last executing test programs: 5.186935982s ago: executing program 2 (id=3769): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000040000000b0000000900000100000000", @ANYRES32=0x1, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES8=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r2, &(0x7f0000000680)={&(0x7f00000006c0)=@in={0x2, 0x4e21, @loopback=0x7f000082}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)='\r', 0x34000}], 0x1}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) recvmsg$unix(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x10023) 4.965030564s ago: executing program 3 (id=3773): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x8000) r0 = socket$kcm(0xa, 0x2, 0x73) socketpair(0x1e, 0x1, 0x0, &(0x7f0000001140)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000011c0), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000001200)={0x0, 0x0}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="03000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x6, 0xd, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000001740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={r6, 0xe0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000018c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001940)=[0x0], 0x0, 0xf8, &(0x7f0000001980)=[{}, {}], 0x10, 0x10, &(0x7f00000019c0), &(0x7f0000001a00), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000001a40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x3, 0x0, 0x0, &(0x7f0000001b40)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001b80)='io.stat\x00', 0x26e1, 0x0) close(r8) write$cgroup_devices(r8, &(0x7f0000001bc0)=ANY=[@ANYBLOB="80fd"], 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000001300), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000001340)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x4, &(0x7f0000001440)=ANY=[@ANYBLOB="1801000001ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close(r9) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000001480), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f00000014c0)={0x0, 0x0}) close(r11) perf_event_open(&(0x7f0000001500)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f0000001580), 0x127) close(r12) r13 = getpid() perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xfa, 0xe, 0xff, 0x1, 0x0, 0x8, 0x80, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffffffd, 0x8}, 0xa204, 0x9, 0x598, 0x2, 0xffffffffffffff72, 0x3ff, 0xc80, 0x0, 0x4, 0x0, 0x7fff}, r13, 0x0, r8, 0x1) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 4.771563544s ago: executing program 3 (id=3776): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x44}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) close(0x3) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6023b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_config_ext={0x9, 0x80}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000000000200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0200000004ecbfb87fc4edab00000008000078e8e1030080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x3, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r3, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r3, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0xf, &(0x7f0000000c00)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @alu={0x4, 0x1, 0x4, 0x5, 0x3, 0x30, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x0, 0x8, 0xf, 0x0, 0x4, 0x8}, @ldst={0x0, 0x0, 0x1, 0x1, 0x7, 0xfffffffffffffffe, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000c80)='GPL\x00', 0xdb, 0xaf, &(0x7f0000000cc0)=""/175, 0x40f00, 0xa, '\x00', r4, 0x0, r0, 0x8, &(0x7f0000001240)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001280)={0x3, 0xa, 0x20, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000012c0)=[{0x5, 0x2, 0x9, 0x10f30e71f2305384}, {0x3, 0x1, 0xd, 0xc}], 0x10, 0x40}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c00ffb0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x7ff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000f2ffffff0000008000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x41}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd6349080006"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.71687294s ago: executing program 0 (id=3777): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7c101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0xd, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000080000000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x1e, 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000000000000000000000711215000000000095"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r2, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000ec0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe, 0x0}}, 0x10) 4.203203352s ago: executing program 2 (id=3778): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x2, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff200000400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x28) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f00000006c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000740)=r1, 0x4) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000000)={0x0, 0x3, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @local]}) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="bab22fb06c17", 0x6}], 0x1}, 0x10) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 4.033105589s ago: executing program 0 (id=3779): socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x4, 0x80, 0x7f, 0x8, 0xba, 0x8, 0x0, 0x2, 0x21, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x4404, 0x9, 0x9, 0x3, 0x2, 0x7, 0x6, 0x0, 0xd18, 0x0, 0x389}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) openat$cgroup_ro(r2, &(0x7f00000006c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x16, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000e80), 0x0, 0x10, &(0x7f0000000ec0)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r3, 0x0, 0xe, 0x0, &(0x7f0000000f80)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000fc0)=ANY=[], 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10}, 0x18) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r7, 0x1f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a80)=ANY=[@ANYRES32=r9, @ANYRES32=r6, @ANYBLOB="1c00000040000600000000007f007f35000000", @ANYRES32=r6, @ANYBLOB, @ANYRES64=r8], 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2000000000000300, &(0x7f0000000700)=ANY=[@ANYRESDEC=r5, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000005000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r10}, 0xc) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188006ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 3.266366708s ago: executing program 2 (id=3783): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x104, 0x10000, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x858a156c03d7270a, 0x18, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0x2000000000000216, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) (fail_nth: 6) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8906, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1a, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b40441000000000095000000"], &(0x7f0000000400)='syzkaller\x00', 0x2, 0xc3, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000a40), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r6 = perf_event_open(&(0x7f0000000b40)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000bc0), 0x4}, 0x4044, 0x100, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000ca688100"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0x5, &(0x7f0000000d40)=ANY=[@ANYRES32=r5], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x7, 0xc, &(0x7f0000000e40)=ANY=[], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000ec0)='ns/ipc\x00') socket$kcm(0xa, 0x2, 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000f00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50) perf_event_open(&(0x7f0000000f80)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x55, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.225758832s ago: executing program 1 (id=3784): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x104, 0x10000, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x858a156c03d7270a, 0x18, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0x2000000000000216, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="1c000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8906, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1a, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b40441000000000095000000"], &(0x7f0000000400)='syzkaller\x00', 0x2, 0xc3, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000a40), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r6 = perf_event_open(&(0x7f0000000b40)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000bc0), 0x4}, 0x4044, 0x100, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000ca688100"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0x5, &(0x7f0000000d40)=ANY=[@ANYRES32=r5], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x7, 0xc, &(0x7f0000000e40)=ANY=[], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000ec0)='ns/ipc\x00') socket$kcm(0xa, 0x2, 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000f00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50) perf_event_open(&(0x7f0000000f80)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x55, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.1399093s ago: executing program 0 (id=3785): r0 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x80000, 0xa}, 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x6000, &(0x7f00000001c0)="c8836f0a9fec6dd387110520256b303be17b05dbc1f9f5221acaf4fe6a502d9be77b7b5971d9", 0x26, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="7ef97783836159db5bce62925265c15bfec15e7577a0b08bc495b52003d91874943117400dc040f7911645be792ebe17e3c8503f29a54de00ad1a81be9a80c7513b64fab658b29bc5a3aba5b9e4a6f6875427badd1648bfbb8b92454c60155cf820301f5469930df782395cea36654669fee22d4900a137d5c774dc79a861f67a430a5d45d800d6ea221cef697") perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0xbe, 0x5, 0x4, 0x9, 0x0, 0x3ff, 0x8040, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x95e, 0x400}, 0x10020, 0x101, 0x13, 0xa, 0x800, 0x2, 0x7, 0x0, 0xffffff81, 0x0, 0xf1}, r3, 0x3, r0, 0x1) close(r2) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000580)=r4, 0x10) r5 = socket$kcm(0xa, 0x8, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xe, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0), 0x10}, 0x94) setsockopt$sock_attach_bpf(r5, 0x84, 0x1f, &(0x7f0000000a00)=r6, 0x129) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r3, r4, 0x0, 0x3, &(0x7f0000000000)='!-\x00'}, 0x30) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, &(0x7f0000000480), 0x9) close(r9) recvmsg$unix(r8, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f0000000cc0)=r10, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000001980)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000019c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r11, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000001b40)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000001c40), &(0x7f0000001c80)}, 0x2c) 3.009654214s ago: executing program 3 (id=3786): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000040000000b0000000900000100000000", @ANYRES32=0x1, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES8=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r2, &(0x7f0000000680)={&(0x7f00000006c0)=@in={0x2, 0x4e21, @loopback=0x7f000082}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)='\r', 0x34000}], 0x1}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) recvmsg$unix(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x10023) 2.569083649s ago: executing program 2 (id=3787): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7c101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0xd, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000080000000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x1e, 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000000000000000000000711215000000000095"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r2, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000ec0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe, 0x0}}, 0x10) 2.509284525s ago: executing program 3 (id=3788): perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0xec, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x7fffffff, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xb88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="1400000038000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x4000) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000f0ff00000000009500740000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r3, r1, 0x0, r5}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r6, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f00000006c0)={0xa, 0x0, @empty=0x2000000}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001780)=[@ip_tos_int={{0x14, 0x29, 0x43, 0x6}}, @ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50, 0x2000}, 0x0) write$cgroup_subtree(r4, &(0x7f0000001800)=ANY=[@ANYBLOB="1f9950d9b3342d1a47baf0e4c5816f726a78f4", @ANYRES8=r4], 0xfe33) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) 2.396042447s ago: executing program 1 (id=3789): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x80000, 0xa}, 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000580)=r2, 0x10) r3 = socket$kcm(0xa, 0x8, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xe, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0), 0x10}, 0x94) setsockopt$sock_attach_bpf(r3, 0x84, 0x1f, &(0x7f0000000a00)=r4, 0x129) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f0000000cc0)=r8, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000001980)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000019c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r9, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000001b40)="b9ff03076844268cb89e14f008004be0ffff00124000638977fbac141416ac14141683189f034d2f87e5840c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000001c40), &(0x7f0000001c80)}, 0x2c) 1.693215838s ago: executing program 3 (id=3790): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0xe0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0], 0x0, 0x2d, &(0x7f0000001580)=[{}], 0x8, 0x10, &(0x7f00000015c0), &(0x7f0000001600), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000001640)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000001880), 0xfdef) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000002300)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.592852358s ago: executing program 2 (id=3791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x4, 0x7, 0x7, 0x0, 0x1, 0xe94}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x84000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f00000005c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r3}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 1.511591377s ago: executing program 1 (id=3792): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a40)=""/4089, 0x1a, 0xff9, 0x1}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r2, &(0x7f0000000280), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001a80)='io.pressure\x00', 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x1f, 0xf, &(0x7f0000001b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000001c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001c40)={r4, r3}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x8d5b224ad05aee27}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x100c, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, 0x0, &(0x7f0000000a00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x830, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) 1.443189413s ago: executing program 0 (id=3793): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/30], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x2a, 0x0, 0x0) 1.442635624s ago: executing program 2 (id=3794): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x44}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) close(0x3) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6023b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_config_ext={0x9, 0x80}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000000000200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0200000004ecbfb87fc4edab00000008000078e8e1030080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x2, 0xa, 0x2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x3, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r4, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$sock(r3, &(0x7f0000001140)={&(0x7f0000001180)=@can, 0x80, 0x0, 0x0, &(0x7f0000001200)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x20008008) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0xf, &(0x7f0000000c00)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @alu={0x4, 0x1, 0x4, 0x5, 0x3, 0x30, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x0, 0x8, 0xf, 0x0, 0x4, 0x8}, @ldst={0x0, 0x0, 0x1, 0x1, 0x7, 0xfffffffffffffffe, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000c80)='GPL\x00', 0xdb, 0xaf, &(0x7f0000000cc0)=""/175, 0x40f00, 0xa, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001240)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001280)={0x3, 0xa, 0x20, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000012c0)=[{0x5, 0x2, 0x9, 0x10f30e71f2305384}, {0x3, 0x1, 0xd, 0xc}], 0x10, 0x40}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c00ffb0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x7ff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000f2ffffff0000008000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x41}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd6349080006"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.274458941s ago: executing program 1 (id=3795): r0 = socket$kcm(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000180000000300000000000000", @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES64, @ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRES64=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32, @ANYBLOB="0000181100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000010400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000000000000085000000010000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x9, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b0d80f12ae1d6c71a6cf9168956237140d72425667d8bce64abeaf9c76d7c77c21e221584bb54156b0708502571f0f4d71eeebfa1b8c9a766ae"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000940)={0x3, 0x80, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x100c, 0x408000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r6, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x60}, 0x40000062) socketpair(0x1, 0x1, 0x0, &(0x7f0000000b00)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r7 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x1f, &(0x7f0000000000), 0x4) recvmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x140) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfeee}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000cc0)=ANY=[@ANYRES8=r4, @ANYRES8=r8], 0x12) r9 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) syz_clone(0x21140200, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000140), 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x6, &(0x7f0000000180)=r11, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 1.200594458s ago: executing program 0 (id=3796): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000040000000b0000000900000100000000", @ANYRES32=0x1, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES8=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r2, &(0x7f0000000680)={&(0x7f00000006c0)=@in={0x2, 0x4e21, @loopback=0x7f000082}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)='\r', 0x34000}], 0x1}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) recvmsg$unix(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x10023) 655.140494ms ago: executing program 3 (id=3797): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xb9, 0x8, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc, 0x7}, 0x40, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xbd9ddb11bfb6c30d}, 0x0, 0x86}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open$cgroup(&(0x7f0000000a40)={0x4, 0x80, 0xdb, 0x3, 0x2, 0x9, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000a00)}, 0x420, 0x8000000000000001, 0xfffffff0, 0x6, 0x48c7, 0xffffffac, 0x5, 0x0, 0x9, 0x0, 0xe1e}, r0, 0xa, r1, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480400000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x3, 0x2, 0x4, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000037000b0fd25a806c8c6f94f90d24fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000003000000060000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009e00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r7}, 0xc) r8 = openat$cgroup(r0, &(0x7f0000000ac0)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000b00)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000071122000000000009500000000000000", @ANYRESHEX=r4, @ANYRESHEX=r5], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x24}, 0x94) 348.029876ms ago: executing program 1 (id=3798): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x6c, 0x30, 0x30, 0x9, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x2}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x4}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @fwd={0x4}]}, {0x0, [0x2e, 0x30, 0x5f, 0x5f, 0x61, 0x2e, 0x2e]}}, 0x0, 0x51, 0x0, 0x1}, 0x28) 110.789169ms ago: executing program 1 (id=3799): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7c101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0xd, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000080000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x1e, 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000000000000000000000711215000000000095"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r2, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000ec0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe, 0x0}}, 0x10) 0s ago: executing program 0 (id=3800): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa16d, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x104, 0x10000, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x858a156c03d7270a, 0x18, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0x2000000000000216, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000005a1c, 0xe4407, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x18100, 0x400000, 0x1570, 0x0, 0x1, 0xe, 0x400, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xfdffffffffffffff, r0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair(0x28, 0x6, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8906, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1a, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b40441000000800095000000"], &(0x7f0000000400)='syzkaller\x00', 0x2, 0xc8, &(0x7f0000001080)=""/200, 0x0, 0x28, '\x00', 0x0, @tracing=0x1a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000a40), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r6 = perf_event_open(&(0x7f0000000b40)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000bc0), 0x4}, 0x4044, 0x100, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000ca688100"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0x5, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x7, 0xc, &(0x7f0000000e40)=ANY=[], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000ec0)='ns/ipc\x00') socket$kcm(0xa, 0x0, 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000f00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50) perf_event_open(&(0x7f0000000f80)={0x3, 0x80, 0x17, 0x1, 0x0, 0x0, 0x0, 0x55, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000100), 0x3}, 0x8000, 0xce0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x800000, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.931821][T14618] RSP: 002b:00007fc5e0a44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 620.940265][T14618] RAX: ffffffffffffffda RBX: 00007fc5dfe25fa0 RCX: 00007fc5dfba94d9 [ 620.948262][T14618] RDX: 0000000000000038 RSI: 0000200000000100 RDI: 000000000000001a [ 620.956260][T14618] RBP: 00007fc5e0a44090 R08: 0000000000000000 R09: 0000000000000000 [ 620.964258][T14618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 620.972265][T14618] R13: 00007fc5dfe26038 R14: 00007fc5dfe25fa0 R15: 00007ffef44c9058 [ 620.980473][T14618] [ 621.687807][T14624] netlink: 'syz.0.2764': attribute type 27 has an invalid length. [ 621.720495][T14624] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2764'. [ 622.266049][T14629] netlink: 'syz.0.2765': attribute type 29 has an invalid length. [ 623.893515][T14640] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 624.043491][T14643] validate_nla: 1 callbacks suppressed [ 624.043511][T14643] netlink: 'syz.2.2777': attribute type 39 has an invalid length. [ 624.551061][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.560576][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.715453][T14645] netlink: 'syz.1.2768': attribute type 10 has an invalid length. [ 624.737082][T14645] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2768'. [ 624.769921][T14645] batadv_slave_0: entered promiscuous mode [ 624.785470][T14645] batadv_slave_0: entered allmulticast mode [ 624.792281][T14645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.800333][T14645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.814892][T14645] bridge0: port 3(batadv_slave_0) entered blocking state [ 624.824399][T14645] bridge0: port 3(batadv_slave_0) entered disabled state [ 624.834893][T14645] bridge0: port 3(batadv_slave_0) entered blocking state [ 624.842173][T14645] bridge0: port 3(batadv_slave_0) entered forwarding state [ 625.680995][T14670] syzkaller0: entered promiscuous mode [ 625.690729][T14670] syzkaller0: entered allmulticast mode [ 625.709947][T14674] netlink: 'syz.3.2778': attribute type 10 has an invalid length. [ 625.976298][T14674] team0: Device gre0 is of different type [ 626.231374][T14672] netlink: 'syz.2.2779': attribute type 10 has an invalid length. [ 626.257564][T14672] FAULT_INJECTION: forcing a failure. [ 626.257564][T14672] name failslab, interval 1, probability 0, space 0, times 0 [ 626.311883][T14672] CPU: 1 PID: 14672 Comm: syz.2.2779 Not tainted syzkaller #0 [ 626.319453][T14672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 626.329583][T14672] Call Trace: [ 626.332927][T14672] [ 626.335932][T14672] dump_stack_lvl+0x18c/0x250 [ 626.340700][T14672] ? trace_event_raw_event_lock+0x240/0x240 [ 626.346849][T14672] ? show_regs_print_info+0x20/0x20 [ 626.352135][T14672] ? load_image+0x420/0x420 [ 626.356748][T14672] should_fail_ex+0x394/0x4c0 [ 626.361513][T14672] should_failslab+0x9/0x20 [ 626.366076][T14672] slab_pre_alloc_hook+0x59/0x300 [ 626.371184][T14672] kmem_cache_alloc_node+0x5e/0x320 [ 626.376452][T14672] ? __alloc_skb+0x103/0x2c0 [ 626.381152][T14672] __alloc_skb+0x103/0x2c0 [ 626.385668][T14672] rtmsg_ifinfo_build_skb+0x83/0x260 [ 626.391037][T14672] ? lockdep_rtnl_is_held+0x26/0x30 [ 626.396303][T14672] rtmsg_ifinfo+0x8c/0x1a0 [ 626.400793][T14672] __dev_notify_flags+0xf3/0x310 [ 626.405787][T14672] ? __dev_change_flags+0x6a0/0x6a0 [ 626.411034][T14672] ? __dev_change_flags+0x4d2/0x6a0 [ 626.416307][T14672] ? dev_get_flags+0x1c0/0x1c0 [ 626.421136][T14672] ? printk_sprint+0x460/0x460 [ 626.425977][T14672] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 626.431947][T14672] dev_change_flags+0xde/0x1a0 [ 626.436782][T14672] do_setlink+0xc1f/0x3f00 [ 626.441278][T14672] ? load_image+0x420/0x420 [ 626.445841][T14672] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 626.452051][T14672] ? stack_trace_save+0xaa/0x100 [ 626.457046][T14672] ? stack_trace_snprint+0xf0/0xf0 [ 626.462273][T14672] ? __nla_validate+0x50/0x50 [ 626.467072][T14672] ? validate_linkmsg+0x719/0x910 [ 626.472175][T14672] rtnl_newlink+0x1848/0x2170 [ 626.476955][T14672] ? rtnl_newlink+0x501/0x2170 [ 626.481809][T14672] ? rtnl_setlink+0x4e0/0x4e0 [ 626.486545][T14672] ? __rwlock_init+0x150/0x150 [ 626.491387][T14672] ? do_raw_spin_unlock+0x121/0x230 [ 626.496656][T14672] ? __mutex_lock+0x978/0xce0 [ 626.501406][T14672] ? __mutex_lock+0x4d2/0xce0 [ 626.506180][T14672] ? rtnl_setlink+0x4e0/0x4e0 [ 626.510923][T14672] rtnetlink_rcv_msg+0x843/0xf90 [ 626.515921][T14672] ? rtnetlink_rcv_msg+0x220/0xf90 [ 626.521111][T14672] ? rtnetlink_bind+0x80/0x80 [ 626.525845][T14672] ? perf_trace_lock+0xfc/0x3b0 [ 626.530742][T14672] ? kasan_quarantine_put+0xd8/0x220 [ 626.536096][T14672] ? perf_trace_preemptirq_template+0xac/0x330 [ 626.542352][T14672] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 626.548417][T14672] ? lock_chain_count+0x20/0x20 [ 626.553359][T14672] ? __local_bh_enable_ip+0x13a/0x1c0 [ 626.558814][T14672] ? lockdep_hardirqs_on+0x98/0x150 [ 626.564063][T14672] ? __local_bh_enable_ip+0x13a/0x1c0 [ 626.569480][T14672] ? _local_bh_enable+0xa0/0xa0 [ 626.574408][T14672] ? __dev_queue_xmit+0x1481/0x3a30 [ 626.579663][T14672] ? __dev_queue_xmit+0x6d1/0x3a30 [ 626.584843][T14672] ? perf_trace_lock+0xfc/0x3b0 [ 626.589754][T14672] netlink_rcv_skb+0x235/0x4c0 [ 626.594567][T14672] ? rtnetlink_bind+0x80/0x80 [ 626.599294][T14672] ? netlink_ack+0x1160/0x1160 [ 626.604120][T14672] ? __lock_acquire+0x7eb0/0x7eb0 [ 626.609206][T14672] ? netlink_deliver_tap+0x2e/0x1b0 [ 626.614455][T14672] netlink_unicast+0x856/0x9e0 [ 626.619355][T14672] netlink_sendmsg+0x8d0/0xbf0 [ 626.624178][T14672] ? netlink_getsockopt+0x590/0x590 [ 626.629421][T14672] ? apparmor_socket_sendmsg+0x170/0x330 [ 626.635105][T14672] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 626.640432][T14672] ? security_socket_sendmsg+0x80/0xa0 [ 626.645931][T14672] ? netlink_getsockopt+0x590/0x590 [ 626.651183][T14672] ____sys_sendmsg+0x61b/0x980 [ 626.656008][T14672] ? __asan_memset+0x22/0x40 [ 626.660647][T14672] ? __sys_sendmsg_sock+0x30/0x30 [ 626.665717][T14672] ? __import_iovec+0x5f2/0x850 [ 626.670625][T14672] ? import_iovec+0x73/0xa0 [ 626.675180][T14672] ___sys_sendmsg+0x2a6/0x360 [ 626.679910][T14672] ? __sys_sendmsg+0x2b0/0x2b0 [ 626.684747][T14672] ? __lock_acquire+0x7eb0/0x7eb0 [ 626.689974][T14672] __se_sys_sendmsg+0x1d0/0x2c0 [ 626.694872][T14672] ? __x64_sys_sendmsg+0x80/0x80 [ 626.699886][T14672] ? lockdep_hardirqs_on+0x98/0x150 [ 626.706464][T14672] do_syscall_64+0x55/0xb0 [ 626.710972][T14672] ? clear_bhb_loop+0x40/0x90 [ 626.715709][T14672] ? clear_bhb_loop+0x40/0x90 [ 626.720449][T14672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 626.726392][T14672] RIP: 0033:0x7fe387fa94d9 [ 626.730851][T14672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.750522][T14672] RSP: 002b:00007fe388f3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 626.758990][T14672] RAX: ffffffffffffffda RBX: 00007fe388225fa0 RCX: 00007fe387fa94d9 [ 626.767001][T14672] RDX: 0000000024088054 RSI: 0000200000000a80 RDI: 0000000000000004 [ 626.775009][T14672] RBP: 00007fe388f3b090 R08: 0000000000000000 R09: 0000000000000000 [ 626.783022][T14672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.791027][T14672] R13: 00007fe388226038 R14: 00007fe388225fa0 R15: 00007fffed97ac18 [ 626.799071][T14672] [ 626.968375][T14672] team0: Device gre0 is of different type [ 627.331347][T14682] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2780'. [ 630.275805][T14696] netlink: 'syz.3.2785': attribute type 19 has an invalid length. [ 630.301241][T14696] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2785'. [ 630.736755][T14716] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2792'. [ 630.830477][T14718] netlink: 'syz.3.2794': attribute type 27 has an invalid length. [ 630.846225][T14718] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2794'. [ 631.100798][T14723] FAULT_INJECTION: forcing a failure. [ 631.100798][T14723] name failslab, interval 1, probability 0, space 0, times 0 [ 631.118224][T14723] CPU: 1 PID: 14723 Comm: syz.2.2796 Not tainted syzkaller #0 [ 631.125766][T14723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 631.135934][T14723] Call Trace: [ 631.139310][T14723] [ 631.142309][T14723] dump_stack_lvl+0x18c/0x250 [ 631.147235][T14723] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 631.153469][T14723] ? show_regs_print_info+0x20/0x20 [ 631.158742][T14723] ? load_image+0x420/0x420 [ 631.163326][T14723] should_fail_ex+0x394/0x4c0 [ 631.168071][T14723] should_failslab+0x9/0x20 [ 631.172652][T14723] slab_pre_alloc_hook+0x59/0x300 [ 631.177748][T14723] kmem_cache_alloc+0x5a/0x2d0 [ 631.182574][T14723] ? skb_clone+0x1eb/0x370 [ 631.187060][T14723] skb_clone+0x1eb/0x370 [ 631.191366][T14723] __netlink_deliver_tap+0x411/0x7f0 [ 631.196724][T14723] ? netlink_deliver_tap+0x2e/0x1b0 [ 631.201985][T14723] netlink_deliver_tap+0x19c/0x1b0 [ 631.207159][T14723] netlink_dump+0x95b/0xec0 [ 631.211734][T14723] ? netlink_lookup+0x200/0x200 [ 631.216670][T14723] ? netlink_lookup+0x30/0x200 [ 631.221486][T14723] ? netlink_lookup+0x30/0x200 [ 631.226312][T14723] __netlink_dump_start+0x57c/0x7a0 [ 631.231578][T14723] rtnetlink_rcv_msg+0xe19/0xf90 [ 631.236608][T14723] ? rtnetlink_rcv_msg+0x220/0xf90 [ 631.241790][T14723] ? neigh_get+0xd20/0xd20 [ 631.246284][T14723] ? rtnetlink_bind+0x80/0x80 [ 631.251016][T14723] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 631.257125][T14723] ? lock_chain_count+0x20/0x20 [ 631.262054][T14723] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 631.268288][T14723] ? lockdep_hardirqs_on+0x98/0x150 [ 631.273555][T14723] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 631.279782][T14723] ? __dev_queue_xmit+0x6d1/0x3a30 [ 631.284957][T14723] ? __dev_queue_xmit+0x6d1/0x3a30 [ 631.290145][T14723] ? __local_bh_enable_ip+0x142/0x1c0 [ 631.295579][T14723] ? _local_bh_enable+0xa0/0xa0 [ 631.300515][T14723] ? __dev_queue_xmit+0x1481/0x3a30 [ 631.305784][T14723] ? __dev_queue_xmit+0x6d1/0x3a30 [ 631.311016][T14723] ? neigh_get+0xd20/0xd20 [ 631.315523][T14723] ? ref_tracker_free+0x686/0x830 [ 631.320634][T14723] netlink_rcv_skb+0x235/0x4c0 [ 631.325457][T14723] ? rtnetlink_bind+0x80/0x80 [ 631.330192][T14723] ? netlink_ack+0x1160/0x1160 [ 631.335026][T14723] ? __lock_acquire+0x7eb0/0x7eb0 [ 631.340159][T14723] ? netlink_deliver_tap+0x2e/0x1b0 [ 631.345420][T14723] netlink_unicast+0x856/0x9e0 [ 631.350276][T14723] netlink_sendmsg+0x8d0/0xbf0 [ 631.355115][T14723] ? netlink_getsockopt+0x590/0x590 [ 631.360383][T14723] ? apparmor_socket_sendmsg+0x8e/0x330 [ 631.366007][T14723] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 631.371359][T14723] ? security_socket_sendmsg+0x80/0xa0 [ 631.376969][T14723] ? netlink_getsockopt+0x590/0x590 [ 631.382260][T14723] ____sys_sendmsg+0x61b/0x980 [ 631.387089][T14723] ? __asan_memset+0x22/0x40 [ 631.391746][T14723] ? __sys_sendmsg_sock+0x30/0x30 [ 631.396828][T14723] ? __import_iovec+0x5f2/0x850 [ 631.401756][T14723] ? import_iovec+0x73/0xa0 [ 631.406327][T14723] ___sys_sendmsg+0x2a6/0x360 [ 631.411075][T14723] ? __sys_sendmsg+0x2b0/0x2b0 [ 631.415924][T14723] ? ktime_get+0x7f/0x280 [ 631.420351][T14723] __se_sys_sendmsg+0x1d0/0x2c0 [ 631.425268][T14723] ? __x64_sys_sendmsg+0x80/0x80 [ 631.430281][T14723] ? lockdep_hardirqs_on+0x98/0x150 [ 631.435538][T14723] do_syscall_64+0x55/0xb0 [ 631.440013][T14723] ? clear_bhb_loop+0x40/0x90 [ 631.444757][T14723] ? clear_bhb_loop+0x40/0x90 [ 631.449505][T14723] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 631.455504][T14723] RIP: 0033:0x7fe387fa94d9 [ 631.459977][T14723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.479646][T14723] RSP: 002b:00007fe388f3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.488214][T14723] RAX: ffffffffffffffda RBX: 00007fe388225fa0 RCX: 00007fe387fa94d9 [ 631.496244][T14723] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000d [ 631.504276][T14723] RBP: 00007fe388f3b090 R08: 0000000000000000 R09: 0000000000000000 [ 631.512304][T14723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.520328][T14723] R13: 00007fe388226038 R14: 00007fe388225fa0 R15: 00007fffed97ac18 [ 631.528376][T14723] [ 631.822634][T14732] syzkaller0: entered promiscuous mode [ 631.841387][T14732] syzkaller0: entered allmulticast mode [ 632.052308][T14740] FAULT_INJECTION: forcing a failure. [ 632.052308][T14740] name failslab, interval 1, probability 0, space 0, times 0 [ 632.076651][T14740] CPU: 0 PID: 14740 Comm: syz.2.2802 Not tainted syzkaller #0 [ 632.084211][T14740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 632.094317][T14740] Call Trace: [ 632.097643][T14740] [ 632.100621][T14740] dump_stack_lvl+0x18c/0x250 [ 632.105380][T14740] ? show_regs_print_info+0x20/0x20 [ 632.110648][T14740] ? load_image+0x420/0x420 [ 632.115213][T14740] ? __might_sleep+0xe0/0xe0 [ 632.119897][T14740] ? __lock_acquire+0x7eb0/0x7eb0 [ 632.124963][T14740] ? __lock_acquire+0x1431/0x7eb0 [ 632.130036][T14740] should_fail_ex+0x394/0x4c0 [ 632.134761][T14740] should_failslab+0x9/0x20 [ 632.139295][T14740] slab_pre_alloc_hook+0x59/0x300 [ 632.144404][T14740] kmem_cache_alloc_lru+0x4d/0x2c0 [ 632.149546][T14740] ? sock_alloc_inode+0x28/0xc0 [ 632.154439][T14740] sock_alloc_inode+0x28/0xc0 [ 632.159194][T14740] ? sockfs_init_fs_context+0xb0/0xb0 [ 632.164629][T14740] new_inode_pseudo+0x63/0x1d0 [ 632.169439][T14740] __sock_create+0x12d/0x940 [ 632.174081][T14740] ? verify_lock_unused+0x140/0x140 [ 632.179331][T14740] mptcp_subflow_create_socket+0x10c/0xad0 [ 632.185176][T14740] ? __mptcp_subflow_connect+0x14d0/0x14d0 [ 632.191014][T14740] ? mark_lock+0x94/0x320 [ 632.195430][T14740] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 632.201458][T14740] __mptcp_nmpc_sk+0x157/0x720 [ 632.206303][T14740] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 632.213111][T14740] ? __local_bh_enable_ip+0x13a/0x1c0 [ 632.218514][T14740] ? lockdep_hardirqs_on+0x98/0x150 [ 632.223747][T14740] ? __local_bh_enable_ip+0x13a/0x1c0 [ 632.229155][T14740] mptcp_sendmsg_fastopen+0x7c/0x4c0 [ 632.234490][T14740] mptcp_sendmsg+0x144c/0x1670 [ 632.239294][T14740] ? __lock_acquire+0x135d/0x7eb0 [ 632.244362][T14740] ? aa_sk_perm+0x7bb/0x8e0 [ 632.248905][T14740] ? aa_af_perm+0x330/0x330 [ 632.253445][T14740] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 632.259955][T14740] ? mptcp_shutdown+0x160/0x160 [ 632.264853][T14740] ? sock_rps_record_flow+0x19/0x3f0 [ 632.270175][T14740] ? inet_sendmsg+0xce/0x2a0 [ 632.274803][T14740] ? inet_send_prepare+0x250/0x250 [ 632.279958][T14740] ____sys_sendmsg+0x61b/0x980 [ 632.284763][T14740] ? __asan_memset+0x22/0x40 [ 632.289389][T14740] ? __sys_sendmsg_sock+0x30/0x30 [ 632.294445][T14740] ? __import_iovec+0x3fa/0x850 [ 632.299338][T14740] ? import_iovec+0x73/0xa0 [ 632.303885][T14740] ___sys_sendmsg+0x2a6/0x360 [ 632.308627][T14740] ? get_pid_task+0x20/0x1e0 [ 632.313255][T14740] ? __sys_sendmsg+0x2b0/0x2b0 [ 632.318099][T14740] ? __lock_acquire+0x7eb0/0x7eb0 [ 632.323182][T14740] __se_sys_sendmsg+0x1d0/0x2c0 [ 632.328074][T14740] ? __x64_sys_sendmsg+0x80/0x80 [ 632.333060][T14740] ? lockdep_hardirqs_on+0x98/0x150 [ 632.338294][T14740] do_syscall_64+0x55/0xb0 [ 632.342754][T14740] ? clear_bhb_loop+0x40/0x90 [ 632.347470][T14740] ? clear_bhb_loop+0x40/0x90 [ 632.352199][T14740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.358130][T14740] RIP: 0033:0x7fe387fa94d9 [ 632.362581][T14740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.382220][T14740] RSP: 002b:00007fe388f3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.390669][T14740] RAX: ffffffffffffffda RBX: 00007fe388225fa0 RCX: 00007fe387fa94d9 [ 632.398669][T14740] RDX: 00000000200048cc RSI: 0000200000000b80 RDI: 0000000000000003 [ 632.406667][T14740] RBP: 00007fe388f3b090 R08: 0000000000000000 R09: 0000000000000000 [ 632.414667][T14740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.422680][T14740] R13: 00007fe388226038 R14: 00007fe388225fa0 R15: 00007fffed97ac18 [ 632.430728][T14740] [ 632.505093][T14740] socket: no more sockets [ 635.086663][T14754] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2805'. [ 635.734567][T14786] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2815'. [ 635.830790][T14784] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2817'. [ 635.983477][T14794] sctp: [Deprecated]: syz.0.2820 (pid 14794) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.983477][T14794] Use struct sctp_sack_info instead [ 636.692193][T14830] netlink: 'syz.2.2834': attribute type 10 has an invalid length. [ 636.863929][ T5096] Bluetooth: hci1: command 0x0406 tx timeout [ 636.873054][T14830] team0: Port device wlan0 added [ 637.097325][T14840] FAULT_INJECTION: forcing a failure. [ 637.097325][T14840] name failslab, interval 1, probability 0, space 0, times 0 [ 637.131402][T14840] CPU: 1 PID: 14840 Comm: syz.3.2838 Not tainted syzkaller #0 [ 637.139000][T14840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 637.149102][T14840] Call Trace: [ 637.152437][T14840] [ 637.155415][T14840] dump_stack_lvl+0x18c/0x250 [ 637.160265][T14840] ? show_regs_print_info+0x20/0x20 [ 637.165534][T14840] ? load_image+0x420/0x420 [ 637.170102][T14840] ? __might_sleep+0xe0/0xe0 [ 637.174785][T14840] ? __lock_acquire+0x7eb0/0x7eb0 [ 637.179871][T14840] should_fail_ex+0x394/0x4c0 [ 637.184614][T14840] should_failslab+0x9/0x20 [ 637.189178][T14840] slab_pre_alloc_hook+0x59/0x300 [ 637.194292][T14840] kmem_cache_alloc_node+0x5e/0x320 [ 637.199538][T14840] ? __alloc_skb+0x103/0x2c0 [ 637.204212][T14840] __alloc_skb+0x103/0x2c0 [ 637.208691][T14840] netlink_dump+0x1ee/0xec0 [ 637.213256][T14840] ? rcu_is_watching+0x15/0xb0 [ 637.218081][T14840] ? __mutex_lock+0x30d/0xce0 [ 637.222808][T14840] ? netlink_lookup+0x200/0x200 [ 637.227731][T14840] ? netlink_lookup+0x30/0x200 [ 637.232572][T14840] ? netlink_lookup+0x30/0x200 [ 637.237390][T14840] __netlink_dump_start+0x57c/0x7a0 [ 637.242647][T14840] rtnetlink_rcv_msg+0xe19/0xf90 [ 637.247645][T14840] ? rtnetlink_rcv_msg+0x220/0xf90 [ 637.252811][T14840] ? ip6addrlbl_get+0x980/0x980 [ 637.257765][T14840] ? rtnetlink_bind+0x80/0x80 [ 637.262509][T14840] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 637.268299][T14840] ? perf_trace_preemptirq_template+0x269/0x330 [ 637.274608][T14840] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 637.280645][T14840] ? lock_chain_count+0x20/0x20 [ 637.284465][T14842] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2837'. [ 637.285538][T14840] ? __local_bh_enable_ip+0x13a/0x1c0 [ 637.300010][T14840] ? lockdep_hardirqs_on+0x98/0x150 [ 637.305266][T14840] ? __local_bh_enable_ip+0x13a/0x1c0 [ 637.310699][T14840] ? _local_bh_enable+0xa0/0xa0 [ 637.315617][T14840] ? __dev_queue_xmit+0x1481/0x3a30 [ 637.320880][T14840] ? __dev_queue_xmit+0x6d1/0x3a30 [ 637.326056][T14840] ? ip6addrlbl_get+0x980/0x980 [ 637.330980][T14840] ? ref_tracker_free+0x686/0x830 [ 637.336067][T14840] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.342565][T14840] netlink_rcv_skb+0x235/0x4c0 [ 637.347377][T14840] ? rtnetlink_bind+0x80/0x80 [ 637.352107][T14840] ? netlink_ack+0x1160/0x1160 [ 637.356947][T14840] ? __lock_acquire+0x7eb0/0x7eb0 [ 637.362039][T14840] ? netlink_deliver_tap+0x2e/0x1b0 [ 637.367293][T14840] netlink_unicast+0x856/0x9e0 [ 637.372176][T14840] netlink_sendmsg+0x8d0/0xbf0 [ 637.377012][T14840] ? netlink_getsockopt+0x590/0x590 [ 637.382270][T14840] ? apparmor_socket_sendmsg+0x8e/0x330 [ 637.387882][T14840] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 637.393225][T14840] ? security_socket_sendmsg+0x80/0xa0 [ 637.398747][T14840] ? netlink_getsockopt+0x590/0x590 [ 637.403997][T14840] ____sys_sendmsg+0x61b/0x980 [ 637.408853][T14840] ? __asan_memset+0x22/0x40 [ 637.413504][T14840] ? __sys_sendmsg_sock+0x30/0x30 [ 637.418581][T14840] ? __import_iovec+0x5f2/0x850 [ 637.423498][T14840] ? import_iovec+0x73/0xa0 [ 637.428067][T14840] ___sys_sendmsg+0x2a6/0x360 [ 637.432808][T14840] ? __sys_sendmsg+0x2b0/0x2b0 [ 637.437655][T14840] ? ktime_get+0x7f/0x280 [ 637.442076][T14840] __se_sys_sendmsg+0x1d0/0x2c0 [ 637.447017][T14840] ? perf_trace_preemptirq_template+0x269/0x330 [ 637.453349][T14840] ? __x64_sys_sendmsg+0x80/0x80 [ 637.458350][T14840] ? lockdep_hardirqs_on+0x98/0x150 [ 637.463587][T14840] do_syscall_64+0x55/0xb0 [ 637.468040][T14840] ? clear_bhb_loop+0x40/0x90 [ 637.472755][T14840] ? clear_bhb_loop+0x40/0x90 [ 637.477469][T14840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 637.483400][T14840] RIP: 0033:0x7fa1bb5a94d9 [ 637.487844][T14840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.507485][T14840] RSP: 002b:00007fa1bc4aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.515933][T14840] RAX: ffffffffffffffda RBX: 00007fa1bb825fa0 RCX: 00007fa1bb5a94d9 [ 637.523953][T14840] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000007 [ 637.531953][T14840] RBP: 00007fa1bc4aa090 R08: 0000000000000000 R09: 0000000000000000 [ 637.539975][T14840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.547978][T14840] R13: 00007fa1bb826038 R14: 00007fa1bb825fa0 R15: 00007fff68f98d98 [ 637.555997][T14840] [ 637.852267][T14860] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2842'. [ 638.521676][T14872] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2845'. [ 639.169864][ T5795] Bluetooth: hci4: Malformed Event: 0x02 [ 639.558162][T14903] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2857'. [ 640.378435][T14919] netlink: 'syz.0.2863': attribute type 2 has an invalid length. [ 640.388215][T14919] netlink: 'syz.0.2863': attribute type 8 has an invalid length. [ 640.396894][T14919] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2863'. [ 640.532306][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2863'. [ 640.692367][T14923] netlink: 'syz.3.2865': attribute type 10 has an invalid length. [ 640.700499][T14923] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2865'. [ 640.728732][T14923] bond0: entered promiscuous mode [ 640.735235][T14923] bond_slave_0: entered promiscuous mode [ 640.768727][T14923] bond_slave_1: entered promiscuous mode [ 640.791356][T14923] bridge0: port 4(bond0) entered blocking state [ 640.812277][T14923] bridge0: port 4(bond0) entered disabled state [ 640.874809][T14923] bond0: entered allmulticast mode [ 640.880245][T14923] bond_slave_0: entered allmulticast mode [ 640.891873][T14923] bond_slave_1: entered allmulticast mode [ 640.898374][T14923] macvlan0: entered allmulticast mode [ 640.916686][T14931] netlink: 169564 bytes leftover after parsing attributes in process `syz.0.2868'. [ 640.950762][T14923] veth1_vlan: entered allmulticast mode [ 641.053276][T14923] bridge0: port 4(bond0) entered blocking state [ 641.061098][T14923] bridge0: port 4(bond0) entered forwarding state [ 641.232929][T14941] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2871'. [ 641.336442][T14944] syzkaller0: entered promiscuous mode [ 641.348199][T14944] syzkaller0: entered allmulticast mode [ 643.607039][T14969] FAULT_INJECTION: forcing a failure. [ 643.607039][T14969] name failslab, interval 1, probability 0, space 0, times 0 [ 643.645507][T14969] CPU: 0 PID: 14969 Comm: syz.2.2881 Not tainted syzkaller #0 [ 643.653116][T14969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 643.663247][T14969] Call Trace: [ 643.666587][T14969] [ 643.669580][T14969] dump_stack_lvl+0x18c/0x250 [ 643.674366][T14969] ? show_regs_print_info+0x20/0x20 [ 643.679676][T14969] ? load_image+0x420/0x420 [ 643.684280][T14969] ? verify_lock_unused+0x140/0x140 [ 643.689566][T14969] ? perf_trace_lock+0x303/0x3b0 [ 643.694596][T14969] should_fail_ex+0x394/0x4c0 [ 643.699367][T14969] should_failslab+0x9/0x20 [ 643.703940][T14969] slab_pre_alloc_hook+0x59/0x300 [ 643.709070][T14969] kmem_cache_alloc+0x5a/0x2d0 [ 643.713893][T14969] ? skb_clone+0x1eb/0x370 [ 643.718405][T14969] skb_clone+0x1eb/0x370 [ 643.722759][T14969] __netlink_deliver_tap+0x411/0x7f0 [ 643.728125][T14969] ? netlink_deliver_tap+0x2e/0x1b0 [ 643.733383][T14969] netlink_deliver_tap+0x19c/0x1b0 [ 643.738546][T14969] netlink_unicast+0x82f/0x9e0 [ 643.743406][T14969] netlink_sendmsg+0x8d0/0xbf0 [ 643.748232][T14969] ? netlink_getsockopt+0x590/0x590 [ 643.753483][T14969] ? apparmor_socket_sendmsg+0x8e/0x330 [ 643.759082][T14969] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 643.764955][T14969] ? security_socket_sendmsg+0x80/0xa0 [ 643.770463][T14969] ? netlink_getsockopt+0x590/0x590 [ 643.775705][T14969] ____sys_sendmsg+0x61b/0x980 [ 643.780545][T14969] ? __asan_memset+0x22/0x40 [ 643.785216][T14969] ? __sys_sendmsg_sock+0x30/0x30 [ 643.790276][T14969] ? __import_iovec+0x5f2/0x850 [ 643.795186][T14969] ? import_iovec+0x73/0xa0 [ 643.799745][T14969] ___sys_sendmsg+0x2a6/0x360 [ 643.804475][T14969] ? __sys_sendmsg+0x2b0/0x2b0 [ 643.809320][T14969] ? __lock_acquire+0x7eb0/0x7eb0 [ 643.814547][T14969] __se_sys_sendmsg+0x1d0/0x2c0 [ 643.819457][T14969] ? __x64_sys_sendmsg+0x80/0x80 [ 643.824471][T14969] ? lockdep_hardirqs_on+0x98/0x150 [ 643.829751][T14969] do_syscall_64+0x55/0xb0 [ 643.834216][T14969] ? clear_bhb_loop+0x40/0x90 [ 643.838955][T14969] ? clear_bhb_loop+0x40/0x90 [ 643.843693][T14969] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 643.849632][T14969] RIP: 0033:0x7fe387fa94d9 [ 643.854107][T14969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.873790][T14969] RSP: 002b:00007fe388f3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.882287][T14969] RAX: ffffffffffffffda RBX: 00007fe388225fa0 RCX: 00007fe387fa94d9 [ 643.890358][T14969] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000009 [ 643.898385][T14969] RBP: 00007fe388f3b090 R08: 0000000000000000 R09: 0000000000000000 [ 643.906398][T14969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.914412][T14969] R13: 00007fe388226038 R14: 00007fe388225fa0 R15: 00007fffed97ac18 [ 643.922455][T14969] [ 643.936157][T14969] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2881'. [ 644.719213][T14980] netlink: 'syz.0.2893': attribute type 2 has an invalid length. [ 644.748228][T14980] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2893'. [ 644.968128][T14990] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2887'. [ 645.603188][T15005] netlink: 'syz.0.2895': attribute type 21 has an invalid length. [ 645.819782][T15007] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2897'. [ 645.918674][T15012] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2898'. [ 646.851671][T15041] netlink: 124496 bytes leftover after parsing attributes in process `syz.1.2906'. [ 647.129014][T15053] netlink: 'syz.0.2913': attribute type 10 has an invalid length. [ 647.144275][T15053] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2913'. [ 647.167323][T15053] bond0: entered promiscuous mode [ 647.185412][T15053] bond_slave_0: entered promiscuous mode [ 647.213385][T15053] bond_slave_1: entered promiscuous mode [ 647.222280][T15056] netlink: 'syz.2.2914': attribute type 2 has an invalid length. [ 647.235644][T15056] netlink: 'syz.2.2914': attribute type 8 has an invalid length. [ 647.252571][T15056] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2914'. [ 647.274934][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2914'. [ 647.566091][T15065] -1: renamed from syzkaller0 [ 648.176009][T15083] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2921'. [ 648.615452][T15089] netlink: 'syz.2.2924': attribute type 10 has an invalid length. [ 648.624269][T15089] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2924'. [ 648.656313][T15089] bond0: entered promiscuous mode [ 648.662151][T15089] bond_slave_0: entered promiscuous mode [ 648.675268][T15089] bond_slave_1: entered promiscuous mode [ 648.711775][T15089] bridge0: port 4(bond0) entered blocking state [ 648.735172][T15089] bridge0: port 4(bond0) entered disabled state [ 648.750411][T15089] bond0: entered allmulticast mode [ 648.756843][T15089] bond_slave_0: entered allmulticast mode [ 648.763590][T15089] bond_slave_1: entered allmulticast mode [ 648.813620][T15089] bridge0: port 4(bond0) entered blocking state [ 648.821321][T15089] bridge0: port 4(bond0) entered forwarding state [ 648.839715][T15097] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2926'. [ 649.072461][T15104] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2928'. [ 649.969998][T15123] netlink: 'syz.3.2935': attribute type 29 has an invalid length. [ 649.991705][T15123] netlink: 'syz.3.2935': attribute type 29 has an invalid length. [ 650.007112][T15123] netlink: 'syz.3.2935': attribute type 29 has an invalid length. [ 650.015815][T15123] netlink: 'syz.3.2935': attribute type 29 has an invalid length. [ 650.218596][T15130] syzkaller0: entered promiscuous mode [ 650.224490][T15130] syzkaller0: entered allmulticast mode [ 650.488728][T15142] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2941'. [ 652.163816][T15144] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2942'. [ 652.175334][T15142] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2941'. [ 652.223600][ T5096] Bluetooth: hci2: command 0x0406 tx timeout [ 652.446259][T15157] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2945'. [ 653.235775][T15177] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2952'. [ 653.361879][T15181] netlink: 'syz.1.2953': attribute type 10 has an invalid length. [ 653.410494][T15184] netlink: 'syz.1.2953': attribute type 21 has an invalid length. [ 653.998368][T15202] netlink: 'syz.1.2960': attribute type 6 has an invalid length. [ 654.011384][T15202] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2960'. [ 655.397252][T15244] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2970'. [ 655.494835][T15248] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2973'. [ 656.073128][T15258] netlink: 'syz.1.2983': attribute type 27 has an invalid length. [ 656.099550][T15258] netlink: 'syz.1.2983': attribute type 25 has an invalid length. [ 656.465778][T15265] netlink: 'syz.1.2978': attribute type 39 has an invalid length. [ 656.882828][T15269] netlink: 'syz.1.2978': attribute type 10 has an invalid length. [ 656.899193][T15269] team0: Port device virt_wifi0 added [ 657.070657][T15280] netlink: 'syz.3.2982': attribute type 29 has an invalid length. [ 657.097323][T15280] netlink: 'syz.3.2982': attribute type 29 has an invalid length. [ 657.109778][T15285] netlink: 'syz.3.2982': attribute type 29 has an invalid length. [ 657.218643][T15280] netlink: 'syz.3.2982': attribute type 21 has an invalid length. [ 657.233172][T15280] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2982'. [ 657.274742][T15291] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2985'. [ 657.640411][T15294] syzkaller0: entered promiscuous mode [ 657.660227][T15294] syzkaller0: entered allmulticast mode [ 660.243742][T15330] netlink: 13439 bytes leftover after parsing attributes in process `syz.2.2998'. [ 660.436899][T15338] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 660.456679][T15338] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 660.580703][T15343] FAULT_INJECTION: forcing a failure. [ 660.580703][T15343] name failslab, interval 1, probability 0, space 0, times 0 [ 660.581955][T15345] netlink: 'syz.2.3002': attribute type 29 has an invalid length. [ 660.606008][T15345] netlink: 'syz.2.3002': attribute type 29 has an invalid length. [ 660.631435][T15343] CPU: 0 PID: 15343 Comm: syz.3.3003 Not tainted syzkaller #0 [ 660.639004][T15343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 660.649129][T15343] Call Trace: [ 660.652476][T15343] [ 660.655467][T15343] dump_stack_lvl+0x18c/0x250 [ 660.660245][T15343] ? show_regs_print_info+0x20/0x20 [ 660.665585][T15343] ? load_image+0x420/0x420 [ 660.670164][T15343] ? __might_sleep+0xe0/0xe0 [ 660.674848][T15343] ? __lock_acquire+0x7eb0/0x7eb0 [ 660.679963][T15343] should_fail_ex+0x394/0x4c0 [ 660.684761][T15343] should_failslab+0x9/0x20 [ 660.689460][T15343] slab_pre_alloc_hook+0x59/0x300 [ 660.694555][T15343] ? __lock_acquire+0x7eb0/0x7eb0 [ 660.699656][T15343] kmem_cache_alloc_node+0x5e/0x320 [ 660.704920][T15343] ? __alloc_skb+0x103/0x2c0 [ 660.709593][T15343] __alloc_skb+0x103/0x2c0 [ 660.714089][T15343] netlink_sendmsg+0x66a/0xbf0 [ 660.718979][T15343] ? netlink_getsockopt+0x590/0x590 [ 660.724259][T15343] ? apparmor_socket_sendmsg+0x8e/0x330 [ 660.729916][T15343] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 660.735274][T15343] ? security_socket_sendmsg+0x80/0xa0 [ 660.740842][T15343] ? netlink_getsockopt+0x590/0x590 [ 660.746121][T15343] ____sys_sendmsg+0x61b/0x980 [ 660.750970][T15343] ? __asan_memset+0x22/0x40 [ 660.755908][T15343] ? __sys_sendmsg_sock+0x30/0x30 [ 660.761011][T15343] ? __import_iovec+0x5f2/0x850 [ 660.765960][T15343] ? import_iovec+0x73/0xa0 [ 660.770551][T15343] ___sys_sendmsg+0x2a6/0x360 [ 660.775318][T15343] ? __sys_sendmsg+0x2b0/0x2b0 [ 660.780320][T15343] ? __lock_acquire+0x7eb0/0x7eb0 [ 660.785487][T15343] __se_sys_sendmsg+0x1d0/0x2c0 [ 660.790423][T15343] ? __x64_sys_sendmsg+0x80/0x80 [ 660.795480][T15343] ? lockdep_hardirqs_on+0x98/0x150 [ 660.800757][T15343] do_syscall_64+0x55/0xb0 [ 660.805255][T15343] ? clear_bhb_loop+0x40/0x90 [ 660.810023][T15343] ? clear_bhb_loop+0x40/0x90 [ 660.814792][T15343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.820848][T15343] RIP: 0033:0x7fa1bb5a94d9 [ 660.825509][T15343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.845199][T15343] RSP: 002b:00007fa1bc4aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.853697][T15343] RAX: ffffffffffffffda RBX: 00007fa1bb825fa0 RCX: 00007fa1bb5a94d9 [ 660.861738][T15343] RDX: 0000000004000000 RSI: 00002000000005c0 RDI: 0000000000000007 [ 660.869776][T15343] RBP: 00007fa1bc4aa090 R08: 0000000000000000 R09: 0000000000000000 [ 660.877829][T15343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.886039][T15343] R13: 00007fa1bb826038 R14: 00007fa1bb825fa0 R15: 00007fff68f98d98 [ 660.894117][T15343] [ 660.970643][T15345] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3002'. [ 661.094918][T15352] validate_nla: 2 callbacks suppressed [ 661.094938][T15352] netlink: 'syz.3.3006': attribute type 29 has an invalid length. [ 661.161659][T15352] netlink: 'syz.3.3006': attribute type 29 has an invalid length. [ 661.186863][T15356] netlink: 'syz.3.3006': attribute type 29 has an invalid length. [ 661.303710][T15357] syzkaller0: entered promiscuous mode [ 661.309435][T15357] syzkaller0: entered allmulticast mode [ 661.320864][T15352] netlink: 'syz.3.3006': attribute type 29 has an invalid length. [ 662.469409][ T5096] Bluetooth: hci3: command 0x0406 tx timeout [ 664.180454][T15387] netlink: 'syz.0.3019': attribute type 29 has an invalid length. [ 664.194589][T15387] netlink: 'syz.0.3019': attribute type 29 has an invalid length. [ 664.221761][T15387] netlink: 'syz.0.3019': attribute type 29 has an invalid length. [ 664.238531][T15387] netlink: 'syz.0.3019': attribute type 29 has an invalid length. [ 664.301622][T15391] netlink: 'syz.1.3018': attribute type 29 has an invalid length. [ 664.309263][T15389] netlink: 'syz.1.3018': attribute type 29 has an invalid length. [ 664.542405][T15389] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3018'. [ 664.929327][T15406] syzkaller0: entered promiscuous mode [ 664.935166][T15406] syzkaller0: entered allmulticast mode [ 667.492102][T15426] validate_nla: 2 callbacks suppressed [ 667.492121][T15426] netlink: 'syz.1.3031': attribute type 29 has an invalid length. [ 667.562184][T15426] netlink: 'syz.1.3031': attribute type 29 has an invalid length. [ 667.592855][T15426] netlink: 'syz.1.3031': attribute type 29 has an invalid length. [ 667.643353][T15426] netlink: 'syz.1.3031': attribute type 29 has an invalid length. [ 667.705389][T15430] netlink: 'syz.0.3034': attribute type 6 has an invalid length. [ 667.721765][T15430] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3034'. [ 667.731019][T15430] FAULT_INJECTION: forcing a failure. [ 667.731019][T15430] name failslab, interval 1, probability 0, space 0, times 0 [ 667.749713][T15430] CPU: 1 PID: 15430 Comm: syz.0.3034 Not tainted syzkaller #0 [ 667.757284][T15430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 667.767421][T15430] Call Trace: [ 667.770753][T15430] [ 667.773767][T15430] dump_stack_lvl+0x18c/0x250 [ 667.778553][T15430] ? show_regs_print_info+0x20/0x20 [ 667.783849][T15430] ? load_image+0x420/0x420 [ 667.788422][T15430] ? __might_sleep+0xe0/0xe0 [ 667.793084][T15430] ? __lock_acquire+0x7eb0/0x7eb0 [ 667.798178][T15430] should_fail_ex+0x394/0x4c0 [ 667.802926][T15430] should_failslab+0x9/0x20 [ 667.807484][T15430] slab_pre_alloc_hook+0x59/0x300 [ 667.812567][T15430] ? fib_nl2rule+0x334/0x1b40 [ 667.817310][T15430] ? fib_nl2rule+0x334/0x1b40 [ 667.822225][T15430] __kmem_cache_alloc_node+0x53/0x260 [ 667.827662][T15430] ? fib_nl2rule+0x334/0x1b40 [ 667.832406][T15430] __kmalloc+0xa7/0x240 [ 667.836629][T15430] ? lookup_rules_ops+0x20/0x270 [ 667.841628][T15430] fib_nl2rule+0x334/0x1b40 [ 667.846206][T15430] ? fib_nl_newrule+0x1e40/0x1e40 [ 667.851301][T15430] ? __nla_parse+0x40/0x50 [ 667.855786][T15430] fib_nl_newrule+0x353/0x1e40 [ 667.860621][T15430] ? verify_lock_unused+0x140/0x140 [ 667.865917][T15430] ? fib_rules_seq_read+0xf0/0xf0 [ 667.871005][T15430] ? rcu_is_watching+0x15/0xb0 [ 667.875838][T15430] ? trace_contention_end+0x39/0xe0 [ 667.881139][T15430] ? fib_rules_seq_read+0xf0/0xf0 [ 667.886234][T15430] rtnetlink_rcv_msg+0x843/0xf90 [ 667.891236][T15430] ? rtnetlink_rcv_msg+0x220/0xf90 [ 667.896419][T15430] ? rtnetlink_bind+0x80/0x80 [ 667.901151][T15430] ? perf_trace_lock+0xfc/0x3b0 [ 667.906057][T15430] ? kasan_quarantine_put+0xd8/0x220 [ 667.911414][T15430] ? trace_event_raw_event_lock+0x240/0x240 [ 667.917361][T15430] ? slab_free_freelist_hook+0x154/0x240 [ 667.923083][T15430] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 667.929122][T15430] ? __dev_queue_xmit+0x6d1/0x3a30 [ 667.934303][T15430] ? lock_chain_count+0x20/0x20 [ 667.939215][T15430] ? __local_bh_enable_ip+0x13a/0x1c0 [ 667.944677][T15430] ? lockdep_hardirqs_on+0x98/0x150 [ 667.949934][T15430] ? __local_bh_enable_ip+0x13a/0x1c0 [ 667.955371][T15430] ? _local_bh_enable+0xa0/0xa0 [ 667.960297][T15430] ? __dev_queue_xmit+0x1481/0x3a30 [ 667.965563][T15430] ? __dev_queue_xmit+0x6d1/0x3a30 [ 667.970746][T15430] ? perf_trace_lock+0xfc/0x3b0 [ 667.975678][T15430] netlink_rcv_skb+0x235/0x4c0 [ 667.980523][T15430] ? rtnetlink_bind+0x80/0x80 [ 667.985271][T15430] ? netlink_ack+0x1160/0x1160 [ 667.990111][T15430] ? __lock_acquire+0x7eb0/0x7eb0 [ 667.995222][T15430] ? netlink_deliver_tap+0x2e/0x1b0 [ 668.000506][T15430] netlink_unicast+0x856/0x9e0 [ 668.005397][T15430] netlink_sendmsg+0x8d0/0xbf0 [ 668.010284][T15430] ? netlink_getsockopt+0x590/0x590 [ 668.015541][T15430] ? apparmor_socket_sendmsg+0x8e/0x330 [ 668.021156][T15430] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 668.026519][T15430] ? security_socket_sendmsg+0x80/0xa0 [ 668.032056][T15430] ? netlink_getsockopt+0x590/0x590 [ 668.037333][T15430] ____sys_sendmsg+0x61b/0x980 [ 668.042165][T15430] ? __asan_memset+0x22/0x40 [ 668.046827][T15430] ? __sys_sendmsg_sock+0x30/0x30 [ 668.051904][T15430] ? __import_iovec+0x5f2/0x850 [ 668.056825][T15430] ? import_iovec+0x73/0xa0 [ 668.061392][T15430] ___sys_sendmsg+0x2a6/0x360 [ 668.066144][T15430] ? __sys_sendmsg+0x2b0/0x2b0 [ 668.071002][T15430] ? __lock_acquire+0x7eb0/0x7eb0 [ 668.076126][T15430] __se_sys_sendmsg+0x1d0/0x2c0 [ 668.081045][T15430] ? __x64_sys_sendmsg+0x80/0x80 [ 668.086061][T15430] ? lockdep_hardirqs_on+0x98/0x150 [ 668.091320][T15430] do_syscall_64+0x55/0xb0 [ 668.095798][T15430] ? clear_bhb_loop+0x40/0x90 [ 668.100570][T15430] ? clear_bhb_loop+0x40/0x90 [ 668.105318][T15430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.111268][T15430] RIP: 0033:0x7fc5dfba94d9 [ 668.115737][T15430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.135406][T15430] RSP: 002b:00007fc5e0a44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.143917][T15430] RAX: ffffffffffffffda RBX: 00007fc5dfe25fa0 RCX: 00007fc5dfba94d9 [ 668.151951][T15430] RDX: 0000000000041014 RSI: 0000200000000000 RDI: 0000000000000003 [ 668.159981][T15430] RBP: 00007fc5e0a44090 R08: 0000000000000000 R09: 0000000000000000 [ 668.168007][T15430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.176036][T15430] R13: 00007fc5dfe26038 R14: 00007fc5dfe25fa0 R15: 00007ffef44c9058 [ 668.184094][T15430] [ 668.731946][T15444] syzkaller0: entered promiscuous mode [ 668.741425][T15444] syzkaller0: entered allmulticast mode [ 671.256395][T15461] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3044'. [ 671.265919][T15461] bridge_slave_1: default FDB implementation only supports local addresses [ 671.616501][T15470] netlink: 'syz.2.3048': attribute type 29 has an invalid length. [ 671.644106][T15470] netlink: 'syz.2.3048': attribute type 29 has an invalid length. [ 671.645695][T15472] netlink: 'syz.2.3048': attribute type 29 has an invalid length. [ 672.067731][T15479] syzkaller0: entered promiscuous mode [ 672.073865][T15479] syzkaller0: entered allmulticast mode [ 672.165548][T15483] syzkaller0: entered promiscuous mode [ 672.174988][T15483] syzkaller0: entered allmulticast mode [ 674.471456][T15500] netlink: 'syz.3.3059': attribute type 29 has an invalid length. [ 674.506864][T15501] netlink: 'syz.3.3059': attribute type 29 has an invalid length. [ 675.879681][T15500] netlink: 'syz.3.3059': attribute type 29 has an invalid length. [ 676.100840][T15512] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3064'. [ 676.202452][T15513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 676.933750][T15528] netlink: 'syz.2.3069': attribute type 29 has an invalid length. [ 676.950016][T15525] netlink: 'syz.2.3069': attribute type 29 has an invalid length. [ 676.958844][T15528] netlink: 'syz.2.3069': attribute type 29 has an invalid length. [ 677.127821][T15531] syzkaller0: entered promiscuous mode [ 677.152317][T15531] syzkaller0: entered allmulticast mode [ 679.545868][T15548] netlink: 'syz.1.3077': attribute type 2 has an invalid length. [ 679.570704][T15548] netlink: 'syz.1.3077': attribute type 8 has an invalid length. [ 679.588086][T15548] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3077'. [ 679.986049][T15568] FAULT_INJECTION: forcing a failure. [ 679.986049][T15568] name failslab, interval 1, probability 0, space 0, times 0 [ 679.999672][T15568] CPU: 0 PID: 15568 Comm: syz.0.3085 Not tainted syzkaller #0 [ 680.007197][T15568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 680.017296][T15568] Call Trace: [ 680.020616][T15568] [ 680.023582][T15568] dump_stack_lvl+0x18c/0x250 [ 680.028323][T15568] ? show_regs_print_info+0x20/0x20 [ 680.033593][T15568] ? load_image+0x420/0x420 [ 680.038175][T15568] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 680.044257][T15568] ? verify_lock_unused+0x140/0x140 [ 680.049513][T15568] should_fail_ex+0x394/0x4c0 [ 680.054236][T15568] should_failslab+0x9/0x20 [ 680.058767][T15568] slab_pre_alloc_hook+0x59/0x300 [ 680.063842][T15568] kmem_cache_alloc+0x5a/0x2d0 [ 680.068633][T15568] ? skb_clone+0x1eb/0x370 [ 680.073087][T15568] skb_clone+0x1eb/0x370 [ 680.077372][T15568] __netlink_deliver_tap+0x411/0x7f0 [ 680.082699][T15568] ? netlink_deliver_tap+0x2e/0x1b0 [ 680.087949][T15568] netlink_deliver_tap+0x19c/0x1b0 [ 680.093113][T15568] netlink_unicast+0x82f/0x9e0 [ 680.097960][T15568] netlink_sendmsg+0x8d0/0xbf0 [ 680.102852][T15568] ? lockdep_hardirqs_on+0x98/0x150 [ 680.108095][T15568] ? netlink_getsockopt+0x590/0x590 [ 680.113338][T15568] ? security_socket_sendmsg+0x70/0xa0 [ 680.118836][T15568] ? security_socket_sendmsg+0x80/0xa0 [ 680.124333][T15568] ? netlink_getsockopt+0x590/0x590 [ 680.129568][T15568] ____sys_sendmsg+0x61b/0x980 [ 680.134390][T15568] ? __asan_memset+0x22/0x40 [ 680.139033][T15568] ? __sys_sendmsg_sock+0x30/0x30 [ 680.144115][T15568] ? __import_iovec+0x5f2/0x850 [ 680.149009][T15568] ? import_iovec+0x73/0xa0 [ 680.153549][T15568] ___sys_sendmsg+0x2a6/0x360 [ 680.158290][T15568] ? __sys_sendmsg+0x2b0/0x2b0 [ 680.163146][T15568] __se_sys_sendmsg+0x1d0/0x2c0 [ 680.168044][T15568] ? __x64_sys_sendmsg+0x80/0x80 [ 680.173034][T15568] ? syscall_enter_from_user_mode+0x2e/0x80 [ 680.178970][T15568] do_syscall_64+0x55/0xb0 [ 680.183440][T15568] ? clear_bhb_loop+0x40/0x90 [ 680.188187][T15568] ? clear_bhb_loop+0x40/0x90 [ 680.192906][T15568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.198858][T15568] RIP: 0033:0x7fc5dfba94d9 [ 680.203302][T15568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.223030][T15568] RSP: 002b:00007fc5e0a44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.231474][T15568] RAX: ffffffffffffffda RBX: 00007fc5dfe25fa0 RCX: 00007fc5dfba94d9 [ 680.239475][T15568] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 000000000000000d [ 680.247475][T15568] RBP: 00007fc5e0a44090 R08: 0000000000000000 R09: 0000000000000000 [ 680.255477][T15568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.263480][T15568] R13: 00007fc5dfe26038 R14: 00007fc5dfe25fa0 R15: 00007ffef44c9058 [ 680.271497][T15568] [ 680.310982][T15568] netlink: 'syz.0.3085': attribute type 10 has an invalid length. [ 680.326992][T15568] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3085'. [ 680.339866][T15568] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 680.405625][T15570] syzkaller0: entered promiscuous mode [ 680.411637][T15570] syzkaller0: entered allmulticast mode [ 682.395962][T15585] netlink: 'syz.2.3092': attribute type 21 has an invalid length. [ 682.404707][T15585] IPv6: NLM_F_CREATE should be specified when creating new route [ 682.416039][T15585] IPv6: Can't replace route, no match found [ 682.561079][T15590] netlink: 'syz.1.3093': attribute type 10 has an invalid length. [ 682.594427][T15590] veth0_macvtap: left promiscuous mode [ 682.768800][T15594] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3095'. [ 682.949965][ T5096] Bluetooth: hci4: command 0x0406 tx timeout [ 683.671101][T15608] netlink: 'syz.1.3102': attribute type 29 has an invalid length. [ 683.679669][T15608] netlink: 'syz.1.3102': attribute type 29 has an invalid length. [ 683.689753][T15608] netlink: 'syz.1.3102': attribute type 29 has an invalid length. [ 683.699009][T15608] netlink: 'syz.1.3102': attribute type 29 has an invalid length. [ 683.936375][T15617] syzkaller0: entered promiscuous mode [ 683.943429][T15617] syzkaller0: entered allmulticast mode [ 685.547202][T15632] netlink: 'syz.2.3109': attribute type 29 has an invalid length. [ 685.585482][T15633] netlink: 'syz.2.3109': attribute type 29 has an invalid length. [ 685.989144][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.000845][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.283325][T15628] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3115'. [ 686.297080][T15632] netlink: 'syz.2.3109': attribute type 29 has an invalid length. [ 686.467195][T15640] netlink: 'syz.1.3111': attribute type 29 has an invalid length. [ 686.498181][T15640] netlink: 'syz.1.3111': attribute type 29 has an invalid length. [ 686.526760][T15640] netlink: 'syz.1.3111': attribute type 29 has an invalid length. [ 686.554975][T15640] netlink: 'syz.1.3111': attribute type 29 has an invalid length. [ 686.997269][T15650] netlink: 'syz.0.3117': attribute type 2 has an invalid length. [ 687.015564][T15650] netlink: 'syz.0.3117': attribute type 8 has an invalid length. [ 687.059143][T15650] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3117'. [ 687.232906][T15660] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3119'. [ 687.307470][T15661] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3121'. [ 687.374985][T15665] netlink: 'syz.0.3122': attribute type 29 has an invalid length. [ 690.608543][T15687] validate_nla: 13 callbacks suppressed [ 690.608582][T15687] netlink: 'syz.0.3130': attribute type 2 has an invalid length. [ 690.641901][T15687] netlink: 'syz.0.3130': attribute type 8 has an invalid length. [ 690.649967][T15687] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3130'. [ 690.686164][T15700] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3133'. [ 690.810688][ T5795] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 691.052016][T15708] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3137'. [ 691.778315][T15716] netlink: 'syz.1.3141': attribute type 29 has an invalid length. [ 691.790765][T15716] netlink: 'syz.1.3141': attribute type 29 has an invalid length. [ 691.802092][T15716] netlink: 'syz.1.3141': attribute type 29 has an invalid length. [ 691.811527][T15716] netlink: 'syz.1.3141': attribute type 29 has an invalid length. [ 691.990248][T15718] netlink: 'syz.1.3142': attribute type 29 has an invalid length. [ 692.005657][T15718] netlink: 'syz.1.3142': attribute type 29 has an invalid length. [ 692.015828][T15718] netlink: 'syz.1.3142': attribute type 29 has an invalid length. [ 692.033649][T15718] netlink: 'syz.1.3142': attribute type 29 has an invalid length. [ 692.047253][T15718] FAULT_INJECTION: forcing a failure. [ 692.047253][T15718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.061973][T15718] CPU: 0 PID: 15718 Comm: syz.1.3142 Not tainted syzkaller #0 [ 692.069530][T15718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 692.079646][T15718] Call Trace: [ 692.082998][T15718] [ 692.085990][T15718] dump_stack_lvl+0x18c/0x250 [ 692.090759][T15718] ? show_regs_print_info+0x20/0x20 [ 692.096043][T15718] ? load_image+0x420/0x420 [ 692.100611][T15718] ? __lock_acquire+0x7eb0/0x7eb0 [ 692.105883][T15718] ? snprintf+0xe9/0x140 [ 692.110186][T15718] should_fail_ex+0x394/0x4c0 [ 692.114933][T15718] _copy_to_user+0x2f/0xa0 [ 692.119427][T15718] simple_read_from_buffer+0xe7/0x150 [ 692.124858][T15718] proc_fail_nth_read+0x1e8/0x260 [ 692.129951][T15718] ? proc_fault_inject_write+0x360/0x360 [ 692.135746][T15718] ? fsnotify_perm+0x271/0x5e0 [ 692.140599][T15718] ? proc_fault_inject_write+0x360/0x360 [ 692.146325][T15718] vfs_read+0x298/0x990 [ 692.150575][T15718] ? kernel_read+0x1e0/0x1e0 [ 692.155227][T15718] ? __fget_files+0x28/0x460 [ 692.159886][T15718] ? __fget_files+0x3fc/0x460 [ 692.164642][T15718] ? __fdget_pos+0x2a3/0x330 [ 692.169290][T15718] ? ksys_read+0x74/0x260 [ 692.173687][T15718] ksys_read+0x151/0x260 [ 692.178035][T15718] ? vfs_write+0x9a0/0x9a0 [ 692.182526][T15718] ? lockdep_hardirqs_on+0x98/0x150 [ 692.187777][T15718] do_syscall_64+0x55/0xb0 [ 692.192250][T15718] ? clear_bhb_loop+0x40/0x90 [ 692.196987][T15718] ? clear_bhb_loop+0x40/0x90 [ 692.201730][T15718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.207683][T15718] RIP: 0033:0x7f3434f69d0e [ 692.212239][T15718] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 692.231909][T15718] RSP: 002b:00007f3435e6cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 692.240409][T15718] RAX: ffffffffffffffda RBX: 00007f3435e6d6c0 RCX: 00007f3434f69d0e [ 692.248429][T15718] RDX: 000000000000000f RSI: 00007f3435e6d0a0 RDI: 0000000000000004 [ 692.256447][T15718] RBP: 00007f3435e6d090 R08: 0000000000000000 R09: 0000000000000000 [ 692.264557][T15718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.272587][T15718] R13: 00007f3435226038 R14: 00007f3435225fa0 R15: 00007ffe9e3ebcb8 [ 692.280634][T15718] [ 692.530529][T15726] netlink: set zone limit has 8 unknown bytes [ 692.547453][T15727] netlink: set zone limit has 8 unknown bytes [ 692.692509][ T5795] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 694.109300][T15736] syzkaller0: entered promiscuous mode [ 694.123037][T15736] syzkaller0: entered allmulticast mode [ 696.089611][T15751] validate_nla: 8 callbacks suppressed [ 696.089629][T15751] netlink: 'syz.0.3153': attribute type 10 has an invalid length. [ 696.142874][T15751] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 696.184274][T15751] team0: Device veth1_vlan failed to register rx_handler [ 696.410793][T15762] netlink: 'syz.0.3159': attribute type 29 has an invalid length. [ 696.453402][T15762] netlink: 'syz.0.3159': attribute type 29 has an invalid length. [ 696.486462][T15763] netlink: 'syz.1.3158': attribute type 29 has an invalid length. [ 696.492592][T15762] netlink: 'syz.0.3159': attribute type 29 has an invalid length. [ 696.503718][T15762] netlink: 'syz.0.3159': attribute type 29 has an invalid length. [ 696.514738][T15763] netlink: 'syz.1.3158': attribute type 29 has an invalid length. [ 696.550057][T15764] netlink: 'syz.1.3158': attribute type 29 has an invalid length. [ 697.198038][T15790] netlink: 'syz.0.3168': attribute type 29 has an invalid length. [ 697.207311][T15790] netlink: 'syz.0.3168': attribute type 29 has an invalid length. [ 697.509587][T15796] rxe_eth0 speed is unknown, defaulting to 1000 [ 701.175649][T15828] validate_nla: 6 callbacks suppressed [ 701.175670][T15828] netlink: 'syz.3.3179': attribute type 29 has an invalid length. [ 701.190482][T15831] netlink: 'syz.3.3179': attribute type 29 has an invalid length. [ 701.204905][T15833] netlink: 'syz.3.3179': attribute type 29 has an invalid length. [ 701.501018][T15841] netlink: 'syz.2.3182': attribute type 29 has an invalid length. [ 701.515696][T15839] netlink: 'syz.2.3182': attribute type 29 has an invalid length. [ 701.580983][T15841] netlink: 'syz.2.3182': attribute type 29 has an invalid length. [ 702.283711][T15857] netlink: 'syz.1.3189': attribute type 29 has an invalid length. [ 702.322113][T15857] netlink: 'syz.1.3189': attribute type 29 has an invalid length. [ 702.350189][T15859] netlink: 'syz.1.3189': attribute type 29 has an invalid length. [ 702.371505][T15857] netlink: 'syz.1.3189': attribute type 29 has an invalid length. [ 703.802899][T15893] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3203'. [ 705.786490][T15941] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3222'. [ 706.187899][T15945] validate_nla: 20 callbacks suppressed [ 706.187920][T15945] netlink: 'syz.3.3223': attribute type 29 has an invalid length. [ 706.206827][T15945] netlink: 'syz.3.3223': attribute type 29 has an invalid length. [ 706.671018][T15959] netlink: 'syz.3.3232': attribute type 29 has an invalid length. [ 706.679600][T15959] netlink: 'syz.3.3232': attribute type 29 has an invalid length. [ 706.711063][T15959] netlink: 'syz.3.3232': attribute type 29 has an invalid length. [ 706.739017][T15959] netlink: 'syz.3.3232': attribute type 29 has an invalid length. [ 706.854137][T15968] netlink: 'syz.1.3243': attribute type 29 has an invalid length. [ 706.869777][T15968] netlink: 'syz.1.3243': attribute type 29 has an invalid length. [ 706.897008][T15968] netlink: 'syz.1.3243': attribute type 29 has an invalid length. [ 706.911040][T15968] netlink: 'syz.1.3243': attribute type 29 has an invalid length. [ 708.354880][T15993] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3239'. [ 710.736215][T16044] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3266'. [ 712.609219][T16082] validate_nla: 5 callbacks suppressed [ 712.609238][T16082] netlink: 'syz.0.3282': attribute type 29 has an invalid length. [ 712.636121][T16082] netlink: 'syz.0.3282': attribute type 29 has an invalid length. [ 712.660170][T16082] netlink: 'syz.0.3282': attribute type 29 has an invalid length. [ 712.702304][T16082] netlink: 'syz.0.3282': attribute type 29 has an invalid length. [ 712.747486][T16087] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3283'. [ 712.873979][T16087] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.952980][T16087] bridge_slave_0 (unregistering): left allmulticast mode [ 713.960293][T16087] bridge_slave_0 (unregistering): left promiscuous mode [ 713.967995][T16087] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.630287][T16123] netlink: 'syz.3.3293': attribute type 29 has an invalid length. [ 714.694954][T16123] netlink: 'syz.3.3293': attribute type 29 has an invalid length. [ 714.738313][T16126] netlink: 'syz.3.3293': attribute type 29 has an invalid length. [ 714.764036][T16129] netlink: 'syz.3.3293': attribute type 29 has an invalid length. [ 716.036970][T16147] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3302'. [ 716.781930][T16161] netlink: 'syz.2.3307': attribute type 29 has an invalid length. [ 717.244333][T16161] netlink: 'syz.2.3307': attribute type 29 has an invalid length. [ 718.542232][T16179] syzkaller0: entered promiscuous mode [ 718.548073][T16179] syzkaller0: entered allmulticast mode [ 720.905185][T16188] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3316'. [ 720.914735][T16187] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3315'. [ 720.935191][T16187] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.047575][ T5795] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 721.051044][T16187] bridge_slave_0 (unregistering): left allmulticast mode [ 721.066937][T16187] bridge_slave_0 (unregistering): left promiscuous mode [ 721.081943][T16187] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.092015][T16199] FAULT_INJECTION: forcing a failure. [ 721.092015][T16199] name failslab, interval 1, probability 0, space 0, times 0 [ 721.115497][T16199] CPU: 0 PID: 16199 Comm: syz.2.3320 Not tainted syzkaller #0 [ 721.123037][T16199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 721.133173][T16199] Call Trace: [ 721.136507][T16199] [ 721.139485][T16199] dump_stack_lvl+0x18c/0x250 [ 721.144269][T16199] ? sctp_sendmsg+0x1519/0x27b0 [ 721.149198][T16199] ? ___sys_sendmsg+0x2a6/0x360 [ 721.154113][T16199] ? show_regs_print_info+0x20/0x20 [ 721.159368][T16199] ? load_image+0x420/0x420 [ 721.163933][T16199] should_fail_ex+0x394/0x4c0 [ 721.168758][T16199] should_failslab+0x9/0x20 [ 721.173361][T16199] slab_pre_alloc_hook+0x59/0x300 [ 721.178488][T16199] ? sctp_add_bind_addr+0x8c/0x360 [ 721.183665][T16199] __kmem_cache_alloc_node+0x53/0x260 [ 721.189109][T16199] ? sctp_add_bind_addr+0x8c/0x360 [ 721.194295][T16199] kmalloc_trace+0x2a/0xe0 [ 721.198775][T16199] sctp_add_bind_addr+0x8c/0x360 [ 721.203775][T16199] sctp_copy_local_addr_list+0x31b/0x4e0 [ 721.209470][T16199] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 721.215291][T16199] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 721.221473][T16199] ? sctp_v6_is_any+0x64/0x70 [ 721.226202][T16199] ? sctp_copy_one_addr+0x8c/0x350 [ 721.231401][T16199] sctp_bind_addr_copy+0xb3/0x3c0 [ 721.236462][T16199] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 721.242821][T16199] sctp_connect_new_asoc+0x2f9/0x6a0 [ 721.248143][T16199] ? __sctp_connect+0xd80/0xd80 [ 721.253013][T16199] ? __local_bh_enable_ip+0x13a/0x1c0 [ 721.258408][T16199] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 721.264081][T16199] ? security_sctp_bind_connect+0x89/0xb0 [ 721.269847][T16199] sctp_sendmsg+0x1519/0x27b0 [ 721.274593][T16199] ? sctp_getsockopt+0xb60/0xb60 [ 721.279571][T16199] ? aa_sk_perm+0x7bb/0x8e0 [ 721.284134][T16199] ? aa_af_perm+0x330/0x330 [ 721.288658][T16199] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 721.295096][T16199] ? sock_rps_record_flow+0x19/0x3f0 [ 721.300580][T16199] ? inet_sendmsg+0xce/0x2a0 [ 721.305191][T16199] ? inet_send_prepare+0x250/0x250 [ 721.310335][T16199] ____sys_sendmsg+0x61b/0x980 [ 721.315126][T16199] ? __asan_memset+0x22/0x40 [ 721.319763][T16199] ? __sys_sendmsg_sock+0x30/0x30 [ 721.324811][T16199] ? __import_iovec+0x5f2/0x850 [ 721.329689][T16199] ? import_iovec+0x73/0xa0 [ 721.334307][T16199] ___sys_sendmsg+0x2a6/0x360 [ 721.339007][T16199] ? get_pid_task+0x20/0x1e0 [ 721.343731][T16199] ? __sys_sendmsg+0x2b0/0x2b0 [ 721.348591][T16199] ? __lock_acquire+0x7eb0/0x7eb0 [ 721.353694][T16199] __se_sys_sendmsg+0x1d0/0x2c0 [ 721.358596][T16199] ? __x64_sys_sendmsg+0x80/0x80 [ 721.363617][T16199] ? lockdep_hardirqs_on+0x98/0x150 [ 721.368853][T16199] do_syscall_64+0x55/0xb0 [ 721.373295][T16199] ? clear_bhb_loop+0x40/0x90 [ 721.377996][T16199] ? clear_bhb_loop+0x40/0x90 [ 721.382711][T16199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 721.388631][T16199] RIP: 0033:0x7fe387fa94d9 [ 721.393063][T16199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.412745][T16199] RSP: 002b:00007fe388f3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 721.421192][T16199] RAX: ffffffffffffffda RBX: 00007fe388225fa0 RCX: 00007fe387fa94d9 [ 721.429340][T16199] RDX: 0000000030008041 RSI: 0000200000000140 RDI: 0000000000000003 [ 721.437329][T16199] RBP: 00007fe388f3b090 R08: 0000000000000000 R09: 0000000000000000 [ 721.445359][T16199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.453380][T16199] R13: 00007fe388226038 R14: 00007fe388225fa0 R15: 00007fffed97ac18 [ 721.461387][T16199] [ 721.561301][T16204] validate_nla: 2 callbacks suppressed [ 721.561318][T16204] netlink: 'syz.2.3322': attribute type 10 has an invalid length. [ 722.275985][T16215] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3326'. [ 722.455488][ T5795] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8 [ 722.459339][T16220] syzkaller0: entered promiscuous mode [ 722.475429][T16220] syzkaller0: entered allmulticast mode [ 722.482452][T16221] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3327'. [ 724.948187][T16251] FAULT_INJECTION: forcing a failure. [ 724.948187][T16251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.961606][T16251] CPU: 0 PID: 16251 Comm: syz.1.3338 Not tainted syzkaller #0 [ 724.969167][T16251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 724.979504][T16251] Call Trace: [ 724.982896][T16251] [ 724.985862][T16251] dump_stack_lvl+0x18c/0x250 [ 724.990568][T16251] ? show_regs_print_info+0x20/0x20 [ 724.995807][T16251] ? load_image+0x420/0x420 [ 725.000361][T16251] ? __might_fault+0xaa/0x120 [ 725.005078][T16251] ? __lock_acquire+0x7eb0/0x7eb0 [ 725.010138][T16251] should_fail_ex+0x394/0x4c0 [ 725.014850][T16251] _copy_from_iter+0x1cd/0x1290 [ 725.019767][T16251] ? copyout_mc+0x70/0x70 [ 725.024138][T16251] ? __virt_addr_valid+0x10c/0x380 [ 725.029333][T16251] ? __virt_addr_valid+0x10c/0x380 [ 725.034512][T16251] ? __virt_addr_valid+0x10c/0x380 [ 725.039692][T16251] ? __check_object_size+0x4fc/0xa40 [ 725.045039][T16251] pep_sendmsg+0x227/0xb70 [ 725.049511][T16251] ? pn_socket_bind+0x3a0/0x4d0 [ 725.054403][T16251] ? __local_bh_enable_ip+0x13a/0x1c0 [ 725.059855][T16251] ? lockdep_hardirqs_on+0x98/0x150 [ 725.065123][T16251] ? pep_getsockopt+0x390/0x390 [ 725.069993][T16251] ? __local_bh_enable_ip+0x13a/0x1c0 [ 725.075404][T16251] ? _local_bh_enable+0xa0/0xa0 [ 725.080333][T16251] ? pn_socket_bind+0x3a0/0x4d0 [ 725.085219][T16251] ? pn_socket_bind+0x3a0/0x4d0 [ 725.090105][T16251] pn_socket_sendmsg+0x1df/0x240 [ 725.095086][T16251] ? pn_socket_ioctl+0x350/0x350 [ 725.100084][T16251] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 725.105426][T16251] ? security_socket_sendmsg+0x80/0xa0 [ 725.110915][T16251] sock_write_iter+0x2dc/0x420 [ 725.115712][T16251] ? sock_read_iter+0x3f0/0x3f0 [ 725.120610][T16251] ? common_file_perm+0x198/0x1f0 [ 725.125680][T16251] vfs_write+0x474/0x9a0 [ 725.129995][T16251] ? file_end_write+0x250/0x250 [ 725.134918][T16251] ? __fget_files+0x3fc/0x460 [ 725.139660][T16251] ? __fdget_pos+0x1d8/0x330 [ 725.144306][T16251] ? ksys_write+0x74/0x260 [ 725.148798][T16251] ksys_write+0x151/0x260 [ 725.153178][T16251] ? __ia32_sys_read+0x90/0x90 [ 725.158019][T16251] ? lockdep_hardirqs_on+0x98/0x150 [ 725.163279][T16251] do_syscall_64+0x55/0xb0 [ 725.167742][T16251] ? clear_bhb_loop+0x40/0x90 [ 725.172456][T16251] ? clear_bhb_loop+0x40/0x90 [ 725.177200][T16251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 725.183129][T16251] RIP: 0033:0x7f3434fa94d9 [ 725.187617][T16251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.207254][T16251] RSP: 002b:00007f3435e6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 725.215787][T16251] RAX: ffffffffffffffda RBX: 00007f3435225fa0 RCX: 00007f3434fa94d9 [ 725.223804][T16251] RDX: 000000000000eaff RSI: 0000000000000000 RDI: 0000000000000003 [ 725.231818][T16251] RBP: 00007f3435e6d090 R08: 0000000000000000 R09: 0000000000000000 [ 725.239851][T16251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.247887][T16251] R13: 00007f3435226038 R14: 00007f3435225fa0 R15: 00007ffe9e3ebcb8 [ 725.255923][T16251] [ 725.367123][ T5795] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 725.515355][T16242] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3332'. [ 725.567445][T16242] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.639861][T16242] bridge_slave_0 (unregistering): left allmulticast mode [ 725.647700][T16242] bridge_slave_0 (unregistering): left promiscuous mode [ 725.655173][T16242] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.694588][T16259] netlink: 'syz.0.3341': attribute type 29 has an invalid length. [ 725.759552][T16257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 725.802096][T16259] netlink: 'syz.0.3341': attribute type 29 has an invalid length. [ 725.842499][T16261] netlink: 'syz.0.3341': attribute type 29 has an invalid length. [ 725.857941][T16262] netlink: 'syz.0.3341': attribute type 29 has an invalid length. [ 726.036955][T16270] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3342'. [ 726.553622][T16272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3353'. [ 727.948853][T16283] netlink: 'syz.3.3348': attribute type 6 has an invalid length. [ 727.964241][T16283] netlink: 212896 bytes leftover after parsing attributes in process `syz.3.3348'. [ 728.040302][T16285] syzkaller0: entered promiscuous mode [ 728.045951][T16285] syzkaller0: entered allmulticast mode [ 728.142933][T16292] netlink: 'syz.2.3352': attribute type 29 has an invalid length. [ 730.038941][T16292] netlink: 'syz.2.3352': attribute type 29 has an invalid length. [ 730.060386][T16306] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3357'. [ 730.218437][T16310] netlink: 'syz.1.3366': attribute type 29 has an invalid length. [ 730.568925][T16308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 730.708203][T16310] netlink: 'syz.1.3366': attribute type 29 has an invalid length. [ 730.725353][T16311] netlink: 'syz.1.3366': attribute type 29 has an invalid length. [ 730.743714][T16313] netlink: 'syz.1.3366': attribute type 29 has an invalid length. [ 730.784311][T16319] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3368'. [ 732.394324][T16336] syzkaller0: entered promiscuous mode [ 732.400003][T16336] syzkaller0: entered allmulticast mode [ 732.451960][T16340] netlink: 'syz.2.3369': attribute type 6 has an invalid length. [ 732.460144][T16340] netlink: 212896 bytes leftover after parsing attributes in process `syz.2.3369'. [ 732.496101][T16342] netlink: 'syz.3.3370': attribute type 29 has an invalid length. [ 733.924990][T16359] netlink: 'syz.0.3377': attribute type 21 has an invalid length. [ 735.161639][T16342] netlink: 'syz.3.3370': attribute type 29 has an invalid length. [ 735.535146][T16372] netlink: 'syz.1.3382': attribute type 6 has an invalid length. [ 735.543759][T16372] netlink: 212896 bytes leftover after parsing attributes in process `syz.1.3382'. [ 736.093944][T16380] netlink: 'syz.0.3387': attribute type 29 has an invalid length. [ 736.102475][T16380] netlink: 'syz.0.3387': attribute type 29 has an invalid length. [ 736.122423][T16380] netlink: 'syz.0.3387': attribute type 29 has an invalid length. [ 736.135540][T16380] netlink: 'syz.0.3387': attribute type 29 has an invalid length. [ 736.168340][T16382] netlink: 'syz.3.3386': attribute type 10 has an invalid length. [ 736.188117][T16382] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3386'. [ 736.215527][T16382] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 736.233771][T16382] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.287769][T16382] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 736.425046][T16385] syzkaller0: entered promiscuous mode [ 736.431012][T16385] syzkaller0: entered allmulticast mode [ 738.227075][T16391] netlink: 'syz.3.3391': attribute type 29 has an invalid length. [ 740.292953][T16407] netlink: 'syz.1.3397': attribute type 29 has an invalid length. [ 740.449557][T16391] netlink: 'syz.3.3391': attribute type 29 has an invalid length. [ 740.462703][T16407] netlink: 'syz.1.3397': attribute type 29 has an invalid length. [ 740.487859][T16408] netlink: 'syz.1.3397': attribute type 29 has an invalid length. [ 740.510295][T16409] netlink: 'syz.1.3397': attribute type 29 has an invalid length. [ 740.665071][T16417] netlink: 'syz.1.3401': attribute type 10 has an invalid length. [ 741.156886][T16438] netlink: 'syz.3.3411': attribute type 29 has an invalid length. [ 741.166754][T16438] netlink: 'syz.3.3411': attribute type 29 has an invalid length. [ 741.176703][T16438] netlink: 'syz.3.3411': attribute type 29 has an invalid length. [ 741.185885][T16438] netlink: 'syz.3.3411': attribute type 29 has an invalid length. [ 741.328221][T16441] syzkaller0: entered promiscuous mode [ 741.334104][T16441] syzkaller0: entered allmulticast mode [ 746.067117][T16463] validate_nla: 1 callbacks suppressed [ 746.067134][T16463] netlink: 'syz.3.3421': attribute type 29 has an invalid length. [ 746.101504][T16464] netlink: 'syz.3.3421': attribute type 29 has an invalid length. [ 747.171886][T16489] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3431'. [ 747.317083][T16492] netlink: 'syz.2.3432': attribute type 29 has an invalid length. [ 747.325641][T16492] netlink: 'syz.2.3432': attribute type 29 has an invalid length. [ 747.339690][T16492] netlink: 'syz.2.3432': attribute type 29 has an invalid length. [ 747.349354][T16492] netlink: 'syz.2.3432': attribute type 29 has an invalid length. [ 747.455012][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.464006][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.117367][T16510] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3440'. [ 749.205942][T16515] netlink: 'syz.1.3442': attribute type 29 has an invalid length. [ 749.214505][T16515] netlink: 'syz.1.3442': attribute type 29 has an invalid length. [ 749.224477][T16515] netlink: 'syz.1.3442': attribute type 29 has an invalid length. [ 749.251835][T16515] netlink: 'syz.1.3442': attribute type 29 has an invalid length. [ 750.098630][T16534] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3450'. [ 750.788323][ T5795] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 751.570074][ T5795] Bluetooth: hci1: Dropping invalid advertising data [ 751.584943][ T5795] Bluetooth: hci1: unknown advertising packet type: 0xdc [ 751.584972][ T5795] Bluetooth: hci1: Malformed LE Event: 0x02 [ 751.777759][T16563] validate_nla: 4 callbacks suppressed [ 751.777773][T16563] netlink: 'syz.0.3462': attribute type 29 has an invalid length. [ 751.813128][T16563] netlink: 'syz.0.3462': attribute type 29 has an invalid length. [ 751.825633][T16563] netlink: 'syz.0.3462': attribute type 29 has an invalid length. [ 751.836061][T16563] netlink: 'syz.0.3462': attribute type 29 has an invalid length. [ 751.893965][T16568] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3463'. [ 752.009042][ T5795] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 752.347698][T16576] FAULT_INJECTION: forcing a failure. [ 752.347698][T16576] name failslab, interval 1, probability 0, space 0, times 0 [ 752.372308][T16576] CPU: 0 PID: 16576 Comm: syz.2.3468 Not tainted syzkaller #0 [ 752.379862][T16576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 752.389969][T16576] Call Trace: [ 752.393306][T16576] [ 752.396283][T16576] dump_stack_lvl+0x18c/0x250 [ 752.401055][T16576] ? show_regs_print_info+0x20/0x20 [ 752.406349][T16576] ? load_image+0x420/0x420 [ 752.410905][T16576] ? __might_sleep+0xe0/0xe0 [ 752.415546][T16576] ? __lock_acquire+0x7eb0/0x7eb0 [ 752.420695][T16576] should_fail_ex+0x394/0x4c0 [ 752.425456][T16576] should_failslab+0x9/0x20 [ 752.430025][T16576] slab_pre_alloc_hook+0x59/0x300 [ 752.435101][T16576] ? __lock_acquire+0x7eb0/0x7eb0 [ 752.440172][T16576] ? security_sk_alloc+0x4b/0x130 [ 752.445269][T16576] ? security_sk_alloc+0x4b/0x130 [ 752.450352][T16576] __kmem_cache_alloc_node+0x53/0x260 [ 752.455782][T16576] ? security_sk_alloc+0x4b/0x130 [ 752.460851][T16576] __kmalloc+0xa7/0x240 [ 752.465073][T16576] security_sk_alloc+0x4b/0x130 [ 752.469987][T16576] sk_prot_alloc+0x101/0x210 [ 752.474639][T16576] sk_alloc+0x3a/0x350 [ 752.478760][T16576] inet6_create+0x7d3/0x1160 [ 752.483398][T16576] ? inet6_create+0x80/0x1160 [ 752.488137][T16576] __sock_create+0x49e/0x940 [ 752.492793][T16576] udp_sock_create6+0xd3/0x650 [ 752.497615][T16576] ? lockdep_softirqs_off+0x440/0x440 [ 752.503041][T16576] ? inet6_hash+0x80/0x80 [ 752.507433][T16576] ? rxrpc_lookup_local+0xc84/0x1700 [ 752.512764][T16576] rxrpc_lookup_local+0xcfa/0x1700 [ 752.517934][T16576] ? rxrpc_local_dont_fragment+0x70/0x70 [ 752.523614][T16576] ? __local_bh_enable_ip+0x13a/0x1c0 [ 752.529038][T16576] ? __local_bh_enable_ip+0x13a/0x1c0 [ 752.534463][T16576] ? do_raw_spin_unlock+0x121/0x230 [ 752.539714][T16576] rxrpc_sendmsg+0x2f3/0x5b0 [ 752.544351][T16576] ? rxrpc_getsockopt+0x150/0x150 [ 752.549429][T16576] ____sys_sendmsg+0x61b/0x980 [ 752.554265][T16576] ? __sys_sendmsg_sock+0x30/0x30 [ 752.559330][T16576] ? __import_iovec+0x3fa/0x850 [ 752.564253][T16576] ? import_iovec+0x73/0xa0 [ 752.568806][T16576] ___sys_sendmsg+0x2a6/0x360 [ 752.573550][T16576] ? __sys_sendmsg+0x2b0/0x2b0 [ 752.578407][T16576] ? __lock_acquire+0x7eb0/0x7eb0 [ 752.583523][T16576] __se_sys_sendmsg+0x1d0/0x2c0 [ 752.588423][T16576] ? __x64_sys_sendmsg+0x80/0x80 [ 752.593427][T16576] ? lockdep_hardirqs_on+0x98/0x150 [ 752.598689][T16576] do_syscall_64+0x55/0xb0 [ 752.603151][T16576] ? clear_bhb_loop+0x40/0x90 [ 752.607888][T16576] ? clear_bhb_loop+0x40/0x90 [ 752.612615][T16576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 752.618555][T16576] RIP: 0033:0x7fe387fa94d9 [ 752.623010][T16576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.642657][T16576] RSP: 002b:00007fe388f3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 752.651117][T16576] RAX: ffffffffffffffda RBX: 00007fe388225fa0 RCX: 00007fe387fa94d9 [ 752.659133][T16576] RDX: 0000000000000040 RSI: 0000200000000c40 RDI: 0000000000000004 [ 752.667223][T16576] RBP: 00007fe388f3b090 R08: 0000000000000000 R09: 0000000000000000 [ 752.675409][T16576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.683422][T16576] R13: 00007fe388226038 R14: 00007fe388225fa0 R15: 00007fffed97ac18 [ 752.691479][T16576] [ 752.900921][T16580] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3470'. [ 752.951813][T16580] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 753.043950][T16585] netlink: 'syz.1.3472': attribute type 29 has an invalid length. [ 753.105339][T16585] netlink: 'syz.1.3472': attribute type 29 has an invalid length. [ 753.126242][T16586] netlink: 'syz.1.3472': attribute type 29 has an invalid length. [ 753.165573][T16585] netlink: 'syz.1.3472': attribute type 29 has an invalid length. [ 753.340051][ T5795] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 753.490985][T16600] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3477'. [ 754.323064][T16612] netlink: 'syz.2.3483': attribute type 29 has an invalid length. [ 754.331580][T16612] netlink: 'syz.2.3483': attribute type 29 has an invalid length. [ 754.657646][T16616] pimreg: tun_chr_ioctl cmd 21731 [ 754.773356][T16623] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3487'. [ 754.946427][T16631] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3491'. [ 754.956368][T16631] bond_slave_0: entered promiscuous mode [ 754.962546][T16631] bond_slave_1: entered promiscuous mode [ 755.063023][T16635] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3492'. [ 756.187571][T16659] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3501'. [ 756.638152][T16674] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3507'. [ 757.720819][T16688] validate_nla: 11 callbacks suppressed [ 757.720839][T16688] netlink: 'syz.2.3514': attribute type 29 has an invalid length. [ 758.273870][T16688] netlink: 'syz.2.3514': attribute type 29 has an invalid length. [ 758.292904][T16689] netlink: 'syz.2.3514': attribute type 29 has an invalid length. [ 758.513662][T16699] netlink: 'syz.1.3525': attribute type 29 has an invalid length. [ 758.561171][T16699] netlink: 'syz.1.3525': attribute type 29 has an invalid length. [ 758.602788][T16699] netlink: 'syz.1.3525': attribute type 29 has an invalid length. [ 758.897524][T16701] rxe_eth0 speed is unknown, defaulting to 1000 [ 758.932163][T16707] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3519'. [ 761.034304][T16735] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3531'. [ 761.725268][T16743] netlink: 1772 bytes leftover after parsing attributes in process `syz.3.3536'. [ 762.568192][T16756] netlink: 'syz.0.3542': attribute type 6 has an invalid length. [ 764.125597][T16770] netlink: 'syz.2.3547': attribute type 29 has an invalid length. [ 764.141220][T16770] netlink: 'syz.2.3547': attribute type 29 has an invalid length. [ 764.154469][T16773] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3546'. [ 764.925575][ T5795] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 765.448120][T16800] netlink: 1772 bytes leftover after parsing attributes in process `syz.1.3559'. [ 766.417725][T16806] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3561'. [ 766.798345][T16823] netlink: 'syz.0.3567': attribute type 29 has an invalid length. [ 766.822566][T16823] netlink: 'syz.0.3567': attribute type 29 has an invalid length. [ 768.421015][T16847] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3575'. [ 768.966812][T16867] FAULT_INJECTION: forcing a failure. [ 768.966812][T16867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.989828][T16867] CPU: 1 PID: 16867 Comm: syz.2.3581 Not tainted syzkaller #0 [ 768.997376][T16867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 769.007485][T16867] Call Trace: [ 769.010810][T16867] [ 769.013789][T16867] dump_stack_lvl+0x18c/0x250 [ 769.018525][T16867] ? show_regs_print_info+0x20/0x20 [ 769.023788][T16867] ? load_image+0x420/0x420 [ 769.028352][T16867] ? __might_fault+0xaa/0x120 [ 769.033088][T16867] ? __lock_acquire+0x7eb0/0x7eb0 [ 769.038186][T16867] should_fail_ex+0x394/0x4c0 [ 769.042929][T16867] _copy_to_user+0x2f/0xa0 [ 769.047397][T16867] bpf_mprog_query+0x26f/0x7b0 [ 769.052216][T16867] ? tcx_prog_query+0x86/0x140 [ 769.057030][T16867] ? bpf_mprog_delete+0x410/0x410 [ 769.062141][T16867] ? lockdep_rtnl_is_held+0x26/0x30 [ 769.067402][T16867] tcx_prog_query+0xd9/0x140 [ 769.072050][T16867] __sys_bpf+0x7a0/0x890 [ 769.076343][T16867] ? bpf_link_show_fdinfo+0x560/0x560 [ 769.081785][T16867] ? lock_chain_count+0x20/0x20 [ 769.086697][T16867] __x64_sys_bpf+0x7c/0x90 [ 769.091167][T16867] do_syscall_64+0x55/0xb0 [ 769.095650][T16867] ? clear_bhb_loop+0x40/0x90 [ 769.100387][T16867] ? clear_bhb_loop+0x40/0x90 [ 769.105127][T16867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 769.111080][T16867] RIP: 0033:0x7fe387fa94d9 [ 769.115564][T16867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.135235][T16867] RSP: 002b:00007fe388f3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 769.143784][T16867] RAX: ffffffffffffffda RBX: 00007fe388225fa0 RCX: 00007fe387fa94d9 [ 769.151803][T16867] RDX: 0000000000000040 RSI: 0000200000001fc0 RDI: 0000000000000010 [ 769.159813][T16867] RBP: 00007fe388f3b090 R08: 0000000000000000 R09: 0000000000000000 [ 769.167824][T16867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.175837][T16867] R13: 00007fe388226038 R14: 00007fe388225fa0 R15: 00007fffed97ac18 [ 769.183866][T16867] [ 769.264336][T16869] netlink: 'syz.0.3582': attribute type 3 has an invalid length. [ 769.296343][T16869] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3582'. [ 769.461811][T16872] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3583'. [ 770.212244][T16877] netlink: 'syz.1.3583': attribute type 39 has an invalid length. [ 770.707024][T16903] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3592'. [ 770.927392][T16910] netlink: 97400 bytes leftover after parsing attributes in process `syz.1.3594'. [ 770.995131][T16912] FAULT_INJECTION: forcing a failure. [ 770.995131][T16912] name failslab, interval 1, probability 0, space 0, times 0 [ 771.017506][T16912] CPU: 1 PID: 16912 Comm: syz.3.3595 Not tainted syzkaller #0 [ 771.025054][T16912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 771.035151][T16912] Call Trace: [ 771.038472][T16912] [ 771.041443][T16912] dump_stack_lvl+0x18c/0x250 [ 771.046227][T16912] ? show_regs_print_info+0x20/0x20 [ 771.051477][T16912] ? load_image+0x420/0x420 [ 771.056121][T16912] ? __lock_acquire+0x7eb0/0x7eb0 [ 771.061200][T16912] should_fail_ex+0x394/0x4c0 [ 771.065936][T16912] should_failslab+0x9/0x20 [ 771.070491][T16912] slab_pre_alloc_hook+0x59/0x300 [ 771.075571][T16912] ? security_sk_alloc+0x4b/0x130 [ 771.080662][T16912] ? security_sk_alloc+0x4b/0x130 [ 771.085752][T16912] __kmem_cache_alloc_node+0x53/0x260 [ 771.091215][T16912] ? security_sk_alloc+0x4b/0x130 [ 771.096297][T16912] __kmalloc+0xa7/0x240 [ 771.100516][T16912] security_sk_alloc+0x4b/0x130 [ 771.105432][T16912] sk_prot_alloc+0x101/0x210 [ 771.110088][T16912] ? sk_alloc+0x24/0x350 [ 771.114384][T16912] sk_alloc+0x3a/0x350 [ 771.118534][T16912] ? bpf_ctx_init+0x154/0x190 [ 771.123276][T16912] bpf_prog_test_run_skb+0x371/0x18f0 [ 771.128707][T16912] ? __fget_files+0x28/0x460 [ 771.133469][T16912] ? __fget_files+0x3fc/0x460 [ 771.138221][T16912] ? cpu_online+0x60/0x60 [ 771.142608][T16912] bpf_prog_test_run+0x31f/0x390 [ 771.147605][T16912] __sys_bpf+0x49d/0x890 [ 771.151912][T16912] ? bpf_link_show_fdinfo+0x560/0x560 [ 771.157356][T16912] ? lock_chain_count+0x20/0x20 [ 771.162275][T16912] __x64_sys_bpf+0x7c/0x90 [ 771.166753][T16912] do_syscall_64+0x55/0xb0 [ 771.171237][T16912] ? clear_bhb_loop+0x40/0x90 [ 771.175984][T16912] ? clear_bhb_loop+0x40/0x90 [ 771.180762][T16912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 771.186705][T16912] RIP: 0033:0x7fa1bb5a94d9 [ 771.191451][T16912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.211121][T16912] RSP: 002b:00007fa1bc4aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 771.219579][T16912] RAX: ffffffffffffffda RBX: 00007fa1bb825fa0 RCX: 00007fa1bb5a94d9 [ 771.227585][T16912] RDX: 0000000000000050 RSI: 0000200000001880 RDI: 000000000000000a [ 771.235572][T16912] RBP: 00007fa1bc4aa090 R08: 0000000000000000 R09: 0000000000000000 [ 771.243555][T16912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.251549][T16912] R13: 00007fa1bb826038 R14: 00007fa1bb825fa0 R15: 00007fff68f98d98 [ 771.259590][T16912] [ 771.676203][T16925] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3597'. [ 771.957983][T16926] netlink: 'syz.2.3597': attribute type 39 has an invalid length. [ 772.394049][T16935] FAULT_INJECTION: forcing a failure. [ 772.394049][T16935] name failslab, interval 1, probability 0, space 0, times 0 [ 772.428248][T16935] CPU: 0 PID: 16935 Comm: syz.0.3601 Not tainted syzkaller #0 [ 772.435793][T16935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 772.445894][T16935] Call Trace: [ 772.449214][T16935] [ 772.452196][T16935] dump_stack_lvl+0x18c/0x250 [ 772.456949][T16935] ? show_regs_print_info+0x20/0x20 [ 772.462207][T16935] ? load_image+0x420/0x420 [ 772.466813][T16935] ? __might_sleep+0xe0/0xe0 [ 772.471460][T16935] ? __lock_acquire+0x7eb0/0x7eb0 [ 772.476541][T16935] should_fail_ex+0x394/0x4c0 [ 772.481278][T16935] should_failslab+0x9/0x20 [ 772.485825][T16935] slab_pre_alloc_hook+0x59/0x300 [ 772.490883][T16935] ? rtnl_newlink+0x10d/0x2170 [ 772.495774][T16935] __kmem_cache_alloc_node+0x53/0x260 [ 772.501271][T16935] ? rtnl_newlink+0x10d/0x2170 [ 772.506070][T16935] kmalloc_trace+0x2a/0xe0 [ 772.510524][T16935] rtnl_newlink+0x10d/0x2170 [ 772.515147][T16935] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 772.521278][T16935] ? verify_lock_unused+0x140/0x140 [ 772.526545][T16935] ? __mutex_trylock_common+0x160/0x270 [ 772.532135][T16935] ? rtnl_setlink+0x4e0/0x4e0 [ 772.536840][T16935] ? trace_raw_output_contention_end+0xd0/0xd0 [ 772.543037][T16935] ? rcu_is_watching+0x15/0xb0 [ 772.547869][T16935] ? trace_contention_end+0x39/0xe0 [ 772.553095][T16935] ? __mutex_lock+0x30d/0xce0 [ 772.557807][T16935] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 772.562954][T16935] ? mutex_lock_nested+0x20/0x20 [ 772.567930][T16935] ? rtnl_setlink+0x4e0/0x4e0 [ 772.572632][T16935] rtnetlink_rcv_msg+0x843/0xf90 [ 772.577602][T16935] ? rtnetlink_rcv_msg+0x220/0xf90 [ 772.582754][T16935] ? rtnetlink_bind+0x80/0x80 [ 772.587464][T16935] ? kasan_quarantine_put+0xd8/0x220 [ 772.592786][T16935] ? lockdep_hardirqs_on+0x98/0x150 [ 772.598026][T16935] ? slab_free_freelist_hook+0x154/0x240 [ 772.603700][T16935] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 772.609716][T16935] ? lock_chain_count+0x20/0x20 [ 772.614730][T16935] ? __local_bh_enable_ip+0x13a/0x1c0 [ 772.620166][T16935] ? lockdep_hardirqs_on+0x98/0x150 [ 772.625396][T16935] ? __local_bh_enable_ip+0x13a/0x1c0 [ 772.630811][T16935] ? _local_bh_enable+0xa0/0xa0 [ 772.635715][T16935] ? __dev_queue_xmit+0x1481/0x3a30 [ 772.640959][T16935] ? __dev_queue_xmit+0x6d1/0x3a30 [ 772.646123][T16935] ? ref_tracker_free+0x686/0x830 [ 772.651232][T16935] netlink_rcv_skb+0x235/0x4c0 [ 772.656045][T16935] ? rtnetlink_bind+0x80/0x80 [ 772.660785][T16935] ? netlink_ack+0x1160/0x1160 [ 772.665594][T16935] ? __lock_acquire+0x7eb0/0x7eb0 [ 772.670682][T16935] ? netlink_deliver_tap+0x2e/0x1b0 [ 772.675941][T16935] netlink_unicast+0x856/0x9e0 [ 772.680757][T16935] netlink_sendmsg+0x8d0/0xbf0 [ 772.685576][T16935] ? netlink_getsockopt+0x590/0x590 [ 772.690815][T16935] ? apparmor_socket_sendmsg+0x8e/0x330 [ 772.696411][T16935] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 772.701745][T16935] ? security_socket_sendmsg+0x80/0xa0 [ 772.707256][T16935] ? netlink_getsockopt+0x590/0x590 [ 772.712496][T16935] ____sys_sendmsg+0x61b/0x980 [ 772.717303][T16935] ? __asan_memset+0x22/0x40 [ 772.721934][T16935] ? __sys_sendmsg_sock+0x30/0x30 [ 772.726984][T16935] ? __import_iovec+0x5f2/0x850 [ 772.731875][T16935] ? import_iovec+0x73/0xa0 [ 772.736427][T16935] ___sys_sendmsg+0x2a6/0x360 [ 772.741140][T16935] ? get_pid_task+0x20/0x1e0 [ 772.745791][T16935] ? __sys_sendmsg+0x2b0/0x2b0 [ 772.750603][T16935] ? __lock_acquire+0x7eb0/0x7eb0 [ 772.755693][T16935] __se_sys_sendmsg+0x1d0/0x2c0 [ 772.760579][T16935] ? __x64_sys_sendmsg+0x80/0x80 [ 772.765590][T16935] ? lockdep_hardirqs_on+0x98/0x150 [ 772.770818][T16935] do_syscall_64+0x55/0xb0 [ 772.775275][T16935] ? clear_bhb_loop+0x40/0x90 [ 772.779988][T16935] ? clear_bhb_loop+0x40/0x90 [ 772.784703][T16935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 772.790627][T16935] RIP: 0033:0x7fc5dfba94d9 [ 772.795096][T16935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.814736][T16935] RSP: 002b:00007fc5e0a44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 772.823183][T16935] RAX: ffffffffffffffda RBX: 00007fc5dfe25fa0 RCX: 00007fc5dfba94d9 [ 772.831195][T16935] RDX: 0000000000000000 RSI: 0000200000001a00 RDI: 0000000000000009 [ 772.839219][T16935] RBP: 00007fc5e0a44090 R08: 0000000000000000 R09: 0000000000000000 [ 772.847231][T16935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.855239][T16935] R13: 00007fc5dfe26038 R14: 00007fc5dfe25fa0 R15: 00007ffef44c9058 [ 772.863269][T16935] [ 773.074142][T16942] syzkaller0: entered promiscuous mode [ 773.089169][T16942] syzkaller0: entered allmulticast mode [ 773.134237][T16947] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3606'. [ 775.624416][T16963] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3613'. [ 775.637299][T16961] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3612'. [ 775.759259][T16965] netlink: 'syz.3.3612': attribute type 39 has an invalid length. [ 775.937099][T16971] FAULT_INJECTION: forcing a failure. [ 775.937099][T16971] name failslab, interval 1, probability 0, space 0, times 0 [ 775.970398][T16971] CPU: 0 PID: 16971 Comm: syz.1.3616 Not tainted syzkaller #0 [ 775.977950][T16971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 775.988072][T16971] Call Trace: [ 775.991396][T16971] [ 775.994370][T16971] dump_stack_lvl+0x18c/0x250 [ 775.999144][T16971] ? show_regs_print_info+0x20/0x20 [ 776.004399][T16971] ? load_image+0x420/0x420 [ 776.008951][T16971] ? __might_sleep+0xe0/0xe0 [ 776.013599][T16971] ? __lock_acquire+0x7eb0/0x7eb0 [ 776.018680][T16971] should_fail_ex+0x394/0x4c0 [ 776.023412][T16971] should_failslab+0x9/0x20 [ 776.027996][T16971] slab_pre_alloc_hook+0x59/0x300 [ 776.033193][T16971] kmem_cache_alloc_lru+0x4d/0x2c0 [ 776.038354][T16971] ? shmem_alloc_inode+0x28/0x40 [ 776.043332][T16971] shmem_alloc_inode+0x28/0x40 [ 776.048130][T16971] ? shmem_match+0x160/0x160 [ 776.052753][T16971] new_inode_pseudo+0x63/0x1d0 [ 776.057557][T16971] new_inode+0x22/0x1d0 [ 776.061768][T16971] shmem_get_inode+0x34d/0xcd0 [ 776.066582][T16971] shmem_mknod+0x5f/0x1c0 [ 776.070983][T16971] shmem_mkdir+0x33/0x60 [ 776.075270][T16971] vfs_mkdir+0x2a5/0x470 [ 776.079555][T16971] do_mkdirat+0x1dc/0x450 [ 776.083931][T16971] ? vfs_mkdir+0x470/0x470 [ 776.088401][T16971] ? getname_flags+0x20a/0x500 [ 776.093207][T16971] __x64_sys_mkdir+0x6e/0x80 [ 776.097867][T16971] do_syscall_64+0x55/0xb0 [ 776.102322][T16971] ? clear_bhb_loop+0x40/0x90 [ 776.107056][T16971] ? clear_bhb_loop+0x40/0x90 [ 776.111780][T16971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 776.117725][T16971] RIP: 0033:0x7f3434fa94d9 [ 776.122171][T16971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.141822][T16971] RSP: 002b:00007f3435e6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 776.150265][T16971] RAX: ffffffffffffffda RBX: 00007f3435225fa0 RCX: 00007f3434fa94d9 [ 776.158270][T16971] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000 [ 776.166266][T16971] RBP: 00007f3435e6d090 R08: 0000000000000000 R09: 0000000000000000 [ 776.174258][T16971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.182250][T16971] R13: 00007f3435226038 R14: 00007f3435225fa0 R15: 00007ffe9e3ebcb8 [ 776.190264][T16971] [ 776.358357][T16971] netlink: 166900 bytes leftover after parsing attributes in process `syz.1.3616'. [ 776.516988][T16981] netlink: 'syz.2.3619': attribute type 39 has an invalid length. [ 776.559661][T16982] TCP: TCP_TX_DELAY enabled [ 776.968992][T16989] netlink: 'syz.2.3622': attribute type 10 has an invalid length. [ 777.278257][T16995] syzkaller0: entered promiscuous mode [ 777.304792][T16995] syzkaller0: entered allmulticast mode [ 777.554351][T17001] FAULT_INJECTION: forcing a failure. [ 777.554351][T17001] name failslab, interval 1, probability 0, space 0, times 0 [ 777.584434][T17001] CPU: 0 PID: 17001 Comm: syz.1.3626 Not tainted syzkaller #0 [ 777.591993][T17001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 777.602097][T17001] Call Trace: [ 777.605417][T17001] [ 777.608384][T17001] dump_stack_lvl+0x18c/0x250 [ 777.613122][T17001] ? show_regs_print_info+0x20/0x20 [ 777.618373][T17001] ? load_image+0x420/0x420 [ 777.622923][T17001] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 777.628962][T17001] ? lock_chain_count+0x20/0x20 [ 777.633882][T17001] should_fail_ex+0x394/0x4c0 [ 777.638619][T17001] should_failslab+0x9/0x20 [ 777.643172][T17001] slab_pre_alloc_hook+0x59/0x300 [ 777.648244][T17001] ? __debug_object_init+0xec/0x450 [ 777.653501][T17001] kmem_cache_alloc+0x5a/0x2d0 [ 777.658309][T17001] ? slab_build_skb+0x28/0x3e0 [ 777.663127][T17001] slab_build_skb+0x28/0x3e0 [ 777.667767][T17001] bpf_prog_test_run_skb+0x38f/0x18f0 [ 777.673219][T17001] ? __fget_files+0x28/0x460 [ 777.677862][T17001] ? __fget_files+0x3fc/0x460 [ 777.682647][T17001] ? cpu_online+0x60/0x60 [ 777.687027][T17001] bpf_prog_test_run+0x31f/0x390 [ 777.692025][T17001] __sys_bpf+0x49d/0x890 [ 777.696324][T17001] ? bpf_link_show_fdinfo+0x560/0x560 [ 777.701763][T17001] ? lock_chain_count+0x20/0x20 [ 777.706677][T17001] __x64_sys_bpf+0x7c/0x90 [ 777.711143][T17001] do_syscall_64+0x55/0xb0 [ 777.715611][T17001] ? clear_bhb_loop+0x40/0x90 [ 777.720341][T17001] ? clear_bhb_loop+0x40/0x90 [ 777.725081][T17001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 777.731030][T17001] RIP: 0033:0x7f3434fa94d9 [ 777.735510][T17001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.755253][T17001] RSP: 002b:00007f3435e6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 777.763722][T17001] RAX: ffffffffffffffda RBX: 00007f3435225fa0 RCX: 00007f3434fa94d9 [ 777.771747][T17001] RDX: 0000000000000050 RSI: 00002000000010c0 RDI: 000000000000000a [ 777.779767][T17001] RBP: 00007f3435e6d090 R08: 0000000000000000 R09: 0000000000000000 [ 777.787782][T17001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.795796][T17001] R13: 00007f3435226038 R14: 00007f3435225fa0 R15: 00007ffe9e3ebcb8 [ 777.803849][T17001] [ 778.200805][T17009] FAULT_INJECTION: forcing a failure. [ 778.200805][T17009] name failslab, interval 1, probability 0, space 0, times 0 [ 778.224668][T17009] CPU: 1 PID: 17009 Comm: syz.1.3629 Not tainted syzkaller #0 [ 778.232213][T17009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 778.242318][T17009] Call Trace: [ 778.245686][T17009] [ 778.248765][T17009] dump_stack_lvl+0x18c/0x250 [ 778.253518][T17009] ? show_regs_print_info+0x20/0x20 [ 778.258778][T17009] ? load_image+0x420/0x420 [ 778.263342][T17009] ? __might_sleep+0xe0/0xe0 [ 778.267990][T17009] ? __lock_acquire+0x7eb0/0x7eb0 [ 778.273071][T17009] should_fail_ex+0x394/0x4c0 [ 778.277841][T17009] should_failslab+0x9/0x20 [ 778.282388][T17009] slab_pre_alloc_hook+0x59/0x300 [ 778.287498][T17009] kmem_cache_alloc_lru+0x4d/0x2c0 [ 778.292657][T17009] ? sock_alloc_inode+0x28/0xc0 [ 778.297567][T17009] sock_alloc_inode+0x28/0xc0 [ 778.302476][T17009] ? sockfs_init_fs_context+0xb0/0xb0 [ 778.307906][T17009] new_inode_pseudo+0x63/0x1d0 [ 778.312728][T17009] __sock_create+0x12d/0x940 [ 778.317391][T17009] udp_sock_create4+0xc6/0x480 [ 778.322206][T17009] ? free_zapped_rcu+0x250/0x250 [ 778.327195][T17009] ? erspan_exit_batch_net+0x30/0x30 [ 778.332562][T17009] rxrpc_lookup_local+0xd16/0x1700 [ 778.337735][T17009] ? rxrpc_local_dont_fragment+0x70/0x70 [ 778.343425][T17009] ? __local_bh_enable_ip+0x13a/0x1c0 [ 778.348857][T17009] ? __local_bh_enable_ip+0x13a/0x1c0 [ 778.354284][T17009] ? do_raw_spin_unlock+0x121/0x230 [ 778.359557][T17009] rxrpc_sendmsg+0x2f3/0x5b0 [ 778.364205][T17009] ? rxrpc_getsockopt+0x150/0x150 [ 778.369289][T17009] ____sys_sendmsg+0x61b/0x980 [ 778.374120][T17009] ? __sys_sendmsg_sock+0x30/0x30 [ 778.379187][T17009] ? __import_iovec+0x5f2/0x850 [ 778.384113][T17009] ? import_iovec+0x73/0xa0 [ 778.388674][T17009] ___sys_sendmsg+0x2a6/0x360 [ 778.393407][T17009] ? __sys_sendmsg+0x2b0/0x2b0 [ 778.398246][T17009] ? trace_call_bpf+0xc3/0x6c0 [ 778.403087][T17009] __se_sys_sendmsg+0x1d0/0x2c0 [ 778.408011][T17009] ? perf_trace_preemptirq_template+0x269/0x330 [ 778.414331][T17009] ? __x64_sys_sendmsg+0x80/0x80 [ 778.419339][T17009] ? lockdep_hardirqs_on+0x98/0x150 [ 778.424592][T17009] do_syscall_64+0x55/0xb0 [ 778.429065][T17009] ? clear_bhb_loop+0x40/0x90 [ 778.433801][T17009] ? clear_bhb_loop+0x40/0x90 [ 778.438546][T17009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 778.444505][T17009] RIP: 0033:0x7f3434fa94d9 [ 778.448967][T17009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.468621][T17009] RSP: 002b:00007f3435e6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.477092][T17009] RAX: ffffffffffffffda RBX: 00007f3435225fa0 RCX: 00007f3434fa94d9 [ 778.485114][T17009] RDX: 000000000000ff00 RSI: 00002000000009c0 RDI: 0000000000000004 [ 778.493247][T17009] RBP: 00007f3435e6d090 R08: 0000000000000000 R09: 0000000000000000 [ 778.501263][T17009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.509302][T17009] R13: 00007f3435226038 R14: 00007f3435225fa0 R15: 00007ffe9e3ebcb8 [ 778.517343][T17009] [ 778.540288][T17009] socket: no more sockets [ 780.681008][T17003] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3627'. [ 780.725257][T17007] netlink: 'syz.0.3627': attribute type 39 has an invalid length. [ 780.812830][T17018] netlink: 'syz.3.3631': attribute type 39 has an invalid length. [ 780.821207][T17018] veth1_vlan: left allmulticast mode [ 780.841240][T17021] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3632'. [ 780.860988][T17022] netlink: 'syz.1.3632': attribute type 39 has an invalid length. [ 781.920371][T17065] netlink: 'syz.2.3645': attribute type 4 has an invalid length. [ 781.929331][T17065] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3645'. [ 781.942303][T17065] FAULT_INJECTION: forcing a failure. [ 781.942303][T17065] name failslab, interval 1, probability 0, space 0, times 0 [ 781.955269][T17065] CPU: 0 PID: 17065 Comm: syz.2.3645 Not tainted syzkaller #0 [ 781.962783][T17065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 781.972885][T17065] Call Trace: [ 781.976211][T17065] [ 781.979185][T17065] dump_stack_lvl+0x18c/0x250 [ 781.983931][T17065] ? trace_event_raw_event_lock+0x240/0x240 [ 781.989862][T17065] ? show_regs_print_info+0x20/0x20 [ 781.995103][T17065] ? load_image+0x420/0x420 [ 781.999825][T17065] should_fail_ex+0x394/0x4c0 [ 782.004547][T17065] should_failslab+0x9/0x20 [ 782.009119][T17065] slab_pre_alloc_hook+0x59/0x300 [ 782.014185][T17065] kmem_cache_alloc_node+0x5e/0x320 [ 782.019418][T17065] ? __alloc_skb+0x103/0x2c0 [ 782.024052][T17065] __alloc_skb+0x103/0x2c0 [ 782.028506][T17065] rtmsg_ifinfo_build_skb+0x83/0x260 [ 782.033820][T17065] ? lockdep_rtnl_is_held+0x26/0x30 [ 782.039060][T17065] rtmsg_ifinfo+0x8c/0x1a0 [ 782.043511][T17065] __dev_notify_flags+0xf3/0x310 [ 782.048483][T17065] ? __dev_change_flags+0x6a0/0x6a0 [ 782.053705][T17065] ? __dev_change_flags+0x4d2/0x6a0 [ 782.058942][T17065] ? dev_get_flags+0x1c0/0x1c0 [ 782.063743][T17065] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 782.069758][T17065] dev_change_flags+0xde/0x1a0 [ 782.074598][T17065] do_setlink+0xc1f/0x3f00 [ 782.079054][T17065] ? load_image+0x420/0x420 [ 782.083592][T17065] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 782.089782][T17065] ? stack_trace_save+0xaa/0x100 [ 782.094753][T17065] ? rcu_is_watching+0x15/0xb0 [ 782.099561][T17065] ? do_trace_netlink_extack+0x7e/0x1a0 [ 782.105169][T17065] ? __nla_validate+0x50/0x50 [ 782.109924][T17065] ? validate_linkmsg+0x719/0x910 [ 782.115000][T17065] rtnl_newlink+0x1848/0x2170 [ 782.119742][T17065] ? rtnl_newlink+0x501/0x2170 [ 782.124597][T17065] ? rtnl_setlink+0x4e0/0x4e0 [ 782.129333][T17065] ? trace_raw_output_contention_end+0xd0/0xd0 [ 782.135537][T17065] ? rcu_is_watching+0x15/0xb0 [ 782.140356][T17065] ? trace_contention_end+0x39/0xe0 [ 782.145602][T17065] ? __mutex_lock+0x30d/0xce0 [ 782.150333][T17065] ? rtnl_setlink+0x4e0/0x4e0 [ 782.155044][T17065] rtnetlink_rcv_msg+0x843/0xf90 [ 782.160049][T17065] ? rtnetlink_rcv_msg+0x220/0xf90 [ 782.165207][T17065] ? rtnetlink_bind+0x80/0x80 [ 782.169917][T17065] ? mark_lock+0x94/0x320 [ 782.174286][T17065] ? __lock_acquire+0x135d/0x7eb0 [ 782.179345][T17065] ? is_bpf_text_address+0x28f/0x2a0 [ 782.184672][T17065] ? mark_lock+0x94/0x320 [ 782.189033][T17065] ? mark_lock+0x94/0x320 [ 782.193408][T17065] ? __lock_acquire+0x135d/0x7eb0 [ 782.198473][T17065] ? __stack_depot_save+0x1f/0x660 [ 782.203650][T17065] ? verify_lock_unused+0x140/0x140 [ 782.208885][T17065] ? verify_lock_unused+0x140/0x140 [ 782.214114][T17065] ? perf_trace_lock+0xfc/0x3b0 [ 782.219006][T17065] ? perf_trace_lock+0xfc/0x3b0 [ 782.223891][T17065] netlink_rcv_skb+0x235/0x4c0 [ 782.228704][T17065] ? rtnetlink_bind+0x80/0x80 [ 782.233414][T17065] ? netlink_ack+0x1160/0x1160 [ 782.238217][T17065] ? __lock_acquire+0x7eb0/0x7eb0 [ 782.243282][T17065] ? net_generic+0x1e/0x240 [ 782.247829][T17065] ? netlink_deliver_tap+0x2e/0x1b0 [ 782.253066][T17065] netlink_unicast+0x856/0x9e0 [ 782.257886][T17065] netlink_sendmsg+0x8d0/0xbf0 [ 782.262684][T17065] ? netlink_getsockopt+0x590/0x590 [ 782.267908][T17065] ? apparmor_socket_sendmsg+0x8e/0x330 [ 782.273503][T17065] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 782.278822][T17065] ? security_socket_sendmsg+0x80/0xa0 [ 782.284307][T17065] ? netlink_getsockopt+0x590/0x590 [ 782.289540][T17065] ____sys_sendmsg+0x61b/0x980 [ 782.294371][T17065] ? __asan_memset+0x22/0x40 [ 782.299006][T17065] ? __sys_sendmsg_sock+0x30/0x30 [ 782.304061][T17065] ? __import_iovec+0x5f2/0x850 [ 782.308967][T17065] ? import_iovec+0x73/0xa0 [ 782.313510][T17065] ___sys_sendmsg+0x2a6/0x360 [ 782.318233][T17065] ? __sys_sendmsg+0x2b0/0x2b0 [ 782.323049][T17065] ? __lock_acquire+0x7eb0/0x7eb0 [ 782.328135][T17065] __se_sys_sendmsg+0x1d0/0x2c0 [ 782.333127][T17065] ? __x64_sys_sendmsg+0x80/0x80 [ 782.338195][T17065] ? trace_irq_enable+0x47/0xe0 [ 782.343107][T17065] ? lockdep_hardirqs_on+0x98/0x150 [ 782.348339][T17065] do_syscall_64+0x55/0xb0 [ 782.352786][T17065] ? clear_bhb_loop+0x40/0x90 [ 782.357497][T17065] ? clear_bhb_loop+0x40/0x90 [ 782.362210][T17065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 782.368140][T17065] RIP: 0033:0x7fe387fa94d9 [ 782.372599][T17065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.392249][T17065] RSP: 002b:00007fe388f3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 782.400706][T17065] RAX: ffffffffffffffda RBX: 00007fe388225fa0 RCX: 00007fe387fa94d9 [ 782.408876][T17065] RDX: 0000000000000004 RSI: 0000200000000940 RDI: 0000000000000003 [ 782.416871][T17065] RBP: 00007fe388f3b090 R08: 0000000000000000 R09: 0000000000000000 [ 782.424870][T17065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 782.432875][T17065] R13: 00007fe388226038 R14: 00007fe388225fa0 R15: 00007fffed97ac18 [ 782.440976][T17065] [ 782.483367][T17065] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 782.563024][T17064] netlink: 'syz.0.3644': attribute type 39 has an invalid length. [ 782.578597][T17064] macvlan0: entered promiscuous mode [ 782.602360][T17064] macvlan0: entered allmulticast mode [ 782.697303][T17070] netlink: 'syz.2.3647': attribute type 4 has an invalid length. [ 782.711416][T17070] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3647'. [ 782.723245][T17070] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 785.262038][T17112] netlink: 'syz.1.3668': attribute type 9 has an invalid length. [ 785.269880][T17112] netlink: 463 bytes leftover after parsing attributes in process `syz.1.3668'. [ 785.611465][T17121] nr0: port 1(hsr0) entered blocking state [ 785.617481][T17121] nr0: port 1(hsr0) entered disabled state [ 785.668630][T17121] hsr0: entered allmulticast mode [ 785.685916][T17121] hsr_slave_0: entered allmulticast mode [ 785.698494][T17121] hsr_slave_1: entered allmulticast mode [ 785.709496][T17121] hsr0: entered promiscuous mode [ 789.787824][T17157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3673'. [ 789.797120][T17157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3673'. [ 789.811934][T17157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3673'. [ 790.029984][T17159] FAULT_INJECTION: forcing a failure. [ 790.029984][T17159] name failslab, interval 1, probability 0, space 0, times 0 [ 790.046512][T17159] CPU: 1 PID: 17159 Comm: syz.2.3674 Not tainted syzkaller #0 [ 790.054030][T17159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 790.064127][T17159] Call Trace: [ 790.067448][T17159] [ 790.070416][T17159] dump_stack_lvl+0x18c/0x250 [ 790.075155][T17159] ? show_regs_print_info+0x20/0x20 [ 790.080411][T17159] ? load_image+0x420/0x420 [ 790.084964][T17159] ? __lock_acquire+0x7eb0/0x7eb0 [ 790.090041][T17159] ? verify_lock_unused+0x140/0x140 [ 790.095292][T17159] should_fail_ex+0x394/0x4c0 [ 790.100021][T17159] should_failslab+0x9/0x20 [ 790.104566][T17159] slab_pre_alloc_hook+0x59/0x300 [ 790.109633][T17159] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 790.115233][T17159] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 790.120830][T17159] __kmem_cache_alloc_node+0x53/0x260 [ 790.126257][T17159] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 790.131860][T17159] __kmalloc+0xa7/0x240 [ 790.136072][T17159] bpf_prog_test_run_skb+0x242/0x18f0 [ 790.141507][T17159] ? __fget_files+0x28/0x460 [ 790.146160][T17159] ? __fget_files+0x3fc/0x460 [ 790.150907][T17159] ? cpu_online+0x60/0x60 [ 790.155282][T17159] bpf_prog_test_run+0x31f/0x390 [ 790.160273][T17159] __sys_bpf+0x49d/0x890 [ 790.164590][T17159] ? bpf_link_show_fdinfo+0x560/0x560 [ 790.170029][T17159] ? lock_chain_count+0x20/0x20 [ 790.174958][T17159] __x64_sys_bpf+0x7c/0x90 [ 790.179428][T17159] do_syscall_64+0x55/0xb0 [ 790.183893][T17159] ? clear_bhb_loop+0x40/0x90 [ 790.188617][T17159] ? clear_bhb_loop+0x40/0x90 [ 790.193360][T17159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 790.199300][T17159] RIP: 0033:0x7fe387fa94d9 [ 790.203758][T17159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.223524][T17159] RSP: 002b:00007fe388f3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 790.231990][T17159] RAX: ffffffffffffffda RBX: 00007fe388225fa0 RCX: 00007fe387fa94d9 [ 790.240000][T17159] RDX: 000000000000002c RSI: 0000200000001ac0 RDI: 000000000000000a [ 790.248012][T17159] RBP: 00007fe388f3b090 R08: 0000000000000000 R09: 0000000000000000 [ 790.256029][T17159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.264041][T17159] R13: 00007fe388226038 R14: 00007fe388225fa0 R15: 00007fffed97ac18 [ 790.272101][T17159] [ 790.654111][T17167] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3675'. [ 790.738132][T17172] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3679'. [ 790.989383][T17185] netlink: 'syz.1.3682': attribute type 4 has an invalid length. [ 790.998975][T17185] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3682'. [ 791.011389][T17185] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 792.018215][T17196] nr0: port 1(hsr0) entered blocking state [ 792.035948][T17196] nr0: port 1(hsr0) entered disabled state [ 792.057226][T17196] hsr0: entered allmulticast mode [ 792.075765][T17196] hsr_slave_0: entered allmulticast mode [ 792.086951][T17196] hsr_slave_1: entered allmulticast mode [ 792.096998][T17196] hsr0: entered promiscuous mode [ 793.393699][T17222] netlink: 'syz.2.3696': attribute type 17 has an invalid length. [ 793.411741][T17222] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3696'. [ 793.470450][T17222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 793.761636][T17236] netlink: 'syz.2.3701': attribute type 3 has an invalid length. [ 793.769493][T17236] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3701'. [ 794.694210][T17245] netlink: 'syz.3.3702': attribute type 39 has an invalid length. [ 796.243499][T17252] FAULT_INJECTION: forcing a failure. [ 796.243499][T17252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.261184][T17252] CPU: 1 PID: 17252 Comm: syz.1.3704 Not tainted syzkaller #0 [ 796.268810][T17252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 796.278917][T17252] Call Trace: [ 796.282234][T17252] [ 796.285198][T17252] dump_stack_lvl+0x18c/0x250 [ 796.289923][T17252] ? show_regs_print_info+0x20/0x20 [ 796.295152][T17252] ? load_image+0x420/0x420 [ 796.299690][T17252] ? __might_fault+0xaa/0x120 [ 796.304412][T17252] ? __lock_acquire+0x7eb0/0x7eb0 [ 796.309471][T17252] should_fail_ex+0x394/0x4c0 [ 796.314187][T17252] _copy_from_user+0x2f/0xe0 [ 796.318808][T17252] ___sys_sendmsg+0x1c7/0x360 [ 796.323518][T17252] ? get_pid_task+0x20/0x1e0 [ 796.328172][T17252] ? __sys_sendmsg+0x2b0/0x2b0 [ 796.332994][T17252] ? __lock_acquire+0x7eb0/0x7eb0 [ 796.338071][T17252] __se_sys_sendmsg+0x1d0/0x2c0 [ 796.342961][T17252] ? __x64_sys_sendmsg+0x80/0x80 [ 796.347939][T17252] ? lockdep_hardirqs_on+0x98/0x150 [ 796.353170][T17252] do_syscall_64+0x55/0xb0 [ 796.357630][T17252] ? clear_bhb_loop+0x40/0x90 [ 796.362347][T17252] ? clear_bhb_loop+0x40/0x90 [ 796.367056][T17252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 796.372983][T17252] RIP: 0033:0x7f3434fa94d9 [ 796.377430][T17252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.397509][T17252] RSP: 002b:00007f3435e6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 796.405949][T17252] RAX: ffffffffffffffda RBX: 00007f3435225fa0 RCX: 00007f3434fa94d9 [ 796.413945][T17252] RDX: 0000000000004800 RSI: 00002000000001c0 RDI: 0000000000000003 [ 796.422031][T17252] RBP: 00007f3435e6d090 R08: 0000000000000000 R09: 0000000000000000 [ 796.430029][T17252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.438024][T17252] R13: 00007f3435226038 R14: 00007f3435225fa0 R15: 00007ffe9e3ebcb8 [ 796.446036][T17252] [ 797.152203][T17281] tun0: tun_chr_ioctl cmd 1074025675 [ 797.157595][T17281] tun0: persist enabled [ 797.184822][T17281] tun0: tun_chr_ioctl cmd 1074025675 [ 797.190365][T17281] tun0: persist disabled [ 797.319740][T17281] rxe_eth0 speed is unknown, defaulting to 1000 [ 797.559933][T17291] netlink: 166900 bytes leftover after parsing attributes in process `syz.0.3717'. [ 797.862961][T17301] netlink: 'syz.1.3720': attribute type 10 has an invalid length. [ 797.870855][T17301] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3720'. [ 797.880873][T17301] bond0: entered promiscuous mode [ 797.887260][T17301] bridge0: port 1(bond0) entered blocking state [ 797.893973][T17301] bridge0: port 1(bond0) entered disabled state [ 797.900807][T17301] bond0: entered allmulticast mode [ 797.906249][T17301] bond_slave_0: entered allmulticast mode [ 797.912306][T17301] bond_slave_1: entered allmulticast mode [ 797.921438][T17301] bridge0: port 1(bond0) entered blocking state [ 797.927919][T17301] bridge0: port 1(bond0) entered forwarding state [ 798.196468][T17304] netlink: 'syz.2.3722': attribute type 10 has an invalid length. [ 798.208759][T17304] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3722'. [ 799.735374][T17327] netlink: 'syz.1.3730': attribute type 3 has an invalid length. [ 799.743368][T17327] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.3730'. [ 800.708904][T17329] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3731'. [ 800.995721][T17339] FAULT_INJECTION: forcing a failure. [ 800.995721][T17339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.038630][T17339] CPU: 1 PID: 17339 Comm: syz.0.3735 Not tainted syzkaller #0 [ 801.046183][T17339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 801.056297][T17339] Call Trace: [ 801.059683][T17339] [ 801.062781][T17339] dump_stack_lvl+0x18c/0x250 [ 801.067559][T17339] ? show_regs_print_info+0x20/0x20 [ 801.072828][T17339] ? load_image+0x420/0x420 [ 801.077392][T17339] ? __lock_acquire+0x7eb0/0x7eb0 [ 801.082477][T17339] should_fail_ex+0x394/0x4c0 [ 801.087456][T17339] _copy_from_user+0x2f/0xe0 [ 801.092139][T17339] copy_from_sockptr+0x53/0x60 [ 801.096968][T17339] sk_setsockopt+0x12c0/0x2b20 [ 801.101804][T17339] ? sockopt_capable+0x60/0x60 [ 801.106629][T17339] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 801.112693][T17339] ? lock_chain_count+0x20/0x20 [ 801.117612][T17339] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 801.123846][T17339] ? lockdep_hardirqs_on+0x98/0x150 [ 801.129105][T17339] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 801.135429][T17339] ? udp_lib_setsockopt+0xcb/0x8a0 [ 801.140618][T17339] udp_lib_setsockopt+0xf7/0x8a0 [ 801.145625][T17339] ? udp_destroy_sock+0x2b0/0x2b0 [ 801.150704][T17339] ? __fget_files+0x28/0x460 [ 801.155365][T17339] udp_setsockopt+0x77/0xb0 [ 801.159937][T17339] ? udp_set_csum+0x6f0/0x6f0 [ 801.164671][T17339] ? sock_common_recvmsg+0x190/0x190 [ 801.170010][T17339] do_sock_setsockopt+0x175/0x1a0 [ 801.175102][T17339] __x64_sys_setsockopt+0x182/0x200 [ 801.180386][T17339] do_syscall_64+0x55/0xb0 [ 801.184869][T17339] ? clear_bhb_loop+0x40/0x90 [ 801.189606][T17339] ? clear_bhb_loop+0x40/0x90 [ 801.194346][T17339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 801.200301][T17339] RIP: 0033:0x7fc5dfba94d9 [ 801.204767][T17339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.224547][T17339] RSP: 002b:00007fc5e0a44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 801.233028][T17339] RAX: ffffffffffffffda RBX: 00007fc5dfe25fa0 RCX: 00007fc5dfba94d9 [ 801.241105][T17339] RDX: 0000000000000034 RSI: 0000000000000001 RDI: 0000000000000009 [ 801.249146][T17339] RBP: 00007fc5e0a44090 R08: 0000000000000004 R09: 0000000000000000 [ 801.257194][T17339] R10: 0000200000000f00 R11: 0000000000000246 R12: 0000000000000001 [ 801.265223][T17339] R13: 00007fc5dfe26038 R14: 00007fc5dfe25fa0 R15: 00007ffef44c9058 [ 801.273271][T17339] [ 801.322193][T17346] netlink: 212832 bytes leftover after parsing attributes in process `syz.2.3737'. [ 801.934560][T17362] netlink: 'syz.1.3744': attribute type 29 has an invalid length. [ 801.959447][T17362] netlink: 'syz.1.3744': attribute type 29 has an invalid length. [ 801.998514][T17362] netlink: 'syz.1.3744': attribute type 29 has an invalid length. [ 802.027075][T17362] netlink: 'syz.1.3744': attribute type 29 has an invalid length. [ 806.763615][ T5795] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 807.419833][T17415] FAULT_INJECTION: forcing a failure. [ 807.419833][T17415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.441416][T17415] CPU: 1 PID: 17415 Comm: syz.1.3763 Not tainted syzkaller #0 [ 807.449064][T17415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 807.459176][T17415] Call Trace: [ 807.462508][T17415] [ 807.465518][T17415] dump_stack_lvl+0x18c/0x250 [ 807.470267][T17415] ? show_regs_print_info+0x20/0x20 [ 807.475534][T17415] ? load_image+0x420/0x420 [ 807.480113][T17415] ? __might_fault+0xaa/0x120 [ 807.484849][T17415] ? __lock_acquire+0x7eb0/0x7eb0 [ 807.489940][T17415] should_fail_ex+0x394/0x4c0 [ 807.494685][T17415] _copy_from_user+0x2f/0xe0 [ 807.499335][T17415] kstrtouint_from_user+0xde/0x170 [ 807.504637][T17415] ? kstrtol_from_user+0x190/0x190 [ 807.509809][T17415] proc_fail_nth_write+0x8f/0x250 [ 807.514882][T17415] ? proc_fail_nth_read+0x260/0x260 [ 807.520141][T17415] ? proc_fail_nth_read+0x260/0x260 [ 807.525384][T17415] vfs_write+0x299/0x9a0 [ 807.529700][T17415] ? file_end_write+0x250/0x250 [ 807.534619][T17415] ? __fget_files+0x28/0x460 [ 807.539285][T17415] ? __fget_files+0x3fc/0x460 [ 807.544124][T17415] ? __fdget_pos+0x2a3/0x330 [ 807.548753][T17415] ? ksys_write+0x74/0x260 [ 807.553302][T17415] ksys_write+0x151/0x260 [ 807.557678][T17415] ? __ia32_sys_read+0x90/0x90 [ 807.562528][T17415] ? syscall_enter_from_user_mode+0x2e/0x80 [ 807.568475][T17415] do_syscall_64+0x55/0xb0 [ 807.572933][T17415] ? clear_bhb_loop+0x40/0x90 [ 807.577651][T17415] ? clear_bhb_loop+0x40/0x90 [ 807.582393][T17415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 807.588424][T17415] RIP: 0033:0x7f3434f69d0e [ 807.592896][T17415] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 807.612537][T17415] RSP: 002b:00007f3435e6cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 807.621011][T17415] RAX: ffffffffffffffda RBX: 00007f3435e6d6c0 RCX: 00007f3434f69d0e [ 807.629014][T17415] RDX: 0000000000000001 RSI: 00007f3435e6d0a0 RDI: 0000000000000008 [ 807.637041][T17415] RBP: 00007f3435e6d090 R08: 0000000000000000 R09: 0000000000000000 [ 807.645042][T17415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.653068][T17415] R13: 00007f3435226038 R14: 00007f3435225fa0 R15: 00007ffe9e3ebcb8 [ 807.661102][T17415] [ 808.866091][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.875993][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.267595][T17455] netlink: 159768 bytes leftover after parsing attributes in process `syz.0.3779'. [ 809.902465][T17468] netlink: 'syz.2.3783': attribute type 6 has an invalid length. [ 809.916084][T17468] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3783'. [ 809.936379][T17468] FAULT_INJECTION: forcing a failure. [ 809.936379][T17468] name failslab, interval 1, probability 0, space 0, times 0 [ 809.980389][T17468] CPU: 0 PID: 17468 Comm: syz.2.3783 Not tainted syzkaller #0 [ 809.987932][T17468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 809.998034][T17468] Call Trace: [ 810.001367][T17468] [ 810.004359][T17468] dump_stack_lvl+0x18c/0x250 [ 810.009111][T17468] ? show_regs_print_info+0x20/0x20 [ 810.014382][T17468] ? load_image+0x420/0x420 [ 810.018948][T17468] ? __might_sleep+0xe0/0xe0 [ 810.023600][T17468] ? __lock_acquire+0x7eb0/0x7eb0 [ 810.028692][T17468] should_fail_ex+0x394/0x4c0 [ 810.033442][T17468] should_failslab+0x9/0x20 [ 810.037995][T17468] slab_pre_alloc_hook+0x59/0x300 [ 810.043097][T17468] kmem_cache_alloc_node+0x5e/0x320 [ 810.048346][T17468] ? __alloc_skb+0x103/0x2c0 [ 810.052995][T17468] __alloc_skb+0x103/0x2c0 [ 810.057471][T17468] ? fib4_rule_fill+0x4b0/0x4b0 [ 810.062373][T17468] notify_rule_change+0xab/0x210 [ 810.067358][T17468] fib_nl_newrule+0x1c14/0x1e40 [ 810.072267][T17468] ? verify_lock_unused+0x140/0x140 [ 810.077521][T17468] ? fib_rules_seq_read+0xf0/0xf0 [ 810.082597][T17468] ? rcu_is_watching+0x15/0xb0 [ 810.087407][T17468] ? trace_contention_end+0x39/0xe0 [ 810.092667][T17468] ? fib_rules_seq_read+0xf0/0xf0 [ 810.097756][T17468] rtnetlink_rcv_msg+0x843/0xf90 [ 810.102738][T17468] ? rtnetlink_rcv_msg+0x220/0xf90 [ 810.107887][T17468] ? rtnetlink_bind+0x80/0x80 [ 810.112611][T17468] ? perf_tp_event+0x13f5/0x1550 [ 810.117594][T17468] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 810.123470][T17468] ? verify_lock_unused+0x140/0x140 [ 810.128732][T17468] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 810.134581][T17468] netlink_rcv_skb+0x235/0x4c0 [ 810.139390][T17468] ? rtnetlink_bind+0x80/0x80 [ 810.144100][T17468] ? netlink_ack+0x1160/0x1160 [ 810.148910][T17468] ? __lock_acquire+0x7eb0/0x7eb0 [ 810.153976][T17468] ? netlink_deliver_tap+0x2e/0x1b0 [ 810.159224][T17468] netlink_unicast+0x856/0x9e0 [ 810.164076][T17468] netlink_sendmsg+0x8d0/0xbf0 [ 810.168878][T17468] ? netlink_getsockopt+0x590/0x590 [ 810.174109][T17468] ? apparmor_socket_sendmsg+0x8e/0x330 [ 810.179698][T17468] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 810.185030][T17468] ? security_socket_sendmsg+0x80/0xa0 [ 810.190623][T17468] ? netlink_getsockopt+0x590/0x590 [ 810.195880][T17468] ____sys_sendmsg+0x61b/0x980 [ 810.200684][T17468] ? __asan_memset+0x22/0x40 [ 810.205344][T17468] ? __sys_sendmsg_sock+0x30/0x30 [ 810.210405][T17468] ? __import_iovec+0x5f2/0x850 [ 810.215309][T17468] ? import_iovec+0x73/0xa0 [ 810.219871][T17468] ___sys_sendmsg+0x2a6/0x360 [ 810.224585][T17468] ? get_pid_task+0x20/0x1e0 [ 810.229236][T17468] ? __sys_sendmsg+0x2b0/0x2b0 [ 810.234080][T17468] ? __lock_acquire+0x7eb0/0x7eb0 [ 810.239247][T17468] __se_sys_sendmsg+0x1d0/0x2c0 [ 810.244131][T17468] ? perf_trace_preemptirq_template+0x269/0x330 [ 810.250410][T17468] ? __x64_sys_sendmsg+0x80/0x80 [ 810.255406][T17468] ? lockdep_hardirqs_on+0x98/0x150 [ 810.260741][T17468] do_syscall_64+0x55/0xb0 [ 810.265194][T17468] ? clear_bhb_loop+0x40/0x90 [ 810.269903][T17468] ? clear_bhb_loop+0x40/0x90 [ 810.274624][T17468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 810.280583][T17468] RIP: 0033:0x7fe387fa94d9 [ 810.285027][T17468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.304689][T17468] RSP: 002b:00007fe388f3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.313145][T17468] RAX: ffffffffffffffda RBX: 00007fe388225fa0 RCX: 00007fe387fa94d9 [ 810.321153][T17468] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000005 [ 810.329158][T17468] RBP: 00007fe388f3b090 R08: 0000000000000000 R09: 0000000000000000 [ 810.337768][T17468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.345793][T17468] R13: 00007fe388226038 R14: 00007fe388225fa0 R15: 00007fffed97ac18 [ 810.353810][T17468] [ 813.227455][T17523] netlink: 'syz.0.3800': attribute type 6 has an invalid length. [ 813.248500][T17523] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3800'. [ 918.381085][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 918.387766][ C1] rcu: 1-....: (10500 ticks this GP) idle=fcbc/1/0x4000000000000000 softirq=76354/76354 fqs=4258 [ 918.399426][ C1] rcu: hardirqs softirqs csw/system [ 918.405871][ C1] rcu: number: 1352754 0 0 [ 918.412295][ C1] rcu: cputime: 20074 32405 69 ==> 52480(ms) [ 918.420104][ C1] rcu: (t=10500 jiffies g=105917 q=1217 ncpus=2) [ 918.426549][ C1] CPU: 1 PID: 17522 Comm: syz.0.3800 Not tainted syzkaller #0 [ 918.434028][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 918.444473][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 918.451039][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 6b a2 bb f6 65 8b 05 7c 23 62 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 918.470657][ C1] RSP: 0018:ffffc900001f0540 EFLAGS: 00000206 [ 918.476737][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: ab6e1a11beeb3a00 [ 918.484724][ C1] RDX: dffffc0000000000 RSI: ffffffff8aead140 RDI: 0000000000000001 [ 918.492725][ C1] RBP: ffffc900001f05d8 R08: ffffffff922235f7 R09: 1ffffffff24446be [ 918.500733][ C1] R10: dffffc0000000000 R11: fffffbfff24446bf R12: dffffc0000000000 [ 918.508730][ C1] R13: dffffc0000000000 R14: ffffffff98515d28 R15: 1ffff9200003e0a8 [ 918.516722][ C1] FS: 00007fc5e0a446c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 918.525708][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 918.532319][ C1] CR2: 0000000100000000 CR3: 000000006181a000 CR4: 00000000003506e0 [ 918.540322][ C1] DR0: 0000200000000bc0 DR1: 0000000000000000 DR2: 0000000000000000 [ 918.548320][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 918.556318][ C1] Call Trace: [ 918.559612][ C1] [ 918.562471][ C1] ? _raw_spin_unlock+0x40/0x40 [ 918.567348][ C1] ? neigh_release+0x80/0x80 [ 918.572030][ C1] init_timer_key+0x41/0x2a0 [ 918.576649][ C1] ___neigh_create+0x9fd/0x23d0 [ 918.581530][ C1] ? __ipv6_neigh_lookup_noref+0x5a7/0x7d0 [ 918.587368][ C1] ip6_finish_output2+0x1492/0x1550 [ 918.592646][ C1] ? nf_hook+0x390/0x390 [ 918.596909][ C1] ? ip6_mtu+0x38c/0x4a0 [ 918.601161][ C1] ? ip6_finish_output+0x567/0x7f0 [ 918.606290][ C1] ? ip6_output+0x11e/0x530 [ 918.610810][ C1] ip6_output+0x33b/0x530 [ 918.615166][ C1] ndisc_send_skb+0xbb9/0x1480 [ 918.619944][ C1] ? ndisc_alloc_skb+0x18c/0x450 [ 918.624897][ C1] ? ndisc_send_skb+0x201/0x1480 [ 918.629854][ C1] ? ndisc_mc_map+0x680/0x680 [ 918.634544][ C1] ? skb_dst+0xd0/0xd0 [ 918.638651][ C1] addrconf_rs_timer+0x36b/0x640 [ 918.643616][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 918.649705][ C1] call_timer_fn+0x189/0x540 [ 918.654312][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 918.660390][ C1] ? call_timer_fn+0xd2/0x540 [ 918.665077][ C1] ? __run_timers+0x810/0x810 [ 918.669769][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 918.674985][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 918.680196][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 918.686281][ C1] __run_timers+0x570/0x810 [ 918.690826][ C1] ? detach_timer+0x2b0/0x2b0 [ 918.695561][ C1] run_timer_softirq+0x67/0xf0 [ 918.700372][ C1] handle_softirqs+0x27d/0x820 [ 918.705158][ C1] ? read_tsc+0x9/0x20 [ 918.709247][ C1] ? ktime_get+0x24b/0x280 [ 918.713712][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 918.718497][ C1] ? do_softirq+0x1a0/0x1a0 [ 918.723021][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 918.728245][ C1] __irq_exit_rcu+0xd3/0x190 [ 918.732857][ C1] ? irq_exit_rcu+0x20/0x20 [ 918.737658][ C1] irq_exit_rcu+0x9/0x20 [ 918.741924][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 918.747580][ C1] [ 918.750520][ C1] [ 918.753462][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 918.759479][ C1] RIP: 0010:generic_exec_single+0x477/0x4e0 [ 918.765392][ C1] Code: 75 11 e8 2c 15 0b 00 48 85 db 75 16 e8 22 15 0b 00 eb 15 e8 1b 15 0b 00 e8 f6 18 1b 09 48 85 db 74 ea e8 0c 15 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 918.785017][ C1] RSP: 0018:ffffc9000499fa00 EFLAGS: 00000246 [ 918.791116][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 918.799198][ C1] RDX: ffffc90019cc3000 RSI: 000000000000299d RDI: 000000000000299e [ 918.807182][ C1] RBP: ffffc9000499fad0 R08: ffffffff92223607 R09: 1ffffffff24446c0 [ 918.815168][ C1] R10: dffffc0000000000 R11: fffffbfff24446c1 R12: 1ffff92000933f44 [ 918.823170][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000933f65 [ 918.831196][ C1] ? event_function+0x300/0x300 [ 918.836077][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 918.841825][ C1] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 918.847572][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 918.852789][ C1] ? smp_call_function_single+0xb0/0x5a0 [ 918.858439][ C1] smp_call_function_single+0x36d/0x5a0 [ 918.864001][ C1] ? event_function+0x300/0x300 [ 918.868879][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 918.875077][ C1] ? event_function+0x300/0x300 [ 918.879956][ C1] perf_install_in_context+0x5bb/0x920 [ 918.885451][ C1] ? alloc_file_pseudo+0x1ae/0x210 [ 918.890579][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 918.896766][ C1] ? add_event_to_ctx+0x1170/0x1170 [ 918.901984][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 918.907193][ C1] ? perf_event__header_size+0x165/0x220 [ 918.912844][ C1] __se_sys_perf_event_open+0x180d/0x1d40 [ 918.918604][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 918.924270][ C1] ? lock_chain_count+0x20/0x20 [ 918.929158][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 918.934380][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 918.940033][ C1] do_syscall_64+0x55/0xb0 [ 918.944487][ C1] ? clear_bhb_loop+0x40/0x90 [ 918.949271][ C1] ? clear_bhb_loop+0x40/0x90 [ 918.953967][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 918.959878][ C1] RIP: 0033:0x7fc5dfba94d9 [ 918.964322][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.983956][ C1] RSP: 002b:00007fc5e0a44028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 918.992383][ C1] RAX: ffffffffffffffda RBX: 00007fc5dfe25fa0 RCX: 00007fc5dfba94d9 [ 919.000426][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000001000 [ 919.008425][ C1] RBP: 00007fc5dfc3804e R08: 0000000000000000 R09: 0000000000000000 [ 919.016420][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 919.024410][ C1] R13: 00007fc5dfe26038 R14: 00007fc5dfe25fa0 R15: 00007ffef44c9058 [ 919.032416][ C1]