last executing test programs: 4m3.98208318s ago: executing program 0 (id=607): r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={0x0, r2, 0x0, 0x0, 0x0}, 0x30) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20}, 0x40000100) gettid() r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000580)={0xa, 0x0, @empty=0xf5ff}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000001100)="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", 0xff0}, {&(0x7f0000002100)="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", 0x129}], 0x2, &(0x7f0000002680)=[@ip_tos_int={{0x14, 0x29, 0x3e, 0xefe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @local}}}, @ip_tos_u8={{0x11}}], 0x50}, 0xff00) syz_clone(0x28000000, &(0x7f0000000700), 0x0, 0x0, 0x0, &(0x7f0000000940)="1a89e22e4ff387988e4535f3ebfd8dadab4190603777be28763ffbc36cb6855a5ad982b68a66ea055761df09b3ae598cdb4e8f5fb1157b71ff670891ac2186fa03f02cbb411096ab79a1b47e35cbf1f57809c1a69aab4f07caaf332f7cf4f5532e196f8884964891888942a6f2d4bbd217bb3020cd5474397bb643f39d164bb7c74d11ebc8081065abefe1970106238b4d") openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000a40)='cpu.pressure\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001", 0x27}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000a80)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 4m2.976388523s ago: executing program 0 (id=613): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x51, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=""/155}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socketpair(0x1, 0x1, 0x100, &(0x7f0000000380)) r1 = socket$kcm(0x23, 0x5, 0x0) sendmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40c0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200"/16], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/net\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x4004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x5000, 0x80, 0x0, 0x0, 0x1000000000000000, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f00000006c0), 0xcf) sendmsg$kcm(r3, &(0x7f0000000700)={&(0x7f0000000740)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000880)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80, 0x0}, 0x4000040) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYRES8=r0, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="1400000033000b0f29523cbfbf2f9be00b2d3e21", 0x14}], 0x1}, 0x20000890) 4m2.639746027s ago: executing program 0 (id=615): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000a8e22d81adc106a068e81dd89d14c0e9509761ebbdc2008a89f0c93e55887a04a985a7cb7b992d16421fee2331c9362939b97df6fb9174075ddc8863efa631377b5afa73c0ee0e7706c2cd3f9125436c9a2398e5f29858045e93166e0ae4501cd626047408d85f8e464995ea8d1ae07e198827230abe75be0a8e06eb172a33d2ad7aca39234eba3f416461e94bc357e8cf7610a0cb2e3d665c3e49c5305f6f508abaf0ae1e93319efec60271051d4213f200"/212, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xe, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xfffffffc}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20501, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) close(0x3) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x94, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, @perf_config_ext={0x0, 0x772}, 0x108500, 0xe9a, 0x7baf376b, 0x3, 0x5, 0x0, 0x5}, 0x0, 0xfffffffc00000000, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[], 0x0, 0x37, 0xfffffffffffffe4b, 0x9}, 0x28) perf_event_open(&(0x7f0000000940)={0x3, 0x80, 0x5, 0xfe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x288c, 0x401}, 0x8000, 0x40000006, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000a80)=r3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x11efa, 0x4, 0x400098, 0x0, 0x2, 0xfffff277, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, r3, 0x2) recvmsg$unix(r4, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x7d, &(0x7f0000000c00)=r7, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x1, 0x1000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006b0ae0ff0000000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0xc4, &(0x7f0000000700)=""/196}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000840)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000880)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000900)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1c, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 3m59.3780862s ago: executing program 0 (id=619): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x44, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext={0x0, 0xc}, 0x58, 0xe299, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x64}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f00000005c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}, [@ldst={0x5}]}, &(0x7f0000000600)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xffff000000000000) 3m58.982327971s ago: executing program 0 (id=624): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000400)=@sco, 0x80, 0x0}, 0x20000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x1}, 0x10, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f00000001c0)) close(0xffffffffffffffff) r1 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000200)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000756008bffc0635f98238ed725c8defea792079a45f73e0b306"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70000000000850000000c000000b70000001d0c8cd310af0896bc77108fce4d9000000000851000000300000018000000000000000000000000000000950000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="120000007f0000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000005c0), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x5, &(0x7f0000000740)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000780)='GPL\x00'}, 0x80) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000800)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={&(0x7f0000000980)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000a40)="7f", 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="180084000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000ac0), 0x45) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xf, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x7, 0xc, &(0x7f0000000c80)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRES8], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f0000000640), 0x4) 3m54.978457361s ago: executing program 0 (id=632): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x8000000002, r1, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x2, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840), &(0x7f0000000880), 0xffffffff, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000008c0)={r3, &(0x7f0000000900)="c06eb17a55d95866fb", 0x0}, 0x20) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000740)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="d8000000140081044e81f782db44b9040211080220000000040000a118000200e00020fd00000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8080) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xb6, &(0x7f0000000380)=""/182, 0x40f00, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xe, 0x5}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)=[{0x3, 0x1, 0x5, 0x4}, {0x1, 0x4, 0xd, 0x3}, {0x5, 0x3, 0xb, 0x7}], 0x10, 0xff}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r4, 0x4) 3m39.925095579s ago: executing program 32 (id=632): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x8000000002, r1, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x2, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840), &(0x7f0000000880), 0xffffffff, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000008c0)={r3, &(0x7f0000000900)="c06eb17a55d95866fb", 0x0}, 0x20) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000740)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="d8000000140081044e81f782db44b9040211080220000000040000a118000200e00020fd00000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8080) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xb6, &(0x7f0000000380)=""/182, 0x40f00, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xe, 0x5}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)=[{0x3, 0x1, 0x5, 0x4}, {0x1, 0x4, 0xd, 0x3}, {0x5, 0x3, 0xb, 0x7}], 0x10, 0xff}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r4, 0x4) 30.127165281s ago: executing program 1 (id=1343): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f91524fc6010000a000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0xe, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012000400054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000003000000070000000717a87f000001ac"], 0x48}, 0x40004) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f00000001c0)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[@ANYBLOB='1-2:5/', @ANYRESDEC=r4], 0x31) socketpair(0x23, 0x5, 0x1, &(0x7f00000002c0)) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x1) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200"}) sendmsg(r6, &(0x7f0000000800)={&(0x7f0000000580)=@can, 0x80, &(0x7f0000000740)=[{&(0x7f0000000600)="46ddc94916d9f01ca5caeeee7a622287e8167c5362af916a34e322e6815556cd082b20f70f983931823249f2cbee63e76822f79e5ec99f788923b3a4dc9d50cdb3243bfa0a74fe09c79887f3195dfbe8e141c94cab09d94ba99fe19a05777bf8323e68a1413f8cb2bd238982d8e2bfc41ea17d67b067d520654f9a396d03a2aa7f9c72aedab24ec93f091ca18e5808c5b638cefe75ff4b023e61622781a4084b9271ef64c41443c3b8a6a03aa7b095fa7570e44e7fd0e248bdd22a942c4ac990b61481d958cd", 0xc6}, {&(0x7f0000000700)="cbf055582c4fb99d7e5802557a45955703eda539bf", 0x15}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="300000000000000001000000040000002bf5d3b767011d2750a940e44020a438ad0e2197d79c4216f4b8c20000cbfbe266b7f614a87bd343000000200000000000000019010000f8ffffff3771f6ce10"], 0x50}, 0x40000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 29.308166714s ago: executing program 2 (id=1345): socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000002d80)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000002e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002e80)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000002ec0)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000002f00)={&(0x7f0000002f40)={0x2, 0x110, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000002f80)=[{&(0x7f0000002fc0)='\x00', 0x1}], 0x1}, 0x3e8) 29.288082927s ago: executing program 1 (id=1346): r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={0x0, r2, 0x0, 0x0, 0x0}, 0x30) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20}, 0x40000100) gettid() r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000580)={0xa, 0x0, @empty=0xf5ff}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000001100)="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", 0xff0}, {&(0x7f0000002100)="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", 0x129}], 0x2, &(0x7f0000002680)=[@ip_tos_int={{0x14, 0x29, 0x3e, 0xefe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @local}}}, @ip_tos_u8={{0x11}}], 0x50}, 0xff00) syz_clone(0x28000000, &(0x7f0000000700)="d3d2b1ab354a3167d489d1e5cd149a04bb8b4adbe418e9dc39e004950e760c3f3c19026c515a7fd3b29b6f5bdad4798760bf776009e6d6865d2c1557e0f7b1dbf3b8984f1a33e77b0bf32e9b3cf1ec0ffee89176f871d4273d5a5d23cecae7be9928e7583f4ae2c5418c32a591cafd43be5515f24e3968e27e46fea3b58af9ff436d359898c5bb19c7dbb343e9788a88fc10ed47aef7cd20ad6c50071642bfc363581eb666ee60", 0xa7, 0x0, 0x0, &(0x7f0000000940)="1a89e22e4ff387988e4535f3ebfd8dadab4190603777be28763ffbc36cb6855a5ad982b68a66ea055761df09b3ae598cdb4e8f5fb1157b71ff670891ac2186fa03f02cbb411096ab79a1b47e35cbf1f57809c1a69aab4f07caaf332f7cf4f5532e196f8884964891888942a6f2d4bbd217bb3020cd5474397bb643f39d164bb7c74d11ebc8081065abefe1970106238b4d") openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000a40)='cpu.pressure\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000a80)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 29.05407558s ago: executing program 2 (id=1348): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffeb8, &(0x7f00000002c0)=[{&(0x7f0000000740)="d80000001c0081044e81f782db44b904021d080207000000810003a1180002478800000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\b\x00\x00\x00\t\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x8000000000000000, 0x12) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f00000000c0)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r3 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES32=r4], 0x68}, 0x84) 28.913645915s ago: executing program 1 (id=1351): perf_event_open(&(0x7f0000002d80)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002fc0)='\x00', 0x1}], 0x1, 0x0, 0x500}, 0x3e8) 28.806204386s ago: executing program 2 (id=1352): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r1) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) setsockopt$sock_attach_bpf(r3, 0x6, 0x17, &(0x7f0000000200)=r2, 0x4) 28.223916785s ago: executing program 1 (id=1353): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="14000000140081026681f782db44cf440aa1fd62", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1000000, 0x4}]}]}}, &(0x7f0000000340)=""/4089, 0x32, 0xff9, 0x1}, 0x28) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2b, 'hugetlb'}, {0x2d, 'blkio'}, {0x2b, 'freezer'}, {0x2b, 'hugetlb'}, {0x2d, 'cpuacct'}, {0x2d, 'perf_event'}, {0x2d, 'net'}]}, 0x3c) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x7, 0x10, "090041c20949e0afc65b200dd6a0"}]}}}], 0x40}, 0x20002800) 28.135779774s ago: executing program 1 (id=1355): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r1) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) setsockopt$sock_attach_bpf(r3, 0x6, 0x17, &(0x7f0000000200)=r2, 0x4) (fail_nth: 1) 27.661123013s ago: executing program 2 (id=1358): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000280)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x50}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a600e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x20000840) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000680)=[0x0], 0x0, 0x65, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0)={r3}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 27.498573099s ago: executing program 2 (id=1361): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffeb8, &(0x7f00000002c0)=[{&(0x7f0000000740)="d80000001c0081044e81f782db44b904021d080207000000810003a1180002478800000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\b\x00\x00\x00\t\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x8000000000000000, 0x12) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f00000000c0)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r3 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES32=r4], 0x68}, 0x84) 27.250403705s ago: executing program 2 (id=1362): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x8, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff0fffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000100000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}], 0x18}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unlink(0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) syz_clone(0x180000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x180000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x20000000000001eb, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x1b, &(0x7f0000000940), 0x0, 0xfef6, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x60, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0xd, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000"], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b40)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0100000008000000010003000900000001000000", @ANYRES32, @ANYBLOB="fcffffff00000000200020000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000c40)={'wlan1\x00', @random="0100ffffffff"}) 27.114501339s ago: executing program 1 (id=1363): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) unlink(&(0x7f0000000840)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000880)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000900)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@typedef={0xe, 0x0, 0x0, 0x8, 0x3}, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x4, [{0x1, 0x4, 0x5}, {0xb, 0x4, 0x1ff}, {0xa, 0x1, 0x10001}, {0xb, 0x3, 0xbc2}, {0x0, 0x2, 0x9}, {0x0, 0x0, 0x8}]}, @var={0x6, 0x0, 0x0, 0xe, 0x5, 0x1}, @const={0x8, 0x0, 0x0, 0xa, 0x2}, @enum={0x7, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x191c}, {0x6, 0x10}]}, @const={0x4, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0]}}, &(0x7f0000000340)=""/104, 0xbf, 0x68, 0x1, 0x2}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@generic={0x5, 0xf, 0x6, 0x8, 0x9}, @alu={0x7, 0x1, 0xd, 0x7, 0x2, 0xffffffffffffffe0}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xaa, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000400)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[{0x4, 0x2, 0x3, 0x3}, {0x4, 0x3, 0xa, 0x8}, {0x0, 0x1, 0x3, 0x2}, {0x1, 0x4, 0x5, 0x3}, {0x7, 0x3, 0xb, 0x2}], 0x10, 0xfff}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r6, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0xffffffffffffffff) socket$kcm(0x2, 0x200000000000003, 0x106) socket$kcm(0x29, 0x5, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) 11.928797591s ago: executing program 33 (id=1363): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) unlink(&(0x7f0000000840)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000880)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000900)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@typedef={0xe, 0x0, 0x0, 0x8, 0x3}, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x4, [{0x1, 0x4, 0x5}, {0xb, 0x4, 0x1ff}, {0xa, 0x1, 0x10001}, {0xb, 0x3, 0xbc2}, {0x0, 0x2, 0x9}, {0x0, 0x0, 0x8}]}, @var={0x6, 0x0, 0x0, 0xe, 0x5, 0x1}, @const={0x8, 0x0, 0x0, 0xa, 0x2}, @enum={0x7, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x191c}, {0x6, 0x10}]}, @const={0x4, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0]}}, &(0x7f0000000340)=""/104, 0xbf, 0x68, 0x1, 0x2}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@generic={0x5, 0xf, 0x6, 0x8, 0x9}, @alu={0x7, 0x1, 0xd, 0x7, 0x2, 0xffffffffffffffe0}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xaa, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000400)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[{0x4, 0x2, 0x3, 0x3}, {0x4, 0x3, 0xa, 0x8}, {0x0, 0x1, 0x3, 0x2}, {0x1, 0x4, 0x5, 0x3}, {0x7, 0x3, 0xb, 0x2}], 0x10, 0xfff}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r6, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0xffffffffffffffff) socket$kcm(0x2, 0x200000000000003, 0x106) socket$kcm(0x29, 0x5, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) 11.791369375s ago: executing program 34 (id=1362): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x8, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff0fffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000100000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}], 0x18}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unlink(0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) syz_clone(0x180000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x180000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x20000000000001eb, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x1b, &(0x7f0000000940), 0x0, 0xfef6, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x60, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0xd, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000"], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b40)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0100000008000000010003000900000001000000", @ANYRES32, @ANYBLOB="fcffffff00000000200020000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000c40)={'wlan1\x00', @random="0100ffffffff"}) 2.708453384s ago: executing program 4 (id=1401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000680)={'syzkaller0\x00'}) 2.612420044s ago: executing program 3 (id=1402): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="015b00040000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x20a0, 0x611, 0x0, 0x0, 0x0, 0x200, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1000000004000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000040000000800"], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0x1b, 0x14}, 0x20) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x11, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0xf, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x5}, @ldst={0x1, 0x88cd63b97225f6b9, 0x6, 0x10, 0x9, 0xffffffffffffffc0}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000e00)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e40)={0x5, 0xf, 0x400, 0x80000001}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000f00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c80)={r1, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000001d00)="b9ff03076804268cb89e14f086dd47e0ffff2000002800000000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r0, &(0x7f0000001d40)=ANY=[], 0xfe33) 2.310557124s ago: executing program 3 (id=1403): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000280)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x50}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a600e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1}, 0x20000840) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000680)=[0x0], 0x0, 0x65, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0)={r3}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 2.180841827s ago: executing program 4 (id=1404): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x2, &(0x7f0000000680), 0x4) 1.952799801s ago: executing program 4 (id=1405): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000003c0), 0x12) socket$kcm(0x29, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000400), 0xfffffdef) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000480)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="a6", 0xffffff58}], 0x1}, 0x40001) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}], 0x18}, 0x4000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x90) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x4000, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x2, &(0x7f0000000680), 0x4) 1.815813075s ago: executing program 3 (id=1406): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffeb8, &(0x7f00000002c0)=[{&(0x7f0000000740)="d80000001c0081044e81f782db44b904021d080207000000810003a1180002478800000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\b\x00\x00\x00\t\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x8000000000000000, 0x12) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f00000000c0)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r3 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES32=r4], 0x68}, 0x84) 1.556166061s ago: executing program 3 (id=1407): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f91524fc6010000a000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0xe, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012000400054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000003000000070000000717a87f000001ac"], 0x48}, 0x40004) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f00000001c0)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[@ANYBLOB='1-2:5/', @ANYRESDEC=r4], 0x31) socketpair(0x23, 0x5, 0x1, &(0x7f00000002c0)) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x1) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200"}) sendmsg(r6, &(0x7f0000000800)={&(0x7f0000000580)=@can, 0x80, &(0x7f0000000740)=[{&(0x7f0000000600)="46ddc94916d9f01ca5caeeee7a622287e8167c5362af916a34e322e6815556cd082b20f70f983931823249f2cbee63e76822f79e5ec99f788923b3a4dc9d50cdb3243bfa0a74fe09c79887f3195dfbe8e141c94cab09d94ba99fe19a05777bf8323e68a1413f8cb2bd238982d8e2bfc41ea17d67b067d520654f9a396d03a2aa7f9c72aedab24ec93f091ca18e5808c5b638cefe75ff4b023e61622781a4084b9271ef64c41443c3b8a6a03aa7b095fa7570e44e7fd0e248bdd22a942c4ac990b61481d958cd", 0xc6}, {&(0x7f0000000700)="cbf055582c4fb99d7e5802557a45955703eda539bf", 0x15}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="300000000000000001000000040000002bf5d3b767011d2750a940e44020a438ad0e2197d79c4216f4b8c20000cbfbe266b7f614a87bd343000000200000000000000019010000f8ffffff3771f6ce10"], 0x50}, 0x40000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 782.008901ms ago: executing program 4 (id=1408): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f91524fc6010000a000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0xe, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012000400054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000003000000070000000717a87f000001ac"], 0x48}, 0x40004) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f00000001c0)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[@ANYBLOB='1-2:5/', @ANYRESDEC=r4], 0x31) socketpair(0x23, 0x5, 0x1, &(0x7f00000002c0)) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x1) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200"}) sendmsg(r6, &(0x7f0000000800)={&(0x7f0000000580)=@can, 0x80, &(0x7f0000000740)=[{&(0x7f0000000600)="46ddc94916d9f01ca5caeeee7a622287e8167c5362af916a34e322e6815556cd082b20f70f983931823249f2cbee63e76822f79e5ec99f788923b3a4dc9d50cdb3243bfa0a74fe09c79887f3195dfbe8e141c94cab09d94ba99fe19a05777bf8323e68a1413f8cb2bd238982d8e2bfc41ea17d67b067d520654f9a396d03a2aa7f9c72aedab24ec93f091ca18e5808c5b638cefe75ff4b023e61622781a4084b9271ef64c41443c3b8a6a03aa7b095fa7570e44e7fd0e248bdd22a942c4ac990b61481d958cd", 0xc6}, {&(0x7f0000000700)="cbf055582c4fb99d7e5802557a45955703eda539bf", 0x15}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="300000000000000001000000040000002bf5d3b767011d2750a940e44020a438ad0e2197d79c4216f4b8c20000cbfbe266b7f614a87bd343000000200000000000000019010000f8ffffff3771f6ce10"], 0x50}, 0x40000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 723.970647ms ago: executing program 3 (id=1409): r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={0x0, r2, 0x0, 0x0, 0x0}, 0x30) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20}, 0x40000100) gettid() r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000580)={0xa, 0x0, @empty=0xf5ff}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000001100)="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", 0xff0}, {&(0x7f0000002100)="9d7fcf3efc6316a6a555ba8b4726d7ccaf8a060000009cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71ad21b965f615b31105d60a4b16fa2fa1371850a1be85ffcad45b49422b2121d709014f49cf6bd1d18acc4c19e4356669a2ac3e05d5cdc6f0f485c1eb52ea8faf7e83a1468b6a491e71ae3d03cd9677e72413954feae71b5775a6e3e9fa9db9e1ed56e56bff66a7a86214d8145d878e26fa35bd55db98ecdef374d26a5d9cd0e89f3ae45be2d8e1d98ee0865fb64d6dd1e8c89608733370f12be1495d81b36dd72cc28e9c9b2c45f925b38b21818d93ce604772c21824e45793c4073eb44773f8e42c9ebb297dd5e76e856a22253c0e8a80f33b4d015c3f9c0c26bcdd6b440322a23b10d507eecead59faa166bdac1bd840211336dc0c", 0x129}], 0x2, &(0x7f0000002680)=[@ip_tos_int={{0x14, 0x29, 0x3e, 0xefe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @local}}}, @ip_tos_u8={{0x11}}], 0x50}, 0xff00) syz_clone(0x28000000, &(0x7f0000000700)="d3d2b1ab354a3167d489d1e5cd149a04bb8b4adbe418e9dc39e004950e760c3f3c19026c515a7fd3b29b6f5bdad4798760bf776009e6d6865d2c1557e0f7b1dbf3b8984f1a33e77b0bf32e9b3cf1ec0ffee89176f871d4273d5a5d23cecae7be9928e7583f4ae2c5418c32a591cafd43be5515f24e3968e27e46fea3b58af9ff436d359898c5bb19c7dbb343e9788a88fc10ed47aef7cd20ad6c50071642bfc363581eb666ee60", 0xa7, 0x0, 0x0, &(0x7f0000000940)="1a89e22e4ff387988e4535f3ebfd8dadab4190603777be28763ffbc36cb6855a5ad982b68a66ea055761df09b3ae598cdb4e8f5fb1157b71ff670891ac2186fa03f02cbb411096ab79a1b47e35cbf1f57809c1a69aab4f07caaf332f7cf4f5532e196f8884964891888942a6f2d4bbd217bb3020cd5474397bb643f39d164bb7c74d11ebc8081065abefe1970106238b4d") openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000a40)='cpu.pressure\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001e", 0x1e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000a80)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 321.949868ms ago: executing program 3 (id=1410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000440)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000680)={'syzkaller0\x00'}) 200.90274ms ago: executing program 4 (id=1411): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="015b00040000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x20a0, 0x611, 0x0, 0x0, 0x0, 0x200, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1000000004000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000040000000800"], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0x1b, 0x14}, 0x20) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x11, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0xf, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x5}, @ldst={0x1, 0x88cd63b97225f6b9, 0x6, 0x10, 0x9, 0xffffffffffffffc0}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000e00)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e40)={0x5, 0xf, 0x400, 0x80000001}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000f00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c80)={r1, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000001d00)="b9ff03076804268cb89e14f086dd47e0ffff2000002800000000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r0, &(0x7f0000001d40)=ANY=[], 0xfe33) 0s ago: executing program 4 (id=1412): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000280)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x50}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a600e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1}, 0x20000840) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000680)=[0x0], 0x0, 0x65, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0)={r3}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) kernel console output (not intermixed with test programs): 4838][ T7946] netlink: 'syz.1.641': attribute type 29 has an invalid length. [ 291.681762][ T7946] netlink: 'syz.1.641': attribute type 29 has an invalid length. [ 291.915096][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 292.911273][ T7970] netlink: 132 bytes leftover after parsing attributes in process `syz.2.651'. [ 295.764983][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.655'. [ 295.999571][ T7989] netlink: 132 bytes leftover after parsing attributes in process `syz.2.658'. [ 296.739692][ T8010] netlink: 132 bytes leftover after parsing attributes in process `syz.3.665'. [ 296.928611][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.666'. [ 300.033401][ T8018] delete_channel: no stack [ 300.038093][ T8018] delete_channel: no stack [ 300.315342][ T8028] FAULT_INJECTION: forcing a failure. [ 300.315342][ T8028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.361265][ T8028] CPU: 0 PID: 8028 Comm: syz.2.672 Not tainted syzkaller #0 [ 300.368646][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 300.378764][ T8028] Call Trace: [ 300.382118][ T8028] [ 300.385133][ T8028] dump_stack_lvl+0x18c/0x250 [ 300.389877][ T8028] ? show_regs_print_info+0x20/0x20 [ 300.395167][ T8028] ? load_image+0x420/0x420 [ 300.399729][ T8028] ? __lock_acquire+0x7eb0/0x7eb0 [ 300.404919][ T8028] ? snprintf+0xe9/0x140 [ 300.409231][ T8028] should_fail_ex+0x394/0x4c0 [ 300.413976][ T8028] _copy_to_user+0x2f/0xa0 [ 300.418460][ T8028] simple_read_from_buffer+0xe7/0x150 [ 300.424022][ T8028] proc_fail_nth_read+0x1e8/0x260 [ 300.429144][ T8028] ? proc_fault_inject_write+0x360/0x360 [ 300.434869][ T8028] ? fsnotify_perm+0x271/0x5e0 [ 300.439691][ T8028] ? proc_fault_inject_write+0x360/0x360 [ 300.445426][ T8028] vfs_read+0x298/0x990 [ 300.449652][ T8028] ? kernel_read+0x1e0/0x1e0 [ 300.454319][ T8028] ? __fget_files+0x28/0x460 [ 300.458997][ T8028] ? __fget_files+0x3fc/0x460 [ 300.463757][ T8028] ? __fdget_pos+0x2a3/0x330 [ 300.468416][ T8028] ? ksys_read+0x74/0x260 [ 300.472827][ T8028] ksys_read+0x151/0x260 [ 300.477134][ T8028] ? vfs_write+0x9a0/0x9a0 [ 300.481615][ T8028] ? lockdep_hardirqs_on+0x98/0x150 [ 300.486867][ T8028] do_syscall_64+0x55/0xb0 [ 300.491341][ T8028] ? clear_bhb_loop+0x40/0x90 [ 300.496084][ T8028] ? clear_bhb_loop+0x40/0x90 [ 300.500833][ T8028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.506881][ T8028] RIP: 0033:0x7fce3af5fd8e [ 300.511365][ T8028] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 300.531142][ T8028] RSP: 002b:00007fce3be88fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.539651][ T8028] RAX: ffffffffffffffda RBX: 00007fce3be896c0 RCX: 00007fce3af5fd8e [ 300.547692][ T8028] RDX: 000000000000000f RSI: 00007fce3be890a0 RDI: 0000000000000005 [ 300.555725][ T8028] RBP: 00007fce3be89090 R08: 0000000000000000 R09: 0000000000000000 [ 300.563758][ T8028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.571789][ T8028] R13: 00007fce3b226038 R14: 00007fce3b225fa0 R15: 00007fff4124e418 [ 300.579842][ T8028] [ 300.992163][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'. [ 301.476290][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.485718][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.494191][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.509156][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.521615][ T5803] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 301.531280][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.588394][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 301.698123][ T8046] rxe_eth0 speed is unknown, defaulting to 1000 [ 302.502382][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.680'. [ 302.642287][ T8046] chnl_net:caif_netlink_parms(): no params data found [ 302.922356][ T8046] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.941391][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.955617][ T8046] bridge_slave_0: entered allmulticast mode [ 302.971803][ T8046] bridge_slave_0: entered promiscuous mode [ 302.993868][ T8046] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.009341][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.030593][ T8046] bridge_slave_1: entered allmulticast mode [ 303.054234][ T8046] bridge_slave_1: entered promiscuous mode [ 303.152395][ T8046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.176767][ T8046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.278965][ T8046] team0: Port device team_slave_0 added [ 303.351997][ T8046] team0: Port device team_slave_1 added [ 303.498601][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.535868][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.573156][ T52] Bluetooth: hci4: command tx timeout [ 303.620619][ T8046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.665869][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.686317][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.800329][ T8046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.843151][ T8072] netlink: 132 bytes leftover after parsing attributes in process `syz.3.682'. [ 304.223389][ T8046] hsr_slave_0: entered promiscuous mode [ 304.282021][ T8046] hsr_slave_1: entered promiscuous mode [ 304.328248][ T8046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.344855][ T8046] Cannot create hsr debugfs directory [ 305.035943][ T8046] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 305.072862][ T8046] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 305.100191][ T8046] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.124639][ T8046] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.398917][ T8103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.511552][ T8103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.554321][ T8103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.595792][ T8103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.669560][ T52] Bluetooth: hci4: command tx timeout [ 305.712998][ T8046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.845401][ T8046] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.938850][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.946172][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.996777][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.004042][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.652822][ T8046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.030520][ T8046] veth0_vlan: entered promiscuous mode [ 307.056856][ T8046] veth1_vlan: entered promiscuous mode [ 307.119809][ T8046] veth0_macvtap: entered promiscuous mode [ 307.132953][ T8046] veth1_macvtap: entered promiscuous mode [ 307.175208][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.185944][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.196691][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.207450][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.218801][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.229530][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.243261][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.268118][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.282284][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.295045][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.307945][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.321180][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.333349][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.347000][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.359524][ T8046] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.370785][ T8046] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.383140][ T8046] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.394444][ T8046] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.530472][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.552696][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.595192][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.603673][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.721902][ T52] Bluetooth: hci4: command tx timeout [ 307.841628][ T8125] bridge_slave_1: left allmulticast mode [ 307.847368][ T8125] bridge_slave_1: left promiscuous mode [ 307.891253][ T8125] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.996314][ T8125] bridge_slave_0: left allmulticast mode [ 308.027785][ T8125] bridge_slave_0: left promiscuous mode [ 308.041710][ T8125] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.764480][ T8137] netlink: 'syz.2.694': attribute type 10 has an invalid length. [ 309.809076][ T52] Bluetooth: hci4: command tx timeout [ 309.834762][ T8137] netlink: 'syz.2.694': attribute type 9 has an invalid length. [ 309.931372][ T8137] netlink: 463 bytes leftover after parsing attributes in process `syz.2.694'. [ 311.274632][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.698'. [ 311.969137][ T8166] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.704'. [ 311.999370][ T8170] netlink: 132 bytes leftover after parsing attributes in process `syz.4.706'. [ 312.173540][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.190834][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.211432][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.223703][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.240034][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.291866][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.309445][ T8161] rxe_eth0 speed is unknown, defaulting to 1000 [ 312.436892][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.641369][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.247908][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.803383][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.890589][ T8195] netlink: 'syz.1.712': attribute type 10 has an invalid length. [ 313.925957][ T8195] team0: Device bond0 is already an upper device of the team interface [ 314.065618][ T8195] netlink: 'syz.1.712': attribute type 9 has an invalid length. [ 314.123197][ T8195] netlink: 463 bytes leftover after parsing attributes in process `syz.1.712'. [ 314.800596][ T8201] netlink: 35840 bytes leftover after parsing attributes in process `syz.4.714'. [ 315.736243][ T8217] syzkaller0: entered promiscuous mode [ 315.760974][ T8217] syzkaller0: entered allmulticast mode [ 317.427774][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.442241][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.560275][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.577425][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.606968][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.619264][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.637709][ T8241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.650110][ T8241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.316987][ T8258] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.722'. [ 320.407362][ T8260] netlink: 'syz.4.721': attribute type 10 has an invalid length. [ 323.136991][ T8260] veth0_vlan: left promiscuous mode [ 323.177945][ T8260] veth0_vlan: entered promiscuous mode [ 323.218741][ T8260] team0: Device veth0_vlan failed to register rx_handler [ 323.439583][ T8259] netlink: 152 bytes leftover after parsing attributes in process `syz.3.722'. [ 323.514785][ T8259] bond0: (slave bond_slave_0): Releasing backup interface [ 323.590067][ T8259] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 326.147913][ T8284] rxe_eth0 speed is unknown, defaulting to 1000 [ 326.753456][ T8339] netlink: 'syz.2.734': attribute type 10 has an invalid length. [ 326.946734][ T12] hsr_slave_0: left promiscuous mode [ 326.953767][ T12] hsr_slave_1: left promiscuous mode [ 326.960053][ T12] hsr0: left allmulticast mode [ 326.966959][ T12] bridge0: port 3(hsr0) entered disabled state [ 326.975976][ T12] bridge_slave_1: left allmulticast mode [ 326.981725][ T12] bridge_slave_1: left promiscuous mode [ 326.987560][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.997660][ T12] bridge_slave_0: left allmulticast mode [ 327.007202][ T12] bridge_slave_0: left promiscuous mode [ 327.013815][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.094807][ T12] veth1_vlan: left promiscuous mode [ 327.620509][ T12] team0 (unregistering): Port device team_slave_1 removed [ 327.803465][ T12] team0 (unregistering): Port device team_slave_0 removed [ 327.859082][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.910666][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.190062][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 328.218304][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 328.256447][ T12] bond0 (unregistering): Released all slaves [ 328.350050][ T8343] netlink: 132 bytes leftover after parsing attributes in process `syz.1.732'. [ 328.578563][ T8350] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.735'. [ 328.684279][ T8350] netlink: 152 bytes leftover after parsing attributes in process `syz.1.735'. [ 328.759600][ T8350] bond0: (slave bond_slave_0): Releasing backup interface [ 328.851733][ T8356] netlink: 'syz.3.738': attribute type 3 has an invalid length. [ 328.859824][ T8356] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.738'. [ 328.876379][ T8350] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 328.910733][ T8354] netlink: 'syz.2.736': attribute type 10 has an invalid length. [ 329.539792][ T8375] netlink: 132 bytes leftover after parsing attributes in process `syz.3.739'. [ 329.952099][ T8381] team0: left allmulticast mode [ 329.957314][ T8381] team_slave_0: left allmulticast mode [ 329.970750][ T8381] team_slave_1: left allmulticast mode [ 329.989962][ T8381] team0: left promiscuous mode [ 329.995288][ T8381] team_slave_0: left promiscuous mode [ 330.001677][ T8381] team_slave_1: left promiscuous mode [ 330.020233][ T8381] bridge0: port 3(team0) entered disabled state [ 330.050869][ T8381] bridge_slave_1: left allmulticast mode [ 330.068262][ T8381] bridge_slave_1: left promiscuous mode [ 330.078387][ T8381] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.142703][ T8381] bridge_slave_0: left allmulticast mode [ 330.148519][ T8381] bridge_slave_0: left promiscuous mode [ 330.181449][ T8381] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.675905][ T8389] netlink: 14 bytes leftover after parsing attributes in process `syz.1.742'. [ 330.721437][ T8389] netlink: get zone limit has 4 unknown bytes [ 330.939536][ T8398] syzkaller0: entered promiscuous mode [ 330.948291][ T8398] syzkaller0: entered allmulticast mode [ 331.509925][ T8417] netlink: 'syz.3.748': attribute type 29 has an invalid length. [ 331.519491][ T8412] netlink: 132 bytes leftover after parsing attributes in process `syz.4.745'. [ 331.536665][ T8417] netlink: 'syz.3.748': attribute type 29 has an invalid length. [ 331.551787][ T8416] netlink: 132 bytes leftover after parsing attributes in process `syz.2.750'. [ 332.512009][ T8433] netlink: 'syz.3.753': attribute type 10 has an invalid length. [ 333.800691][ T8459] syzkaller0: entered promiscuous mode [ 333.822951][ T8459] syzkaller0: entered allmulticast mode [ 336.452611][ T8510] netlink: 'syz.2.761': attribute type 9 has an invalid length. [ 336.470228][ T8510] netlink: 399 bytes leftover after parsing attributes in process `syz.2.761'. [ 340.500739][ T8512] netlink: 132 bytes leftover after parsing attributes in process `syz.4.763'. [ 340.835175][ T8528] netlink: 'syz.4.764': attribute type 29 has an invalid length. [ 340.879774][ T8528] netlink: 'syz.4.764': attribute type 29 has an invalid length. [ 342.297817][ T8558] netlink: 132 bytes leftover after parsing attributes in process `syz.2.772'. [ 342.578020][ T8562] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.773'. [ 342.616008][ T8569] netlink: 152 bytes leftover after parsing attributes in process `syz.3.773'. [ 343.627424][ T8584] netlink: 'syz.4.781': attribute type 10 has an invalid length. [ 344.350050][ T8595] netlink: 132 bytes leftover after parsing attributes in process `syz.4.783'. [ 344.666741][ T8603] FAULT_INJECTION: forcing a failure. [ 344.666741][ T8603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.701166][ T8603] CPU: 0 PID: 8603 Comm: syz.3.788 Not tainted syzkaller #0 [ 344.708567][ T8603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 344.718682][ T8603] Call Trace: [ 344.722006][ T8603] [ 344.724986][ T8603] dump_stack_lvl+0x18c/0x250 [ 344.729727][ T8603] ? show_regs_print_info+0x20/0x20 [ 344.734982][ T8603] ? load_image+0x420/0x420 [ 344.739546][ T8603] ? __might_fault+0xaa/0x120 [ 344.744285][ T8603] ? __lock_acquire+0x7eb0/0x7eb0 [ 344.749383][ T8603] should_fail_ex+0x394/0x4c0 [ 344.754132][ T8603] _copy_to_user+0x2f/0xa0 [ 344.758593][ T8603] bpf_test_finish+0x4e7/0x650 [ 344.763410][ T8603] ? bpf_test_run+0x174/0x870 [ 344.768151][ T8603] ? convert_skb_to___skb+0x420/0x420 [ 344.774299][ T8603] ? slab_build_skb+0x25a/0x3e0 [ 344.779220][ T8603] bpf_prog_test_run_skb+0x1135/0x18f0 [ 344.784802][ T8603] ? cpu_online+0x60/0x60 [ 344.789214][ T8603] bpf_prog_test_run+0x31f/0x390 [ 344.794347][ T8603] __sys_bpf+0x49d/0x890 [ 344.798662][ T8603] ? bpf_link_show_fdinfo+0x560/0x560 [ 344.804211][ T8603] ? lock_chain_count+0x20/0x20 [ 344.809329][ T8603] __x64_sys_bpf+0x7c/0x90 [ 344.814006][ T8603] do_syscall_64+0x55/0xb0 [ 344.818495][ T8603] ? clear_bhb_loop+0x40/0x90 [ 344.823266][ T8603] ? clear_bhb_loop+0x40/0x90 [ 344.828133][ T8603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.834111][ T8603] RIP: 0033:0x7f9ea879f559 [ 344.838692][ T8603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.858545][ T8603] RSP: 002b:00007f9ea95c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.867039][ T8603] RAX: ffffffffffffffda RBX: 00007f9ea8a25fa0 RCX: 00007f9ea879f559 [ 344.875081][ T8603] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 344.883117][ T8603] RBP: 00007f9ea95c8090 R08: 0000000000000000 R09: 0000000000000000 [ 344.891182][ T8603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.899234][ T8603] R13: 00007f9ea8a26038 R14: 00007f9ea8a25fa0 R15: 00007fff18128d28 [ 344.907293][ T8603] [ 344.974581][ T8606] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.787'. [ 345.029474][ T8605] netlink: 152 bytes leftover after parsing attributes in process `syz.4.787'. [ 345.098932][ T8605] bond0: (slave bond_slave_0): Releasing backup interface [ 345.237703][ T8605] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 345.407733][ T11] tipc: Subscription rejected, illegal request [ 346.111622][ T8637] netlink: 152 bytes leftover after parsing attributes in process `syz.2.797'. [ 346.121614][ T8635] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.797'. [ 350.737679][ T8693] netlink: 152 bytes leftover after parsing attributes in process `syz.2.803'. [ 350.799146][ T8696] netlink: 132 bytes leftover after parsing attributes in process `syz.1.805'. [ 351.156990][ T8701] netlink: 152 bytes leftover after parsing attributes in process `syz.2.807'. [ 351.361091][ T8705] netlink: 132 bytes leftover after parsing attributes in process `syz.1.811'. [ 351.483590][ T8712] netlink: 132 bytes leftover after parsing attributes in process `syz.4.813'. [ 351.519622][ T8713] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.812'. [ 351.540451][ T8713] netlink: 152 bytes leftover after parsing attributes in process `syz.3.812'. [ 355.031731][ T8782] netlink: 152 bytes leftover after parsing attributes in process `syz.3.819'. [ 355.108839][ T8784] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.820'. [ 355.196130][ T8784] netlink: 152 bytes leftover after parsing attributes in process `syz.2.820'. [ 355.978481][ T8801] __nla_validate_parse: 2 callbacks suppressed [ 355.979576][ T8801] netlink: 132 bytes leftover after parsing attributes in process `syz.4.824'. [ 359.583240][ T8837] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.826'. [ 359.643963][ T8837] netlink: 152 bytes leftover after parsing attributes in process `syz.1.826'. [ 359.914312][ T8845] netlink: 132 bytes leftover after parsing attributes in process `syz.3.827'. [ 360.046565][ T8849] netlink: 152 bytes leftover after parsing attributes in process `syz.1.830'. [ 360.190241][ T8852] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.832'. [ 360.217004][ T8852] netlink: 152 bytes leftover after parsing attributes in process `syz.1.832'. [ 361.028081][ T8860] netlink: 132 bytes leftover after parsing attributes in process `syz.2.835'. [ 361.057026][ T8858] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.844'. [ 361.127029][ T8858] netlink: 152 bytes leftover after parsing attributes in process `syz.1.844'. [ 361.285756][ T8865] netlink: 132 bytes leftover after parsing attributes in process `syz.4.838'. [ 362.510509][ T8872] netlink: 132 bytes leftover after parsing attributes in process `syz.1.849'. [ 363.130330][ T8883] netlink: 132 bytes leftover after parsing attributes in process `syz.1.842'. [ 363.179987][ T8886] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.841'. [ 363.248757][ T8887] netlink: 152 bytes leftover after parsing attributes in process `syz.4.841'. [ 365.445752][ T8897] netlink: 132 bytes leftover after parsing attributes in process `syz.2.850'. [ 365.555764][ T8900] netlink: 132 bytes leftover after parsing attributes in process `syz.4.851'. [ 366.152530][ T8911] __nla_validate_parse: 1 callbacks suppressed [ 366.152552][ T8911] netlink: 132 bytes leftover after parsing attributes in process `syz.4.854'. [ 366.467451][ T8914] netlink: 132 bytes leftover after parsing attributes in process `syz.3.855'. [ 367.847016][ T8930] netlink: 132 bytes leftover after parsing attributes in process `syz.1.860'. [ 368.083283][ T8937] netlink: 132 bytes leftover after parsing attributes in process `syz.4.863'. [ 368.206653][ T8939] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.864'. [ 368.290150][ T8939] netlink: 152 bytes leftover after parsing attributes in process `syz.3.864'. [ 369.332871][ T8956] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.878'. [ 369.381380][ T8957] netlink: 152 bytes leftover after parsing attributes in process `syz.3.878'. [ 369.495107][ T8959] netlink: 132 bytes leftover after parsing attributes in process `syz.4.870'. [ 369.761905][ T8971] netlink: 132 bytes leftover after parsing attributes in process `syz.3.872'. [ 372.289149][ T8991] __nla_validate_parse: 3 callbacks suppressed [ 372.289168][ T8991] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.879'. [ 372.316072][ T8992] netlink: 152 bytes leftover after parsing attributes in process `syz.2.882'. [ 372.419440][ T8989] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.882'. [ 372.492781][ T8990] netlink: 152 bytes leftover after parsing attributes in process `syz.1.879'. [ 372.995372][ T8998] netlink: 152 bytes leftover after parsing attributes in process `syz.2.883'. [ 373.006473][ T8997] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.883'. [ 373.651175][ T9015] netlink: 132 bytes leftover after parsing attributes in process `syz.2.888'. [ 374.842662][ T9022] netlink: 132 bytes leftover after parsing attributes in process `syz.1.889'. [ 374.938601][ T9025] netlink: 132 bytes leftover after parsing attributes in process `syz.3.890'. [ 374.987515][ T9027] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.891'. [ 375.085267][ T9031] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 377.340816][ T9058] __nla_validate_parse: 9 callbacks suppressed [ 377.340832][ T9058] netlink: 132 bytes leftover after parsing attributes in process `syz.1.902'. [ 378.120034][ T9071] netlink: 152 bytes leftover after parsing attributes in process `syz.3.908'. [ 378.166328][ T9068] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.908'. [ 378.210855][ T9073] netlink: 'syz.1.910': attribute type 1 has an invalid length. [ 378.235070][ T9073] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.910'. [ 378.299795][ T9078] FAULT_INJECTION: forcing a failure. [ 378.299795][ T9078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.331123][ T9078] CPU: 1 PID: 9078 Comm: syz.2.912 Not tainted syzkaller #0 [ 378.338545][ T9078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 378.348654][ T9078] Call Trace: [ 378.351980][ T9078] [ 378.354983][ T9078] dump_stack_lvl+0x18c/0x250 [ 378.359778][ T9078] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 378.366030][ T9078] ? show_regs_print_info+0x20/0x20 [ 378.371305][ T9078] ? load_image+0x420/0x420 [ 378.375897][ T9078] should_fail_ex+0x394/0x4c0 [ 378.380638][ T9078] _copy_to_user+0x2f/0xa0 [ 378.385119][ T9078] simple_read_from_buffer+0xe7/0x150 [ 378.390555][ T9078] proc_fail_nth_read+0x1e8/0x260 [ 378.395647][ T9078] ? proc_fault_inject_write+0x360/0x360 [ 378.401350][ T9078] ? fsnotify_perm+0x271/0x5e0 [ 378.406169][ T9078] ? proc_fault_inject_write+0x360/0x360 [ 378.411870][ T9078] vfs_read+0x298/0x990 [ 378.416124][ T9078] ? kernel_read+0x1e0/0x1e0 [ 378.420811][ T9078] ? __fget_files+0x28/0x460 [ 378.425468][ T9078] ? __fget_files+0x3fc/0x460 [ 378.430209][ T9078] ? __fdget_pos+0x2a3/0x330 [ 378.434860][ T9078] ? ksys_read+0x74/0x260 [ 378.439248][ T9078] ksys_read+0x151/0x260 [ 378.443562][ T9078] ? vfs_write+0x9a0/0x9a0 [ 378.448045][ T9078] ? syscall_enter_from_user_mode+0x2e/0x80 [ 378.453986][ T9078] do_syscall_64+0x55/0xb0 [ 378.458458][ T9078] ? clear_bhb_loop+0x40/0x90 [ 378.463193][ T9078] ? clear_bhb_loop+0x40/0x90 [ 378.467933][ T9078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.473879][ T9078] RIP: 0033:0x7fce3af5fd8e [ 378.478452][ T9078] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 378.498393][ T9078] RSP: 002b:00007fce3be88fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 378.506974][ T9078] RAX: ffffffffffffffda RBX: 00007fce3be896c0 RCX: 00007fce3af5fd8e [ 378.514999][ T9078] RDX: 000000000000000f RSI: 00007fce3be890a0 RDI: 000000000000000a [ 378.523293][ T9078] RBP: 00007fce3be89090 R08: 0000000000000000 R09: 0000000000000000 [ 378.531318][ T9078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.539342][ T9078] R13: 00007fce3b226038 R14: 00007fce3b225fa0 R15: 00007fff4124e418 [ 378.547398][ T9078] [ 378.675164][ T9082] netlink: 132 bytes leftover after parsing attributes in process `syz.3.914'. [ 378.892044][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.898506][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.997880][ T9090] netlink: 132 bytes leftover after parsing attributes in process `syz.2.916'. [ 379.027951][ T9092] FAULT_INJECTION: forcing a failure. [ 379.027951][ T9092] name failslab, interval 1, probability 0, space 0, times 0 [ 379.041374][ T9092] CPU: 1 PID: 9092 Comm: syz.1.917 Not tainted syzkaller #0 [ 379.048749][ T9092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 379.058862][ T9092] Call Trace: [ 379.062184][ T9092] [ 379.065161][ T9092] dump_stack_lvl+0x18c/0x250 [ 379.069896][ T9092] ? verify_lock_unused+0x140/0x140 [ 379.075153][ T9092] ? show_regs_print_info+0x20/0x20 [ 379.080412][ T9092] ? load_image+0x420/0x420 [ 379.085000][ T9092] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 379.091045][ T9092] ? lock_chain_count+0x20/0x20 [ 379.095953][ T9092] should_fail_ex+0x394/0x4c0 [ 379.100768][ T9092] should_failslab+0x9/0x20 [ 379.105319][ T9092] slab_pre_alloc_hook+0x59/0x300 [ 379.110376][ T9092] ? urandom_read_iter+0x140/0x140 [ 379.115517][ T9092] ? sctp_add_bind_addr+0x8c/0x360 [ 379.120661][ T9092] __kmem_cache_alloc_node+0x53/0x260 [ 379.126092][ T9092] ? sctp_add_bind_addr+0x8c/0x360 [ 379.131245][ T9092] kmalloc_trace+0x2a/0xe0 [ 379.135708][ T9092] sctp_add_bind_addr+0x8c/0x360 [ 379.140687][ T9092] sctp_copy_local_addr_list+0x31b/0x4e0 [ 379.146355][ T9092] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 379.152114][ T9092] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 379.158235][ T9092] ? sctp_v4_is_any+0x35/0x60 [ 379.162940][ T9092] ? sctp_copy_one_addr+0x8c/0x350 [ 379.168090][ T9092] sctp_bind_addr_copy+0xb3/0x3c0 [ 379.173150][ T9092] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 379.179518][ T9092] sctp_connect_new_asoc+0x2f9/0x6a0 [ 379.184848][ T9092] ? __sctp_connect+0xd80/0xd80 [ 379.189729][ T9092] ? __local_bh_enable_ip+0x13a/0x1c0 [ 379.195155][ T9092] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 379.200733][ T9092] ? security_sctp_bind_connect+0x89/0xb0 [ 379.206494][ T9092] sctp_sendmsg+0x1519/0x27b0 [ 379.211245][ T9092] ? sctp_getsockopt+0xb60/0xb60 [ 379.216407][ T9092] ? aa_sk_perm+0x7bb/0x8e0 [ 379.220949][ T9092] ? aa_af_perm+0x330/0x330 [ 379.225494][ T9092] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 379.231945][ T9092] ? sock_rps_record_flow+0x19/0x3f0 [ 379.237359][ T9092] ? inet_sendmsg+0xce/0x2a0 [ 379.241976][ T9092] ? inet_send_prepare+0x250/0x250 [ 379.247121][ T9092] ____sys_sendmsg+0x61b/0x980 [ 379.251918][ T9092] ? __asan_memset+0x22/0x40 [ 379.256542][ T9092] ? __sys_sendmsg_sock+0x30/0x30 [ 379.261591][ T9092] ? __import_iovec+0x5f2/0x850 [ 379.266482][ T9092] ? import_iovec+0x73/0xa0 [ 379.271017][ T9092] ___sys_sendmsg+0x2a6/0x360 [ 379.275732][ T9092] ? __sys_sendmsg+0x2b0/0x2b0 [ 379.280539][ T9092] ? trace_call_bpf+0xc3/0x6c0 [ 379.285348][ T9092] __se_sys_sendmsg+0x1d0/0x2c0 [ 379.290227][ T9092] ? perf_trace_preemptirq_template+0x269/0x330 [ 379.296505][ T9092] ? __x64_sys_sendmsg+0x80/0x80 [ 379.301483][ T9092] ? lockdep_hardirqs_on+0x98/0x150 [ 379.306715][ T9092] do_syscall_64+0x55/0xb0 [ 379.311162][ T9092] ? clear_bhb_loop+0x40/0x90 [ 379.315899][ T9092] ? clear_bhb_loop+0x40/0x90 [ 379.320623][ T9092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 379.326550][ T9092] RIP: 0033:0x7ff18739f559 [ 379.331009][ T9092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.351489][ T9092] RSP: 002b:00007ff1882f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.359932][ T9092] RAX: ffffffffffffffda RBX: 00007ff187625fa0 RCX: 00007ff18739f559 [ 379.367931][ T9092] RDX: 00000000000003e8 RSI: 0000200000002f00 RDI: 000000000000000d [ 379.375926][ T9092] RBP: 00007ff1882f7090 R08: 0000000000000000 R09: 0000000000000000 [ 379.383937][ T9092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.391952][ T9092] R13: 00007ff187626038 R14: 00007ff187625fa0 R15: 00007fff622cd3d8 [ 379.399979][ T9092] [ 380.586956][ T9106] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.922'. [ 380.608245][ T9106] netlink: 152 bytes leftover after parsing attributes in process `syz.1.922'. [ 381.834118][ T9118] netlink: 132 bytes leftover after parsing attributes in process `syz.3.926'. [ 381.979167][ T9123] netlink: 132 bytes leftover after parsing attributes in process `syz.1.928'. [ 382.653262][ T9131] netlink: 152 bytes leftover after parsing attributes in process `syz.4.930'. [ 382.680283][ T9130] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.930'. [ 383.182606][ T9139] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.933'. [ 383.219945][ T9139] netlink: 152 bytes leftover after parsing attributes in process `syz.2.933'. [ 383.313649][ T9145] FAULT_INJECTION: forcing a failure. [ 383.313649][ T9145] name failslab, interval 1, probability 0, space 0, times 0 [ 383.394335][ T9145] CPU: 0 PID: 9145 Comm: syz.4.934 Not tainted syzkaller #0 [ 383.401799][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 383.411924][ T9145] Call Trace: [ 383.415242][ T9145] [ 383.418209][ T9145] dump_stack_lvl+0x18c/0x250 [ 383.422957][ T9145] ? show_regs_print_info+0x20/0x20 [ 383.428223][ T9145] ? load_image+0x420/0x420 [ 383.432780][ T9145] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 383.438825][ T9145] ? lock_chain_count+0x20/0x20 [ 383.443756][ T9145] should_fail_ex+0x394/0x4c0 [ 383.448497][ T9145] should_failslab+0x9/0x20 [ 383.453146][ T9145] slab_pre_alloc_hook+0x59/0x300 [ 383.458222][ T9145] ? __debug_object_init+0xec/0x450 [ 383.463654][ T9145] kmem_cache_alloc+0x5a/0x2d0 [ 383.468552][ T9145] ? slab_build_skb+0x28/0x3e0 [ 383.473381][ T9145] slab_build_skb+0x28/0x3e0 [ 383.478033][ T9145] bpf_prog_test_run_skb+0x38f/0x18f0 [ 383.483472][ T9145] ? __fget_files+0x28/0x460 [ 383.488134][ T9145] ? __fget_files+0x3fc/0x460 [ 383.492933][ T9145] ? cpu_online+0x60/0x60 [ 383.497331][ T9145] bpf_prog_test_run+0x31f/0x390 [ 383.502373][ T9145] __sys_bpf+0x49d/0x890 [ 383.506748][ T9145] ? bpf_link_show_fdinfo+0x560/0x560 [ 383.512164][ T9145] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 383.518371][ T9145] __x64_sys_bpf+0x7c/0x90 [ 383.522841][ T9145] do_syscall_64+0x55/0xb0 [ 383.527356][ T9145] ? clear_bhb_loop+0x40/0x90 [ 383.532073][ T9145] ? clear_bhb_loop+0x40/0x90 [ 383.536788][ T9145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.542724][ T9145] RIP: 0033:0x7f71d479f559 [ 383.547165][ T9145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.566804][ T9145] RSP: 002b:00007f71d5608028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 383.575347][ T9145] RAX: ffffffffffffffda RBX: 00007f71d4a25fa0 RCX: 00007f71d479f559 [ 383.583351][ T9145] RDX: 0000000000000050 RSI: 0000200000000b00 RDI: 000000000000000a [ 383.591363][ T9145] RBP: 00007f71d5608090 R08: 0000000000000000 R09: 0000000000000000 [ 383.599451][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.607450][ T9145] R13: 00007f71d4a26038 R14: 00007f71d4a25fa0 R15: 00007ffc709170c8 [ 383.615467][ T9145] [ 384.330309][ T9176] netlink: 132 bytes leftover after parsing attributes in process `syz.1.940'. [ 384.403895][ T9175] netlink: 132 bytes leftover after parsing attributes in process `syz.3.939'. [ 385.434746][ T9191] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.944'. [ 386.642711][ T9208] netlink: 132 bytes leftover after parsing attributes in process `syz.4.950'. [ 386.791275][ T9210] netlink: 132 bytes leftover after parsing attributes in process `syz.3.951'. [ 387.007124][ T9214] netlink: 'syz.1.952': attribute type 21 has an invalid length. [ 387.025664][ T9214] FAULT_INJECTION: forcing a failure. [ 387.025664][ T9214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.039531][ T9214] CPU: 1 PID: 9214 Comm: syz.1.952 Not tainted syzkaller #0 [ 387.046914][ T9214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 387.057025][ T9214] Call Trace: [ 387.060362][ T9214] [ 387.063342][ T9214] dump_stack_lvl+0x18c/0x250 [ 387.068091][ T9214] ? show_regs_print_info+0x20/0x20 [ 387.073346][ T9214] ? load_image+0x420/0x420 [ 387.077907][ T9214] ? __lock_acquire+0x7eb0/0x7eb0 [ 387.082985][ T9214] ? snprintf+0xe9/0x140 [ 387.087277][ T9214] should_fail_ex+0x394/0x4c0 [ 387.092011][ T9214] _copy_to_user+0x2f/0xa0 [ 387.096478][ T9214] simple_read_from_buffer+0xe7/0x150 [ 387.101917][ T9214] proc_fail_nth_read+0x1e8/0x260 [ 387.107003][ T9214] ? proc_fault_inject_write+0x360/0x360 [ 387.112705][ T9214] ? fsnotify_perm+0x271/0x5e0 [ 387.117551][ T9214] ? proc_fault_inject_write+0x360/0x360 [ 387.123250][ T9214] vfs_read+0x298/0x990 [ 387.127468][ T9214] ? kernel_read+0x1e0/0x1e0 [ 387.132208][ T9214] ? __fget_files+0x28/0x460 [ 387.136865][ T9214] ? __fget_files+0x3fc/0x460 [ 387.141610][ T9214] ? __fdget_pos+0x2a3/0x330 [ 387.146264][ T9214] ? ksys_read+0x74/0x260 [ 387.150675][ T9214] ksys_read+0x151/0x260 [ 387.154976][ T9214] ? vfs_write+0x9a0/0x9a0 [ 387.159441][ T9214] ? lockdep_hardirqs_on+0x98/0x150 [ 387.164675][ T9214] do_syscall_64+0x55/0xb0 [ 387.169125][ T9214] ? clear_bhb_loop+0x40/0x90 [ 387.173834][ T9214] ? clear_bhb_loop+0x40/0x90 [ 387.178545][ T9214] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.184475][ T9214] RIP: 0033:0x7ff18735fd8e [ 387.188928][ T9214] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 387.208580][ T9214] RSP: 002b:00007ff1882f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 387.217056][ T9214] RAX: ffffffffffffffda RBX: 00007ff1882f76c0 RCX: 00007ff18735fd8e [ 387.225089][ T9214] RDX: 000000000000000f RSI: 00007ff1882f70a0 RDI: 0000000000000004 [ 387.233089][ T9214] RBP: 00007ff1882f7090 R08: 0000000000000000 R09: 0000000000000000 [ 387.241121][ T9214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 387.249131][ T9214] R13: 00007ff187626038 R14: 00007ff187625fa0 R15: 00007fff622cd3d8 [ 387.257177][ T9214] [ 387.405710][ T9216] netlink: 'syz.4.953': attribute type 4 has an invalid length. [ 387.437728][ T9222] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.955'. [ 387.557102][ T9216] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 388.616472][ T9242] __nla_validate_parse: 2 callbacks suppressed [ 388.616495][ T9242] netlink: 132 bytes leftover after parsing attributes in process `syz.1.961'. [ 388.756393][ T9244] netlink: 'syz.3.964': attribute type 21 has an invalid length. [ 389.123545][ T9253] netlink: 152 bytes leftover after parsing attributes in process `syz.4.966'. [ 389.233066][ T9251] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.966'. [ 390.285974][ T9268] netlink: 132 bytes leftover after parsing attributes in process `syz.2.971'. [ 390.620506][ T9276] FAULT_INJECTION: forcing a failure. [ 390.620506][ T9276] name failslab, interval 1, probability 0, space 0, times 0 [ 390.634007][ T9276] CPU: 0 PID: 9276 Comm: syz.1.973 Not tainted syzkaller #0 [ 390.641367][ T9276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 390.651497][ T9276] Call Trace: [ 390.654811][ T9276] [ 390.657775][ T9276] dump_stack_lvl+0x18c/0x250 [ 390.662522][ T9276] ? show_regs_print_info+0x20/0x20 [ 390.667758][ T9276] ? load_image+0x420/0x420 [ 390.672301][ T9276] ? __lock_acquire+0x7eb0/0x7eb0 [ 390.677364][ T9276] should_fail_ex+0x394/0x4c0 [ 390.682088][ T9276] should_failslab+0x9/0x20 [ 390.686649][ T9276] slab_pre_alloc_hook+0x59/0x300 [ 390.691707][ T9276] ? lock_chain_count+0x20/0x20 [ 390.696593][ T9276] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 390.702018][ T9276] __kmem_cache_alloc_node+0x53/0x260 [ 390.707424][ T9276] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 390.712844][ T9276] kmalloc_trace+0x2a/0xe0 [ 390.717307][ T9276] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 390.722558][ T9276] mptcp_sendmsg_fastopen+0x121/0x4c0 [ 390.727980][ T9276] mptcp_sendmsg+0x144c/0x1670 [ 390.732802][ T9276] ? aa_sk_perm+0x7bb/0x8e0 [ 390.737346][ T9276] ? aa_af_perm+0x330/0x330 [ 390.741886][ T9276] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 390.748345][ T9276] ? mptcp_shutdown+0x160/0x160 [ 390.753237][ T9276] ? sock_rps_record_flow+0x19/0x3f0 [ 390.758564][ T9276] ? inet_sendmsg+0xce/0x2a0 [ 390.763196][ T9276] ? inet_send_prepare+0x250/0x250 [ 390.768349][ T9276] ____sys_sendmsg+0x61b/0x980 [ 390.773158][ T9276] ? __asan_memset+0x22/0x40 [ 390.777812][ T9276] ? __sys_sendmsg_sock+0x30/0x30 [ 390.782867][ T9276] ? __import_iovec+0x3fa/0x850 [ 390.787764][ T9276] ? import_iovec+0x73/0xa0 [ 390.792335][ T9276] ___sys_sendmsg+0x2a6/0x360 [ 390.797054][ T9276] ? __sys_sendmsg+0x2b0/0x2b0 [ 390.801883][ T9276] ? __lock_acquire+0x7eb0/0x7eb0 [ 390.806968][ T9276] __se_sys_sendmsg+0x1d0/0x2c0 [ 390.811947][ T9276] ? __x64_sys_sendmsg+0x80/0x80 [ 390.816929][ T9276] ? lockdep_hardirqs_on+0x98/0x150 [ 390.822622][ T9276] do_syscall_64+0x55/0xb0 [ 390.827077][ T9276] ? clear_bhb_loop+0x40/0x90 [ 390.831882][ T9276] ? clear_bhb_loop+0x40/0x90 [ 390.836603][ T9276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.842531][ T9276] RIP: 0033:0x7ff18739f559 [ 390.847005][ T9276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.866643][ T9276] RSP: 002b:00007ff1882f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.875086][ T9276] RAX: ffffffffffffffda RBX: 00007ff187625fa0 RCX: 00007ff18739f559 [ 390.883174][ T9276] RDX: 00000000200048cc RSI: 0000200000000740 RDI: 0000000000000003 [ 390.891262][ T9276] RBP: 00007ff1882f7090 R08: 0000000000000000 R09: 0000000000000000 [ 390.899264][ T9276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.907268][ T9276] R13: 00007ff187626038 R14: 00007ff187625fa0 R15: 00007fff622cd3d8 [ 390.915287][ T9276] [ 391.810243][ T9290] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.977'. [ 391.865918][ T9290] netlink: 152 bytes leftover after parsing attributes in process `syz.3.977'. [ 392.902395][ T9315] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.986'. [ 392.929791][ T9316] netlink: 152 bytes leftover after parsing attributes in process `syz.3.986'. [ 393.283066][ T9323] netlink: 132 bytes leftover after parsing attributes in process `syz.4.989'. [ 393.450163][ T9325] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.990'. [ 394.039198][ T9332] __nla_validate_parse: 1 callbacks suppressed [ 394.039216][ T9332] netlink: 132 bytes leftover after parsing attributes in process `syz.2.992'. [ 394.588134][ T9350] FAULT_INJECTION: forcing a failure. [ 394.588134][ T9350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.610393][ T9350] CPU: 0 PID: 9350 Comm: syz.3.999 Not tainted syzkaller #0 [ 394.617794][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 394.627895][ T9350] Call Trace: [ 394.631214][ T9350] [ 394.634175][ T9350] dump_stack_lvl+0x18c/0x250 [ 394.638898][ T9350] ? show_regs_print_info+0x20/0x20 [ 394.644146][ T9350] ? load_image+0x420/0x420 [ 394.648684][ T9350] ? __lock_acquire+0x7eb0/0x7eb0 [ 394.653746][ T9350] ? snprintf+0xe9/0x140 [ 394.658047][ T9350] should_fail_ex+0x394/0x4c0 [ 394.662768][ T9350] _copy_to_user+0x2f/0xa0 [ 394.667216][ T9350] simple_read_from_buffer+0xe7/0x150 [ 394.672625][ T9350] proc_fail_nth_read+0x1e8/0x260 [ 394.677682][ T9350] ? proc_fault_inject_write+0x360/0x360 [ 394.683361][ T9350] ? fsnotify_perm+0x271/0x5e0 [ 394.688165][ T9350] ? proc_fault_inject_write+0x360/0x360 [ 394.693841][ T9350] vfs_read+0x298/0x990 [ 394.698043][ T9350] ? kernel_read+0x1e0/0x1e0 [ 394.702670][ T9350] ? __fget_files+0x28/0x460 [ 394.707296][ T9350] ? __fget_files+0x3fc/0x460 [ 394.712021][ T9350] ? __fdget_pos+0x2a3/0x330 [ 394.716641][ T9350] ? ksys_read+0x74/0x260 [ 394.721008][ T9350] ksys_read+0x151/0x260 [ 394.725286][ T9350] ? vfs_write+0x9a0/0x9a0 [ 394.729741][ T9350] ? lockdep_hardirqs_on+0x98/0x150 [ 394.734975][ T9350] do_syscall_64+0x55/0xb0 [ 394.739423][ T9350] ? clear_bhb_loop+0x40/0x90 [ 394.744131][ T9350] ? clear_bhb_loop+0x40/0x90 [ 394.748841][ T9350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.754769][ T9350] RIP: 0033:0x7f9ea875fd8e [ 394.759214][ T9350] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 394.778846][ T9350] RSP: 002b:00007f9ea95a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 394.787290][ T9350] RAX: ffffffffffffffda RBX: 00007f9ea95a76c0 RCX: 00007f9ea875fd8e [ 394.795299][ T9350] RDX: 000000000000000f RSI: 00007f9ea95a70a0 RDI: 0000000000000004 [ 394.803411][ T9350] RBP: 00007f9ea95a7090 R08: 0000000000000000 R09: 0000000000000000 [ 394.811416][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.819411][ T9350] R13: 00007f9ea8a26128 R14: 00007f9ea8a26090 R15: 00007fff18128d28 [ 394.827543][ T9350] [ 394.895981][ T9349] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1000'. [ 394.955848][ T9349] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1000'. [ 395.014854][ T9356] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1002'. [ 395.143162][ T9359] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1003'. [ 395.199415][ T9361] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1003'. [ 396.120508][ T9380] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1011'. [ 396.742935][ T9395] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1017'. [ 396.806625][ T9390] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1016'. [ 396.827228][ T9395] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1017'. [ 397.506652][ T9413] FAULT_INJECTION: forcing a failure. [ 397.506652][ T9413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.548430][ T9413] CPU: 0 PID: 9413 Comm: syz.2.1023 Not tainted syzkaller #0 [ 397.555915][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 397.566043][ T9413] Call Trace: [ 397.569392][ T9413] [ 397.572385][ T9413] dump_stack_lvl+0x18c/0x250 [ 397.577137][ T9413] ? show_regs_print_info+0x20/0x20 [ 397.582406][ T9413] ? load_image+0x420/0x420 [ 397.586985][ T9413] ? __lock_acquire+0x7eb0/0x7eb0 [ 397.592089][ T9413] ? snprintf+0xe9/0x140 [ 397.596407][ T9413] should_fail_ex+0x394/0x4c0 [ 397.601165][ T9413] _copy_to_user+0x2f/0xa0 [ 397.605680][ T9413] simple_read_from_buffer+0xe7/0x150 [ 397.611111][ T9413] proc_fail_nth_read+0x1e8/0x260 [ 397.616208][ T9413] ? proc_fault_inject_write+0x360/0x360 [ 397.621895][ T9413] ? fsnotify_perm+0x271/0x5e0 [ 397.626707][ T9413] ? proc_fault_inject_write+0x360/0x360 [ 397.632407][ T9413] vfs_read+0x298/0x990 [ 397.636618][ T9413] ? kernel_read+0x1e0/0x1e0 [ 397.641348][ T9413] ? __fget_files+0x28/0x460 [ 397.645985][ T9413] ? __fget_files+0x3fc/0x460 [ 397.650721][ T9413] ? __fdget_pos+0x2a3/0x330 [ 397.655360][ T9413] ? ksys_read+0x74/0x260 [ 397.659755][ T9413] ksys_read+0x151/0x260 [ 397.664060][ T9413] ? vfs_write+0x9a0/0x9a0 [ 397.668546][ T9413] ? lockdep_hardirqs_on+0x98/0x150 [ 397.673794][ T9413] do_syscall_64+0x55/0xb0 [ 397.678255][ T9413] ? clear_bhb_loop+0x40/0x90 [ 397.682983][ T9413] ? clear_bhb_loop+0x40/0x90 [ 397.687711][ T9413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.693648][ T9413] RIP: 0033:0x7fce3af5fd8e [ 397.698109][ T9413] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 397.717758][ T9413] RSP: 002b:00007fce3be88fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 397.726242][ T9413] RAX: ffffffffffffffda RBX: 00007fce3be896c0 RCX: 00007fce3af5fd8e [ 397.734260][ T9413] RDX: 000000000000000f RSI: 00007fce3be890a0 RDI: 0000000000000004 [ 397.742271][ T9413] RBP: 00007fce3be89090 R08: 0000000000000000 R09: 0000000000000000 [ 397.750301][ T9413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 397.758323][ T9413] R13: 00007fce3b226038 R14: 00007fce3b225fa0 R15: 00007fff4124e418 [ 397.766374][ T9413] [ 400.484722][ T9419] __nla_validate_parse: 1 callbacks suppressed [ 400.484735][ T9419] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1026'. [ 400.500394][ T9417] netlink: 'syz.1.1024': attribute type 10 has an invalid length. [ 400.510309][ T9417] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1024'. [ 400.527547][ T9417] bond0: entered promiscuous mode [ 400.536065][ T9417] bond_slave_1: entered promiscuous mode [ 400.544980][ T9417] team0: entered promiscuous mode [ 400.550093][ T9417] team_slave_0: entered promiscuous mode [ 400.558879][ T9417] team_slave_1: entered promiscuous mode [ 400.567479][ T9417] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 400.586977][ T9417] macvlan0: entered promiscuous mode [ 400.597880][ T9417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.681686][ T9426] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1028'. [ 400.905881][ T9436] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1031'. [ 401.100370][ T9440] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1033'. [ 401.159146][ T9440] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1033'. [ 401.742493][ T9454] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1037'. [ 402.092973][ T9457] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1039'. [ 402.251969][ T9461] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1040'. [ 402.421908][ T9468] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1043'. [ 402.541260][ T9459] rxe_eth0 speed is unknown, defaulting to 1000 [ 402.870568][ T9476] syzkaller0: entered promiscuous mode [ 402.899272][ T9476] syzkaller0: entered allmulticast mode [ 402.938195][ T9476] wg0: mtu less than device minimum [ 402.961796][ T9476] syzkaller0: mtu less than device minimum [ 404.202536][ T9493] FAULT_INJECTION: forcing a failure. [ 404.202536][ T9493] name failslab, interval 1, probability 0, space 0, times 0 [ 404.236469][ T9493] CPU: 1 PID: 9493 Comm: syz.1.1050 Not tainted syzkaller #0 [ 404.243973][ T9493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 404.254184][ T9493] Call Trace: [ 404.257541][ T9493] [ 404.260526][ T9493] dump_stack_lvl+0x18c/0x250 [ 404.265293][ T9493] ? show_regs_print_info+0x20/0x20 [ 404.270571][ T9493] ? load_image+0x420/0x420 [ 404.275154][ T9493] ? __might_sleep+0xe0/0xe0 [ 404.279826][ T9493] ? __lock_acquire+0x7eb0/0x7eb0 [ 404.284948][ T9493] should_fail_ex+0x394/0x4c0 [ 404.289698][ T9493] should_failslab+0x9/0x20 [ 404.294258][ T9493] slab_pre_alloc_hook+0x59/0x300 [ 404.299344][ T9493] ? rtnl_newlink+0x10d/0x2170 [ 404.304184][ T9493] __kmem_cache_alloc_node+0x53/0x260 [ 404.309636][ T9493] ? rtnl_newlink+0x10d/0x2170 [ 404.314511][ T9493] kmalloc_trace+0x2a/0xe0 [ 404.319006][ T9493] rtnl_newlink+0x10d/0x2170 [ 404.323690][ T9493] ? verify_lock_unused+0x140/0x140 [ 404.328980][ T9493] ? __mutex_trylock_common+0x160/0x270 [ 404.334603][ T9493] ? rtnl_setlink+0x4e0/0x4e0 [ 404.339395][ T9493] ? trace_raw_output_contention_end+0xd0/0xd0 [ 404.345627][ T9493] ? rcu_is_watching+0x15/0xb0 [ 404.350460][ T9493] ? trace_contention_end+0x39/0xe0 [ 404.355716][ T9493] ? __mutex_lock+0x30d/0xce0 [ 404.360465][ T9493] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 404.365636][ T9493] ? mutex_lock_nested+0x20/0x20 [ 404.370644][ T9493] ? rtnl_setlink+0x4e0/0x4e0 [ 404.375460][ T9493] rtnetlink_rcv_msg+0x843/0xf90 [ 404.380449][ T9493] ? rtnetlink_rcv_msg+0x220/0xf90 [ 404.385624][ T9493] ? rtnetlink_bind+0x80/0x80 [ 404.390350][ T9493] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 404.396240][ T9493] ? perf_trace_preemptirq_template+0x269/0x330 [ 404.402573][ T9493] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 404.408640][ T9493] ? lock_chain_count+0x20/0x20 [ 404.413551][ T9493] ? __local_bh_enable_ip+0x13a/0x1c0 [ 404.419010][ T9493] ? lockdep_hardirqs_on+0x98/0x150 [ 404.424228][ T9493] ? __local_bh_enable_ip+0x13a/0x1c0 [ 404.429624][ T9493] ? _local_bh_enable+0xa0/0xa0 [ 404.434499][ T9493] ? __dev_queue_xmit+0x1481/0x3a30 [ 404.439721][ T9493] ? __dev_queue_xmit+0x6d1/0x3a30 [ 404.444890][ T9493] ? ref_tracker_free+0x686/0x830 [ 404.449984][ T9493] netlink_rcv_skb+0x235/0x4c0 [ 404.454794][ T9493] ? rtnetlink_bind+0x80/0x80 [ 404.459528][ T9493] ? netlink_ack+0x1160/0x1160 [ 404.464351][ T9493] ? __lock_acquire+0x7eb0/0x7eb0 [ 404.469470][ T9493] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.474745][ T9493] netlink_unicast+0x856/0x9e0 [ 404.479604][ T9493] netlink_sendmsg+0x8d0/0xbf0 [ 404.484440][ T9493] ? netlink_getsockopt+0x590/0x590 [ 404.489717][ T9493] ? apparmor_socket_sendmsg+0x8e/0x330 [ 404.495352][ T9493] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 404.500679][ T9493] ? security_socket_sendmsg+0x80/0xa0 [ 404.506180][ T9493] ? netlink_getsockopt+0x590/0x590 [ 404.511439][ T9493] ____sys_sendmsg+0x61b/0x980 [ 404.516267][ T9493] ? __asan_memset+0x22/0x40 [ 404.523437][ T9493] ? __sys_sendmsg_sock+0x30/0x30 [ 404.528505][ T9493] ? __import_iovec+0x3fa/0x850 [ 404.533482][ T9493] ? import_iovec+0x73/0xa0 [ 404.538021][ T9493] ___sys_sendmsg+0x2a6/0x360 [ 404.542734][ T9493] ? __sys_sendmsg+0x2b0/0x2b0 [ 404.547542][ T9493] ? trace_call_bpf+0xc3/0x6c0 [ 404.552350][ T9493] __se_sys_sendmsg+0x1d0/0x2c0 [ 404.557235][ T9493] ? perf_trace_preemptirq_template+0x269/0x330 [ 404.563508][ T9493] ? __x64_sys_sendmsg+0x80/0x80 [ 404.568483][ T9493] ? lockdep_hardirqs_on+0x98/0x150 [ 404.573709][ T9493] do_syscall_64+0x55/0xb0 [ 404.578160][ T9493] ? clear_bhb_loop+0x40/0x90 [ 404.582879][ T9493] ? clear_bhb_loop+0x40/0x90 [ 404.587589][ T9493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.593536][ T9493] RIP: 0033:0x7ff18739f559 [ 404.597983][ T9493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.617624][ T9493] RSP: 002b:00007ff1882f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.626080][ T9493] RAX: ffffffffffffffda RBX: 00007ff187625fa0 RCX: 00007ff18739f559 [ 404.634078][ T9493] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 404.642080][ T9493] RBP: 00007ff1882f7090 R08: 0000000000000000 R09: 0000000000000000 [ 404.650098][ T9493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.658111][ T9493] R13: 00007ff187626038 R14: 00007ff187625fa0 R15: 00007fff622cd3d8 [ 404.666130][ T9493] [ 405.805983][ T9518] __nla_validate_parse: 4 callbacks suppressed [ 405.806007][ T9518] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1058'. [ 406.743807][ T9521] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1055'. [ 407.004237][ T9521] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1055'. [ 407.197225][ T9531] netlink: 'syz.2.1059': attribute type 10 has an invalid length. [ 407.324679][ T9530] netlink: 668 bytes leftover after parsing attributes in process `syz.1.1060'. [ 407.371474][ T9530] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 407.380479][ T9530] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 407.621303][ T9535] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1059'. [ 407.771161][ T9545] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1064'. [ 407.846163][ T9535] Q±6ã�`Ò˜: renamed from lo (while UP) [ 408.459329][ T9555] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1066'. [ 408.856033][ T9562] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1068'. [ 411.849068][ T9568] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1070'. [ 411.928530][ T9569] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1070'. [ 412.304267][ T9576] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1073'. [ 412.372238][ T9579] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1074'. [ 412.400133][ T9579] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 412.453033][ T9579] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 412.633808][ T9583] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1075'. [ 414.091518][ T9599] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1080'. [ 416.105127][ T9603] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1082'. [ 416.152952][ T9607] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1081'. [ 416.208508][ T9603] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1082'. [ 416.850066][ T9621] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1085'. [ 416.949374][ T9624] netlink: 668 bytes leftover after parsing attributes in process `syz.4.1086'. [ 417.004288][ T9624] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 417.038890][ T9624] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 417.289241][ T9634] netlink: 'syz.4.1090': attribute type 29 has an invalid length. [ 417.297848][ T9634] netlink: 'syz.4.1090': attribute type 29 has an invalid length. [ 417.319317][ T9634] netlink: 'syz.4.1090': attribute type 29 has an invalid length. [ 417.806212][ T9644] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1092'. [ 420.695085][ T9649] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1093'. [ 420.789809][ T9649] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1093'. [ 420.951521][ T9654] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1094'. [ 421.503922][ T9662] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1098'. [ 421.999976][ T9668] FAULT_INJECTION: forcing a failure. [ 421.999976][ T9668] name failslab, interval 1, probability 0, space 0, times 0 [ 422.013098][ T9668] CPU: 1 PID: 9668 Comm: syz.4.1100 Not tainted syzkaller #0 [ 422.020530][ T9668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 422.030841][ T9668] Call Trace: [ 422.034172][ T9668] [ 422.037164][ T9668] dump_stack_lvl+0x18c/0x250 [ 422.041912][ T9668] ? show_regs_print_info+0x20/0x20 [ 422.047170][ T9668] ? load_image+0x420/0x420 [ 422.051728][ T9668] ? __lock_acquire+0x7eb0/0x7eb0 [ 422.056819][ T9668] should_fail_ex+0x394/0x4c0 [ 422.061559][ T9668] should_failslab+0x9/0x20 [ 422.066202][ T9668] slab_pre_alloc_hook+0x59/0x300 [ 422.071289][ T9668] ? security_sk_alloc+0x4b/0x130 [ 422.076404][ T9668] ? security_sk_alloc+0x4b/0x130 [ 422.081486][ T9668] __kmem_cache_alloc_node+0x53/0x260 [ 422.086913][ T9668] ? security_sk_alloc+0x4b/0x130 [ 422.092102][ T9668] __kmalloc+0xa7/0x240 [ 422.096348][ T9668] ? sk_prot_alloc+0xe7/0x210 [ 422.101089][ T9668] security_sk_alloc+0x4b/0x130 [ 422.106794][ T9668] sk_prot_alloc+0x101/0x210 [ 422.111454][ T9668] ? sk_alloc+0x24/0x350 [ 422.115762][ T9668] sk_alloc+0x3a/0x350 [ 422.119924][ T9668] ? bpf_ctx_init+0x154/0x190 [ 422.124692][ T9668] bpf_prog_test_run_skb+0x371/0x18f0 [ 422.130153][ T9668] ? __fget_files+0x28/0x460 [ 422.134806][ T9668] ? __fget_files+0x3fc/0x460 [ 422.139550][ T9668] ? cpu_online+0x60/0x60 [ 422.143930][ T9668] bpf_prog_test_run+0x31f/0x390 [ 422.148935][ T9668] __sys_bpf+0x49d/0x890 [ 422.153238][ T9668] ? bpf_link_show_fdinfo+0x560/0x560 [ 422.158677][ T9668] ? lock_chain_count+0x20/0x20 [ 422.163593][ T9668] __x64_sys_bpf+0x7c/0x90 [ 422.168060][ T9668] do_syscall_64+0x55/0xb0 [ 422.172534][ T9668] ? clear_bhb_loop+0x40/0x90 [ 422.177263][ T9668] ? clear_bhb_loop+0x40/0x90 [ 422.182000][ T9668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.187977][ T9668] RIP: 0033:0x7f71d479f559 [ 422.192437][ T9668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.212104][ T9668] RSP: 002b:00007f71d5608028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 422.220576][ T9668] RAX: ffffffffffffffda RBX: 00007f71d4a25fa0 RCX: 00007f71d479f559 [ 422.228698][ T9668] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 422.236723][ T9668] RBP: 00007f71d5608090 R08: 0000000000000000 R09: 0000000000000000 [ 422.244791][ T9668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.252828][ T9668] R13: 00007f71d4a26038 R14: 00007f71d4a25fa0 R15: 00007ffc709170c8 [ 422.260871][ T9668] [ 422.721257][ T9679] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1104'. [ 422.829072][ T9682] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1105'. [ 422.936754][ T9682] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1105'. [ 425.193184][ T9691] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1107'. [ 425.427673][ T9698] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1108'. [ 426.315674][ T9709] netlink: 'syz.4.1113': attribute type 1 has an invalid length. [ 426.431893][ T9717] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1115'. [ 426.593503][ T9719] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1116'. [ 426.622482][ T9718] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1116'. [ 427.001721][ T5803] Bluetooth: hci4: command 0x0406 tx timeout [ 429.551358][ T9730] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1120'. [ 429.801957][ T9738] netlink: 'syz.1.1121': attribute type 11 has an invalid length. [ 429.824698][ T9738] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1121'. [ 430.111541][ T9745] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1124'. [ 430.510414][ T9756] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1127'. [ 430.529550][ T9758] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1128'. [ 430.558072][ T9756] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1127'. [ 431.280351][ T9765] FAULT_INJECTION: forcing a failure. [ 431.280351][ T9765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.310293][ T9765] CPU: 1 PID: 9765 Comm: syz.1.1129 Not tainted syzkaller #0 [ 431.317776][ T9765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 431.328082][ T9765] Call Trace: [ 431.331452][ T9765] [ 431.334497][ T9765] dump_stack_lvl+0x18c/0x250 [ 431.339254][ T9765] ? show_regs_print_info+0x20/0x20 [ 431.344528][ T9765] ? load_image+0x420/0x420 [ 431.349115][ T9765] ? __lock_acquire+0x7eb0/0x7eb0 [ 431.354209][ T9765] ? snprintf+0xe9/0x140 [ 431.358526][ T9765] should_fail_ex+0x394/0x4c0 [ 431.363272][ T9765] _copy_to_user+0x2f/0xa0 [ 431.367751][ T9765] simple_read_from_buffer+0xe7/0x150 [ 431.373193][ T9765] proc_fail_nth_read+0x1e8/0x260 [ 431.378289][ T9765] ? proc_fault_inject_write+0x360/0x360 [ 431.384006][ T9765] ? fsnotify_perm+0x271/0x5e0 [ 431.388831][ T9765] ? proc_fault_inject_write+0x360/0x360 [ 431.394534][ T9765] vfs_read+0x298/0x990 [ 431.398765][ T9765] ? kernel_read+0x1e0/0x1e0 [ 431.403416][ T9765] ? __fget_files+0x28/0x460 [ 431.408075][ T9765] ? __fget_files+0x3fc/0x460 [ 431.412825][ T9765] ? __fdget_pos+0x2a3/0x330 [ 431.417480][ T9765] ? ksys_read+0x74/0x260 [ 431.421891][ T9765] ksys_read+0x151/0x260 [ 431.426204][ T9765] ? vfs_write+0x9a0/0x9a0 [ 431.430686][ T9765] ? lockdep_hardirqs_on+0x98/0x150 [ 431.435948][ T9765] do_syscall_64+0x55/0xb0 [ 431.440423][ T9765] ? clear_bhb_loop+0x40/0x90 [ 431.445161][ T9765] ? clear_bhb_loop+0x40/0x90 [ 431.449885][ T9765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.455867][ T9765] RIP: 0033:0x7ff18735fd8e [ 431.460313][ T9765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 431.479976][ T9765] RSP: 002b:00007ff1882f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 431.488455][ T9765] RAX: ffffffffffffffda RBX: 00007ff1882f76c0 RCX: 00007ff18735fd8e [ 431.496467][ T9765] RDX: 000000000000000f RSI: 00007ff1882f70a0 RDI: 0000000000000004 [ 431.504489][ T9765] RBP: 00007ff1882f7090 R08: 0000000000000000 R09: 0000000000000000 [ 431.512497][ T9765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.520529][ T9765] R13: 00007ff187626038 R14: 00007ff187625fa0 R15: 00007fff622cd3d8 [ 431.528553][ T9765] [ 431.587586][ T9772] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1132'. [ 431.914831][ T9780] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1135'. [ 432.526231][ T9790] ±ÿ: renamed from lo (while UP) [ 432.561425][ T9790] FAULT_INJECTION: forcing a failure. [ 432.561425][ T9790] name failslab, interval 1, probability 0, space 0, times 0 [ 432.599345][ T9790] CPU: 1 PID: 9790 Comm: syz.3.1138 Not tainted syzkaller #0 [ 432.606814][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 432.617017][ T9790] Call Trace: [ 432.620339][ T9790] [ 432.623319][ T9790] dump_stack_lvl+0x18c/0x250 [ 432.628092][ T9790] ? show_regs_print_info+0x20/0x20 [ 432.633383][ T9790] ? load_image+0x420/0x420 [ 432.637958][ T9790] ? __lock_acquire+0x7eb0/0x7eb0 [ 432.643063][ T9790] ? trace_event_raw_event_lock+0x240/0x240 [ 432.649029][ T9790] should_fail_ex+0x394/0x4c0 [ 432.653780][ T9790] should_failslab+0x9/0x20 [ 432.658332][ T9790] slab_pre_alloc_hook+0x59/0x300 [ 432.663401][ T9790] ? kernfs_rename_ns+0x3ab/0x830 [ 432.668498][ T9790] ? kernfs_rename_ns+0x3ab/0x830 [ 432.673813][ T9790] __kmem_cache_alloc_node+0x53/0x260 [ 432.679245][ T9790] ? kernfs_rename_ns+0x3ab/0x830 [ 432.684299][ T9790] __kmalloc_node_track_caller+0xa4/0x230 [ 432.690077][ T9790] kstrdup+0x3b/0x80 [ 432.694012][ T9790] kernfs_rename_ns+0x3ab/0x830 [ 432.698894][ T9790] ? kernfs_find_and_get_ns+0xda/0x110 [ 432.704406][ T9790] sysfs_rename_link_ns+0x175/0x1b0 [ 432.709676][ T9790] device_rename+0x110/0x1e0 [ 432.714301][ T9790] dev_change_name+0x308/0x8e0 [ 432.719121][ T9790] ? end_current_label_crit_section+0x170/0x170 [ 432.725400][ T9790] ? dev_ioctl+0x5dc/0x1140 [ 432.729963][ T9790] ? __lock_acquire+0x7eb0/0x7eb0 [ 432.735021][ T9790] ? dev_alloc_name+0x1d0/0x1d0 [ 432.739919][ T9790] ? full_name_hash+0x92/0xe0 [ 432.744634][ T9790] ? dev_ifsioc+0x316/0xc40 [ 432.749182][ T9790] dev_ioctl+0x5ec/0x1140 [ 432.753559][ T9790] sock_do_ioctl+0x239/0x310 [ 432.758206][ T9790] ? sock_show_fdinfo+0xb0/0xb0 [ 432.763114][ T9790] sock_ioctl+0x5be/0x7e0 [ 432.767484][ T9790] ? sock_poll+0x460/0x460 [ 432.771952][ T9790] ? bpf_lsm_file_ioctl+0x9/0x10 [ 432.776941][ T9790] ? security_file_ioctl+0x80/0xa0 [ 432.782101][ T9790] ? sock_poll+0x460/0x460 [ 432.786557][ T9790] __se_sys_ioctl+0xfd/0x170 [ 432.791215][ T9790] do_syscall_64+0x55/0xb0 [ 432.795844][ T9790] ? clear_bhb_loop+0x40/0x90 [ 432.800559][ T9790] ? clear_bhb_loop+0x40/0x90 [ 432.805360][ T9790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.811293][ T9790] RIP: 0033:0x7f9ea879f559 [ 432.815764][ T9790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.835426][ T9790] RSP: 002b:00007f9ea9586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.843870][ T9790] RAX: ffffffffffffffda RBX: 00007f9ea8a26180 RCX: 00007f9ea879f559 [ 432.851898][ T9790] RDX: 00002000000015c0 RSI: 0000000000008923 RDI: 000000000000000a [ 432.859908][ T9790] RBP: 00007f9ea9586090 R08: 0000000000000000 R09: 0000000000000000 [ 432.867907][ T9790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.875934][ T9790] R13: 00007f9ea8a26218 R14: 00007f9ea8a26180 R15: 00007fff18128d28 [ 432.883960][ T9790] [ 433.221068][ T9799] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1140'. [ 433.302202][ T9803] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1141'. [ 433.408409][ T9801] delete_channel: no stack [ 433.450438][ T9807] netlink: 'syz.2.1143': attribute type 9 has an invalid length. [ 434.584216][ T9822] FAULT_INJECTION: forcing a failure. [ 434.584216][ T9822] name failslab, interval 1, probability 0, space 0, times 0 [ 434.622552][ T9822] CPU: 0 PID: 9822 Comm: syz.4.1148 Not tainted syzkaller #0 [ 434.630013][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 434.640126][ T9822] Call Trace: [ 434.643446][ T9822] [ 434.646414][ T9822] dump_stack_lvl+0x18c/0x250 [ 434.651239][ T9822] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 434.657464][ T9822] ? show_regs_print_info+0x20/0x20 [ 434.662733][ T9822] ? load_image+0x420/0x420 [ 434.667314][ T9822] should_fail_ex+0x394/0x4c0 [ 434.672055][ T9822] should_failslab+0x9/0x20 [ 434.676605][ T9822] slab_pre_alloc_hook+0x59/0x300 [ 434.681679][ T9822] ? tomoyo_encode+0x2ad/0x570 [ 434.686509][ T9822] ? tomoyo_encode+0x2ad/0x570 [ 434.691417][ T9822] __kmem_cache_alloc_node+0x53/0x260 [ 434.696849][ T9822] ? tomoyo_encode+0x2ad/0x570 [ 434.701753][ T9822] __kmalloc+0xa7/0x240 [ 434.705966][ T9822] tomoyo_encode+0x2ad/0x570 [ 434.710605][ T9822] tomoyo_realpath_from_path+0x57c/0x5c0 [ 434.716291][ T9822] tomoyo_path_number_perm+0x248/0x5e0 [ 434.721793][ T9822] ? tomoyo_path_number_perm+0x217/0x5e0 [ 434.727477][ T9822] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 434.733081][ T9822] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 434.739192][ T9822] ? trace_call_bpf+0xc3/0x6c0 [ 434.744003][ T9822] ? trace_call_bpf+0x5e9/0x6c0 [ 434.748929][ T9822] ? __fget_files+0x28/0x460 [ 434.753581][ T9822] security_file_ioctl+0x70/0xa0 [ 434.758573][ T9822] __se_sys_ioctl+0x48/0x170 [ 434.763217][ T9822] do_syscall_64+0x55/0xb0 [ 434.767688][ T9822] ? clear_bhb_loop+0x40/0x90 [ 434.772500][ T9822] ? clear_bhb_loop+0x40/0x90 [ 434.777246][ T9822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.783288][ T9822] RIP: 0033:0x7f71d479f559 [ 434.787747][ T9822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.807418][ T9822] RSP: 002b:00007f71d5608028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.815882][ T9822] RAX: ffffffffffffffda RBX: 00007f71d4a25fa0 RCX: 00007f71d479f559 [ 434.824076][ T9822] RDX: 00002000000001c0 RSI: 0000000040082404 RDI: 0000000000000007 [ 434.832085][ T9822] RBP: 00007f71d5608090 R08: 0000000000000000 R09: 0000000000000000 [ 434.840101][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.848121][ T9822] R13: 00007f71d4a26038 R14: 00007f71d4a25fa0 R15: 00007ffc709170c8 [ 434.856152][ T9822] [ 434.915705][ T9822] ERROR: Out of memory at tomoyo_realpath_from_path. [ 434.960483][ T9819] delete_channel: no stack [ 435.861244][ T9847] __nla_validate_parse: 4 callbacks suppressed [ 435.861287][ T9847] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1153'. [ 435.886890][ T9849] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1154'. [ 435.913538][ T9847] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1153'. [ 437.969012][ T9857] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1156'. [ 438.338175][ T9861] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1157'. [ 438.455229][ T9862] FAULT_INJECTION: forcing a failure. [ 438.455229][ T9862] name failslab, interval 1, probability 0, space 0, times 0 [ 438.503932][ T9862] CPU: 0 PID: 9862 Comm: syz.2.1158 Not tainted syzkaller #0 [ 438.511408][ T9862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 438.521533][ T9862] Call Trace: [ 438.524894][ T9862] [ 438.527972][ T9862] dump_stack_lvl+0x18c/0x250 [ 438.532722][ T9862] ? show_regs_print_info+0x20/0x20 [ 438.537988][ T9862] ? load_image+0x420/0x420 [ 438.542589][ T9862] ? __might_sleep+0xe0/0xe0 [ 438.547244][ T9862] ? __lock_acquire+0x7eb0/0x7eb0 [ 438.552337][ T9862] should_fail_ex+0x394/0x4c0 [ 438.557083][ T9862] should_failslab+0x9/0x20 [ 438.561635][ T9862] slab_pre_alloc_hook+0x59/0x300 [ 438.566725][ T9862] ? __sta_info_destroy_part2+0x26b/0x410 [ 438.572514][ T9862] __kmem_cache_alloc_node+0x53/0x260 [ 438.578400][ T9862] ? __sta_info_destroy_part2+0x26b/0x410 [ 438.584193][ T9862] kmalloc_trace+0x2a/0xe0 [ 438.588859][ T9862] __sta_info_destroy_part2+0x26b/0x410 [ 438.594482][ T9862] __sta_info_flush+0x3e6/0x4f0 [ 438.599406][ T9862] ? sta_info_stop+0x40/0x40 [ 438.604105][ T9862] ? linkwatch_urgent_event+0x346/0x3c0 [ 438.609722][ T9862] ieee80211_ibss_disconnect+0x280/0x710 [ 438.615435][ T9862] ieee80211_ibss_leave+0x25/0x140 [ 438.620623][ T9862] __cfg80211_leave_ibss+0x1d2/0x400 [ 438.626011][ T9862] cfg80211_ibss_wext_siwfreq+0x22f/0x370 [ 438.631798][ T9862] cfg80211_wext_siwfreq+0x216/0x7f0 [ 438.637151][ T9862] ? trace_rdev_return_int+0x1c0/0x1c0 [ 438.642666][ T9862] ? lockdep_hardirqs_on+0x98/0x150 [ 438.647920][ T9862] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 438.654153][ T9862] ioctl_standard_call+0xca/0x250 [ 438.659242][ T9862] ? trace_rdev_return_int+0x1c0/0x1c0 [ 438.664753][ T9862] ? trace_rdev_return_int+0x1c0/0x1c0 [ 438.670275][ T9862] wext_ioctl_dispatch+0x51a/0x650 [ 438.675457][ T9862] ? __lock_acquire+0x7eb0/0x7eb0 [ 438.680642][ T9862] ? wext_ioctl_dispatch+0x650/0x650 [ 438.685989][ T9862] ? iw_handler_get_private+0x1f0/0x1f0 [ 438.691600][ T9862] ? wext_handle_ioctl+0x1e0/0x1e0 [ 438.696764][ T9862] ? __might_fault+0xaa/0x120 [ 438.701484][ T9862] ? __might_fault+0xc6/0x120 [ 438.706193][ T9862] ? __might_fault+0xaa/0x120 [ 438.711437][ T9862] wext_handle_ioctl+0x118/0x1e0 [ 438.716425][ T9862] ? call_commit_handler+0xf0/0xf0 [ 438.721621][ T9862] sock_ioctl+0x15d/0x7e0 [ 438.726013][ T9862] ? sock_poll+0x460/0x460 [ 438.730478][ T9862] ? tomoyo_file_ioctl+0x11/0x30 [ 438.735470][ T9862] ? bpf_lsm_file_ioctl+0x9/0x10 [ 438.740450][ T9862] ? security_file_ioctl+0x80/0xa0 [ 438.745609][ T9862] ? sock_poll+0x460/0x460 [ 438.750062][ T9862] __se_sys_ioctl+0xfd/0x170 [ 438.754700][ T9862] do_syscall_64+0x55/0xb0 [ 438.759155][ T9862] ? clear_bhb_loop+0x40/0x90 [ 438.763882][ T9862] ? clear_bhb_loop+0x40/0x90 [ 438.768856][ T9862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.774805][ T9862] RIP: 0033:0x7fce3af9f559 [ 438.779777][ T9862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.799440][ T9862] RSP: 002b:00007fce3be89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 438.807895][ T9862] RAX: ffffffffffffffda RBX: 00007fce3b225fa0 RCX: 00007fce3af9f559 [ 438.816085][ T9862] RDX: 0000200000001c40 RSI: 0000000000008b04 RDI: 000000000000000b [ 438.824264][ T9862] RBP: 00007fce3be89090 R08: 0000000000000000 R09: 0000000000000000 [ 438.832267][ T9862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.840268][ T9862] R13: 00007fce3b226038 R14: 00007fce3b225fa0 R15: 00007fff4124e418 [ 438.848289][ T9862] [ 439.270519][ T9876] syzkaller0: entered promiscuous mode [ 439.302864][ T9876] syzkaller0: entered allmulticast mode [ 439.412252][ T9881] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 443.054746][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.066843][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.241749][ T9882] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1164'. [ 443.369183][ T9888] FAULT_INJECTION: forcing a failure. [ 443.369183][ T9888] name failslab, interval 1, probability 0, space 0, times 0 [ 443.382359][ T9888] CPU: 0 PID: 9888 Comm: syz.1.1165 Not tainted syzkaller #0 [ 443.389798][ T9888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 443.399903][ T9888] Call Trace: [ 443.403222][ T9888] [ 443.406193][ T9888] dump_stack_lvl+0x18c/0x250 [ 443.411047][ T9888] ? kasan_set_track+0x4e/0x70 [ 443.415873][ T9888] ? show_regs_print_info+0x20/0x20 [ 443.421143][ T9888] ? load_image+0x420/0x420 [ 443.425693][ T9888] ? ip6_route_output_flags+0x364/0x5d0 [ 443.431299][ T9888] ? ____sys_sendmsg+0x61b/0x980 [ 443.436447][ T9888] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 443.441563][ T9888] ? do_syscall_64+0x55/0xb0 [ 443.446206][ T9888] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.452430][ T9888] should_fail_ex+0x394/0x4c0 [ 443.457160][ T9888] should_failslab+0x9/0x20 [ 443.461786][ T9888] slab_pre_alloc_hook+0x59/0x300 [ 443.466863][ T9888] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 443.472587][ T9888] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 443.478276][ T9888] __kmem_cache_alloc_node+0x53/0x260 [ 443.483702][ T9888] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 443.489407][ T9888] __kmalloc_node+0xa6/0x240 [ 443.494066][ T9888] memcg_alloc_slab_cgroups+0x85/0x120 [ 443.499583][ T9888] slab_post_alloc_hook+0xec/0x4d0 [ 443.504747][ T9888] ? ip6_pol_route+0x166/0x1360 [ 443.509659][ T9888] kmem_cache_alloc+0x17e/0x2d0 [ 443.514557][ T9888] ? dst_alloc+0x105/0x170 [ 443.519069][ T9888] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 443.524757][ T9888] dst_alloc+0x105/0x170 [ 443.529065][ T9888] ip6_pol_route+0x9fa/0x1360 [ 443.533798][ T9888] ? ip6_pol_route+0x166/0x1360 [ 443.538707][ T9888] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 443.544409][ T9888] ? fib6_get_table+0x39/0x260 [ 443.549261][ T9888] ? fib6_get_table+0x251/0x260 [ 443.554161][ T9888] ? skb_header_pointer+0x120/0x120 [ 443.559417][ T9888] fib6_rule_action+0x1d2/0x6c0 [ 443.564325][ T9888] fib_rules_lookup+0x593/0xb10 [ 443.569246][ T9888] ? fib_rules_lookup+0x8e/0xb10 [ 443.574251][ T9888] ? fib_rules_unregister+0x330/0x330 [ 443.579700][ T9888] ? l3mdev_update_flow+0x4b1/0x5f0 [ 443.584950][ T9888] fib6_rule_lookup+0x1ae/0x580 [ 443.589856][ T9888] ? skb_header_pointer+0x120/0x120 [ 443.595112][ T9888] ? fib6_lookup+0x2d0/0x2d0 [ 443.599751][ T9888] ? read_lock_is_recursive+0x20/0x20 [ 443.605172][ T9888] ? skb_header_pointer+0x120/0x120 [ 443.610440][ T9888] ip6_route_output_flags+0x364/0x5d0 [ 443.615863][ T9888] ? ip6_route_output_flags+0x2e/0x5d0 [ 443.621387][ T9888] ip6_dst_lookup_tail+0x1a5/0x1660 [ 443.626648][ T9888] ? __might_fault+0xc6/0x120 [ 443.631407][ T9888] ? ip6_dst_lookup+0x60/0x60 [ 443.636141][ T9888] ? copyout_mc+0x70/0x70 [ 443.640512][ T9888] ? txopt_get+0x344/0x3f0 [ 443.644979][ T9888] ? tomoyo_check_acl+0x37c/0x3f0 [ 443.650056][ T9888] ? fl6_sock_lookup+0xc0/0xc0 [ 443.654883][ T9888] ip6_dst_lookup_flow+0x48/0xe0 [ 443.659877][ T9888] rawv6_sendmsg+0xd76/0x17c0 [ 443.664626][ T9888] ? compat_rawv6_ioctl+0x70/0x70 [ 443.669719][ T9888] ? aa_sk_perm+0x7bb/0x8e0 [ 443.674289][ T9888] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 443.680784][ T9888] ? aa_sock_msg_perm+0x94/0x150 [ 443.685761][ T9888] ? inet_sendmsg+0x7e/0x2a0 [ 443.690390][ T9888] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 443.695730][ T9888] ? inet_send_prepare+0x250/0x250 [ 443.700909][ T9888] ____sys_sendmsg+0x61b/0x980 [ 443.705741][ T9888] ? __asan_memset+0x22/0x40 [ 443.710374][ T9888] ? __sys_sendmsg_sock+0x30/0x30 [ 443.715431][ T9888] ? __import_iovec+0x5f2/0x850 [ 443.720338][ T9888] ? import_iovec+0x73/0xa0 [ 443.724916][ T9888] ___sys_sendmsg+0x2a6/0x360 [ 443.729649][ T9888] ? get_pid_task+0x20/0x1e0 [ 443.734299][ T9888] ? __sys_sendmsg+0x2b0/0x2b0 [ 443.739150][ T9888] ? __lock_acquire+0x7eb0/0x7eb0 [ 443.744295][ T9888] __se_sys_sendmsg+0x1d0/0x2c0 [ 443.749211][ T9888] ? __x64_sys_sendmsg+0x80/0x80 [ 443.754228][ T9888] ? lockdep_hardirqs_on+0x98/0x150 [ 443.759510][ T9888] do_syscall_64+0x55/0xb0 [ 443.763977][ T9888] ? clear_bhb_loop+0x40/0x90 [ 443.768697][ T9888] ? clear_bhb_loop+0x40/0x90 [ 443.773431][ T9888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.779515][ T9888] RIP: 0033:0x7ff18739f559 [ 443.784024][ T9888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.804745][ T9888] RSP: 002b:00007ff1882f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.813234][ T9888] RAX: ffffffffffffffda RBX: 00007ff187625fa0 RCX: 00007ff18739f559 [ 443.821273][ T9888] RDX: 0000000000000060 RSI: 0000200000000700 RDI: 0000000000000003 [ 443.829389][ T9888] RBP: 00007ff1882f7090 R08: 0000000000000000 R09: 0000000000000000 [ 443.837412][ T9888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.845565][ T9888] R13: 00007ff187626038 R14: 00007ff187625fa0 R15: 00007fff622cd3d8 [ 443.853607][ T9888] [ 444.045598][ T9895] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1168'. [ 444.465635][ T9900] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1169'. [ 444.867532][ T9904] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1170'. [ 445.270038][ T9915] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1174'. [ 445.349432][ T9915] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1174'. [ 445.487498][ T9922] FAULT_INJECTION: forcing a failure. [ 445.487498][ T9922] name failslab, interval 1, probability 0, space 0, times 0 [ 445.511279][ T9922] CPU: 0 PID: 9922 Comm: syz.4.1175 Not tainted syzkaller #0 [ 445.518735][ T9922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 445.528844][ T9922] Call Trace: [ 445.532173][ T9922] [ 445.535150][ T9922] dump_stack_lvl+0x18c/0x250 [ 445.539893][ T9922] ? show_regs_print_info+0x20/0x20 [ 445.545151][ T9922] ? load_image+0x420/0x420 [ 445.549721][ T9922] ? __might_sleep+0xe0/0xe0 [ 445.554379][ T9922] ? __lock_acquire+0x7eb0/0x7eb0 [ 445.559466][ T9922] should_fail_ex+0x394/0x4c0 [ 445.564217][ T9922] should_failslab+0x9/0x20 [ 445.568775][ T9922] slab_pre_alloc_hook+0x59/0x300 [ 445.573869][ T9922] ? subflow_ulp_init+0x95/0x530 [ 445.578864][ T9922] __kmem_cache_alloc_node+0x53/0x260 [ 445.584291][ T9922] ? tcp_set_ulp+0xb1/0x5f0 [ 445.588856][ T9922] ? subflow_ulp_init+0x95/0x530 [ 445.593850][ T9922] kmalloc_trace+0x2a/0xe0 [ 445.598321][ T9922] subflow_ulp_init+0x95/0x530 [ 445.603148][ T9922] ? tcp_set_ulp+0xb1/0x5f0 [ 445.607713][ T9922] tcp_set_ulp+0x536/0x5f0 [ 445.612288][ T9922] mptcp_subflow_create_socket+0x61d/0xad0 [ 445.618149][ T9922] ? __mptcp_subflow_connect+0x14d0/0x14d0 [ 445.624009][ T9922] ? lock_chain_count+0x20/0x20 [ 445.628920][ T9922] __mptcp_nmpc_sk+0x157/0x720 [ 445.633749][ T9922] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 445.640590][ T9922] mptcp_setsockopt+0x1714/0x3370 [ 445.645698][ T9922] ? aa_sk_perm+0x7bb/0x8e0 [ 445.650259][ T9922] ? pm_nl_exit_net+0x230/0x230 [ 445.655170][ T9922] ? aa_af_perm+0x330/0x330 [ 445.659740][ T9922] ? __fget_files+0x28/0x460 [ 445.664393][ T9922] ? aa_sock_opt_perm+0x74/0x100 [ 445.669379][ T9922] ? sock_common_setsockopt+0x36/0xc0 [ 445.674812][ T9922] ? sock_common_recvmsg+0x190/0x190 [ 445.680153][ T9922] do_sock_setsockopt+0x175/0x1a0 [ 445.685503][ T9922] __x64_sys_setsockopt+0x182/0x200 [ 445.690799][ T9922] do_syscall_64+0x55/0xb0 [ 445.695283][ T9922] ? clear_bhb_loop+0x40/0x90 [ 445.700026][ T9922] ? clear_bhb_loop+0x40/0x90 [ 445.704775][ T9922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.710732][ T9922] RIP: 0033:0x7f71d479f559 [ 445.715199][ T9922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.734868][ T9922] RSP: 002b:00007f71d5608028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 445.743341][ T9922] RAX: ffffffffffffffda RBX: 00007f71d4a25fa0 RCX: 00007f71d479f559 [ 445.751451][ T9922] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000004 [ 445.759471][ T9922] RBP: 00007f71d5608090 R08: 0000000000000000 R09: 0000000000000000 [ 445.767495][ T9922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.775520][ T9922] R13: 00007f71d4a26038 R14: 00007f71d4a25fa0 R15: 00007ffc709170c8 [ 445.783570][ T9922] [ 445.906534][ T9926] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1178'. [ 446.174607][ T9933] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1181'. [ 446.214756][ T9936] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1182'. [ 446.428167][ T9942] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1183'. [ 446.679809][ T9947] netlink: 'syz.4.1185': attribute type 49 has an invalid length. [ 449.075664][ T9959] FAULT_INJECTION: forcing a failure. [ 449.075664][ T9959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.146567][ T9959] CPU: 0 PID: 9959 Comm: syz.1.1189 Not tainted syzkaller #0 [ 449.154034][ T9959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 449.164136][ T9959] Call Trace: [ 449.167460][ T9959] [ 449.170427][ T9959] dump_stack_lvl+0x18c/0x250 [ 449.175164][ T9959] ? show_regs_print_info+0x20/0x20 [ 449.180415][ T9959] ? load_image+0x420/0x420 [ 449.184975][ T9959] ? __might_fault+0xaa/0x120 [ 449.189728][ T9959] ? __lock_acquire+0x7eb0/0x7eb0 [ 449.194824][ T9959] should_fail_ex+0x394/0x4c0 [ 449.199564][ T9959] _copy_from_user+0x2f/0xe0 [ 449.204200][ T9959] ___sys_sendmsg+0x1c7/0x360 [ 449.208923][ T9959] ? get_pid_task+0x20/0x1e0 [ 449.213566][ T9959] ? __sys_sendmsg+0x2b0/0x2b0 [ 449.218405][ T9959] ? __lock_acquire+0x7eb0/0x7eb0 [ 449.223523][ T9959] __se_sys_sendmsg+0x1d0/0x2c0 [ 449.228430][ T9959] ? perf_trace_preemptirq_template+0x269/0x330 [ 449.234733][ T9959] ? __x64_sys_sendmsg+0x80/0x80 [ 449.239757][ T9959] ? lockdep_hardirqs_on+0x98/0x150 [ 449.245019][ T9959] do_syscall_64+0x55/0xb0 [ 449.249484][ T9959] ? clear_bhb_loop+0x40/0x90 [ 449.254213][ T9959] ? clear_bhb_loop+0x40/0x90 [ 449.258944][ T9959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.264884][ T9959] RIP: 0033:0x7ff18739f559 [ 449.269340][ T9959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.289016][ T9959] RSP: 002b:00007ff1882f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.297487][ T9959] RAX: ffffffffffffffda RBX: 00007ff187625fa0 RCX: 00007ff18739f559 [ 449.305526][ T9959] RDX: 0000000000000000 RSI: 0000200000002780 RDI: 0000000000000003 [ 449.313537][ T9959] RBP: 00007ff1882f7090 R08: 0000000000000000 R09: 0000000000000000 [ 449.321555][ T9959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.329668][ T9959] R13: 00007ff187626038 R14: 00007ff187625fa0 R15: 00007fff622cd3d8 [ 449.337700][ T9959] [ 449.357756][ T9958] netlink: 'syz.2.1188': attribute type 10 has an invalid length. [ 449.568361][ T9962] __nla_validate_parse: 3 callbacks suppressed [ 449.568400][ T9962] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1187'. [ 449.659140][ T9964] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1187'. [ 449.949191][ T9970] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1192'. [ 449.972737][ T9973] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1193'. [ 450.182506][ T9980] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1196'. [ 452.832241][T10003] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1201'. [ 452.906051][T10010] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1201'. [ 453.088041][T10013] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1205'. [ 453.347527][T10016] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1206'. [ 453.378742][T10018] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1207'. [ 455.056473][T10040] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1214'. [ 455.094038][T10040] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1214'. [ 455.185280][T10044] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1216'. [ 455.236629][T10046] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1217'. [ 455.324740][T10048] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1218'. [ 455.565333][T10055] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1219'. [ 455.574834][T10055] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1219'. [ 455.601474][T10050] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1219'. [ 455.629203][T10051] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1219'. [ 457.087214][T10069] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1227'. [ 457.114149][T10067] netlink: 'syz.3.1224': attribute type 49 has an invalid length. [ 459.420796][T10096] netlink: 'syz.2.1233': attribute type 29 has an invalid length. [ 459.443905][T10096] netlink: 'syz.2.1233': attribute type 29 has an invalid length. [ 459.463811][T10096] netlink: 'syz.2.1233': attribute type 29 has an invalid length. [ 463.055472][T10128] __nla_validate_parse: 7 callbacks suppressed [ 463.055491][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1245'. [ 463.112240][T10126] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1244'. [ 463.124081][T10124] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1242'. [ 463.153024][T10124] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.1242'. [ 463.190123][T10130] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1243'. [ 463.842636][T10142] netlink: 'syz.2.1248': attribute type 3 has an invalid length. [ 463.850499][T10142] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1248'. [ 464.004492][T10142] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1248'. [ 464.364691][T10160] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1250'. [ 464.680911][T10164] netlink: 'syz.1.1252': attribute type 49 has an invalid length. [ 465.037224][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 465.347662][T10175] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1255'. [ 466.409974][T10194] FAULT_INJECTION: forcing a failure. [ 466.409974][T10194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.454415][T10194] CPU: 1 PID: 10194 Comm: syz.4.1262 Not tainted syzkaller #0 [ 466.461986][T10194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 466.472104][T10194] Call Trace: [ 466.475434][T10194] [ 466.478451][T10194] dump_stack_lvl+0x18c/0x250 [ 466.483241][T10194] ? show_regs_print_info+0x20/0x20 [ 466.488503][T10194] ? load_image+0x420/0x420 [ 466.493086][T10194] ? __might_fault+0xaa/0x120 [ 466.497823][T10194] ? __lock_acquire+0x7eb0/0x7eb0 [ 466.502910][T10194] should_fail_ex+0x394/0x4c0 [ 466.507650][T10194] _copy_from_user+0x2f/0xe0 [ 466.512290][T10194] ___sys_sendmsg+0x1c7/0x360 [ 466.517059][T10194] ? __sys_sendmsg+0x2b0/0x2b0 [ 466.521962][T10194] ? trace_call_bpf+0xc3/0x6c0 [ 466.526776][T10194] __se_sys_sendmsg+0x1d0/0x2c0 [ 466.531700][T10194] ? perf_trace_preemptirq_template+0x269/0x330 [ 466.538069][T10194] ? __x64_sys_sendmsg+0x80/0x80 [ 466.543053][T10194] ? lockdep_hardirqs_on+0x98/0x150 [ 466.548310][T10194] do_syscall_64+0x55/0xb0 [ 466.552758][T10194] ? clear_bhb_loop+0x40/0x90 [ 466.557470][T10194] ? clear_bhb_loop+0x40/0x90 [ 466.562190][T10194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.568219][T10194] RIP: 0033:0x7f71d479f559 [ 466.572758][T10194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.592413][T10194] RSP: 002b:00007f71d5608028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.600964][T10194] RAX: ffffffffffffffda RBX: 00007f71d4a25fa0 RCX: 00007f71d479f559 [ 466.608961][T10194] RDX: 0000000000000000 RSI: 0000200000003600 RDI: 0000000000000005 [ 466.616958][T10194] RBP: 00007f71d5608090 R08: 0000000000000000 R09: 0000000000000000 [ 466.624971][T10194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.632969][T10194] R13: 00007f71d4a26038 R14: 00007f71d4a25fa0 R15: 00007ffc709170c8 [ 466.640991][T10194] [ 468.089114][T10215] __nla_validate_parse: 8 callbacks suppressed [ 468.089246][T10215] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1269'. [ 470.769585][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1273'. [ 471.024860][T10244] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1277'. [ 471.264898][T10248] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1278'. [ 471.325363][T10250] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1279'. [ 471.627568][T10256] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1281'. [ 471.667855][T10256] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1281'. [ 473.942976][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'. [ 474.175805][T10274] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1288'. [ 474.300916][T10277] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1289'. [ 474.319868][T10279] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1290'. [ 474.541859][T10281] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1291'. [ 474.578233][T10283] netlink: 'syz.1.1292': attribute type 3 has an invalid length. [ 474.586536][T10283] netlink: 'syz.1.1292': attribute type 6 has an invalid length. [ 474.588606][T10281] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1291'. [ 474.605252][T10283] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.1292'. [ 474.737104][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 477.070910][T10303] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1299'. [ 477.169788][T10307] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1301'. [ 477.208954][T10310] FAULT_INJECTION: forcing a failure. [ 477.208954][T10310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.298546][T10310] CPU: 0 PID: 10310 Comm: syz.3.1300 Not tainted syzkaller #0 [ 477.306086][T10310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 477.316169][T10310] Call Trace: [ 477.319519][T10310] [ 477.322505][T10310] dump_stack_lvl+0x18c/0x250 [ 477.327248][T10310] ? show_regs_print_info+0x20/0x20 [ 477.332538][T10310] ? load_image+0x420/0x420 [ 477.337100][T10310] ? __might_fault+0xaa/0x120 [ 477.341827][T10310] ? __lock_acquire+0x7eb0/0x7eb0 [ 477.346913][T10310] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 477.353125][T10310] should_fail_ex+0x394/0x4c0 [ 477.357869][T10310] _copy_from_user+0x2f/0xe0 [ 477.362524][T10310] dev_ethtool+0xc6/0x18d0 [ 477.367000][T10310] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 477.373284][T10310] ? __lock_acquire+0x7eb0/0x7eb0 [ 477.378346][T10310] ? __might_fault+0xaa/0x120 [ 477.383055][T10310] ? full_name_hash+0x92/0xe0 [ 477.387766][T10310] ? dev_load+0x21/0x1f0 [ 477.392045][T10310] dev_ioctl+0x392/0x1140 [ 477.396408][T10310] sock_do_ioctl+0x239/0x310 [ 477.401052][T10310] ? sock_show_fdinfo+0xb0/0xb0 [ 477.405952][T10310] sock_ioctl+0x5be/0x7e0 [ 477.410401][T10310] ? sock_poll+0x460/0x460 [ 477.414868][T10310] ? bpf_lsm_file_ioctl+0x9/0x10 [ 477.419834][T10310] ? security_file_ioctl+0x80/0xa0 [ 477.424983][T10310] ? sock_poll+0x460/0x460 [ 477.429439][T10310] __se_sys_ioctl+0xfd/0x170 [ 477.434071][T10310] do_syscall_64+0x55/0xb0 [ 477.438531][T10310] ? clear_bhb_loop+0x40/0x90 [ 477.443244][T10310] ? clear_bhb_loop+0x40/0x90 [ 477.448061][T10310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.453988][T10310] RIP: 0033:0x7f9ea879f559 [ 477.458458][T10310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.478098][T10310] RSP: 002b:00007f9ea95a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.486570][T10310] RAX: ffffffffffffffda RBX: 00007f9ea8a26090 RCX: 00007f9ea879f559 [ 477.494579][T10310] RDX: 0000200000001ac0 RSI: 0000000000008946 RDI: 0000000000000004 [ 477.502579][T10310] RBP: 00007f9ea95a7090 R08: 0000000000000000 R09: 0000000000000000 [ 477.510576][T10310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.518575][T10310] R13: 00007f9ea8a26128 R14: 00007f9ea8a26090 R15: 00007fff18128d28 [ 477.526769][T10310] [ 479.878266][T10329] __nla_validate_parse: 4 callbacks suppressed [ 479.878287][T10329] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1311'. [ 480.199929][T10333] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1312'. [ 480.726532][T10342] FAULT_INJECTION: forcing a failure. [ 480.726532][T10342] name failslab, interval 1, probability 0, space 0, times 0 [ 480.760618][T10342] CPU: 1 PID: 10342 Comm: syz.3.1314 Not tainted syzkaller #0 [ 480.768202][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 480.778335][T10342] Call Trace: [ 480.781693][T10342] [ 480.784701][T10342] dump_stack_lvl+0x18c/0x250 [ 480.789478][T10342] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 480.796096][T10342] ? show_regs_print_info+0x20/0x20 [ 480.801390][T10342] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 480.807705][T10342] should_fail_ex+0x394/0x4c0 [ 480.812489][T10342] should_failslab+0x9/0x20 [ 480.817179][T10342] slab_pre_alloc_hook+0x59/0x300 [ 480.822294][T10342] ? page_pool_create+0x71/0x5c0 [ 480.827332][T10342] __kmem_cache_alloc_node+0x53/0x260 [ 480.832807][T10342] ? page_pool_create+0x71/0x5c0 [ 480.837834][T10342] kmalloc_node_trace+0x26/0xe0 [ 480.842789][T10342] page_pool_create+0x71/0x5c0 [ 480.847687][T10342] bpf_test_run_xdp_live+0x203/0x1b30 [ 480.853232][T10342] ? 0xffffffffa0005440 [ 480.857494][T10342] ? 0xffffffffa0005440 [ 480.861760][T10342] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 480.867792][T10342] ? xdp_convert_md_to_buff+0x330/0x330 [ 480.873591][T10342] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 480.880044][T10342] ? _copy_from_user+0xa5/0xe0 [ 480.884902][T10342] ? bpf_test_init+0x119/0x140 [ 480.889777][T10342] ? xdp_convert_md_to_buff+0x5b/0x330 [ 480.895771][T10342] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 480.901246][T10342] ? __lock_acquire+0x7eb0/0x7eb0 [ 480.906392][T10342] ? dev_put+0x80/0x80 [ 480.910606][T10342] ? dev_put+0x80/0x80 [ 480.914881][T10342] bpf_prog_test_run+0x31f/0x390 [ 480.920070][T10342] __sys_bpf+0x49d/0x890 [ 480.924440][T10342] ? read_tsc+0x9/0x20 [ 480.928578][T10342] ? bpf_link_show_fdinfo+0x560/0x560 [ 480.934071][T10342] ? lock_chain_count+0x20/0x20 [ 480.938993][T10342] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 480.945052][T10342] __x64_sys_bpf+0x7c/0x90 [ 480.949525][T10342] do_syscall_64+0x55/0xb0 [ 480.954001][T10342] ? clear_bhb_loop+0x40/0x90 [ 480.958735][T10342] ? clear_bhb_loop+0x40/0x90 [ 480.963474][T10342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.969446][T10342] RIP: 0033:0x7f9ea879f559 [ 480.973916][T10342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.993565][T10342] RSP: 002b:00007f9ea95c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 481.002034][T10342] RAX: ffffffffffffffda RBX: 00007f9ea8a25fa0 RCX: 00007f9ea879f559 [ 481.010098][T10342] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 481.018155][T10342] RBP: 00007f9ea95c8090 R08: 0000000000000000 R09: 0000000000000000 [ 481.026199][T10342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.034223][T10342] R13: 00007f9ea8a26038 R14: 00007f9ea8a25fa0 R15: 00007fff18128d28 [ 481.042281][T10342] [ 481.238563][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'. [ 481.274037][T10350] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1316'. [ 481.896580][T10355] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1317'. [ 481.923286][T10355] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1317'. [ 482.087074][T10363] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1322'. [ 482.786078][T10375] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1324'. [ 484.695171][T10377] FAULT_INJECTION: forcing a failure. [ 484.695171][T10377] name failslab, interval 1, probability 0, space 0, times 0 [ 484.741040][T10377] CPU: 0 PID: 10377 Comm: syz.2.1326 Not tainted syzkaller #0 [ 484.748592][T10377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 484.758882][T10377] Call Trace: [ 484.762246][T10377] [ 484.765238][T10377] dump_stack_lvl+0x18c/0x250 [ 484.769968][T10377] ? sctp_sendmsg+0x1519/0x27b0 [ 484.774873][T10377] ? ___sys_sendmsg+0x2a6/0x360 [ 484.779780][T10377] ? show_regs_print_info+0x20/0x20 [ 484.785035][T10377] ? load_image+0x420/0x420 [ 484.789601][T10377] should_fail_ex+0x394/0x4c0 [ 484.794443][T10377] should_failslab+0x9/0x20 [ 484.799017][T10377] slab_pre_alloc_hook+0x59/0x300 [ 484.804118][T10377] ? sctp_add_bind_addr+0x8c/0x360 [ 484.809284][T10377] __kmem_cache_alloc_node+0x53/0x260 [ 484.814708][T10377] ? sctp_add_bind_addr+0x8c/0x360 [ 484.819872][T10377] kmalloc_trace+0x2a/0xe0 [ 484.824350][T10377] sctp_add_bind_addr+0x8c/0x360 [ 484.829342][T10377] sctp_copy_local_addr_list+0x31b/0x4e0 [ 484.835033][T10377] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 484.840813][T10377] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 484.846938][T10377] ? sctp_v6_is_any+0x64/0x70 [ 484.851657][T10377] ? sctp_copy_one_addr+0x8c/0x350 [ 484.856818][T10377] sctp_bind_addr_copy+0xb3/0x3c0 [ 484.861922][T10377] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 484.868304][T10377] sctp_connect_new_asoc+0x2f9/0x6a0 [ 484.873640][T10377] ? __sctp_connect+0xd80/0xd80 [ 484.878536][T10377] ? __local_bh_enable_ip+0x13a/0x1c0 [ 484.883955][T10377] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 484.889548][T10377] ? security_sctp_bind_connect+0x89/0xb0 [ 484.895318][T10377] sctp_sendmsg+0x1519/0x27b0 [ 484.900048][T10377] ? sctp_getsockopt+0xb60/0xb60 [ 484.905035][T10377] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 484.911246][T10377] ? lockdep_hardirqs_on+0x98/0x150 [ 484.916500][T10377] ? sock_rps_record_flow+0x19/0x3f0 [ 484.921827][T10377] ? inet_sendmsg+0xce/0x2a0 [ 484.926468][T10377] ? inet_send_prepare+0x250/0x250 [ 484.931620][T10377] ____sys_sendmsg+0x61b/0x980 [ 484.936431][T10377] ? __asan_memset+0x22/0x40 [ 484.941077][T10377] ? __sys_sendmsg_sock+0x30/0x30 [ 484.946141][T10377] ? __import_iovec+0x5f2/0x850 [ 484.951072][T10377] ? import_iovec+0x73/0xa0 [ 484.955622][T10377] ___sys_sendmsg+0x2a6/0x360 [ 484.960336][T10377] ? get_pid_task+0x20/0x1e0 [ 484.964975][T10377] ? __sys_sendmsg+0x2b0/0x2b0 [ 484.969798][T10377] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 484.976026][T10377] __se_sys_sendmsg+0x1d0/0x2c0 [ 484.980939][T10377] ? __x64_sys_sendmsg+0x80/0x80 [ 484.985943][T10377] ? lockdep_hardirqs_on+0x98/0x150 [ 484.991201][T10377] do_syscall_64+0x55/0xb0 [ 484.995671][T10377] ? clear_bhb_loop+0x40/0x90 [ 485.000409][T10377] ? clear_bhb_loop+0x40/0x90 [ 485.005219][T10377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.011179][T10377] RIP: 0033:0x7fce3af9f559 [ 485.015632][T10377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.035281][T10377] RSP: 002b:00007fce3be89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.043743][T10377] RAX: ffffffffffffffda RBX: 00007fce3b225fa0 RCX: 00007fce3af9f559 [ 485.051759][T10377] RDX: 0000000000000844 RSI: 00002000000002c0 RDI: 0000000000000009 [ 485.059760][T10377] RBP: 00007fce3be89090 R08: 0000000000000000 R09: 0000000000000000 [ 485.067755][T10377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 485.075779][T10377] R13: 00007fce3b226038 R14: 00007fce3b225fa0 R15: 00007fff4124e418 [ 485.083813][T10377] [ 485.169724][T10379] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1327'. [ 485.231570][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1325'. [ 485.534167][T10384] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1328'. [ 485.927833][T10397] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1331'. [ 485.978928][T10394] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1331'. [ 486.019072][T10400] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1333'. [ 486.126155][T10401] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1334'. [ 486.185662][T10402] netlink: 'syz.4.1334': attribute type 9 has an invalid length. [ 486.225156][T10402] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1334'. [ 486.428925][T10412] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1336'. [ 486.471071][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1337'. [ 489.382707][T10432] FAULT_INJECTION: forcing a failure. [ 489.382707][T10432] name failslab, interval 1, probability 0, space 0, times 0 [ 489.437179][T10432] CPU: 0 PID: 10432 Comm: syz.1.1342 Not tainted syzkaller #0 [ 489.444761][T10432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 489.454924][T10432] Call Trace: [ 489.458300][T10432] [ 489.461313][T10432] dump_stack_lvl+0x18c/0x250 [ 489.466076][T10432] ? sctp_sendmsg+0x1519/0x27b0 [ 489.471044][T10432] ? ___sys_sendmsg+0x2a6/0x360 [ 489.475996][T10432] ? show_regs_print_info+0x20/0x20 [ 489.481308][T10432] ? load_image+0x420/0x420 [ 489.485913][T10432] should_fail_ex+0x394/0x4c0 [ 489.490689][T10432] should_failslab+0x9/0x20 [ 489.495254][T10432] slab_pre_alloc_hook+0x59/0x300 [ 489.500355][T10432] ? sctp_add_bind_addr+0x8c/0x360 [ 489.505536][T10432] __kmem_cache_alloc_node+0x53/0x260 [ 489.510981][T10432] ? sctp_add_bind_addr+0x8c/0x360 [ 489.516161][T10432] kmalloc_trace+0x2a/0xe0 [ 489.520656][T10432] sctp_add_bind_addr+0x8c/0x360 [ 489.525698][T10432] sctp_copy_local_addr_list+0x31b/0x4e0 [ 489.531411][T10432] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 489.537210][T10432] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 489.543363][T10432] ? sctp_v4_is_any+0x35/0x60 [ 489.548194][T10432] ? sctp_copy_one_addr+0x8c/0x350 [ 489.553385][T10432] sctp_bind_addr_copy+0xb3/0x3c0 [ 489.558570][T10432] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 489.564987][T10432] sctp_connect_new_asoc+0x2f9/0x6a0 [ 489.570349][T10432] ? __sctp_connect+0xd80/0xd80 [ 489.575295][T10432] ? __local_bh_enable_ip+0x13a/0x1c0 [ 489.580746][T10432] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 489.586363][T10432] ? security_sctp_bind_connect+0x89/0xb0 [ 489.592163][T10432] sctp_sendmsg+0x1519/0x27b0 [ 489.596948][T10432] ? sctp_getsockopt+0xb60/0xb60 [ 489.601969][T10432] ? aa_sk_perm+0x7bb/0x8e0 [ 489.606546][T10432] ? aa_af_perm+0x330/0x330 [ 489.611159][T10432] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 489.617658][T10432] ? sock_rps_record_flow+0x19/0x3f0 [ 489.623024][T10432] ? inet_sendmsg+0xce/0x2a0 [ 489.627698][T10432] ? inet_send_prepare+0x250/0x250 [ 489.632882][T10432] ____sys_sendmsg+0x61b/0x980 [ 489.637742][T10432] ? __asan_memset+0x22/0x40 [ 489.642412][T10432] ? __sys_sendmsg_sock+0x30/0x30 [ 489.647508][T10432] ? __import_iovec+0x5f2/0x850 [ 489.652450][T10432] ? import_iovec+0x73/0xa0 [ 489.657033][T10432] ___sys_sendmsg+0x2a6/0x360 [ 489.661822][T10432] ? __sys_sendmsg+0x2b0/0x2b0 [ 489.666682][T10432] ? __lock_acquire+0x7eb0/0x7eb0 [ 489.671811][T10432] __se_sys_sendmsg+0x1d0/0x2c0 [ 489.676739][T10432] ? __x64_sys_sendmsg+0x80/0x80 [ 489.681765][T10432] ? lockdep_hardirqs_on+0x98/0x150 [ 489.687091][T10432] do_syscall_64+0x55/0xb0 [ 489.691574][T10432] ? clear_bhb_loop+0x40/0x90 [ 489.696318][T10432] ? clear_bhb_loop+0x40/0x90 [ 489.701094][T10432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 489.707055][T10432] RIP: 0033:0x7ff18739f559 [ 489.711540][T10432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.731216][T10432] RSP: 002b:00007ff1882f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.739691][T10432] RAX: ffffffffffffffda RBX: 00007ff187625fa0 RCX: 00007ff18739f559 [ 489.747718][T10432] RDX: 00000000000003e8 RSI: 0000200000002f00 RDI: 0000000000000004 [ 489.755746][T10432] RBP: 00007ff1882f7090 R08: 0000000000000000 R09: 0000000000000000 [ 489.763767][T10432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 489.771781][T10432] R13: 00007ff187626038 R14: 00007ff187625fa0 R15: 00007fff622cd3d8 [ 489.779818][T10432] [ 490.171094][T10436] __nla_validate_parse: 1 callbacks suppressed [ 490.171114][T10436] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1343'. [ 490.837303][T10441] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1344'. [ 490.961625][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1347'. [ 491.068786][T10450] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1348'. [ 491.214718][T10452] netlink: 'syz.3.1349': attribute type 10 has an invalid length. [ 491.958291][T10464] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1354'. [ 491.997763][T10465] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1354'. [ 492.136517][T10471] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1356'. [ 492.160467][T10469] FAULT_INJECTION: forcing a failure. [ 492.160467][T10469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.180581][T10473] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1357'. [ 492.190123][T10469] CPU: 0 PID: 10469 Comm: syz.1.1355 Not tainted syzkaller #0 [ 492.197647][T10469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 492.207748][T10469] Call Trace: [ 492.211076][T10469] [ 492.214058][T10469] dump_stack_lvl+0x18c/0x250 [ 492.218798][T10469] ? show_regs_print_info+0x20/0x20 [ 492.224057][T10469] ? load_image+0x420/0x420 [ 492.228610][T10469] ? __might_fault+0xaa/0x120 [ 492.233332][T10469] ? __lock_acquire+0x7eb0/0x7eb0 [ 492.238423][T10469] should_fail_ex+0x394/0x4c0 [ 492.243153][T10469] _copy_from_user+0x2f/0xe0 [ 492.247798][T10469] do_tcp_setsockopt+0x58d/0x1c50 [ 492.252880][T10469] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 492.258307][T10469] ? aa_af_perm+0x330/0x330 [ 492.262883][T10469] ? __fget_files+0x28/0x460 [ 492.267532][T10469] ? aa_sock_opt_perm+0x74/0x100 [ 492.272524][T10469] ? sock_common_setsockopt+0x36/0xc0 [ 492.277956][T10469] ? tcp_setsockopt+0x3d/0xe0 [ 492.282688][T10469] ? tcp_enable_tx_delay+0x70/0x70 [ 492.287844][T10469] ? sock_common_recvmsg+0x190/0x190 [ 492.293181][T10469] do_sock_setsockopt+0x175/0x1a0 [ 492.298261][T10469] ? __fdget+0x180/0x210 [ 492.302563][T10469] __x64_sys_setsockopt+0x182/0x200 [ 492.307904][T10469] do_syscall_64+0x55/0xb0 [ 492.312378][T10469] ? clear_bhb_loop+0x40/0x90 [ 492.317110][T10469] ? clear_bhb_loop+0x40/0x90 [ 492.321850][T10469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.327810][T10469] RIP: 0033:0x7ff18739f559 [ 492.332280][T10469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.351939][T10469] RSP: 002b:00007ff1882d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 492.360477][T10469] RAX: ffffffffffffffda RBX: 00007ff187626090 RCX: 00007ff18739f559 [ 492.368482][T10469] RDX: 0000000000000017 RSI: 0000000000000006 RDI: 0000000000000004 [ 492.376497][T10469] RBP: 00007ff1882d6090 R08: 0000000000000004 R09: 0000000000000000 [ 492.384586][T10469] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 492.392595][T10469] R13: 00007ff187626128 R14: 00007ff187626090 R15: 00007fff622cd3d8 [ 492.400613][T10469] [ 492.470316][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1358'. [ 492.622593][T10483] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1361'. [ 494.259352][T10489] rxe_eth0 speed is unknown, defaulting to 1000 [ 496.507587][T10512] __nla_validate_parse: 1 callbacks suppressed [ 496.507614][T10512] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1367'. [ 497.046936][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1369'. [ 497.274089][T10520] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1370'. [ 498.352480][T10533] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1374'. [ 502.104052][T10539] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1376'. [ 502.491612][T10507] rxe_eth0 speed is unknown, defaulting to 1000 [ 502.900374][T10522] rxe_eth0 speed is unknown, defaulting to 1000 [ 503.296385][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 503.417208][T10548] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1380'. [ 504.378926][T10554] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1382'. [ 504.652097][T10556] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1383'. [ 506.845697][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.854052][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.687996][T10563] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1385'. [ 508.392768][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1388'. [ 508.551230][T10571] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1389'. [ 509.455640][T10580] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1392'. [ 509.483248][T10577] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1392'. [ 509.683477][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 509.693199][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 509.722598][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 509.737145][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 509.752461][ T5803] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 509.771125][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 509.779226][ T5803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 509.790380][ T5803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 509.802542][ T5793] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 509.828278][ T5793] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 509.841101][ T5793] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 509.848694][ T5793] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 509.899769][T10582] rxe_eth0 speed is unknown, defaulting to 1000 [ 510.041566][T10591] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1394'. [ 510.568693][T10586] rxe_eth0 speed is unknown, defaulting to 1000 [ 510.834217][T10582] chnl_net:caif_netlink_parms(): no params data found [ 510.981961][T10582] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.989157][T10582] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.007907][T10582] bridge_slave_0: entered allmulticast mode [ 511.016630][T10582] bridge_slave_0: entered promiscuous mode [ 511.026238][T10582] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.033654][T10582] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.041159][T10582] bridge_slave_1: entered allmulticast mode [ 511.048888][T10582] bridge_slave_1: entered promiscuous mode [ 511.093702][T10582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.108441][T10582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.205134][T10582] team0: Port device team_slave_0 added [ 511.227101][T10582] team0: Port device team_slave_1 added [ 511.280076][T10582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.291867][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.320394][T10582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.347309][T10582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.354886][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.382585][T10582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.881128][ T5793] Bluetooth: hci5: command tx timeout [ 511.881168][ T5790] Bluetooth: hci2: command tx timeout [ 512.750667][T10582] hsr_slave_0: entered promiscuous mode [ 512.827954][T10582] hsr_slave_1: entered promiscuous mode [ 512.860459][T10582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.891195][T10582] Cannot create hsr debugfs directory [ 513.303849][T10610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1396'. [ 513.525414][ T1074] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.580480][T10586] chnl_net:caif_netlink_parms(): no params data found [ 513.961097][ T5793] Bluetooth: hci2: command tx timeout [ 513.971102][ T5793] Bluetooth: hci5: command tx timeout [ 516.041234][ T5793] Bluetooth: hci5: command tx timeout [ 516.046729][ T5793] Bluetooth: hci2: command tx timeout [ 516.152642][ T1074] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.284414][T10620] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1398'. [ 516.472014][T10586] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.479495][T10586] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.487494][T10586] bridge_slave_0: entered allmulticast mode [ 516.497031][T10586] bridge_slave_0: entered promiscuous mode [ 516.523712][T10586] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.542913][T10586] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.551427][T10586] bridge_slave_1: entered allmulticast mode [ 516.559163][T10586] bridge_slave_1: entered promiscuous mode [ 516.673124][T10582] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 516.722975][T10582] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 516.778057][ T1074] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.946862][ T1074] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.007236][T10582] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 517.066197][T10586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.088528][T10582] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 517.172297][T10586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.288556][T10586] team0: Port device team_slave_0 added [ 517.365919][T10586] team0: Port device team_slave_1 added [ 517.581012][T10586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.619406][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.646372][T10586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.661060][T10586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.668813][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.695760][T10586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.001995][T10641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1403'. [ 518.063005][T10586] hsr_slave_0: entered promiscuous mode [ 518.083895][T10586] hsr_slave_1: entered promiscuous mode [ 518.114739][T10586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.121541][ T5790] Bluetooth: hci5: command tx timeout [ 518.127834][ T5793] Bluetooth: hci2: command tx timeout [ 518.140515][T10586] Cannot create hsr debugfs directory [ 518.350349][T10647] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1406'. [ 518.765050][T10650] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1407'. [ 519.072818][T10582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.104079][T10651] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1407'. [ 519.394307][T10659] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1408'. [ 519.497344][T10582] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.510101][T10659] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1408'. [ 519.673336][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.680610][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.812954][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.820205][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.054322][T10586] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 520.115246][ T1074] [ 520.117683][ T1074] ====================================================== [ 520.124744][ T1074] WARNING: possible circular locking dependency detected [ 520.131820][ T1074] syzkaller #0 Not tainted [ 520.136285][ T1074] ------------------------------------------------------ [ 520.143540][ T1074] kworker/u4:5/1074 is trying to acquire lock: [ 520.149738][ T1074] ffff88805dc8cdc0 (team->team_lock_key#4){+.+.}-{3:3}, at: team_device_event+0x295/0xc50 [ 520.159838][ T1074] [ 520.159838][ T1074] but task is already holding lock: [ 520.167280][ T1074] ffff888026a00768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 520.177736][ T1074] [ 520.177736][ T1074] which lock already depends on the new lock. [ 520.177736][ T1074] [ 520.188180][ T1074] [ 520.188180][ T1074] the existing dependency chain (in reverse order) is: [ 520.197248][ T1074] [ 520.197248][ T1074] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 520.205009][ T1074] __mutex_lock+0x135/0xce0 [ 520.210057][ T1074] ieee80211_open+0x144/0x200 [ 520.215285][ T1074] __dev_open+0x2cb/0x430 [ 520.220165][ T1074] dev_open+0xab/0x190 [ 520.224781][ T1074] team_add_slave+0x703/0x28a0 [ 520.230106][ T1074] do_setlink+0xda4/0x3f00 [ 520.235267][ T1074] rtnl_newlink+0x1848/0x2170 [ 520.240573][ T1074] rtnetlink_rcv_msg+0x843/0xf90 [ 520.246051][ T1074] netlink_rcv_skb+0x235/0x4c0 [ 520.251363][ T1074] netlink_unicast+0x856/0x9e0 [ 520.256676][ T1074] netlink_sendmsg+0x8d0/0xbf0 [ 520.261984][ T1074] ____sys_sendmsg+0x61b/0x980 [ 520.267293][ T1074] ___sys_sendmsg+0x2a6/0x360 [ 520.272520][ T1074] __se_sys_sendmsg+0x1d0/0x2c0 [ 520.278005][ T1074] do_syscall_64+0x55/0xb0 [ 520.283052][ T1074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 520.289496][ T1074] [ 520.289496][ T1074] -> #0 (team->team_lock_key#4){+.+.}-{3:3}: [ 520.297710][ T1074] __lock_acquire+0x3a07/0x7eb0 [ 520.303124][ T1074] lock_acquire+0x19e/0x420 [ 520.308175][ T1074] __mutex_lock+0x135/0xce0 [ 520.313226][ T1074] team_device_event+0x295/0xc50 [ 520.318701][ T1074] notifier_call_chain+0x18f/0x380 [ 520.324363][ T1074] unregister_netdevice_many_notify+0x1037/0x1910 [ 520.331328][ T1074] unregister_netdevice_queue+0x2e9/0x330 [ 520.337606][ T1074] _cfg80211_unregister_wdev+0x16c/0x5a0 [ 520.343789][ T1074] ieee80211_remove_interfaces+0x4b3/0x690 [ 520.350144][ T1074] ieee80211_unregister_hw+0x5d/0x2a0 [ 520.356064][ T1074] mac80211_hwsim_del_radio+0x289/0x480 [ 520.362162][ T1074] hwsim_exit_net+0x58d/0x650 [ 520.367412][ T1074] cleanup_net+0x6f7/0xb00 [ 520.372383][ T1074] process_scheduled_works+0xa60/0x1600 [ 520.378680][ T1074] worker_thread+0xa5e/0xfe0 [ 520.383906][ T1074] kthread+0x2fa/0x390 [ 520.388543][ T1074] ret_from_fork+0x48/0x80 [ 520.393504][ T1074] ret_from_fork_asm+0x11/0x20 [ 520.398844][ T1074] [ 520.398844][ T1074] other info that might help us debug this: [ 520.398844][ T1074] [ 520.409085][ T1074] Possible unsafe locking scenario: [ 520.409085][ T1074] [ 520.416547][ T1074] CPU0 CPU1 [ 520.421927][ T1074] ---- ---- [ 520.427303][ T1074] lock(&rdev->wiphy.mtx); [ 520.432004][ T1074] lock(team->team_lock_key#4); [ 520.439514][ T1074] lock(&rdev->wiphy.mtx); [ 520.446578][ T1074] lock(team->team_lock_key#4); [ 520.451558][ T1074] [ 520.451558][ T1074] *** DEADLOCK *** [ 520.451558][ T1074] [ 520.459914][ T1074] 5 locks held by kworker/u4:5/1074: [ 520.465257][ T1074] #0: ffff888140049138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 520.476218][ T1074] #1: ffffc900043b7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 520.487059][ T1074] #2: ffffffff8f3db1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x140/0xb00 [ 520.496508][ T1074] #3: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 520.506399][ T1074] #4: ffff888026a00768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 520.517315][ T1074] [ 520.517315][ T1074] stack backtrace: [ 520.523243][ T1074] CPU: 1 PID: 1074 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 520.530831][ T1074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 520.540926][ T1074] Workqueue: netns cleanup_net [ 520.545724][ T1074] Call Trace: [ 520.549027][ T1074] [ 520.551992][ T1074] dump_stack_lvl+0x18c/0x250 [ 520.556699][ T1074] ? load_image+0x420/0x420 [ 520.561229][ T1074] ? show_regs_print_info+0x20/0x20 [ 520.566461][ T1074] ? print_circular_bug+0x12b/0x1a0 [ 520.571699][ T1074] check_noncircular+0x2fc/0x400 [ 520.576765][ T1074] ? print_deadlock_bug+0x5d0/0x5d0 [ 520.581992][ T1074] ? lockdep_lock+0xf5/0x230 [ 520.586610][ T1074] ? _find_first_zero_bit+0xd6/0x100 [ 520.591926][ T1074] __lock_acquire+0x3a07/0x7eb0 [ 520.596814][ T1074] ? verify_lock_unused+0x140/0x140 [ 520.602040][ T1074] ? verify_lock_unused+0x140/0x140 [ 520.607265][ T1074] ? __up_read+0x2b8/0x6b0 [ 520.611706][ T1074] ? up_read+0x20/0x20 [ 520.615803][ T1074] lock_acquire+0x19e/0x420 [ 520.620335][ T1074] ? team_device_event+0x295/0xc50 [ 520.625473][ T1074] ? __might_sleep+0xe0/0xe0 [ 520.630112][ T1074] ? read_lock_is_recursive+0x20/0x20 [ 520.635532][ T1074] ? xsk_notifier+0x210/0x220 [ 520.640242][ T1074] __mutex_lock+0x135/0xce0 [ 520.644771][ T1074] ? team_device_event+0x295/0xc50 [ 520.649922][ T1074] ? __mutex_lock+0x30d/0xce0 [ 520.654728][ T1074] ? bond_netdev_event+0xeb/0xef0 [ 520.659781][ T1074] ? team_device_event+0x295/0xc50 [ 520.664915][ T1074] ? mutex_lock_nested+0x20/0x20 [ 520.669894][ T1074] team_device_event+0x295/0xc50 [ 520.674861][ T1074] notifier_call_chain+0x18f/0x380 [ 520.680028][ T1074] unregister_netdevice_many_notify+0x1037/0x1910 [ 520.686470][ T1074] ? unregister_netdevice_many+0x20/0x20 [ 520.692133][ T1074] ? kernfs_remove_by_name_ns+0x117/0x150 [ 520.697980][ T1074] ? __lock_acquire+0x7eb0/0x7eb0 [ 520.703046][ T1074] unregister_netdevice_queue+0x2e9/0x330 [ 520.708836][ T1074] ? list_netdevice+0x730/0x730 [ 520.713727][ T1074] ? kernfs_remove_by_name_ns+0x117/0x150 [ 520.719467][ T1074] _cfg80211_unregister_wdev+0x16c/0x5a0 [ 520.725134][ T1074] ieee80211_remove_interfaces+0x4b3/0x690 [ 520.730975][ T1074] ? ieee80211_do_stop+0x2030/0x2030 [ 520.736288][ T1074] ? rcu_is_watching+0x15/0xb0 [ 520.741093][ T1074] ieee80211_unregister_hw+0x5d/0x2a0 [ 520.746497][ T1074] mac80211_hwsim_del_radio+0x289/0x480 [ 520.752068][ T1074] ? rhashtable_remove_fast+0xc00/0xc00 [ 520.757666][ T1074] hwsim_exit_net+0x58d/0x650 [ 520.762373][ T1074] ? hwsim_init_net+0x90/0x90 [ 520.767075][ T1074] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 520.772920][ T1074] cleanup_net+0x6f7/0xb00 [ 520.777471][ T1074] ? ops_free_list+0x3b0/0x3b0 [ 520.782288][ T1074] ? _raw_spin_unlock_irq+0x23/0x50 [ 520.787523][ T1074] ? process_scheduled_works+0x975/0x1600 [ 520.793299][ T1074] ? process_scheduled_works+0x975/0x1600 [ 520.799067][ T1074] process_scheduled_works+0xa60/0x1600 [ 520.804663][ T1074] ? worker_attach_to_pool+0x370/0x370 [ 520.810245][ T1074] ? assign_work+0x3cc/0x5d0 [ 520.814880][ T1074] worker_thread+0xa5e/0xfe0 [ 520.819529][ T1074] kthread+0x2fa/0x390 [ 520.823629][ T1074] ? pr_cont_work+0x550/0x550 [ 520.828336][ T1074] ? kthread_blkcg+0xd0/0xd0 [ 520.832977][ T1074] ret_from_fork+0x48/0x80 [ 520.837450][ T1074] ? kthread_blkcg+0xd0/0xd0 [ 520.842068][ T1074] ret_from_fork_asm+0x11/0x20 [ 520.846873][ T1074] [ 520.890362][ T1074] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode [ 520.903510][ T1074] team0: Port device wlan1 removed [ 520.946256][T10586] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 520.956621][T10679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1412'. [ 520.992554][T10586] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 521.050796][T10586] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 521.310428][T10586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.352222][T10586] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.387769][ T1074] hsr_slave_0: left promiscuous mode [ 521.403408][ T1074] hsr_slave_1: left promiscuous mode [ 521.411332][ T1074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.419124][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.430331][ T1074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.438602][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.449587][ T1074] veth1_vlan: left promiscuous mode [ 521.610998][ T1074] macvlan0 (unregistering): left promiscuous mode [ 521.618446][ T1074] team0 (unregistering): Port device macvlan0 removed [ 521.810720][ T1074] team_slave_1 (unregistering): left promiscuous mode [ 521.833989][ T1074] team0 (unregistering): Port device team_slave_1 removed [ 521.864238][ T1074] team_slave_0 (unregistering): left promiscuous mode [ 521.873376][ T1074] team0 (unregistering): Port device team_slave_0 removed [ 521.908287][ T1074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.917587][ T1074] bond_slave_1 (unregistering): left promiscuous mode [ 522.160664][ T1074] bond0 (unregistering): (slave team0): Releasing backup interface [ 522.169218][ T1074] team0 (unregistering): left promiscuous mode [ 522.201790][ T1074] bond0 (unregistering): Released all slaves [ 522.262629][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.269805][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.296714][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.303894][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.320222][T10582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.668714][ T1074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.731753][ T1074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.767740][T10586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.825263][ T1074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.869191][ T1074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.915333][T10582] veth0_vlan: entered promiscuous mode [ 522.949389][T10582] veth1_vlan: entered promiscuous mode [ 523.080709][T10582] veth0_macvtap: entered promiscuous mode [ 523.097623][T10582] veth1_macvtap: entered promiscuous mode [ 523.121334][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.135291][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.146748][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.159530][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.170199][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.181325][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.192977][T10582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.228538][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.239567][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.254623][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.266788][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.277153][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.291109][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.316006][T10582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.366500][T10582] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.377205][T10582] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.388705][T10582] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.398552][T10582] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.509147][T10586] veth0_vlan: entered promiscuous mode [ 523.535851][T10582] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 523.547093][T10586] veth1_vlan: entered promiscuous mode [ 523.604374][T10683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.629305][T10683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.644971][T10582] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 523.708201][T10586] veth0_macvtap: entered promiscuous mode [ 523.717323][T10683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.740905][T10683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.753965][T10586] veth1_macvtap: entered promiscuous mode [ 523.810059][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.822472][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.832756][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.843517][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.854159][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.870549][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.881780][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.892773][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.918247][T10586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.950012][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.980316][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.990614][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.001782][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.012970][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.025011][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.035261][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.061065][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.076267][T10586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.118773][T10586] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.128756][T10586] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.143664][T10586] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.153620][T10586] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.255117][T10586] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 524.319400][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.340912][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.367711][T10586] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 524.511861][ T1074] hsr_slave_0: left promiscuous mode [ 524.517774][ T1074] hsr_slave_1: left promiscuous mode [ 524.524341][ T1074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.534233][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.543044][ T1074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.550477][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.560339][ T1074] veth1_vlan: left promiscuous mode [ 524.895156][ T1074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.054290][ T1074] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 525.084089][ T1074] bond0 (unregistering): Released all slaves [ 525.102156][T10683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.111611][T10683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50