ea5eafd5018f2ade993d1b34f55abf70133bb312d208dccdabd907a15065388913595", 0xb7}, {&(0x7f0000000380)="095b25c9386c", 0x6}], 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="90000000000000000d01000007000000ebbbeac6eaf6bf44d3f16d9276dc593d1de4eb7b12b9928720aefe1f5d655fefd5ad16aa038eb20696b28d595f8b05797acf0464eb8ca1c81bff362d2b9e841b708029292930ead057de2d7f1e06c253c6885a0339ccee3197c42582de64d5195b568a8340494321bc194beba5e2255a9d2577c5f35414e9ce0d00000000000050000000000000000100000001000100e5a3d17495f17ab6e52754f731a8b1dc6a0e24a654073bd87f97b92c789a0a1ab6b2095618b4aea2ac505e74a1961d59ecc8"], 0xe0}, 0xc000) 19.496858192s ago: executing program 4 (id=4874): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r3, &(0x7f0000000300), 0x0}, 0x20) close(r1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f0000000000)) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0040011004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) 19.258731717s ago: executing program 4 (id=4878): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB='\x00 \x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 19.222622958s ago: executing program 1 (id=4879): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000077c215f22b51ef58ea98d14b68b9ad13990fb24faa665859d6907f5f007c0ce51f05785dc5326bdcf5dcaeefba686fcda919c613e1afb11d0586df1ccd083f197b5ee2e73d65aaa6fa07ba8c4c0c257b82ab4c88d3129a363871769ed8ba6b5c8fe3764d04c2a70b78a8bb916f0ff7a4e044235631f39b0c6b3807ebaf0889e4362788f8f4c3fa2aae2b3a1ada8d67bf27d97e6f8120bd8254697e71f085495fc044b2"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05130000050000000500"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000380)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2400}}, @generic={0x0, 0x8, 0x3, 0xffff, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}], &(0x7f0000000500)='syzkaller\x00', 0x4c818158, 0x1c, &(0x7f0000000540)=""/28, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0xffffffff, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x8, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r5]}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb", 0x8}], 0x2, 0x0, 0x0, 0x900}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a40)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0xb729, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001980)={0x0, 0x4, 0x0, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000019c0)=[0x1], 0x0, 0x10, 0x8}, 0x94) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r9 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r9], 0x12) r10 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000002c0)={r6}) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f", 0xc}], 0x1}, 0x0) close(r10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x702, 0x36, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea4a41b8a6800c0de87b6f8e6a7256", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.988041504s ago: executing program 2 (id=4881): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x4}, 0x3}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0) 18.978073903s ago: executing program 0 (id=4882): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200e01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x39c}, 0x0) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) close(r3) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.014664145s ago: executing program 4 (id=4883): socket$kcm(0x11, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = socket$kcm(0x2, 0x2, 0x73) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r1, 0x0, 0x3, &(0x7f0000000080)='\x92(\x00'}, 0x30) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffcf, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r7, 0x0, 0x6) 17.962022696s ago: executing program 2 (id=4884): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x50) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000026f90000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a0806000000020000000000000048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570d338f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee905000000d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d00000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a868eaead4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909efe6ae7804e5044f9f7ae2d8cb08cca312c557bff04cf1fbb0dcfe8ac00"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x13fff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x11400, 0x0, 0xc2ba, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], &(0x7f0000003ff6)='GPL\x00', 0x4002, 0xc9, &(0x7f0000000a80)=""/201, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000980)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000b8d46423e034edf28d56a55bc0d4f58681001962891536bbba34c25281a84c0b86fad311e89a9c97b5a9d90aaf04d79841b66d36635a5209fab4481a0375359b922709a9f5462861e650eb8ffd1e9c4cc37e2fd4d8b81ee39fa216f1570f19e6cde1acc28153fe15a6024f9bf7710fd35bf62c93f0849511011c790f5042c4a53b182b27cc5958c18c8434eba7a00f3a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd1, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000ffffffff6111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x186e}, 0xc800, 0x0, 0x7ffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x26, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8002fffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x20, 0xfff, 0x0, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) close(0xffffffffffffffff) 17.908162957s ago: executing program 0 (id=4886): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x9}, 0x21, 0x0, 0xfffffffc, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="3c00000033000b12d25a80648c2594f90124fc60100c034004000000002000119215a2281cf6b809f2db60490d20a735b16b6a4479b406db26a57b35", 0x3c}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xdffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x101c0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00008000007b00000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x1}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYBLOB="3ee9"], 0x9a) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r5, 0x58, &(0x7f00000008c0)}, 0x10) sendmsg$inet(r6, &(0x7f0000000a40)={&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000500)="46361abfd5b2a283254c61d89ddf66f7298a471ab00e66fa1a454e", 0x1b}, {&(0x7f0000000640)}, {&(0x7f00000007c0)="93becbb8447623c99cfd71eef6731e4fcdbf2300ab130005ccf15c436973f99dfd1d220c6f83a72c86f69b3d0dd7e45531dbd0a5ec4eeab252776d", 0x3b}], 0x3}, 0xc014) write$cgroup_pid(r5, 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) 17.584353344s ago: executing program 3 (id=4887): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x16, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x9}, 0x0, 0x8000000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x1, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x103, 0x830d}, 0x30, 0x2, 0x8, 0x4, 0x0, 0x80}, 0x0, 0x3, r1, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x16, &(0x7f0000000200), 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x1b, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x521}, 0x57) recvmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000800)=[{}, {&(0x7f00000004c0)=""/253, 0xfd}, {&(0x7f0000000680)=""/206, 0xce}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x4, &(0x7f0000000880)=""/102, 0x66}, 0x40012100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x3, &(0x7f0000000180)) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100), 0x4) 17.583877784s ago: executing program 1 (id=4888): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0xa, &(0x7f0000000500), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000140)=r3, 0x4) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000500)=r4, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18500000008dd195c000000000000000950000000000f521d3dac8906b98ab42f074f26c72dc905997acecdd0399398a"], &(0x7f0000000b40)='GPL\x00', 0x0, 0xffffffffffffff43, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xd156c5347d17a84a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[r3]}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff, r1}) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0040011004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) 17.383596339s ago: executing program 4 (id=4889): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x44}, 0x28) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x8, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x140, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad01409bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33", 0x79}, {&(0x7f0000000000)="24e84b13d10b8197015df07dcf473260", 0x10}], 0x2}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="f8363c677c008a6677f1a9bab6053b555601b1d32186221c9f1252303ebbc227d343f7bdaf06b16c182deb669208a84dc406422a4fbfa58c8ac13f23364aea27d7a6d9fc9f249e1479779dfb73bea698cf42e2aecf600d2943d4bc35a89a6fa4e96de40de9077a8acc1ff8d8f588db944f5e744765ba931d08a3bcf138fac02d2c2ad6bf7c23a246aa5a15ce36f083e3582e35145ea5eafd5018f2ade993d1b34f55abf70133bb312d208dccdabd907a15065388913595", 0xb7}, {&(0x7f0000000380)="095b25c9386c", 0x6}], 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="90000000000000000d01000007000000ebbbeac6eaf6bf44d3f16d9276dc593d1de4eb7b12b9928720aefe1f5d655fefd5ad16aa038eb20696b28d595f8b05797acf0464eb8ca1c81bff362d2b9e841b708029292930ead057de2d7f1e06c253c6885a0339ccee3197c42582de64d5195b568a8340494321bc194beba5e2255a9d2577c5f35414e9ce0d00000000000050000000000000000100000001000100e5a3d17495f17ab6e52754f731a8b1dc6a0e24a654073bd87f97b92c789a0a1ab6b2095618b4aea2ac505e74a1961d59ecc8"], 0xe0}, 0xc000) 17.32115862s ago: executing program 0 (id=4890): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="0100010000000000063900000000000045272581000000009500000000000000000000000024a8fcef659fb7edc0c1689b9dff2ec8e207912ab7326b5817b6316f02bfb560d7205584bf6eaaf8d0e2bfa65be405870565f75844f68dfc96b9f09afc0ee611ee8c8500832cad797f1d634f1702db4d64baa3d5921cbdc788e849c05b6e6187786bb97ad4fab0dc10b1f9166ae35089c134214ac8cb651fbf3b1f64a2f09812067049371cca025ef112da21c9362a4c43ca36b7f17d05b211fbcb166f48bd3f17c721adc9dd1f2bf89418eaf7553317af815798c409333d9790461705375eb139d4e507c7518e7f58d513980268692be964c751f889aa560bc9b6c38ab1dc1729794034b3b27fe7abfb2c70759334b834899ec05af932437a4e38255d94b9295bec4ddf40236a25ccd19ab6b052b6c64d6d98a5ee35973f0be44db7ece0959d82c65c88653eaf658755bb53efeda7d2"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x84, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x8601, 0x2000000, 0x1, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x343940, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80001, 0x60731, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0x102000, 0x1, 0xb, 0x9, 0x3, 0xc, 0x43, 0x0, 0x2f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="020b0700fc670000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 17.244887331s ago: executing program 2 (id=4891): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xff00) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000280)}, 0x10) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a18100", 0x14}], 0x1}, 0x800) (rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x2}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0x4044454) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYBLOB="0300000005f20000deffd31cf85bdb280d00"/43], 0x50) (async) r1 = socket$kcm(0x22, 0x2, 0x21) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x3) (async) recvmsg$kcm(r1, &(0x7f0000001b80)={&(0x7f0000000580)=@caif=@rfm, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000640)=""/23, 0x17}, {&(0x7f0000000740)=""/190, 0xbe}, {&(0x7f0000000800)=""/76, 0x4c}, {0x0}], 0x4, &(0x7f0000001a80)=""/226, 0xe2}, 0x4160) (async) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) (async, rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), 0x0}, 0x20) (async) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014f00000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)='%-5lx \x00'}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x500}, 0x57) 17.244589381s ago: executing program 3 (id=4892): socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x406) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, 0x0, 0x9000) 17.160442393s ago: executing program 1 (id=4893): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x3, 0x73) socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000000)=r1, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x75324cc7ada9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f92a24fc60", 0x14}], 0x3}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'vxcan1\x00', @link_local}) 17.079267085s ago: executing program 0 (id=4894): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.944885948s ago: executing program 3 (id=4895): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x7f, 0x8c, 0xff, 0x0, 0x9dc2, 0x40, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6c51, 0x0, @perf_config_ext={0x2, 0xbe0e}, 0x118100, 0x7, 0x2, 0x2, 0xfffffffffffffff7, 0xfffff800, 0x3, 0x0, 0xb9, 0x0, 0x6c2c5297}, 0x0, 0x7, r1, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0xfff5, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x10) 16.944629828s ago: executing program 2 (id=4896): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200e01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x39c}, 0x0) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) close(r3) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.86216943s ago: executing program 4 (id=4897): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069003600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000280), 0x7}, 0x0, 0xecb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0086a0f69ba7f900"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000240)='b', &(0x7f0000000000)=""/1, 0x2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r1, &(0x7f0000000a80), 0x0}, 0x20) socketpair(0x1e, 0x1, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r0, r5}, 0xc) 16.707113293s ago: executing program 3 (id=4898): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x280000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1000, 0x7}, 0x80000, 0xca, 0x0, 0x1c886ebd47f613bd, 0x0, 0x400000, 0x0, 0x0, 0x12, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x9a) 16.39688591s ago: executing program 3 (id=4899): socket$kcm(0x11, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = socket$kcm(0x2, 0x2, 0x73) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r1, 0x0, 0x3, &(0x7f0000000080)='\x92(\x00'}, 0x30) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffcf, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[], 0x6) 15.698353345s ago: executing program 1 (id=4900): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 15.688367066s ago: executing program 2 (id=4901): socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40305828, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[], 0x9) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x0, 0x9, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1000000, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.674530666s ago: executing program 0 (id=4902): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x400c0d1) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffefffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b07d25a806f8c6394f90424fc60040001002b1b0100083582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22ffef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r3, 0x24, 0x0, 0xfff2, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 15.632139497s ago: executing program 4 (id=4903): socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x1, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) socket$kcm(0x1e, 0x4, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 15.608071337s ago: executing program 3 (id=4904): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x343940, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80001, 0x60731, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0x102000, 0x1, 0xb, 0x9, 0x3, 0xc, 0x43, 0x0, 0x2f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="020b0700fc670000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 15.456915381s ago: executing program 1 (id=4905): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0d2e0020fdcc6177d93790ff", @ANYRES32, @ANYBLOB="0800000000000000950000000000000045"], 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='.'}, 0x30) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair(0x24, 0x800, 0x774, &(0x7f0000000380)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 15.177357657s ago: executing program 2 (id=4906): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0d2e0020fdcc6177d93790ff", @ANYRES32, @ANYBLOB="0800000000000000950000000000000045"], 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='.'}, 0x30) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair(0x24, 0x800, 0x774, &(0x7f0000000380)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) (fail_nth: 1) 15.165817417s ago: executing program 0 (id=4907): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x44}, 0x28) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x8, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x140, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad01409bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33", 0x79}, {&(0x7f0000000000)="24e84b13d10b8197015df07dcf473260", 0x10}], 0x2}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="f8363c677c008a6677f1a9bab6053b555601b1d32186221c9f1252303ebbc227d343f7bdaf06b16c182deb669208a84dc406422a4fbfa58c8ac13f23364aea27d7a6d9fc9f249e1479779dfb73bea698cf42e2aecf600d2943d4bc35a89a6fa4e96de40de9077a8acc1ff8d8f588db944f5e744765ba931d08a3bcf138fac02d2c2ad6bf7c23a246aa5a15ce36f083e3582e35145ea5eafd5018f2ade993d1b34f55abf70133bb312d208dccdabd907a15065388913595", 0xb7}, {&(0x7f0000000380)="095b25c9386c", 0x6}], 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="90000000000000000d01000007000000ebbbeac6eaf6bf44d3f16d9276dc593d1de4eb7b12b9928720aefe1f5d655fefd5ad16aa038eb20696b28d595f8b05797acf0464eb8ca1c81bff362d2b9e841b708029292930ead057de2d7f1e06c253c6885a0339ccee3197c42582de64d5195b568a8340494321bc194beba5e2255a9d2577c5f35414e9ce0d00000000000050000000000000000100000001000100e5a3d17495f17ab6e52754f731a8b1dc6a0e24a654073bd87f97b92c789a0a1ab6b2095618b4aea2ac505e74a1961d59ecc8"], 0xe0}, 0xc000) 0s ago: executing program 32 (id=4907): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x44}, 0x28) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x8, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x140, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad01409bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33", 0x79}, {&(0x7f0000000000)="24e84b13d10b8197015df07dcf473260", 0x10}], 0x2}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="f8363c677c008a6677f1a9bab6053b555601b1d32186221c9f1252303ebbc227d343f7bdaf06b16c182deb669208a84dc406422a4fbfa58c8ac13f23364aea27d7a6d9fc9f249e1479779dfb73bea698cf42e2aecf600d2943d4bc35a89a6fa4e96de40de9077a8acc1ff8d8f588db944f5e744765ba931d08a3bcf138fac02d2c2ad6bf7c23a246aa5a15ce36f083e3582e35145ea5eafd5018f2ade993d1b34f55abf70133bb312d208dccdabd907a15065388913595", 0xb7}, {&(0x7f0000000380)="095b25c9386c", 0x6}], 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="90000000000000000d01000007000000ebbbeac6eaf6bf44d3f16d9276dc593d1de4eb7b12b9928720aefe1f5d655fefd5ad16aa038eb20696b28d595f8b05797acf0464eb8ca1c81bff362d2b9e841b708029292930ead057de2d7f1e06c253c6885a0339ccee3197c42582de64d5195b568a8340494321bc194beba5e2255a9d2577c5f35414e9ce0d00000000000050000000000000000100000001000100e5a3d17495f17ab6e52754f731a8b1dc6a0e24a654073bd87f97b92c789a0a1ab6b2095618b4aea2ac505e74a1961d59ecc8"], 0xe0}, 0xc000) kernel console output (not intermixed with test programs): 9.150421][T15098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.170668][T15098] RSP: 002b:00007f5fe7ab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 639.179093][T15098] RAX: ffffffffffffffda RBX: 00007f5fe6e25fa0 RCX: 00007f5fe6b9de59 [ 639.187095][T15098] RDX: 0000000000000047 RSI: 00002000000002c0 RDI: 000000000000000a [ 639.195233][T15098] RBP: 00007f5fe7ab3090 R08: 0000000000000000 R09: 0000000000000000 [ 639.203248][T15098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.211261][T15098] R13: 00007f5fe6e26038 R14: 00007f5fe6e25fa0 R15: 00007ffc5f29c948 [ 639.219797][T15098] [ 639.702524][T15114] netlink: 'syz.0.3725': attribute type 29 has an invalid length. [ 639.745260][T15114] netlink: 'syz.0.3725': attribute type 29 has an invalid length. [ 639.819161][T15114] netlink: 'syz.0.3725': attribute type 29 has an invalid length. [ 639.857710][T15114] netlink: 'syz.0.3725': attribute type 29 has an invalid length. [ 641.310137][T15136] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.3731'. [ 642.088653][T15148] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3735'. [ 642.104800][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 642.216629][T15153] netlink: 'syz.4.3737': attribute type 3 has an invalid length. [ 642.247856][T15153] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3737'. [ 643.111281][T15176] netlink: 'syz.4.3745': attribute type 21 has an invalid length. [ 643.142255][T15176] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3745'. [ 643.227420][T15176] sock: sock_set_timeout: `syz.4.3745' (pid 15176) tries to set negative timeout [ 643.364477][T15179] FAULT_INJECTION: forcing a failure. [ 643.364477][T15179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.429433][T15179] CPU: 1 PID: 15179 Comm: syz.0.3746 Not tainted syzkaller #0 [ 643.436996][T15179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 643.447160][T15179] Call Trace: [ 643.450476][T15179] [ 643.453463][T15179] dump_stack_lvl+0x188/0x24e [ 643.458180][T15179] ? show_regs_print_info+0x12/0x12 [ 643.463403][T15179] ? load_image+0x410/0x410 [ 643.467961][T15179] ? __lock_acquire+0x7bd0/0x7bd0 [ 643.473199][T15179] ? snprintf+0xe5/0x140 [ 643.477584][T15179] should_fail_ex+0x390/0x4c0 [ 643.482655][T15179] _copy_to_user+0x2c/0x130 [ 643.487214][T15179] simple_read_from_buffer+0xe3/0x150 [ 643.492627][T15179] proc_fail_nth_read+0x1a6/0x220 [ 643.498134][T15179] ? proc_fault_inject_write+0x310/0x310 [ 643.503923][T15179] ? fsnotify_perm+0x248/0x550 [ 643.509168][T15179] ? proc_fault_inject_write+0x310/0x310 [ 643.515114][T15179] vfs_read+0x2db/0x960 [ 643.519431][T15179] ? kernel_read+0x1e0/0x1e0 [ 643.524515][T15179] ? __fget_files+0x28/0x460 [ 643.529143][T15179] ? __fget_files+0x3fc/0x460 [ 643.533876][T15179] ? __fdget_pos+0x2ae/0x360 [ 643.538518][T15179] ? ksys_read+0x70/0x260 [ 643.542903][T15179] ksys_read+0x14d/0x260 [ 643.547212][T15179] ? vfs_write+0x9a0/0x9a0 [ 643.551701][T15179] ? lockdep_hardirqs_on+0x94/0x140 [ 643.557051][T15179] do_syscall_64+0x4c/0xa0 [ 643.561508][T15179] ? clear_bhb_loop+0x60/0xb0 [ 643.566220][T15179] ? clear_bhb_loop+0x60/0xb0 [ 643.570935][T15179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 643.576877][T15179] RIP: 0033:0x7f5fe6b5e68e [ 643.581317][T15179] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 643.600987][T15179] RSP: 002b:00007f5fe7ab2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 643.609455][T15179] RAX: ffffffffffffffda RBX: 00007f5fe7ab36c0 RCX: 00007f5fe6b5e68e [ 643.617561][T15179] RDX: 000000000000000f RSI: 00007f5fe7ab30a0 RDI: 0000000000000009 [ 643.625583][T15179] RBP: 00007f5fe7ab3090 R08: 0000000000000000 R09: 0000000000000000 [ 643.633586][T15179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 643.641684][T15179] R13: 00007f5fe6e26038 R14: 00007f5fe6e25fa0 R15: 00007ffc5f29c948 [ 643.649715][T15179] [ 644.082836][T15184] netlink: 'syz.2.3748': attribute type 2 has an invalid length. [ 644.358972][T15184] device 4 entered promiscuous mode [ 644.652524][T15193] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3751'. [ 644.792018][T15193] netlink: 'syz.0.3751': attribute type 12 has an invalid length. [ 644.851153][T15193] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3751'. [ 645.159539][T15198] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3752'. [ 645.252914][T15203] FAULT_INJECTION: forcing a failure. [ 645.252914][T15203] name failslab, interval 1, probability 0, space 0, times 0 [ 645.356275][T15203] CPU: 0 PID: 15203 Comm: syz.2.3754 Not tainted syzkaller #0 [ 645.363818][T15203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 645.373905][T15203] Call Trace: [ 645.377202][T15203] [ 645.380154][T15203] dump_stack_lvl+0x188/0x24e [ 645.384863][T15203] ? show_regs_print_info+0x12/0x12 [ 645.390090][T15203] ? load_image+0x410/0x410 [ 645.394630][T15203] ? __might_sleep+0xd0/0xd0 [ 645.399249][T15203] ? __lock_acquire+0x7bd0/0x7bd0 [ 645.404316][T15203] should_fail_ex+0x390/0x4c0 [ 645.409117][T15203] should_failslab+0x5/0x20 [ 645.413657][T15203] slab_pre_alloc_hook+0x59/0x300 [ 645.418740][T15203] kmem_cache_alloc_node+0x5a/0x310 [ 645.424414][T15203] ? __alloc_skb+0xf9/0x7d0 [ 645.428956][T15203] __alloc_skb+0xf9/0x7d0 [ 645.433320][T15203] alloc_skb_with_frags+0xa7/0x710 [ 645.438648][T15203] ? mark_lock+0x94/0x320 [ 645.443014][T15203] sock_alloc_send_pskb+0x87f/0x9a0 [ 645.448271][T15203] ? sock_kzfree_s+0x50/0x50 [ 645.452907][T15203] tun_get_user+0x800/0x3c20 [ 645.457555][T15203] ? rcu_read_unlock+0xa0/0xa0 [ 645.462697][T15203] ? tun_get+0x1c/0x2e0 [ 645.466880][T15203] ? __lock_acquire+0x7bd0/0x7bd0 [ 645.472106][T15203] ? tun_get+0x1c/0x2e0 [ 645.476270][T15203] tun_chr_write_iter+0x112/0x1f0 [ 645.481623][T15203] vfs_write+0x482/0x9a0 [ 645.485875][T15203] ? file_end_write+0x250/0x250 [ 645.491164][T15203] ? __fget_files+0x3fc/0x460 [ 645.495934][T15203] ? __fdget_pos+0x1d4/0x360 [ 645.501139][T15203] ? ksys_write+0x70/0x260 [ 645.505577][T15203] ksys_write+0x14d/0x260 [ 645.509910][T15203] ? __ia32_sys_read+0x80/0x80 [ 645.514693][T15203] ? lockdep_hardirqs_on+0x94/0x140 [ 645.519915][T15203] do_syscall_64+0x4c/0xa0 [ 645.524349][T15203] ? clear_bhb_loop+0x60/0xb0 [ 645.529032][T15203] ? clear_bhb_loop+0x60/0xb0 [ 645.533799][T15203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.539705][T15203] RIP: 0033:0x7f071fd9de59 [ 645.544122][T15203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.563737][T15203] RSP: 002b:00007f0720c9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 645.572159][T15203] RAX: ffffffffffffffda RBX: 00007f0720025fa0 RCX: 00007f071fd9de59 [ 645.580151][T15203] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 645.588159][T15203] RBP: 00007f0720c9b090 R08: 0000000000000000 R09: 0000000000000000 [ 645.596142][T15203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.604659][T15203] R13: 00007f0720026038 R14: 00007f0720025fa0 R15: 00007ffc6dc34bf8 [ 645.612693][T15203] [ 645.985574][T15207] netlink: 'syz.4.3756': attribute type 10 has an invalid length. [ 646.063912][T15207] team0: Port device netdevsim0 added [ 646.098253][T15214] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3757'. [ 646.616093][T15221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 647.822869][T15244] FAULT_INJECTION: forcing a failure. [ 647.822869][T15244] name failslab, interval 1, probability 0, space 0, times 0 [ 647.880844][T15244] CPU: 0 PID: 15244 Comm: syz.3.3768 Not tainted syzkaller #0 [ 647.888483][T15244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 647.898578][T15244] Call Trace: [ 647.901978][T15244] [ 647.904935][T15244] dump_stack_lvl+0x188/0x24e [ 647.909651][T15244] ? show_regs_print_info+0x12/0x12 [ 647.914889][T15244] ? load_image+0x410/0x410 [ 647.919533][T15244] ? netlink_sendmsg+0x654/0xbd0 [ 647.924520][T15244] ? verify_lock_unused+0x140/0x140 [ 647.929761][T15244] should_fail_ex+0x390/0x4c0 [ 647.934501][T15244] should_failslab+0x5/0x20 [ 647.939039][T15244] slab_pre_alloc_hook+0x59/0x300 [ 647.944115][T15244] kmem_cache_alloc+0x56/0x2f0 [ 647.948916][T15244] ? skb_clone+0x1e7/0x370 [ 647.953377][T15244] skb_clone+0x1e7/0x370 [ 647.957926][T15244] __netlink_deliver_tap+0x3e4/0x7e0 [ 647.963340][T15244] ? netlink_deliver_tap+0x2e/0x1b0 [ 647.968586][T15244] netlink_deliver_tap+0x19c/0x1b0 [ 647.973834][T15244] netlink_unicast+0x777/0x920 [ 647.978656][T15244] netlink_sendmsg+0x8ad/0xbd0 [ 647.983465][T15244] ? netlink_getsockopt+0x550/0x550 [ 647.988703][T15244] ? aa_sock_msg_perm+0x94/0x150 [ 647.993691][T15244] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 647.999022][T15244] ? security_socket_sendmsg+0x7c/0xa0 [ 648.004534][T15244] ? netlink_getsockopt+0x550/0x550 [ 648.009782][T15244] ____sys_sendmsg+0x5ed/0x9a0 [ 648.014866][T15244] ? __sys_sendmsg_sock+0x30/0x30 [ 648.019926][T15244] ? __import_iovec+0x306/0x510 [ 648.024829][T15244] ? import_iovec+0x6f/0xa0 [ 648.029401][T15244] ___sys_sendmsg+0x2a2/0x360 [ 648.034132][T15244] ? __sys_sendmsg+0x2a0/0x2a0 [ 648.038957][T15244] ? __lock_acquire+0x7bd0/0x7bd0 [ 648.044044][T15244] __se_sys_sendmsg+0x1c3/0x2b0 [ 648.048939][T15244] ? __x64_sys_sendmsg+0x80/0x80 [ 648.054122][T15244] ? lockdep_hardirqs_on+0x94/0x140 [ 648.059379][T15244] do_syscall_64+0x4c/0xa0 [ 648.063821][T15244] ? clear_bhb_loop+0x60/0xb0 [ 648.068539][T15244] ? clear_bhb_loop+0x60/0xb0 [ 648.073248][T15244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 648.079276][T15244] RIP: 0033:0x7f424419de59 [ 648.083734][T15244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.103385][T15244] RSP: 002b:00007f424512d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 648.112110][T15244] RAX: ffffffffffffffda RBX: 00007f4244425fa0 RCX: 00007f424419de59 [ 648.121078][T15244] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 648.129612][T15244] RBP: 00007f424512d090 R08: 0000000000000000 R09: 0000000000000000 [ 648.138145][T15244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.146152][T15244] R13: 00007f4244426038 R14: 00007f4244425fa0 R15: 00007ffe1fd55768 [ 648.154177][T15244] [ 648.972129][T15255] netlink: 'syz.3.3771': attribute type 29 has an invalid length. [ 649.048904][T15258] netlink: 'syz.0.3772': attribute type 2 has an invalid length. [ 649.913375][T15255] netlink: 'syz.3.3771': attribute type 29 has an invalid length. [ 649.968319][T15259] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.3773'. [ 650.012468][T15258] device 3 entered promiscuous mode [ 650.745761][T15284] netlink: 'syz.0.3778': attribute type 21 has an invalid length. [ 650.817670][T15284] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3778'. [ 650.950493][T15284] sock: sock_set_timeout: `syz.0.3778' (pid 15284) tries to set negative timeout [ 651.563894][T15308] netlink: 'syz.1.3788': attribute type 2 has an invalid length. [ 651.668359][T15308] device 6 entered promiscuous mode [ 652.371663][T15327] netlink: 'syz.1.3796': attribute type 21 has an invalid length. [ 652.405366][T15327] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3796'. [ 652.458987][T15327] sock: sock_set_timeout: `syz.1.3796' (pid 15327) tries to set negative timeout [ 654.086707][T15357] netlink: 'syz.1.3803': attribute type 2 has an invalid length. [ 654.124190][T15357] device 7 entered promiscuous mode [ 654.140150][T15362] netlink: 'syz.3.3806': attribute type 7 has an invalid length. [ 654.169755][T15362] netlink: 208404 bytes leftover after parsing attributes in process `syz.3.3806'. [ 655.908988][T15400] netlink: 'syz.2.3821': attribute type 4 has an invalid length. [ 656.321305][T15410] netlink: 'syz.4.3825': attribute type 29 has an invalid length. [ 656.458960][T15410] netlink: 'syz.4.3825': attribute type 29 has an invalid length. [ 656.568481][T15412] netlink: 'syz.4.3825': attribute type 29 has an invalid length. [ 657.465251][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 658.578725][T15427] IPv6: Can't replace route, no match found [ 658.790168][T15436] FAULT_INJECTION: forcing a failure. [ 658.790168][T15436] name failslab, interval 1, probability 0, space 0, times 0 [ 658.865309][T15436] CPU: 1 PID: 15436 Comm: syz.2.3833 Not tainted syzkaller #0 [ 658.872901][T15436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 658.883120][T15436] Call Trace: [ 658.887558][T15436] [ 658.890745][T15436] dump_stack_lvl+0x188/0x24e [ 658.895608][T15436] ? show_regs_print_info+0x12/0x12 [ 658.900885][T15436] ? load_image+0x410/0x410 [ 658.905509][T15436] ? __might_sleep+0xd0/0xd0 [ 658.910200][T15436] ? __lock_acquire+0x7bd0/0x7bd0 [ 658.915358][T15436] should_fail_ex+0x390/0x4c0 [ 658.920140][T15436] should_failslab+0x5/0x20 [ 658.924739][T15436] slab_pre_alloc_hook+0x59/0x300 [ 658.930280][T15436] ? __lock_acquire+0x130c/0x7bd0 [ 658.935396][T15436] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 658.941929][T15436] __kmem_cache_alloc_node+0x4f/0x270 [ 658.948310][T15436] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 658.954206][T15436] __kmalloc+0xa3/0x240 [ 658.958460][T15436] tomoyo_realpath_from_path+0xe2/0x5c0 [ 658.964071][T15436] ? tomoyo_domain+0xd2/0x120 [ 658.969008][T15436] ? tomoyo_path_number_perm+0x205/0x650 [ 658.974688][T15436] tomoyo_path_number_perm+0x22f/0x650 [ 658.980196][T15436] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 658.985695][T15436] ? ksys_write+0x1ce/0x260 [ 658.990231][T15436] ? common_file_perm+0x171/0x1c0 [ 658.995381][T15436] ? __fget_files+0x28/0x460 [ 659.000053][T15436] security_file_ioctl+0x6c/0xa0 [ 659.005072][T15436] __se_sys_ioctl+0x48/0x170 [ 659.009773][T15436] do_syscall_64+0x4c/0xa0 [ 659.014519][T15436] ? clear_bhb_loop+0x60/0xb0 [ 659.019272][T15436] ? clear_bhb_loop+0x60/0xb0 [ 659.023994][T15436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 659.029963][T15436] RIP: 0033:0x7f071fd9de59 [ 659.034425][T15436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.054105][T15436] RSP: 002b:00007f0720c9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 659.062601][T15436] RAX: ffffffffffffffda RBX: 00007f0720025fa0 RCX: 00007f071fd9de59 [ 659.070644][T15436] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 659.078654][T15436] RBP: 00007f0720c9b090 R08: 0000000000000000 R09: 0000000000000000 [ 659.086694][T15436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.094698][T15436] R13: 00007f0720026038 R14: 00007f0720025fa0 R15: 00007ffc6dc34bf8 [ 659.102793][T15436] [ 659.195993][T15436] ERROR: Out of memory at tomoyo_realpath_from_path. [ 659.999078][T15446] device syzkaller0 entered promiscuous mode [ 660.017966][T15457] bridge0: port 3(veth0_to_bond) entered blocking state [ 660.051811][T15453] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.3838'. [ 660.095591][T15457] bridge0: port 3(veth0_to_bond) entered disabled state [ 660.108053][T15453] openvswitch: netlink: Key type 386 is out of range max 32 [ 660.120084][T15457] device veth0_to_bond entered promiscuous mode [ 660.129083][T15457] bridge0: port 3(veth0_to_bond) entered blocking state [ 660.136435][T15457] bridge0: port 3(veth0_to_bond) entered forwarding state [ 660.146297][T15450] delete_channel: no stack [ 660.161307][T15460] netlink: 'syz.1.3841': attribute type 1 has an invalid length. [ 660.397645][T15468] FAULT_INJECTION: forcing a failure. [ 660.397645][T15468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.434836][T15468] CPU: 1 PID: 15468 Comm: syz.4.3844 Not tainted syzkaller #0 [ 660.442471][T15468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 660.452564][T15468] Call Trace: [ 660.455867][T15468] [ 660.458817][T15468] dump_stack_lvl+0x188/0x24e [ 660.463520][T15468] ? show_regs_print_info+0x12/0x12 [ 660.468727][T15468] ? load_image+0x410/0x410 [ 660.473265][T15468] ? __lock_acquire+0x7bd0/0x7bd0 [ 660.478326][T15468] should_fail_ex+0x390/0x4c0 [ 660.483037][T15468] _copy_from_user+0x2c/0x170 [ 660.487775][T15468] __sys_bpf+0x2ea/0x780 [ 660.492049][T15468] ? bpf_link_show_fdinfo+0x380/0x380 [ 660.497432][T15468] ? lock_chain_count+0x20/0x20 [ 660.502293][T15468] __x64_sys_bpf+0x78/0x90 [ 660.506711][T15468] do_syscall_64+0x4c/0xa0 [ 660.511129][T15468] ? clear_bhb_loop+0x60/0xb0 [ 660.515822][T15468] ? clear_bhb_loop+0x60/0xb0 [ 660.521035][T15468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.527034][T15468] RIP: 0033:0x7fb7d5b9de59 [ 660.531473][T15468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.551117][T15468] RSP: 002b:00007fb7d6b45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 660.559539][T15468] RAX: ffffffffffffffda RBX: 00007fb7d5e25fa0 RCX: 00007fb7d5b9de59 [ 660.567534][T15468] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 660.576486][T15468] RBP: 00007fb7d6b45090 R08: 0000000000000000 R09: 0000000000000000 [ 660.584496][T15468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.592568][T15468] R13: 00007fb7d5e26038 R14: 00007fb7d5e25fa0 R15: 00007fff1b985d68 [ 660.601192][T15468] [ 663.451614][T15476] device sit0 entered promiscuous mode [ 663.504313][T15477] netlink: 'syz.1.3846': attribute type 39 has an invalid length. [ 663.636806][T15493] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3850'. [ 663.907475][T15502] netlink: 'syz.2.3853': attribute type 3 has an invalid length. [ 663.919383][T15502] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3853'. [ 664.145352][T15506] netlink: 'syz.3.3856': attribute type 2 has an invalid length. [ 664.173901][T15506] device 7 entered promiscuous mode [ 665.170785][T15536] IPv6: Can't replace route, no match found [ 667.108966][T15558] netlink: 'syz.4.3869': attribute type 3 has an invalid length. [ 667.123831][T15558] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3869'. [ 667.705064][ T4281] Bluetooth: hci7: command 0x0406 tx timeout [ 668.533613][T15564] netlink: 'syz.1.3870': attribute type 2 has an invalid length. [ 668.572792][T15564] device 8 entered promiscuous mode [ 669.363859][T15590] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3879'. [ 669.729354][T15595] netlink: 'syz.0.3881': attribute type 3 has an invalid length. [ 669.740249][T15595] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3881'. [ 670.949582][T15604] netlink: 'syz.0.3885': attribute type 2 has an invalid length. [ 670.976312][T15604] device 4 entered promiscuous mode [ 671.600163][T15618] netlink: 'syz.1.3891': attribute type 21 has an invalid length. [ 671.623135][T15618] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3891'. [ 671.760053][T15622] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3892'. [ 671.932645][T15625] device macsec0 entered promiscuous mode [ 672.349239][T15636] netlink: 'syz.2.3896': attribute type 2 has an invalid length. [ 672.436604][T15636] device 5 entered promiscuous mode [ 673.086903][T15653] netlink: 'syz.4.3904': attribute type 21 has an invalid length. [ 673.180384][T15655] netlink: 'syz.2.3905': attribute type 2 has an invalid length. [ 673.223150][T15655] netlink: 'syz.2.3905': attribute type 8 has an invalid length. [ 673.270200][T15655] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3905'. [ 675.068705][T15674] netlink: 'syz.0.3907': attribute type 16 has an invalid length. [ 675.114807][T15674] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3907'. [ 675.672379][T15683] netlink: 'syz.2.3911': attribute type 2 has an invalid length. [ 675.792544][T15683] device 6 entered promiscuous mode [ 676.188103][T15693] netlink: 'syz.2.3913': attribute type 3 has an invalid length. [ 676.207587][T15693] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3913'. [ 676.435676][T15698] tap0: tun_chr_ioctl cmd 1074025694 [ 676.453044][T15698] tap0: tun_chr_ioctl cmd 1074025694 [ 676.476778][T15698] tap0: tun_chr_ioctl cmd 1074812117 [ 676.790981][T15710] netlink: 'syz.1.3921': attribute type 22 has an invalid length. [ 676.809984][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3921'. [ 676.859389][T15711] netlink: 'syz.2.3920': attribute type 10 has an invalid length. [ 677.056544][T15719] netlink: 'syz.3.3923': attribute type 2 has an invalid length. [ 677.178906][T15719] device 8 entered promiscuous mode [ 677.928361][T15736] netlink: 'syz.1.3930': attribute type 3 has an invalid length. [ 677.960156][T15736] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3930'. [ 678.632255][T15752] netlink: 'syz.1.3935': attribute type 10 has an invalid length. [ 678.777652][T15760] netlink: 'syz.0.3939': attribute type 2 has an invalid length. [ 679.014720][T15767] netlink: 'syz.3.3941': attribute type 3 has an invalid length. [ 679.023517][T15767] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3941'. [ 679.190356][T15760] device 5 entered promiscuous mode [ 679.626709][T15775] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3944'. [ 680.126497][ T4281] Bluetooth: hci3: ACL packet for unknown connection handle 531 [ 681.202783][T15804] validate_nla: 1 callbacks suppressed [ 681.202805][T15804] netlink: 'syz.4.3955': attribute type 2 has an invalid length. [ 681.222290][T15806] netlink: 'syz.1.3952': attribute type 3 has an invalid length. [ 681.222711][T15808] netlink: 'syz.2.3954': attribute type 3 has an invalid length. [ 681.245764][T15806] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3952'. [ 681.254948][T15808] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3954'. [ 681.279808][T15804] device 1 entered promiscuous mode [ 682.258848][T15827] netlink: 'syz.4.3959': attribute type 10 has an invalid length. [ 682.803478][T15832] netlink: 'syz.2.3960': attribute type 41 has an invalid length. [ 682.820549][T15832] netlink: 'syz.2.3960': attribute type 4 has an invalid length. [ 682.836736][T15832] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3960'. [ 682.869185][T15832] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 683.143112][T15846] netlink: 'syz.4.3966': attribute type 3 has an invalid length. [ 683.181819][T15846] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3966'. [ 683.653372][T15864] netlink: 'syz.2.3970': attribute type 3 has an invalid length. [ 683.727907][T15864] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3970'. [ 684.229327][T15877] netlink: 'syz.3.3977': attribute type 29 has an invalid length. [ 684.240838][T15877] netlink: 'syz.3.3977': attribute type 29 has an invalid length. [ 684.705092][ T4281] Bluetooth: hci6: ACL packet for unknown connection handle 531 [ 685.105593][T15890] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3982'. [ 686.122466][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.129824][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.704508][ T4281] Bluetooth: hci7: ACL packet for unknown connection handle 531 [ 686.754433][T15932] validate_nla: 2 callbacks suppressed [ 686.849669][T15932] netlink: 'syz.3.3996': attribute type 3 has an invalid length. [ 686.886510][T15932] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3996'. [ 688.281734][T15967] netlink: 'syz.0.4009': attribute type 4 has an invalid length. [ 688.314742][T15967] netlink: 'syz.0.4009': attribute type 3 has an invalid length. [ 688.322802][T15967] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.4009'. [ 688.601066][T15977] netlink: 'syz.1.4011': attribute type 3 has an invalid length. [ 688.619026][T15977] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4011'. [ 689.222696][T15986] netlink: 'syz.0.4013': attribute type 4 has an invalid length. [ 691.062902][T16024] netlink: 'syz.0.4025': attribute type 3 has an invalid length. [ 691.096478][T16024] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4025'. [ 691.119063][T16030] netlink: 'syz.4.4028': attribute type 21 has an invalid length. [ 691.137456][T16030] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4028'. [ 691.154784][T16030] netlink: 'syz.4.4028': attribute type 4 has an invalid length. [ 691.200970][T16030] netlink: 'syz.4.4028': attribute type 5 has an invalid length. [ 691.300809][T16030] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4028'. [ 692.440392][T16058] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4033'. [ 692.477239][T16064] netlink: 'syz.0.4038': attribute type 3 has an invalid length. [ 692.528099][T16064] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4038'. [ 693.331079][T16074] netlink: 'syz.4.4041': attribute type 3 has an invalid length. [ 693.405109][T16074] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4041'. [ 693.608677][T16081] netlink: 'syz.0.4043': attribute type 21 has an invalid length. [ 693.632164][T16081] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4043'. [ 693.681174][T16081] netlink: 'syz.0.4043': attribute type 4 has an invalid length. [ 693.728009][T16081] netlink: 'syz.0.4043': attribute type 3 has an invalid length. [ 693.825247][T16081] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4043'. [ 694.120004][T16090] netlink: 115120 bytes leftover after parsing attributes in process `syz.2.4046'. [ 694.233583][T16090] netlink: zone id is out of range [ 694.274880][T16090] netlink: zone id is out of range [ 694.294814][T16090] netlink: zone id is out of range [ 694.321577][T16090] netlink: zone id is out of range [ 694.342904][T16090] netlink: zone id is out of range [ 694.372727][T16098] FAULT_INJECTION: forcing a failure. [ 694.372727][T16098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.397630][T16090] netlink: zone id is out of range [ 694.433380][T16090] netlink: zone id is out of range [ 694.444953][T16098] CPU: 0 PID: 16098 Comm: syz.1.4048 Not tainted syzkaller #0 [ 694.452461][T16098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 694.462754][T16098] Call Trace: [ 694.466060][T16098] [ 694.469093][T16098] dump_stack_lvl+0x188/0x24e [ 694.473781][T16098] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 694.479950][T16098] ? show_regs_print_info+0x12/0x12 [ 694.485254][T16098] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 694.491921][T16098] should_fail_ex+0x390/0x4c0 [ 694.496716][T16098] _copy_from_user+0x2c/0x170 [ 694.501429][T16098] __sys_bpf+0x2ea/0x780 [ 694.505712][T16098] ? bpf_link_show_fdinfo+0x380/0x380 [ 694.511121][T16098] ? lock_chain_count+0x20/0x20 [ 694.515987][T16098] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 694.521986][T16098] __x64_sys_bpf+0x78/0x90 [ 694.526496][T16098] do_syscall_64+0x4c/0xa0 [ 694.530933][T16098] ? clear_bhb_loop+0x60/0xb0 [ 694.535631][T16098] ? clear_bhb_loop+0x60/0xb0 [ 694.540348][T16098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 694.546603][T16098] RIP: 0033:0x7f0fd539de59 [ 694.551022][T16098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.570742][T16098] RSP: 002b:00007f0fd61f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 694.579189][T16098] RAX: ffffffffffffffda RBX: 00007f0fd5625fa0 RCX: 00007f0fd539de59 [ 694.587162][T16098] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000012 [ 694.595131][T16098] RBP: 00007f0fd61f7090 R08: 0000000000000000 R09: 0000000000000000 [ 694.603442][T16098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.611408][T16098] R13: 00007f0fd5626038 R14: 00007f0fd5625fa0 R15: 00007ffd351f80c8 [ 694.619393][T16098] [ 694.655228][T16090] netlink: zone id is out of range [ 694.669830][T16105] netlink: 'syz.0.4050': attribute type 2 has an invalid length. [ 694.684801][T16090] netlink: zone id is out of range [ 694.698427][T16105] device 6 entered promiscuous mode [ 694.712026][T16090] netlink: zone id is out of range [ 694.960894][ T4281] Bluetooth: hci4: ACL packet for unknown connection handle 531 [ 695.043520][T16115] netlink: 'syz.2.4056': attribute type 3 has an invalid length. [ 695.052485][T16115] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4056'. [ 695.392960][T16123] netlink: 'syz.4.4059': attribute type 4 has an invalid length. [ 695.491984][T16123] netlink: 'syz.4.4059': attribute type 3 has an invalid length. [ 695.998358][T16141] netlink: 'syz.4.4064': attribute type 2 has an invalid length. [ 696.079669][T16141] device 2 entered promiscuous mode [ 696.441597][ T4281] Bluetooth: hci6: ACL packet for unknown connection handle 531 [ 696.622678][T16151] FAULT_INJECTION: forcing a failure. [ 696.622678][T16151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.645340][T16151] CPU: 0 PID: 16151 Comm: syz.4.4068 Not tainted syzkaller #0 [ 696.652872][T16151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 696.662971][T16151] Call Trace: [ 696.666283][T16151] [ 696.669241][T16151] dump_stack_lvl+0x188/0x24e [ 696.674012][T16151] ? show_regs_print_info+0x12/0x12 [ 696.679252][T16151] ? load_image+0x410/0x410 [ 696.683808][T16151] ? __lock_acquire+0x7bd0/0x7bd0 [ 696.688874][T16151] ? tomoyo_path_number_perm+0x205/0x650 [ 696.694555][T16151] ? tomoyo_path_number_perm+0x5a4/0x650 [ 696.700498][T16151] should_fail_ex+0x390/0x4c0 [ 696.705228][T16151] _copy_from_user+0x2c/0x170 [ 696.707187][T16157] __nla_validate_parse: 2 callbacks suppressed [ 696.707225][T16157] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4070'. [ 696.709935][T16151] wext_handle_ioctl+0xc4/0x1d0 [ 696.709974][T16151] ? call_commit_handler+0xf0/0xf0 [ 696.710024][T16151] sock_ioctl+0x143/0x700 [ 696.710059][T16151] ? sock_poll+0x420/0x420 [ 696.710102][T16151] ? bpf_lsm_file_ioctl+0x5/0x10 [ 696.749420][T16151] ? security_file_ioctl+0x7c/0xa0 [ 696.754566][T16151] ? sock_poll+0x420/0x420 [ 696.759004][T16151] __se_sys_ioctl+0xfa/0x170 [ 696.763616][T16151] do_syscall_64+0x4c/0xa0 [ 696.768044][T16151] ? clear_bhb_loop+0x60/0xb0 [ 696.772726][T16151] ? clear_bhb_loop+0x60/0xb0 [ 696.777411][T16151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 696.783429][T16151] RIP: 0033:0x7fb7d5b9de59 [ 696.788014][T16151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.807658][T16151] RSP: 002b:00007fb7d6b45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.816096][T16151] RAX: ffffffffffffffda RBX: 00007fb7d5e25fa0 RCX: 00007fb7d5b9de59 [ 696.824114][T16151] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 0000000000000008 [ 696.832110][T16151] RBP: 00007fb7d6b45090 R08: 0000000000000000 R09: 0000000000000000 [ 696.840089][T16151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.848063][T16151] R13: 00007fb7d5e26038 R14: 00007fb7d5e25fa0 R15: 00007fff1b985d68 [ 696.856087][T16151] [ 697.995268][T16180] validate_nla: 2 callbacks suppressed [ 697.995294][T16180] netlink: 'syz.4.4078': attribute type 2 has an invalid length. [ 698.100233][T16180] device 3 entered promiscuous mode [ 698.513063][ T4281] Bluetooth: hci3: ACL packet for unknown connection handle 531 [ 698.689655][T16191] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.4082'. [ 699.010119][T16205] netlink: 'syz.1.4085': attribute type 3 has an invalid length. [ 699.066257][T16205] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4085'. [ 699.621944][T16226] net_ratelimit: 3660 callbacks suppressed [ 699.621965][T16226] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 699.784064][T16229] netlink: 'syz.2.4093': attribute type 2 has an invalid length. [ 699.813277][T16229] device 7 entered promiscuous mode [ 699.880490][ T4281] Bluetooth: hci4: ACL packet for unknown connection handle 531 [ 700.086758][T16239] netlink: 'syz.2.4097': attribute type 2 has an invalid length. [ 700.141119][T16239] device 8 entered promiscuous mode [ 700.497014][T16250] netlink: 'syz.4.4100': attribute type 3 has an invalid length. [ 700.526343][T16250] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4100'. [ 701.169898][T16268] netlink: 'syz.4.4107': attribute type 2 has an invalid length. [ 701.267246][T16268] device 4 entered promiscuous mode [ 701.299050][T16263] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.4105'. [ 701.326960][T16276] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.4108'. [ 701.328908][T16275] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.4108'. [ 701.443905][T16276] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 701.502698][T16276] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 701.533043][T16276] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 702.337895][T16293] netlink: 'syz.0.4114': attribute type 3 has an invalid length. [ 702.385165][T16293] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4114'. [ 703.142469][T16313] netlink: 'syz.3.4121': attribute type 2 has an invalid length. [ 705.367611][T16306] bond0: (slave wlan1): Error: Slave device does not support XDP [ 705.384425][T16313] device 9 entered promiscuous mode [ 705.513609][T16320] netlink: 'syz.0.4122': attribute type 3 has an invalid length. [ 705.521908][T16320] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4122'. [ 705.930413][T16333] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.4126'. [ 705.954619][T16333] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 707.713741][T16360] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4130'. [ 708.007162][T16367] netlink: 'syz.2.4135': attribute type 2 has an invalid length. [ 708.217329][T16367] device 9 entered promiscuous mode [ 708.898177][T16387] device bridge_slave_1 left promiscuous mode [ 708.964480][T16387] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.117387][T16387] device bridge_slave_0 left promiscuous mode [ 710.126137][T16387] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.266649][T16387] bond0: (slave bridge0): Releasing backup interface [ 710.511006][T16414] netlink: 'syz.2.4149': attribute type 2 has an invalid length. [ 710.532184][T16412] FAULT_INJECTION: forcing a failure. [ 710.532184][T16412] name failslab, interval 1, probability 0, space 0, times 0 [ 710.545776][T16412] CPU: 1 PID: 16412 Comm: syz.0.4150 Not tainted syzkaller #0 [ 710.553276][T16412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 710.557558][T16414] device 10 entered promiscuous mode [ 710.563340][T16412] Call Trace: [ 710.563355][T16412] [ 710.574942][T16412] dump_stack_lvl+0x188/0x24e [ 710.579648][T16412] ? sctp_sendmsg+0x1686/0x2940 [ 710.584519][T16412] ? ___sys_sendmsg+0x2a2/0x360 [ 710.589390][T16412] ? show_regs_print_info+0x12/0x12 [ 710.594613][T16412] ? load_image+0x410/0x410 [ 710.599174][T16412] should_fail_ex+0x390/0x4c0 [ 710.603887][T16412] should_failslab+0x5/0x20 [ 710.608409][T16412] slab_pre_alloc_hook+0x59/0x300 [ 710.613991][T16412] ? sctp_add_bind_addr+0x89/0x350 [ 710.619133][T16412] __kmem_cache_alloc_node+0x4f/0x270 [ 710.624540][T16412] ? sctp_add_bind_addr+0x89/0x350 [ 710.629689][T16412] kmalloc_trace+0x26/0xe0 [ 710.634142][T16412] sctp_add_bind_addr+0x89/0x350 [ 710.639101][T16412] sctp_copy_local_addr_list+0x317/0x4d0 [ 710.644750][T16412] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 710.650490][T16412] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 710.656651][T16412] ? sctp_v4_is_any+0x31/0x50 [ 710.661611][T16412] ? sctp_copy_one_addr+0x93/0x660 [ 710.666745][T16412] sctp_bind_addr_copy+0xaf/0x3c0 [ 710.671783][T16412] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 710.678124][T16412] sctp_connect_new_asoc+0x2f5/0x6a0 [ 710.683424][T16412] ? __sctp_connect+0xd80/0xd80 [ 710.688274][T16412] ? __local_bh_enable_ip+0x136/0x1c0 [ 710.693653][T16412] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 710.699202][T16412] ? security_sctp_bind_connect+0x85/0xb0 [ 710.704942][T16412] sctp_sendmsg+0x1686/0x2940 [ 710.710163][T16412] ? sctp_getsockopt+0x8a0/0x8a0 [ 710.715110][T16412] ? __might_fault+0xa6/0x120 [ 710.719785][T16412] ? aa_af_perm+0x340/0x340 [ 710.724288][T16412] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 710.730714][T16412] ? inet_sendmsg+0xca/0x2a0 [ 710.735305][T16412] ? inet_send_prepare+0x250/0x250 [ 710.740416][T16412] ____sys_sendmsg+0x5ed/0x9a0 [ 710.745192][T16412] ? __sys_sendmsg_sock+0x30/0x30 [ 710.750214][T16412] ? __import_iovec+0x306/0x510 [ 710.755072][T16412] ? import_iovec+0x6f/0xa0 [ 710.759577][T16412] ___sys_sendmsg+0x2a2/0x360 [ 710.764263][T16412] ? __sys_sendmsg+0x2a0/0x2a0 [ 710.769039][T16412] ? __lock_acquire+0x7bd0/0x7bd0 [ 710.774082][T16412] __se_sys_sendmsg+0x1c3/0x2b0 [ 710.778929][T16412] ? ct_nmi_exit+0x145/0x1c0 [ 710.783701][T16412] ? __x64_sys_sendmsg+0x80/0x80 [ 710.788649][T16412] ? lockdep_hardirqs_on+0x94/0x140 [ 710.793852][T16412] do_syscall_64+0x4c/0xa0 [ 710.798266][T16412] ? clear_bhb_loop+0x60/0xb0 [ 710.802938][T16412] ? clear_bhb_loop+0x60/0xb0 [ 710.807612][T16412] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 710.813703][T16412] RIP: 0033:0x7f5fe6b9de59 [ 710.818141][T16412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.837779][T16412] RSP: 002b:00007f5fe7ab3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.846206][T16412] RAX: ffffffffffffffda RBX: 00007f5fe6e25fa0 RCX: 00007f5fe6b9de59 [ 710.854201][T16412] RDX: 000000000004c0e0 RSI: 00002000000006c0 RDI: 0000000000000004 [ 710.862205][T16412] RBP: 00007f5fe7ab3090 R08: 0000000000000000 R09: 0000000000000000 [ 710.870185][T16412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 710.878158][T16412] R13: 00007f5fe6e26038 R14: 00007f5fe6e25fa0 R15: 00007ffc5f29c948 [ 710.886145][T16412] [ 711.218612][T16426] netlink: 'syz.0.4155': attribute type 3 has an invalid length. [ 711.277731][T16426] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4155'. [ 711.371889][T16430] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.4154'. [ 712.359952][T16456] netlink: 'syz.3.4163': attribute type 2 has an invalid length. [ 712.388419][T16454] netlink: 'syz.0.4162': attribute type 2 has an invalid length. [ 712.412606][T16454] netlink: 'syz.0.4162': attribute type 8 has an invalid length. [ 712.422218][T16454] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4162'. [ 712.450472][T16456] device 10 entered promiscuous mode [ 712.465651][T16460] netlink: 'syz.4.4165': attribute type 10 has an invalid length. [ 712.510826][T16460] team0: Port device dummy0 added [ 712.541800][T16457] FAULT_INJECTION: forcing a failure. [ 712.541800][T16457] name failslab, interval 1, probability 0, space 0, times 0 [ 712.564613][T16457] CPU: 0 PID: 16457 Comm: syz.0.4162 Not tainted syzkaller #0 [ 712.572149][T16457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 712.582242][T16457] Call Trace: [ 712.585543][T16457] [ 712.588489][T16457] dump_stack_lvl+0x188/0x24e [ 712.593189][T16457] ? show_regs_print_info+0x12/0x12 [ 712.598416][T16457] ? load_image+0x410/0x410 [ 712.602953][T16457] ? __might_sleep+0xd0/0xd0 [ 712.607573][T16457] ? __lock_acquire+0x7bd0/0x7bd0 [ 712.612638][T16457] should_fail_ex+0x390/0x4c0 [ 712.617348][T16457] should_failslab+0x5/0x20 [ 712.621875][T16457] slab_pre_alloc_hook+0x59/0x300 [ 712.626930][T16457] kmem_cache_alloc_node+0x5a/0x310 [ 712.632148][T16457] ? __alloc_skb+0xf9/0x7d0 [ 712.636681][T16457] __alloc_skb+0xf9/0x7d0 [ 712.641041][T16457] netlink_ack+0x373/0x1160 [ 712.645579][T16457] ? ref_tracker_free+0x682/0x830 [ 712.650625][T16457] ? refcount_inc+0x70/0x70 [ 712.655376][T16457] ? netlink_dump+0xcd0/0xcd0 [ 712.660095][T16457] ? __copy_skb_header+0x3ba/0x4f0 [ 712.665243][T16457] ? __skb_clone+0x446/0x6c0 [ 712.669860][T16457] netlink_rcv_skb+0x26d/0x440 [ 712.674645][T16457] ? rtnetlink_bind+0x80/0x80 [ 712.679352][T16457] ? netlink_ack+0x1160/0x1160 [ 712.684152][T16457] ? netlink_deliver_tap+0x2e/0x1b0 [ 712.689381][T16457] netlink_unicast+0x7ad/0x920 [ 712.694184][T16457] netlink_sendmsg+0x8ad/0xbd0 [ 712.698980][T16457] ? netlink_getsockopt+0x550/0x550 [ 712.704235][T16457] ? aa_sock_msg_perm+0x94/0x150 [ 712.709196][T16457] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 712.714503][T16457] ? security_socket_sendmsg+0x7c/0xa0 [ 712.719982][T16457] ? netlink_getsockopt+0x550/0x550 [ 712.725205][T16457] ____sys_sendmsg+0x5ed/0x9a0 [ 712.730000][T16457] ? __sys_sendmsg_sock+0x30/0x30 [ 712.735136][T16457] ? __import_iovec+0x306/0x510 [ 712.740019][T16457] ? import_iovec+0x6f/0xa0 [ 712.744533][T16457] ___sys_sendmsg+0x2a2/0x360 [ 712.749243][T16457] ? __sys_sendmsg+0x2a0/0x2a0 [ 712.754057][T16457] ? __lock_acquire+0x7bd0/0x7bd0 [ 712.759142][T16457] __se_sys_sendmsg+0x1c3/0x2b0 [ 712.764020][T16457] ? __x64_sys_sendmsg+0x80/0x80 [ 712.768967][T16457] ? lockdep_hardirqs_on+0x94/0x140 [ 712.774196][T16457] do_syscall_64+0x4c/0xa0 [ 712.778638][T16457] ? clear_bhb_loop+0x60/0xb0 [ 712.783337][T16457] ? clear_bhb_loop+0x60/0xb0 [ 712.788216][T16457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 712.794146][T16457] RIP: 0033:0x7f5fe6b9de59 [ 712.798596][T16457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.818328][T16457] RSP: 002b:00007f5fe7a92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.826785][T16457] RAX: ffffffffffffffda RBX: 00007f5fe6e26090 RCX: 00007f5fe6b9de59 [ 712.834793][T16457] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 712.842810][T16457] RBP: 00007f5fe7a92090 R08: 0000000000000000 R09: 0000000000000000 [ 712.850834][T16457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.858855][T16457] R13: 00007f5fe6e26128 R14: 00007f5fe6e26090 R15: 00007ffc5f29c948 [ 712.866889][T16457] [ 713.156765][T16478] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.4169'. [ 713.985924][T16509] FAULT_INJECTION: forcing a failure. [ 713.985924][T16509] name failslab, interval 1, probability 0, space 0, times 0 [ 713.998655][T16509] CPU: 0 PID: 16509 Comm: syz.0.4178 Not tainted syzkaller #0 [ 714.006145][T16509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 714.016231][T16509] Call Trace: [ 714.019525][T16509] [ 714.022469][T16509] dump_stack_lvl+0x188/0x24e [ 714.027176][T16509] ? verify_lock_unused+0x140/0x140 [ 714.032386][T16509] ? show_regs_print_info+0x12/0x12 [ 714.037591][T16509] ? load_image+0x410/0x410 [ 714.042107][T16509] should_fail_ex+0x390/0x4c0 [ 714.046787][T16509] should_failslab+0x5/0x20 [ 714.051286][T16509] slab_pre_alloc_hook+0x59/0x300 [ 714.056312][T16509] kmem_cache_alloc+0x56/0x2f0 [ 714.061095][T16509] ? __nf_conntrack_alloc+0x93/0x370 [ 714.066506][T16509] __nf_conntrack_alloc+0x93/0x370 [ 714.071640][T16509] init_conntrack+0x23b/0x1190 [ 714.076507][T16509] ? early_drop+0x870/0x870 [ 714.081024][T16509] ? nf_conntrack_find_get+0x640/0x640 [ 714.086487][T16509] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 714.092475][T16509] ? __siphash_unaligned+0x289/0x3d0 [ 714.097768][T16509] nf_conntrack_in+0xd76/0x1830 [ 714.102624][T16509] ? lockdep_hardirqs_on+0x94/0x140 [ 714.108927][T16509] ? nf_ct_pernet+0x270/0x270 [ 714.115203][T16509] ? ipt_do_table+0x2c1/0x1580 [ 714.120164][T16509] ? read_lock_is_recursive+0x10/0x10 [ 714.125540][T16509] ? get_random_u32+0x4d1/0x930 [ 714.130511][T16509] ? ipv4_conntrack_defrag+0x284/0x5b0 [ 714.135970][T16509] ? ipv4_conntrack_local+0x11f/0x200 [ 714.141350][T16509] ? ipv4_conntrack_in+0x20/0x20 [ 714.146291][T16509] nf_hook_slow+0xb9/0x200 [ 714.150712][T16509] ? nf_hook+0x390/0x390 [ 714.154955][T16509] nf_hook+0x224/0x390 [ 714.159027][T16509] ? nf_hook+0x9e/0x390 [ 714.163186][T16509] ? __ip_local_out+0x5d0/0x5d0 [ 714.168040][T16509] ? nf_hook+0x390/0x390 [ 714.172277][T16509] ? lockdep_hardirqs_on+0x94/0x140 [ 714.177520][T16509] ? ip_fast_csum+0x1ea/0x2b0 [ 714.182200][T16509] __ip_local_out+0x49c/0x5d0 [ 714.186901][T16509] ? nf_hook+0x390/0x390 [ 714.191179][T16509] ip_local_out+0x26/0x120 [ 714.195619][T16509] iptunnel_xmit+0x4a1/0x880 [ 714.200231][T16509] udp_tunnel_xmit_skb+0x22b/0x380 [ 714.205359][T16509] geneve_xmit+0x2684/0x3490 [ 714.209975][T16509] ? geneve_xmit+0x153/0x3490 [ 714.214657][T16509] ? geneve_stop+0x1b0/0x1b0 [ 714.219244][T16509] ? netif_skb_features+0xb6c/0x1630 [ 714.224541][T16509] ? xfrm_init_replay+0x2a0/0x2a0 [ 714.229569][T16509] ? dev_hard_start_xmit+0x8b0/0x8b0 [ 714.234863][T16509] dev_hard_start_xmit+0x292/0x8b0 [ 714.240076][T16509] ? validate_xmit_skb_list+0x120/0x120 [ 714.245656][T16509] __dev_queue_xmit+0x1b4b/0x3810 [ 714.250707][T16509] ? __dev_queue_xmit+0x281/0x3810 [ 714.255819][T16509] ? read_seqbegin+0x122/0x250 [ 714.260582][T16509] ? lockdep_hardirqs_on+0x94/0x140 [ 714.265791][T16509] ? netdev_core_pick_tx+0x360/0x360 [ 714.271073][T16509] ? __local_bh_enable_ip+0x136/0x1c0 [ 714.276445][T16509] ? eth_header+0x117/0x200 [ 714.280948][T16509] ? memcpy+0x3c/0x60 [ 714.284928][T16509] ? eth_header+0x117/0x200 [ 714.289431][T16509] ? llc_sysctl_exit+0x60/0x60 [ 714.294190][T16509] ? neigh_resolve_output+0x5f1/0x700 [ 714.299572][T16509] ? ip_finish_output2+0x407/0x1220 [ 714.304768][T16509] ip_finish_output2+0xd53/0x1220 [ 714.309825][T16509] ? ip_finish_output2+0x407/0x1220 [ 714.315051][T16509] ? __ip_local_out+0x5d0/0x5d0 [ 714.319931][T16509] ? ip_mc_finish_output+0x260/0x260 [ 714.325234][T16509] ? ip_fragment+0x210/0x210 [ 714.329825][T16509] ? dev_loopback_xmit+0x2b1/0x430 [ 714.334949][T16509] ? dev_loopback_xmit+0x2e2/0x430 [ 714.340058][T16509] ? ip_skb_dst_mtu+0x583/0x9b0 [ 714.344911][T16509] ? ip_finish_output+0x3e8/0x4b0 [ 714.349952][T16509] ip_send_skb+0x129/0x1c0 [ 714.354369][T16509] udp_send_skb+0xa4f/0x13f0 [ 714.359006][T16509] udp_sendmsg+0x1b46/0x23d0 [ 714.363615][T16509] ? release_sock+0x2b/0x1b0 [ 714.368312][T16509] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 714.373171][T16509] ? udp_cmsg_send+0x350/0x350 [ 714.377942][T16509] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 714.383930][T16509] ? lock_chain_count+0x20/0x20 [ 714.388793][T16509] ? __local_bh_enable_ip+0x136/0x1c0 [ 714.394163][T16509] ? _local_bh_enable+0xa0/0xa0 [ 714.399011][T16509] ? inet_sendmsg+0x109/0x2a0 [ 714.403959][T16509] ? inet_sendmsg+0x109/0x2a0 [ 714.408669][T16509] ? inet_send_prepare+0x250/0x250 [ 714.413811][T16509] ____sys_sendmsg+0x5ed/0x9a0 [ 714.418590][T16509] ? __lock_acquire+0x7bd0/0x7bd0 [ 714.423627][T16509] ? __sys_sendmsg_sock+0x30/0x30 [ 714.428654][T16509] ? __import_iovec+0x306/0x510 [ 714.433512][T16509] ? import_iovec+0x6f/0xa0 [ 714.438765][T16509] ___sys_sendmsg+0x2a2/0x360 [ 714.443465][T16509] ? __sys_sendmsg+0x2a0/0x2a0 [ 714.448270][T16509] ? __lock_acquire+0x7bd0/0x7bd0 [ 714.453322][T16509] __se_sys_sendmsg+0x1c3/0x2b0 [ 714.458198][T16509] ? __x64_sys_sendmsg+0x80/0x80 [ 714.463145][T16509] ? lockdep_hardirqs_on+0x94/0x140 [ 714.468441][T16509] do_syscall_64+0x4c/0xa0 [ 714.472852][T16509] ? clear_bhb_loop+0x60/0xb0 [ 714.477783][T16509] ? clear_bhb_loop+0x60/0xb0 [ 714.482458][T16509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.488354][T16509] RIP: 0033:0x7f5fe6b9de59 [ 714.492874][T16509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.512699][T16509] RSP: 002b:00007f5fe7ab3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.521133][T16509] RAX: ffffffffffffffda RBX: 00007f5fe6e25fa0 RCX: 00007f5fe6b9de59 [ 714.529102][T16509] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 714.537074][T16509] RBP: 00007f5fe7ab3090 R08: 0000000000000000 R09: 0000000000000000 [ 714.545135][T16509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 714.553111][T16509] R13: 00007f5fe6e26038 R14: 00007f5fe6e25fa0 R15: 00007ffc5f29c948 [ 714.561115][T16509] [ 714.803707][T16516] netlink: 'syz.2.4180': attribute type 2 has an invalid length. [ 714.850824][T16516] device 11 entered promiscuous mode [ 715.189295][T16523] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.4184'. [ 715.677206][T16541] FAULT_INJECTION: forcing a failure. [ 715.677206][T16541] name failslab, interval 1, probability 0, space 0, times 0 [ 715.734904][T16541] CPU: 1 PID: 16541 Comm: syz.3.4189 Not tainted syzkaller #0 [ 715.742529][T16541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 715.752627][T16541] Call Trace: [ 715.755975][T16541] [ 715.758936][T16541] dump_stack_lvl+0x188/0x24e [ 715.763650][T16541] ? show_regs_print_info+0x12/0x12 [ 715.768859][T16541] ? load_image+0x410/0x410 [ 715.773385][T16541] ? __might_sleep+0xd0/0xd0 [ 715.777998][T16541] ? __lock_acquire+0x7bd0/0x7bd0 [ 715.783049][T16541] should_fail_ex+0x390/0x4c0 [ 715.787948][T16541] should_failslab+0x5/0x20 [ 715.792475][T16541] slab_pre_alloc_hook+0x59/0x300 [ 715.797539][T16541] kmem_cache_alloc_lru+0x49/0x2e0 [ 715.802670][T16541] ? __d_alloc+0x2e/0x6e0 [ 715.807061][T16541] __d_alloc+0x2e/0x6e0 [ 715.811235][T16541] d_alloc+0x46/0x250 [ 715.815585][T16541] lookup_one_qstr_excl+0xc6/0x240 [ 715.820849][T16541] filename_create+0x242/0x450 [ 715.825756][T16541] ? kern_path_create+0x50/0x50 [ 715.830643][T16541] ? __virt_addr_valid+0x467/0x540 [ 715.835786][T16541] do_mkdirat+0xa5/0x440 [ 715.840052][T16541] ? vfs_mkdir+0x570/0x570 [ 715.845437][T16541] __x64_sys_mkdirat+0x85/0x90 [ 715.850241][T16541] do_syscall_64+0x4c/0xa0 [ 715.854691][T16541] ? clear_bhb_loop+0x60/0xb0 [ 715.859385][T16541] ? clear_bhb_loop+0x60/0xb0 [ 715.864080][T16541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 715.870000][T16541] RIP: 0033:0x7f424419de59 [ 715.874431][T16541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.894073][T16541] RSP: 002b:00007f424512d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 715.902514][T16541] RAX: ffffffffffffffda RBX: 00007f4244425fa0 RCX: 00007f424419de59 [ 715.910514][T16541] RDX: 00000000000001ff RSI: 00002000000000c0 RDI: 000000000000000b [ 715.918946][T16541] RBP: 00007f424512d090 R08: 0000000000000000 R09: 0000000000000000 [ 715.926988][T16541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.934974][T16541] R13: 00007f4244426038 R14: 00007f4244425fa0 R15: 00007ffe1fd55768 [ 715.942974][T16541] [ 716.235705][T16559] netlink: 'syz.2.4195': attribute type 2 has an invalid length. [ 716.250276][T16559] device 12 entered promiscuous mode [ 716.443609][T16563] netlink: 'syz.0.4206': attribute type 2 has an invalid length. [ 716.520997][T16563] device 7 entered promiscuous mode [ 717.231189][T16582] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.4199'. [ 717.286415][T16565] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4196'. [ 718.322576][T16604] sctp: [Deprecated]: syz.2.4207 (pid 16604) Use of struct sctp_assoc_value in delayed_ack socket option. [ 718.322576][T16604] Use struct sctp_sack_info instead [ 718.472606][T16613] netlink: 'syz.3.4210': attribute type 2 has an invalid length. [ 718.849697][T16613] device 11 entered promiscuous mode [ 720.967773][T16641] netlink: 'syz.1.4218': attribute type 3 has an invalid length. [ 720.976841][T16641] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4218'. [ 721.105386][T16647] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.4217'. [ 723.441722][T16658] FAULT_INJECTION: forcing a failure. [ 723.441722][T16658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.504202][T16658] CPU: 1 PID: 16658 Comm: syz.0.4224 Not tainted syzkaller #0 [ 723.511731][T16658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 723.521795][T16658] Call Trace: [ 723.525067][T16658] [ 723.527984][T16658] dump_stack_lvl+0x188/0x24e [ 723.532655][T16658] ? show_regs_print_info+0x12/0x12 [ 723.537839][T16658] ? load_image+0x410/0x410 [ 723.542331][T16658] ? __lock_acquire+0x7bd0/0x7bd0 [ 723.547349][T16658] should_fail_ex+0x390/0x4c0 [ 723.552011][T16658] _copy_from_user+0x2c/0x170 [ 723.557141][T16658] __sys_bpf+0x2ea/0x780 [ 723.561435][T16658] ? bpf_link_show_fdinfo+0x380/0x380 [ 723.566857][T16658] ? lock_chain_count+0x20/0x20 [ 723.571836][T16658] __x64_sys_bpf+0x78/0x90 [ 723.576257][T16658] do_syscall_64+0x4c/0xa0 [ 723.580676][T16658] ? clear_bhb_loop+0x60/0xb0 [ 723.585440][T16658] ? clear_bhb_loop+0x60/0xb0 [ 723.590118][T16658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 723.596013][T16658] RIP: 0033:0x7f5fe6b9de59 [ 723.600428][T16658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.620233][T16658] RSP: 002b:00007f5fe7ab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 723.629479][T16658] RAX: ffffffffffffffda RBX: 00007f5fe6e25fa0 RCX: 00007f5fe6b9de59 [ 723.637481][T16658] RDX: 0000000000000020 RSI: 0000200000002500 RDI: 0000000000000002 [ 723.645485][T16658] RBP: 00007f5fe7ab3090 R08: 0000000000000000 R09: 0000000000000000 [ 723.653493][T16658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.661479][T16658] R13: 00007f5fe6e26038 R14: 00007f5fe6e25fa0 R15: 00007ffc5f29c948 [ 723.669590][T16658] [ 723.726353][T16663] netlink: 'syz.1.4227': attribute type 3 has an invalid length. [ 723.744799][T16663] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4227'. [ 724.525528][T16680] netlink: 'syz.4.4231': attribute type 3 has an invalid length. [ 724.533518][T16680] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4231'. [ 724.575800][T16682] sctp: [Deprecated]: syz.2.4232 (pid 16682) Use of struct sctp_assoc_value in delayed_ack socket option. [ 724.575800][T16682] Use struct sctp_sack_info instead [ 724.942830][T16695] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.4234'. [ 724.993529][T16690] netlink: 'syz.1.4235': attribute type 10 has an invalid length. [ 727.657193][T16690] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 728.726116][T16727] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4246'. [ 730.020089][T16758] netlink: 'syz.2.4268': attribute type 3 has an invalid length. [ 730.058104][T16758] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4268'. [ 730.806821][T16780] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 730.863938][T16780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 733.672824][T16825] netlink: 'syz.3.4275': attribute type 3 has an invalid length. [ 733.700256][T16825] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4275'. [ 735.155676][T16840] netlink: 'syz.1.4280': attribute type 10 has an invalid length. [ 735.163621][T16840] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4280'. [ 735.522012][T16847] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4282'. [ 736.930095][T16863] netlink: 'syz.2.4288': attribute type 3 has an invalid length. [ 737.056266][T16863] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4288'. [ 738.046851][T16875] netlink: 'syz.1.4292': attribute type 3 has an invalid length. [ 738.070877][T16875] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4292'. [ 738.777530][T16884] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4295'. [ 739.381380][T16883] netlink: 'syz.3.4294': attribute type 3 has an invalid length. [ 739.425650][T16883] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4294'. [ 739.599334][T16888] FAULT_INJECTION: forcing a failure. [ 739.599334][T16888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.674938][T16888] CPU: 0 PID: 16888 Comm: syz.4.4296 Not tainted syzkaller #0 [ 739.682704][T16888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 739.692820][T16888] Call Trace: [ 739.696138][T16888] [ 739.699106][T16888] dump_stack_lvl+0x188/0x24e [ 739.703849][T16888] ? show_regs_print_info+0x12/0x12 [ 739.709115][T16888] ? load_image+0x410/0x410 [ 739.713689][T16888] ? __lock_acquire+0x7bd0/0x7bd0 [ 739.718771][T16888] ? __rcu_read_unlock+0x78/0xd0 [ 739.723776][T16888] should_fail_ex+0x390/0x4c0 [ 739.728517][T16888] _copy_to_user+0x2c/0x130 [ 739.733087][T16888] bpf_test_finish+0x198/0x600 [ 739.737930][T16888] ? dst_hold+0xb0/0xb0 [ 739.742143][T16888] ? convert_skb_to___skb+0x420/0x420 [ 739.747702][T16888] bpf_prog_test_run_xdp+0x827/0xf80 [ 739.753053][T16888] ? __lock_acquire+0x7bd0/0x7bd0 [ 739.758187][T16888] ? dev_put+0x80/0x80 [ 739.762362][T16888] ? dev_put+0x80/0x80 [ 739.766497][T16888] bpf_prog_test_run+0x31c/0x390 [ 739.771509][T16888] __sys_bpf+0x62b/0x780 [ 739.775829][T16888] ? bpf_link_show_fdinfo+0x380/0x380 [ 739.781312][T16888] ? lock_chain_count+0x20/0x20 [ 739.786256][T16888] __x64_sys_bpf+0x78/0x90 [ 739.790742][T16888] do_syscall_64+0x4c/0xa0 [ 739.795209][T16888] ? clear_bhb_loop+0x60/0xb0 [ 739.799936][T16888] ? clear_bhb_loop+0x60/0xb0 [ 739.804671][T16888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 739.810615][T16888] RIP: 0033:0x7fb7d5b9de59 [ 739.815078][T16888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.834849][T16888] RSP: 002b:00007fb7d6b45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 739.843336][T16888] RAX: ffffffffffffffda RBX: 00007fb7d5e25fa0 RCX: 00007fb7d5b9de59 [ 739.851367][T16888] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 739.859399][T16888] RBP: 00007fb7d6b45090 R08: 0000000000000000 R09: 0000000000000000 [ 739.867435][T16888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.875556][T16888] R13: 00007fb7d5e26038 R14: 00007fb7d5e25fa0 R15: 00007fff1b985d68 [ 739.883644][T16888] [ 742.437728][T16916] netlink: 'syz.1.4306': attribute type 3 has an invalid length. [ 742.465440][T16916] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4306'. [ 742.797867][T16919] netlink: 'syz.2.4307': attribute type 3 has an invalid length. [ 742.864828][T16919] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4307'. [ 743.999555][T16935] netlink: 'syz.1.4311': attribute type 3 has an invalid length. [ 744.065673][T16935] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4311'. [ 747.115120][T16969] netlink: 'syz.0.4320': attribute type 10 has an invalid length. [ 747.237582][T16969] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4320'. [ 747.547761][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.554281][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.381293][T16981] netlink: 'syz.3.4323': attribute type 3 has an invalid length. [ 748.566895][T16981] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4323'. [ 749.889965][T16995] netlink: 'syz.2.4326': attribute type 3 has an invalid length. [ 749.932783][T16995] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4326'. [ 750.196989][T17001] netlink: 'syz.3.4327': attribute type 29 has an invalid length. [ 750.282221][T17007] netlink: 'syz.0.4328': attribute type 10 has an invalid length. [ 750.411447][T17007] team0: Device wg1 is of different type [ 750.418976][T17012] sctp: [Deprecated]: syz.3.4327 (pid 17012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 750.418976][T17012] Use struct sctp_sack_info instead [ 750.569583][T17001] netlink: 'syz.3.4327': attribute type 29 has an invalid length. [ 750.686184][T17009] netlink: 'syz.3.4327': attribute type 29 has an invalid length. [ 750.947194][T17023] FAULT_INJECTION: forcing a failure. [ 750.947194][T17023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.013381][T17023] CPU: 1 PID: 17023 Comm: syz.0.4332 Not tainted syzkaller #0 [ 751.020934][T17023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 751.031017][T17023] Call Trace: [ 751.034312][T17023] [ 751.037256][T17023] dump_stack_lvl+0x188/0x24e [ 751.041964][T17023] ? show_regs_print_info+0x12/0x12 [ 751.047087][T17027] netlink: 'syz.2.4333': attribute type 3 has an invalid length. [ 751.055166][T17023] ? load_image+0x410/0x410 [ 751.055208][T17023] ? __lock_acquire+0x7bd0/0x7bd0 [ 751.055233][T17023] ? ktime_get+0x7b/0x270 [ 751.055259][T17023] should_fail_ex+0x390/0x4c0 [ 751.055283][T17023] _copy_from_user+0x2c/0x170 [ 751.055305][T17023] __sys_bpf+0x2ea/0x780 [ 751.055329][T17023] ? bpf_link_show_fdinfo+0x380/0x380 [ 751.088373][T17023] ? lock_chain_count+0x20/0x20 [ 751.093418][T17023] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 751.099408][T17023] __x64_sys_bpf+0x78/0x90 [ 751.103830][T17023] do_syscall_64+0x4c/0xa0 [ 751.108243][T17023] ? clear_bhb_loop+0x60/0xb0 [ 751.112914][T17023] ? clear_bhb_loop+0x60/0xb0 [ 751.117672][T17023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 751.123568][T17023] RIP: 0033:0x7f5fe6b9de59 [ 751.127977][T17023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.147598][T17023] RSP: 002b:00007f5fe7ab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 751.156032][T17023] RAX: ffffffffffffffda RBX: 00007f5fe6e25fa0 RCX: 00007f5fe6b9de59 [ 751.164028][T17023] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 751.171997][T17023] RBP: 00007f5fe7ab3090 R08: 0000000000000000 R09: 0000000000000000 [ 751.179963][T17023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.187954][T17023] R13: 00007f5fe6e26038 R14: 00007f5fe6e25fa0 R15: 00007ffc5f29c948 [ 751.195944][T17023] [ 751.215453][T17027] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.4333'. [ 751.711480][T17038] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 751.884215][T17042] netlink: 'syz.0.4337': attribute type 21 has an invalid length. [ 751.931770][T17042] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4337'. [ 753.168716][ T4281] Bluetooth: hci4: ACL packet for unknown connection handle 531 [ 753.455812][T17079] netlink: 'syz.3.4349': attribute type 25 has an invalid length. [ 753.492934][T17079] netlink: 'syz.3.4349': attribute type 25 has an invalid length. [ 753.656922][T17085] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.4352'. [ 753.825018][T17085] netlink: 'syz.4.4352': attribute type 16 has an invalid length. [ 753.926137][T17085] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4352'. [ 754.184656][ T9] wlan1: Trigger new scan to find an IBSS to join [ 755.436109][ T4281] Bluetooth: hci3: ACL packet for unknown connection handle 531 [ 755.638785][T17125] netlink: 'syz.4.4364': attribute type 3 has an invalid length. [ 755.673042][T17125] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4364'. [ 755.765230][T17128] FAULT_INJECTION: forcing a failure. [ 755.765230][T17128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.802982][T17128] CPU: 0 PID: 17128 Comm: syz.3.4363 Not tainted syzkaller #0 [ 755.810522][T17128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 755.820603][T17128] Call Trace: [ 755.823894][T17128] [ 755.826845][T17128] dump_stack_lvl+0x188/0x24e [ 755.831548][T17128] ? show_regs_print_info+0x12/0x12 [ 755.836771][T17128] ? load_image+0x410/0x410 [ 755.841308][T17128] ? __might_fault+0xa6/0x120 [ 755.846021][T17128] should_fail_ex+0x390/0x4c0 [ 755.850820][T17128] copyin+0x1b/0x120 [ 755.854732][T17128] _copy_from_iter+0x447/0x1130 [ 755.859604][T17128] ? copyout_mc+0x110/0x110 [ 755.864125][T17128] ? copyout_mc+0x110/0x110 [ 755.868650][T17128] ? __virt_addr_valid+0x188/0x540 [ 755.873882][T17128] ? page_copy_sane+0x194/0x390 [ 755.878759][T17128] copy_page_from_iter+0x77/0x100 [ 755.883876][T17128] skb_copy_datagram_from_iter+0x2c5/0x6b0 [ 755.890165][T17128] unix_dgram_sendmsg+0x683/0x16f0 [ 755.895310][T17128] ? aa_sk_perm+0x81f/0x950 [ 755.899821][T17128] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 755.906107][T17128] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 755.912397][T17128] ? unix_dgram_poll+0x680/0x680 [ 755.917363][T17128] ? aa_sock_msg_perm+0x94/0x150 [ 755.922319][T17128] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 755.927872][T17128] ? unix_dgram_peer_wake_me+0x430/0x430 [ 755.933519][T17128] ____sys_sendmsg+0x5ed/0x9a0 [ 755.938315][T17128] ? __sys_sendmsg_sock+0x30/0x30 [ 755.943338][T17128] ? __import_iovec+0x306/0x510 [ 755.948199][T17128] ? import_iovec+0x6f/0xa0 [ 755.952704][T17128] ___sys_sendmsg+0x2a2/0x360 [ 755.957385][T17128] ? __sys_sendmsg+0x2a0/0x2a0 [ 755.962163][T17128] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 755.967904][T17128] __se_sys_sendmsg+0x1c3/0x2b0 [ 755.972853][T17128] ? __x64_sys_sendmsg+0x80/0x80 [ 755.978337][T17128] ? lockdep_hardirqs_on+0x94/0x140 [ 755.983552][T17128] ? __x64_sys_sendmsg+0x19/0x80 [ 755.988489][T17128] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 755.993948][T17128] do_syscall_64+0x4c/0xa0 [ 755.998365][T17128] ? clear_bhb_loop+0x60/0xb0 [ 756.003038][T17128] ? clear_bhb_loop+0x60/0xb0 [ 756.007712][T17128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 756.013607][T17128] RIP: 0033:0x7f424419de59 [ 756.018044][T17128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.037671][T17128] RSP: 002b:00007f424512d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 756.046093][T17128] RAX: ffffffffffffffda RBX: 00007f4244425fa0 RCX: 00007f424419de59 [ 756.054061][T17128] RDX: 0000000000000000 RSI: 0000200000002d40 RDI: 0000000000000007 [ 756.062028][T17128] RBP: 00007f424512d090 R08: 0000000000000000 R09: 0000000000000000 [ 756.069996][T17128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 756.078005][T17128] R13: 00007f4244426038 R14: 00007f4244425fa0 R15: 00007ffe1fd55768 [ 756.086007][T17128] [ 756.175364][T17139] sock: sock_timestamping_bind_phc: sock not bind to device [ 756.778697][T17150] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 756.860042][T17156] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.4375'. [ 756.888897][T17156] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.4375'. [ 757.146869][ T7398] wlan1: Trigger new scan to find an IBSS to join [ 757.175230][ T4281] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 758.732805][T17174] FAULT_INJECTION: forcing a failure. [ 758.732805][T17174] name failslab, interval 1, probability 0, space 0, times 0 [ 758.786924][T17174] CPU: 1 PID: 17174 Comm: syz.3.4380 Not tainted syzkaller #0 [ 758.794488][T17174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 758.804578][T17174] Call Trace: [ 758.807892][T17174] [ 758.810857][T17174] dump_stack_lvl+0x188/0x24e [ 758.815594][T17174] ? show_regs_print_info+0x12/0x12 [ 758.820849][T17174] ? load_image+0x410/0x410 [ 758.825433][T17174] ? __might_sleep+0xd0/0xd0 [ 758.830075][T17174] ? __lock_acquire+0x7bd0/0x7bd0 [ 758.835184][T17174] should_fail_ex+0x390/0x4c0 [ 758.840027][T17174] should_failslab+0x5/0x20 [ 758.844572][T17174] slab_pre_alloc_hook+0x59/0x300 [ 758.849665][T17174] kmem_cache_alloc_node+0x5a/0x310 [ 758.854909][T17174] ? __alloc_skb+0xf9/0x7d0 [ 758.859462][T17174] __alloc_skb+0xf9/0x7d0 [ 758.863853][T17174] netlink_sendmsg+0x654/0xbd0 [ 758.868720][T17174] ? netlink_getsockopt+0x550/0x550 [ 758.873986][T17174] ? aa_sock_msg_perm+0x94/0x150 [ 758.878997][T17174] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 758.884330][T17174] ? security_socket_sendmsg+0x7c/0xa0 [ 758.889834][T17174] ? netlink_getsockopt+0x550/0x550 [ 758.895092][T17174] ____sys_sendmsg+0x5ed/0x9a0 [ 758.899935][T17174] ? __import_iovec+0x30f/0x510 [ 758.904927][T17174] ? __sys_sendmsg_sock+0x30/0x30 [ 758.910026][T17174] ? import_iovec+0x6f/0xa0 [ 758.914585][T17174] ___sys_sendmsg+0x2a2/0x360 [ 758.919325][T17174] ? __sys_sendmsg+0x2a0/0x2a0 [ 758.924216][T17174] ? ktime_get+0x7b/0x270 [ 758.928686][T17174] __se_sys_sendmsg+0x1c3/0x2b0 [ 758.933601][T17174] ? __x64_sys_sendmsg+0x80/0x80 [ 758.938639][T17174] ? lockdep_hardirqs_on+0x94/0x140 [ 758.943919][T17174] do_syscall_64+0x4c/0xa0 [ 758.948387][T17174] ? clear_bhb_loop+0x60/0xb0 [ 758.953406][T17174] ? clear_bhb_loop+0x60/0xb0 [ 758.958137][T17174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 758.964083][T17174] RIP: 0033:0x7f424419de59 [ 758.968540][T17174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.988216][T17174] RSP: 002b:00007f424510c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 758.996683][T17174] RAX: ffffffffffffffda RBX: 00007f4244426090 RCX: 00007f424419de59 [ 759.004690][T17174] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 759.012704][T17174] RBP: 00007f424510c090 R08: 0000000000000000 R09: 0000000000000000 [ 759.020729][T17174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.028755][T17174] R13: 00007f4244426128 R14: 00007f4244426090 R15: 00007ffe1fd55768 [ 759.036832][T17174] [ 759.226952][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 760.186317][ T46] wlan1: Creating new IBSS network, BSSID fa:70:a7:3c:83:70 [ 760.989979][T17184] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.4383'. [ 761.102659][T17187] netlink: 'syz.4.4382': attribute type 25 has an invalid length. [ 761.118223][T17187] netlink: 'syz.4.4382': attribute type 25 has an invalid length. [ 762.172897][T17206] netlink: 'syz.1.4391': attribute type 4 has an invalid length. [ 762.253034][T17206] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4391'. [ 763.106044][T17220] netlink: 'syz.4.4393': attribute type 21 has an invalid length. [ 763.224769][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 763.890601][T17232] netlink: 'syz.1.4395': attribute type 21 has an invalid length. [ 763.954937][T17232] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4395'. [ 764.482787][T17240] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.4402'. [ 764.849315][T17253] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4405'. [ 764.871329][T17253] netlink: zone id is out of range [ 764.886883][T17253] netlink: zone id is out of range [ 764.937220][T17253] netlink: zone id is out of range [ 764.961982][T17253] netlink: zone id is out of range [ 764.990508][T17253] netlink: zone id is out of range [ 765.017641][T17253] netlink: zone id is out of range [ 765.034466][T17253] netlink: zone id is out of range [ 765.056359][T17256] netlink: 'syz.4.4406': attribute type 4 has an invalid length. [ 765.075043][T17253] netlink: zone id is out of range [ 765.092489][T17253] netlink: zone id is out of range [ 765.106067][T17256] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4406'. [ 765.110324][T17253] netlink: zone id is out of range [ 765.145191][T13639] wlan1: Creating new IBSS network, BSSID 86:61:2b:f2:3d:4b [ 766.765004][T17289] netlink: 'syz.2.4417': attribute type 21 has an invalid length. [ 767.123575][T17298] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.4420'. [ 767.224739][T17304] netlink: 'syz.3.4422': attribute type 4 has an invalid length. [ 767.233580][T17304] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4422'. [ 768.973167][T17331] netlink: 'syz.4.4432': attribute type 153 has an invalid length. [ 769.019705][T17331] netlink: 69544 bytes leftover after parsing attributes in process `syz.4.4432'. [ 769.517531][T17342] netlink: 'syz.1.4435': attribute type 6 has an invalid length. [ 769.686434][T17344] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.4436'. [ 769.910628][T17354] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4440'. [ 769.988873][T17354] device bridge_slave_1 entered promiscuous mode [ 771.587797][T17384] netlink: 'syz.1.4448': attribute type 3 has an invalid length. [ 771.644105][T17384] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4448'. [ 772.546707][T17400] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.4451'. [ 772.788449][T17404] netlink: 'syz.1.4455': attribute type 1 has an invalid length. [ 772.907470][T17404] netlink: 'syz.1.4455': attribute type 1 has an invalid length. [ 772.957012][T17404] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.4455'. [ 774.066493][T17433] netlink: 'syz.3.4467': attribute type 3 has an invalid length. [ 774.089406][T17433] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4467'. [ 775.569744][T17460] netlink: 'syz.0.4473': attribute type 1 has an invalid length. [ 775.600497][T17460] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4473'. [ 776.258196][T17482] netlink: 'syz.1.4481': attribute type 3 has an invalid length. [ 776.313358][T17482] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4481'. [ 776.836013][T17499] netlink: 'syz.2.4482': attribute type 21 has an invalid length. [ 776.972667][T17499] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4482'. [ 777.724139][T17515] netlink: 'syz.4.4489': attribute type 21 has an invalid length. [ 778.368352][T17522] netlink: 'syz.0.4492': attribute type 153 has an invalid length. [ 778.406637][T17522] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.4492'. [ 779.756590][T17545] netlink: 'syz.3.4500': attribute type 3 has an invalid length. [ 779.773179][T17545] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4500'. [ 780.546199][T17558] netlink: 'syz.2.4505': attribute type 1 has an invalid length. [ 780.631691][T17558] netlink: 'syz.2.4505': attribute type 1 has an invalid length. [ 780.660285][T17558] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.4505'. [ 783.470647][T17600] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4517'. [ 783.639798][T17603] netlink: 'syz.1.4518': attribute type 3 has an invalid length. [ 783.685070][T17603] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4518'. [ 783.971604][T17608] netlink: 'syz.3.4520': attribute type 21 has an invalid length. [ 784.009060][T17608] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4520'. [ 786.027415][T17648] netlink: 'syz.3.4536': attribute type 3 has an invalid length. [ 786.060763][T17648] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4536'. [ 787.630409][ T4281] Bluetooth: hci4: ISO packet for unknown connection handle 3 [ 787.861429][ T4281] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 788.122472][T17680] netlink: 'syz.2.4546': attribute type 2 has an invalid length. [ 788.139223][T17680] FAULT_INJECTION: forcing a failure. [ 788.139223][T17680] name failslab, interval 1, probability 0, space 0, times 0 [ 788.191900][T17680] CPU: 0 PID: 17680 Comm: syz.2.4546 Not tainted syzkaller #0 [ 788.199447][T17680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 788.209889][T17680] Call Trace: [ 788.213188][T17680] [ 788.216153][T17680] dump_stack_lvl+0x188/0x24e [ 788.220871][T17680] ? show_regs_print_info+0x12/0x12 [ 788.226100][T17680] ? load_image+0x410/0x410 [ 788.230728][T17680] ? __might_sleep+0xd0/0xd0 [ 788.235356][T17680] ? __lock_acquire+0x7bd0/0x7bd0 [ 788.240540][T17680] ? kobject_set_name_vargs+0x5d/0x110 [ 788.246047][T17680] should_fail_ex+0x390/0x4c0 [ 788.250762][T17680] should_failslab+0x5/0x20 [ 788.255287][T17680] slab_pre_alloc_hook+0x59/0x300 [ 788.260341][T17680] ? kobject_set_name_vargs+0xc6/0x110 [ 788.266005][T17680] ? device_add+0xb2/0x1050 [ 788.270521][T17680] __kmem_cache_alloc_node+0x4f/0x270 [ 788.276267][T17680] ? device_add+0xb2/0x1050 [ 788.280773][T17680] kmalloc_trace+0x26/0xe0 [ 788.285283][T17680] device_add+0xb2/0x1050 [ 788.289608][T17680] ? device_initialize+0x247/0x450 [ 788.294715][T17680] netdev_register_kobject+0x184/0x320 [ 788.300172][T17680] register_netdevice+0x133a/0x1b80 [ 788.305377][T17680] ? netif_stacked_transfer_operstate+0x200/0x200 [ 788.311786][T17680] ? pcpu_alloc+0x1102/0x16b0 [ 788.316523][T17680] ? _find_next_bit+0x11e/0x130 [ 788.321572][T17680] internal_dev_create+0x3a2/0x550 [ 788.326716][T17680] ovs_vport_add+0x104/0x350 [ 788.331324][T17680] new_vport+0x1a/0x190 [ 788.335491][T17680] ovs_dp_cmd_new+0x728/0xb80 [ 788.340182][T17680] ? destroy_dp_rcu+0xa0/0xa0 [ 788.344867][T17680] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 788.351199][T17680] genl_family_rcv_msg_doit+0x22f/0x350 [ 788.356740][T17680] ? end_current_label_crit_section+0x170/0x170 [ 788.362986][T17680] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 788.368884][T17680] ? bpf_lsm_capable+0x5/0x10 [ 788.373930][T17680] ? security_capable+0x85/0xb0 [ 788.378814][T17680] genl_rcv_msg+0x601/0x790 [ 788.383356][T17680] ? genl_bind+0x360/0x360 [ 788.387781][T17680] ? destroy_dp_rcu+0xa0/0xa0 [ 788.392480][T17680] netlink_rcv_skb+0x1ef/0x440 [ 788.397249][T17680] ? genl_bind+0x360/0x360 [ 788.401753][T17680] ? netlink_ack+0x1160/0x1160 [ 788.406524][T17680] ? down_read+0x1a8/0x2d0 [ 788.410941][T17680] genl_rcv+0x24/0x40 [ 788.414923][T17680] netlink_unicast+0x7ad/0x920 [ 788.419691][T17680] netlink_sendmsg+0x8ad/0xbd0 [ 788.424454][T17680] ? netlink_getsockopt+0x550/0x550 [ 788.429651][T17680] ? aa_sock_msg_perm+0x94/0x150 [ 788.434588][T17680] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 788.439868][T17680] ? security_socket_sendmsg+0x7c/0xa0 [ 788.445323][T17680] ? netlink_getsockopt+0x550/0x550 [ 788.450516][T17680] ____sys_sendmsg+0x5ed/0x9a0 [ 788.455405][T17680] ? __sys_sendmsg_sock+0x30/0x30 [ 788.460535][T17680] ? __import_iovec+0x306/0x510 [ 788.465402][T17680] ? import_iovec+0x6f/0xa0 [ 788.469912][T17680] ___sys_sendmsg+0x2a2/0x360 [ 788.474615][T17680] ? __sys_sendmsg+0x2a0/0x2a0 [ 788.479402][T17680] ? perf_trace_preemptirq_template+0xa8/0x320 [ 788.485591][T17680] ? irqentry_enter+0x33/0x50 [ 788.490294][T17680] ? rcu_is_watching+0x11/0xa0 [ 788.495080][T17680] ? __se_sys_sendmsg+0xd4/0x2b0 [ 788.500040][T17680] __se_sys_sendmsg+0x1c3/0x2b0 [ 788.504899][T17680] ? __x64_sys_sendmsg+0x80/0x80 [ 788.509883][T17680] ? lockdep_hardirqs_on+0x94/0x140 [ 788.515103][T17680] do_syscall_64+0x4c/0xa0 [ 788.519522][T17680] ? clear_bhb_loop+0x60/0xb0 [ 788.524195][T17680] ? clear_bhb_loop+0x60/0xb0 [ 788.528869][T17680] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 788.534766][T17680] RIP: 0033:0x7f071fd9de59 [ 788.539181][T17680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.558795][T17680] RSP: 002b:00007f0720c9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 788.567243][T17680] RAX: ffffffffffffffda RBX: 00007f0720025fa0 RCX: 00007f071fd9de59 [ 788.575239][T17680] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 788.583261][T17680] RBP: 00007f0720c9b090 R08: 0000000000000000 R09: 0000000000000000 [ 788.591238][T17680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 788.599203][T17680] R13: 00007f0720026038 R14: 00007f0720025fa0 R15: 00007ffc6dc34bf8 [ 788.607194][T17680] [ 788.629034][ T4327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 789.141939][T17694] netlink: 'syz.4.4551': attribute type 3 has an invalid length. [ 789.215385][T17694] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4551'. [ 790.400118][ T4281] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 792.296936][ T4281] Bluetooth: hci7: ACL packet for unknown connection handle 0 [ 792.400730][T17754] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.4571'. [ 794.275506][ T4281] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 795.761951][T17796] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.4583'. [ 796.859389][T17825] netlink: 'syz.4.4593': attribute type 6 has an invalid length. [ 797.490547][T17844] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.4601'. [ 797.770579][T17849] netlink: 'syz.3.4603': attribute type 29 has an invalid length. [ 797.792204][T17848] netlink: 'syz.3.4603': attribute type 29 has an invalid length. [ 797.808426][T17849] netlink: 'syz.3.4603': attribute type 29 has an invalid length. [ 797.848330][T17850] netlink: 'syz.3.4603': attribute type 29 has an invalid length. [ 797.876762][T17849] netlink: 'syz.3.4603': attribute type 29 has an invalid length. [ 797.896126][T17848] netlink: 'syz.3.4603': attribute type 29 has an invalid length. [ 798.132585][T17856] netlink: 'syz.4.4606': attribute type 25 has an invalid length. [ 798.149571][T17856] netlink: 'syz.4.4606': attribute type 25 has an invalid length. [ 798.784602][T17882] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.4615'. [ 799.804681][T17892] netlink: 'syz.4.4618': attribute type 4 has an invalid length. [ 799.848991][T17892] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4618'. [ 799.873076][T17892] net_ratelimit: 139 callbacks suppressed [ 799.873099][T17892] wlan1: mtu less than device minimum [ 801.653106][T17933] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.4632'. [ 802.338405][T17949] FAULT_INJECTION: forcing a failure. [ 802.338405][T17949] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 802.353286][T17949] CPU: 0 PID: 17949 Comm: syz.0.4637 Not tainted syzkaller #0 [ 802.360789][T17949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 802.370980][T17949] Call Trace: [ 802.374295][T17949] [ 802.377260][T17949] dump_stack_lvl+0x188/0x24e [ 802.381980][T17949] ? show_regs_print_info+0x12/0x12 [ 802.387212][T17949] ? load_image+0x410/0x410 [ 802.391749][T17949] ? __lock_acquire+0x7bd0/0x7bd0 [ 802.396844][T17949] should_fail_ex+0x390/0x4c0 [ 802.401567][T17949] prepare_alloc_pages+0x1e1/0x5b0 [ 802.406740][T17949] __alloc_pages+0x130/0x4f0 [ 802.411361][T17949] ? zone_statistics+0x170/0x170 [ 802.416323][T17949] ? mark_lock+0x94/0x320 [ 802.420689][T17949] ? __lock_acquire+0x130c/0x7bd0 [ 802.425736][T17949] ? verify_lock_unused+0x140/0x140 [ 802.430967][T17949] __folio_alloc+0xe/0x30 [ 802.435348][T17949] vma_alloc_folio+0x499/0x900 [ 802.440161][T17949] wp_page_copy+0x27a/0x1660 [ 802.444786][T17949] ? __lock_acquire+0x7bd0/0x7bd0 [ 802.449856][T17949] ? fault_dirty_shared_page+0x3c0/0x3c0 [ 802.455516][T17949] ? do_raw_spin_unlock+0x11d/0x230 [ 802.460756][T17949] ? _raw_spin_unlock+0x24/0x40 [ 802.465638][T17949] ? do_wp_page+0xb8f/0x16b0 [ 802.470257][T17949] handle_mm_fault+0x1b1b/0x3d40 [ 802.475231][T17949] ? mt_find+0x157/0x830 [ 802.479525][T17949] ? numa_migrate_prep+0x250/0x250 [ 802.484675][T17949] ? lock_chain_count+0x20/0x20 [ 802.489568][T17949] ? lock_mm_and_find_vma+0xae/0x2f0 [ 802.494887][T17949] do_user_addr_fault+0x58e/0xb20 [ 802.499975][T17949] exc_page_fault+0x60/0x100 [ 802.504602][T17949] asm_exc_page_fault+0x22/0x30 [ 802.509485][T17949] RIP: 0010:copy_user_short_string+0xd/0x40 [ 802.515413][T17949] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 802.535065][T17949] RSP: 0018:ffffc9000d89f9c8 EFLAGS: 00050202 [ 802.541262][T17949] RAX: ffffffff840ff201 RBX: 0000000000000010 RCX: 0000000000000002 [ 802.549266][T17949] RDX: 0000000000000000 RSI: ffffc9000d89fa80 RDI: 0000200000000000 [ 802.557272][T17949] RBP: 0000000000000000 R08: 0000000000000037 R09: 1ffff92001b13f51 [ 802.565285][T17949] R10: dffffc0000000000 R11: fffff52001b13f52 R12: 00007fffffffeff0 [ 802.573283][T17949] R13: 0000000100000000 R14: 0000200000000000 R15: ffffc9000d89fa80 [ 802.581310][T17949] ? _copy_to_user+0x81/0x130 [ 802.586046][T17949] _copy_to_user+0xea/0x130 [ 802.590589][T17949] ethtool_get_sset_info+0x4c6/0x5c0 [ 802.595927][T17949] ? ethtool_reset+0x1f0/0x1f0 [ 802.600730][T17949] ? __sanitizer_cov_trace_switch+0x61/0xe0 [ 802.606670][T17949] dev_ethtool+0x6fc/0x12f0 [ 802.611213][T17949] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 802.617506][T17949] ? __lock_acquire+0x7bd0/0x7bd0 [ 802.622568][T17949] ? __kmem_cache_free+0xb6/0x200 [ 802.627628][T17949] ? full_name_hash+0x8e/0xe0 [ 802.632332][T17949] ? dev_load+0x1d/0x1e0 [ 802.636601][T17949] ? dev_load+0x1d/0x1e0 [ 802.640874][T17949] dev_ioctl+0x474/0xe80 [ 802.645157][T17949] sock_do_ioctl+0x245/0x320 [ 802.649806][T17949] ? sock_show_fdinfo+0xb0/0xb0 [ 802.654736][T17949] sock_ioctl+0x48a/0x700 [ 802.659101][T17949] ? sock_poll+0x420/0x420 [ 802.663572][T17949] ? bpf_lsm_file_ioctl+0x5/0x10 [ 802.668556][T17949] ? security_file_ioctl+0x7c/0xa0 [ 802.673710][T17949] ? sock_poll+0x420/0x420 [ 802.678175][T17949] __se_sys_ioctl+0xfa/0x170 [ 802.682806][T17949] do_syscall_64+0x4c/0xa0 [ 802.687419][T17949] ? clear_bhb_loop+0x60/0xb0 [ 802.692116][T17949] ? clear_bhb_loop+0x60/0xb0 [ 802.696823][T17949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 802.702748][T17949] RIP: 0033:0x7f5fe6b9de59 [ 802.707185][T17949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.726831][T17949] RSP: 002b:00007f5fe7a92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 802.735282][T17949] RAX: ffffffffffffffda RBX: 00007f5fe6e26090 RCX: 00007f5fe6b9de59 [ 802.743276][T17949] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 802.751273][T17949] RBP: 00007f5fe7a92090 R08: 0000000000000000 R09: 0000000000000000 [ 802.759266][T17949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 802.767354][T17949] R13: 00007f5fe6e26128 R14: 00007f5fe6e26090 R15: 00007ffc5f29c948 [ 802.775365][T17949] [ 804.043634][T17974] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4647'. [ 804.076714][T17971] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.4645'. [ 804.283253][T17986] netlink: 'syz.3.4649': attribute type 4 has an invalid length. [ 804.312336][T17986] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4649'. [ 804.358839][T17986] wlan1: mtu less than device minimum [ 805.904824][T18008] netlink: 'syz.3.4658': attribute type 3 has an invalid length. [ 805.913293][T18008] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4658'. [ 806.315641][T18014] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.4661'. [ 808.869920][T18046] FAULT_INJECTION: forcing a failure. [ 808.869920][T18046] name failslab, interval 1, probability 0, space 0, times 0 [ 808.883159][T18046] CPU: 1 PID: 18046 Comm: syz.4.4672 Not tainted syzkaller #0 [ 808.891119][T18046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 808.901206][T18046] Call Trace: [ 808.904542][T18046] [ 808.907497][T18046] dump_stack_lvl+0x188/0x24e [ 808.912210][T18046] ? show_regs_print_info+0x12/0x12 [ 808.917434][T18046] ? load_image+0x410/0x410 [ 808.921969][T18046] ? __might_sleep+0xd0/0xd0 [ 808.926584][T18046] ? __lock_acquire+0x7bd0/0x7bd0 [ 808.931638][T18046] should_fail_ex+0x390/0x4c0 [ 808.936340][T18046] should_failslab+0x5/0x20 [ 808.940854][T18046] slab_pre_alloc_hook+0x59/0x300 [ 808.945903][T18046] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 808.951648][T18046] __kmem_cache_alloc_node+0x4f/0x270 [ 808.957052][T18046] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 808.962728][T18046] __kmalloc_node+0xa2/0x240 [ 808.967345][T18046] memcg_alloc_slab_cgroups+0x81/0x120 [ 808.972901][T18046] slab_post_alloc_hook+0xba/0x490 [ 808.978028][T18046] kmem_cache_alloc_node+0x1ad/0x310 [ 808.983314][T18046] ? __alloc_skb+0xf9/0x7d0 [ 808.987926][T18046] __alloc_skb+0xf9/0x7d0 [ 808.992448][T18046] alloc_skb_with_frags+0xa7/0x710 [ 808.997610][T18046] ? verify_lock_unused+0x140/0x140 [ 809.002830][T18046] ? verify_lock_unused+0x140/0x140 [ 809.008043][T18046] sock_alloc_send_pskb+0x87f/0x9a0 [ 809.013295][T18046] ? sock_kzfree_s+0x50/0x50 [ 809.017899][T18046] ? do_raw_spin_lock+0x128/0x2f0 [ 809.023021][T18046] ? __rwlock_init+0x140/0x140 [ 809.027791][T18046] ? do_raw_spin_unlock+0x11d/0x230 [ 809.032991][T18046] unix_dgram_sendmsg+0x5c1/0x16f0 [ 809.038128][T18046] ? __lock_acquire+0x130c/0x7bd0 [ 809.043171][T18046] ? aa_sk_perm+0x81f/0x950 [ 809.047693][T18046] ? unix_dgram_poll+0x680/0x680 [ 809.052685][T18046] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 809.059118][T18046] ? aa_sock_msg_perm+0x94/0x150 [ 809.064147][T18046] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 809.069429][T18046] ? security_socket_sendmsg+0x7c/0xa0 [ 809.075426][T18046] ? unix_dgram_poll+0x680/0x680 [ 809.080388][T18046] ____sys_sendmsg+0x5ed/0x9a0 [ 809.085188][T18046] ? __might_fault+0xa6/0x120 [ 809.089873][T18046] ? __sys_sendmsg_sock+0x30/0x30 [ 809.094896][T18046] ? __import_iovec+0x306/0x510 [ 809.099752][T18046] ? import_iovec+0x6f/0xa0 [ 809.104263][T18046] ___sys_sendmsg+0x2a2/0x360 [ 809.108945][T18046] ? __sys_sendmsg+0x2a0/0x2a0 [ 809.113834][T18046] ? __lock_acquire+0x7bd0/0x7bd0 [ 809.118897][T18046] __se_sys_sendmsg+0x1c3/0x2b0 [ 809.123761][T18046] ? __x64_sys_sendmsg+0x80/0x80 [ 809.128717][T18046] ? lockdep_hardirqs_on+0x94/0x140 [ 809.134476][T18046] do_syscall_64+0x4c/0xa0 [ 809.139001][T18046] ? clear_bhb_loop+0x60/0xb0 [ 809.143764][T18046] ? clear_bhb_loop+0x60/0xb0 [ 809.148441][T18046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 809.154338][T18046] RIP: 0033:0x7fb7d5b9de59 [ 809.158751][T18046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.178366][T18046] RSP: 002b:00007fb7d6b45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.186779][T18046] RAX: ffffffffffffffda RBX: 00007fb7d5e25fa0 RCX: 00007fb7d5b9de59 [ 809.194746][T18046] RDX: 0000000000000000 RSI: 0000200000000980 RDI: 0000000000000003 [ 809.202839][T18046] RBP: 00007fb7d6b45090 R08: 0000000000000000 R09: 0000000000000000 [ 809.210910][T18046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.218890][T18046] R13: 00007fb7d5e26038 R14: 00007fb7d5e25fa0 R15: 00007fff1b985d68 [ 809.226879][T18046] [ 809.233045][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.239474][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.057899][T18062] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.4678'. [ 811.349048][T18084] FAULT_INJECTION: forcing a failure. [ 811.349048][T18084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.448381][T18084] CPU: 1 PID: 18084 Comm: syz.0.4685 Not tainted syzkaller #0 [ 811.455941][T18084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 811.466221][T18084] Call Trace: [ 811.469524][T18084] [ 811.472566][T18084] dump_stack_lvl+0x188/0x24e [ 811.477274][T18084] ? show_regs_print_info+0x12/0x12 [ 811.482586][T18084] ? load_image+0x410/0x410 [ 811.487119][T18084] ? __lock_acquire+0x7bd0/0x7bd0 [ 811.492177][T18084] should_fail_ex+0x390/0x4c0 [ 811.497050][T18084] _copy_to_user+0x2c/0x130 [ 811.501683][T18084] generic_map_delete_batch+0x5cc/0x6f0 [ 811.507260][T18084] ? bpf_map_inc_not_zero+0x100/0x100 [ 811.512681][T18084] ? bpf_map_do_batch+0x1e2/0x5f0 [ 811.517829][T18084] ? bpf_map_inc_not_zero+0x100/0x100 [ 811.523229][T18084] bpf_map_do_batch+0x475/0x5f0 [ 811.528565][T18084] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 811.534938][T18084] __sys_bpf+0x6f7/0x780 [ 811.539215][T18084] ? bpf_link_show_fdinfo+0x380/0x380 [ 811.544891][T18084] ? lock_chain_count+0x20/0x20 [ 811.549779][T18084] __x64_sys_bpf+0x78/0x90 [ 811.554230][T18084] do_syscall_64+0x4c/0xa0 [ 811.559371][T18084] ? clear_bhb_loop+0x60/0xb0 [ 811.564080][T18084] ? clear_bhb_loop+0x60/0xb0 [ 811.568785][T18084] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.574722][T18084] RIP: 0033:0x7f5fe6b9de59 [ 811.579161][T18084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.598806][T18084] RSP: 002b:00007f5fe7a92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 811.607257][T18084] RAX: ffffffffffffffda RBX: 00007f5fe6e26090 RCX: 00007f5fe6b9de59 [ 811.615264][T18084] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001b [ 811.623269][T18084] RBP: 00007f5fe7a92090 R08: 0000000000000000 R09: 0000000000000000 [ 811.631267][T18084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.639263][T18084] R13: 00007f5fe6e26128 R14: 00007f5fe6e26090 R15: 00007ffc5f29c948 [ 811.647281][T18084] [ 813.013626][T18105] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.4693'. [ 813.392614][T18118] FAULT_INJECTION: forcing a failure. [ 813.392614][T18118] name failslab, interval 1, probability 0, space 0, times 0 [ 813.494336][T18118] CPU: 1 PID: 18118 Comm: syz.0.4699 Not tainted syzkaller #0 [ 813.505061][T18118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 813.516284][T18118] Call Trace: [ 813.519590][T18118] [ 813.523074][T18118] dump_stack_lvl+0x188/0x24e [ 813.527904][T18118] ? show_regs_print_info+0x12/0x12 [ 813.533150][T18118] ? load_image+0x410/0x410 [ 813.537714][T18118] ? fib_rules_lookup+0x8be/0xb00 [ 813.542783][T18118] ? l3mdev_update_flow+0x22/0x5f0 [ 813.547961][T18118] ? verify_lock_unused+0x140/0x140 [ 813.553219][T18118] should_fail_ex+0x390/0x4c0 [ 813.557932][T18118] should_failslab+0x5/0x20 [ 813.562465][T18118] slab_pre_alloc_hook+0x59/0x300 [ 813.567539][T18118] ? ___neigh_create+0x6f4/0x2450 [ 813.572624][T18118] __kmem_cache_alloc_node+0x4f/0x270 [ 813.578050][T18118] ? ___neigh_create+0x6f4/0x2450 [ 813.583127][T18118] __kmalloc+0xa3/0x240 [ 813.587330][T18118] ___neigh_create+0x6f4/0x2450 [ 813.592226][T18118] ? __ipv6_neigh_lookup_noref+0x5a7/0x7d0 [ 813.598094][T18118] ? ip6_finish_output2+0x58f/0x15c0 [ 813.603424][T18118] ip6_finish_output2+0x150e/0x15c0 [ 813.608676][T18118] ? ip6_finish_output2+0x58f/0x15c0 [ 813.613996][T18118] ? ip6_mtu+0x79/0x3f0 [ 813.618374][T18118] ? nf_hook+0x390/0x390 [ 813.622660][T18118] ? ip6_finish_output+0x563/0x7f0 [ 813.628064][T18118] ? ip6_send_skb+0x106/0x370 [ 813.632774][T18118] ip6_send_skb+0x1c9/0x370 [ 813.637713][T18125] netlink: 'syz.2.4700': attribute type 12 has an invalid length. [ 813.645527][T18118] udp_v6_send_skb+0xb99/0x1850 [ 813.645588][T18118] udpv6_sendmsg+0x1b9e/0x22c0 [ 813.645612][T18118] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 813.645634][T18118] ? udp_v6_early_demux+0xf00/0xf00 [ 813.645657][T18118] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 813.645684][T18118] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 813.645718][T18118] ? __local_bh_enable_ip+0x136/0x1c0 [ 813.645737][T18118] ? _local_bh_enable+0xa0/0xa0 [ 813.645760][T18118] ? inet_send_prepare+0x1aa/0x250 [ 813.645785][T18118] ? inet_send_prepare+0x1aa/0x250 [ 813.645809][T18118] ? inet6_sendmsg+0x5b/0xd0 [ 813.645827][T18118] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 813.645849][T18118] ____sys_sendmsg+0x5ed/0x9a0 [ 813.645872][T18118] ? __lock_acquire+0x7bd0/0x7bd0 [ 813.645902][T18118] ? __sys_sendmsg_sock+0x30/0x30 [ 813.645918][T18118] ? __import_iovec+0x306/0x510 [ 813.645943][T18118] ? import_iovec+0x6f/0xa0 [ 813.645966][T18118] ___sys_sendmsg+0x2a2/0x360 [ 813.645992][T18118] ? __sys_sendmsg+0x2a0/0x2a0 [ 813.646032][T18118] ? __lock_acquire+0x7bd0/0x7bd0 [ 813.646080][T18118] __se_sys_sendmsg+0x1c3/0x2b0 [ 813.646104][T18118] ? __x64_sys_sendmsg+0x80/0x80 [ 813.646140][T18118] ? lockdep_hardirqs_on+0x94/0x140 [ 813.646171][T18118] do_syscall_64+0x4c/0xa0 [ 813.646191][T18118] ? clear_bhb_loop+0x60/0xb0 [ 813.646210][T18118] ? clear_bhb_loop+0x60/0xb0 [ 813.646230][T18118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 813.646258][T18118] RIP: 0033:0x7f5fe6b9de59 [ 813.646277][T18118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.646293][T18118] RSP: 002b:00007f5fe7ab3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 813.646317][T18118] RAX: ffffffffffffffda RBX: 00007f5fe6e25fa0 RCX: 00007f5fe6b9de59 [ 813.646332][T18118] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000003 [ 813.646346][T18118] RBP: 00007f5fe7ab3090 R08: 0000000000000000 R09: 0000000000000000 [ 813.646357][T18118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 813.646369][T18118] R13: 00007f5fe6e26038 R14: 00007f5fe6e25fa0 R15: 00007ffc5f29c948 [ 813.646398][T18118] [ 813.892474][T18125] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.4700'. [ 814.851331][T18148] FAULT_INJECTION: forcing a failure. [ 814.851331][T18148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.872686][T18148] CPU: 0 PID: 18148 Comm: syz.2.4707 Not tainted syzkaller #0 [ 814.880231][T18148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 814.890412][T18148] Call Trace: [ 814.893704][T18148] [ 814.896642][T18148] dump_stack_lvl+0x188/0x24e [ 814.901339][T18148] ? show_regs_print_info+0x12/0x12 [ 814.906547][T18148] ? load_image+0x410/0x410 [ 814.911064][T18148] ? __lock_acquire+0x7bd0/0x7bd0 [ 814.916102][T18148] ? snprintf+0xe5/0x140 [ 814.920350][T18148] should_fail_ex+0x390/0x4c0 [ 814.925034][T18148] _copy_to_user+0x2c/0x130 [ 814.929548][T18148] simple_read_from_buffer+0xe3/0x150 [ 814.934935][T18148] proc_fail_nth_read+0x1a6/0x220 [ 814.939981][T18148] ? proc_fault_inject_write+0x310/0x310 [ 814.945623][T18148] ? fsnotify_perm+0x248/0x550 [ 814.950395][T18148] ? proc_fault_inject_write+0x310/0x310 [ 814.956031][T18148] vfs_read+0x2db/0x960 [ 814.960201][T18148] ? kernel_read+0x1e0/0x1e0 [ 814.964799][T18148] ? __fget_files+0x28/0x460 [ 814.969396][T18148] ? __fget_files+0x3fc/0x460 [ 814.974086][T18148] ? __fdget_pos+0x2ae/0x360 [ 814.978684][T18148] ? ksys_read+0x70/0x260 [ 814.983024][T18148] ksys_read+0x14d/0x260 [ 814.987305][T18148] ? vfs_write+0x9a0/0x9a0 [ 814.991764][T18148] ? lockdep_hardirqs_on+0x94/0x140 [ 814.996996][T18148] do_syscall_64+0x4c/0xa0 [ 815.001453][T18148] ? clear_bhb_loop+0x60/0xb0 [ 815.006303][T18148] ? clear_bhb_loop+0x60/0xb0 [ 815.011012][T18148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 815.016937][T18148] RIP: 0033:0x7f071fd5e68e [ 815.021371][T18148] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 815.040991][T18148] RSP: 002b:00007f0720c9afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 815.049415][T18148] RAX: ffffffffffffffda RBX: 00007f0720c9b6c0 RCX: 00007f071fd5e68e [ 815.057386][T18148] RDX: 000000000000000f RSI: 00007f0720c9b0a0 RDI: 000000000000000c [ 815.065375][T18148] RBP: 00007f0720c9b090 R08: 0000000000000000 R09: 0000000000000000 [ 815.073368][T18148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 815.081355][T18148] R13: 00007f0720026038 R14: 00007f0720025fa0 R15: 00007ffc6dc34bf8 [ 815.089354][T18148] [ 815.563664][T18170] netlink: 'syz.3.4713': attribute type 46 has an invalid length. [ 816.013059][T18186] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4716'. [ 816.025464][T18181] netlink: 'syz.2.4717': attribute type 1 has an invalid length. [ 816.033264][T18181] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4717'. [ 816.600499][T18201] netlink: 7107 bytes leftover after parsing attributes in process `syz.2.4722'. [ 817.098950][T18213] netlink: 'syz.4.4725': attribute type 1 has an invalid length. [ 818.630905][T18267] FAULT_INJECTION: forcing a failure. [ 818.630905][T18267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.652316][T18267] CPU: 1 PID: 18267 Comm: syz.3.4746 Not tainted syzkaller #0 [ 818.659836][T18267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 818.669926][T18267] Call Trace: [ 818.673239][T18267] [ 818.676199][T18267] dump_stack_lvl+0x188/0x24e [ 818.680918][T18267] ? show_regs_print_info+0x12/0x12 [ 818.686154][T18267] ? load_image+0x410/0x410 [ 818.690693][T18267] ? __lock_acquire+0x7bd0/0x7bd0 [ 818.695761][T18267] should_fail_ex+0x390/0x4c0 [ 818.700826][T18267] _copy_from_user+0x2c/0x170 [ 818.705552][T18267] ___sys_sendmsg+0x1c3/0x360 [ 818.710262][T18267] ? __sys_sendmsg+0x2a0/0x2a0 [ 818.715446][T18267] ? __lock_acquire+0x7bd0/0x7bd0 [ 818.720530][T18267] __se_sys_sendmsg+0x1c3/0x2b0 [ 818.725503][T18267] ? __x64_sys_sendmsg+0x80/0x80 [ 818.730477][T18267] ? lockdep_hardirqs_on+0x94/0x140 [ 818.736148][T18267] do_syscall_64+0x4c/0xa0 [ 818.740589][T18267] ? clear_bhb_loop+0x60/0xb0 [ 818.745291][T18267] ? clear_bhb_loop+0x60/0xb0 [ 818.750003][T18267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 818.755934][T18267] RIP: 0033:0x7f424419de59 [ 818.760372][T18267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.780014][T18267] RSP: 002b:00007f424512d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 818.788464][T18267] RAX: ffffffffffffffda RBX: 00007f4244425fa0 RCX: 00007f424419de59 [ 818.796466][T18267] RDX: 0000000020040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 818.804464][T18267] RBP: 00007f424512d090 R08: 0000000000000000 R09: 0000000000000000 [ 818.812598][T18267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.820601][T18267] R13: 00007f4244426038 R14: 00007f4244425fa0 R15: 00007ffe1fd55768 [ 818.828626][T18267] [ 818.867111][T18252] ªªªªªª: renamed from vlan0 [ 819.645915][ T4327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 823.155783][T18314] FAULT_INJECTION: forcing a failure. [ 823.155783][T18314] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 823.234689][T18314] CPU: 1 PID: 18314 Comm: syz.0.4762 Not tainted syzkaller #0 [ 823.242256][T18314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 823.252349][T18314] Call Trace: [ 823.255651][T18314] [ 823.258609][T18314] dump_stack_lvl+0x188/0x24e [ 823.263322][T18314] ? show_regs_print_info+0x12/0x12 [ 823.268547][T18314] ? load_image+0x410/0x410 [ 823.273081][T18314] ? __lock_acquire+0x7bd0/0x7bd0 [ 823.278163][T18314] should_fail_ex+0x390/0x4c0 [ 823.282874][T18314] prepare_alloc_pages+0x1e1/0x5b0 [ 823.288038][T18314] __alloc_pages+0x130/0x4f0 [ 823.292674][T18314] ? __kasan_kmalloc_large+0x8b/0xd0 [ 823.297999][T18314] ? zone_statistics+0x170/0x170 [ 823.302971][T18314] ? alloc_skb_with_frags+0xa7/0x710 [ 823.308281][T18314] ? trace_kmalloc+0x22/0xa0 [ 823.312909][T18314] ? alloc_pages+0x4dd/0x740 [ 823.317623][T18314] alloc_skb_with_frags+0x20b/0x710 [ 823.322859][T18314] sock_alloc_send_pskb+0x87f/0x9a0 [ 823.328271][T18314] ? sock_kzfree_s+0x50/0x50 [ 823.333077][T18314] ? __lock_acquire+0x13e3/0x7bd0 [ 823.338231][T18314] ? dev_get_by_index+0x1e/0x2d0 [ 823.343302][T18314] ? dev_get_by_index+0x1e/0x2d0 [ 823.348280][T18314] packet_sendmsg+0x327d/0x4de0 [ 823.353191][T18314] ? __might_sleep+0xd0/0xd0 [ 823.357816][T18314] ? verify_lock_unused+0x140/0x140 [ 823.363071][T18314] ? aa_sk_perm+0x81f/0x950 [ 823.367630][T18314] ? packet_getsockopt+0x980/0x980 [ 823.372794][T18314] ? aa_sock_msg_perm+0x94/0x150 [ 823.377772][T18314] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 823.383104][T18314] ? security_socket_sendmsg+0x7c/0xa0 [ 823.388619][T18314] ? packet_getsockopt+0x980/0x980 [ 823.393774][T18314] ____sys_sendmsg+0x5ed/0x9a0 [ 823.398589][T18314] ? __sys_sendmsg_sock+0x30/0x30 [ 823.403645][T18314] ? __import_iovec+0x306/0x510 [ 823.408525][T18314] ? import_iovec+0x6f/0xa0 [ 823.413063][T18314] ___sys_sendmsg+0x2a2/0x360 [ 823.417774][T18314] ? __sys_sendmsg+0x2a0/0x2a0 [ 823.422588][T18314] ? __lock_acquire+0x7bd0/0x7bd0 [ 823.427687][T18314] __se_sys_sendmsg+0x1c3/0x2b0 [ 823.432578][T18314] ? __x64_sys_sendmsg+0x80/0x80 [ 823.437583][T18314] ? lockdep_hardirqs_on+0x94/0x140 [ 823.442834][T18314] do_syscall_64+0x4c/0xa0 [ 823.447278][T18314] ? clear_bhb_loop+0x60/0xb0 [ 823.451993][T18314] ? clear_bhb_loop+0x60/0xb0 [ 823.456713][T18314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 823.462651][T18314] RIP: 0033:0x7f5fe6b9de59 [ 823.467091][T18314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.486732][T18314] RSP: 002b:00007f5fe7ab3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.495189][T18314] RAX: ffffffffffffffda RBX: 00007f5fe6e25fa0 RCX: 00007f5fe6b9de59 [ 823.503202][T18314] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 823.511219][T18314] RBP: 00007f5fe7ab3090 R08: 0000000000000000 R09: 0000000000000000 [ 823.519233][T18314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 823.527242][T18314] R13: 00007f5fe6e26038 R14: 00007f5fe6e25fa0 R15: 00007ffc5f29c948 [ 823.535254][T18314] [ 826.386699][T18338] netlink: 'syz.1.4771': attribute type 3 has an invalid length. [ 826.395455][T18338] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.4771'. [ 826.408156][T18344] bond0: (slave wlan1): Error: Slave device does not support XDP [ 826.446052][T18345] netlink: 'syz.4.4773': attribute type 10 has an invalid length. [ 826.470152][T18345] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.506682][T18345] device bridge_slave_1 left promiscuous mode [ 826.513093][T18345] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.568043][T18345] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 827.400327][T18378] FAULT_INJECTION: forcing a failure. [ 827.400327][T18378] name failslab, interval 1, probability 0, space 0, times 0 [ 827.454824][T18378] CPU: 1 PID: 18378 Comm: syz.3.4787 Not tainted syzkaller #0 [ 827.462382][T18378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 827.472465][T18378] Call Trace: [ 827.475766][T18378] [ 827.478727][T18378] dump_stack_lvl+0x188/0x24e [ 827.483428][T18378] ? verify_lock_unused+0x140/0x140 [ 827.489304][T18378] ? show_regs_print_info+0x12/0x12 [ 827.495278][T18378] ? load_image+0x410/0x410 [ 827.499851][T18378] should_fail_ex+0x390/0x4c0 [ 827.504572][T18378] should_failslab+0x5/0x20 [ 827.509121][T18378] slab_pre_alloc_hook+0x59/0x300 [ 827.514193][T18378] kmem_cache_alloc+0x56/0x2f0 [ 827.518999][T18378] ? __nf_conntrack_alloc+0x93/0x370 [ 827.524331][T18378] __nf_conntrack_alloc+0x93/0x370 [ 827.529485][T18378] init_conntrack+0x23b/0x1190 [ 827.534303][T18378] ? early_drop+0x870/0x870 [ 827.538847][T18378] ? nf_conntrack_find_get+0x640/0x640 [ 827.544324][T18378] ? __siphash_unaligned+0x3b/0x3d0 [ 827.549559][T18378] ? __siphash_unaligned+0x289/0x3d0 [ 827.554902][T18378] nf_conntrack_in+0xd76/0x1830 [ 827.559788][T18378] ? lockdep_hardirqs_on+0x94/0x140 [ 827.565053][T18378] ? nf_ct_pernet+0x270/0x270 [ 827.569798][T18378] ? ipt_do_table+0x2c1/0x1580 [ 827.574617][T18378] ? read_lock_is_recursive+0x10/0x10 [ 827.580020][T18378] ? ipv4_conntrack_defrag+0x284/0x5b0 [ 827.585501][T18378] ? ipv4_conntrack_local+0x11f/0x200 [ 827.590998][T18378] ? ipv4_conntrack_in+0x20/0x20 [ 827.596252][T18378] nf_hook_slow+0xb9/0x200 [ 827.600731][T18378] ? nf_hook+0x390/0x390 [ 827.605010][T18378] nf_hook+0x224/0x390 [ 827.609320][T18378] ? nf_hook+0x9e/0x390 [ 827.613531][T18378] ? __ip_local_out+0x5d0/0x5d0 [ 827.618434][T18378] ? nf_hook+0x390/0x390 [ 827.622714][T18378] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 827.628910][T18378] ? lockdep_hardirqs_on+0x94/0x140 [ 827.634158][T18378] ? ip_fast_csum+0x1ea/0x2b0 [ 827.638874][T18378] __ip_local_out+0x49c/0x5d0 [ 827.643583][T18378] ? nf_hook+0x390/0x390 [ 827.647863][T18378] ip_send_skb+0x48/0x1c0 [ 827.652224][T18378] udp_send_skb+0xa4f/0x13f0 [ 827.656871][T18378] udp_sendmsg+0x1b46/0x23d0 [ 827.661496][T18378] ? release_sock+0x2b/0x1b0 [ 827.666138][T18378] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 827.671022][T18378] ? udp_cmsg_send+0x350/0x350 [ 827.676791][T18378] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 827.682813][T18378] ? lock_chain_count+0x20/0x20 [ 827.687721][T18378] ? __local_bh_enable_ip+0x136/0x1c0 [ 827.693313][T18378] ? _local_bh_enable+0xa0/0xa0 [ 827.698295][T18378] ? inet_sendmsg+0x109/0x2a0 [ 827.703191][T18378] ? inet_sendmsg+0x109/0x2a0 [ 827.707904][T18378] ? inet_send_prepare+0x250/0x250 [ 827.713051][T18378] ____sys_sendmsg+0x5ed/0x9a0 [ 827.717849][T18378] ? __lock_acquire+0x7bd0/0x7bd0 [ 827.722913][T18378] ? __sys_sendmsg_sock+0x30/0x30 [ 827.728576][T18378] ? __import_iovec+0x306/0x510 [ 827.733471][T18378] ? import_iovec+0x6f/0xa0 [ 827.738014][T18378] ___sys_sendmsg+0x2a2/0x360 [ 827.742739][T18378] ? __sys_sendmsg+0x2a0/0x2a0 [ 827.747560][T18378] ? ktime_get+0x7b/0x270 [ 827.751946][T18378] __se_sys_sendmsg+0x1c3/0x2b0 [ 827.757637][T18378] ? __x64_sys_sendmsg+0x80/0x80 [ 827.763066][T18378] ? lockdep_hardirqs_on+0x94/0x140 [ 827.768291][T18378] do_syscall_64+0x4c/0xa0 [ 827.772720][T18378] ? clear_bhb_loop+0x60/0xb0 [ 827.777410][T18378] ? clear_bhb_loop+0x60/0xb0 [ 827.782105][T18378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 827.788565][T18378] RIP: 0033:0x7f424419de59 [ 827.793097][T18378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.813088][T18378] RSP: 002b:00007f424512d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 827.821542][T18378] RAX: ffffffffffffffda RBX: 00007f4244425fa0 RCX: 00007f424419de59 [ 827.829724][T18378] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000007 [ 827.837734][T18378] RBP: 00007f424512d090 R08: 0000000000000000 R09: 0000000000000000 [ 827.846175][T18378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 827.854172][T18378] R13: 00007f4244426038 R14: 00007f4244425fa0 R15: 00007ffe1fd55768 [ 827.862266][T18378] [ 827.972991][T18388] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4791'. [ 829.471599][T18412] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.4802'. [ 829.490454][T18416] FAULT_INJECTION: forcing a failure. [ 829.490454][T18416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.516895][T18412] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.4802'. [ 829.544840][T18416] CPU: 1 PID: 18416 Comm: syz.3.4801 Not tainted syzkaller #0 [ 829.552489][T18416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 829.562931][T18416] Call Trace: [ 829.566245][T18416] [ 829.569215][T18416] dump_stack_lvl+0x188/0x24e [ 829.573956][T18416] ? show_regs_print_info+0x12/0x12 [ 829.579218][T18416] ? load_image+0x410/0x410 [ 829.583779][T18416] ? __lock_acquire+0x7bd0/0x7bd0 [ 829.589401][T18416] should_fail_ex+0x390/0x4c0 [ 829.594253][T18416] _copy_from_user+0x2c/0x170 [ 829.599088][T18416] ___sys_sendmsg+0x1c3/0x360 [ 829.604008][T18416] ? __sys_sendmsg+0x2a0/0x2a0 [ 829.609445][T18416] ? __lock_acquire+0x7bd0/0x7bd0 [ 829.614593][T18416] __se_sys_sendmsg+0x1c3/0x2b0 [ 829.619526][T18416] ? __x64_sys_sendmsg+0x80/0x80 [ 829.624574][T18416] ? lockdep_hardirqs_on+0x94/0x140 [ 829.629845][T18416] do_syscall_64+0x4c/0xa0 [ 829.634313][T18416] ? clear_bhb_loop+0x60/0xb0 [ 829.639030][T18416] ? clear_bhb_loop+0x60/0xb0 [ 829.643759][T18416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 829.649722][T18416] RIP: 0033:0x7f424419de59 [ 829.654224][T18416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.673889][T18416] RSP: 002b:00007f424512d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.682382][T18416] RAX: ffffffffffffffda RBX: 00007f4244425fa0 RCX: 00007f424419de59 [ 829.690412][T18416] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003 [ 829.698443][T18416] RBP: 00007f424512d090 R08: 0000000000000000 R09: 0000000000000000 [ 829.706501][T18416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.714574][T18416] R13: 00007f4244426038 R14: 00007f4244425fa0 R15: 00007ffe1fd55768 [ 829.722647][T18416] [ 831.522351][T18456] netlink: 763 bytes leftover after parsing attributes in process `syz.3.4820'. [ 831.536118][T18459] FAULT_INJECTION: forcing a failure. [ 831.536118][T18459] name failslab, interval 1, probability 0, space 0, times 0 [ 831.559365][T18459] CPU: 1 PID: 18459 Comm: syz.4.4819 Not tainted syzkaller #0 [ 831.566912][T18459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 831.577014][T18459] Call Trace: [ 831.580337][T18459] [ 831.583294][T18459] dump_stack_lvl+0x188/0x24e [ 831.588014][T18459] ? show_regs_print_info+0x12/0x12 [ 831.593321][T18459] ? load_image+0x410/0x410 [ 831.597859][T18459] ? verify_lock_unused+0x140/0x140 [ 831.603095][T18459] ? perf_trace_lock+0x301/0x390 [ 831.608061][T18459] should_fail_ex+0x390/0x4c0 [ 831.612775][T18459] should_failslab+0x5/0x20 [ 831.617308][T18459] slab_pre_alloc_hook+0x59/0x300 [ 831.622465][T18459] kmem_cache_alloc+0x56/0x2f0 [ 831.627279][T18459] ? skb_clone+0x1e7/0x370 [ 831.631764][T18459] skb_clone+0x1e7/0x370 [ 831.636055][T18459] __netlink_deliver_tap+0x3e4/0x7e0 [ 831.641495][T18459] ? netlink_deliver_tap+0x2e/0x1b0 [ 831.646720][T18459] netlink_deliver_tap+0x19c/0x1b0 [ 831.651860][T18459] netlink_unicast+0x777/0x920 [ 831.656677][T18459] netlink_sendmsg+0x8ad/0xbd0 [ 831.664102][T18459] ? netlink_getsockopt+0x550/0x550 [ 831.669386][T18459] ? aa_sock_msg_perm+0x94/0x150 [ 831.674367][T18459] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 831.679963][T18459] ? security_socket_sendmsg+0x7c/0xa0 [ 831.685468][T18459] ? netlink_getsockopt+0x550/0x550 [ 831.690708][T18459] ____sys_sendmsg+0x5ed/0x9a0 [ 831.695550][T18459] ? __sys_sendmsg_sock+0x30/0x30 [ 831.700603][T18459] ? __import_iovec+0x306/0x510 [ 831.705498][T18459] ? import_iovec+0x6f/0xa0 [ 831.710039][T18459] ___sys_sendmsg+0x2a2/0x360 [ 831.714784][T18459] ? __sys_sendmsg+0x2a0/0x2a0 [ 831.719629][T18459] ? __lock_acquire+0x7bd0/0x7bd0 [ 831.724737][T18459] __se_sys_sendmsg+0x1c3/0x2b0 [ 831.729621][T18459] ? __x64_sys_sendmsg+0x80/0x80 [ 831.734614][T18459] ? lockdep_hardirqs_on+0x94/0x140 [ 831.739852][T18459] do_syscall_64+0x4c/0xa0 [ 831.744294][T18459] ? clear_bhb_loop+0x60/0xb0 [ 831.748987][T18459] ? clear_bhb_loop+0x60/0xb0 [ 831.753690][T18459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 831.759607][T18459] RIP: 0033:0x7fb7d5b9de59 [ 831.764076][T18459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.783740][T18459] RSP: 002b:00007fb7d6b45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.792199][T18459] RAX: ffffffffffffffda RBX: 00007fb7d5e25fa0 RCX: 00007fb7d5b9de59 [ 831.800215][T18459] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 831.808236][T18459] RBP: 00007fb7d6b45090 R08: 0000000000000000 R09: 0000000000000000 [ 831.816239][T18459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.824235][T18459] R13: 00007fb7d5e26038 R14: 00007fb7d5e25fa0 R15: 00007fff1b985d68 [ 831.832295][T18459] [ 832.493380][T18474] bond0: (slave wlan1): Error: Slave device does not support XDP [ 832.545405][T18474] netlink: 'syz.0.4824': attribute type 10 has an invalid length. [ 832.672966][T18474] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 832.849918][T18482] FAULT_INJECTION: forcing a failure. [ 832.849918][T18482] name failslab, interval 1, probability 0, space 0, times 0 [ 832.889253][T18482] CPU: 0 PID: 18482 Comm: syz.1.4827 Not tainted syzkaller #0 [ 832.896800][T18482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 832.907411][T18482] Call Trace: [ 832.910988][T18482] [ 832.913935][T18482] dump_stack_lvl+0x188/0x24e [ 832.918646][T18482] ? show_regs_print_info+0x12/0x12 [ 832.923864][T18482] ? load_image+0x410/0x410 [ 832.928412][T18482] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 832.934073][T18482] should_fail_ex+0x390/0x4c0 [ 832.939038][T18482] should_failslab+0x5/0x20 [ 832.943560][T18482] slab_pre_alloc_hook+0x59/0x300 [ 832.948612][T18482] kmem_cache_alloc+0x56/0x2f0 [ 832.953394][T18482] ? skb_clone+0x1e7/0x370 [ 832.957836][T18482] skb_clone+0x1e7/0x370 [ 832.962101][T18482] __netlink_deliver_tap+0x3e4/0x7e0 [ 832.967418][T18482] ? netlink_deliver_tap+0x2e/0x1b0 [ 832.972648][T18482] netlink_deliver_tap+0x19c/0x1b0 [ 832.977792][T18482] __netlink_sendskb+0x4b/0x90 [ 832.982589][T18482] netlink_dump+0x92e/0xcd0 [ 832.987132][T18482] ? netlink_lookup+0x200/0x200 [ 832.992016][T18482] ? __inet_diag_dump_start+0x805/0x970 [ 832.997789][T18482] __netlink_dump_start+0x52c/0x6f0 [ 833.003020][T18482] inet_diag_rcv_msg_compat+0x207/0x420 [ 833.008597][T18482] ? __inet_diag_dump+0x380/0x380 [ 833.013648][T18482] ? sock_diag_rcv_msg+0x137/0x5e0 [ 833.018785][T18482] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 833.024531][T18482] ? inet_diag_dump_start_compat+0x20/0x20 [ 833.030373][T18482] ? inet_diag_dump+0x50/0x50 [ 833.035105][T18482] ? trace_raw_output_contention_end+0xd0/0xd0 [ 833.041314][T18482] ? __inet_diag_dump+0x380/0x380 [ 833.046370][T18482] sock_diag_rcv_msg+0x3c7/0x5e0 [ 833.051339][T18482] netlink_rcv_skb+0x1ef/0x440 [ 833.056127][T18482] ? sock_diag_bind+0xa0/0xa0 [ 833.060833][T18482] ? netlink_ack+0x1160/0x1160 [ 833.065630][T18482] ? netlink_deliver_tap+0x2e/0x1b0 [ 833.070868][T18482] sock_diag_rcv+0x26/0x40 [ 833.075324][T18482] netlink_unicast+0x7ad/0x920 [ 833.080155][T18482] netlink_sendmsg+0x8ad/0xbd0 [ 833.085005][T18482] ? netlink_getsockopt+0x550/0x550 [ 833.090242][T18482] ? aa_sock_msg_perm+0x94/0x150 [ 833.095209][T18482] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 833.100526][T18482] ? security_socket_sendmsg+0x7c/0xa0 [ 833.106728][T18482] ? netlink_getsockopt+0x550/0x550 [ 833.112033][T18482] ____sys_sendmsg+0x5ed/0x9a0 [ 833.117314][T18482] ? __sys_sendmsg_sock+0x30/0x30 [ 833.122373][T18482] ? __import_iovec+0x306/0x510 [ 833.127275][T18482] ? import_iovec+0x6f/0xa0 [ 833.131815][T18482] ___sys_sendmsg+0x2a2/0x360 [ 833.136524][T18482] ? __sys_sendmsg+0x2a0/0x2a0 [ 833.141324][T18482] ? __lock_acquire+0x7bd0/0x7bd0 [ 833.146404][T18482] __se_sys_sendmsg+0x1c3/0x2b0 [ 833.151272][T18482] ? ct_nmi_exit+0x145/0x1c0 [ 833.155890][T18482] ? __x64_sys_sendmsg+0x80/0x80 [ 833.160870][T18482] ? lockdep_hardirqs_on+0x94/0x140 [ 833.166111][T18482] do_syscall_64+0x4c/0xa0 [ 833.170564][T18482] ? clear_bhb_loop+0x60/0xb0 [ 833.175279][T18482] ? clear_bhb_loop+0x60/0xb0 [ 833.179981][T18482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 833.185903][T18482] RIP: 0033:0x7f0fd539de59 [ 833.190348][T18482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.209988][T18482] RSP: 002b:00007f0fd61f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 833.218442][T18482] RAX: ffffffffffffffda RBX: 00007f0fd5625fa0 RCX: 00007f0fd539de59 [ 833.226439][T18482] RDX: 0000000000008000 RSI: 0000200000000180 RDI: 0000000000000003 [ 833.234519][T18482] RBP: 00007f0fd61f7090 R08: 0000000000000000 R09: 0000000000000000 [ 833.242509][T18482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 833.250495][T18482] R13: 00007f0fd5626038 R14: 00007f0fd5625fa0 R15: 00007ffd351f80c8 [ 833.258512][T18482] [ 834.718316][T18513] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4838'. [ 835.977769][T18542] netlink: 'syz.2.4847': attribute type 2 has an invalid length. [ 839.069958][T18542] device 13 entered promiscuous mode [ 842.271338][T18632] netlink: 'syz.2.4875': attribute type 27 has an invalid length. [ 842.312332][T18632] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4875'. [ 844.112537][T18665] netlink: 'syz.3.4887': attribute type 29 has an invalid length. [ 844.137794][T18665] netlink: 'syz.3.4887': attribute type 29 has an invalid length. [ 844.160240][T18665] netlink: 'syz.3.4887': attribute type 29 has an invalid length. [ 846.178827][T18715] netlink: 'syz.1.4905': attribute type 10 has an invalid length. [ 846.229012][T18715] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4905'. [ 847.081788][T18724] FAULT_INJECTION: forcing a failure. [ 847.081788][T18724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 847.096543][T18724] CPU: 0 PID: 18724 Comm: syz.2.4906 Not tainted syzkaller #0 [ 847.104045][T18724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 847.114113][T18724] Call Trace: [ 847.117403][T18724] [ 847.120342][T18724] dump_stack_lvl+0x188/0x24e [ 847.125159][T18724] ? show_regs_print_info+0x12/0x12 [ 847.130396][T18724] ? load_image+0x410/0x410 [ 847.134952][T18724] ? __lock_acquire+0x7bd0/0x7bd0 [ 847.140176][T18724] ? perf_trace_lock+0xf8/0x390 [ 847.145047][T18724] should_fail_ex+0x390/0x4c0 [ 847.149744][T18724] _copy_from_user+0x2c/0x170 [ 847.154442][T18724] ___sys_sendmsg+0x1c3/0x360 [ 847.159138][T18724] ? __sys_sendmsg+0x2a0/0x2a0 [ 847.163933][T18724] ? trace_call_bpf+0xbf/0x6b0 [ 847.168736][T18724] __se_sys_sendmsg+0x1c3/0x2b0 [ 847.173595][T18724] ? ct_nmi_exit+0x145/0x1c0 [ 847.178200][T18724] ? __x64_sys_sendmsg+0x80/0x80 [ 847.183162][T18724] ? lockdep_hardirqs_on+0x94/0x140 [ 847.188377][T18724] do_syscall_64+0x4c/0xa0 [ 847.192800][T18724] ? clear_bhb_loop+0x60/0xb0 [ 847.197480][T18724] ? clear_bhb_loop+0x60/0xb0 [ 847.202165][T18724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 847.208077][T18724] RIP: 0033:0x7f071fd9de59 [ 847.212499][T18724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.232225][T18724] RSP: 002b:00007f0720c59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.240765][T18724] RAX: ffffffffffffffda RBX: 00007f0720026180 RCX: 00007f071fd9de59 [ 847.248847][T18724] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 847.256827][T18724] RBP: 00007f0720c59090 R08: 0000000000000000 R09: 0000000000000000 [ 847.264803][T18724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.272973][T18724] R13: 00007f0720026218 R14: 00007f0720026180 R15: 00007ffc6dc34bf8 [ 847.280995][T18724] [ 853.028627][ T7398] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 872.985189][ T4349] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2665 jiffies s: 860149 root: 0x2/. [ 873.021485][ T4349] rcu: blocking rcu_node structures (internal RCU debug): [ 873.029078][ T4349] Sending NMI from CPU 0 to CPUs 1: [ 873.035030][ C1] NMI backtrace for cpu 1 [ 873.035044][ C1] CPU: 1 PID: 18712 Comm: syz.4.4903 Not tainted syzkaller #0 [ 873.035060][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 873.035069][ C1] RIP: 0010:memset_erms+0xb/0x10 [ 873.035094][ C1] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 [ 873.035107][ C1] RSP: 0018:ffffc900001e05f8 EFLAGS: 00000002 [ 873.035122][ C1] RAX: 1ffff9200003c000 RBX: ffffc900001e0680 RCX: 0000000000000000 [ 873.035133][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900001e07d0 [ 873.035144][ C1] RBP: ffffc900001e0888 R08: ffffc900001e07cf R09: ffffc900001e07c0 [ 873.035155][ C1] R10: dffffc0000000000 R11: fffff5200003c0fa R12: dffffc0000000000 [ 873.035166][ C1] R13: 0000000000000014 R14: ffffe8ffffd42e30 R15: ffffc900001e07c0 [ 873.035177][ C1] FS: 00007fb7d6b456c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 873.035191][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 873.035202][ C1] CR2: 00007fb7d6b24d58 CR3: 000000004509f000 CR4: 00000000003506e0 [ 873.035216][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 873.035226][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 873.035243][ C1] Call Trace: [ 873.035252][ C1] [ 873.035257][ C1] perf_tp_event+0x1b2/0xc10 [ 873.035286][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 873.035322][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 873.035341][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 873.035359][ C1] ? trace_call_bpf+0x5d6/0x6b0 [ 873.035377][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 873.035398][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 873.035421][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 873.035444][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 873.035465][ C1] ? irqentry_enter+0x33/0x50 [ 873.035484][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 873.035503][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 873.035526][ C1] ? lock_chain_count+0x20/0x20 [ 873.035543][ C1] ? irqentry_enter+0x33/0x50 [ 873.035561][ C1] trace_hardirqs_off_finish+0x13f/0x180 [ 873.035581][ C1] irqentry_enter+0x33/0x50 [ 873.035597][ C1] sysvec_irq_work+0xa/0xc0 [ 873.035613][ C1] asm_sysvec_irq_work+0x16/0x20 [ 873.035635][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 873.035652][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 e2 82 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 873.035663][ C1] RSP: 0018:ffffc900001e0ae0 EFLAGS: 00000206 [ 873.035675][ C1] RAX: 69ea9c542b924100 RBX: 1ffff9200003c164 RCX: 69ea9c542b924100 [ 873.035686][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adee1a0 [ 873.035697][ C1] RBP: ffffc900001e0bd0 R08: ffffffff90af2257 R09: 1ffffffff215e44a [ 873.035708][ C1] R10: dffffc0000000000 R11: fffffbfff215e44b R12: 0000000000000246 [ 873.035717][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 873.035738][ C1] ? kmem_cache_free+0x80/0x2a0 [ 873.035757][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 873.035779][ C1] __rcu_read_unlock+0x78/0xd0 [ 873.035791][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 873.035879][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 873.035898][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 873.035916][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 873.035934][ C1] __hrtimer_run_queues+0x522/0xc90 [ 873.035962][ C1] ? hw_scan_work+0xf00/0xf00 [ 873.035982][ C1] ? hrtimer_interrupt+0x980/0x980 [ 873.036003][ C1] hrtimer_run_softirq+0x173/0x290 [ 873.036022][ C1] handle_softirqs+0x291/0x910 [ 873.036040][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 873.036057][ C1] ? do_softirq+0x210/0x210 [ 873.036069][ C1] ? hrtimer_interrupt+0x775/0x980 [ 873.036086][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 873.036103][ C1] __irq_exit_rcu+0x13b/0x230 [ 873.036117][ C1] ? irq_exit_rcu+0x20/0x20 [ 873.036137][ C1] irq_exit_rcu+0x5/0x20 [ 873.036149][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 873.036167][ C1] [ 873.036172][ C1] [ 873.036177][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 873.036197][ C1] RIP: 0010:__schedule+0x10d6/0x4030 [ 873.036212][ C1] Code: c7 44 28 08 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 40 01 00 00 0f 85 07 03 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e <41> 5f 5d c3 49 8d bc 24 b8 05 00 00 48 89 f8 48 c1 e8 03 42 0f b6 [ 873.036223][ C1] RSP: 0018:ffffc90005107208 EFLAGS: 00000246 [ 873.036236][ C1] RAX: 69ea9c542b924100 RBX: 0000000000000000 RCX: ffffffff815982e7 [ 873.036246][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88807e279710 [ 873.036255][ C1] RBP: ffffc90005107210 R08: ffff88807e279713 R09: 1ffff1100fc4f2e2 [ 873.036266][ C1] R10: dffffc0000000000 R11: ffffed100fc4f2e3 R12: 0000000000000000 [ 873.036276][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff1100ad56466 [ 873.036292][ C1] ? finish_task_switch+0x327/0x8e0 [ 873.036316][ C1] preempt_schedule_irq+0xbb/0x160 [ 873.036331][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 873.036347][ C1] ? rcu_is_watching+0x11/0xa0 [ 873.036368][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 873.036389][ C1] irqentry_exit+0x63/0x70 [ 873.036405][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 873.036424][ C1] RIP: 0010:lock_acquire+0x225/0x4a0 [ 873.036442][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 873.036453][ C1] RSP: 0018:ffffc90005107380 EFLAGS: 00000206 [ 873.036464][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 69ea9c542b924100 [ 873.036474][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c2920 RDI: ffffffff8adee1a0 [ 873.036484][ C1] RBP: ffffc900051074a0 R08: dffffc0000000000 R09: 1ffffffff215e44a [ 873.036495][ C1] R10: dffffc0000000000 R11: fffffbfff215e44b R12: 0000000000000001 [ 873.036505][ C1] R13: 1ffff92000a20e7c R14: 0000000000000246 R15: dffffc0000000000 [ 873.036531][ C1] ? read_lock_is_recursive+0x10/0x10 [ 873.036550][ C1] ? verify_lock_unused+0x140/0x140 [ 873.036571][ C1] ? perf_trace_lock+0xf8/0x390 [ 873.036589][ C1] fs_reclaim_acquire+0x6d/0x100 [ 873.036609][ C1] ? slab_pre_alloc_hook+0x2a/0x300 [ 873.036624][ C1] slab_pre_alloc_hook+0x2a/0x300 [ 873.036643][ C1] kmem_cache_alloc_lru+0x49/0x2e0 [ 873.036657][ C1] ? proc_alloc_inode+0x26/0xb0 [ 873.036691][ C1] proc_alloc_inode+0x26/0xb0 [ 873.036709][ C1] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 873.036729][ C1] new_inode_pseudo+0x5f/0x1c0 [ 873.036748][ C1] new_inode+0x25/0x1d0 [ 873.036766][ C1] proc_pid_make_inode+0x20/0x1a0 [ 873.036783][ C1] proc_task_instantiate+0x50/0x2b0 [ 873.036802][ C1] proc_task_lookup+0x37f/0x4e0 [ 873.036818][ C1] ? proc_task_lookup+0xdf/0x4e0 [ 873.036834][ C1] __lookup_slow+0x29d/0x3f0 [ 873.036851][ C1] ? lookup_one_len+0x2d0/0x2d0 [ 873.036873][ C1] ? down_read+0x1a8/0x2d0 [ 873.036894][ C1] lookup_slow+0x53/0x70 [ 873.036909][ C1] walk_component+0x2ad/0x3e0 [ 873.036929][ C1] link_path_walk+0x6b1/0xea0 [ 873.036954][ C1] ? handle_lookup_down+0x130/0x130 [ 873.036985][ C1] path_openat+0x285/0x2f10 [ 873.036999][ C1] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 873.037024][ C1] ? ct_irq_exit_irqson+0x113/0x170 [ 873.037076][ C1] ? lock_chain_count+0x20/0x20 [ 873.037097][ C1] ? do_filp_open+0x420/0x420 [ 873.037111][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 873.037128][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 873.037152][ C1] ? do_filp_open+0xa5/0x420 [ 873.037170][ C1] do_filp_open+0x1ee/0x420 [ 873.037188][ C1] ? vfs_tmpfile+0x470/0x470 [ 873.037208][ C1] ? noop_direct_IO+0x10/0x10 [ 873.037230][ C1] ? _raw_spin_unlock+0x24/0x40 [ 873.037246][ C1] ? alloc_fd+0x590/0x640 [ 873.037270][ C1] do_sys_openat2+0x14b/0x4f0 [ 873.037288][ C1] ? ct_nmi_exit+0x145/0x1c0 [ 873.037306][ C1] ? do_sys_open+0xe0/0xe0 [ 873.037323][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 873.037343][ C1] ? lock_chain_count+0x20/0x20 [ 873.037364][ C1] __x64_sys_openat+0x135/0x160 [ 873.037385][ C1] do_syscall_64+0x4c/0xa0 [ 873.037399][ C1] ? clear_bhb_loop+0x60/0xb0 [ 873.037411][ C1] ? clear_bhb_loop+0x60/0xb0 [ 873.037424][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 873.037443][ C1] RIP: 0033:0x7fb7d5b5e68e [ 873.037457][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 873.037469][ C1] RSP: 002b:00007fb7d6b44ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 873.037484][ C1] RAX: ffffffffffffffda RBX: 00007fb7d6b456c0 RCX: 00007fb7d5b5e68e [ 873.037494][ C1] RDX: 0000000000000002 RSI: 00007fb7d6b44f90 RDI: ffffffffffffff9c [ 873.037505][ C1] RBP: 00007fb7d5c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 873.037514][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 873.037523][ C1] R13: 00007fb7d5e26038 R14: 00007fb7d5e25fa0 R15: 00007fff1b985d68 [ 873.037543][ C1]