last executing test programs: 55m6.355188056s ago: executing program 0 (id=661): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000d4"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r3) 55m5.822025042s ago: executing program 0 (id=663): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="17ac0486fb19a60c3e6195f70000", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x13, &(0x7f0000000100), 0x120) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x3, 0x2, 0x45, 0x9, 0x0, 0x401, 0x20000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x40c0, 0xe60, 0x8, 0x7, 0xfffffffffffffff7, 0xfffffffe, 0xf, 0x0, 0x3, 0x0, 0xb5}, r7, 0x2, r4, 0x5) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r6, 0x4) sendmsg$inet(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000009c0)="28bcf6bbf7f3de4009d014c0c9530ac74dc7b102a62725b70d7d007f75e8ff0965", 0x21}], 0x1}, 0x8800) 55m2.871872683s ago: executing program 0 (id=669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x4000) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x280) 54m59.950096322s ago: executing program 0 (id=675): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8313, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x5, 0x1, 0x1, 0xd0, 0x0, 0x0, 0x62100, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000400), 0x1}, 0x108008, 0x89a, 0xfffffff9, 0x3, 0x3, 0x5, 0x1, 0x0, 0x4, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x2) openat$cgroup_pressure(r1, &(0x7f0000000200)='memory.pressure\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00H'], 0xfe33) r5 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup(r3, &(0x7f0000000240)='syz0\x00', 0x1ff) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 54m58.07246289s ago: executing program 0 (id=682): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x3, 0x106) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x202, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={0x0, r4}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x1200}, 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000000000030000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000c6710000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000100200"/28], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r8 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 54m56.022068449s ago: executing program 0 (id=683): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYBLOB="a25cdfbfc6927318b4ef1ccaef07024c068249b853f0a1dac00225769173e133099ef10467befa05666b88ee210b9adae5490e962b15", @ANYBLOB="5e255d9f0efca7b04a", @ANYRES16, @ANYRES64], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='c ', @ANYRESDEC=r2], 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080)=ANY=[], 0x7) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0xeb) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0xf}}, @var={0xc, 0x0, 0x0, 0xe, 0x4, 0x1}, @struct={0x8, 0x0, 0x0, 0x4, 0x0, 0x3}, @union={0xa, 0x1, 0x0, 0x5, 0x1, 0x10000, [{0xf, 0x3, 0x6}]}, @struct={0xa, 0x1, 0x0, 0x4, 0x0, 0x9, [{0x8, 0x1, 0xfffffc93}]}, @ptr={0x9, 0x0, 0x0, 0x2, 0x3}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x48, 0x0, 0x3, 0x3}, @typedef={0xf, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x30, 0x5f, 0x5f]}}, &(0x7f0000000940)=""/155, 0xc9, 0x9b, 0x1, 0x1, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="030000bd315c0f000000000000008200000000000000cf000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000100"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00), 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000f3ff040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1807001800000000000000060000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020692500000000002020207b1af8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b0000000000000000000000ff07000000000000", @ANYRES32, @ANYBLOB="3c00000000000000000000000000000500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r6}, &(0x7f0000000bc0), &(0x7f0000000c00)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xd, 0x8, 0x9, 0xdec, 0x8408, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x9, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe225643}, [@map_fd={0x18, 0xf}, @ringbuf_query]}, &(0x7f00000004c0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41000, 0x14, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000a40)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200), &(0x7f0000000340)=[{0x3, 0x4, 0x9, 0x7}, {0x2, 0x4, 0xf, 0x4}], 0x10, 0x400}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x18}, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 54m40.695221882s ago: executing program 32 (id=683): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYBLOB="a25cdfbfc6927318b4ef1ccaef07024c068249b853f0a1dac00225769173e133099ef10467befa05666b88ee210b9adae5490e962b15", @ANYBLOB="5e255d9f0efca7b04a", @ANYRES16, @ANYRES64], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='c ', @ANYRESDEC=r2], 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080)=ANY=[], 0x7) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0xeb) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0xf}}, @var={0xc, 0x0, 0x0, 0xe, 0x4, 0x1}, @struct={0x8, 0x0, 0x0, 0x4, 0x0, 0x3}, @union={0xa, 0x1, 0x0, 0x5, 0x1, 0x10000, [{0xf, 0x3, 0x6}]}, @struct={0xa, 0x1, 0x0, 0x4, 0x0, 0x9, [{0x8, 0x1, 0xfffffc93}]}, @ptr={0x9, 0x0, 0x0, 0x2, 0x3}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x48, 0x0, 0x3, 0x3}, @typedef={0xf, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x30, 0x5f, 0x5f]}}, &(0x7f0000000940)=""/155, 0xc9, 0x9b, 0x1, 0x1, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="030000bd315c0f000000000000008200000000000000cf000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000100"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00), 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000f3ff040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1807001800000000000000060000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020692500000000002020207b1af8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b0000000000000000000000ff07000000000000", @ANYRES32, @ANYBLOB="3c00000000000000000000000000000500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r6}, &(0x7f0000000bc0), &(0x7f0000000c00)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xd, 0x8, 0x9, 0xdec, 0x8408, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x9, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe225643}, [@map_fd={0x18, 0xf}, @ringbuf_query]}, &(0x7f00000004c0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41000, 0x14, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000a40)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200), &(0x7f0000000340)=[{0x3, 0x4, 0x9, 0x7}, {0x2, 0x4, 0xf, 0x4}], 0x10, 0x400}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x18}, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 51m21.79564395s ago: executing program 1 (id=1313): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') 51m21.35825532s ago: executing program 1 (id=1317): socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 51m20.212485718s ago: executing program 2 (id=1320): socket$kcm(0x2, 0x1, 0x84) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 51m20.211598938s ago: executing program 1 (id=1321): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8313, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x5, 0x1, 0x1, 0xd0, 0x0, 0x0, 0x62100, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000400), 0x1}, 0x108008, 0x89a, 0xfffffff9, 0x3, 0x3, 0x5, 0x1, 0x0, 0x4, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x2) openat$cgroup_pressure(r1, &(0x7f0000000200)='memory.pressure\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00H'], 0xfe33) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup(r3, &(0x7f0000000240)='syz0\x00', 0x1ff) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 51m18.805236554s ago: executing program 2 (id=1324): r0 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000263, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = socket$kcm(0x29, 0x5, 0x0) close(r4) r5 = socket$kcm(0x2b, 0x1, 0x0) close(r5) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000200), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f0000000040)}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@const={0x10, 0x0, 0x0, 0xa, 0x5}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000980)=""/244, 0x40, 0xf4, 0x1, 0x975, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000004000)={0x15, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000200000000000000ff000000182b0000", @ANYRES32, @ANYBLOB="0000000001000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000ff9700000800000018110000", @ANYRES32=r8, @ANYBLOB="008a46378297d5b9e100000000000000b7080000070000007b8af8ff00000000f60000000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000680)='syzkaller\x00', 0xa, 0x6b, &(0x7f00000006c0)=""/107, 0x41100, 0x44, '\x00', 0x0, @sk_reuseport=0x28, r9, 0x8, &(0x7f0000000ac0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0x3, 0x5, 0xfffffff9}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000003f40), &(0x7f0000003f80)=[{0x2, 0x4, 0xe, 0x2}, {0x0, 0x5, 0x7, 0xc}, {0x1, 0x3, 0xf, 0x8}, {0x5, 0x3, 0x5, 0xa}, {0x1, 0x5, 0x3, 0x4}, {0x4, 0x5, 0xe, 0x4}], 0x10, 0xd9}, 0x94) close(r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) 51m17.124348088s ago: executing program 2 (id=1328): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8313, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x5, 0x1, 0x1, 0xd0, 0x0, 0x0, 0x62100, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000400), 0x1}, 0x108008, 0x89a, 0xfffffff9, 0x3, 0x3, 0x5, 0x1, 0x0, 0x4, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x2) openat$cgroup_pressure(r1, &(0x7f0000000200)='memory.pressure\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00H'], 0xfe33) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup(r3, &(0x7f0000000240)='syz0\x00', 0x1ff) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 51m15.812227827s ago: executing program 1 (id=1331): r0 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000263, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = socket$kcm(0x29, 0x5, 0x0) close(r4) r5 = socket$kcm(0x2b, 0x1, 0x0) close(r5) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000200), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f0000000040)}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r2, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@const={0x10, 0x0, 0x0, 0xa, 0x5}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000980)=""/244, 0x40, 0xf4, 0x1, 0x975, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003f00)={0xffffffffffffffff, 0x20, &(0x7f0000003ec0)={&(0x7f0000002e00)=""/4096, 0x1000, 0x0, &(0x7f0000003e00)=""/176, 0xb0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000004000)={0x15, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000200000000000000ff000000182b0000", @ANYRES32, @ANYBLOB="0000000001000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000ff9700000800000018110000", @ANYRES32=r8, @ANYBLOB="008a46378297d5b9e100000000000000b7080000070000007b8af8ff00000000f60000000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000680)='syzkaller\x00', 0xa, 0x6b, &(0x7f00000006c0)=""/107, 0x41100, 0x44, '\x00', r9, @sk_reuseport=0x28, r10, 0x8, &(0x7f0000000ac0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0x3, 0x5, 0xfffffff9}, 0x10, r11, 0xffffffffffffffff, 0x6, &(0x7f0000003f40), &(0x7f0000003f80)=[{0x2, 0x4, 0xe, 0x2}, {0x0, 0x5, 0x7, 0xc}, {0x1, 0x3, 0xf, 0x8}, {0x5, 0x3, 0x5, 0xa}, {0x1, 0x5, 0x3, 0x4}, {0x4, 0x5, 0xe, 0x4}], 0x10, 0xd9}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x2cb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) 51m15.421860453s ago: executing program 2 (id=1335): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000001b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f00000002c0)={'ip6gretap0\x00', @random='D\x00\x00\x00(E'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x23d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x5, 0xfe, 0x0, 0x0, 0x0, 0x1, 0x19000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0xe8, 0x401}, 0x0, 0x40000006, 0xfffffffc, 0x9, 0x2, 0x0, 0x0, 0x0, 0x89ed}, 0x0, 0x4, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x5601, 0x0, 0x0, 0x1, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000540), 0x4) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0) socket$kcm(0xa, 0x5, 0x0) 51m14.366967225s ago: executing program 1 (id=1340): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000200), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@const={0x10, 0x0, 0x0, 0xa, 0x5}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000980)=""/244, 0x40, 0xf4, 0x1, 0x975, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003f00)={0xffffffffffffffff, 0x20, &(0x7f0000003ec0)={&(0x7f0000002e00)=""/4096, 0x1000, 0x0, &(0x7f0000003e00)=""/176, 0xb0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000004000)={0x15, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000200000000000000ff000000182b0000", @ANYRES32, @ANYBLOB="0000000001000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000ff9700000800000018110000", @ANYRES32=r3, @ANYBLOB="008a46378297d5b9e100000000000000b7080000070000007b8af8ff00000000f60000000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000680)='syzkaller\x00', 0xa, 0x6b, &(0x7f00000006c0)=""/107, 0x41100, 0x44, '\x00', 0x0, @sk_reuseport=0x28, r4, 0x8, &(0x7f0000000ac0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0x3, 0x5, 0xfffffff9}, 0x10, r5, 0xffffffffffffffff, 0x6, &(0x7f0000003f40), &(0x7f0000003f80)=[{0x2, 0x4, 0xe, 0x2}, {0x0, 0x5, 0x7, 0xc}, {0x1, 0x3, 0xf, 0x8}, {0x5, 0x3, 0x5, 0xa}, {0x1, 0x5, 0x3, 0x4}, {0x4, 0x5, 0xe, 0x4}], 0x10, 0xd9}, 0x94) 51m14.302088939s ago: executing program 2 (id=1341): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8313, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x5, 0x1, 0x1, 0xd0, 0x0, 0x0, 0x62100, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000400), 0x1}, 0x108008, 0x89a, 0xfffffff9, 0x3, 0x3, 0x5, 0x1, 0x0, 0x4, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x2) openat$cgroup_pressure(r1, &(0x7f0000000200)='memory.pressure\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00H'], 0xfe33) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup(r3, &(0x7f0000000240)='syz0\x00', 0x1ff) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 51m13.083672082s ago: executing program 1 (id=1345): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') 51m12.245101379s ago: executing program 2 (id=1347): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001}, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x140) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRES8=r3], 0x12) 50m58.077693072s ago: executing program 33 (id=1345): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') 50m56.414705984s ago: executing program 34 (id=1347): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001}, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x140) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRES8=r3], 0x12) 12.515682699s ago: executing program 6 (id=14538): socket$kcm(0xa, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) 12.307999953s ago: executing program 6 (id=14542): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000300)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80, 0x0, 0x0, &(0x7f0000000680)=[{0x10, 0x10b}, {0x10, 0x1, 0x3}], 0x20}, 0x20000004) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x461c574afe861d41) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xea58}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) close(0x3) 8.427190527s ago: executing program 6 (id=14561): socket$kcm(0x21, 0x2, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x802, 0x0, 0xffffffffffffffff, 0x7}, 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000006c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x10c007, 0xac5d, 0x0, 0x8, 0x0, 0xf226}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0xfffffffe}]}, {0x0, [0x61, 0x61, 0x2e, 0x30, 0x61, 0x0]}}, 0x0, 0x2c}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x0, 0x52}, 0x28) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000680)={&(0x7f00000004c0)=@can, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)='P', 0x1}], 0x1, &(0x7f0000000b00)=[{0x10, 0x84, 0x7}], 0x10}, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES8], 0x9a) openat$cgroup_pressure(r8, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000005c0)={0x0, 0x80, 0x49, 0x5, 0x5, 0x8, 0x0, 0x1, 0x200, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0x401, 0x1}, 0x8000, 0x3d, 0x101, 0x5, 0xfff, 0xfffffffb, 0xda, 0x0, 0x3}, 0xffffffffffffffff, 0x4, r5, 0x8) syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)="2241e10fc2f654b517f9e59765715874c76b6a26c298b898dd7be7877939212decb386c16da6d0c9c4a0bf4fa8473cc56bd4390408607caa829c2f7b9cf09ea9bcff1cb069f9cf7cee36e5a4355fcd574e9168a2b3a99c99a61ff858d51a2f4a96b723ff744c671d6180b8253ff23a6e") 7.454427173s ago: executing program 4 (id=14564): socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00s/\x8br\bc_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x90ih\xecd\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$kcm(0x11, 0x20000000000000a, 0x300) r2 = socket$kcm(0x2, 0x1, 0x84) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003c6ecb958ab809cdc57c65bd2f3e468b82aceb0d17541d067a344aa939a1937089feba44ed83c554da1137bb6272393d5887bcf40a67b6ffe7278edd1300b8960d45121a993040685eec937d887cfdb4e5baa81cbd2d2a9ddbc201fa3adbf08ee967a84b1736febc476d9a945eea87bac26219907d2619e189c73495d65b19fb08196cba0b43365bc63f9226c8231b03cd198196ce2d115b0b8307ac666eb4bd5e441b3491b9ba27724f17a3edc1fc9578b6762e07"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000006000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70506000000010085000000850100009500000000000000"], &(0x7f0000000b40)='syzkaller\x00', 0x5, 0xff6, &(0x7f00000014c0)=""/4086, 0x0, 0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000100)={r7, r6}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000740)=@generic={&(0x7f00000000c0)='./file0\x00', r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110bd00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$sock_attach_bpf(r2, 0x84, 0x84, &(0x7f0000000000), 0x90) 4.322423916s ago: executing program 4 (id=14569): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x11, 0xa, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbf, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9a}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f00000013c0)=@nfc={0x27, 0x0, 0x1, 0x6}, 0x80, 0x0, 0x0, &(0x7f0000001440)=[@txtime={{0x18, 0x1, 0x3d, 0x9473}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xffffff36}}, @txtime={{0x18, 0x1, 0x3d, 0xf}}], 0x60}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f0000001780)="02042700ea0e0300000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000b3037455c4f586b198261a55264d046c8a7af72124376038", 0x49}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551010000008d3b", 0x4a}, {&(0x7f0000000400)="df3b46a1330000000000000000000000000000f116878ec6681583392eb29f350235231be5495bc3b6ad35ad20bc5feceb317e800dbe16efa29cce9c1417049b9aafee7f19a91501e37b42ed50d947953bd8d66754dff6b8ef0b3457b86e542dacde831a17000000000000000051fd75ae0bd658bdf574c261f66e30a15e417e9ba9a7", 0x83}, {&(0x7f00000005c0)="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", 0xdca}], 0x4}, 0x40000) socket$kcm(0x2, 0x1, 0x84) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003680)}, 0x40012022) perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000", @ANYBLOB='\x00\x00'], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000014c0)=ANY=[@ANYBLOB="9feb01001800000000121c000000b0000000b00000000400000009000000000000010000000036007403060000000000deffffff11040000000900000006000005080000000e00000003000000893800000200000005000000010000000b000000000000fe4468a1e5d20d66371086301350c6518600000000000800006f33000000030000001000000100000002000000080000000000000e020000000100000009000000000000070000000000000000000000030000000002000000020000004000004a5b76defa4c1a609856"], &(0x7f0000000300)=""/165, 0xcc, 0xa5, 0x1, 0x10, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x606}, 0x94) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000064) 4.136146168s ago: executing program 5 (id=14571): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="b408000000000000711162000000000085100000020000006a000000000000009500c200000000009500001200000000c0c415c60ab698c253d78155622d5ccb23f001665d814d38222f4c05e191fa23cbfe"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 3.96804817s ago: executing program 6 (id=14573): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06", 0x27}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000001880)=""/4090, 0xffa}, {&(0x7f00000000c0)=""/108, 0x6c}], 0x4}, 0x100) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x4000, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x300, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.864597907s ago: executing program 5 (id=14574): socket$kcm(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00082025000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a682", 0xd2}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000240)=@isdn={0x22, 0xe, 0x2, 0x9, 0x7}, 0x80, &(0x7f0000000340)=[{&(0x7f00000005c0)="9c32ef81ccac8b7f59573abbc99d692bba303d05ab7d842a7e5646c2ff760a58a586c8a5a82c298184a1ae0d318e9672223906fc98477041b62345f76bc8b369c711db81596e", 0x46}, {&(0x7f0000000f00)="bf9f1cc8fff840cb7bda0e4713c4715bf8714011885ea07e8da8863a7376b9ceb01b050f059bb2ad3d34013a7294fa9e15309972bfa39f95bb14a939ebb262bedfd79a3cc81f4ce1c56cd2ecc5f0b0332ce767d8531c6ab02bb921a13c52b801d0be6b618ef26d0b6612ce18d4cddcc41d5f8b82d9b0f89930fec91a811fe7ccec0add3cb1df85513b68d13ec9ff4d46aeb4346775788804f0ee6f27250a49c3e072b538d81fed90e8e6", 0xaa}, {&(0x7f0000000fc0)="ee838596fa35f16c01e52ebf8a1cc44e3ff8b867147ba6779671cbe566762435f6700161a181bd55c85ed85f54cd81cecde41cc557dcc06c2e07ccc63263ca2f7dbe530c24552227776dbe7617a166d12c5667958addd00fb73dd9a57ad93434860c1e041a44d63e0d3ba71f48763e76ff42263b94703671efe453ffa22e1f6df4ef6d5e70238823efb2b6dcaccfa48fdf1a481bfa93b21fdec5fe73b9e06c87a6214538a54682d2f0a6f53ec970faa550265d13cca546280c1a30ae438e8f2de10b061d8e1ed2a7f940fc743c25b4151b502a463d015eb79edd5a8e607c7290f4", 0xe1}, {&(0x7f00000010c0)="c085f9edef9d4fcb56a238ee7ee29fb07abe9744aa2b02b5dc2171be3c798f601261360485ab6ce93f20ec9c7f58af40c7383b9de98610ac16d1dfc4c449505deddd204fa4c0f34f87158456c48ce2239ba87e559c399f8f829ac5ed96804de4d7335e19da120f2f1bed93d2db3ea99239303d2ac84fbb166245d8462a619eea251561550ec4d659f21270fb08031b29fdc20452d97bc3b422123562ee8436fc2340f879a01fd091606079ab69c0aa2bee24b24809d64883664dbca7a6c956e2d2468df3e895", 0xc6}, {&(0x7f0000002880)="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", 0x1000}], 0x5}, 0x40080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000200)={'some', 0x20, 0x4, 0x20, 0x1}, 0x2f) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0xe, 0xfc, 0xff, 0x9, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000180)}, 0x420, 0x6d4a, 0x8, 0x0, 0xd, 0x2, 0x7, 0x0, 0x8001, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xb67d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.828234559s ago: executing program 3 (id=14575): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x36500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x62, 0x2}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x23) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x73}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) 3.748697955s ago: executing program 7 (id=14576): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000500)='\x1c\xdd\n\xde\x10o \xda\xc1hTe\x9d\xc5wG[!uf\x13\xcc\xe2\x9b`\x9c)\xcc(\xc5\xe2\x84\x86\xce\n$)$\x1c\xcd\x16#\xb6}\xf1;\x8d\x97-\xb9_\xee\x83\a\xb3x\x93%\xd6Y\xe60\xdc\x00\xf9\xda\r\xbd \x94N3\x9b\x04.\xc3;4\x8f\xc3\x86\x880xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x105d30, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x94, 0x100, 0x41205752, 0x4020, r2, 0x2361, '\x00', r7, r8, 0x5, 0x3, 0x1, 0x9}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000007000000060000000900000000000000", @ANYRES32=r9, @ANYBLOB="007690c37c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r10], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r11}, &(0x7f0000000880), &(0x7f00000008c0)=r9}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000200)=@raw=[@exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x7b, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x90}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0xafa5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) 2.817774018s ago: executing program 3 (id=14581): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a118001500060014", 0x23}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x13, &(0x7f0000000800), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)="f4000900062b2c25fe80070000e4c8030000000f238466cc00007a000000ad6e911b51818463b40006000001", 0x3b}, {&(0x7f0000000840)="ed8784284de73661192f60b7077d7bae50fa61b94f1efa97f91e58eb0fd4bb4bed039af2f8d1abfafcb26d3ce8da5fb7e27a82b24db7213101798823a810bf3e3811a2017f8b01d030f9587d1dfa8cf99e9f14490f859e0ae5db277b6cc4c9b219ce1c8cca0125ba84d71a82ee682f0906ee66a1805135eb7984c9c87cd11daa43f59800006ab1792bb48f31e09a3b6cf1d3c16523a43ae7144f", 0x9a}], 0x2}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000d00000000000000000000000a"], 0x0, 0x32}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000340), 0x0, 0x0, &(0x7f0000000380)=""/16, 0x10}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={0xffffffffffffffff}, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) recvmsg$kcm(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x2, 0xe9a49e1b3271eadd}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xde, &(0x7f00000001c0)=""/222, 0x41000, 0x9, '\x00', 0x0, @fallback=0x31, r3, 0x8, &(0x7f00000002c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x7, 0x6, 0xd}, 0x10, r4, r5, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=[{0x3, 0x4, 0xc, 0x8}, {0x1, 0x2, 0x8, 0x8}], 0x10, 0xfffffffa}, 0x94) 2.782055741s ago: executing program 7 (id=14582): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x80}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x4000080) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) 2.737852054s ago: executing program 6 (id=14583): socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00s/\x8br\bc_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x90ih\xecd\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$kcm(0x11, 0x20000000000000a, 0x300) r2 = socket$kcm(0x2, 0x1, 0x84) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003c6ecb958ab809cdc57c65bd2f3e468b82aceb0d17541d067a344aa939a1937089feba44ed83c554da1137bb6272393d5887bcf40a67b6ffe7278edd1300b8960d45121a993040685eec937d887cfdb4e5baa81cbd2d2a9ddbc201fa3adbf08ee967a84b1736febc476d9a945eea87bac26219907d2619e189c73495d65b19fb08196cba0b43365bc63f9226c8231b03cd198196ce2d115b0b8307ac666eb4bd5e441b3491b9ba27724f17a3edc1fc9578b6762e07"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000006000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70506000000010085000000850100009500000000000000"], &(0x7f0000000b40)='syzkaller\x00', 0x5, 0xff6, &(0x7f00000014c0)=""/4086, 0x0, 0x1}, 0x94) r4 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000100)={r6, r5}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000740)=@generic={&(0x7f00000000c0)='./file0\x00', r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110bd00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$sock_attach_bpf(r2, 0x84, 0x84, &(0x7f0000000000), 0x90) 2.702602766s ago: executing program 5 (id=14584): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="b408000000000000711162000000000085100000020000006a000000000000009500c200000000009500001200000000c0c415c60ab698c253d78155622d5ccb23f001665d814d38222f4c05e191fa23cbfe"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 2.471635472s ago: executing program 7 (id=14585): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000500)='\x1c\xdd\n\xde\x10o \xda\xc1hTe\x9d\xc5wG[!uf\x13\xcc\xe2\x9b`\x9c)\xcc(\xc5\xe2\x84\x86\xce\n$)$\x1c\xcd\x16#\xb6}\xf1;\x8d\x97-\xb9_\xee\x83\a\xb3x\x93%\xd6Y\xe60\xdc\x00\xf9\xda\r\xbd \x94N3\x9b\x04.\xc3;4\x8f\xc3\x86\x880x0, &(0x7f0000000380)=""/16, 0x10}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={0xffffffffffffffff}, 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) recvmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x2, 0xe9a49e1b3271eadd}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xde, &(0x7f00000001c0)=""/222, 0x41000, 0x9, '\x00', 0x0, @fallback=0x31, r3, 0x8, &(0x7f00000002c0)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, r4, r5, 0x2, &(0x7f0000000580)=[0xffffffffffffffff, r6, r9], &(0x7f00000005c0)=[{0x3, 0x4, 0xc, 0x8}, {0x1, 0x2, 0x8, 0x8}], 0x10, 0xfffffffa}, 0x94) 1.669193036s ago: executing program 5 (id=14596): socket$kcm(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x28, 0x0, 0x0, 0x5d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x1a, 0x0, 0x1, 0x8}, 0x28) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000500)="bb2e74712e5dc56fe20561267fe2132140216bd0cf5ed19c900b60c56299b526de548419e823947db4c9178170f0f80e16d2684cb1c7da078dbfd9636e730ed3589cf77bbd39f66eee4299554ca24d413ef55350d6b52e4c6d8e79ff9247eefde5f3a94b2f43155a9adaa39320d7026aac60e40b10b4ce5a9e9beb69a0da65f2241871ed55528bae458714a8eed6f2509ee800a58bff39b074a0508ec83e4b12fd513b2525bb2dcbb6746859676c8c2081b9bd58b7b85e532f71bd5bb502bd51c2a435dcb46e0e951507aefd988f930252adefda2c19110fa39dc8f2fb", &(0x7f0000000600)=""/111}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="000300000051d15bf6ee3bbf195163a0f543e8107f02f1f228e7e2e3bd2f7a3262ebbfbd86fb0206fa331a45b480bb9fe5ac2727eca870d70ed7d4534928997a30af5acf8cdb5b42f103f801c5068654322b2f8eeb974917660ba9c973086baf999295ba63fda36e6274d059e3524d6469a3943af192e448338dd93f2b3e5a0fddf3147f971286e6875290ee3e28fadb60a9dc6e08dd8aa693f193698f1c77f89d9efa535cd5ef2e7e2d6b94cdbdaf25584525fca0e6540d410e993beb658a9683c36b815cb411b58d1105e5106a85f35d71cbb85f2e2d248fb12c4338f52a", @ANYRES32, @ANYBLOB="740e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001380)={r0, r0, 0x4, r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x108278, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0xebff, @dev}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b9a2ffa25922fee4db5d86075d796", 0x12}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x3, 0x0, 0xd00, 0x0, &(0x7f0000000680)="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", &(0x7f0000001680), 0x1, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000200)={'wg0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) write$cgroup_pid(r0, &(0x7f00000002c0), 0x12) socketpair(0x26, 0x800, 0xc0, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r2}, 0x8) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2001, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4000000, 0x800000000000}, 0x4204, 0x200, 0x0, 0x0, 0x9, 0xffffffff, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000280)={'wlan0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.498151228s ago: executing program 6 (id=14587): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x14, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4c}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.497981508s ago: executing program 7 (id=14588): socket$kcm(0xa, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) 1.261202634s ago: executing program 3 (id=14589): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x0, 0x8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x11, &(0x7f0000001040), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) r3 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f1c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, &(0x7f00000000c0), 0x8) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000440)) r4 = socket$kcm(0x2a, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x523, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)="1c31f2381e", &(0x7f0000000000), 0x6, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r7}, 0x38) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8919, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 1.188517209s ago: executing program 7 (id=14590): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x11, 0xa, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbf, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9a}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f00000013c0)=@nfc={0x27, 0x0, 0x1, 0x6}, 0x80, 0x0, 0x0, &(0x7f0000001440)=[@txtime={{0x18, 0x1, 0x3d, 0x9473}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xffffff36}}, @txtime={{0x18, 0x1, 0x3d, 0xf}}], 0x60}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f0000001780)="02042700ea0e0300000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000b3037455c4f586b198261a55264d046c8a7af72124376038", 0x49}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551010000008d3b", 0x4a}, {&(0x7f0000000400)="df3b46a1330000000000000000000000000000f116878ec6681583392eb29f350235231be5495bc3b6ad35ad20bc5feceb317e800dbe16efa29cce9c1417049b9aafee7f19a91501e37b42ed50d947953bd8d66754dff6b8ef0b3457b86e542dacde831a17000000000000000051fd75ae0bd658bdf574c261f66e30a15e417e9ba9a7", 0x83}, {&(0x7f00000005c0)="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", 0xdca}], 0x4}, 0x40000) socket$kcm(0x2, 0x1, 0x84) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003680)}, 0x40012022) perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000", @ANYBLOB='\x00\x00'], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000014c0)=ANY=[@ANYBLOB="9feb01001800000000121c000000b0000000b00000000400000009000000000000010000000036007403060000000000deffffff11040000000900000006000005080000000e00000003000000893800000200000005000000010000000b000000000000fe4468a1e5d20d66371086301350c6518600000000000800006f33000000030000001000000100000002000000080000000000000e020000000100000009000000000000070000000000000000000000030000000002000000020000004000004a5b76defa4c1a609856"], &(0x7f0000000300)=""/165, 0xcc, 0xa5, 0x1, 0x10, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x606}, 0x94) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000064) 632.201707ms ago: executing program 4 (id=14591): r0 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x33, 0x0, 0x0) 750.19µs ago: executing program 3 (id=14592): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000500)='\x1c\xdd\n\xde\x10o \xda\xc1hTe\x9d\xc5wG[!uf\x13\xcc\xe2\x9b`\x9c)\xcc(\xc5\xe2\x84\x86\xce\n$)$\x1c\xcd\x16#\xb6}\xf1;\x8d\x97-\xb9_\xee\x83\a\xb3x\x93%\xd6Y\xe60\xdc\x00\xf9\xda\r\xbd \x94N3\x9b\x04.\xc3;4\x8f\xc3\x86\x880xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x300, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 248.69µs ago: executing program 7 (id=14594): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1}, 0x48) 0s ago: executing program 4 (id=14595): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x80}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x4000080) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) kernel console output (not intermixed with test programs): h. [ 3200.116518][T15087] netlink: 164 bytes leftover after parsing attributes in process `syz.6.12371'. [ 3200.173423][T15091] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12370'. [ 3200.188072][T15090] netlink: 'syz.3.12372': attribute type 1 has an invalid length. [ 3200.212568][T15090] netlink: 'syz.3.12372': attribute type 4 has an invalid length. [ 3200.222829][T15090] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.12372'. [ 3200.272058][T15091] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12370'. [ 3201.533618][T15124] netlink: 'syz.7.12379': attribute type 20 has an invalid length. [ 3201.613208][T15123] netlink: 'syz.6.12380': attribute type 20 has an invalid length. [ 3202.597381][T15135] netlink: 'syz.5.12382': attribute type 20 has an invalid length. [ 3202.777990][T15133] netlink: 'syz.6.12384': attribute type 6 has an invalid length. [ 3202.891996][T15133] __nla_validate_parse: 3 callbacks suppressed [ 3202.892043][T15133] netlink: 164 bytes leftover after parsing attributes in process `syz.6.12384'. [ 3203.316526][T15155] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.12388'. [ 3203.783474][T15169] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.12392'. [ 3204.291013][T15166] netlink: 'syz.7.12391': attribute type 6 has an invalid length. [ 3204.325218][T15166] netlink: 164 bytes leftover after parsing attributes in process `syz.7.12391'. [ 3204.406564][T15179] netlink: 'syz.5.12394': attribute type 20 has an invalid length. [ 3204.649514][T15186] netlink: 'syz.6.12396': attribute type 19 has an invalid length. [ 3204.686847][T15186] netlink: 14552 bytes leftover after parsing attributes in process `syz.6.12396'. [ 3204.770609][T15185] delete_channel: no stack [ 3204.870940][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.877421][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3204.934553][T15198] netlink: 'syz.4.12400': attribute type 20 has an invalid length. [ 3205.174678][T15208] netlink: 'syz.5.12402': attribute type 6 has an invalid length. [ 3205.202407][T15208] netlink: 164 bytes leftover after parsing attributes in process `syz.5.12402'. [ 3205.518316][T15215] netlink: 'syz.7.12407': attribute type 1 has an invalid length. [ 3205.652409][T15215] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.12407'. [ 3218.452171][T15260] validate_nla: 1 callbacks suppressed [ 3218.452190][T15260] netlink: 'syz.5.12408': attribute type 21 has an invalid length. [ 3218.467729][T15260] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12408'. [ 3218.524900][T15256] netlink: 'syz.3.12411': attribute type 10 has an invalid length. [ 3218.527707][ T3980] Bluetooth: hci5: unexpected event 0x12 length: 15 > 8 [ 3218.541973][T15256] team0: Device ipvlan1 failed to register rx_handler [ 3219.881793][T15285] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12416'. [ 3220.034314][T15285] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12416'. [ 3220.122355][T15289] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12416'. [ 3220.454993][T15282] device syzkaller0 entered promiscuous mode [ 3220.465073][T15298] netlink: 'syz.3.12418': attribute type 3 has an invalid length. [ 3220.483912][T15298] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.12418'. [ 3223.871970][T15313] netlink: 'syz.3.12422': attribute type 39 has an invalid length. [ 3224.568240][T15327] netlink: 'syz.6.12428': attribute type 20 has an invalid length. [ 3224.843864][T15336] netlink: 'syz.7.12430': attribute type 21 has an invalid length. [ 3224.851955][T15336] netlink: 132 bytes leftover after parsing attributes in process `syz.7.12430'. [ 3225.056907][ T3980] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 3225.302956][T15343] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12431'. [ 3225.358998][T15341] netlink: 'syz.5.12432': attribute type 20 has an invalid length. [ 3225.416528][T15346] netlink: 'syz.6.12433': attribute type 3 has an invalid length. [ 3225.442392][T15346] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.12433'. [ 3225.452405][T15343] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12431'. [ 3227.559729][T15349] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12431'. [ 3228.035193][T15373] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12441'. [ 3228.075580][T15373] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12441'. [ 3228.189184][T15369] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12441'. [ 3228.469441][T15379] netlink: 'syz.6.12442': attribute type 39 has an invalid length. [ 3228.700309][T15388] netlink: 'syz.5.12445': attribute type 6 has an invalid length. [ 3228.733592][T15388] netlink: 164 bytes leftover after parsing attributes in process `syz.5.12445'. [ 3229.375159][T15404] netlink: 'syz.5.12450': attribute type 3 has an invalid length. [ 3229.391513][T15404] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.12450'. [ 3229.795550][T15412] netlink: 'syz.7.12454': attribute type 10 has an invalid length. [ 3229.853047][T15412] team0: Device ipvlan1 failed to register rx_handler [ 3230.563581][T15421] netlink: 'syz.5.12456': attribute type 21 has an invalid length. [ 3230.571651][T15421] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12456'. [ 3230.580902][T15427] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12458'. [ 3230.604971][T15427] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12458'. [ 3230.617779][T15427] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12458'. [ 3231.420547][T15442] delete_channel: no stack [ 3232.180358][T15456] netlink: 'syz.5.12466': attribute type 25 has an invalid length. [ 3232.247742][T15460] netlink: 'syz.3.12469': attribute type 21 has an invalid length. [ 3232.285328][T15449] delete_channel: no stack [ 3232.420366][T15467] netlink: 'syz.7.12471': attribute type 21 has an invalid length. [ 3232.460929][T15467] netlink: 132 bytes leftover after parsing attributes in process `syz.7.12471'. [ 3232.517797][T15471] netlink: 'syz.5.12472': attribute type 10 has an invalid length. [ 3232.538964][T15471] team0: Device ipvlan1 failed to register rx_handler [ 3233.813355][T15483] delete_channel: no stack [ 3234.094236][T15500] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.12484'. [ 3234.138777][T15504] netlink: 'syz.7.12483': attribute type 21 has an invalid length. [ 3234.193673][T15506] netlink: 'syz.3.12485': attribute type 21 has an invalid length. [ 3234.220946][T15506] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12485'. [ 3234.282898][ T3980] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 3234.480886][T15511] netlink: 184 bytes leftover after parsing attributes in process `syz.4.12486'. [ 3234.762365][T15511] device wlan1 left promiscuous mode [ 3235.316619][T15518] delete_channel: no stack [ 3235.613058][T15537] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12492'. [ 3235.762823][T15537] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12492'. [ 3235.820911][T15531] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12492'. [ 3236.135360][T15552] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.12498'. [ 3236.737725][T15566] netlink: 'syz.4.12503': attribute type 21 has an invalid length. [ 3236.782104][T15566] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12503'. [ 3236.870157][T15570] netlink: 'syz.5.12504': attribute type 25 has an invalid length. [ 3236.952784][T15567] delete_channel: no stack [ 3237.792734][T15592] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12510'. [ 3237.803404][T15590] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12512'. [ 3238.094394][T15590] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12512'. [ 3238.132691][T15591] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12512'. [ 3238.214847][T15592] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12510'. [ 3238.433439][T14661] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3238.454187][T14661] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3238.479725][T14661] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3238.489461][T14661] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3238.497434][T14661] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3238.506439][T14661] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3238.870040][T15602] chnl_net:caif_netlink_parms(): no params data found [ 3238.950629][T15620] FAULT_INJECTION: forcing a failure. [ 3238.950629][T15620] name failslab, interval 1, probability 0, space 0, times 0 [ 3238.982771][T15620] CPU: 1 PID: 15620 Comm: syz.7.12517 Not tainted syzkaller #0 [ 3238.990442][T15620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3239.000956][T15620] Call Trace: [ 3239.004294][T15620] [ 3239.007302][T15620] dump_stack_lvl+0x188/0x24e [ 3239.012080][T15620] ? show_regs_print_info+0x12/0x12 [ 3239.017459][T15620] ? load_image+0x400/0x400 [ 3239.022045][T15620] ? __might_sleep+0xd0/0xd0 [ 3239.026702][T15620] ? __lock_acquire+0x7d10/0x7d10 [ 3239.031816][T15620] should_fail_ex+0x399/0x4d0 [ 3239.036607][T15620] should_failslab+0x5/0x20 [ 3239.041182][T15620] slab_pre_alloc_hook+0x59/0x310 [ 3239.046361][T15620] ? trace_call_bpf+0x5d6/0x6b0 [ 3239.051286][T15620] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 3239.057084][T15620] __kmem_cache_alloc_node+0x4f/0x260 [ 3239.062544][T15620] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 3239.068377][T15620] __kmalloc+0xa0/0x240 [ 3239.072615][T15620] tomoyo_realpath_from_path+0xdf/0x5d0 [ 3239.078267][T15620] ? tomoyo_path_number_perm+0x205/0x650 [ 3239.083998][T15620] tomoyo_path_number_perm+0x22f/0x650 [ 3239.089588][T15620] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3239.095070][T15620] ? ksys_write+0x1c0/0x250 [ 3239.099616][T15620] ? common_file_perm+0x171/0x1c0 [ 3239.104946][T15620] ? __fget_files+0x28/0x4b0 [ 3239.109613][T15620] ? __fget_files+0x28/0x4b0 [ 3239.114375][T15620] security_file_ioctl+0x6c/0xa0 [ 3239.119455][T15620] __se_sys_ioctl+0x48/0x170 [ 3239.124192][T15620] do_syscall_64+0x4c/0xa0 [ 3239.128700][T15620] ? clear_bhb_loop+0x60/0xb0 [ 3239.133417][T15620] ? clear_bhb_loop+0x60/0xb0 [ 3239.138135][T15620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3239.144070][T15620] RIP: 0033:0x7f3810b9c819 [ 3239.148522][T15620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3239.168166][T15620] RSP: 002b:00007f38119e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3239.176617][T15620] RAX: ffffffffffffffda RBX: 00007f3810e15fa0 RCX: 00007f3810b9c819 [ 3239.184637][T15620] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 3239.192725][T15620] RBP: 00007f38119e5090 R08: 0000000000000000 R09: 0000000000000000 [ 3239.200813][T15620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3239.208829][T15620] R13: 00007f3810e16038 R14: 00007f3810e15fa0 R15: 00007ffdf7c83d88 [ 3239.216903][T15620] [ 3239.240095][T15620] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3239.259183][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3239.302365][T15618] netlink: 'syz.4.12518': attribute type 21 has an invalid length. [ 3239.437038][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3239.536002][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3239.691259][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3239.930944][T15602] bridge0: port 1(bridge_slave_0) entered blocking state [ 3239.960465][T15602] bridge0: port 1(bridge_slave_0) entered disabled state [ 3239.992326][T15602] device bridge_slave_0 entered promiscuous mode [ 3240.068503][T15602] bridge0: port 2(bridge_slave_1) entered blocking state [ 3240.098067][T15602] bridge0: port 2(bridge_slave_1) entered disabled state [ 3240.118758][T15602] device bridge_slave_1 entered promiscuous mode [ 3240.352116][T15602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3240.424593][T15602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3240.542398][ T3980] Bluetooth: hci4: command 0x0409 tx timeout [ 3240.661786][T15602] team0: Port device team_slave_0 added [ 3240.682871][ T9] device 0 left promiscuous mode [ 3240.711099][T15602] team0: Port device team_slave_1 added [ 3240.809734][T15602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3240.836315][T15602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3240.950669][T15602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3240.968123][T15602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3240.975689][T15602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3241.003091][T15602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3241.424290][T15671] delete_channel: no stack [ 3241.426905][T15602] device hsr_slave_0 entered promiscuous mode [ 3241.500452][T15602] device hsr_slave_1 entered promiscuous mode [ 3241.515056][T15602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3241.557461][T15602] Cannot create hsr debugfs directory [ 3241.804363][T15683] netlink: 'syz.3.12531': attribute type 6 has an invalid length. [ 3241.821720][T15683] __nla_validate_parse: 6 callbacks suppressed [ 3241.821740][T15683] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12531'. [ 3241.839608][T15687] netlink: 'syz.4.12533': attribute type 20 has an invalid length. [ 3241.955135][T15693] netlink: 'syz.7.12534': attribute type 21 has an invalid length. [ 3241.990400][T15693] netlink: 132 bytes leftover after parsing attributes in process `syz.7.12534'. [ 3242.221797][T15696] netlink: 'syz.6.12535': attribute type 6 has an invalid length. [ 3242.249489][T15696] netlink: 164 bytes leftover after parsing attributes in process `syz.6.12535'. [ 3242.466299][T15708] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12538'. [ 3242.626112][T14661] Bluetooth: hci4: command 0x041b tx timeout [ 3242.795438][T14661] Bluetooth: hci3: command 0x0406 tx timeout [ 3243.014483][T15708] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12538'. [ 3243.115378][T15711] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12538'. [ 3243.231231][T15718] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.12542'. [ 3243.610529][ T9] bond0: (slave wlan1): Releasing backup interface [ 3243.773368][T15726] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.12543'. [ 3243.867923][T15733] netlink: 'syz.7.12545': attribute type 6 has an invalid length. [ 3243.901591][T15733] netlink: 164 bytes leftover after parsing attributes in process `syz.7.12545'. [ 3243.926746][T15735] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.12541'. [ 3244.572432][T15739] netlink: 'syz.3.12546': attribute type 21 has an invalid length. [ 3244.693178][ T9] device hsr_slave_0 left promiscuous mode [ 3244.702418][T14661] Bluetooth: hci4: command 0x040f tx timeout [ 3244.725420][ T9] device hsr_slave_1 left promiscuous mode [ 3244.749250][ T9] device bridge_slave_1 left promiscuous mode [ 3244.755959][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 3244.773392][ T9] device bridge_slave_0 left promiscuous mode [ 3244.785561][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 3244.917303][ T9] device veth1_macvtap left promiscuous mode [ 3244.940477][ T9] device veth0_macvtap left promiscuous mode [ 3244.972262][ T9] device veth1_vlan left promiscuous mode [ 3244.978134][ T9] device veth0_vlan left promiscuous mode [ 3245.753464][T15758] delete_channel: no stack [ 3245.836378][ T9] team0 (unregistering): Port device team_slave_1 removed [ 3245.887907][ T9] team0 (unregistering): Port device team_slave_0 removed [ 3245.938578][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3246.269741][ T9] bond0 (unregistering): Released all slaves [ 3246.577784][T15602] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3246.637464][T15602] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3246.685307][T15602] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3246.766157][T15773] netlink: 'syz.3.12553': attribute type 6 has an invalid length. [ 3246.785359][T14661] Bluetooth: hci4: command 0x0419 tx timeout [ 3246.861519][T15773] __nla_validate_parse: 6 callbacks suppressed [ 3246.861612][T15773] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12553'. [ 3246.930860][T15602] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3247.059774][T15785] netlink: 'syz.7.12557': attribute type 20 has an invalid length. [ 3247.085289][T15788] netlink: 'syz.6.12558': attribute type 6 has an invalid length. [ 3247.099481][T15788] netlink: 164 bytes leftover after parsing attributes in process `syz.6.12558'. [ 3247.628297][T15602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3247.676301][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3247.690784][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3247.787933][T15602] 8021q: adding VLAN 0 to HW filter on device team0 [ 3247.820137][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3247.852689][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3247.871536][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state [ 3247.878731][ T8512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3247.984527][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3248.084798][T15806] netlink: 'syz.6.12560': attribute type 20 has an invalid length. [ 3248.210292][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3248.291592][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3248.324797][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state [ 3248.332097][ T8516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3248.373354][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3248.488462][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3248.503514][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3248.525866][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3248.537812][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3248.572179][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3248.601831][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3248.629115][T15602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3248.683508][T15823] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.12565'. [ 3248.702283][T15602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3248.735312][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3248.761357][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3248.773976][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3248.787742][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3248.798374][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3248.928280][T15821] device syzkaller0 entered promiscuous mode [ 3249.174671][T15839] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12567'. [ 3252.629436][T15839] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12567'. [ 3252.669753][T15854] netlink: 'syz.3.12570': attribute type 6 has an invalid length. [ 3252.682389][T15854] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12570'. [ 3252.841215][T15860] netlink: 'syz.4.12571': attribute type 6 has an invalid length. [ 3252.862753][T15860] netlink: 164 bytes leftover after parsing attributes in process `syz.4.12571'. [ 3253.837064][T15873] netlink: 'syz.3.12573': attribute type 20 has an invalid length. [ 3253.861579][T15879] netlink: 'syz.6.12574': attribute type 20 has an invalid length. [ 3253.902682][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3253.910270][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3253.950556][T15602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3254.250044][T15887] delete_channel: no stack [ 3254.469055][T15885] netlink: 116 bytes leftover after parsing attributes in process `syz.7.12575'. [ 3254.555238][T15905] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.12580'. [ 3254.766618][T15913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12581'. [ 3254.803630][T15913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12581'. [ 3254.874839][T15912] netlink: 'syz.7.12583': attribute type 6 has an invalid length. [ 3254.875445][T15916] FAULT_INJECTION: forcing a failure. [ 3254.875445][T15916] name failslab, interval 1, probability 0, space 0, times 0 [ 3254.924267][T15912] netlink: 164 bytes leftover after parsing attributes in process `syz.7.12583'. [ 3254.953028][T15916] CPU: 1 PID: 15916 Comm: syz.4.12584 Not tainted syzkaller #0 [ 3254.960741][T15916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3254.971175][T15916] Call Trace: [ 3254.974480][T15916] [ 3254.977439][T15916] dump_stack_lvl+0x188/0x24e [ 3254.982417][T15916] ? show_regs_print_info+0x12/0x12 [ 3254.987821][T15916] ? load_image+0x400/0x400 [ 3254.992365][T15916] should_fail_ex+0x399/0x4d0 [ 3254.997087][T15916] should_failslab+0x5/0x20 [ 3255.001624][T15916] slab_pre_alloc_hook+0x59/0x310 [ 3255.006699][T15916] kmem_cache_alloc+0x56/0x2f0 [ 3255.011494][T15916] ? skb_clone+0x1e7/0x370 [ 3255.015956][T15916] skb_clone+0x1e7/0x370 [ 3255.020246][T15916] bpf_clone_redirect+0x163/0x4a0 [ 3255.025327][T15916] bpf_prog_bf17f61a12bc632f+0x56/0x5b [ 3255.030826][T15916] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3255.036845][T15916] ? lock_chain_count+0x20/0x20 [ 3255.041734][T15916] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 3255.048013][T15916] ? lockdep_hardirqs_on+0x94/0x140 [ 3255.053241][T15916] ? ktime_get+0x7b/0x270 [ 3255.057604][T15916] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 3255.063878][T15916] ? ktime_get_real_ts64+0x440/0x440 [ 3255.069194][T15916] ? read_lock_is_recursive+0x10/0x10 [ 3255.074613][T15916] ? __cant_sleep+0x220/0x220 [ 3255.079333][T15916] ? bpf_test_timer_continue+0x142/0x380 [ 3255.085001][T15916] bpf_test_run+0x2b6/0x830 [ 3255.089553][T15916] ? convert___skb_to_skb+0x580/0x580 [ 3255.094977][T15916] ? eth_get_headlen+0x200/0x200 [ 3255.099941][T15916] ? __build_skb+0x257/0x3c0 [ 3255.104662][T15916] ? convert___skb_to_skb+0x3d/0x580 [ 3255.110332][T15916] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 3255.115835][T15916] ? cpu_online+0xa0/0xa0 [ 3255.120190][T15916] bpf_prog_test_run+0x31e/0x390 [ 3255.125166][T15916] __sys_bpf+0x62b/0x780 [ 3255.129441][T15916] ? bpf_link_show_fdinfo+0x380/0x380 [ 3255.134868][T15916] ? lock_chain_count+0x20/0x20 [ 3255.139764][T15916] __x64_sys_bpf+0x78/0x90 [ 3255.144211][T15916] do_syscall_64+0x4c/0xa0 [ 3255.148655][T15916] ? clear_bhb_loop+0x60/0xb0 [ 3255.153383][T15916] ? clear_bhb_loop+0x60/0xb0 [ 3255.158092][T15916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3255.164017][T15916] RIP: 0033:0x7f1c2dd9c819 [ 3255.168458][T15916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3255.188100][T15916] RSP: 002b:00007f1c2ed3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3255.196545][T15916] RAX: ffffffffffffffda RBX: 00007f1c2e015fa0 RCX: 00007f1c2dd9c819 [ 3255.204556][T15916] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 3255.212580][T15916] RBP: 00007f1c2ed3f090 R08: 0000000000000000 R09: 0000000000000000 [ 3255.220676][T15916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3255.228759][T15916] R13: 00007f1c2e016038 R14: 00007f1c2e015fa0 R15: 00007ffd92708718 [ 3255.236810][T15916] [ 3255.317251][T15915] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12581'. [ 3255.851181][T15932] netlink: 'syz.4.12586': attribute type 21 has an invalid length. [ 3255.859487][T15932] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12586'. [ 3255.929658][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3255.954300][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3256.043861][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3256.065797][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3256.088044][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3256.107804][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3256.192990][T15602] device veth0_vlan entered promiscuous mode [ 3256.265791][T15602] device veth1_vlan entered promiscuous mode [ 3256.300260][T15943] netlink: 'syz.6.12587': attribute type 20 has an invalid length. [ 3256.499087][T15602] device veth0_macvtap entered promiscuous mode [ 3256.590046][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3256.624259][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3256.658598][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3256.696673][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3256.728958][T15602] device veth1_macvtap entered promiscuous mode [ 3256.757432][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3256.776368][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3256.836716][T15602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3256.873086][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3256.892543][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3256.966189][T15602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3256.995785][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3257.017450][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3257.055976][T15602] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3257.079174][T15602] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3257.108172][T15602] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3257.149392][T15602] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3257.647471][T15973] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12597'. [ 3257.998312][T15968] delete_channel: no stack [ 3258.011268][T15973] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12597'. [ 3258.133870][T15974] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12597'. [ 3258.178426][T15977] netlink: 'syz.7.12598': attribute type 6 has an invalid length. [ 3258.197424][T15977] netlink: 164 bytes leftover after parsing attributes in process `syz.7.12598'. [ 3258.269483][T15981] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.12599'. [ 3258.322384][ T8516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3258.339520][ T8516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3258.368708][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3258.403538][T29881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3258.411797][T29881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3258.421946][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3258.451081][T15985] netlink: 16162 bytes leftover after parsing attributes in process `syz.6.12601'. [ 3258.840061][T15994] netlink: 'syz.7.12604': attribute type 10 has an invalid length. [ 3258.987423][T15999] netlink: 'syz.6.12605': attribute type 20 has an invalid length. [ 3259.127094][T16004] netlink: 'syz.4.12607': attribute type 25 has an invalid length. [ 3259.267235][T16002] delete_channel: no stack [ 3260.144947][T16030] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.12612'. [ 3260.208978][T16034] netlink: 16162 bytes leftover after parsing attributes in process `syz.6.12615'. [ 3260.981009][T16044] netlink: 'syz.3.12619': attribute type 27 has an invalid length. [ 3261.189415][T16044] bond0: (slave bond_slave_0): Releasing backup interface [ 3261.261242][T16047] delete_channel: no stack [ 3261.270328][T16051] netlink: 'syz.4.12620': attribute type 20 has an invalid length. [ 3262.049378][T16072] netlink: 'syz.4.12628': attribute type 153 has an invalid length. [ 3262.077963][T16072] netlink: 69544 bytes leftover after parsing attributes in process `syz.4.12628'. [ 3262.096813][T16074] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.12629'. [ 3262.239266][T16076] FAULT_INJECTION: forcing a failure. [ 3262.239266][T16076] name failslab, interval 1, probability 0, space 0, times 0 [ 3262.294514][T16076] CPU: 1 PID: 16076 Comm: syz.6.12630 Not tainted syzkaller #0 [ 3262.302157][T16076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3262.312255][T16076] Call Trace: [ 3262.315648][T16076] [ 3262.318619][T16076] dump_stack_lvl+0x188/0x24e [ 3262.323361][T16076] ? show_regs_print_info+0x12/0x12 [ 3262.328616][T16076] ? load_image+0x400/0x400 [ 3262.333185][T16076] ? __lock_acquire+0x12f4/0x7d10 [ 3262.338278][T16076] should_fail_ex+0x399/0x4d0 [ 3262.343009][T16076] should_failslab+0x5/0x20 [ 3262.347561][T16076] slab_pre_alloc_hook+0x59/0x310 [ 3262.352655][T16076] ? ___neigh_create+0x6ce/0x24c0 [ 3262.357730][T16076] __kmem_cache_alloc_node+0x4f/0x260 [ 3262.363152][T16076] ? lock_chain_count+0x20/0x20 [ 3262.368056][T16076] ? ___neigh_create+0x6ce/0x24c0 [ 3262.373125][T16076] __kmalloc+0xa0/0x240 [ 3262.377336][T16076] ? lockdep_hardirqs_on+0x94/0x140 [ 3262.382584][T16076] ___neigh_create+0x6ce/0x24c0 [ 3262.387608][T16076] ip_neigh_gw4+0x356/0x4d0 [ 3262.392179][T16076] ? ip_finish_output2+0x11b0/0x11b0 [ 3262.397530][T16076] ip_finish_output2+0xefb/0x11b0 [ 3262.402610][T16076] ? ip_finish_output2+0x3ff/0x11b0 [ 3262.407851][T16076] ? nf_hook+0x9e/0x390 [ 3262.412032][T16076] ? __ip_local_out+0x5d0/0x5d0 [ 3262.416913][T16076] ? nf_hook+0x9e/0x390 [ 3262.421099][T16076] ? ip_fragment+0x210/0x210 [ 3262.425714][T16076] ? ip_mc_finish_output+0x250/0x250 [ 3262.431023][T16076] ? ip_skb_dst_mtu+0x587/0x9c0 [ 3262.435898][T16076] ? ip_finish_output+0x3eb/0x4c0 [ 3262.440947][T16076] ip_output+0x2df/0x410 [ 3262.445209][T16076] ? ip_output+0x5c/0x410 [ 3262.449562][T16076] ip_send_skb+0x129/0x1c0 [ 3262.454025][T16076] udp_send_skb+0xa88/0x1580 [ 3262.458651][T16076] udp_sendmsg+0x1b33/0x23b0 [ 3262.463264][T16076] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 3262.468132][T16076] ? udp_cmsg_send+0x350/0x350 [ 3262.472999][T16076] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3262.479004][T16076] ? lock_chain_count+0x20/0x20 [ 3262.483885][T16076] ? __local_bh_enable_ip+0x136/0x1c0 [ 3262.489272][T16076] ? _local_bh_enable+0xa0/0xa0 [ 3262.494137][T16076] ? inet_sendmsg+0x147/0x2f0 [ 3262.498838][T16076] ? inet_sendmsg+0x147/0x2f0 [ 3262.503537][T16076] ? inet_send_prepare+0x260/0x260 [ 3262.508665][T16076] ____sys_sendmsg+0x5be/0x970 [ 3262.513452][T16076] ? __sys_sendmsg_sock+0x30/0x30 [ 3262.518499][T16076] ? __import_iovec+0x315/0x500 [ 3262.523371][T16076] ? import_iovec+0x6f/0xa0 [ 3262.528050][T16076] ___sys_sendmsg+0x2a2/0x360 [ 3262.532758][T16076] ? __sys_sendmsg+0x290/0x290 [ 3262.537626][T16076] ? __lock_acquire+0x7d10/0x7d10 [ 3262.542693][T16076] __se_sys_sendmsg+0x1bb/0x2a0 [ 3262.547590][T16076] ? __x64_sys_sendmsg+0x80/0x80 [ 3262.552635][T16076] ? lockdep_hardirqs_on+0x94/0x140 [ 3262.557854][T16076] do_syscall_64+0x4c/0xa0 [ 3262.562287][T16076] ? clear_bhb_loop+0x60/0xb0 [ 3262.567066][T16076] ? clear_bhb_loop+0x60/0xb0 [ 3262.571802][T16076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3262.577715][T16076] RIP: 0033:0x7fb55119c819 [ 3262.582141][T16076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3262.601851][T16076] RSP: 002b:00007fb5520a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3262.610369][T16076] RAX: ffffffffffffffda RBX: 00007fb551415fa0 RCX: 00007fb55119c819 [ 3262.618440][T16076] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000004 [ 3262.626421][T16076] RBP: 00007fb5520a8090 R08: 0000000000000000 R09: 0000000000000000 [ 3262.634403][T16076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3262.642384][T16076] R13: 00007fb551416038 R14: 00007fb551415fa0 R15: 00007ffd7111f858 [ 3262.650385][T16076] [ 3262.793765][T16083] netlink: 'syz.3.12633': attribute type 6 has an invalid length. [ 3262.821832][T16083] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12633'. [ 3262.833461][T16087] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12632'. [ 3262.936995][T16087] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12632'. [ 3263.003008][T16086] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12632'. [ 3263.555626][T16090] delete_channel: no stack [ 3263.827770][T16095] netlink: 'syz.5.12636': attribute type 20 has an invalid length. [ 3264.633893][T16121] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.12643'. [ 3266.075581][T16140] netlink: 16162 bytes leftover after parsing attributes in process `syz.6.12649'. [ 3266.262134][T16142] netlink: 'syz.7.12648': attribute type 27 has an invalid length. [ 3266.788622][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.795084][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3267.098056][T16142] bond0: (slave bond_slave_0): Releasing backup interface [ 3267.203667][T16147] netlink: 'syz.3.12650': attribute type 6 has an invalid length. [ 3267.214467][T16147] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12650'. [ 3267.302638][T16150] delete_channel: no stack [ 3268.351305][T16162] netlink: 'syz.3.12656': attribute type 20 has an invalid length. [ 3268.378022][T16165] netlink: 16162 bytes leftover after parsing attributes in process `syz.7.12657'. [ 3268.572124][T16175] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.12661'. [ 3268.746813][T16182] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12659'. [ 3268.774786][T16182] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12659'. [ 3268.824977][T16186] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12659'. [ 3268.894924][T16187] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.12664'. [ 3269.541506][T16202] netlink: 'syz.4.12667': attribute type 25 has an invalid length. [ 3269.600829][T16200] delete_channel: no stack [ 3269.810357][T16216] netlink: 'syz.4.12672': attribute type 20 has an invalid length. [ 3269.860632][T16215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3269.878673][T16221] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.12674'. [ 3269.882591][T16215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3270.121283][T16215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3270.242804][T16215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3270.391915][T16222] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.12673'. [ 3270.495151][T16226] netlink: 16162 bytes leftover after parsing attributes in process `syz.6.12675'. [ 3271.047588][T16248] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12682'. [ 3271.210414][T16243] delete_channel: no stack [ 3271.640825][T16257] netlink: 'syz.3.12686': attribute type 6 has an invalid length. [ 3271.803086][T16261] netlink: 'syz.6.12688': attribute type 4 has an invalid length. [ 3272.755046][T16280] FAULT_INJECTION: forcing a failure. [ 3272.755046][T16280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3272.778988][T16280] CPU: 0 PID: 16280 Comm: syz.3.12695 Not tainted syzkaller #0 [ 3272.786654][T16280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3272.796773][T16280] Call Trace: [ 3272.800101][T16280] [ 3272.803058][T16280] dump_stack_lvl+0x188/0x24e [ 3272.807771][T16280] ? show_regs_print_info+0x12/0x12 [ 3272.813002][T16280] ? load_image+0x400/0x400 [ 3272.817535][T16280] ? __lock_acquire+0x7d10/0x7d10 [ 3272.822598][T16280] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 3272.828357][T16280] should_fail_ex+0x399/0x4d0 [ 3272.833064][T16280] _copy_from_user+0x2c/0x170 [ 3272.837771][T16280] ___sys_sendmsg+0x1c3/0x360 [ 3272.842493][T16280] ? __sys_sendmsg+0x290/0x290 [ 3272.847321][T16280] ? __lock_acquire+0x7d10/0x7d10 [ 3272.852426][T16280] __se_sys_sendmsg+0x1bb/0x2a0 [ 3272.857303][T16280] ? ct_nmi_exit+0x145/0x1c0 [ 3272.862095][T16280] ? __x64_sys_sendmsg+0x80/0x80 [ 3272.867088][T16280] ? lockdep_hardirqs_on+0x94/0x140 [ 3272.872318][T16280] do_syscall_64+0x4c/0xa0 [ 3272.876770][T16280] ? clear_bhb_loop+0x60/0xb0 [ 3272.881484][T16280] ? clear_bhb_loop+0x60/0xb0 [ 3272.886189][T16280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3272.892112][T16280] RIP: 0033:0x7fac14f9c819 [ 3272.896553][T16280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3272.916183][T16280] RSP: 002b:00007fac15da6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3272.924636][T16280] RAX: ffffffffffffffda RBX: 00007fac15215fa0 RCX: 00007fac14f9c819 [ 3272.932641][T16280] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 3272.940651][T16280] RBP: 00007fac15da6090 R08: 0000000000000000 R09: 0000000000000000 [ 3272.948646][T16280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3272.956645][T16280] R13: 00007fac15216038 R14: 00007fac15215fa0 R15: 00007ffdb5e03828 [ 3272.964674][T16280] [ 3273.164370][T16286] netlink: 'syz.4.12696': attribute type 25 has an invalid length. [ 3273.263461][T16282] delete_channel: no stack [ 3273.390682][T16295] __nla_validate_parse: 6 callbacks suppressed [ 3273.390702][T16295] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12701'. [ 3273.524043][T16297] netlink: 'syz.5.12703': attribute type 4 has an invalid length. [ 3273.604259][T16297] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.12703'. [ 3273.659179][T16295] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12701'. [ 3273.722626][T16299] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.12704'. [ 3273.811731][T16302] FAULT_INJECTION: forcing a failure. [ 3273.811731][T16302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3273.829097][T16300] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12701'. [ 3273.852640][T16302] CPU: 1 PID: 16302 Comm: syz.6.12705 Not tainted syzkaller #0 [ 3273.860246][T16302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3273.870418][T16302] Call Trace: [ 3273.873737][T16302] [ 3273.876876][T16302] dump_stack_lvl+0x188/0x24e [ 3273.881774][T16302] ? show_regs_print_info+0x12/0x12 [ 3273.887008][T16302] ? load_image+0x400/0x400 [ 3273.891564][T16302] ? __lock_acquire+0x7d10/0x7d10 [ 3273.896636][T16302] ? snprintf+0xe5/0x140 [ 3273.900916][T16302] should_fail_ex+0x399/0x4d0 [ 3273.905665][T16302] _copy_to_user+0x2c/0x130 [ 3273.910211][T16302] simple_read_from_buffer+0xe3/0x150 [ 3273.915627][T16302] proc_fail_nth_read+0x1a6/0x220 [ 3273.920772][T16302] ? proc_fault_inject_write+0x310/0x310 [ 3273.926443][T16302] ? fsnotify_perm+0x248/0x550 [ 3273.931262][T16302] ? proc_fault_inject_write+0x310/0x310 [ 3273.937019][T16302] vfs_read+0x2de/0xa00 [ 3273.941223][T16302] ? kernel_read+0x1e0/0x1e0 [ 3273.945873][T16302] ? __fget_files+0x28/0x4b0 [ 3273.950511][T16302] ? __fget_files+0x28/0x4b0 [ 3273.955140][T16302] ? __fget_files+0x43d/0x4b0 [ 3273.959859][T16302] ? __fdget_pos+0x2ae/0x360 [ 3273.964476][T16302] ? ksys_read+0x71/0x250 [ 3273.968842][T16302] ksys_read+0x14c/0x250 [ 3273.973187][T16302] ? vfs_write+0xa30/0xa30 [ 3273.977652][T16302] ? lockdep_hardirqs_on+0x94/0x140 [ 3273.983151][T16302] do_syscall_64+0x4c/0xa0 [ 3273.987626][T16302] ? clear_bhb_loop+0x60/0xb0 [ 3273.992337][T16302] ? clear_bhb_loop+0x60/0xb0 [ 3273.997058][T16302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3274.002988][T16302] RIP: 0033:0x7fb55115d04e [ 3274.007435][T16302] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3274.027086][T16302] RSP: 002b:00007fb5520a7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3274.035748][T16302] RAX: ffffffffffffffda RBX: 00007fb5520a86c0 RCX: 00007fb55115d04e [ 3274.043846][T16302] RDX: 000000000000000f RSI: 00007fb5520a80a0 RDI: 0000000000000006 [ 3274.051855][T16302] RBP: 00007fb5520a8090 R08: 0000000000000000 R09: 0000000000000000 [ 3274.059866][T16302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3274.067995][T16302] R13: 00007fb551416038 R14: 00007fb551415fa0 R15: 00007ffd7111f858 [ 3274.076143][T16302] [ 3274.436213][T16309] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.12707'. [ 3274.436221][T16307] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.12706'. [ 3275.227737][T16337] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.12716'. [ 3275.509956][T16347] netlink: 'syz.3.12719': attribute type 6 has an invalid length. [ 3275.557541][T16347] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12719'. [ 3275.680372][T16356] device wlan1 entered promiscuous mode [ 3275.868036][T16364] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.12723'. [ 3275.912835][T16366] netlink: 'syz.5.12724': attribute type 21 has an invalid length. [ 3277.044199][T16384] device syzkaller0 entered promiscuous mode [ 3278.283266][ T3980] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 3280.039393][T16411] netlink: 'syz.4.12739': attribute type 21 has an invalid length. [ 3280.072494][T16411] __nla_validate_parse: 3 callbacks suppressed [ 3280.072513][T16411] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12739'. [ 3280.115592][T16414] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12740'. [ 3280.584317][T16428] netlink: 'syz.4.12744': attribute type 13 has an invalid length. [ 3280.624327][T16428] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12744'. [ 3280.774972][T16428] syz_tun: refused to change device tx_queue_len [ 3280.896004][T16428] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3281.328014][T16432] netlink: 'syz.4.12744': attribute type 10 has an invalid length. [ 3282.390259][T16432] team0: Port device netdevsim0 added [ 3282.871171][T16421] netlink: 'syz.4.12744': attribute type 13 has an invalid length. [ 3282.912487][T16421] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12744'. [ 3283.039726][T16421] syz_tun: refused to change device tx_queue_len [ 3283.072487][T16421] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3283.153203][T16441] delete_channel: no stack [ 3284.334219][T16456] netlink: 'syz.7.12753': attribute type 1 has an invalid length. [ 3284.342531][T16456] netlink: 'syz.7.12753': attribute type 4 has an invalid length. [ 3284.350383][T16456] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.12753'. [ 3284.369620][T16458] netlink: 'syz.3.12754': attribute type 21 has an invalid length. [ 3284.396397][T16458] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12754'. [ 3284.437086][T16464] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.12755'. [ 3284.765476][T16476] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.12760'. [ 3284.830646][T16478] netlink: 'syz.3.12761': attribute type 6 has an invalid length. [ 3284.866378][T16478] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12761'. [ 3285.124578][T16482] delete_channel: no stack [ 3285.740839][T16502] netlink: 'syz.3.12769': attribute type 1 has an invalid length. [ 3285.808464][T16502] netlink: 'syz.3.12769': attribute type 4 has an invalid length. [ 3285.846835][T16502] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.12769'. [ 3286.180414][T16511] netlink: 'syz.4.12772': attribute type 21 has an invalid length. [ 3286.282790][T16511] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12772'. [ 3286.517021][T16516] netlink: 40227 bytes leftover after parsing attributes in process `syz.6.12775'. [ 3286.727009][T16523] netlink: 'syz.4.12777': attribute type 6 has an invalid length. [ 3286.756695][T16523] netlink: 164 bytes leftover after parsing attributes in process `syz.4.12777'. [ 3286.890152][T16532] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.12779'. [ 3286.914713][T16520] delete_channel: no stack [ 3287.353465][T16538] FAULT_INJECTION: forcing a failure. [ 3287.353465][T16538] name failslab, interval 1, probability 0, space 0, times 0 [ 3287.366606][T16536] netlink: 'syz.3.12784': attribute type 1 has an invalid length. [ 3287.366785][T16538] CPU: 1 PID: 16538 Comm: syz.6.12783 Not tainted syzkaller #0 [ 3287.382107][T16538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3287.392179][T16538] Call Trace: [ 3287.395478][T16538] [ 3287.398432][T16538] dump_stack_lvl+0x188/0x24e [ 3287.403149][T16538] ? show_regs_print_info+0x12/0x12 [ 3287.408366][T16538] ? load_image+0x400/0x400 [ 3287.412902][T16538] ? __might_sleep+0xd0/0xd0 [ 3287.417504][T16538] ? __lock_acquire+0x7d10/0x7d10 [ 3287.422714][T16538] should_fail_ex+0x399/0x4d0 [ 3287.427438][T16538] should_failslab+0x5/0x20 [ 3287.431967][T16538] slab_pre_alloc_hook+0x59/0x310 [ 3287.437016][T16538] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 3287.443137][T16538] __kmem_cache_alloc_node+0x4f/0x260 [ 3287.448617][T16538] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 3287.454450][T16538] __kmalloc+0xa0/0x240 [ 3287.458629][T16538] tomoyo_realpath_from_path+0xdf/0x5d0 [ 3287.464208][T16538] ? tomoyo_path_number_perm+0x205/0x650 [ 3287.469860][T16538] tomoyo_path_number_perm+0x22f/0x650 [ 3287.475345][T16538] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3287.480826][T16538] ? ksys_write+0x1c0/0x250 [ 3287.485350][T16538] ? common_file_perm+0x171/0x1c0 [ 3287.490420][T16538] ? __fget_files+0x28/0x4b0 [ 3287.495035][T16538] ? __fget_files+0x28/0x4b0 [ 3287.499658][T16538] security_file_ioctl+0x6c/0xa0 [ 3287.504651][T16538] __se_sys_ioctl+0x48/0x170 [ 3287.509267][T16538] do_syscall_64+0x4c/0xa0 [ 3287.513700][T16538] ? clear_bhb_loop+0x60/0xb0 [ 3287.518391][T16538] ? clear_bhb_loop+0x60/0xb0 [ 3287.523089][T16538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3287.528994][T16538] RIP: 0033:0x7fb55119c819 [ 3287.533516][T16538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3287.553142][T16538] RSP: 002b:00007fb5520a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3287.561581][T16538] RAX: ffffffffffffffda RBX: 00007fb551415fa0 RCX: 00007fb55119c819 [ 3287.569652][T16538] RDX: 0000200000000040 RSI: 0000000000008919 RDI: 0000000000000004 [ 3287.577646][T16538] RBP: 00007fb5520a8090 R08: 0000000000000000 R09: 0000000000000000 [ 3287.585634][T16538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3287.593631][T16538] R13: 00007fb551416038 R14: 00007fb551415fa0 R15: 00007ffd7111f858 [ 3287.601634][T16538] [ 3287.608687][T16536] netlink: 'syz.3.12784': attribute type 4 has an invalid length. [ 3287.608703][T16538] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3287.653801][T16536] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.12784'. [ 3287.854143][T16546] netlink: 'syz.4.12787': attribute type 21 has an invalid length. [ 3287.878660][T16546] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12787'. [ 3288.533133][T16561] netlink: 'syz.5.12793': attribute type 27 has an invalid length. [ 3288.544976][T16561] netlink: 164 bytes leftover after parsing attributes in process `syz.5.12793'. [ 3288.834334][T16563] delete_channel: no stack [ 3288.919890][T16572] netlink: 'syz.6.12795': attribute type 20 has an invalid length. [ 3288.934821][T16571] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.12796'. [ 3289.488575][T16580] netlink: 'syz.5.12799': attribute type 1 has an invalid length. [ 3289.518184][T16580] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.12799'. [ 3291.516567][T16607] delete_channel: no stack [ 3291.683191][T16614] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.12810'. [ 3291.778885][T16624] validate_nla: 1 callbacks suppressed [ 3291.778905][T16624] netlink: 'syz.3.12812': attribute type 20 has an invalid length. [ 3292.540320][T16636] netlink: 'syz.4.12816': attribute type 27 has an invalid length. [ 3293.519146][T16631] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 3293.615425][T16631] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 3293.643150][T16631] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 3293.746283][T16636] bond0: (slave bond_slave_0): Releasing backup interface [ 3293.766347][T16657] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.12822'. [ 3293.866023][T16643] netlink: 'syz.7.12817': attribute type 6 has an invalid length. [ 3293.895853][T16643] netlink: 164 bytes leftover after parsing attributes in process `syz.7.12817'. [ 3294.015895][T16655] netlink: 'syz.5.12821': attribute type 25 has an invalid length. [ 3294.186131][T16654] delete_channel: no stack [ 3294.216355][T16662] delete_channel: no stack [ 3294.617724][ T3980] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 3294.804665][T16680] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.12829'. [ 3294.827384][T16683] netlink: 'syz.5.12831': attribute type 1 has an invalid length. [ 3294.852529][T16683] netlink: 'syz.5.12831': attribute type 4 has an invalid length. [ 3294.860691][T16683] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.12831'. [ 3295.230295][T16692] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12834'. [ 3295.284466][T16692] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12834'. [ 3295.339745][T16691] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12834'. [ 3295.683127][T16705] netlink: 'syz.7.12839': attribute type 1 has an invalid length. [ 3295.819275][T16705] netlink: 'syz.7.12839': attribute type 4 has an invalid length. [ 3295.859965][T16705] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.12839'. [ 3295.951200][T16708] netlink: 'syz.4.12836': attribute type 25 has an invalid length. [ 3296.112901][T16699] delete_channel: no stack [ 3296.145181][T16702] delete_channel: no stack [ 3296.395499][ T3980] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8 [ 3296.652874][T16728] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.12847'. [ 3298.109067][T16746] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12852'. [ 3298.145261][T16746] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12852'. [ 3298.234950][T16751] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12852'. [ 3298.641129][T16757] netlink: 'syz.5.12848': attribute type 4 has an invalid length. [ 3298.700537][T16757] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.12848'. [ 3298.995530][T16765] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12857'. [ 3299.041611][T16765] netlink: 'syz.3.12857': attribute type 12 has an invalid length. [ 3299.067239][T16765] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12857'. [ 3299.114468][T16771] FAULT_INJECTION: forcing a failure. [ 3299.114468][T16771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3299.162367][T16771] CPU: 0 PID: 16771 Comm: syz.6.12860 Not tainted syzkaller #0 [ 3299.170014][T16771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3299.180127][T16771] Call Trace: [ 3299.183458][T16771] [ 3299.186440][T16771] dump_stack_lvl+0x188/0x24e [ 3299.191189][T16771] ? show_regs_print_info+0x12/0x12 [ 3299.196446][T16771] ? load_image+0x400/0x400 [ 3299.201010][T16771] ? __lock_acquire+0x7d10/0x7d10 [ 3299.206083][T16771] ? snprintf+0xe5/0x140 [ 3299.210441][T16771] should_fail_ex+0x399/0x4d0 [ 3299.215150][T16771] _copy_to_user+0x2c/0x130 [ 3299.219750][T16771] simple_read_from_buffer+0xe3/0x150 [ 3299.225157][T16771] proc_fail_nth_read+0x1a6/0x220 [ 3299.230242][T16771] ? proc_fault_inject_write+0x310/0x310 [ 3299.235912][T16771] ? fsnotify_perm+0x248/0x550 [ 3299.240970][T16771] ? proc_fault_inject_write+0x310/0x310 [ 3299.246627][T16771] vfs_read+0x2de/0xa00 [ 3299.250833][T16771] ? kernel_read+0x1e0/0x1e0 [ 3299.255455][T16771] ? __fget_files+0x28/0x4b0 [ 3299.260074][T16771] ? __fget_files+0x28/0x4b0 [ 3299.264698][T16771] ? __fget_files+0x43d/0x4b0 [ 3299.269428][T16771] ? __fdget_pos+0x2ae/0x360 [ 3299.274042][T16771] ? ksys_read+0x71/0x250 [ 3299.278403][T16771] ksys_read+0x14c/0x250 [ 3299.282686][T16771] ? vfs_write+0xa30/0xa30 [ 3299.287136][T16771] ? lockdep_hardirqs_on+0x94/0x140 [ 3299.292381][T16771] do_syscall_64+0x4c/0xa0 [ 3299.296847][T16771] ? clear_bhb_loop+0x60/0xb0 [ 3299.301578][T16771] ? clear_bhb_loop+0x60/0xb0 [ 3299.306310][T16771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3299.312259][T16771] RIP: 0033:0x7fb55115d04e [ 3299.316805][T16771] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3299.336614][T16771] RSP: 002b:00007fb5520a7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3299.345158][T16771] RAX: ffffffffffffffda RBX: 00007fb5520a86c0 RCX: 00007fb55115d04e [ 3299.353155][T16771] RDX: 000000000000000f RSI: 00007fb5520a80a0 RDI: 0000000000000006 [ 3299.361150][T16771] RBP: 00007fb5520a8090 R08: 0000000000000000 R09: 0000000000000000 [ 3299.369226][T16771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3299.377301][T16771] R13: 00007fb551416038 R14: 00007fb551415fa0 R15: 00007ffd7111f858 [ 3299.385328][T16771] [ 3299.410379][ T3980] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8 [ 3299.698125][T16780] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.12862'. [ 3299.743307][T16777] netlink: 'syz.4.12861': attribute type 6 has an invalid length. [ 3299.829844][T16777] netlink: 164 bytes leftover after parsing attributes in process `syz.4.12861'. [ 3300.136995][T16789] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.12864'. [ 3300.604651][T16799] netlink: 'syz.7.12866': attribute type 1 has an invalid length. [ 3300.645487][T16799] netlink: 'syz.7.12866': attribute type 4 has an invalid length. [ 3300.672681][T16799] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.12866'. [ 3300.929455][T16805] netlink: 'syz.6.12869': attribute type 6 has an invalid length. [ 3301.749326][T16817] netlink: 'syz.3.12874': attribute type 1 has an invalid length. [ 3301.778126][T16817] netlink: 'syz.3.12874': attribute type 4 has an invalid length. [ 3302.836476][T16829] netlink: 'syz.3.12877': attribute type 6 has an invalid length. [ 3303.224246][T16837] __nla_validate_parse: 6 callbacks suppressed [ 3303.224285][T16837] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.12879'. [ 3306.137160][T16859] netlink: 'syz.6.12886': attribute type 29 has an invalid length. [ 3306.182500][T16859] netlink: 'syz.6.12886': attribute type 29 has an invalid length. [ 3307.249769][T16881] netlink: 'syz.4.12890': attribute type 25 has an invalid length. [ 3307.292505][T16880] netlink: 61211 bytes leftover after parsing attributes in process `syz.7.12894'. [ 3307.460265][T16872] delete_channel: no stack [ 3307.843346][T16896] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.12897'. [ 3308.024418][T16899] netlink: 'syz.6.12900': attribute type 20 has an invalid length. [ 3308.113609][T16903] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12899'. [ 3308.153899][T16903] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12899'. [ 3308.205874][T16903] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12899'. [ 3308.329282][T16911] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.12903'. [ 3308.750928][T16924] netlink: 'syz.7.12907': attribute type 1 has an invalid length. [ 3308.770945][T16924] netlink: 'syz.7.12907': attribute type 4 has an invalid length. [ 3308.790176][T16924] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.12907'. [ 3308.873670][T16925] delete_channel: no stack [ 3309.132911][T16935] netlink: 'syz.6.12912': attribute type 6 has an invalid length. [ 3309.144305][T16935] netlink: 164 bytes leftover after parsing attributes in process `syz.6.12912'. [ 3309.271664][T16940] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.12913'. [ 3309.491502][T16944] netlink: 'syz.3.12915': attribute type 20 has an invalid length. [ 3312.127951][T16954] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.12918'. [ 3312.249228][T16950] netlink: 'syz.7.12916': attribute type 1 has an invalid length. [ 3312.257303][T16950] netlink: 'syz.7.12916': attribute type 4 has an invalid length. [ 3312.268680][T16950] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.12916'. [ 3312.431312][T16960] netlink: 61211 bytes leftover after parsing attributes in process `syz.7.12920'. [ 3312.501860][T16960] FAULT_INJECTION: forcing a failure. [ 3312.501860][T16960] name failslab, interval 1, probability 0, space 0, times 0 [ 3312.521067][T16960] CPU: 0 PID: 16960 Comm: syz.7.12920 Not tainted syzkaller #0 [ 3312.528695][T16960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3312.538793][T16960] Call Trace: [ 3312.542091][T16960] [ 3312.545040][T16960] dump_stack_lvl+0x188/0x24e [ 3312.549773][T16960] ? show_regs_print_info+0x12/0x12 [ 3312.555029][T16960] ? load_image+0x400/0x400 [ 3312.559597][T16960] should_fail_ex+0x399/0x4d0 [ 3312.564307][T16960] should_failslab+0x5/0x20 [ 3312.568825][T16960] slab_pre_alloc_hook+0x59/0x310 [ 3312.573956][T16960] ? ref_tracker_alloc+0x14e/0x4b0 [ 3312.579093][T16960] __kmem_cache_alloc_node+0x4f/0x260 [ 3312.584486][T16960] ? ref_tracker_alloc+0x14e/0x4b0 [ 3312.589614][T16960] kmalloc_trace+0x26/0xe0 [ 3312.594184][T16960] ref_tracker_alloc+0x14e/0x4b0 [ 3312.599144][T16960] ? ref_tracker_dir_print+0x150/0x150 [ 3312.604631][T16960] ? __kasan_slab_alloc+0x6b/0x80 [ 3312.609682][T16960] ? slab_post_alloc_hook+0x67/0x480 [ 3312.614981][T16960] ? slab_pre_alloc_hook+0x59/0x310 [ 3312.620286][T16960] dst_init+0xda/0x410 [ 3312.624547][T16960] dst_alloc+0x12a/0x160 [ 3312.628819][T16960] ip_route_output_key_hash_rcu+0x14a4/0x23f0 [ 3312.634898][T16960] ? ip_route_output_key_hash_rcu+0x12e1/0x23f0 [ 3312.641287][T16960] ? ip_route_output_key_hash+0x139/0x330 [ 3312.647062][T16960] ip_route_output_key_hash+0x1ef/0x330 [ 3312.652642][T16960] ? ip_route_input_rcu+0x3160/0x3160 [ 3312.658051][T16960] ? ip_route_output_key_hash+0x11/0x330 [ 3312.663704][T16960] tcp_v4_connect+0x6d9/0x18e0 [ 3312.668529][T16960] ? tcp_twsk_unique+0x990/0x990 [ 3312.673512][T16960] __inet_stream_connect+0x242/0xe10 [ 3312.678929][T16960] ? inet_dgram_connect+0x360/0x360 [ 3312.684159][T16960] tcp_sendmsg_fastopen+0x38f/0x600 [ 3312.689375][T16960] tcp_sendmsg_locked+0x3616/0x3a90 [ 3312.694593][T16960] ? mark_lock+0x94/0x320 [ 3312.698955][T16960] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3312.704962][T16960] ? lock_chain_count+0x20/0x20 [ 3312.709844][T16960] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3312.716025][T16960] ? lockdep_hardirqs_on+0x94/0x140 [ 3312.721343][T16960] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3312.727516][T16960] ? tcp_sendmsg+0x1d/0x40 [ 3312.731969][T16960] ? tcp_set_state+0x520/0x520 [ 3312.736833][T16960] ? __local_bh_enable_ip+0x13e/0x1c0 [ 3312.742265][T16960] tcp_sendmsg+0x2b/0x40 [ 3312.746615][T16960] ? inet_send_prepare+0x260/0x260 [ 3312.751748][T16960] ____sys_sendmsg+0x5be/0x970 [ 3312.756535][T16960] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3312.762715][T16960] ? __sys_sendmsg_sock+0x30/0x30 [ 3312.767759][T16960] ? __import_iovec+0x315/0x500 [ 3312.772636][T16960] ? import_iovec+0x6f/0xa0 [ 3312.777158][T16960] ___sys_sendmsg+0x2a2/0x360 [ 3312.781880][T16960] ? __sys_sendmsg+0x290/0x290 [ 3312.786710][T16960] __se_sys_sendmsg+0x1bb/0x2a0 [ 3312.791588][T16960] ? __x64_sys_sendmsg+0x80/0x80 [ 3312.796564][T16960] ? syscall_enter_from_user_mode+0x2a/0x80 [ 3312.802543][T16960] do_syscall_64+0x4c/0xa0 [ 3312.806984][T16960] ? clear_bhb_loop+0x60/0xb0 [ 3312.811679][T16960] ? clear_bhb_loop+0x60/0xb0 [ 3312.816374][T16960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3312.822372][T16960] RIP: 0033:0x7f3810b9c819 [ 3312.826901][T16960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3312.846545][T16960] RSP: 002b:00007f38119e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3312.854982][T16960] RAX: ffffffffffffffda RBX: 00007f3810e15fa0 RCX: 00007f3810b9c819 [ 3312.863059][T16960] RDX: 000000003000c085 RSI: 0000200000000080 RDI: 000000000000000a [ 3312.871081][T16960] RBP: 00007f38119e5090 R08: 0000000000000000 R09: 0000000000000000 [ 3312.879339][T16960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3312.887440][T16960] R13: 00007f3810e16038 R14: 00007f3810e15fa0 R15: 00007ffdf7c83d88 [ 3312.895560][T16960] [ 3313.128213][T16966] netlink: 'syz.4.12922': attribute type 1 has an invalid length. [ 3313.139067][T16966] netlink: 'syz.4.12922': attribute type 4 has an invalid length. [ 3313.147129][T16966] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.12922'. [ 3313.204093][T16970] netlink: 'syz.3.12923': attribute type 6 has an invalid length. [ 3313.212008][T16970] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12923'. [ 3313.221993][T16973] ref_ctr_offset mismatch. inode: 0x17b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 3313.253511][T16973] netlink: 'syz.5.12924': attribute type 3 has an invalid length. [ 3313.261428][T16973] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12924'. [ 3313.654528][T16980] netlink: 'syz.4.12927': attribute type 10 has an invalid length. [ 3313.685426][T16980] device geneve0 entered promiscuous mode [ 3313.715535][T16980] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 3313.743220][T16984] netlink: 'syz.6.12925': attribute type 29 has an invalid length. [ 3313.763100][T16980] netlink: 'syz.4.12927': attribute type 21 has an invalid length. [ 3313.771305][T16980] netlink: 13660 bytes leftover after parsing attributes in process `syz.4.12927'. [ 3313.796244][T16984] netlink: 'syz.6.12925': attribute type 29 has an invalid length. [ 3314.641087][T17003] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.12933'. [ 3314.796647][T17004] delete_channel: no stack [ 3314.801591][T17008] delete_channel: no stack [ 3314.988818][T17025] device geneve0 entered promiscuous mode [ 3315.034787][T17025] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 3315.088240][T17025] netlink: 13660 bytes leftover after parsing attributes in process `syz.5.12941'. [ 3315.148785][T17028] netlink: 164 bytes leftover after parsing attributes in process `syz.7.12942'. [ 3315.538049][T17045] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.12948'. [ 3315.690471][T17052] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.12951'. [ 3315.767679][T17048] delete_channel: no stack [ 3316.144434][ T3980] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8 [ 3316.801877][T17076] device geneve0 entered promiscuous mode [ 3316.854055][T17076] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 3316.876197][T17078] netlink: 164 bytes leftover after parsing attributes in process `syz.5.12961'. [ 3317.231149][T17090] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12964'. [ 3317.304181][T17083] validate_nla: 12 callbacks suppressed [ 3317.304262][T17083] netlink: 'syz.7.12963': attribute type 1 has an invalid length. [ 3317.321156][T17083] netlink: 'syz.7.12963': attribute type 4 has an invalid length. [ 3317.329426][T17083] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.12963'. [ 3317.348152][T17086] netlink: 'syz.3.12960': attribute type 21 has an invalid length. [ 3317.356687][T17086] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.12960'. [ 3317.717613][T17092] delete_channel: no stack [ 3318.026669][T17110] netlink: 'syz.7.12970': attribute type 20 has an invalid length. [ 3318.396551][T17118] netlink: 'syz.4.12975': attribute type 1 has an invalid length. [ 3318.432548][T17118] netlink: 'syz.4.12975': attribute type 4 has an invalid length. [ 3318.620011][T17126] netlink: 'syz.7.12978': attribute type 10 has an invalid length. [ 3318.668310][T17126] device geneve0 entered promiscuous mode [ 3318.728249][T17126] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 3318.856076][T17126] netlink: 'syz.7.12978': attribute type 21 has an invalid length. [ 3318.873172][T17126] __nla_validate_parse: 8 callbacks suppressed [ 3318.873191][T17126] netlink: 13660 bytes leftover after parsing attributes in process `syz.7.12978'. [ 3319.800864][T17131] delete_channel: no stack [ 3320.034459][T17148] netlink: 'syz.4.12986': attribute type 20 has an invalid length. [ 3320.178486][T17147] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12982'. [ 3320.281720][T17142] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.12983'. [ 3320.297539][T17147] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12982'. [ 3320.308542][T17152] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12982'. [ 3321.444122][T17160] netlink: 'syz.4.12989': attribute type 1 has an invalid length. [ 3321.477226][T17160] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.12989'. [ 3321.508140][T17164] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12991'. [ 3321.866631][T17178] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.12996'. [ 3322.432846][T17176] delete_channel: no stack [ 3322.661769][T17182] validate_nla: 3 callbacks suppressed [ 3322.661794][T17182] netlink: 'syz.5.12997': attribute type 20 has an invalid length. [ 3322.909774][T17189] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.13000'. [ 3323.103365][T17196] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13002'. [ 3323.556743][T17200] netlink: 'syz.4.13004': attribute type 1 has an invalid length. [ 3323.572374][T17200] netlink: 'syz.4.13004': attribute type 4 has an invalid length. [ 3323.651571][T17207] netlink: 'syz.7.13005': attribute type 1 has an invalid length. [ 3323.659748][T17207] netlink: 'syz.7.13005': attribute type 4 has an invalid length. [ 3323.911847][T17214] netlink: 'syz.4.13007': attribute type 6 has an invalid length. [ 3323.952999][T17218] __nla_validate_parse: 5 callbacks suppressed [ 3323.953041][T17218] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.13010'. [ 3323.954441][T17214] netlink: 164 bytes leftover after parsing attributes in process `syz.4.13007'. [ 3324.286012][T17228] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.13011'. [ 3324.407002][T17226] netlink: 'syz.6.13012': attribute type 6 has an invalid length. [ 3324.463872][T17226] netlink: 164 bytes leftover after parsing attributes in process `syz.6.13012'. [ 3324.526010][T17236] netlink: 60 bytes leftover after parsing attributes in process `syz.7.13013'. [ 3324.812043][T17236] netlink: 60 bytes leftover after parsing attributes in process `syz.7.13013'. [ 3324.955645][T17237] netlink: 60 bytes leftover after parsing attributes in process `syz.7.13013'. [ 3325.051998][T17243] netlink: 'syz.3.13016': attribute type 1 has an invalid length. [ 3325.099007][T17243] netlink: 'syz.3.13016': attribute type 4 has an invalid length. [ 3325.288122][T17243] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.13016'. [ 3325.305630][T17241] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.13015'. [ 3325.364918][T17245] netlink: 'syz.5.13017': attribute type 1 has an invalid length. [ 3325.404068][T17245] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.13017'. [ 3327.746207][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.752944][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3328.200143][T17312] validate_nla: 7 callbacks suppressed [ 3328.200184][T17312] netlink: 'syz.7.13039': attribute type 6 has an invalid length. [ 3328.376213][T17321] netlink: 'syz.6.13041': attribute type 29 has an invalid length. [ 3328.901780][T17321] netlink: 'syz.6.13041': attribute type 29 has an invalid length. [ 3328.920820][T17324] netlink: 'syz.5.13043': attribute type 1 has an invalid length. [ 3328.963449][T17324] netlink: 'syz.5.13043': attribute type 4 has an invalid length. [ 3328.992426][T17324] __nla_validate_parse: 13 callbacks suppressed [ 3328.992448][T17324] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.13043'. [ 3329.062666][T17328] netlink: 'syz.3.13042': attribute type 6 has an invalid length. [ 3329.070682][T17328] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13042'. [ 3329.635924][T17334] netlink: 'syz.6.13045': attribute type 21 has an invalid length. [ 3329.876298][T17344] netlink: 'syz.7.13048': attribute type 20 has an invalid length. [ 3330.363000][T17338] delete_channel: no stack [ 3330.751509][T17359] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.13053'. [ 3330.769014][T17359] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 3330.943881][T17367] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13054'. [ 3331.126694][T17367] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13054'. [ 3331.187382][T17369] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13054'. [ 3332.834371][T17389] netlink: 'syz.6.13063': attribute type 20 has an invalid length. [ 3332.863356][T17388] netlink: 'syz.3.13062': attribute type 21 has an invalid length. [ 3333.021025][T17390] delete_channel: no stack [ 3333.512849][T17411] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13071'. [ 3333.522144][T17411] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13071'. [ 3333.559259][T17408] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13071'. [ 3333.642278][T17415] validate_nla: 1 callbacks suppressed [ 3333.642320][T17415] netlink: 'syz.7.13075': attribute type 6 has an invalid length. [ 3333.692620][T17415] netlink: 164 bytes leftover after parsing attributes in process `syz.7.13075'. [ 3333.890950][T17424] netlink: 'syz.4.13077': attribute type 20 has an invalid length. [ 3334.478993][T17436] netlink: 'syz.4.13079': attribute type 25 has an invalid length. [ 3334.614209][T17433] delete_channel: no stack [ 3334.618477][T17431] netlink: 'syz.5.13078': attribute type 21 has an invalid length. [ 3334.831738][T17439] netlink: 144 bytes leftover after parsing attributes in process `syz.6.13080'. [ 3334.960406][T17445] À: port 1(vlan0) entered blocking state [ 3334.970339][T17445] À: port 1(vlan0) entered disabled state [ 3335.032023][T17445] device vlan0 entered promiscuous mode [ 3335.087272][T17449] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13083'. [ 3335.101139][T17449] FAULT_INJECTION: forcing a failure. [ 3335.101139][T17449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3335.127056][T17449] CPU: 1 PID: 17449 Comm: syz.4.13083 Not tainted syzkaller #0 [ 3335.134764][T17449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3335.144866][T17449] Call Trace: [ 3335.148183][T17449] [ 3335.151160][T17449] dump_stack_lvl+0x188/0x24e [ 3335.155894][T17449] ? show_regs_print_info+0x12/0x12 [ 3335.161142][T17449] ? load_image+0x400/0x400 [ 3335.165775][T17449] ? __lock_acquire+0x7d10/0x7d10 [ 3335.170847][T17449] ? snprintf+0xe5/0x140 [ 3335.175133][T17449] should_fail_ex+0x399/0x4d0 [ 3335.179852][T17449] _copy_to_user+0x2c/0x130 [ 3335.184382][T17449] simple_read_from_buffer+0xe3/0x150 [ 3335.189796][T17449] proc_fail_nth_read+0x1a6/0x220 [ 3335.194860][T17449] ? proc_fault_inject_write+0x310/0x310 [ 3335.200517][T17449] ? fsnotify_perm+0x248/0x550 [ 3335.205289][T17449] ? proc_fault_inject_write+0x310/0x310 [ 3335.211009][T17449] vfs_read+0x2de/0xa00 [ 3335.215176][T17449] ? kernel_read+0x1e0/0x1e0 [ 3335.219783][T17449] ? __fget_files+0x28/0x4b0 [ 3335.224377][T17449] ? __fget_files+0x28/0x4b0 [ 3335.229095][T17449] ? __fget_files+0x43d/0x4b0 [ 3335.233783][T17449] ? __fdget_pos+0x2ae/0x360 [ 3335.238378][T17449] ? ksys_read+0x71/0x250 [ 3335.242719][T17449] ksys_read+0x14c/0x250 [ 3335.246970][T17449] ? vfs_write+0xa30/0xa30 [ 3335.251394][T17449] ? lockdep_hardirqs_on+0x94/0x140 [ 3335.256674][T17449] do_syscall_64+0x4c/0xa0 [ 3335.261289][T17449] ? clear_bhb_loop+0x60/0xb0 [ 3335.265970][T17449] ? clear_bhb_loop+0x60/0xb0 [ 3335.270744][T17449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3335.276646][T17449] RIP: 0033:0x7f1c2dd5d04e [ 3335.281150][T17449] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3335.300961][T17449] RSP: 002b:00007f1c2ed3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3335.309523][T17449] RAX: ffffffffffffffda RBX: 00007f1c2ed3f6c0 RCX: 00007f1c2dd5d04e [ 3335.317545][T17449] RDX: 000000000000000f RSI: 00007f1c2ed3f0a0 RDI: 0000000000000004 [ 3335.325567][T17449] RBP: 00007f1c2ed3f090 R08: 0000000000000000 R09: 0000000000000000 [ 3335.333698][T17449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3335.341720][T17449] R13: 00007f1c2e016038 R14: 00007f1c2e015fa0 R15: 00007ffd92708718 [ 3335.349764][T17449] [ 3335.412483][T17458] netlink: 'syz.5.13087': attribute type 21 has an invalid length. [ 3335.420566][T17458] netlink: 'syz.5.13087': attribute type 5 has an invalid length. [ 3335.530775][T17463] netlink: 'syz.4.13089': attribute type 20 has an invalid length. [ 3335.605164][T17465] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13090'. [ 3335.650473][T17467] netlink: 'syz.7.13091': attribute type 6 has an invalid length. [ 3335.666290][T17467] netlink: 164 bytes leftover after parsing attributes in process `syz.7.13091'. [ 3335.714621][T17465] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13090'. [ 3335.746666][T17472] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13090'. [ 3336.111310][T17478] delete_channel: no stack [ 3336.681869][T17486] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13096'. [ 3336.789895][T17487] netlink: 'syz.4.13095': attribute type 21 has an invalid length. [ 3336.798728][T17482] delete_channel: no stack [ 3337.123501][T17501] netlink: 'syz.7.13101': attribute type 39 has an invalid length. [ 3337.266722][T17508] FAULT_INJECTION: forcing a failure. [ 3337.266722][T17508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3337.281256][T17508] CPU: 1 PID: 17508 Comm: syz.3.13113 Not tainted syzkaller #0 [ 3337.288876][T17508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3337.299045][T17508] Call Trace: [ 3337.302354][T17508] [ 3337.305398][T17508] dump_stack_lvl+0x188/0x24e [ 3337.310385][T17508] ? show_regs_print_info+0x12/0x12 [ 3337.315707][T17508] ? load_image+0x400/0x400 [ 3337.320333][T17508] ? __lock_acquire+0x7d10/0x7d10 [ 3337.325400][T17508] ? snprintf+0xe5/0x140 [ 3337.329672][T17508] should_fail_ex+0x399/0x4d0 [ 3337.334381][T17508] _copy_to_user+0x2c/0x130 [ 3337.339013][T17508] simple_read_from_buffer+0xe3/0x150 [ 3337.344425][T17508] proc_fail_nth_read+0x1a6/0x220 [ 3337.349489][T17508] ? proc_fault_inject_write+0x310/0x310 [ 3337.355154][T17508] ? fsnotify_perm+0x248/0x550 [ 3337.359949][T17508] ? proc_fault_inject_write+0x310/0x310 [ 3337.365617][T17508] vfs_read+0x2de/0xa00 [ 3337.369817][T17508] ? kernel_read+0x1e0/0x1e0 [ 3337.374448][T17508] ? __fget_files+0x28/0x4b0 [ 3337.379075][T17508] ? __fget_files+0x28/0x4b0 [ 3337.383703][T17508] ? __fget_files+0x43d/0x4b0 [ 3337.388426][T17508] ? __fdget_pos+0x2ae/0x360 [ 3337.393047][T17508] ? ksys_read+0x71/0x250 [ 3337.397413][T17508] ksys_read+0x14c/0x250 [ 3337.401691][T17508] ? vfs_write+0xa30/0xa30 [ 3337.406174][T17508] ? lockdep_hardirqs_on+0x94/0x140 [ 3337.411414][T17508] do_syscall_64+0x4c/0xa0 [ 3337.415863][T17508] ? clear_bhb_loop+0x60/0xb0 [ 3337.420602][T17508] ? clear_bhb_loop+0x60/0xb0 [ 3337.425404][T17508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3337.431326][T17508] RIP: 0033:0x7fac14f5d04e [ 3337.435854][T17508] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3337.455749][T17508] RSP: 002b:00007fac15da5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3337.464192][T17508] RAX: ffffffffffffffda RBX: 00007fac15da66c0 RCX: 00007fac14f5d04e [ 3337.472359][T17508] RDX: 000000000000000f RSI: 00007fac15da60a0 RDI: 0000000000000004 [ 3337.480353][T17508] RBP: 00007fac15da6090 R08: 0000000000000000 R09: 0000000000000000 [ 3337.488431][T17508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3337.496423][T17508] R13: 00007fac15216038 R14: 00007fac15215fa0 R15: 00007ffdb5e03828 [ 3337.504438][T17508] [ 3337.880388][T17518] FAULT_INJECTION: forcing a failure. [ 3337.880388][T17518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3337.922388][T17518] CPU: 1 PID: 17518 Comm: syz.4.13107 Not tainted syzkaller #0 [ 3337.930045][T17518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3337.940143][T17518] Call Trace: [ 3337.943438][T17518] [ 3337.946382][T17518] dump_stack_lvl+0x188/0x24e [ 3337.951103][T17518] ? show_regs_print_info+0x12/0x12 [ 3337.956353][T17518] ? load_image+0x400/0x400 [ 3337.960926][T17518] ? __lock_acquire+0x7d10/0x7d10 [ 3337.966028][T17518] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 3337.971834][T17518] should_fail_ex+0x399/0x4d0 [ 3337.976591][T17518] _copy_from_user+0x2c/0x170 [ 3337.981346][T17518] ___sys_sendmsg+0x1c3/0x360 [ 3337.986105][T17518] ? __sys_sendmsg+0x290/0x290 [ 3337.990997][T17518] ? __lock_acquire+0x7d10/0x7d10 [ 3337.996132][T17518] __se_sys_sendmsg+0x1bb/0x2a0 [ 3338.001130][T17518] ? __x64_sys_sendmsg+0x80/0x80 [ 3338.006109][T17518] ? lockdep_hardirqs_on+0x94/0x140 [ 3338.011419][T17518] do_syscall_64+0x4c/0xa0 [ 3338.015861][T17518] ? clear_bhb_loop+0x60/0xb0 [ 3338.020558][T17518] ? clear_bhb_loop+0x60/0xb0 [ 3338.025304][T17518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3338.031256][T17518] RIP: 0033:0x7f1c2dd9c819 [ 3338.035728][T17518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3338.055474][T17518] RSP: 002b:00007f1c2ed3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3338.064033][T17518] RAX: ffffffffffffffda RBX: 00007f1c2e015fa0 RCX: 00007f1c2dd9c819 [ 3338.072055][T17518] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 3338.080081][T17518] RBP: 00007f1c2ed3f090 R08: 0000000000000000 R09: 0000000000000000 [ 3338.088191][T17518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3338.096292][T17518] R13: 00007f1c2e016038 R14: 00007f1c2e015fa0 R15: 00007ffd92708718 [ 3338.104351][T17518] [ 3338.519692][T17532] netlink: 60 bytes leftover after parsing attributes in process `syz.7.13110'. [ 3338.580966][T17532] netlink: 60 bytes leftover after parsing attributes in process `syz.7.13110'. [ 3338.593679][T17526] delete_channel: no stack [ 3338.628688][T17529] netlink: 60 bytes leftover after parsing attributes in process `syz.7.13110'. [ 3338.789597][T17536] validate_nla: 1 callbacks suppressed [ 3338.789643][T17536] netlink: 'syz.6.13112': attribute type 6 has an invalid length. [ 3339.396428][T17550] netlink: 'syz.6.13118': attribute type 21 has an invalid length. [ 3339.406548][T17550] netlink: 'syz.6.13118': attribute type 5 has an invalid length. [ 3339.417955][T17555] netlink: 'syz.4.13119': attribute type 29 has an invalid length. [ 3339.432510][T17555] netlink: 'syz.4.13119': attribute type 29 has an invalid length. [ 3339.619914][T17558] nr0: port 1(hsr0) entered blocking state [ 3339.628490][T17559] netlink: 'syz.5.13120': attribute type 2 has an invalid length. [ 3339.651011][T17558] nr0: port 1(hsr0) entered disabled state [ 3340.011362][T17570] netlink: 'syz.5.13125': attribute type 25 has an invalid length. [ 3340.075135][T17569] delete_channel: no stack [ 3340.190754][T17578] netlink: 'syz.6.13129': attribute type 6 has an invalid length. [ 3340.285590][T17578] __nla_validate_parse: 3 callbacks suppressed [ 3340.285635][T17578] netlink: 164 bytes leftover after parsing attributes in process `syz.6.13129'. [ 3340.349612][T17584] FAULT_INJECTION: forcing a failure. [ 3340.349612][T17584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3340.412621][T17584] CPU: 1 PID: 17584 Comm: syz.7.13130 Not tainted syzkaller #0 [ 3340.420271][T17584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3340.430368][T17584] Call Trace: [ 3340.433690][T17584] [ 3340.436658][T17584] dump_stack_lvl+0x188/0x24e [ 3340.441390][T17584] ? show_regs_print_info+0x12/0x12 [ 3340.446645][T17584] ? load_image+0x400/0x400 [ 3340.451286][T17584] ? __lock_acquire+0x7d10/0x7d10 [ 3340.456373][T17584] should_fail_ex+0x399/0x4d0 [ 3340.461093][T17584] _copy_from_user+0x2c/0x170 [ 3340.465798][T17584] __sys_bpf+0x2ea/0x780 [ 3340.470082][T17584] ? bpf_link_show_fdinfo+0x380/0x380 [ 3340.475497][T17584] ? lock_chain_count+0x20/0x20 [ 3340.480382][T17584] __x64_sys_bpf+0x78/0x90 [ 3340.485160][T17584] do_syscall_64+0x4c/0xa0 [ 3340.489599][T17584] ? clear_bhb_loop+0x60/0xb0 [ 3340.494317][T17584] ? clear_bhb_loop+0x60/0xb0 [ 3340.499014][T17584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3340.504925][T17584] RIP: 0033:0x7f3810b9c819 [ 3340.509359][T17584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3340.529069][T17584] RSP: 002b:00007f38119c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3340.537503][T17584] RAX: ffffffffffffffda RBX: 00007f3810e16090 RCX: 00007f3810b9c819 [ 3340.545487][T17584] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 3340.553469][T17584] RBP: 00007f38119c4090 R08: 0000000000000000 R09: 0000000000000000 [ 3340.561450][T17584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3340.569446][T17584] R13: 00007f3810e16128 R14: 00007f3810e16090 R15: 00007ffdf7c83d88 [ 3340.577465][T17584] [ 3343.251023][T17590] netlink: 'syz.7.13133': attribute type 29 has an invalid length. [ 3343.277888][T17594] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13134'. [ 3343.280012][T17590] netlink: 'syz.7.13133': attribute type 29 has an invalid length. [ 3343.320004][T17594] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13134'. [ 3343.358477][T17600] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13134'. [ 3343.388089][T17602] netlink: 156 bytes leftover after parsing attributes in process `syz.6.13136'. [ 3343.851802][T17612] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.13141'. [ 3344.005687][T17620] validate_nla: 1 callbacks suppressed [ 3344.005709][T17620] netlink: 'syz.5.13142': attribute type 25 has an invalid length. [ 3344.048888][T17617] netlink: 172 bytes leftover after parsing attributes in process `syz.7.13143'. [ 3344.066544][T17613] delete_channel: no stack [ 3344.123722][T17619] netlink: 'syz.4.13144': attribute type 21 has an invalid length. [ 3344.381979][T17627] netlink: 'syz.5.13146': attribute type 6 has an invalid length. [ 3344.400759][T17627] netlink: 164 bytes leftover after parsing attributes in process `syz.5.13146'. [ 3344.407761][T17629] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.13147'. [ 3344.759130][T17634] netlink: 'syz.3.13148': attribute type 2 has an invalid length. [ 3344.808062][T17634] netlink: 'syz.3.13148': attribute type 1 has an invalid length. [ 3345.140362][T17646] netlink: 'syz.4.13151': attribute type 29 has an invalid length. [ 3345.193446][T17646] netlink: 'syz.4.13151': attribute type 29 has an invalid length. [ 3345.266926][T17644] FAULT_INJECTION: forcing a failure. [ 3345.266926][T17644] name failslab, interval 1, probability 0, space 0, times 0 [ 3345.297610][T17644] CPU: 1 PID: 17644 Comm: syz.7.13153 Not tainted syzkaller #0 [ 3345.305259][T17644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3345.315447][T17644] Call Trace: [ 3345.318851][T17644] [ 3345.321821][T17644] dump_stack_lvl+0x188/0x24e [ 3345.326559][T17644] ? show_regs_print_info+0x12/0x12 [ 3345.331822][T17644] ? load_image+0x400/0x400 [ 3345.336375][T17644] ? __might_sleep+0xd0/0xd0 [ 3345.341006][T17644] ? __lock_acquire+0x7d10/0x7d10 [ 3345.346078][T17644] should_fail_ex+0x399/0x4d0 [ 3345.350795][T17644] should_failslab+0x5/0x20 [ 3345.355334][T17644] slab_pre_alloc_hook+0x59/0x310 [ 3345.360386][T17644] kmem_cache_alloc_node+0x5a/0x320 [ 3345.365654][T17644] ? __alloc_skb+0xfc/0x7e0 [ 3345.370181][T17644] __alloc_skb+0xfc/0x7e0 [ 3345.374537][T17644] alloc_skb_with_frags+0xa7/0x710 [ 3345.379693][T17644] ? verify_lock_unused+0x140/0x140 [ 3345.385175][T17644] sock_alloc_send_pskb+0x87f/0x9a0 [ 3345.390405][T17644] ? sock_kzfree_s+0x50/0x50 [ 3345.395015][T17644] ? do_raw_spin_lock+0x128/0x2f0 [ 3345.400055][T17644] ? __rwlock_init+0x140/0x140 [ 3345.404924][T17644] ? do_raw_spin_unlock+0x11d/0x230 [ 3345.410169][T17644] unix_dgram_sendmsg+0x539/0x16e0 [ 3345.415340][T17644] ? aa_sk_perm+0x81f/0x950 [ 3345.419878][T17644] ? unix_dgram_poll+0x680/0x680 [ 3345.424868][T17644] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 3345.431419][T17644] ? aa_sock_msg_perm+0x94/0x150 [ 3345.436428][T17644] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 3345.442008][T17644] ? unix_dgram_peer_wake_me+0x430/0x430 [ 3345.447672][T17644] ____sys_sendmsg+0x5be/0x970 [ 3345.452471][T17644] ? __sys_sendmsg_sock+0x30/0x30 [ 3345.457532][T17644] ? __import_iovec+0x315/0x500 [ 3345.462407][T17644] ? import_iovec+0x6f/0xa0 [ 3345.466926][T17644] ___sys_sendmsg+0x2a2/0x360 [ 3345.471626][T17644] ? __sys_sendmsg+0x290/0x290 [ 3345.476453][T17644] __se_sys_sendmsg+0x1bb/0x2a0 [ 3345.481324][T17644] ? ct_nmi_exit+0x145/0x1c0 [ 3345.485942][T17644] ? __x64_sys_sendmsg+0x80/0x80 [ 3345.490911][T17644] ? lockdep_hardirqs_on+0x94/0x140 [ 3345.496135][T17644] do_syscall_64+0x4c/0xa0 [ 3345.500569][T17644] ? clear_bhb_loop+0x60/0xb0 [ 3345.505267][T17644] ? clear_bhb_loop+0x60/0xb0 [ 3345.509960][T17644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3345.515872][T17644] RIP: 0033:0x7f3810b9c819 [ 3345.520301][T17644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3345.539939][T17644] RSP: 002b:00007f38119e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3345.548370][T17644] RAX: ffffffffffffffda RBX: 00007f3810e15fa0 RCX: 00007f3810b9c819 [ 3345.556361][T17644] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000008 [ 3345.564350][T17644] RBP: 00007f38119e5090 R08: 0000000000000000 R09: 0000000000000000 [ 3345.572419][T17644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3345.580491][T17644] R13: 00007f3810e16038 R14: 00007f3810e15fa0 R15: 00007ffdf7c83d88 [ 3345.588573][T17644] [ 3345.943075][T17654] delete_channel: no stack [ 3346.259715][T17665] netlink: 172 bytes leftover after parsing attributes in process `syz.4.13160'. [ 3346.440974][T17672] netlink: 'syz.5.13162': attribute type 8 has an invalid length. [ 3346.457631][T17672] netlink: 156 bytes leftover after parsing attributes in process `syz.5.13162'. [ 3346.770124][T17683] netlink: 'syz.6.13167': attribute type 29 has an invalid length. [ 3346.822678][T17683] netlink: 'syz.6.13167': attribute type 29 has an invalid length. [ 3347.343540][T17695] delete_channel: no stack [ 3347.388917][T17709] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13175'. [ 3347.432544][T17709] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13175'. [ 3347.581604][T17707] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13175'. [ 3347.645160][T17719] FAULT_INJECTION: forcing a failure. [ 3347.645160][T17719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3347.676931][T17719] CPU: 1 PID: 17719 Comm: syz.3.13179 Not tainted syzkaller #0 [ 3347.684566][T17719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3347.694822][T17719] Call Trace: [ 3347.698114][T17719] [ 3347.701139][T17719] dump_stack_lvl+0x188/0x24e [ 3347.705911][T17719] ? show_regs_print_info+0x12/0x12 [ 3347.711209][T17719] ? load_image+0x400/0x400 [ 3347.715713][T17719] ? __lock_acquire+0x7d10/0x7d10 [ 3347.720755][T17719] should_fail_ex+0x399/0x4d0 [ 3347.725452][T17719] _copy_from_user+0x2c/0x170 [ 3347.730185][T17719] __sys_bpf+0x2ea/0x780 [ 3347.734483][T17719] ? bpf_link_show_fdinfo+0x380/0x380 [ 3347.739923][T17719] ? lock_chain_count+0x20/0x20 [ 3347.744921][T17719] __x64_sys_bpf+0x78/0x90 [ 3347.749389][T17719] do_syscall_64+0x4c/0xa0 [ 3347.753854][T17719] ? clear_bhb_loop+0x60/0xb0 [ 3347.758563][T17719] ? clear_bhb_loop+0x60/0xb0 [ 3347.763277][T17719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3347.769199][T17719] RIP: 0033:0x7fac14f9c819 [ 3347.773649][T17719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3347.793483][T17719] RSP: 002b:00007fac15da6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3347.802272][T17719] RAX: ffffffffffffffda RBX: 00007fac15215fa0 RCX: 00007fac14f9c819 [ 3347.810343][T17719] RDX: 000000000000000c RSI: 00002000000001c0 RDI: 000000000000000a [ 3347.818332][T17719] RBP: 00007fac15da6090 R08: 0000000000000000 R09: 0000000000000000 [ 3347.826322][T17719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3347.834308][T17719] R13: 00007fac15216038 R14: 00007fac15215fa0 R15: 00007ffdb5e03828 [ 3347.842305][T17719] [ 3347.873289][T17723] netlink: 164 bytes leftover after parsing attributes in process `syz.4.13180'. [ 3348.375780][T17730] netlink: 172 bytes leftover after parsing attributes in process `syz.3.13182'. [ 3348.881439][T17739] netlink: 164 bytes leftover after parsing attributes in process `syz.5.13186'. [ 3349.497385][T17747] delete_channel: no stack [ 3350.247402][T14661] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3350.248763][T17763] validate_nla: 5 callbacks suppressed [ 3350.248797][T17763] netlink: 'syz.5.13195': attribute type 6 has an invalid length. [ 3350.274366][T14661] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3350.284575][T14661] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3350.299558][T14661] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3350.309225][T14661] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3350.309816][T17763] netlink: 164 bytes leftover after parsing attributes in process `syz.5.13195'. [ 3350.328760][T14661] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3351.016497][T28904] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3351.128643][T17764] chnl_net:caif_netlink_parms(): no params data found [ 3351.276704][T28904] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3351.300717][T17786] netlink: 'syz.5.13202': attribute type 20 has an invalid length. [ 3351.588387][T28904] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3351.604683][T17764] bridge0: port 1(bridge_slave_0) entered blocking state [ 3351.629546][T17764] bridge0: port 1(bridge_slave_0) entered disabled state [ 3351.653746][T17764] device bridge_slave_0 entered promiscuous mode [ 3351.671401][T17805] netlink: 'syz.5.13208': attribute type 6 has an invalid length. [ 3351.690484][T17805] netlink: 164 bytes leftover after parsing attributes in process `syz.5.13208'. [ 3351.742032][T17764] bridge0: port 2(bridge_slave_1) entered blocking state [ 3351.801282][T17764] bridge0: port 2(bridge_slave_1) entered disabled state [ 3351.865092][T17764] device bridge_slave_1 entered promiscuous mode [ 3351.948737][T28904] team0: Port device netdevsim0 removed [ 3352.022470][T28904] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3352.066879][T17812] netlink: 'syz.3.13210': attribute type 6 has an invalid length. [ 3352.074904][T17812] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13210'. [ 3352.176446][T17764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3352.197868][T17764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3352.337540][T17764] team0: Port device team_slave_0 added [ 3352.381071][T17764] team0: Port device team_slave_1 added [ 3352.430815][T28904] device 0 left promiscuous mode [ 3352.462755][ T3980] Bluetooth: hci5: command 0x0409 tx timeout [ 3352.550464][T17764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3352.628386][T17764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3352.706531][T17764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3352.989634][T17764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3353.005909][T17764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3353.230595][T17764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3353.720932][T17764] device hsr_slave_0 entered promiscuous mode [ 3353.750535][T17764] device hsr_slave_1 entered promiscuous mode [ 3353.793501][T17764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3353.818406][T17764] Cannot create hsr debugfs directory [ 3353.840843][T17861] netlink: 144 bytes leftover after parsing attributes in process `syz.5.13227'. [ 3353.928680][T17855] netlink: 'syz.7.13225': attribute type 6 has an invalid length. [ 3353.962590][T17855] netlink: 164 bytes leftover after parsing attributes in process `syz.7.13225'. [ 3354.141721][T17868] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.13227'. [ 3354.542435][ T3980] Bluetooth: hci5: command 0x041b tx timeout [ 3355.732227][T17917] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.13242'. [ 3355.771300][T17918] netlink: 'syz.5.13241': attribute type 6 has an invalid length. [ 3355.840643][T17918] netlink: 164 bytes leftover after parsing attributes in process `syz.5.13241'. [ 3355.966671][T17928] netlink: 60 bytes leftover after parsing attributes in process `syz.7.13243'. [ 3356.109930][T28904] device hsr_slave_0 left promiscuous mode [ 3356.131524][T28904] device hsr_slave_1 left promiscuous mode [ 3356.181881][T28904] device bridge_slave_1 left promiscuous mode [ 3356.192889][T28904] bridge0: port 2(bridge_slave_1) entered disabled state [ 3356.213060][T28904] device bridge_slave_0 left promiscuous mode [ 3356.291310][T28904] bridge0: port 1(bridge_slave_0) entered disabled state [ 3356.497294][T28904] device veth1_macvtap left promiscuous mode [ 3356.513770][T28904] device veth0_macvtap left promiscuous mode [ 3356.534152][T28904] device veth1_vlan left promiscuous mode [ 3356.540074][T28904] device veth0_vlan left promiscuous mode [ 3356.627694][ T3980] Bluetooth: hci5: command 0x040f tx timeout [ 3356.849281][T28904] team0 (unregistering): Port device geneve1 removed [ 3356.922446][T28904] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 3357.513489][T28904] team0 (unregistering): Port device team_slave_1 removed [ 3357.563001][T28904] team0 (unregistering): Port device team_slave_0 removed [ 3357.610550][T28904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3357.939509][T28904] bond0 (unregistering): Released all slaves [ 3358.056829][T17928] netlink: 60 bytes leftover after parsing attributes in process `syz.7.13243'. [ 3358.266087][T17764] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3358.417826][T17947] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.13245'. [ 3358.421493][T17764] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3358.490356][T17764] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3358.563230][T17764] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3358.705970][ T3980] Bluetooth: hci5: command 0x0419 tx timeout [ 3359.105794][T17764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3359.148457][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3359.167170][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3359.213724][T17764] 8021q: adding VLAN 0 to HW filter on device team0 [ 3359.274861][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3359.294461][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3359.336577][ T8502] bridge0: port 1(bridge_slave_0) entered blocking state [ 3359.343847][ T8502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3359.383371][T17968] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.13252'. [ 3359.411750][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3359.442904][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3359.483199][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3359.514692][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 3359.522005][ T8512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3359.576745][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3359.674931][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3359.897721][T17983] netlink: 'syz.5.13256': attribute type 6 has an invalid length. [ 3359.914766][T17983] netlink: 164 bytes leftover after parsing attributes in process `syz.5.13256'. [ 3360.010412][ T8537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3360.040312][ T8537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3360.097369][ T8537] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3360.126394][ T8537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3360.193906][ T8537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3360.203032][ T8537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3360.213937][ T8537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3360.227868][ T8537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3360.243554][ T8537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3360.279484][T17764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3362.103865][T18032] netlink: 'syz.7.13269': attribute type 12 has an invalid length. [ 3362.138809][T18029] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.13267'. [ 3362.143976][T18032] netlink: 132 bytes leftover after parsing attributes in process `syz.7.13269'. [ 3362.248938][T18036] netlink: 'syz.5.13267': attribute type 27 has an invalid length. [ 3362.271042][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3362.300417][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3362.331697][T18040] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.13270'. [ 3362.343226][T18036] netlink: 164 bytes leftover after parsing attributes in process `syz.5.13267'. [ 3362.429940][T18043] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13271'. [ 3362.466916][T18043] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13271'. [ 3362.600091][T17764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3363.295674][T18049] netlink: 'syz.7.13272': attribute type 6 has an invalid length. [ 3363.304720][T18049] netlink: 164 bytes leftover after parsing attributes in process `syz.7.13272'. [ 3363.324445][T18048] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13271'. [ 3363.348897][T18061] device bond_slave_1 entered promiscuous mode [ 3364.188432][T18081] netlink: 'syz.7.13278': attribute type 29 has an invalid length. [ 3364.228352][T18081] netlink: 'syz.7.13278': attribute type 29 has an invalid length. [ 3364.710880][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3364.755524][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3364.884852][T18096] netlink: 'syz.3.13281': attribute type 12 has an invalid length. [ 3364.935393][T18096] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13281'. [ 3365.010859][T17764] device veth0_vlan entered promiscuous mode [ 3365.054116][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3365.081239][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3365.161928][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3365.233453][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3365.276942][T17764] device veth1_vlan entered promiscuous mode [ 3365.401923][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3365.436140][T18105] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.13284'. [ 3365.447865][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3365.521378][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3365.554253][T16660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3365.640949][T17764] device veth0_macvtap entered promiscuous mode [ 3365.662297][T14661] Bluetooth: hci4: command 0x0406 tx timeout [ 3365.799882][T18111] netlink: 'syz.6.13285': attribute type 6 has an invalid length. [ 3365.832724][T18111] netlink: 164 bytes leftover after parsing attributes in process `syz.6.13285'. [ 3365.891870][T17764] device veth1_macvtap entered promiscuous mode [ 3366.620103][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3366.656038][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3366.676803][T17764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3366.710206][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3366.729832][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3366.767592][T17764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3366.836348][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3366.855889][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3366.890860][T17764] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3366.917123][T17764] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3366.929759][T17764] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3366.943642][T17764] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3367.211830][T16660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3367.239337][T16660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3367.254814][T18136] netlink: 'syz.6.13291': attribute type 29 has an invalid length. [ 3367.277556][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3367.299036][T18136] netlink: 'syz.6.13291': attribute type 29 has an invalid length. [ 3367.321853][T28904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3367.357709][T28904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3367.392567][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3367.603770][T18149] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.13294'. [ 3367.688571][T18151] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13188'. [ 3367.842616][T18151] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13188'. [ 3368.348989][T18156] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13188'. [ 3368.979670][T18179] netlink: 'syz.7.13299': attribute type 6 has an invalid length. [ 3368.989410][T18179] netlink: 164 bytes leftover after parsing attributes in process `syz.7.13299'. [ 3370.328992][T18204] netlink: 'syz.3.13305': attribute type 29 has an invalid length. [ 3370.377534][T18211] netlink: 'syz.6.13307': attribute type 6 has an invalid length. [ 3370.422450][T18211] netlink: 164 bytes leftover after parsing attributes in process `syz.6.13307'. [ 3370.448797][T18204] netlink: 'syz.3.13305': attribute type 29 has an invalid length. [ 3370.490672][T18212] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.13308'. [ 3370.525358][T18211] netlink: 'syz.6.13307': attribute type 3 has an invalid length. [ 3370.581231][T18211] netlink: 114680 bytes leftover after parsing attributes in process `syz.6.13307'. [ 3371.351008][T18230] device bond_slave_1 entered promiscuous mode [ 3372.823941][T18251] FAULT_INJECTION: forcing a failure. [ 3372.823941][T18251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3372.880765][T18251] CPU: 1 PID: 18251 Comm: syz.6.13318 Not tainted syzkaller #0 [ 3372.888409][T18251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3372.898669][T18251] Call Trace: [ 3372.902057][T18251] [ 3372.905007][T18251] dump_stack_lvl+0x188/0x24e [ 3372.909786][T18251] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3372.915966][T18251] ? show_regs_print_info+0x12/0x12 [ 3372.921276][T18251] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3372.927453][T18251] should_fail_ex+0x399/0x4d0 [ 3372.932143][T18251] _copy_from_user+0x2c/0x170 [ 3372.936866][T18251] __sys_bpf+0x2ea/0x780 [ 3372.941164][T18251] ? bpf_link_show_fdinfo+0x380/0x380 [ 3372.946694][T18251] ? lock_chain_count+0x20/0x20 [ 3372.951601][T18251] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3372.957644][T18251] __x64_sys_bpf+0x78/0x90 [ 3372.962109][T18251] do_syscall_64+0x4c/0xa0 [ 3372.966567][T18251] ? clear_bhb_loop+0x60/0xb0 [ 3372.971267][T18251] ? clear_bhb_loop+0x60/0xb0 [ 3372.975970][T18251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3372.981971][T18251] RIP: 0033:0x7fb55119c819 [ 3372.986556][T18251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3373.006357][T18251] RSP: 002b:00007fb5520a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3373.014792][T18251] RAX: ffffffffffffffda RBX: 00007fb551415fa0 RCX: 00007fb55119c819 [ 3373.022813][T18251] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 3373.030829][T18251] RBP: 00007fb5520a8090 R08: 0000000000000000 R09: 0000000000000000 [ 3373.038826][T18251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3373.046825][T18251] R13: 00007fb551416038 R14: 00007fb551415fa0 R15: 00007ffd7111f858 [ 3373.054827][T18251] [ 3373.179746][T18257] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.13321'. [ 3373.320472][T18255] netlink: 14 bytes leftover after parsing attributes in process `syz.7.13319'. [ 3373.322654][T18259] netlink: 'syz.3.13320': attribute type 29 has an invalid length. [ 3373.407535][T18255] device hsr_slave_0 left promiscuous mode [ 3373.427556][T18255] device hsr_slave_1 left promiscuous mode [ 3373.574857][T18259] netlink: 'syz.3.13320': attribute type 29 has an invalid length. [ 3373.592487][T18265] netlink: 830 bytes leftover after parsing attributes in process `syz.6.13322'. [ 3375.579954][T18303] netlink: 'syz.5.13334': attribute type 29 has an invalid length. [ 3375.609299][T18303] netlink: 'syz.5.13334': attribute type 29 has an invalid length. [ 3375.609526][T18299] delete_channel: no stack [ 3375.830830][T18313] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.13337'. [ 3376.472989][T18328] netlink: 830 bytes leftover after parsing attributes in process `syz.3.13342'. [ 3376.696748][T18321] netlink: 'syz.7.13333': attribute type 21 has an invalid length. [ 3376.714633][T18333] netlink: 'syz.4.13344': attribute type 3 has an invalid length. [ 3376.722829][T18333] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.13344'. [ 3377.178113][T18349] netlink: 'syz.5.13347': attribute type 25 has an invalid length. [ 3377.347096][T18344] delete_channel: no stack [ 3377.669259][T18354] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13350'. [ 3378.745515][T18375] netlink: 'syz.5.13357': attribute type 3 has an invalid length. [ 3378.766687][T18375] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.13357'. [ 3378.892192][ T3980] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3378.904502][ T3980] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3378.913049][ T3980] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3378.924618][ T3980] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3378.933000][ T3980] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3378.940912][ T3980] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3379.794729][T18393] netlink: 'syz.4.13361': attribute type 6 has an invalid length. [ 3379.815426][T18391] netlink: 'syz.7.13363': attribute type 3 has an invalid length. [ 3379.844287][T18393] netlink: 164 bytes leftover after parsing attributes in process `syz.4.13361'. [ 3379.877665][T18377] chnl_net:caif_netlink_parms(): no params data found [ 3379.899638][T18391] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.13363'. [ 3379.928964][T18385] netlink: 'syz.5.13359': attribute type 21 has an invalid length. [ 3380.415461][T18400] delete_channel: no stack [ 3380.548751][T18377] bridge0: port 1(bridge_slave_0) entered blocking state [ 3380.559098][T18377] bridge0: port 1(bridge_slave_0) entered disabled state [ 3380.568501][T18377] device bridge_slave_0 entered promiscuous mode [ 3380.581405][T18377] bridge0: port 2(bridge_slave_1) entered blocking state [ 3380.589610][T18377] bridge0: port 2(bridge_slave_1) entered disabled state [ 3380.602614][T18377] device bridge_slave_1 entered promiscuous mode [ 3380.646918][T18377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3380.667075][T18377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3380.770417][T18377] team0: Port device team_slave_0 added [ 3380.789702][T18377] team0: Port device team_slave_1 added [ 3380.857333][T18377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3380.991717][T18377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3381.022317][T14661] Bluetooth: hci0: command 0x0409 tx timeout [ 3381.082285][T18377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3381.101700][T18377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3381.119428][T18377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3381.172955][T18377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3381.468634][T18377] device hsr_slave_0 entered promiscuous mode [ 3381.489551][T18377] device hsr_slave_1 entered promiscuous mode [ 3382.038806][T18377] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3382.224865][T18377] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3382.502716][T18377] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3382.769817][T18442] netlink: 'syz.4.13376': attribute type 25 has an invalid length. [ 3382.852959][T18440] delete_channel: no stack [ 3383.016888][T18377] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3383.103271][T14661] Bluetooth: hci0: command 0x041b tx timeout [ 3383.514961][T18377] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3383.568967][T18377] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3383.629427][T18377] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3383.741997][T18377] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3383.821472][T18459] netlink: 'syz.5.13381': attribute type 3 has an invalid length. [ 3383.840334][T18455] netlink: 'syz.3.13379': attribute type 21 has an invalid length. [ 3383.861168][T18459] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.13381'. [ 3384.351595][T18377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3384.418844][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3384.453301][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3384.764040][T18377] 8021q: adding VLAN 0 to HW filter on device team0 [ 3384.902576][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3384.933324][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3385.026656][T28904] bridge0: port 1(bridge_slave_0) entered blocking state [ 3385.033956][T28904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3385.089661][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3385.144165][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3385.181108][T28904] bridge0: port 2(bridge_slave_1) entered blocking state [ 3385.188420][T28904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3385.200882][T14661] Bluetooth: hci0: command 0x040f tx timeout [ 3385.402504][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3385.436021][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3385.617273][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3385.698536][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3385.824571][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3385.929040][T18377] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3385.994195][T18377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3386.090790][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3386.110265][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3386.164886][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3386.196085][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3386.227852][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3386.267507][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3386.305208][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3386.357426][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3387.257474][T18493] netlink: 'syz.3.13387': attribute type 1 has an invalid length. [ 3387.266220][ T3980] Bluetooth: hci0: command 0x0419 tx timeout [ 3387.437739][T18493] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.13387'. [ 3387.734665][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3387.765855][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3387.808611][T18499] netlink: 'syz.7.13389': attribute type 6 has an invalid length. [ 3387.841482][T18499] netlink: 164 bytes leftover after parsing attributes in process `syz.7.13389'. [ 3387.896612][T18377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3388.521853][T18520] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.13394'. [ 3388.552407][T18520] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.13394'. [ 3389.185918][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.192491][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.777614][T18534] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13398'. [ 3390.012487][T18536] 8021q: adding VLAN 0 to HW filter on device team0 [ 3390.172370][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3390.196764][T28904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3390.415008][T18377] device veth0_vlan entered promiscuous mode [ 3390.472062][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3390.501906][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3390.524312][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3390.562028][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3390.678293][T18547] netlink: 'syz.4.13402': attribute type 6 has an invalid length. [ 3390.714381][T18547] netlink: 164 bytes leftover after parsing attributes in process `syz.4.13402'. [ 3390.899458][T18555] netlink: 'syz.3.13403': attribute type 6 has an invalid length. [ 3390.928894][T18555] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13403'. [ 3390.957707][T18377] device veth1_vlan entered promiscuous mode [ 3390.993933][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3391.111246][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3391.133333][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3391.191108][T18377] device veth0_macvtap entered promiscuous mode [ 3391.215239][T18377] device veth1_macvtap entered promiscuous mode [ 3391.260479][T18377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3391.281896][T18377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3391.334099][T18377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3391.352591][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3391.422507][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3391.482559][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3391.521413][T29881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3391.598181][T18377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3391.640496][T18565] FAULT_INJECTION: forcing a failure. [ 3391.640496][T18565] name failslab, interval 1, probability 0, space 0, times 0 [ 3391.689448][T18377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3391.713785][T18377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3391.726370][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3391.740663][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3391.743116][T18565] CPU: 1 PID: 18565 Comm: syz.3.13407 Not tainted syzkaller #0 [ 3391.756462][T18565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3391.763784][T18569] netlink: 'syz.4.13408': attribute type 29 has an invalid length. [ 3391.766667][T18565] Call Trace: [ 3391.766682][T18565] [ 3391.777402][T18569] netlink: 'syz.4.13408': attribute type 29 has an invalid length. [ 3391.777861][T18565] dump_stack_lvl+0x188/0x24e [ 3391.793463][T18565] ? fib_rules_lookup+0x98/0xb40 [ 3391.798460][T18565] ? show_regs_print_info+0x12/0x12 [ 3391.803724][T18565] ? load_image+0x400/0x400 [ 3391.808279][T18565] ? fib_rules_lookup+0x98/0xb40 [ 3391.813272][T18565] ? fib_rules_unregister+0x340/0x340 [ 3391.818703][T18565] should_fail_ex+0x399/0x4d0 [ 3391.823445][T18565] should_failslab+0x5/0x20 [ 3391.827994][T18565] slab_pre_alloc_hook+0x59/0x310 [ 3391.833078][T18565] ? find_exception+0x171/0xa30 [ 3391.837985][T18565] kmem_cache_alloc+0x56/0x2f0 [ 3391.842800][T18565] ? dst_alloc+0x101/0x160 [ 3391.847264][T18565] dst_alloc+0x101/0x160 [ 3391.851575][T18565] ip_route_output_key_hash_rcu+0x14a4/0x23f0 [ 3391.857670][T18565] ? ip_route_output_key_hash+0x139/0x330 [ 3391.863410][T18565] ip_route_output_key_hash+0x1ef/0x330 [ 3391.868971][T18565] ? ip_route_input_rcu+0x3160/0x3160 [ 3391.874359][T18565] ? is_bpf_text_address+0x22/0x2a0 [ 3391.879582][T18565] tcp_v4_connect+0x6d9/0x18e0 [ 3391.884451][T18565] ? preempt_count_add+0x8d/0x190 [ 3391.889512][T18565] ? tcp_twsk_unique+0x990/0x990 [ 3391.894478][T18565] ? unwind_get_return_address+0x49/0x80 [ 3391.900134][T18565] ? stack_trace_save+0xf0/0xf0 [ 3391.905012][T18565] ? tcp_v6_connect+0x6c6/0x18c0 [ 3391.909977][T18565] tcp_v6_connect+0xb0c/0x18c0 [ 3391.914770][T18565] ? tcp_v6_pre_connect+0xf0/0xf0 [ 3391.919824][T18565] ? __se_sys_sendmsg+0x1bb/0x2a0 [ 3391.924893][T18565] ? do_syscall_64+0x4c/0xa0 [ 3391.929509][T18565] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3391.935797][T18565] __inet_stream_connect+0x242/0xe10 [ 3391.941117][T18565] ? inet_dgram_connect+0x360/0x360 [ 3391.946363][T18565] tcp_sendmsg_fastopen+0x38f/0x600 [ 3391.951785][T18565] tcp_sendmsg_locked+0x3616/0x3a90 [ 3391.957025][T18565] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 3391.963636][T18565] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 3391.970255][T18565] ? mark_lock+0x94/0x320 [ 3391.974608][T18565] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3391.980636][T18565] ? lock_chain_count+0x20/0x20 [ 3391.985514][T18565] ? tcp_set_state+0x520/0x520 [ 3391.990490][T18565] tcp_sendmsg+0x2b/0x40 [ 3391.994757][T18565] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 3391.999976][T18565] ____sys_sendmsg+0x5be/0x970 [ 3392.004770][T18565] ? __sys_sendmsg_sock+0x30/0x30 [ 3392.009815][T18565] ? __import_iovec+0x315/0x500 [ 3392.014701][T18565] ? import_iovec+0x6f/0xa0 [ 3392.019310][T18565] ___sys_sendmsg+0x2a2/0x360 [ 3392.024127][T18565] ? __sys_sendmsg+0x290/0x290 [ 3392.029031][T18565] ? __lock_acquire+0x7d10/0x7d10 [ 3392.034116][T18565] __se_sys_sendmsg+0x1bb/0x2a0 [ 3392.039094][T18565] ? __x64_sys_sendmsg+0x80/0x80 [ 3392.044171][T18565] ? lockdep_hardirqs_on+0x94/0x140 [ 3392.049402][T18565] do_syscall_64+0x4c/0xa0 [ 3392.054018][T18565] ? clear_bhb_loop+0x60/0xb0 [ 3392.058717][T18565] ? clear_bhb_loop+0x60/0xb0 [ 3392.063521][T18565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3392.069465][T18565] RIP: 0033:0x7fac14f9c819 [ 3392.073911][T18565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3392.093578][T18565] RSP: 002b:00007fac15da6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3392.102113][T18565] RAX: ffffffffffffffda RBX: 00007fac15215fa0 RCX: 00007fac14f9c819 [ 3392.110106][T18565] RDX: 0000000024044051 RSI: 0000200000000000 RDI: 0000000000000003 [ 3392.118104][T18565] RBP: 00007fac15da6090 R08: 0000000000000000 R09: 0000000000000000 [ 3392.126104][T18565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3392.134202][T18565] R13: 00007fac15216038 R14: 00007fac15215fa0 R15: 00007ffdb5e03828 [ 3392.142217][T18565] [ 3392.156906][T18377] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3392.176043][T18560] delete_channel: no stack [ 3392.181079][T18377] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3392.210876][T18377] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3392.231140][T18377] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3392.319993][T18578] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.13410'. [ 3392.562762][T29881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3392.570833][T29881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3392.644338][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3392.687169][ T8508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3392.707573][ T8508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3392.736037][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3393.080438][T18588] 8021q: adding VLAN 0 to HW filter on device team0 [ 3393.463653][T18598] netlink: 'syz.6.13416': attribute type 6 has an invalid length. [ 3393.502714][T18598] netlink: 164 bytes leftover after parsing attributes in process `syz.6.13416'. [ 3393.863839][T18601] netlink: 'syz.3.13418': attribute type 6 has an invalid length. [ 3394.000836][T18601] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13418'. [ 3395.268843][ T3980] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 3395.279160][ T3980] Bluetooth: hci4: Injecting HCI hardware error event [ 3395.287598][ T3980] Bluetooth: hci4: hardware error 0x00 [ 3396.098030][T18631] netlink: 'syz.6.13425': attribute type 6 has an invalid length. [ 3396.115250][T18631] netlink: 164 bytes leftover after parsing attributes in process `syz.6.13425'. [ 3396.302606][T18637] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13427'. [ 3397.672376][ T3980] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 3398.521057][T18674] netlink: 'syz.7.13436': attribute type 6 has an invalid length. [ 3398.537416][T18674] netlink: 164 bytes leftover after parsing attributes in process `syz.7.13436'. [ 3398.893847][T18687] netlink: 'syz.3.13441': attribute type 29 has an invalid length. [ 3398.925988][T18687] netlink: 'syz.3.13441': attribute type 29 has an invalid length. [ 3398.937766][T18685] netlink: 'syz.3.13441': attribute type 29 has an invalid length. [ 3399.908578][T18698] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13442'. [ 3402.280614][T18695] netlink: 'syz.5.13443': attribute type 6 has an invalid length. [ 3402.288931][T18695] netlink: 164 bytes leftover after parsing attributes in process `syz.5.13443'. [ 3402.815196][T18714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13447'. [ 3402.872733][T18714] tc_dump_action: action bad kind [ 3403.876829][T18735] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13455'. [ 3407.480029][T18741] netlink: 'syz.4.13456': attribute type 10 has an invalid length. [ 3407.490223][T18745] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13456'. [ 3407.539132][T18745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3407.555386][T18745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3407.570913][T18745] bond0 (unregistering): Released all slaves [ 3407.581684][T18757] netlink: 'syz.6.13458': attribute type 6 has an invalid length. [ 3407.590436][T18757] netlink: 164 bytes leftover after parsing attributes in process `syz.6.13458'. [ 3408.515814][T18784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3408.528661][T18784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3408.529017][T18791] FAULT_INJECTION: forcing a failure. [ 3408.529017][T18791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3408.549385][T18791] CPU: 0 PID: 18791 Comm: syz.3.13469 Not tainted syzkaller #0 [ 3408.557232][T18791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3408.567471][T18791] Call Trace: [ 3408.570780][T18791] [ 3408.573722][T18791] dump_stack_lvl+0x188/0x24e [ 3408.578432][T18791] ? show_regs_print_info+0x12/0x12 [ 3408.583653][T18791] ? load_image+0x400/0x400 [ 3408.588209][T18791] ? folio_mark_accessed+0x327/0x1460 [ 3408.593631][T18791] ? folio_activate_fn+0x2000/0x2000 [ 3408.598934][T18791] ? lockdep_hardirqs_on+0x94/0x140 [ 3408.604186][T18791] should_fail_ex+0x399/0x4d0 [ 3408.608902][T18791] copy_page_from_iter_atomic+0x21e/0x1280 [ 3408.614742][T18791] ? pipe_zero+0x140/0x140 [ 3408.619195][T18791] ? PageHeadHuge+0x8f/0x1c0 [ 3408.623821][T18791] ? shmem_write_begin+0x1b4/0x3f0 [ 3408.628967][T18791] generic_perform_write+0x34f/0x5c0 [ 3408.634283][T18791] ? generic_file_direct_write+0x330/0x330 [ 3408.640102][T18791] ? __file_remove_privs+0x5f0/0x5f0 [ 3408.645397][T18791] ? rwsem_write_trylock+0x135/0x1c0 [ 3408.650692][T18791] ? clear_nonspinnable+0x60/0x60 [ 3408.655726][T18791] ? generic_write_checks_count+0x3d9/0x4c0 [ 3408.661637][T18791] __generic_file_write_iter+0x148/0x2a0 [ 3408.667327][T18791] generic_file_write_iter+0xab/0x2e0 [ 3408.672759][T18791] vfs_write+0x4b1/0xa30 [ 3408.677036][T18791] ? file_end_write+0x250/0x250 [ 3408.681909][T18791] ? __fget_files+0x43d/0x4b0 [ 3408.686602][T18791] ? __fdget_pos+0x2ae/0x360 [ 3408.691224][T18791] ? ksys_write+0x71/0x250 [ 3408.695785][T18791] ksys_write+0x14c/0x250 [ 3408.700132][T18791] ? __ia32_sys_read+0x80/0x80 [ 3408.704936][T18791] ? lockdep_hardirqs_on+0x94/0x140 [ 3408.710241][T18791] do_syscall_64+0x4c/0xa0 [ 3408.714733][T18791] ? clear_bhb_loop+0x60/0xb0 [ 3408.719440][T18791] ? clear_bhb_loop+0x60/0xb0 [ 3408.724141][T18791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3408.730066][T18791] RIP: 0033:0x7fac14f9c819 [ 3408.734580][T18791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3408.754287][T18791] RSP: 002b:00007fac15da6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3408.762805][T18791] RAX: ffffffffffffffda RBX: 00007fac15215fa0 RCX: 00007fac14f9c819 [ 3408.770804][T18791] RDX: 0000000000040001 RSI: 0000200000000180 RDI: 0000000000000004 [ 3408.778864][T18791] RBP: 00007fac15da6090 R08: 0000000000000000 R09: 0000000000000000 [ 3408.786926][T18791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3408.794908][T18791] R13: 00007fac15216038 R14: 00007fac15215fa0 R15: 00007ffdb5e03828 [ 3408.803019][T18791] [ 3408.844327][T18784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3408.878955][T18784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3409.050926][T18795] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13471'. [ 3411.684597][T18799] netlink: 'syz.6.13473': attribute type 10 has an invalid length. [ 3411.712405][T18804] netlink: 14 bytes leftover after parsing attributes in process `syz.6.13473'. [ 3411.841036][T18804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3411.871356][T18804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3411.894342][T18804] bond0 (unregistering): Released all slaves [ 3412.091151][T29881] nr0: port 1(hsr0) entered disabled state [ 3412.122442][T29881] device hsr_slave_0 left promiscuous mode [ 3412.143588][T29881] device hsr_slave_1 left promiscuous mode [ 3412.234923][T29881] device veth1_macvtap left promiscuous mode [ 3412.241028][T29881] device veth0_macvtap left promiscuous mode [ 3412.490798][T18835] FAULT_INJECTION: forcing a failure. [ 3412.490798][T18835] name failslab, interval 1, probability 0, space 0, times 0 [ 3412.503930][T18835] CPU: 0 PID: 18835 Comm: syz.3.13484 Not tainted syzkaller #0 [ 3412.511505][T18835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3412.521681][T18835] Call Trace: [ 3412.525078][T18835] [ 3412.528057][T18835] dump_stack_lvl+0x188/0x24e [ 3412.532782][T18835] ? show_regs_print_info+0x12/0x12 [ 3412.538039][T18835] ? load_image+0x400/0x400 [ 3412.542604][T18835] ? skb_network_protocol+0x525/0x780 [ 3412.548047][T18835] should_fail_ex+0x399/0x4d0 [ 3412.552790][T18835] should_failslab+0x5/0x20 [ 3412.557342][T18835] slab_pre_alloc_hook+0x59/0x310 [ 3412.562522][T18835] kmem_cache_alloc+0x56/0x2f0 [ 3412.567365][T18835] ? skb_clone+0x1e7/0x370 [ 3412.571869][T18835] skb_clone+0x1e7/0x370 [ 3412.576167][T18835] ? dev_queue_xmit_nit+0x20e/0xbb0 [ 3412.581422][T18835] dev_queue_xmit_nit+0x249/0xbb0 [ 3412.586499][T18835] ? dev_queue_xmit_nit+0x29/0xbb0 [ 3412.591742][T18835] dev_hard_start_xmit+0x154/0x870 [ 3412.596907][T18835] __dev_queue_xmit+0x1aa3/0x37c0 [ 3412.601977][T18835] ? __dev_queue_xmit+0x26b/0x37c0 [ 3412.607125][T18835] ? netdev_core_pick_tx+0x340/0x340 [ 3412.612732][T18835] ? skb_release_data+0x1d2/0x7c0 [ 3412.617849][T18835] __bpf_redirect+0x917/0x1180 [ 3412.622668][T18835] bpf_clone_redirect+0x30b/0x4a0 [ 3412.627724][T18835] bpf_prog_da1e0ee5f8d5c8f5+0x55/0x5a [ 3412.633224][T18835] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3412.639252][T18835] ? lock_chain_count+0x20/0x20 [ 3412.644142][T18835] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 3412.650410][T18835] ? lockdep_hardirqs_on+0x94/0x140 [ 3412.655634][T18835] ? ktime_get+0x7b/0x270 [ 3412.659988][T18835] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 3412.666269][T18835] ? ktime_get_real_ts64+0x440/0x440 [ 3412.671592][T18835] ? read_lock_is_recursive+0x10/0x10 [ 3412.677125][T18835] bpf_test_run+0x4c1/0x830 [ 3412.681751][T18835] ? convert___skb_to_skb+0x580/0x580 [ 3412.687140][T18835] ? eth_get_headlen+0x200/0x200 [ 3412.692091][T18835] ? __build_skb+0x257/0x3c0 [ 3412.696707][T18835] ? bpf_prog_test_run_skb+0x773/0x12a0 [ 3412.702272][T18835] ? convert___skb_to_skb+0x3d/0x580 [ 3412.707598][T18835] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 3412.713000][T18835] ? cpu_online+0xa0/0xa0 [ 3412.717346][T18835] bpf_prog_test_run+0x31e/0x390 [ 3412.722392][T18835] __sys_bpf+0x62b/0x780 [ 3412.726659][T18835] ? bpf_link_show_fdinfo+0x380/0x380 [ 3412.732059][T18835] ? lock_chain_count+0x20/0x20 [ 3412.736933][T18835] __x64_sys_bpf+0x78/0x90 [ 3412.741371][T18835] do_syscall_64+0x4c/0xa0 [ 3412.745803][T18835] ? clear_bhb_loop+0x60/0xb0 [ 3412.750495][T18835] ? clear_bhb_loop+0x60/0xb0 [ 3412.755192][T18835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3412.761097][T18835] RIP: 0033:0x7fac14f9c819 [ 3412.765525][T18835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3412.785447][T18835] RSP: 002b:00007fac15da6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3412.793978][T18835] RAX: ffffffffffffffda RBX: 00007fac15215fa0 RCX: 00007fac14f9c819 [ 3412.801968][T18835] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 3412.810044][T18835] RBP: 00007fac15da6090 R08: 0000000000000000 R09: 0000000000000000 [ 3412.818121][T18835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3412.826107][T18835] R13: 00007fac15216038 R14: 00007fac15215fa0 R15: 00007ffdb5e03828 [ 3412.834103][T18835] [ 3413.131748][T18841] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13486'. [ 3413.530691][T29881] team0 (unregistering): Port device team_slave_1 removed [ 3413.587677][T29881] team0 (unregistering): Port device team_slave_0 removed [ 3413.642412][T29881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3413.997826][T29881] bond0 (unregistering): Released all slaves [ 3414.410112][T18858] netlink: 'syz.7.13491': attribute type 10 has an invalid length. [ 3414.436951][T18861] netlink: 'syz.3.13490': attribute type 6 has an invalid length. [ 3414.459074][T18861] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13490'. [ 3414.480460][T18858] netlink: 14 bytes leftover after parsing attributes in process `syz.7.13491'. [ 3414.793987][T18858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3414.821915][T18858] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 3414.852086][T18858] bond0 (unregistering): Released all slaves [ 3415.475755][T18880] FAULT_INJECTION: forcing a failure. [ 3415.475755][T18880] name failslab, interval 1, probability 0, space 0, times 0 [ 3415.584042][T18880] CPU: 0 PID: 18880 Comm: syz.6.13498 Not tainted syzkaller #0 [ 3415.591784][T18880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3415.601869][T18880] Call Trace: [ 3415.605173][T18880] [ 3415.608131][T18880] dump_stack_lvl+0x188/0x24e [ 3415.612852][T18880] ? show_regs_print_info+0x12/0x12 [ 3415.618088][T18880] ? load_image+0x400/0x400 [ 3415.622635][T18880] ? __might_sleep+0xd0/0xd0 [ 3415.627264][T18880] ? __lock_acquire+0x7d10/0x7d10 [ 3415.632498][T18880] should_fail_ex+0x399/0x4d0 [ 3415.637214][T18880] should_failslab+0x5/0x20 [ 3415.641753][T18880] slab_pre_alloc_hook+0x59/0x310 [ 3415.646810][T18880] ? do_syscall_64+0x4c/0xa0 [ 3415.651615][T18880] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3415.657729][T18880] kmem_cache_alloc_node+0x5a/0x320 [ 3415.662959][T18880] ? __alloc_skb+0xfc/0x7e0 [ 3415.667512][T18880] __alloc_skb+0xfc/0x7e0 [ 3415.671997][T18880] netlink_dump+0x1ee/0xd00 [ 3415.676545][T18880] ? apparmor_capable+0x12c/0x190 [ 3415.681623][T18880] ? bpf_lsm_capable+0x5/0x10 [ 3415.686339][T18880] ? netlink_lookup+0x200/0x200 [ 3415.691247][T18880] ? __inet_diag_dump_start+0x805/0x970 [ 3415.696849][T18880] __netlink_dump_start+0x537/0x6f0 [ 3415.702098][T18880] inet_diag_rcv_msg_compat+0x207/0x420 [ 3415.707687][T18880] ? __inet_diag_dump+0x380/0x380 [ 3415.712792][T18880] ? sock_diag_rcv_msg+0x142/0x5f0 [ 3415.717941][T18880] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 3415.723811][T18880] ? inet_diag_dump_start_compat+0x20/0x20 [ 3415.729934][T18880] ? inet_diag_dump+0x50/0x50 [ 3415.734666][T18880] ? __inet_diag_dump+0x380/0x380 [ 3415.739725][T18880] sock_diag_rcv_msg+0x3cc/0x5f0 [ 3415.744727][T18880] netlink_rcv_skb+0x1fb/0x450 [ 3415.749542][T18880] ? sock_diag_bind+0xa0/0xa0 [ 3415.754267][T18880] ? netlink_ack+0x1170/0x1170 [ 3415.759081][T18880] ? netlink_deliver_tap+0x2e/0x1b0 [ 3415.764325][T18880] sock_diag_rcv+0x26/0x40 [ 3415.768800][T18880] netlink_unicast+0x74d/0x8d0 [ 3415.773794][T18880] netlink_sendmsg+0x8ad/0xbd0 [ 3415.778613][T18880] ? netlink_getsockopt+0x550/0x550 [ 3415.783873][T18880] ? aa_sock_msg_perm+0x94/0x150 [ 3415.788852][T18880] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3415.794179][T18880] ? security_socket_sendmsg+0x7c/0xa0 [ 3415.799679][T18880] ? netlink_getsockopt+0x550/0x550 [ 3415.804916][T18880] ____sys_sendmsg+0x5be/0x970 [ 3415.809818][T18880] ? __sys_sendmsg_sock+0x30/0x30 [ 3415.814299][T18883] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.13500'. [ 3415.814870][T18880] ? __import_iovec+0x315/0x500 [ 3415.829321][T18880] ? import_iovec+0x6f/0xa0 [ 3415.833865][T18880] ___sys_sendmsg+0x2a2/0x360 [ 3415.838602][T18880] ? __sys_sendmsg+0x290/0x290 [ 3415.843429][T18880] ? __lock_acquire+0x7d10/0x7d10 [ 3415.848524][T18880] __se_sys_sendmsg+0x1bb/0x2a0 [ 3415.853419][T18880] ? __x64_sys_sendmsg+0x80/0x80 [ 3415.858428][T18880] ? lockdep_hardirqs_on+0x94/0x140 [ 3415.863659][T18880] do_syscall_64+0x4c/0xa0 [ 3415.868109][T18880] ? clear_bhb_loop+0x60/0xb0 [ 3415.872822][T18880] ? clear_bhb_loop+0x60/0xb0 [ 3415.877549][T18880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3415.883481][T18880] RIP: 0033:0x7feb50f9c819 [ 3415.887935][T18880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3415.907608][T18880] RSP: 002b:00007feb51ded028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3415.916153][T18880] RAX: ffffffffffffffda RBX: 00007feb51215fa0 RCX: 00007feb50f9c819 [ 3415.924261][T18880] RDX: 0000000020040842 RSI: 00002000000001c0 RDI: 0000000000000003 [ 3415.932356][T18880] RBP: 00007feb51ded090 R08: 0000000000000000 R09: 0000000000000000 [ 3415.940375][T18880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3415.948398][T18880] R13: 00007feb51216038 R14: 00007feb51215fa0 R15: 00007ffe4cd925c8 [ 3415.956422][T18880] [ 3416.928162][T18906] netlink: 'syz.7.13505': attribute type 29 has an invalid length. [ 3416.962042][T18906] netlink: 'syz.7.13505': attribute type 29 has an invalid length. [ 3417.165073][T18902] netlink: 'syz.7.13505': attribute type 29 has an invalid length. [ 3417.217453][T18914] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13508'. [ 3417.281918][T18916] netlink: 'syz.6.13509': attribute type 6 has an invalid length. [ 3417.319126][T18916] netlink: 164 bytes leftover after parsing attributes in process `syz.6.13509'. [ 3417.424351][T18920] netlink: 'syz.7.13510': attribute type 7 has an invalid length. [ 3417.474381][T18920] netlink: 'syz.7.13510': attribute type 21 has an invalid length. [ 3417.800801][T18925] netlink: 'syz.5.13511': attribute type 25 has an invalid length. [ 3417.850413][T18923] delete_channel: no stack [ 3418.233490][T18929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3418.253573][T18929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3418.399836][T18929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3418.432927][T18929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3418.790718][T18949] netlink: 'syz.7.13520': attribute type 29 has an invalid length. [ 3418.794903][T18946] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.13521'. [ 3419.759296][T18949] netlink: 'syz.7.13520': attribute type 29 has an invalid length. [ 3419.805011][T18953] netlink: 'syz.5.13522': attribute type 25 has an invalid length. [ 3419.823269][T18951] delete_channel: no stack [ 3419.916268][T18954] delete_channel: no stack [ 3420.671721][T18965] device syzkaller0 entered promiscuous mode [ 3421.373951][T18989] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.13534'. [ 3423.702225][T18979] netlink: 'syz.5.13530': attribute type 27 has an invalid length. [ 3423.790560][T18979] bond0: (slave bond_slave_0): Releasing backup interface [ 3423.829921][T19003] netlink: 'syz.4.13535': attribute type 29 has an invalid length. [ 3423.843841][T19003] netlink: 'syz.4.13535': attribute type 29 has an invalid length. [ 3423.855598][T18986] netlink: 'syz.6.13533': attribute type 7 has an invalid length. [ 3423.868931][T18987] netlink: 'syz.6.13533': attribute type 21 has an invalid length. [ 3423.888401][T19000] netlink: 'syz.4.13535': attribute type 29 has an invalid length. [ 3423.923450][T19001] delete_channel: no stack [ 3424.107304][T19014] netlink: 'syz.5.13547': attribute type 29 has an invalid length. [ 3424.161657][T19014] netlink: 'syz.5.13547': attribute type 29 has an invalid length. [ 3424.262481][T19011] delete_channel: no stack [ 3424.500590][T19008] mac80211_hwsim hwsim151 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3424.891111][T19036] validate_nla: 2 callbacks suppressed [ 3424.891151][T19036] netlink: 'syz.4.13548': attribute type 27 has an invalid length. [ 3425.414773][T19040] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13550'. [ 3425.526349][ T3980] Bluetooth: hci2: unexpected event 0x23 length: 15 > 13 [ 3426.448304][T19050] delete_channel: no stack [ 3426.591425][T19058] netlink: 'syz.6.13554': attribute type 29 has an invalid length. [ 3426.630274][T19058] netlink: 'syz.6.13554': attribute type 29 has an invalid length. [ 3426.717958][T19061] netlink: 'syz.7.13556': attribute type 6 has an invalid length. [ 3426.734919][T19061] netlink: 164 bytes leftover after parsing attributes in process `syz.7.13556'. [ 3426.785646][T19057] netlink: 'syz.6.13554': attribute type 29 has an invalid length. [ 3427.449529][T19081] netlink: 'syz.5.13561': attribute type 27 has an invalid length. [ 3428.470119][T19085] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.13563'. [ 3428.938339][T19100] netlink: 'syz.5.13566': attribute type 25 has an invalid length. [ 3429.034119][T19096] delete_channel: no stack [ 3429.441397][T19098] IPv6: Can't replace route, no match found [ 3429.524309][T19101] mac80211_hwsim hwsim163 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3429.535936][T19110] netlink: 'syz.4.13570': attribute type 29 has an invalid length. [ 3429.625575][T19110] netlink: 'syz.4.13570': attribute type 29 has an invalid length. [ 3429.652885][T19109] netlink: 'syz.4.13570': attribute type 29 has an invalid length. [ 3429.987155][T19116] mac80211_hwsim hwsim153 »»»»»»: renamed from wlan0 [ 3430.239495][T19131] netlink: 'syz.7.13575': attribute type 6 has an invalid length. [ 3430.282410][T19131] netlink: 164 bytes leftover after parsing attributes in process `syz.7.13575'. [ 3430.284908][T19133] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.13577'. [ 3431.080429][T19139] delete_channel: no stack [ 3431.276143][T19160] netlink: 'syz.6.13583': attribute type 29 has an invalid length. [ 3431.297668][T19160] netlink: 'syz.6.13583': attribute type 29 has an invalid length. [ 3431.325341][T19153] netlink: 'syz.6.13583': attribute type 29 has an invalid length. [ 3431.487971][T19164] FAULT_INJECTION: forcing a failure. [ 3431.487971][T19164] name failslab, interval 1, probability 0, space 0, times 0 [ 3431.501117][T19164] CPU: 0 PID: 19164 Comm: syz.4.13588 Not tainted syzkaller #0 [ 3431.508797][T19164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3431.518886][T19164] Call Trace: [ 3431.522183][T19164] [ 3431.525131][T19164] dump_stack_lvl+0x188/0x24e [ 3431.529831][T19164] ? verify_lock_unused+0x140/0x140 [ 3431.535054][T19164] ? show_regs_print_info+0x12/0x12 [ 3431.540272][T19164] ? load_image+0x400/0x400 [ 3431.544805][T19164] should_fail_ex+0x399/0x4d0 [ 3431.549766][T19164] should_failslab+0x5/0x20 [ 3431.554280][T19164] slab_pre_alloc_hook+0x59/0x310 [ 3431.559327][T19164] kmem_cache_alloc+0x56/0x2f0 [ 3431.564105][T19164] ? __nf_conntrack_alloc+0x99/0x380 [ 3431.569448][T19164] __nf_conntrack_alloc+0x99/0x380 [ 3431.574588][T19164] init_conntrack+0x25b/0x11a0 [ 3431.579370][T19164] ? early_drop+0x870/0x870 [ 3431.583889][T19164] ? nf_conntrack_find_get+0x670/0x670 [ 3431.589390][T19164] ? __siphash_unaligned+0x25b/0x3a0 [ 3431.594736][T19164] nf_conntrack_in+0xd3e/0x17b0 [ 3431.599658][T19164] ? nf_ct_pernet+0x270/0x270 [ 3431.604396][T19164] ? ipt_do_table+0x2bd/0x15a0 [ 3431.609251][T19164] ? read_lock_is_recursive+0x10/0x10 [ 3431.614667][T19164] ? ipv4_conntrack_defrag+0x284/0x5b0 [ 3431.620151][T19164] ? ipv4_conntrack_local+0x11f/0x200 [ 3431.625551][T19164] ? ipv4_conntrack_in+0x20/0x20 [ 3431.630505][T19164] nf_hook_slow+0xb9/0x200 [ 3431.634974][T19164] ? nf_hook+0x390/0x390 [ 3431.639244][T19164] nf_hook+0x224/0x390 [ 3431.643340][T19164] ? nf_hook+0x9e/0x390 [ 3431.647517][T19164] ? __ip_local_out+0x5d0/0x5d0 [ 3431.652394][T19164] ? xfrm_lookup_with_ifid+0x18e7/0x2050 [ 3431.658052][T19164] ? nf_hook+0x390/0x390 [ 3431.662325][T19164] ? __xfrm_sk_clone_policy+0x8e0/0x8e0 [ 3431.667898][T19164] ? ip_fast_csum+0x1ea/0x2b0 [ 3431.672591][T19164] __ip_local_out+0x49c/0x5d0 [ 3431.677290][T19164] ? nf_hook+0x390/0x390 [ 3431.681554][T19164] ip_local_out+0x26/0x120 [ 3431.686000][T19164] iptunnel_xmit+0x4d6/0x8b0 [ 3431.690623][T19164] udp_tunnel_xmit_skb+0x245/0x380 [ 3431.695763][T19164] geneve_xmit+0x26c7/0x3280 [ 3431.700380][T19164] ? kfence_handle_page_fault+0x697/0x6e0 [ 3431.706134][T19164] ? skb_crc32c_csum_help+0x520/0x520 [ 3431.711526][T19164] ? geneve_xmit+0x14f/0x3280 [ 3431.716227][T19164] ? geneve_stop+0x1b0/0x1b0 [ 3431.721006][T19164] ? validate_xmit_xfrm+0xb2/0x11e0 [ 3431.726231][T19164] ? xfrm_init_replay+0x2a0/0x2a0 [ 3431.731278][T19164] ? passthru_features_check+0x10/0x10 [ 3431.736858][T19164] dev_hard_start_xmit+0x262/0x870 [ 3431.741999][T19164] __dev_queue_xmit+0x1aa3/0x37c0 [ 3431.747137][T19164] ? __dev_queue_xmit+0x26b/0x37c0 [ 3431.752273][T19164] ? netdev_core_pick_tx+0x340/0x340 [ 3431.757579][T19164] ? packet_parse_headers+0x7b8/0xab0 [ 3431.762967][T19164] ? packet_parse_headers+0x84b/0xab0 [ 3431.768446][T19164] ? sock_kzfree_s+0x50/0x50 [ 3431.773051][T19164] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 3431.778618][T19164] ? __sock_cmsg_send+0x258/0x450 [ 3431.783660][T19164] ? eth_header+0x117/0x200 [ 3431.788181][T19164] ? skb_copy_datagram_from_iter+0x5e7/0x690 [ 3431.794275][T19164] packet_sendmsg+0x3bc3/0x4e60 [ 3431.799160][T19164] ? __might_sleep+0xd0/0xd0 [ 3431.803956][T19164] ? aa_sk_perm+0x81f/0x950 [ 3431.808476][T19164] ? __might_fault+0xa6/0x120 [ 3431.813181][T19164] ? packet_getsockopt+0x9a0/0x9a0 [ 3431.818310][T19164] ? __might_fault+0xa6/0x120 [ 3431.823003][T19164] ? aa_sock_msg_perm+0x94/0x150 [ 3431.828058][T19164] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3431.833373][T19164] ? security_socket_sendmsg+0x7c/0xa0 [ 3431.838856][T19164] ? packet_getsockopt+0x9a0/0x9a0 [ 3431.843983][T19164] ____sys_sendmsg+0x5be/0x970 [ 3431.848775][T19164] ? __sys_sendmsg_sock+0x30/0x30 [ 3431.853914][T19164] ? __import_iovec+0x315/0x500 [ 3431.858782][T19164] ? import_iovec+0x6f/0xa0 [ 3431.863302][T19164] ___sys_sendmsg+0x2a2/0x360 [ 3431.868005][T19164] ? __sys_sendmsg+0x290/0x290 [ 3431.872804][T19164] ? __lock_acquire+0x7d10/0x7d10 [ 3431.877872][T19164] __se_sys_sendmsg+0x1bb/0x2a0 [ 3431.882918][T19164] ? __x64_sys_sendmsg+0x80/0x80 [ 3431.887884][T19164] ? lockdep_hardirqs_on+0x94/0x140 [ 3431.893101][T19164] do_syscall_64+0x4c/0xa0 [ 3431.897537][T19164] ? clear_bhb_loop+0x60/0xb0 [ 3431.902408][T19164] ? clear_bhb_loop+0x60/0xb0 [ 3431.907138][T19164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3431.913052][T19164] RIP: 0033:0x7f1d46b9c819 [ 3431.917478][T19164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3431.937273][T19164] RSP: 002b:00007f1d479a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3431.945704][T19164] RAX: ffffffffffffffda RBX: 00007f1d46e15fa0 RCX: 00007f1d46b9c819 [ 3431.953691][T19164] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 3431.961674][T19164] RBP: 00007f1d479a9090 R08: 0000000000000000 R09: 0000000000000000 [ 3431.969833][T19164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3431.978261][T19164] R13: 00007f1d46e16038 R14: 00007f1d46e15fa0 R15: 00007ffef5e41ca8 [ 3431.986288][T19164] [ 3431.995832][T29881] wlan1: Trigger new scan to find an IBSS to join [ 3432.262185][T19162] IPv6: Can't replace route, no match found [ 3432.705264][T19162] mac80211_hwsim hwsim157 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3432.726047][T19172] mac80211_hwsim hwsim162 »»»»»»: renamed from wlan0 [ 3432.987737][T19186] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.13595'. [ 3433.074628][T19193] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13598'. [ 3433.135433][T19187] delete_channel: no stack [ 3433.147664][T19191] netlink: 'syz.6.13597': attribute type 6 has an invalid length. [ 3433.157133][T19191] netlink: 164 bytes leftover after parsing attributes in process `syz.6.13597'. [ 3433.358192][T19201] netlink: 'syz.3.13599': attribute type 29 has an invalid length. [ 3433.402902][T19201] netlink: 'syz.3.13599': attribute type 29 has an invalid length. [ 3433.475066][T19197] netlink: 'syz.3.13599': attribute type 29 has an invalid length. [ 3434.208429][T19215] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.13607'. [ 3434.865492][T16660] wlan1: Trigger new scan to find an IBSS to join [ 3434.927959][T19221] mac80211_hwsim hwsim150 »»»»»»: renamed from wlan0 [ 3434.952833][T19243] netlink: 'syz.3.13614': attribute type 29 has an invalid length. [ 3434.954473][ T8508] wlan1: Trigger new scan to find an IBSS to join [ 3435.010080][T19234] netlink: 'syz.4.13611': attribute type 25 has an invalid length. [ 3435.032998][T19230] delete_channel: no stack [ 3435.674362][T19268] validate_nla: 2 callbacks suppressed [ 3435.674385][T19268] netlink: 'syz.7.13623': attribute type 6 has an invalid length. [ 3435.832884][T19268] netlink: 164 bytes leftover after parsing attributes in process `syz.7.13623'. [ 3435.941149][T19270] netlink: 'syz.3.13622': attribute type 10 has an invalid length. [ 3436.942544][T29881] wlan1: Creating new IBSS network, BSSID fe:86:c1:bf:eb:fd [ 3438.589217][T19270] team0: Port device wlan1 added [ 3438.674421][T19278] FAULT_INJECTION: forcing a failure. [ 3438.674421][T19278] name failslab, interval 1, probability 0, space 0, times 0 [ 3438.707187][T19278] CPU: 0 PID: 19278 Comm: syz.5.13625 Not tainted syzkaller #0 [ 3438.714911][T19278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3438.725105][T19278] Call Trace: [ 3438.728432][T19278] [ 3438.731380][T19278] dump_stack_lvl+0x188/0x24e [ 3438.736092][T19278] ? show_regs_print_info+0x12/0x12 [ 3438.741323][T19278] ? load_image+0x400/0x400 [ 3438.745968][T19278] ? __might_sleep+0xd0/0xd0 [ 3438.750618][T19278] ? __lock_acquire+0x7d10/0x7d10 [ 3438.755673][T19278] should_fail_ex+0x399/0x4d0 [ 3438.760371][T19278] should_failslab+0x5/0x20 [ 3438.764887][T19278] slab_pre_alloc_hook+0x59/0x310 [ 3438.769933][T19278] ? tomoyo_encode+0x27e/0x540 [ 3438.774719][T19278] __kmem_cache_alloc_node+0x4f/0x260 [ 3438.780211][T19278] ? tomoyo_encode+0x27e/0x540 [ 3438.784990][T19278] __kmalloc+0xa0/0x240 [ 3438.789168][T19278] tomoyo_encode+0x27e/0x540 [ 3438.793804][T19278] tomoyo_realpath_from_path+0x58e/0x5d0 [ 3438.799552][T19278] ? tomoyo_path_number_perm+0x205/0x650 [ 3438.805203][T19278] tomoyo_path_number_perm+0x22f/0x650 [ 3438.810785][T19278] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3438.816265][T19278] ? ksys_write+0x1c0/0x250 [ 3438.820806][T19278] ? common_file_perm+0x171/0x1c0 [ 3438.825879][T19278] ? __fget_files+0x28/0x4b0 [ 3438.830597][T19278] ? __fget_files+0x28/0x4b0 [ 3438.835231][T19278] security_file_ioctl+0x6c/0xa0 [ 3438.840191][T19278] __se_sys_ioctl+0x48/0x170 [ 3438.844800][T19278] do_syscall_64+0x4c/0xa0 [ 3438.849269][T19278] ? clear_bhb_loop+0x60/0xb0 [ 3438.854053][T19278] ? clear_bhb_loop+0x60/0xb0 [ 3438.858755][T19278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3438.864664][T19278] RIP: 0033:0x7ff8da19c819 [ 3438.869094][T19278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3438.888717][T19278] RSP: 002b:00007ff8db03a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3438.897148][T19278] RAX: ffffffffffffffda RBX: 00007ff8da415fa0 RCX: 00007ff8da19c819 [ 3438.905136][T19278] RDX: 0000200000000040 RSI: 0000000000008919 RDI: 0000000000000004 [ 3438.913221][T19278] RBP: 00007ff8db03a090 R08: 0000000000000000 R09: 0000000000000000 [ 3438.921295][T19278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3438.929546][T19278] R13: 00007ff8da416038 R14: 00007ff8da415fa0 R15: 00007ffe1bbdb448 [ 3438.937633][T19278] [ 3438.943797][T19278] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3438.943879][T19282] netlink: 'syz.4.13626': attribute type 29 has an invalid length. [ 3438.962221][ T8508] wlan1: Trigger new scan to find an IBSS to join [ 3438.998889][T19282] netlink: 'syz.4.13626': attribute type 29 has an invalid length. [ 3439.007798][T19276] netlink: 'syz.4.13626': attribute type 29 has an invalid length. [ 3439.020685][T19281] netlink: 'syz.6.13627': attribute type 25 has an invalid length. [ 3439.149923][T19286] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13628'. [ 3439.604636][T19279] delete_channel: no stack [ 3440.023720][T19293] mac80211_hwsim hwsim160 »»»»»»: renamed from wlan0 [ 3440.327088][T19311] netlink: 'syz.3.13639': attribute type 6 has an invalid length. [ 3440.346540][T19311] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13639'. [ 3440.805875][T19322] netlink: 44 bytes leftover after parsing attributes in process `syz.6.13641'. [ 3441.926081][ T8502] wlan1: Trigger new scan to find an IBSS to join [ 3443.184950][ T8502] wlan1: Creating new IBSS network, BSSID b6:a3:c5:cf:9e:cf [ 3444.714528][T19333] delete_channel: no stack [ 3444.996988][T19348] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.13649'. [ 3445.030310][T19353] netlink: 'syz.5.13650': attribute type 27 has an invalid length. [ 3445.897964][T19374] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 3445.945808][T19374] syzkaller0: linktype set to 778 [ 3445.994133][T19371] netlink: 'syz.5.13656': attribute type 6 has an invalid length. [ 3446.069603][T19371] netlink: 164 bytes leftover after parsing attributes in process `syz.5.13656'. [ 3446.105143][T19362] netlink: 'syz.3.13653': attribute type 3 has an invalid length. [ 3446.127205][T19362] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.13653'. [ 3446.572854][T19386] delete_channel: no stack [ 3446.834932][T19400] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13663'. [ 3446.934549][T19402] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.13664'. [ 3447.565992][T19420] netlink: 'syz.3.13671': attribute type 6 has an invalid length. [ 3447.583111][T19420] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13671'. [ 3447.882680][T19429] mac80211_hwsim hwsim156 »»»»»»: renamed from wlan0 [ 3448.151645][T19435] netlink: 'syz.6.13675': attribute type 25 has an invalid length. [ 3448.176649][T19432] delete_channel: no stack [ 3448.212091][T19431] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 3448.221308][T19431] syzkaller0: linktype set to 778 [ 3448.400432][T19431] netlink: 'syz.4.13674': attribute type 3 has an invalid length. [ 3448.423760][T19431] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.13674'. [ 3448.572286][T19443] netlink: 132 bytes leftover after parsing attributes in process `syz.7.13678'. [ 3448.705112][T19448] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.13680'. [ 3448.933273][T19458] FAULT_INJECTION: forcing a failure. [ 3448.933273][T19458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3448.947594][T19458] CPU: 1 PID: 19458 Comm: syz.4.13682 Not tainted syzkaller #0 [ 3448.955200][T19458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3448.965300][T19458] Call Trace: [ 3448.968617][T19458] [ 3448.971595][T19458] dump_stack_lvl+0x188/0x24e [ 3448.976417][T19458] ? show_regs_print_info+0x12/0x12 [ 3448.981670][T19458] ? load_image+0x400/0x400 [ 3448.986231][T19458] ? __lock_acquire+0x7d10/0x7d10 [ 3448.991313][T19458] ? __local_bh_enable_ip+0x136/0x1c0 [ 3448.996736][T19458] should_fail_ex+0x399/0x4d0 [ 3449.001476][T19458] _copy_from_user+0x2c/0x170 [ 3449.006204][T19458] copy_from_sockptr+0x69/0x80 [ 3449.011015][T19458] do_ipv6_setsockopt+0x874/0x3e30 [ 3449.016531][T19458] ? sk_dst_reset+0xa0/0xa0 [ 3449.021076][T19458] ? mark_lock+0x94/0x320 [ 3449.025455][T19458] ? __lock_acquire+0x12f4/0x7d10 [ 3449.030535][T19458] ? aa_label_sk_perm+0x456/0x5b0 [ 3449.035675][T19458] ? verify_lock_unused+0x140/0x140 [ 3449.040902][T19458] ? aa_sk_perm+0x950/0x950 [ 3449.045534][T19458] ? migrate_enable+0x148/0x220 [ 3449.050411][T19458] ? __might_sleep+0xd0/0xd0 [ 3449.055025][T19458] ? __fget_files+0x28/0x4b0 [ 3449.059656][T19458] ? aa_sk_perm+0x81f/0x950 [ 3449.064193][T19458] ? aa_af_perm+0x340/0x340 [ 3449.068802][T19458] ? __fget_files+0x43d/0x4b0 [ 3449.073507][T19458] ? aa_sock_opt_perm+0x74/0x100 [ 3449.078467][T19458] ipv6_setsockopt+0x55/0x190 [ 3449.083163][T19458] ? sock_common_recvmsg+0x190/0x190 [ 3449.088741][T19458] __sys_setsockopt+0x2bf/0x3d0 [ 3449.093713][T19458] __x64_sys_setsockopt+0xb1/0xc0 [ 3449.098940][T19458] do_syscall_64+0x4c/0xa0 [ 3449.103447][T19458] ? clear_bhb_loop+0x60/0xb0 [ 3449.108149][T19458] ? clear_bhb_loop+0x60/0xb0 [ 3449.112895][T19458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3449.118842][T19458] RIP: 0033:0x7f1d46b9c819 [ 3449.123295][T19458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3449.143025][T19458] RSP: 002b:00007f1d479a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3449.151725][T19458] RAX: ffffffffffffffda RBX: 00007f1d46e15fa0 RCX: 00007f1d46b9c819 [ 3449.159717][T19458] RDX: 0000000000000015 RSI: 0000000000000029 RDI: 0000000000000003 [ 3449.167791][T19458] RBP: 00007f1d479a9090 R08: 00000000000000b9 R09: 0000000000000000 [ 3449.175780][T19458] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 3449.183853][T19458] R13: 00007f1d46e16038 R14: 00007f1d46e15fa0 R15: 00007ffef5e41ca8 [ 3449.191860][T19458] [ 3449.934057][T19474] netlink: 'syz.6.13688': attribute type 25 has an invalid length. [ 3449.995619][T19473] delete_channel: no stack [ 3450.009024][T19477] netlink: 'syz.7.13689': attribute type 6 has an invalid length. [ 3450.052908][T19477] netlink: 164 bytes leftover after parsing attributes in process `syz.7.13689'. [ 3450.281768][T19485] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13692'. [ 3450.311442][T19485] netlink: 152 bytes leftover after parsing attributes in process `syz.6.13692'. [ 3450.343286][T19486] netlink: 'syz.6.13692': attribute type 2 has an invalid length. [ 3450.365972][T19485] netlink: 14 bytes leftover after parsing attributes in process `syz.6.13692'. [ 3450.613285][T19492] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.13695'. [ 3450.683019][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.683078][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3451.951693][T19519] netlink: 'syz.5.13702': attribute type 25 has an invalid length. [ 3451.984987][T19518] delete_channel: no stack [ 3452.128244][T19525] netlink: 'syz.7.13705': attribute type 6 has an invalid length. [ 3452.157841][T19525] netlink: 164 bytes leftover after parsing attributes in process `syz.7.13705'. [ 3452.509374][T19536] netlink: 'syz.3.13707': attribute type 1 has an invalid length. [ 3452.663165][T19536] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.13707'. [ 3452.905915][T19543] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13709'. [ 3452.944862][T19543] netlink: 152 bytes leftover after parsing attributes in process `syz.7.13709'. [ 3452.980449][T19544] netlink: 'syz.7.13709': attribute type 2 has an invalid length. [ 3453.026892][T19543] netlink: 14 bytes leftover after parsing attributes in process `syz.7.13709'. [ 3454.317603][T19568] netlink: 'syz.5.13717': attribute type 25 has an invalid length. [ 3454.372786][T19567] delete_channel: no stack [ 3454.440662][T19575] netlink: 'syz.7.13719': attribute type 6 has an invalid length. [ 3455.485456][T19578] __nla_validate_parse: 2 callbacks suppressed [ 3455.485543][T19578] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13730'. [ 3456.067546][T19601] netlink: 14 bytes leftover after parsing attributes in process `syz.6.13726'. [ 3457.033510][T19627] netlink: 'syz.6.13733': attribute type 25 has an invalid length. [ 3457.197270][T19622] delete_channel: no stack [ 3457.529712][T19632] netlink: 'syz.3.13735': attribute type 6 has an invalid length. [ 3457.534712][T19635] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.13736'. [ 3457.613233][T19632] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13735'. [ 3458.068409][T19654] netlink: 176 bytes leftover after parsing attributes in process `syz.7.13739'. [ 3458.239531][T19654] netlink: 'syz.7.13739': attribute type 2 has an invalid length. [ 3458.282485][T19654] netlink: 'syz.7.13739': attribute type 1 has an invalid length. [ 3458.290644][T19654] netlink: 170140 bytes leftover after parsing attributes in process `syz.7.13739'. [ 3459.124448][T19669] netlink: 'syz.4.13741': attribute type 25 has an invalid length. [ 3459.235598][T19659] delete_channel: no stack [ 3459.519302][T19677] netlink: 'syz.6.13746': attribute type 25 has an invalid length. [ 3459.623544][T19676] delete_channel: no stack [ 3459.776949][T19685] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13748'. [ 3460.997416][T19708] FAULT_INJECTION: forcing a failure. [ 3460.997416][T19708] name failslab, interval 1, probability 0, space 0, times 0 [ 3461.005919][T19703] netlink: 'syz.4.13752': attribute type 6 has an invalid length. [ 3461.047024][T19708] CPU: 1 PID: 19708 Comm: syz.7.13754 Not tainted syzkaller #0 [ 3461.054813][T19708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3461.065138][T19708] Call Trace: [ 3461.068455][T19708] [ 3461.071422][T19708] dump_stack_lvl+0x188/0x24e [ 3461.076150][T19708] ? show_regs_print_info+0x12/0x12 [ 3461.081389][T19708] ? load_image+0x400/0x400 [ 3461.085948][T19708] ? __might_sleep+0xd0/0xd0 [ 3461.090579][T19708] ? __lock_acquire+0x7d10/0x7d10 [ 3461.095687][T19708] should_fail_ex+0x399/0x4d0 [ 3461.100510][T19708] should_failslab+0x5/0x20 [ 3461.105057][T19708] slab_pre_alloc_hook+0x59/0x310 [ 3461.110133][T19708] kmem_cache_alloc_node+0x5a/0x320 [ 3461.115381][T19708] ? __alloc_skb+0xfc/0x7e0 [ 3461.119942][T19708] __alloc_skb+0xfc/0x7e0 [ 3461.124324][T19708] ? netlink_autobind+0xda/0x300 [ 3461.129330][T19708] netlink_sendmsg+0x654/0xbd0 [ 3461.134158][T19708] ? netlink_getsockopt+0x550/0x550 [ 3461.139161][T19703] netlink: 164 bytes leftover after parsing attributes in process `syz.4.13752'. [ 3461.139400][T19708] ? aa_sock_msg_perm+0x94/0x150 [ 3461.139431][T19708] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3461.139454][T19708] ? security_socket_sendmsg+0x7c/0xa0 [ 3461.139495][T19708] ? netlink_getsockopt+0x550/0x550 [ 3461.169842][T19708] ____sys_sendmsg+0x5be/0x970 [ 3461.174675][T19708] ? __sys_sendmsg_sock+0x30/0x30 [ 3461.179766][T19708] ? __import_iovec+0x315/0x500 [ 3461.184667][T19708] ? import_iovec+0x6f/0xa0 [ 3461.189226][T19708] ___sys_sendmsg+0x2a2/0x360 [ 3461.193959][T19708] ? __sys_sendmsg+0x290/0x290 [ 3461.198804][T19708] ? __lock_acquire+0x7d10/0x7d10 [ 3461.203920][T19708] __se_sys_sendmsg+0x1bb/0x2a0 [ 3461.208819][T19708] ? ct_nmi_exit+0x145/0x1c0 [ 3461.213809][T19708] ? __x64_sys_sendmsg+0x80/0x80 [ 3461.218984][T19708] ? lockdep_hardirqs_on+0x94/0x140 [ 3461.224319][T19708] do_syscall_64+0x4c/0xa0 [ 3461.228785][T19708] ? clear_bhb_loop+0x60/0xb0 [ 3461.233509][T19708] ? clear_bhb_loop+0x60/0xb0 [ 3461.238233][T19708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3461.244164][T19708] RIP: 0033:0x7f3810b9c819 [ 3461.248613][T19708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3461.268242][T19708] RSP: 002b:00007f38119e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3461.276670][T19708] RAX: ffffffffffffffda RBX: 00007f3810e15fa0 RCX: 00007f3810b9c819 [ 3461.284670][T19708] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 3461.292676][T19708] RBP: 00007f38119e5090 R08: 0000000000000000 R09: 0000000000000000 [ 3461.300670][T19708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3461.308668][T19708] R13: 00007f3810e16038 R14: 00007f3810e15fa0 R15: 00007ffdf7c83d88 [ 3461.316783][T19708] [ 3462.158275][T19729] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.13762'. [ 3462.486062][T19721] delete_channel: no stack [ 3463.258772][T19747] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.13768'. [ 3463.325448][T19755] netlink: 'syz.3.13770': attribute type 21 has an invalid length. [ 3463.399427][T19755] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13770'. [ 3463.724900][T19755] netlink: 'syz.3.13770': attribute type 4 has an invalid length. [ 3463.894473][T19755] netlink: 3 bytes leftover after parsing attributes in process `syz.3.13770'. [ 3464.300348][T19764] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.13772'. [ 3464.931090][T19781] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.13777'. [ 3466.707563][T19805] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.13786'. [ 3467.950562][T19852] netlink: 'syz.3.13799': attribute type 6 has an invalid length. [ 3468.014756][T19852] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13799'. [ 3470.460499][T19863] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.13802'. [ 3471.286750][T19891] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13811'. [ 3471.312814][T19891] netlink: 152 bytes leftover after parsing attributes in process `syz.5.13811'. [ 3471.331272][T19891] netlink: 'syz.5.13811': attribute type 2 has an invalid length. [ 3471.584697][T19905] netlink: 61211 bytes leftover after parsing attributes in process `syz.6.13816'. [ 3471.648703][T19908] netlink: 'syz.5.13817': attribute type 6 has an invalid length. [ 3471.710793][T19908] netlink: 164 bytes leftover after parsing attributes in process `syz.5.13817'. [ 3471.737090][T19905] FAULT_INJECTION: forcing a failure. [ 3471.737090][T19905] name failslab, interval 1, probability 0, space 0, times 0 [ 3471.750531][T19905] CPU: 0 PID: 19905 Comm: syz.6.13816 Not tainted syzkaller #0 [ 3471.758248][T19905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3471.768360][T19905] Call Trace: [ 3471.771766][T19905] [ 3471.774735][T19905] dump_stack_lvl+0x188/0x24e [ 3471.779486][T19905] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3471.785700][T19905] ? show_regs_print_info+0x12/0x12 [ 3471.791149][T19905] ? load_image+0x400/0x400 [ 3471.795699][T19905] ? lock_acquire+0x225/0x4a0 [ 3471.800435][T19905] should_fail_ex+0x399/0x4d0 [ 3471.805151][T19905] should_failslab+0x5/0x20 [ 3471.809694][T19905] slab_pre_alloc_hook+0x59/0x310 [ 3471.814761][T19905] kmem_cache_alloc+0x56/0x2f0 [ 3471.819544][T19905] ? __inet_hash_connect+0x832/0x18e0 [ 3471.825051][T19905] __inet_hash_connect+0x832/0x18e0 [ 3471.830279][T19905] ? inet_hash_connect+0x130/0x130 [ 3471.835442][T19905] ? inet_bhash2_reset_saddr+0x80/0x80 [ 3471.840927][T19905] ? rcu_is_watching+0x11/0xa0 [ 3471.845806][T19905] tcp_v4_connect+0xc96/0x18e0 [ 3471.850604][T19905] ? tcp_twsk_unique+0x990/0x990 [ 3471.855565][T19905] __inet_stream_connect+0x242/0xe10 [ 3471.860885][T19905] ? inet_dgram_connect+0x360/0x360 [ 3471.866156][T19905] tcp_sendmsg_fastopen+0x38f/0x600 [ 3471.871428][T19905] tcp_sendmsg_locked+0x3616/0x3a90 [ 3471.876661][T19905] ? mark_lock+0x94/0x320 [ 3471.881013][T19905] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3471.887019][T19905] ? lock_chain_count+0x20/0x20 [ 3471.891898][T19905] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3471.898258][T19905] ? lockdep_hardirqs_on+0x94/0x140 [ 3471.903480][T19905] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3471.909658][T19905] ? tcp_sendmsg+0x1d/0x40 [ 3471.914098][T19905] ? tcp_set_state+0x520/0x520 [ 3471.918876][T19905] ? __local_bh_enable_ip+0x13e/0x1c0 [ 3471.924281][T19905] tcp_sendmsg+0x2b/0x40 [ 3471.928636][T19905] ? inet_send_prepare+0x260/0x260 [ 3471.933855][T19905] ____sys_sendmsg+0x5be/0x970 [ 3471.938637][T19905] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3471.944997][T19905] ? __sys_sendmsg_sock+0x30/0x30 [ 3471.950140][T19905] ? __import_iovec+0x315/0x500 [ 3471.955015][T19905] ? import_iovec+0x6f/0xa0 [ 3471.959573][T19905] ___sys_sendmsg+0x2a2/0x360 [ 3471.964279][T19905] ? __sys_sendmsg+0x290/0x290 [ 3471.969087][T19905] ? ktime_get_real_ts64+0x440/0x440 [ 3471.974414][T19905] __se_sys_sendmsg+0x1bb/0x2a0 [ 3471.979372][T19905] ? ct_nmi_exit+0x145/0x1c0 [ 3471.983977][T19905] ? __x64_sys_sendmsg+0x80/0x80 [ 3471.988950][T19905] ? lockdep_hardirqs_on+0x94/0x140 [ 3471.994177][T19905] do_syscall_64+0x4c/0xa0 [ 3471.998614][T19905] ? clear_bhb_loop+0x60/0xb0 [ 3472.003395][T19905] ? clear_bhb_loop+0x60/0xb0 [ 3472.008092][T19905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3472.014024][T19905] RIP: 0033:0x7feb50f9c819 [ 3472.018540][T19905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3472.038264][T19905] RSP: 002b:00007feb51ded028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3472.046804][T19905] RAX: ffffffffffffffda RBX: 00007feb51215fa0 RCX: 00007feb50f9c819 [ 3472.054794][T19905] RDX: 000000003000c085 RSI: 0000200000000080 RDI: 000000000000000a [ 3472.062872][T19905] RBP: 00007feb51ded090 R08: 0000000000000000 R09: 0000000000000000 [ 3472.070949][T19905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3472.078943][T19905] R13: 00007feb51216038 R14: 00007feb51215fa0 R15: 00007ffe4cd925c8 [ 3472.087115][T19905] [ 3472.580781][T19925] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.13821'. [ 3472.903961][T19932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13827'. [ 3472.928899][T19932] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13827'. [ 3472.953664][T19932] netlink: 'syz.3.13827': attribute type 2 has an invalid length. [ 3473.182630][ T3980] Bluetooth: hci5: command 0x0406 tx timeout [ 3473.401203][T19950] netlink: 184 bytes leftover after parsing attributes in process `syz.6.13830'. [ 3476.514911][T19962] FAULT_INJECTION: forcing a failure. [ 3476.514911][T19962] name failslab, interval 1, probability 0, space 0, times 0 [ 3476.577255][T19962] CPU: 1 PID: 19962 Comm: syz.3.13834 Not tainted syzkaller #0 [ 3476.584904][T19962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3476.595019][T19962] Call Trace: [ 3476.598343][T19962] [ 3476.601585][T19962] dump_stack_lvl+0x188/0x24e [ 3476.607054][T19962] ? show_regs_print_info+0x12/0x12 [ 3476.612323][T19962] ? load_image+0x400/0x400 [ 3476.616904][T19962] ? __might_sleep+0xd0/0xd0 [ 3476.621720][T19962] ? __lock_acquire+0x7d10/0x7d10 [ 3476.626816][T19962] ? aa_file_perm+0x3ea/0xf00 [ 3476.631587][T19962] should_fail_ex+0x399/0x4d0 [ 3476.636345][T19962] should_failslab+0x5/0x20 [ 3476.640909][T19962] slab_pre_alloc_hook+0x59/0x310 [ 3476.646000][T19962] ? kernfs_fop_write_iter+0x155/0x520 [ 3476.651524][T19962] __kmem_cache_alloc_node+0x4f/0x260 [ 3476.656993][T19962] ? kernfs_fop_write_iter+0x155/0x520 [ 3476.662512][T19962] __kmalloc+0xa0/0x240 [ 3476.666740][T19962] kernfs_fop_write_iter+0x155/0x520 [ 3476.672112][T19962] vfs_write+0x4b1/0xa30 [ 3476.676414][T19962] ? file_end_write+0x250/0x250 [ 3476.681397][T19962] ? __fget_files+0x43d/0x4b0 [ 3476.686124][T19962] ? __fdget_pos+0x2ae/0x360 [ 3476.690744][T19962] ? ksys_write+0x71/0x250 [ 3476.695289][T19962] ksys_write+0x14c/0x250 [ 3476.699654][T19962] ? __ia32_sys_read+0x80/0x80 [ 3476.704485][T19962] ? lockdep_hardirqs_on+0x94/0x140 [ 3476.709720][T19962] do_syscall_64+0x4c/0xa0 [ 3476.714160][T19962] ? clear_bhb_loop+0x60/0xb0 [ 3476.718861][T19962] ? clear_bhb_loop+0x60/0xb0 [ 3476.723598][T19962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3476.729513][T19962] RIP: 0033:0x7fac14f9c819 [ 3476.733955][T19962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3476.753694][T19962] RSP: 002b:00007fac15da6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3476.762141][T19962] RAX: ffffffffffffffda RBX: 00007fac15215fa0 RCX: 00007fac14f9c819 [ 3476.770162][T19962] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: 0000000000000005 [ 3476.778238][T19962] RBP: 00007fac15da6090 R08: 0000000000000000 R09: 0000000000000000 [ 3476.786331][T19962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3476.794321][T19962] R13: 00007fac15216038 R14: 00007fac15215fa0 R15: 00007ffdb5e03828 [ 3476.802342][T19962] [ 3477.053579][T19977] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.13839'. [ 3477.609455][T19996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13841'. [ 3477.619275][T19996] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13841'. [ 3477.690523][T19998] netlink: 'syz.4.13841': attribute type 2 has an invalid length. [ 3478.257128][T20018] netlink: 'syz.7.13847': attribute type 29 has an invalid length. [ 3478.552887][T20018] netlink: 'syz.7.13847': attribute type 29 has an invalid length. [ 3478.569964][T20020] netlink: 'syz.7.13847': attribute type 29 has an invalid length. [ 3479.218932][T20039] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.13854'. [ 3479.283523][T20040] FAULT_INJECTION: forcing a failure. [ 3479.283523][T20040] name failslab, interval 1, probability 0, space 0, times 0 [ 3479.338236][T20044] bond0: (slave geneve0): Error: Slave device does not support XDP [ 3479.393964][T20040] CPU: 0 PID: 20040 Comm: syz.7.13853 Not tainted syzkaller #0 [ 3479.401568][T20040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3479.411739][T20040] Call Trace: [ 3479.415158][T20040] [ 3479.418131][T20040] dump_stack_lvl+0x188/0x24e [ 3479.422870][T20040] ? show_regs_print_info+0x12/0x12 [ 3479.428138][T20040] ? load_image+0x400/0x400 [ 3479.432682][T20040] ? __might_sleep+0xd0/0xd0 [ 3479.437307][T20040] ? __lock_acquire+0x7d10/0x7d10 [ 3479.442462][T20040] should_fail_ex+0x399/0x4d0 [ 3479.447176][T20040] should_failslab+0x5/0x20 [ 3479.451705][T20040] slab_pre_alloc_hook+0x59/0x310 [ 3479.456750][T20040] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 3479.462323][T20040] __kmem_cache_alloc_node+0x4f/0x260 [ 3479.467719][T20040] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 3479.473283][T20040] __kmalloc+0xa0/0x240 [ 3479.477472][T20040] bpf_prog_test_run_skb+0x234/0x12a0 [ 3479.482862][T20040] ? __fget_files+0x28/0x4b0 [ 3479.487474][T20040] ? __fget_files+0x28/0x4b0 [ 3479.492182][T20040] ? __fget_files+0x43d/0x4b0 [ 3479.496901][T20040] ? cpu_online+0xa0/0xa0 [ 3479.501263][T20040] bpf_prog_test_run+0x31e/0x390 [ 3479.506224][T20040] __sys_bpf+0x62b/0x780 [ 3479.510669][T20040] ? bpf_link_show_fdinfo+0x380/0x380 [ 3479.516172][T20040] ? lock_chain_count+0x20/0x20 [ 3479.521154][T20040] __x64_sys_bpf+0x78/0x90 [ 3479.525677][T20040] do_syscall_64+0x4c/0xa0 [ 3479.530119][T20040] ? clear_bhb_loop+0x60/0xb0 [ 3479.534811][T20040] ? clear_bhb_loop+0x60/0xb0 [ 3479.539505][T20040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3479.545425][T20040] RIP: 0033:0x7f3810b9c819 [ 3479.549864][T20040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3479.569490][T20040] RSP: 002b:00007f38119c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3479.577937][T20040] RAX: ffffffffffffffda RBX: 00007f3810e16090 RCX: 00007f3810b9c819 [ 3479.585948][T20040] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 3479.593971][T20040] RBP: 00007f38119c4090 R08: 0000000000000000 R09: 0000000000000000 [ 3479.602049][T20040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3479.610056][T20040] R13: 00007f3810e16128 R14: 00007f3810e16090 R15: 00007ffdf7c83d88 [ 3479.618062][T20040] [ 3481.307665][T20085] netlink: 'syz.6.13868': attribute type 2 has an invalid length. [ 3481.347490][T20085] netlink: 14 bytes leftover after parsing attributes in process `syz.6.13868'. [ 3481.821762][T20100] netlink: 156 bytes leftover after parsing attributes in process `syz.6.13872'. [ 3485.440700][T20148] netlink: 'syz.7.13882': attribute type 2 has an invalid length. [ 3485.451994][T20148] netlink: 14 bytes leftover after parsing attributes in process `syz.7.13882'. [ 3485.845802][T20158] netlink: 156 bytes leftover after parsing attributes in process `syz.5.13887'. [ 3486.779326][T20181] netlink: 16222 bytes leftover after parsing attributes in process `syz.6.13894'. [ 3487.661870][T20209] netlink: 'syz.4.13900': attribute type 2 has an invalid length. [ 3487.733585][T20209] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13900'. [ 3488.117654][T20219] netlink: 156 bytes leftover after parsing attributes in process `syz.4.13904'. [ 3488.899573][T20247] netlink: 'syz.6.13915': attribute type 2 has an invalid length. [ 3489.029404][T20247] netlink: 14 bytes leftover after parsing attributes in process `syz.6.13915'. [ 3490.697927][T20284] netlink: 156 bytes leftover after parsing attributes in process `syz.3.13923'. [ 3491.728440][T20298] netlink: 'syz.5.13928': attribute type 2 has an invalid length. [ 3491.748438][T20298] netlink: 14 bytes leftover after parsing attributes in process `syz.5.13928'. [ 3494.866079][T20315] FAULT_INJECTION: forcing a failure. [ 3494.866079][T20315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3494.906206][T20315] CPU: 0 PID: 20315 Comm: syz.7.13934 Not tainted syzkaller #0 [ 3494.914079][T20315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3494.924152][T20315] Call Trace: [ 3494.927455][T20315] [ 3494.930483][T20315] dump_stack_lvl+0x188/0x24e [ 3494.935461][T20315] ? show_regs_print_info+0x12/0x12 [ 3494.940690][T20315] ? load_image+0x400/0x400 [ 3494.945214][T20315] ? __lock_acquire+0x7d10/0x7d10 [ 3494.950351][T20315] should_fail_ex+0x399/0x4d0 [ 3494.955048][T20315] _copy_from_user+0x2c/0x170 [ 3494.959742][T20315] __sys_bpf+0x2ea/0x780 [ 3494.964003][T20315] ? bpf_link_show_fdinfo+0x380/0x380 [ 3494.969407][T20315] ? lock_chain_count+0x20/0x20 [ 3494.974280][T20315] __x64_sys_bpf+0x78/0x90 [ 3494.978803][T20315] do_syscall_64+0x4c/0xa0 [ 3494.983238][T20315] ? clear_bhb_loop+0x60/0xb0 [ 3494.988019][T20315] ? clear_bhb_loop+0x60/0xb0 [ 3494.992714][T20315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3494.998624][T20315] RIP: 0033:0x7f3810b9c819 [ 3495.003054][T20315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3495.022760][T20315] RSP: 002b:00007f38119e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3495.031276][T20315] RAX: ffffffffffffffda RBX: 00007f3810e15fa0 RCX: 00007f3810b9c819 [ 3495.039257][T20315] RDX: 0000000000000018 RSI: 0000200000000040 RDI: 0000000000000006 [ 3495.047241][T20315] RBP: 00007f38119e5090 R08: 0000000000000000 R09: 0000000000000000 [ 3495.055234][T20315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3495.063216][T20315] R13: 00007f3810e16038 R14: 00007f3810e15fa0 R15: 00007ffdf7c83d88 [ 3495.071209][T20315] [ 3495.630184][T20342] FAULT_INJECTION: forcing a failure. [ 3495.630184][T20342] name failslab, interval 1, probability 0, space 0, times 0 [ 3495.685741][T20342] CPU: 0 PID: 20342 Comm: syz.6.13940 Not tainted syzkaller #0 [ 3495.693411][T20342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3495.703633][T20342] Call Trace: [ 3495.706972][T20342] [ 3495.709962][T20342] dump_stack_lvl+0x188/0x24e [ 3495.714737][T20342] ? show_regs_print_info+0x12/0x12 [ 3495.720031][T20342] ? load_image+0x400/0x400 [ 3495.724641][T20342] ? __might_sleep+0xd0/0xd0 [ 3495.729317][T20342] ? __lock_acquire+0x7d10/0x7d10 [ 3495.734445][T20342] should_fail_ex+0x399/0x4d0 [ 3495.739240][T20342] should_failslab+0x5/0x20 [ 3495.743834][T20342] slab_pre_alloc_hook+0x59/0x310 [ 3495.748946][T20342] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 3495.754759][T20342] __kmem_cache_alloc_node+0x4f/0x260 [ 3495.760303][T20342] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 3495.766078][T20342] __kmalloc+0xa0/0x240 [ 3495.770298][T20342] tomoyo_realpath_from_path+0xdf/0x5d0 [ 3495.775928][T20342] ? tomoyo_path_number_perm+0x205/0x650 [ 3495.781624][T20342] tomoyo_path_number_perm+0x22f/0x650 [ 3495.787141][T20342] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3495.792645][T20342] ? ksys_write+0x1c0/0x250 [ 3495.797363][T20342] ? common_file_perm+0x171/0x1c0 [ 3495.802544][T20342] ? __fget_files+0x28/0x4b0 [ 3495.807172][T20342] ? __fget_files+0x28/0x4b0 [ 3495.812292][T20342] security_file_ioctl+0x6c/0xa0 [ 3495.817305][T20342] __se_sys_ioctl+0x48/0x170 [ 3495.821951][T20342] do_syscall_64+0x4c/0xa0 [ 3495.826429][T20342] ? clear_bhb_loop+0x60/0xb0 [ 3495.831241][T20342] ? clear_bhb_loop+0x60/0xb0 [ 3495.835975][T20342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3495.841903][T20342] RIP: 0033:0x7feb50f9c819 [ 3495.846375][T20342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3495.866189][T20342] RSP: 002b:00007feb51ded028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3495.874667][T20342] RAX: ffffffffffffffda RBX: 00007feb51215fa0 RCX: 00007feb50f9c819 [ 3495.882949][T20342] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000003 [ 3495.890981][T20342] RBP: 00007feb51ded090 R08: 0000000000000000 R09: 0000000000000000 [ 3495.899002][T20342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3495.907009][T20342] R13: 00007feb51216038 R14: 00007feb51215fa0 R15: 00007ffe4cd925c8 [ 3495.915076][T20342] [ 3495.937618][T20342] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3496.235919][T20359] netlink: 'syz.4.13945': attribute type 2 has an invalid length. [ 3496.487617][T20362] netlink: 'syz.7.13946': attribute type 6 has an invalid length. [ 3496.510130][T20362] netlink: 164 bytes leftover after parsing attributes in process `syz.7.13946'. [ 3498.132763][T20400] netlink: 'syz.3.13959': attribute type 6 has an invalid length. [ 3498.161955][T20400] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13959'. [ 3498.294600][T20406] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.13961'. [ 3498.367669][T20409] netlink: 'syz.4.13960': attribute type 21 has an invalid length. [ 3498.393404][T20409] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13960'. [ 3499.028423][T20422] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13966'. [ 3499.094306][T20422] netlink: 152 bytes leftover after parsing attributes in process `syz.6.13966'. [ 3499.142036][T20426] netlink: 14 bytes leftover after parsing attributes in process `syz.6.13966'. [ 3499.379924][T20430] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.13977'. [ 3499.698495][T20439] netlink: 'syz.6.13968': attribute type 6 has an invalid length. [ 3499.734923][T20439] netlink: 164 bytes leftover after parsing attributes in process `syz.6.13968'. [ 3500.319041][T20447] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.13971'. [ 3500.414254][T20453] FAULT_INJECTION: forcing a failure. [ 3500.414254][T20453] name failslab, interval 1, probability 0, space 0, times 0 [ 3500.432486][T20453] CPU: 0 PID: 20453 Comm: syz.5.13972 Not tainted syzkaller #0 [ 3500.440207][T20453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3500.450306][T20453] Call Trace: [ 3500.453634][T20453] [ 3500.456587][T20453] dump_stack_lvl+0x188/0x24e [ 3500.461377][T20453] ? show_regs_print_info+0x12/0x12 [ 3500.466600][T20453] ? load_image+0x400/0x400 [ 3500.471220][T20453] ? __might_sleep+0xd0/0xd0 [ 3500.475829][T20453] ? __lock_acquire+0x7d10/0x7d10 [ 3500.480876][T20453] should_fail_ex+0x399/0x4d0 [ 3500.485575][T20453] should_failslab+0x5/0x20 [ 3500.490091][T20453] slab_pre_alloc_hook+0x59/0x310 [ 3500.495138][T20453] ? is_bpf_text_address+0x22/0x2a0 [ 3500.500355][T20453] kmem_cache_alloc+0x56/0x2f0 [ 3500.505137][T20453] ? __alloc_file+0x25/0x230 [ 3500.509761][T20453] __alloc_file+0x25/0x230 [ 3500.514198][T20453] alloc_empty_file+0x90/0x180 [ 3500.519067][T20453] path_openat+0x10f/0x2ee0 [ 3500.523596][T20453] ? verify_lock_unused+0x140/0x140 [ 3500.528812][T20453] ? kasan_set_track+0x60/0x70 [ 3500.533599][T20453] ? verify_lock_unused+0x140/0x140 [ 3500.538996][T20453] ? do_sys_openat2+0xdd/0x4b0 [ 3500.543779][T20453] ? __x64_sys_openat+0x135/0x160 [ 3500.548909][T20453] ? do_syscall_64+0x4c/0xa0 [ 3500.553521][T20453] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3500.559698][T20453] ? do_filp_open+0x430/0x430 [ 3500.564409][T20453] do_filp_open+0x1f1/0x430 [ 3500.569123][T20453] ? vfs_tmpfile+0x480/0x480 [ 3500.573746][T20453] ? _raw_spin_unlock+0x24/0x40 [ 3500.578610][T20453] ? alloc_fd+0x58f/0x630 [ 3500.582963][T20453] do_sys_openat2+0x150/0x4b0 [ 3500.587677][T20453] ? ct_nmi_exit+0x145/0x1c0 [ 3500.592302][T20453] ? ct_irq_exit_irqson+0x113/0x170 [ 3500.597552][T20453] ? do_sys_open+0xe0/0xe0 [ 3500.602090][T20453] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3500.608116][T20453] ? lock_chain_count+0x20/0x20 [ 3500.613004][T20453] ? exit_to_user_mode_loop+0xdc/0x110 [ 3500.618498][T20453] __x64_sys_openat+0x135/0x160 [ 3500.623383][T20453] do_syscall_64+0x4c/0xa0 [ 3500.627822][T20453] ? clear_bhb_loop+0x60/0xb0 [ 3500.632527][T20453] ? clear_bhb_loop+0x60/0xb0 [ 3500.637324][T20453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3500.643237][T20453] RIP: 0033:0x7ff8da15d04e [ 3500.647670][T20453] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3500.667343][T20453] RSP: 002b:00007ff8db039ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3500.675874][T20453] RAX: ffffffffffffffda RBX: 00007ff8db03a6c0 RCX: 00007ff8da15d04e [ 3500.683868][T20453] RDX: 0000000000000000 RSI: 00007ff8db039f90 RDI: ffffffffffffff9c [ 3500.692130][T20453] RBP: 00007ff8db03a090 R08: 0000000000000000 R09: 0000000000000000 [ 3500.700208][T20453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3500.708198][T20453] R13: 00007ff8da416038 R14: 00007ff8da415fa0 R15: 00007ffe1bbdb448 [ 3500.716373][T20453] [ 3502.641736][T20473] netlink: 'syz.4.13981': attribute type 6 has an invalid length. [ 3502.670830][T20473] netlink: 164 bytes leftover after parsing attributes in process `syz.4.13981'. [ 3503.069254][T20486] netlink: 'syz.5.13985': attribute type 33 has an invalid length. [ 3503.902890][ T3980] Bluetooth: hci0: command 0x0406 tx timeout [ 3503.921483][T20505] netlink: 156 bytes leftover after parsing attributes in process `syz.7.13989'. [ 3504.039017][T20508] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13992'. [ 3504.071648][T20508] netlink: 152 bytes leftover after parsing attributes in process `syz.6.13992'. [ 3504.133232][T20513] netlink: 'syz.6.13992': attribute type 2 has an invalid length. [ 3504.349330][T20508] netlink: 14 bytes leftover after parsing attributes in process `syz.6.13992'. [ 3504.722491][T20526] netlink: 144 bytes leftover after parsing attributes in process `syz.3.13997'. [ 3505.494518][T20552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14006'. [ 3505.522796][T20552] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14006'. [ 3505.555401][T20557] netlink: 'syz.3.14006': attribute type 2 has an invalid length. [ 3505.597507][T20552] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14006'. [ 3505.794474][T20555] netlink: 156 bytes leftover after parsing attributes in process `syz.6.14007'. [ 3508.319304][T20587] __nla_validate_parse: 1 callbacks suppressed [ 3508.319468][T20587] netlink: 156 bytes leftover after parsing attributes in process `syz.7.14016'. [ 3508.366729][T20588] netlink: 'syz.4.14014': attribute type 21 has an invalid length. [ 3508.405628][T20588] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14014'. [ 3508.522453][T20588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14014'. [ 3508.562536][T20593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14018'. [ 3508.583907][T20593] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14018'. [ 3508.636409][T20598] netlink: 'syz.3.14018': attribute type 2 has an invalid length. [ 3508.674107][T20599] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14018'. [ 3509.068453][T20605] netlink: 156 bytes leftover after parsing attributes in process `syz.5.14020'. [ 3509.210374][T20618] netlink: 'syz.3.14021': attribute type 21 has an invalid length. [ 3509.259576][T20618] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14021'. [ 3510.075070][T20630] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.14028'. [ 3510.094802][T20632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14031'. [ 3510.193666][T20639] netlink: 'syz.3.14031': attribute type 2 has an invalid length. [ 3510.915627][T20659] netlink: 'syz.4.14039': attribute type 2 has an invalid length. [ 3511.598359][T20673] netlink: 'syz.3.14045': attribute type 2 has an invalid length. [ 3512.004863][T20689] FAULT_INJECTION: forcing a failure. [ 3512.004863][T20689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3512.073327][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.080168][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3512.112683][T20689] CPU: 1 PID: 20689 Comm: syz.7.14049 Not tainted syzkaller #0 [ 3512.120330][T20689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3512.130434][T20689] Call Trace: [ 3512.133764][T20689] [ 3512.136755][T20689] dump_stack_lvl+0x188/0x24e [ 3512.141509][T20689] ? show_regs_print_info+0x12/0x12 [ 3512.146752][T20689] ? load_image+0x400/0x400 [ 3512.151299][T20689] ? __lock_acquire+0x7d10/0x7d10 [ 3512.156494][T20689] should_fail_ex+0x399/0x4d0 [ 3512.161379][T20689] _copy_from_user+0x2c/0x170 [ 3512.166089][T20689] iovec_from_user+0x143/0x360 [ 3512.170888][T20689] __import_iovec+0x6d/0x500 [ 3512.175532][T20689] import_iovec+0x6f/0xa0 [ 3512.179891][T20689] ___sys_sendmsg+0x252/0x360 [ 3512.184621][T20689] ? __sys_sendmsg+0x290/0x290 [ 3512.189548][T20689] ? __lock_acquire+0x7d10/0x7d10 [ 3512.194654][T20689] __se_sys_sendmsg+0x1bb/0x2a0 [ 3512.199560][T20689] ? ct_nmi_exit+0x145/0x1c0 [ 3512.204174][T20689] ? __x64_sys_sendmsg+0x80/0x80 [ 3512.209190][T20689] ? lockdep_hardirqs_on+0x94/0x140 [ 3512.214436][T20689] do_syscall_64+0x4c/0xa0 [ 3512.218997][T20689] ? clear_bhb_loop+0x60/0xb0 [ 3512.223714][T20689] ? clear_bhb_loop+0x60/0xb0 [ 3512.228426][T20689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3512.234344][T20689] RIP: 0033:0x7f3810b9c819 [ 3512.238782][T20689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3512.258589][T20689] RSP: 002b:00007f38119e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3512.267030][T20689] RAX: ffffffffffffffda RBX: 00007f3810e15fa0 RCX: 00007f3810b9c819 [ 3512.275028][T20689] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 3512.283110][T20689] RBP: 00007f38119e5090 R08: 0000000000000000 R09: 0000000000000000 [ 3512.291132][T20689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3512.299147][T20689] R13: 00007f3810e16038 R14: 00007f3810e15fa0 R15: 00007ffdf7c83d88 [ 3512.307170][T20689] [ 3514.391100][T20703] __nla_validate_parse: 12 callbacks suppressed [ 3514.391122][T20703] netlink: 212940 bytes leftover after parsing attributes in process `syz.6.14056'. [ 3514.489097][T20703] netlink: 212940 bytes leftover after parsing attributes in process `syz.6.14056'. [ 3514.542510][T20703] netlink: 212940 bytes leftover after parsing attributes in process `syz.6.14056'. [ 3514.574944][T20703] netlink: 212940 bytes leftover after parsing attributes in process `syz.6.14056'. [ 3514.594761][T20703] netlink: 212940 bytes leftover after parsing attributes in process `syz.6.14056'. [ 3514.633253][T20703] netlink: 212940 bytes leftover after parsing attributes in process `syz.6.14056'. [ 3514.704919][T20703] netlink: 212940 bytes leftover after parsing attributes in process `syz.6.14056'. [ 3514.724685][T20703] netlink: 212940 bytes leftover after parsing attributes in process `syz.6.14056'. [ 3514.785731][T20703] netlink: 212940 bytes leftover after parsing attributes in process `syz.6.14056'. [ 3514.823920][T20703] netlink: 212940 bytes leftover after parsing attributes in process `syz.6.14056'. [ 3514.985482][T20719] netlink: 'syz.7.14062': attribute type 2 has an invalid length. [ 3515.306033][T20726] delete_channel: no stack [ 3515.714239][T20745] netlink: 'syz.6.14072': attribute type 6 has an invalid length. [ 3515.781661][T20754] netlink: 'syz.5.14074': attribute type 25 has an invalid length. [ 3515.843868][T20752] netlink: 'syz.3.14077': attribute type 6 has an invalid length. [ 3515.932374][T20746] delete_channel: no stack [ 3516.667588][T20764] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 3517.082967][T20773] delete_channel: no stack [ 3517.851390][T20804] netlink: 'syz.3.14093': attribute type 6 has an invalid length. [ 3518.755238][T20816] netlink: 'syz.4.14096': attribute type 6 has an invalid length. [ 3519.038850][T20828] netlink: 'syz.5.14101': attribute type 1 has an invalid length. [ 3519.324150][T20830] FAULT_INJECTION: forcing a failure. [ 3519.324150][T20830] name failslab, interval 1, probability 0, space 0, times 0 [ 3519.428379][T20830] CPU: 1 PID: 20830 Comm: syz.3.14100 Not tainted syzkaller #0 [ 3519.436027][T20830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3519.446129][T20830] Call Trace: [ 3519.449455][T20830] [ 3519.452424][T20830] dump_stack_lvl+0x188/0x24e [ 3519.457169][T20830] ? show_regs_print_info+0x12/0x12 [ 3519.462419][T20830] ? load_image+0x400/0x400 [ 3519.466974][T20830] ? __might_sleep+0xd0/0xd0 [ 3519.471609][T20830] ? __lock_acquire+0x7d10/0x7d10 [ 3519.476696][T20830] should_fail_ex+0x399/0x4d0 [ 3519.481438][T20830] should_failslab+0x5/0x20 [ 3519.485963][T20830] slab_pre_alloc_hook+0x59/0x310 [ 3519.491007][T20830] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 3519.496674][T20830] __kmem_cache_alloc_node+0x4f/0x260 [ 3519.502075][T20830] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 3519.507648][T20830] __kmalloc+0xa0/0x240 [ 3519.511863][T20830] bpf_prog_test_run_skb+0x234/0x12a0 [ 3519.517821][T20830] ? __fget_files+0x28/0x4b0 [ 3519.522458][T20830] ? __fget_files+0x28/0x4b0 [ 3519.527097][T20830] ? __fget_files+0x43d/0x4b0 [ 3519.531908][T20830] ? cpu_online+0xa0/0xa0 [ 3519.536264][T20830] bpf_prog_test_run+0x31e/0x390 [ 3519.541240][T20830] __sys_bpf+0x62b/0x780 [ 3519.545623][T20830] ? bpf_link_show_fdinfo+0x380/0x380 [ 3519.551043][T20830] ? lock_chain_count+0x20/0x20 [ 3519.555934][T20830] __x64_sys_bpf+0x78/0x90 [ 3519.560468][T20830] do_syscall_64+0x4c/0xa0 [ 3519.564922][T20830] ? clear_bhb_loop+0x60/0xb0 [ 3519.569711][T20830] ? clear_bhb_loop+0x60/0xb0 [ 3519.574417][T20830] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3519.580432][T20830] RIP: 0033:0x7fac14f9c819 [ 3519.584959][T20830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3519.604593][T20830] RSP: 002b:00007fac15d85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3519.613028][T20830] RAX: ffffffffffffffda RBX: 00007fac15216090 RCX: 00007fac14f9c819 [ 3519.621021][T20830] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 3519.629019][T20830] RBP: 00007fac15d85090 R08: 0000000000000000 R09: 0000000000000000 [ 3519.637096][T20830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3519.645189][T20830] R13: 00007fac15216128 R14: 00007fac15216090 R15: 00007ffdb5e03828 [ 3519.653205][T20830] [ 3521.120122][T20849] __nla_validate_parse: 56 callbacks suppressed [ 3521.120215][T20849] netlink: 156 bytes leftover after parsing attributes in process `syz.5.14104'. [ 3521.446237][T20859] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.14106'. [ 3521.909846][T20870] netlink: 'syz.5.14109': attribute type 6 has an invalid length. [ 3521.937720][T20870] netlink: 164 bytes leftover after parsing attributes in process `syz.5.14109'. [ 3523.060880][T20886] netlink: 156 bytes leftover after parsing attributes in process `syz.7.14113'. [ 3523.119562][T20889] FAULT_INJECTION: forcing a failure. [ 3523.119562][T20889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3523.213340][T20889] CPU: 0 PID: 20889 Comm: syz.5.14116 Not tainted syzkaller #0 [ 3523.220974][T20889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3523.231178][T20889] Call Trace: [ 3523.234498][T20889] [ 3523.237479][T20889] dump_stack_lvl+0x188/0x24e [ 3523.242216][T20889] ? show_regs_print_info+0x12/0x12 [ 3523.247472][T20889] ? load_image+0x400/0x400 [ 3523.252023][T20889] ? __lock_acquire+0x7d10/0x7d10 [ 3523.257115][T20889] should_fail_ex+0x399/0x4d0 [ 3523.261841][T20889] _copy_to_user+0x2c/0x130 [ 3523.266396][T20889] bpf_test_finish+0x198/0x600 [ 3523.271206][T20889] ? convert___skb_to_skb+0x580/0x580 [ 3523.276618][T20889] ? convert_skb_to___skb+0x420/0x420 [ 3523.282042][T20889] ? __build_skb+0x257/0x3c0 [ 3523.286694][T20889] bpf_prog_test_run_skb+0xc99/0x12a0 [ 3523.292136][T20889] ? cpu_online+0xa0/0xa0 [ 3523.296518][T20889] bpf_prog_test_run+0x31e/0x390 [ 3523.301547][T20889] __sys_bpf+0x62b/0x780 [ 3523.305836][T20889] ? bpf_link_show_fdinfo+0x380/0x380 [ 3523.311256][T20889] ? lock_chain_count+0x20/0x20 [ 3523.316170][T20889] __x64_sys_bpf+0x78/0x90 [ 3523.320611][T20889] do_syscall_64+0x4c/0xa0 [ 3523.325048][T20889] ? clear_bhb_loop+0x60/0xb0 [ 3523.329746][T20889] ? clear_bhb_loop+0x60/0xb0 [ 3523.334452][T20889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3523.340364][T20889] RIP: 0033:0x7ff8da19c819 [ 3523.344812][T20889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3523.364887][T20889] RSP: 002b:00007ff8db03a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3523.373326][T20889] RAX: ffffffffffffffda RBX: 00007ff8da415fa0 RCX: 00007ff8da19c819 [ 3523.381318][T20889] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 3523.389309][T20889] RBP: 00007ff8db03a090 R08: 0000000000000000 R09: 0000000000000000 [ 3523.397296][T20889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3523.405808][T20889] R13: 00007ff8da416038 R14: 00007ff8da415fa0 R15: 00007ffe1bbdb448 [ 3523.413901][T20889] [ 3523.511738][T20885] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14115'. [ 3523.532427][T20885] netlink: 152 bytes leftover after parsing attributes in process `syz.6.14115'. [ 3523.561702][T20891] netlink: 'syz.6.14115': attribute type 2 has an invalid length. [ 3523.583621][T20892] netlink: 14 bytes leftover after parsing attributes in process `syz.6.14115'. [ 3523.903733][T20899] netlink: 'syz.5.14117': attribute type 6 has an invalid length. [ 3523.952156][T20899] netlink: 164 bytes leftover after parsing attributes in process `syz.5.14117'. [ 3525.167348][T20906] netlink: 156 bytes leftover after parsing attributes in process `syz.7.14120'. [ 3525.401743][T20911] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.14123'. [ 3525.514928][T20919] netlink: 'syz.6.14124': attribute type 21 has an invalid length. [ 3525.578226][T20919] netlink: 'syz.6.14124': attribute type 15 has an invalid length. [ 3526.130612][T20929] netlink: 'syz.4.14129': attribute type 6 has an invalid length. [ 3526.196899][T20929] netlink: 164 bytes leftover after parsing attributes in process `syz.4.14129'. [ 3526.453533][T20935] netlink: 156 bytes leftover after parsing attributes in process `syz.5.14131'. [ 3526.579359][T20938] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14132'. [ 3526.730960][T20938] netlink: 152 bytes leftover after parsing attributes in process `syz.7.14132'. [ 3526.823299][T20939] netlink: 'syz.7.14132': attribute type 2 has an invalid length. [ 3526.894321][T20938] netlink: 14 bytes leftover after parsing attributes in process `syz.7.14132'. [ 3527.161671][T20948] netlink: 156 bytes leftover after parsing attributes in process `syz.5.14145'. [ 3527.448619][T20957] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.14140'. [ 3527.978019][T20977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14147'. [ 3527.987684][T20977] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14147'. [ 3528.004237][T20977] netlink: 'syz.3.14147': attribute type 2 has an invalid length. [ 3528.021205][T20977] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14147'. [ 3528.637859][T20995] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 3528.704691][T20995] syzkaller0: linktype set to 778 [ 3528.769659][T21002] device hsr_slave_0 left promiscuous mode [ 3528.779304][T21002] device hsr_slave_1 left promiscuous mode [ 3529.083597][T20994] netlink: 'syz.6.14153': attribute type 21 has an invalid length. [ 3529.548957][T21018] netlink: 'syz.5.14160': attribute type 2 has an invalid length. [ 3530.017196][T21031] netlink: 'syz.7.14165': attribute type 6 has an invalid length. [ 3531.281330][T21051] tipc: Started in network mode [ 3531.292376][T21051] tipc: Node identity 9215a268, cluster identity 4711 [ 3531.300161][T21051] tipc: Node number set to 2450891368 [ 3531.383952][T21055] netlink: 'syz.4.14169': attribute type 10 has an invalid length. [ 3531.430114][T21055] team0: Device hsr_slave_0 failed to register rx_handler [ 3531.853526][T21064] netlink: 'syz.5.14171': attribute type 10 has an invalid length. [ 3531.906268][T21064] __nla_validate_parse: 8 callbacks suppressed [ 3531.906287][T21064] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14171'. [ 3531.986375][T21064] bridge0: port 3(veth0_vlan) entered blocking state [ 3532.013590][T21064] bridge0: port 3(veth0_vlan) entered disabled state [ 3532.038466][T21064] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 3532.241664][T21067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14173'. [ 3532.253627][T21067] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14173'. [ 3532.266226][T21068] netlink: 'syz.3.14173': attribute type 2 has an invalid length. [ 3532.274877][T21071] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14173'. [ 3532.486600][T21077] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.14176'. [ 3533.943839][T21108] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 3534.081007][T21108] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.14185'. [ 3534.182842][T21114] netlink: 156 bytes leftover after parsing attributes in process `syz.7.14188'. [ 3534.606580][T21125] netlink: 'syz.6.14190': attribute type 6 has an invalid length. [ 3534.615180][T21125] netlink: 164 bytes leftover after parsing attributes in process `syz.6.14190'. [ 3537.539909][T21153] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.14196'. [ 3538.686926][T21175] netlink: 156 bytes leftover after parsing attributes in process `syz.3.14202'. [ 3540.324786][T21190] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 3540.331977][T21190] syzkaller0: linktype set to 778 [ 3540.909754][T21211] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.14212'. [ 3541.966880][T21224] netlink: 'syz.7.14215': attribute type 6 has an invalid length. [ 3541.975673][T21224] netlink: 164 bytes leftover after parsing attributes in process `syz.7.14215'. [ 3542.793857][T14661] Bluetooth: hci5: unexpected event 0x1d length: 15 > 5 [ 3543.949601][T21267] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.14226'. [ 3544.931006][T21281] netlink: 'syz.5.14232': attribute type 6 has an invalid length. [ 3544.987454][T21281] netlink: 164 bytes leftover after parsing attributes in process `syz.5.14232'. [ 3545.920960][T21302] netlink: 'syz.7.14236': attribute type 6 has an invalid length. [ 3546.036355][T21302] netlink: 140 bytes leftover after parsing attributes in process `syz.7.14236'. [ 3546.123627][T21307] device veth1_macvtap left promiscuous mode [ 3546.152681][T21311] device veth1_macvtap entered promiscuous mode [ 3546.180973][T21311] device macsec0 entered promiscuous mode [ 3546.416047][T21317] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.14242'. [ 3546.644715][T21319] FAULT_INJECTION: forcing a failure. [ 3546.644715][T21319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3546.681087][T21319] CPU: 0 PID: 21319 Comm: syz.3.14243 Not tainted syzkaller #0 [ 3546.688726][T21319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3546.698908][T21319] Call Trace: [ 3546.702219][T21319] [ 3546.705192][T21319] dump_stack_lvl+0x188/0x24e [ 3546.709923][T21319] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3546.716141][T21319] ? show_regs_print_info+0x12/0x12 [ 3546.721392][T21319] ? load_image+0x400/0x400 [ 3546.725959][T21319] should_fail_ex+0x399/0x4d0 [ 3546.730685][T21319] _copy_from_user+0x2c/0x170 [ 3546.735404][T21319] perf_copy_attr+0x174/0x850 [ 3546.740123][T21319] __se_sys_perf_event_open+0xf5/0x1ec0 [ 3546.745728][T21319] ? lock_chain_count+0x20/0x20 [ 3546.750634][T21319] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 3546.756349][T21319] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 3546.762122][T21319] do_syscall_64+0x4c/0xa0 [ 3546.766578][T21319] ? clear_bhb_loop+0x60/0xb0 [ 3546.771296][T21319] ? clear_bhb_loop+0x60/0xb0 [ 3546.776021][T21319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3546.781970][T21319] RIP: 0033:0x7fac14f9c819 [ 3546.786416][T21319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3546.806155][T21319] RSP: 002b:00007fac15da6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3546.814622][T21319] RAX: ffffffffffffffda RBX: 00007fac15215fa0 RCX: 00007fac14f9c819 [ 3546.822722][T21319] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000000 [ 3546.830737][T21319] RBP: 00007fac15da6090 R08: 0000000000000000 R09: 0000000000000000 [ 3546.838762][T21319] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 3546.846853][T21319] R13: 00007fac15216038 R14: 00007fac15215fa0 R15: 00007ffdb5e03828 [ 3546.854977][T21319] [ 3547.499206][T21338] netlink: 'syz.7.14250': attribute type 6 has an invalid length. [ 3547.510239][T21338] netlink: 164 bytes leftover after parsing attributes in process `syz.7.14250'. [ 3547.710846][T21344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14251'. [ 3547.742984][T21344] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14251'. [ 3547.795739][T21347] netlink: 'syz.4.14251': attribute type 2 has an invalid length. [ 3547.899973][T21344] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14251'. [ 3548.064660][T21351] netlink: 'syz.6.14253': attribute type 6 has an invalid length. [ 3548.074959][T21351] netlink: 164 bytes leftover after parsing attributes in process `syz.6.14253'. [ 3548.353257][T21355] netlink: 'syz.4.14254': attribute type 1 has an invalid length. [ 3548.492240][T21355] netlink: 'syz.4.14254': attribute type 4 has an invalid length. [ 3548.500424][T21355] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.14254'. [ 3549.464770][T21374] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.14259'. [ 3549.482773][T21380] FAULT_INJECTION: forcing a failure. [ 3549.482773][T21380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3549.536588][T21380] CPU: 1 PID: 21380 Comm: syz.3.14261 Not tainted syzkaller #0 [ 3549.544225][T21380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3549.554296][T21380] Call Trace: [ 3549.557588][T21380] [ 3549.560896][T21380] dump_stack_lvl+0x188/0x24e [ 3549.565797][T21380] ? show_regs_print_info+0x12/0x12 [ 3549.571108][T21380] ? load_image+0x400/0x400 [ 3549.575657][T21380] ? __lock_acquire+0x7d10/0x7d10 [ 3549.580799][T21380] should_fail_ex+0x399/0x4d0 [ 3549.585498][T21380] _copy_from_user+0x2c/0x170 [ 3549.590196][T21380] iovec_from_user+0x143/0x360 [ 3549.594974][T21380] __import_iovec+0x6d/0x500 [ 3549.599587][T21380] import_iovec+0x6f/0xa0 [ 3549.603934][T21380] ___sys_sendmsg+0x252/0x360 [ 3549.608646][T21380] ? __sys_sendmsg+0x290/0x290 [ 3549.613454][T21380] ? __lock_acquire+0x7d10/0x7d10 [ 3549.618522][T21380] __se_sys_sendmsg+0x1bb/0x2a0 [ 3549.623512][T21380] ? __x64_sys_sendmsg+0x80/0x80 [ 3549.628508][T21380] ? lockdep_hardirqs_on+0x94/0x140 [ 3549.633981][T21380] do_syscall_64+0x4c/0xa0 [ 3549.638414][T21380] ? clear_bhb_loop+0x60/0xb0 [ 3549.643109][T21380] ? clear_bhb_loop+0x60/0xb0 [ 3549.647803][T21380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3549.653723][T21380] RIP: 0033:0x7fac14f9c819 [ 3549.658160][T21380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3549.677779][T21380] RSP: 002b:00007fac15da6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3549.686305][T21380] RAX: ffffffffffffffda RBX: 00007fac15215fa0 RCX: 00007fac14f9c819 [ 3549.694375][T21380] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 3549.702355][T21380] RBP: 00007fac15da6090 R08: 0000000000000000 R09: 0000000000000000 [ 3549.710342][T21380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3549.718324][T21380] R13: 00007fac15216038 R14: 00007fac15215fa0 R15: 00007ffdb5e03828 [ 3549.726495][T21380] [ 3550.653189][T21396] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14266'. [ 3550.692586][T21396] netlink: 152 bytes leftover after parsing attributes in process `syz.5.14266'. [ 3550.738863][T21398] netlink: 'syz.5.14266': attribute type 2 has an invalid length. [ 3550.781106][T21396] netlink: 14 bytes leftover after parsing attributes in process `syz.5.14266'. [ 3551.150224][T21406] netlink: 'syz.3.14267': attribute type 6 has an invalid length. [ 3551.170218][T21406] netlink: 164 bytes leftover after parsing attributes in process `syz.3.14267'. [ 3554.196347][T21435] netlink: 156 bytes leftover after parsing attributes in process `syz.5.14277'. [ 3554.623362][T21442] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14278'. [ 3554.700972][T21442] netlink: 152 bytes leftover after parsing attributes in process `syz.7.14278'. [ 3554.887596][T21444] netlink: 'syz.7.14278': attribute type 2 has an invalid length. [ 3557.329138][T21459] netlink: 'syz.4.14283': attribute type 6 has an invalid length. [ 3557.370330][T21459] netlink: 164 bytes leftover after parsing attributes in process `syz.4.14283'. [ 3558.948617][T21483] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.14290'. [ 3559.799490][T21491] netlink: 156 bytes leftover after parsing attributes in process `syz.5.14293'. [ 3559.866304][T21493] netlink: 'syz.7.14294': attribute type 6 has an invalid length. [ 3559.884475][T21493] netlink: 164 bytes leftover after parsing attributes in process `syz.7.14294'. [ 3560.485880][T21502] netlink: 'syz.3.14296': attribute type 6 has an invalid length. [ 3560.633847][T21502] netlink: 140 bytes leftover after parsing attributes in process `syz.3.14296'. [ 3560.751656][T21510] netlink: 'syz.7.14299': attribute type 6 has an invalid length. [ 3560.781219][T21510] netlink: 164 bytes leftover after parsing attributes in process `syz.7.14299'. [ 3560.826362][T21513] netlink: 'syz.6.14300': attribute type 12 has an invalid length. [ 3560.844820][T21513] netlink: 132 bytes leftover after parsing attributes in process `syz.6.14300'. [ 3564.334686][T21536] netlink: 156 bytes leftover after parsing attributes in process `syz.6.14306'. [ 3564.432900][T21538] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.14307'. [ 3564.465315][T21542] netlink: 40 bytes leftover after parsing attributes in process `syz.7.14309'. [ 3564.609110][T21539] delete_channel: no stack [ 3564.952845][T21562] netlink: 'syz.6.14314': attribute type 6 has an invalid length. [ 3564.961921][T21562] netlink: 164 bytes leftover after parsing attributes in process `syz.6.14314'. [ 3565.493594][T21570] netlink: 'syz.4.14319': attribute type 12 has an invalid length. [ 3565.532366][T21570] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14319'. [ 3565.980388][T21574] delete_channel: no stack [ 3569.016364][T21608] netlink: 'syz.3.14331': attribute type 6 has an invalid length. [ 3569.175514][T21608] netlink: 164 bytes leftover after parsing attributes in process `syz.3.14331'. [ 3569.879324][T21618] FAULT_INJECTION: forcing a failure. [ 3569.879324][T21618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3569.928920][T21618] CPU: 0 PID: 21618 Comm: syz.4.14333 Not tainted syzkaller #0 [ 3569.936562][T21618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3569.946644][T21618] Call Trace: [ 3569.949961][T21618] [ 3569.952918][T21618] dump_stack_lvl+0x188/0x24e [ 3569.957633][T21618] ? show_regs_print_info+0x12/0x12 [ 3569.962879][T21618] ? load_image+0x400/0x400 [ 3569.967501][T21618] ? __might_fault+0xa6/0x120 [ 3569.972214][T21618] should_fail_ex+0x399/0x4d0 [ 3569.976924][T21618] copyin+0x1b/0x120 [ 3569.980878][T21618] _copy_from_iter+0x447/0x1130 [ 3569.985772][T21618] ? copyout_mc+0x110/0x110 [ 3569.990309][T21618] ? __virt_addr_valid+0x188/0x540 [ 3569.995454][T21618] ? __virt_addr_valid+0x188/0x540 [ 3570.000593][T21618] ? __virt_addr_valid+0x465/0x540 [ 3570.005743][T21618] ? __check_object_size+0x500/0xa40 [ 3570.011063][T21618] netlink_sendmsg+0x755/0xbd0 [ 3570.015870][T21618] ? netlink_getsockopt+0x550/0x550 [ 3570.021104][T21618] ? aa_sock_msg_perm+0x94/0x150 [ 3570.026067][T21618] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3570.031395][T21618] ? security_socket_sendmsg+0x7c/0xa0 [ 3570.036895][T21618] ? netlink_getsockopt+0x550/0x550 [ 3570.042127][T21618] ____sys_sendmsg+0x5be/0x970 [ 3570.046935][T21618] ? __sys_sendmsg_sock+0x30/0x30 [ 3570.051987][T21618] ? __import_iovec+0x315/0x500 [ 3570.056873][T21618] ? import_iovec+0x6f/0xa0 [ 3570.061410][T21618] ___sys_sendmsg+0x2a2/0x360 [ 3570.066130][T21618] ? __sys_sendmsg+0x290/0x290 [ 3570.070964][T21618] ? ktime_get_real_ts64+0x440/0x440 [ 3570.076313][T21618] __se_sys_sendmsg+0x1bb/0x2a0 [ 3570.081212][T21618] ? __x64_sys_sendmsg+0x80/0x80 [ 3570.086206][T21618] ? lockdep_hardirqs_on+0x94/0x140 [ 3570.091433][T21618] do_syscall_64+0x4c/0xa0 [ 3570.095880][T21618] ? clear_bhb_loop+0x60/0xb0 [ 3570.100593][T21618] ? clear_bhb_loop+0x60/0xb0 [ 3570.105305][T21618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3570.111217][T21618] RIP: 0033:0x7f1d46b9c819 [ 3570.115668][T21618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3570.135299][T21618] RSP: 002b:00007f1d479a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3570.143917][T21618] RAX: ffffffffffffffda RBX: 00007f1d46e15fa0 RCX: 00007f1d46b9c819 [ 3570.151912][T21618] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 3570.159904][T21618] RBP: 00007f1d479a9090 R08: 0000000000000000 R09: 0000000000000000 [ 3570.167899][T21618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3570.175908][T21618] R13: 00007f1d46e16038 R14: 00007f1d46e15fa0 R15: 00007ffef5e41ca8 [ 3570.183934][T21618] [ 3570.303880][T21619] delete_channel: no stack [ 3571.427733][T21655] netlink: 'syz.7.14343': attribute type 10 has an invalid length. [ 3571.481473][T21655] netlink: 55 bytes leftover after parsing attributes in process `syz.7.14343'. [ 3571.952709][T21668] netlink: 'syz.6.14347': attribute type 6 has an invalid length. [ 3571.991242][T21668] netlink: 164 bytes leftover after parsing attributes in process `syz.6.14347'. [ 3572.280794][T21672] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.14349'. [ 3572.647336][T21672] bridge_slave_1: default FDB implementation only supports local addresses [ 3572.843919][T21683] netlink: 'syz.3.14351': attribute type 1 has an invalid length. [ 3572.852122][T21683] netlink: 'syz.3.14351': attribute type 4 has an invalid length. [ 3573.022296][T21683] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.14351'. [ 3573.040222][T21674] delete_channel: no stack [ 3573.579258][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3573.585939][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 3573.638035][T21690] netlink: 156 bytes leftover after parsing attributes in process `syz.7.14353'. [ 3574.220122][T21702] netlink: 156 bytes leftover after parsing attributes in process `syz.7.14358'. [ 3574.346859][T21704] netlink: 'syz.6.14359': attribute type 10 has an invalid length. [ 3574.363447][T21704] netlink: 55 bytes leftover after parsing attributes in process `syz.6.14359'. [ 3575.178111][T21723] netlink: 'syz.3.14364': attribute type 6 has an invalid length. [ 3575.233966][T21723] netlink: 164 bytes leftover after parsing attributes in process `syz.3.14364'. [ 3577.006228][T21718] delete_channel: no stack [ 3577.201391][T21728] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.14365'. [ 3577.223664][T21730] netlink: 156 bytes leftover after parsing attributes in process `syz.7.14368'. [ 3578.267830][T21747] netlink: 156 bytes leftover after parsing attributes in process `syz.6.14373'. [ 3578.399025][T21752] netlink: 'syz.4.14374': attribute type 10 has an invalid length. [ 3578.449474][T21752] netlink: 55 bytes leftover after parsing attributes in process `syz.4.14374'. [ 3578.470879][T21746] delete_channel: no stack [ 3579.878885][T21769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14379'. [ 3579.919640][T21769] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14379'. [ 3580.012581][T21774] netlink: 'syz.4.14379': attribute type 2 has an invalid length. [ 3580.112655][T21769] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14379'. [ 3580.367031][T21779] netlink: 156 bytes leftover after parsing attributes in process `syz.6.14382'. [ 3580.575343][T21782] netlink: 'syz.7.14383': attribute type 2 has an invalid length. [ 3580.618482][T21785] FAULT_INJECTION: forcing a failure. [ 3580.618482][T21785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3580.832968][T21785] CPU: 0 PID: 21785 Comm: syz.4.14384 Not tainted syzkaller #0 [ 3580.840780][T21785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3580.850967][T21785] Call Trace: [ 3580.854288][T21785] [ 3580.857257][T21785] dump_stack_lvl+0x188/0x24e [ 3580.862071][T21785] ? show_regs_print_info+0x12/0x12 [ 3580.867324][T21785] ? load_image+0x400/0x400 [ 3580.871960][T21785] ? __lock_acquire+0x7d10/0x7d10 [ 3580.877033][T21785] ? snprintf+0xe5/0x140 [ 3580.881405][T21785] should_fail_ex+0x399/0x4d0 [ 3580.886132][T21785] _copy_to_user+0x2c/0x130 [ 3580.890688][T21785] simple_read_from_buffer+0xe3/0x150 [ 3580.896217][T21785] proc_fail_nth_read+0x1a6/0x220 [ 3580.901290][T21785] ? proc_fault_inject_write+0x310/0x310 [ 3580.906967][T21785] ? fsnotify_perm+0x248/0x550 [ 3580.911754][T21785] ? proc_fault_inject_write+0x310/0x310 [ 3580.917403][T21785] vfs_read+0x2de/0xa00 [ 3580.921586][T21785] ? kernel_read+0x1e0/0x1e0 [ 3580.926294][T21785] ? __fget_files+0x28/0x4b0 [ 3580.931083][T21785] ? __fget_files+0x28/0x4b0 [ 3580.935794][T21785] ? __fget_files+0x43d/0x4b0 [ 3580.940504][T21785] ? __fdget_pos+0x2ae/0x360 [ 3580.945115][T21785] ? ksys_read+0x71/0x250 [ 3580.949475][T21785] ksys_read+0x14c/0x250 [ 3580.953742][T21785] ? vfs_write+0xa30/0xa30 [ 3580.958195][T21785] ? lockdep_hardirqs_on+0x94/0x140 [ 3580.963418][T21785] do_syscall_64+0x4c/0xa0 [ 3580.967858][T21785] ? clear_bhb_loop+0x60/0xb0 [ 3580.972575][T21785] ? clear_bhb_loop+0x60/0xb0 [ 3580.977271][T21785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3580.983273][T21785] RIP: 0033:0x7f1d46b5d04e [ 3580.987705][T21785] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3581.007586][T21785] RSP: 002b:00007f1d47987fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3581.016016][T21785] RAX: ffffffffffffffda RBX: 00007f1d479886c0 RCX: 00007f1d46b5d04e [ 3581.024012][T21785] RDX: 000000000000000f RSI: 00007f1d479880a0 RDI: 0000000000000004 [ 3581.032016][T21785] RBP: 00007f1d47988090 R08: 0000000000000000 R09: 0000000000000000 [ 3581.040002][T21785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3581.047998][T21785] R13: 00007f1d46e16128 R14: 00007f1d46e16090 R15: 00007ffef5e41ca8 [ 3581.055999][T21785] [ 3581.287476][T21782] device 0 entered promiscuous mode [ 3581.832871][T21800] delete_channel: no stack [ 3583.457950][T21830] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14395'. [ 3583.477911][T21830] netlink: 152 bytes leftover after parsing attributes in process `syz.5.14395'. [ 3583.497549][T21835] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.14397'. [ 3583.512752][T21832] netlink: 156 bytes leftover after parsing attributes in process `syz.7.14396'. [ 3583.568883][T21837] netlink: 'syz.5.14395': attribute type 2 has an invalid length. [ 3583.586331][T21830] netlink: 14 bytes leftover after parsing attributes in process `syz.5.14395'. [ 3584.389540][T21842] delete_channel: no stack [ 3585.798221][T21875] netlink: 830 bytes leftover after parsing attributes in process `syz.7.14407'. [ 3585.879460][T21880] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.14408'. [ 3586.034869][T21879] netlink: 156 bytes leftover after parsing attributes in process `syz.5.14410'. [ 3586.610713][T21889] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14412'. [ 3586.660547][T21889] netlink: 152 bytes leftover after parsing attributes in process `syz.7.14412'. [ 3586.712920][T21894] netlink: 'syz.7.14412': attribute type 2 has an invalid length. [ 3586.770012][T21893] device bridge_slave_1 left promiscuous mode [ 3586.780482][T21893] bridge0: port 2(bridge_slave_1) entered disabled state [ 3586.838828][T21893] device bridge_slave_0 left promiscuous mode [ 3586.858180][T21893] bridge0: port 1(bridge_slave_0) entered disabled state [ 3586.952998][T21895] delete_channel: no stack [ 3588.908917][T21938] __nla_validate_parse: 4 callbacks suppressed [ 3588.908940][T21938] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14428'. [ 3588.967837][T21938] netlink: 152 bytes leftover after parsing attributes in process `syz.7.14428'. [ 3589.002308][T21940] netlink: 'syz.7.14428': attribute type 2 has an invalid length. [ 3589.095360][T21938] netlink: 14 bytes leftover after parsing attributes in process `syz.7.14428'. [ 3589.311290][T21945] netlink: 'syz.3.14430': attribute type 6 has an invalid length. [ 3589.367689][T21939] delete_channel: no stack [ 3589.372920][T21945] netlink: 164 bytes leftover after parsing attributes in process `syz.3.14430'. [ 3589.682424][T21952] netlink: 156 bytes leftover after parsing attributes in process `syz.7.14432'. [ 3589.960375][T21958] netlink: 830 bytes leftover after parsing attributes in process `syz.4.14433'. [ 3590.312884][T21960] device bridge_slave_1 left promiscuous mode [ 3590.319676][T21960] bridge0: port 2(bridge_slave_1) entered disabled state [ 3590.409808][T21960] device bridge_slave_0 left promiscuous mode [ 3590.430290][T21955] delete_channel: no stack [ 3590.433008][T21960] bridge0: port 1(bridge_slave_0) entered disabled state [ 3590.577746][T21963] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.14434'. [ 3591.176602][T21975] netlink: 156 bytes leftover after parsing attributes in process `syz.6.14438'. [ 3591.665135][T21986] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.14452'. [ 3591.786594][T21988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14442'. [ 3591.827370][T21988] netlink: 'syz.4.14442': attribute type 2 has an invalid length. [ 3594.189561][T22031] __nla_validate_parse: 4 callbacks suppressed [ 3594.189584][T22031] netlink: 830 bytes leftover after parsing attributes in process `syz.5.14451'. [ 3594.283755][T22029] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.14457'. [ 3594.335967][T22031] device bridge_slave_1 left promiscuous mode [ 3594.355875][T22031] bridge0: port 2(bridge_slave_1) entered disabled state [ 3594.422835][T22031] device bridge_slave_0 left promiscuous mode [ 3594.440896][T22031] bridge0: port 1(bridge_slave_0) entered disabled state [ 3594.458927][T22040] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.14459'. [ 3595.452282][T22039] netlink: 830 bytes leftover after parsing attributes in process `syz.4.14459'. [ 3595.781418][T22059] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14466'. [ 3595.962817][T22065] netlink: 156 bytes leftover after parsing attributes in process `syz.3.14468'. [ 3597.387295][T22096] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.14477'. [ 3597.920787][T22101] netlink: 'syz.7.14479': attribute type 39 has an invalid length. [ 3598.386620][T22108] netlink: 156 bytes leftover after parsing attributes in process `syz.6.14481'. [ 3598.542853][T22115] netlink: 830 bytes leftover after parsing attributes in process `syz.7.14483'. [ 3598.874114][T22124] syz.4.14487[22124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3598.874223][T22124] syz.4.14487[22124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3599.367764][T22128] netlink: 'syz.5.14489': attribute type 17 has an invalid length. [ 3599.504442][T22128] netlink: 148 bytes leftover after parsing attributes in process `syz.5.14489'. [ 3600.053437][T22140] netlink: 'syz.4.14491': attribute type 10 has an invalid length. [ 3600.815804][T22158] netlink: 'syz.6.14494': attribute type 39 has an invalid length. [ 3601.163674][T22171] netlink: 156 bytes leftover after parsing attributes in process `syz.3.14498'. [ 3602.969125][T22202] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.14507'. [ 3604.888366][T22217] device macsec0 entered promiscuous mode [ 3605.194303][T22229] FAULT_INJECTION: forcing a failure. [ 3605.194303][T22229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3605.222443][T22229] CPU: 1 PID: 22229 Comm: syz.5.14515 Not tainted syzkaller #0 [ 3605.230170][T22229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3605.240265][T22229] Call Trace: [ 3605.243606][T22229] [ 3605.246573][T22229] dump_stack_lvl+0x188/0x24e [ 3605.251304][T22229] ? show_regs_print_info+0x12/0x12 [ 3605.256555][T22229] ? load_image+0x400/0x400 [ 3605.261103][T22229] ? __lock_acquire+0x7d10/0x7d10 [ 3605.266180][T22229] should_fail_ex+0x399/0x4d0 [ 3605.270902][T22229] _copy_from_user+0x2c/0x170 [ 3605.275629][T22229] __copy_msghdr+0x3b7/0x580 [ 3605.280286][T22229] ___sys_sendmsg+0x210/0x360 [ 3605.285024][T22229] ? __sys_sendmsg+0x290/0x290 [ 3605.289863][T22229] ? __lock_acquire+0x7d10/0x7d10 [ 3605.294965][T22229] __se_sys_sendmsg+0x1bb/0x2a0 [ 3605.299870][T22229] ? __x64_sys_sendmsg+0x80/0x80 [ 3605.304978][T22229] ? lockdep_hardirqs_on+0x94/0x140 [ 3605.310231][T22229] do_syscall_64+0x4c/0xa0 [ 3605.314697][T22229] ? clear_bhb_loop+0x60/0xb0 [ 3605.319420][T22229] ? clear_bhb_loop+0x60/0xb0 [ 3605.324185][T22229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3605.330129][T22229] RIP: 0033:0x7ff8da19c819 [ 3605.334599][T22229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3605.354263][T22229] RSP: 002b:00007ff8db019028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3605.362734][T22229] RAX: ffffffffffffffda RBX: 00007ff8da416090 RCX: 00007ff8da19c819 [ 3605.370875][T22229] RDX: 0000000024000008 RSI: 00002000000000c0 RDI: 0000000000000008 [ 3605.378972][T22229] RBP: 00007ff8db019090 R08: 0000000000000000 R09: 0000000000000000 [ 3605.387093][T22229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3605.395115][T22229] R13: 00007ff8da416128 R14: 00007ff8da416090 R15: 00007ffe1bbdb448 [ 3605.403170][T22229] serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.