last executing test programs: 9.135567316s ago: executing program 3 (id=3596): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xffffffff, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 6.78718342s ago: executing program 3 (id=3601): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r0}, 0x8) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001980)="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", 0x501}], 0x1}, 0x4044004) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0xbc}, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1650}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_config_ext={0x1000, 0x6}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0xa) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="c6", 0xffffff39}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x541b, &(0x7f0000000340)={'syzkaller1\x00', @broadcast}) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000060000000000000001010000950000000000000002562fd1187486a98a64dfc2996e1785b701d38e8cde8515275a0782da2178f99e0cca967d0788a48f8deb2f5322f610b1d519bfdf6c2c8a78055c2d9a87e792b1520cd343e821637662c365eaeef0807539aaf79cdbe3fb9f6d4ebebf5a8a18f5fcf777377dea4facc0aad845dfd408ccfb7bad8cc69cbf951bbe727a3c1d5344592e7ce0524b05bd361c2b3d8029ad608c5acfc3712c1683a68716bc30ace245f2656178adfd2572f07c742c"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41100, 0x10}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4a, &(0x7f0000000280)=r7, 0x4) 6.11860641s ago: executing program 2 (id=3607): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESHEX], &(0x7f0000003080)=""/167, 0x74, 0xfffffffffffffe44, 0x1, 0x69}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="bc0900"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="05000000040000210300000000"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000003000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r2], 0x48}, 0x40004) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0xffffffffffff8001}, 0x8000, 0x5, 0x43a1bd76, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000fb5600d0e3db0af643b0063924ce851b7d", @ANYRES32=r5, @ANYRESDEC=r3], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r9 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x8, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'bridge_slave_0\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) 5.805208025s ago: executing program 1 (id=3608): perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80114, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x4008, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0x100000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000006000000040000000100000500000080ffffffff0500000054853be7ae14b5448188"], 0x0, 0x36, 0x0, 0x1}, 0x28) r3 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xdb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) close(r1) openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8, @ANYBLOB="206c0902d0bafe96bcd876f05ed89c13b9ad75208042f60d4b996e2228f22cbb0376557c642137960001ecdd47bad74e6534c8a9b5feb50c4f6597dd14aa4345696e67de7601425b6a770b1f0b684d9f92e3d5591477b35f7f25ce79b4473075856837d2fa5ec799334260855c385c3a50864c28f841dc54b48c8bb412ed50ed2bb62f6d8a76ecaa3c0c7484c14a3df897691bf6bb79523bb8b89091d499d2be07d959ed0b3e9b13a9c9d11099aab6d8cfa556e4340926fa04c0cb68927a6b83dd09fcb2e4925ca184fe77acdda237ecd8c3cb9d0b770074e125e6c3ff547f13bd227ab06a8827123d4db57e074e1cc499d0", @ANYRES64, @ANYRES64], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000002850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r11, &(0x7f0000000200)=ANY=[@ANYRES8=r10, @ANYRES8=r12], 0x12) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r13}, 0x18) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002d00)=@generic={&(0x7f0000002cc0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002dc0)=@bpf_tracing={0x1a, 0x20, &(0x7f0000000640)=ANY=[@ANYBLOB="18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000040000850000000600000071a480001000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008510100008000000033208000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085100000ffffffff18290000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00'], &(0x7f0000000740)='syzkaller\x00', 0xa, 0x1000, &(0x7f0000001980)=""/4096, 0xc0e00, 0x68, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000002c80)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x224c8, 0xffffffffffffffff, 0x1, &(0x7f0000002d40)=[0xffffffffffffffff, r8, r11, r13, r14, 0x1], &(0x7f0000002d80)=[{0x5, 0x5, 0x8, 0x3}], 0x10, 0x8}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x3, 0xc, &(0x7f0000000700)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r15, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x15, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2c}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000005c0)='GPL\x00', 0x5, 0x77, &(0x7f0000000600)=""/119, 0x41000, 0x10, '\x00', 0x0, @fallback=0x29, r2, 0x8, &(0x7f0000000780)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, r15, r5, 0x3, &(0x7f00000007c0)=[r5, r5, r2], &(0x7f0000000800)=[{0x1, 0x4, 0x4, 0x8}, {0x2, 0x5, 0xe, 0xa}, {0x2, 0x5, 0x4, 0x3}], 0x10, 0xe81}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r7, r7}, 0xc) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x53, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r16, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x2d) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYRES64=r4], 0x12) 5.313534172s ago: executing program 1 (id=3610): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bf274aa22d103000000ffffffff000000000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000000)="fb1302346b81687dc6c1f216b2fdeb7231c106", 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000806"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'virt_wifi0\x00', @random="0600"}) 4.388508975s ago: executing program 0 (id=3612): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xffffffff, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 4.366967506s ago: executing program 3 (id=3613): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc", 0x579}], 0x1}, 0x9fc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500de"], 0x48) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x6000, 0xc8, 0x2, 0x1, 0x0, 0x5, 0xffff, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0xb, 0x804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xfffffffffffffe95}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea033c00fc08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x100004, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e12", 0x28}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYBLOB="3eca", @ANYRES8=r5], 0x9a) socket$kcm(0x10, 0x3, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000640), &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x27, &(0x7f00000006c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r7 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{r2}, &(0x7f0000000980), &(0x7f00000009c0)='%pS \x00'}, 0x20) 4.341834706s ago: executing program 2 (id=3614): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) close(0xffffffffffffffff) r0 = socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x2, 0x3}, 0x8000, 0x4b4, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/101, 0x65}], 0x1}, 0x100) 4.254521787s ago: executing program 1 (id=3615): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="1848000002000000000000000000000095000000000000003d7b000200000000ed600cf8dd1f5e6e171fcd61a34e1e3599a1b1a69d78cb3d5348"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = socket$kcm(0x2, 0x1, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000001100)=r2, 0x4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x400}) sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x400) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001240)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB='\n\x00\x00\x00( \x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="98b6ef60aec7d693295203888e582966d1efc48cc03e47e23eedd0f098e1926ae90f980a5e92b1bce6dfb9062099b3f97be6ab86853032d17ec5943dd99a4aabaa6608bd9b9cefdb6b44059de8ba84cf37f0cbc290941126f88df838d99ab913d6f4886f2699c80fc9f1263fe100b2f05e3c19b79f27cec1fa6dae746b1d717d90efdd956c9a363c348cf7429e4e7612da2b9a72ba8fa158bb27f61669c60f2fda90f10e2e165b68b9", @ANYRES64=0x0], 0x20) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x25, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000046c0)="ed570924a04076e7a05c9a1df4a4a8d74d272701a3ba496b677d44c4c2d3edff29d6fd12b7bc1c6f6468bd8eafdb74f63756a83a66caed8d0c2d56439cad4bbd4100e0b6df3d3c157810df6b90da489a81c7bc48c00c9995b65c79006b47cac6171712d78259c1d5a4335555c631923a26cb9786fdacabd665d94e7687cec1b23cf08b5de17045201e7fae08db9c47cfa19a8ffef7762daf9ca316925775225ed050a32ac01458e3865d17d1cd62841819316e98ca36c8651a8ef808cf1bc7188969bcd205f004c58159bc941c6399a88bc124c8a0a47dc4e3546429ec3c363375811e7653317492a4486debfcab21d7af4fa39528e49a6b2885edd369dc1c6ec7b8c2311c393c725856147b06ce109172c480cc4ea6e3c30198ac84e75318f2f6a4ddad661ea76b41c1b614d2353ecd1e005772fff23095f20d54046cd7c0f938fa1c9d5c27adda5ef552a1d6fc1f271da3816f7b82540b12923b2d38f906912a8031e24fe6c1f9e6692b074128a3cd03faafeed41e5615bdb86ce3aa1e000c18010e95934b1c8a1dd14922773e8951889f9be3291b6842845ac06a28e233a394a57e6ce572b8810e98f7a7256ca494de41fe6c72099d38a6f4964f32ca61880c695d757d3346a0dc8e7c92e555e5c12b8cb9be8d9289fee2f17ef988d3e7acc8eeae5e7cde98153c409c48504eccd618b2676930711159b631c76b69c792a44a3696979495f06ddaffb7f60af1af0ab2df1ff3653a902201ffa93f77202b4637abfe654ab42abfadac65a09c45afde7aaec8623f9424885ec7c5fd4adf111192a5d36bb73e79cdc2a6a25e3a29d665beae71db419984f05bce4b0576d44e0c7f26c722aff26af467acaf2fd2e0d153b95281d59c985229772a2deeda2e27cda3010c66abf08dbb7d7b461bbe1f143762c03b755f81d829b77314e6cfc2fcca5269567b206530e15263c55045707db56b51ed3f797e086fde879863eff033bcacf01880c634df426cfb495c81c4048754a3f05b212909ac7a2a050461a60821b2b7e99a2ed2b2a87e90fa5995cfa3884758eca6d4aa8e35b952d3f4be73ad9c27bcdd287e895597b6ce0294ceede0abd6b8cf60cd5dfb0afcd2088611d10a39736eb224e369ff117bbd94c5a311c9b7075b739f0ac7780d1412d552dcd278245f98251b93b326c8d1ccb3c2a96bb7c161363bfc4f52aaa252af790c3a57979d1d81df8e147e0bdd46704a51d48765c1d1fff316c892b66b8d13319783ead3c7f89600e8f4440393eb2e3fff2319fc45cefb740c59db8680c9d17fb2f37f194d317e5e989d0c5c361f0915ebe2efea196dd3d8d2fd747043738d91fe4a4c02a7369c333c253a78eed8098fda8b92bd37b65bdfec9f1c499cfbd8dff47a81d01d88633984a63eb4277dc34d7c42eaf891c14d9a12b6971436023ffb223cc973382ec5c4d1188d2b9ccdb1faf96062088bdd25284f311bc2fb8b4d1e355e2f76ec15342d4d9413fed8987965eddcf69335c62d2d3fb66d68e203f9b71c998abd92a5b5b9f07da2ddb44eb05b25a1a8a991d7c602558ca40cddfa98371c893b1002f7f8cdcf913fc085a20aa584fee9614a7d3d7444c8a4a00cdcefb0c172ffcd9c6cd0653ecaf3526318f3b3cddc32c84d76c0f93f7d18cc625bb02b89df352a8eeba1662b4bd2a948266b2fb9dccae4d8fca25a9f3121fcb8056a0f8cbf31fc694035f588c46769d8ef23bd63de1c9fbbfab871d0d47764ef1805f86a09b35f6038c3c28bdd2dd8c61742f49e138fb833dec4d899057f676b9b91aa1d3f3eb54afa17c9ba78e678679ac88f4192ba7edf891b043d5020fd09246615e9e9941fb47cf6a6ee83115e2ef7d5aa9ffa63b7cb90068f4f769dbf78039e7dc794e41845ecafc75c126816e673fd534cec3c1304ea915b8e9a0cd8970722a419994e44d04db4ee81dfe23cc3abfd2c060a6ae7e6bac7589a2c8d4abc58aa90b6560823d5b82f6158adc8b61bca70b554d23cb6d5f7e06f6f", 0x594}], 0x1}, 0x400c000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001380)={0x4, 0x80, 0x85, 0x3, 0x1, 0x0, 0x0, 0x80000000000062af, 0x62f02, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x110, 0xfffffffffffffff4, 0x4b2, 0x5, 0x1002, 0x5, 0x88cc, 0x0, 0x0, 0x0, 0x8000000000000001}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000e80)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)='%pK \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000000000008018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186200000300000000000000f8ff0000bf91000000000000b7020000000000000000009500000000000000"], &(0x7f0000000e00)='GPL\x00', 0x2d, 0x24, &(0x7f0000000e40)=""/36, 0x41000, 0x25, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ec0)={0x5, 0x5, 0x7, 0xe1c}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001040)=[0xffffffffffffffff, r10, r5, 0xffffffffffffffff], &(0x7f0000001080)=[{0x0, 0x5, 0x4, 0x6}, {0x2, 0x4, 0x9, 0xa}, {0x5, 0x3, 0x9, 0xb}], 0x10, 0x8}, 0x94) 4.154804829s ago: executing program 3 (id=3616): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$kcm(r3, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e00)="e6aa32d992d8a2", 0x7}], 0x1}, 0x10) (fail_nth: 3) 4.10203777s ago: executing program 0 (id=3617): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc040ca1800004000000000000000010003a0e0037000f001e0bbc82a91401eb", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xd) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x80000002, r0}, 0x38) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/22, 0x16}, {&(0x7f0000000140)=""/128, 0x80}, {&(0x7f0000000240)=""/152, 0x98}], 0x3, &(0x7f0000000380)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x10142) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x1782, r0}, 0x38) 4.010738641s ago: executing program 2 (id=3618): r0 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0x2, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x108c0, 0xa6, 0x2, 0x9, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xb}, 0x8008, 0x5, 0x2, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x24, &(0x7f0000000200), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x16, &(0x7f0000000040), 0xf7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_type(r2, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r5, 0x0, 0x0) close(0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="4000000000000000000000060700000001441cca1164010102000003ef7f00000100009f029344a5ee0a01010200000000ac141427ffffffff"], 0x40}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x890b, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e002309000000a6000003000800", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 3.737719275s ago: executing program 0 (id=3619): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x579}], 0x1}, 0x9fc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x6000, 0xc8, 0x2, 0x1, 0x0, 0x5, 0xffff, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close(0x3) (async) close(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\x00') recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xfffffffffffffe95}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea033c00fc08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 3.629246327s ago: executing program 0 (id=3620): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0xfa, 0x0, 0x1, 0x0, 0x9, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x4, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000580)='GPL\x00', 0xd, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x58586df}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0xff) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d2", 0x9}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3b, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) socket$kcm(0xa, 0x2, 0x3a) r6 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0xe0, 0x10001, @local, 0x48, 0x7fffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='D', 0x1}], 0x1}, 0x30008041) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') syz_clone(0xad10ea00, 0x0, 0x0, 0x0, 0x0, 0x0) 3.542591808s ago: executing program 2 (id=3621): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r0}, 0x8) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001980)="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", 0x501}], 0x1}, 0x4044004) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0xbc}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1650}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_config_ext={0x1000, 0x6}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0xa) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="c6", 0xffffff39}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x541b, &(0x7f0000000340)={'syzkaller1\x00', @broadcast}) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000060000000000000001010000950000000000000002562fd1187486a98a64dfc2996e1785b701d38e8cde8515275a0782da2178f99e0cca967d0788a48f8deb2f5322f610b1d519bfdf6c2c8a78055c2d9a87e792b1520cd343e821637662c365eaeef0807539aaf79cdbe3fb9f6d4ebebf5a8a18f5fcf777377dea4facc0aad845dfd408ccfb7bad8cc69cbf951bbe727a3c1d5344592e7ce0524b05bd361c2b3d8029ad608c5acfc3712c1683a68716bc30ace245f2656178adfd2572f07c742c"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41100, 0x10}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4a, &(0x7f0000000280)=r6, 0x4) 3.523260628s ago: executing program 1 (id=3622): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESHEX], &(0x7f0000003080)=""/167, 0x74, 0xfffffffffffffe44, 0x1, 0x69}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="bc0900"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="05000000040000210300000000"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000003000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r2], 0x48}, 0x40004) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0xffffffffffff8001}, 0x8000, 0x5, 0x43a1bd76, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000fb5600d0e3db0af643b0063924ce851b7d", @ANYRES32=r5, @ANYRESDEC=r3], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r9 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x8, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'bridge_slave_0\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) 302.776426ms ago: executing program 3 (id=3623): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x5, 0x0, 0xff, 0x0, 0xff7fffffffffffff, 0x8c0c0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x5, 0x1, 0x0, 0xff, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES32=r2], 0x9a) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r5 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000003c0), 0x4) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0x7}], 0x3}, 0x8001) recvmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r4) 301.068616ms ago: executing program 0 (id=3631): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0xfc, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x5, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x40086602, 0x110e22fff2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) 286.918766ms ago: executing program 2 (id=3624): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x2}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0xa, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 249.561156ms ago: executing program 1 (id=3625): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000f00), 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa9, &(0x7f0000000680)=""/169, 0x0, 0x0, '\x00', 0x0, @fallback=0x98865e7103ed1641, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) sendmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040004}, 0x4040) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2980, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0x10c7df}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r5, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', r7, @fallback=0x6, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000400"/28], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r9}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002880)={0x0, 0x7, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x32, 0x1000, &(0x7f00000017c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000027c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000002800)=[{0x0, 0x5, 0xc, 0x6}, {0x2, 0x4, 0x9, 0x9}, {0x3, 0x1, 0xa, 0xd}, {0x5, 0x2, 0x3, 0xa}, {0x3, 0x5, 0xe, 0x6}, {0x0, 0x5, 0x1, 0x8}, {0x1, 0x2, 0xa, 0x6}], 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000002940)=r11, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) 120.376468ms ago: executing program 3 (id=3626): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xffffffff, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 2.79585ms ago: executing program 2 (id=3627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc040ca1800004000000000000000010003a0e0037000f001e0bbc82a91401eb", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xd) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x80000002, r0}, 0x38) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/22, 0x16}, {&(0x7f0000000140)=""/128, 0x80}, {&(0x7f0000000240)=""/152, 0x98}], 0x3, &(0x7f0000000380)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x10142) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x1782, r0}, 0x38) 468.68µs ago: executing program 0 (id=3628): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0xfeff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 0s ago: executing program 1 (id=3629): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x3f}, 0x94) socket$kcm(0xa, 0x3, 0x3a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = socket$kcm(0x2, 0x1, 0x84) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(r4, 0x84, 0xd, &(0x7f0000000000), 0x4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113f000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x3, 0x3, 0x0, 0xb, 0x80}]}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') kernel console output (not intermixed with test programs): ec_from_user+0x87/0x240 [ 769.841033][T14622] __kmem_cache_alloc_node+0x53/0x250 [ 769.846457][T14622] ? iovec_from_user+0x87/0x240 [ 769.851347][T14622] __kmalloc+0xa7/0x240 [ 769.855566][T14622] iovec_from_user+0x87/0x240 [ 769.860279][T14622] __import_iovec+0x13d/0x850 [ 769.865005][T14622] import_iovec+0x73/0xa0 [ 769.869376][T14622] ___sys_sendmsg+0x256/0x360 [ 769.874111][T14622] ? __sys_sendmsg+0x2b0/0x2b0 [ 769.878936][T14622] ? ktime_get+0x7f/0x280 [ 769.883301][T14622] ? trace_call_bpf+0xc3/0x6c0 [ 769.888131][T14622] __se_sys_sendmsg+0x1d0/0x2c0 [ 769.893030][T14622] ? perf_trace_preemptirq_template+0x269/0x330 [ 769.899326][T14622] ? __x64_sys_sendmsg+0x80/0x80 [ 769.904326][T14622] ? lockdep_hardirqs_on+0x98/0x150 [ 769.909573][T14622] do_syscall_64+0x55/0xb0 [ 769.914026][T14622] ? clear_bhb_loop+0x40/0x90 [ 769.918831][T14622] ? clear_bhb_loop+0x40/0x90 [ 769.923551][T14622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 769.929497][T14622] RIP: 0033:0x7fdb4759ce59 [ 769.933943][T14622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.953568][T14622] RSP: 002b:00007fdb4842a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 769.962006][T14622] RAX: ffffffffffffffda RBX: 00007fdb47815fa0 RCX: 00007fdb4759ce59 [ 769.970103][T14622] RDX: 00000000000012cd RSI: 0000200000000040 RDI: 000000000000000d [ 769.978097][T14622] RBP: 00007fdb4842a090 R08: 0000000000000000 R09: 0000000000000000 [ 769.986091][T14622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.994079][T14622] R13: 00007fdb47816038 R14: 00007fdb47815fa0 R15: 00007ffcd0734f88 [ 770.002091][T14622] [ 770.484290][T14641] validate_nla: 1 callbacks suppressed [ 770.484329][T14641] netlink: 'syz.2.2791': attribute type 3 has an invalid length. [ 770.515406][T14641] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2791'. [ 770.646053][T14646] FAULT_INJECTION: forcing a failure. [ 770.646053][T14646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.688827][T14646] CPU: 0 PID: 14646 Comm: syz.1.2793 Not tainted syzkaller #0 [ 770.696436][T14646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 770.706523][T14646] Call Trace: [ 770.709834][T14646] [ 770.712794][T14646] dump_stack_lvl+0x18c/0x250 [ 770.717522][T14646] ? show_regs_print_info+0x20/0x20 [ 770.722757][T14646] ? load_image+0x420/0x420 [ 770.727292][T14646] ? __lock_acquire+0x7d80/0x7d80 [ 770.732361][T14646] should_fail_ex+0x394/0x4c0 [ 770.737069][T14646] _copy_from_user+0x2f/0xe0 [ 770.741682][T14646] __copy_msghdr+0x388/0x560 [ 770.746302][T14646] ___sys_sendmsg+0x214/0x360 [ 770.751014][T14646] ? get_pid_task+0x20/0x1e0 [ 770.755641][T14646] ? __sys_sendmsg+0x2b0/0x2b0 [ 770.760444][T14646] ? __lock_acquire+0x7d80/0x7d80 [ 770.765499][T14646] __se_sys_sendmsg+0x1d0/0x2c0 [ 770.770366][T14646] ? __x64_sys_sendmsg+0x80/0x80 [ 770.775328][T14646] ? trace_sys_enter+0x1f/0x80 [ 770.780106][T14646] do_syscall_64+0x55/0xb0 [ 770.784545][T14646] ? clear_bhb_loop+0x40/0x90 [ 770.789245][T14646] ? clear_bhb_loop+0x40/0x90 [ 770.793935][T14646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 770.799859][T14646] RIP: 0033:0x7fdd5a59ce59 [ 770.804296][T14646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.823931][T14646] RSP: 002b:00007fdd587f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.832362][T14646] RAX: ffffffffffffffda RBX: 00007fdd5a815fa0 RCX: 00007fdd5a59ce59 [ 770.840356][T14646] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 770.848335][T14646] RBP: 00007fdd587f6090 R08: 0000000000000000 R09: 0000000000000000 [ 770.856343][T14646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.864325][T14646] R13: 00007fdd5a816038 R14: 00007fdd5a815fa0 R15: 00007ffc86937288 [ 770.872340][T14646] [ 770.917452][T14649] netlink: 'syz.2.2794': attribute type 29 has an invalid length. [ 770.930140][T14649] netlink: 'syz.2.2794': attribute type 29 has an invalid length. [ 773.273703][T14679] netlink: 'syz.3.2802': attribute type 3 has an invalid length. [ 773.285446][T14679] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2802'. [ 776.424565][T14709] netlink: 'syz.0.2809': attribute type 15 has an invalid length. [ 776.432624][T14709] netlink: 'syz.0.2809': attribute type 7 has an invalid length. [ 776.447127][T14709] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2809'. [ 778.016757][T14717] netlink: 'syz.1.2813': attribute type 3 has an invalid length. [ 778.048019][T14717] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2813'. [ 778.116692][T14717] netlink: 'syz.1.2813': attribute type 10 has an invalid length. [ 778.485351][T14731] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2817'. [ 778.554600][T14731] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.598547][T14748] netlink: 'syz.1.2824': attribute type 2 has an invalid length. [ 781.624793][T14748] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2824'. [ 781.707955][T14757] netlink: 'syz.3.2826': attribute type 3 has an invalid length. [ 781.743997][T14757] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2826'. [ 781.795166][T14757] netlink: 'syz.3.2826': attribute type 10 has an invalid length. [ 783.028439][T14789] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2838'. [ 783.377645][T14799] netlink: 'syz.1.2841': attribute type 3 has an invalid length. [ 783.403825][T14799] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2841'. [ 783.447380][T14799] netlink: 'syz.1.2841': attribute type 10 has an invalid length. [ 785.112530][T14813] FAULT_INJECTION: forcing a failure. [ 785.112530][T14813] name failslab, interval 1, probability 0, space 0, times 0 [ 785.135125][T14813] CPU: 1 PID: 14813 Comm: syz.1.2847 Not tainted syzkaller #0 [ 785.142644][T14813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 785.152724][T14813] Call Trace: [ 785.156037][T14813] [ 785.159041][T14813] dump_stack_lvl+0x18c/0x250 [ 785.163787][T14813] ? show_regs_print_info+0x20/0x20 [ 785.169030][T14813] ? load_image+0x420/0x420 [ 785.173563][T14813] ? __might_sleep+0xe0/0xe0 [ 785.178184][T14813] ? __lock_acquire+0x7d80/0x7d80 [ 785.183230][T14813] should_fail_ex+0x394/0x4c0 [ 785.187962][T14813] should_failslab+0x9/0x20 [ 785.192531][T14813] slab_pre_alloc_hook+0x59/0x300 [ 785.197581][T14813] ? kobject_set_name_vargs+0x61/0x110 [ 785.203137][T14813] ? kobject_set_name_vargs+0x61/0x110 [ 785.208620][T14813] __kmem_cache_alloc_node+0x53/0x250 [ 785.214029][T14813] ? kobject_set_name_vargs+0x61/0x110 [ 785.219522][T14813] __kmalloc_node_track_caller+0xa4/0x230 [ 785.225285][T14813] kstrdup+0x3b/0x80 [ 785.229226][T14813] kobject_set_name_vargs+0x61/0x110 [ 785.234538][T14813] dev_set_name+0xe3/0x140 [ 785.238975][T14813] ? get_device+0x30/0x30 [ 785.243353][T14813] ? __init_waitqueue_head+0xa8/0x140 [ 785.248848][T14813] ? device_initialize+0x26a/0x460 [ 785.253992][T14813] netdev_register_kobject+0xb3/0x320 [ 785.259396][T14813] register_netdevice+0x12aa/0x1ba0 [ 785.264620][T14813] ? kvmalloc_node+0x70/0x180 [ 785.269346][T14813] ? netif_stacked_transfer_operstate+0x210/0x210 [ 785.275792][T14813] ? __asan_memset+0x22/0x40 [ 785.280424][T14813] ? alloc_netdev_mqs+0xba3/0x1040 [ 785.285555][T14813] ? __asan_memcpy+0x40/0x70 [ 785.290170][T14813] ? ip6gre_tunnel_locate+0x21f/0x5d0 [ 785.295708][T14813] ip6gre_tunnel_locate+0x2d1/0x5d0 [ 785.300937][T14813] ? ip6gre_tnl_change+0x910/0x910 [ 785.306077][T14813] ? ip6gre_tnl_parm_from_user+0x102/0x520 [ 785.311917][T14813] ? ip6gre_tunnel_siocdevprivate+0x51f/0x740 [ 785.318022][T14813] ip6gre_tunnel_siocdevprivate+0x54c/0x740 [ 785.323944][T14813] ? ip6gre_tunnel_init+0x150/0x150 [ 785.329158][T14813] ? __mutex_lock+0x30d/0xc80 [ 785.333881][T14813] ? dev_ioctl+0x83c/0x1140 [ 785.338430][T14813] ? dev_ifsioc+0x957/0xc40 [ 785.342955][T14813] dev_ioctl+0x84c/0x1140 [ 785.347309][T14813] sock_ioctl+0x74c/0x7e0 [ 785.351661][T14813] ? sock_poll+0x3e0/0x3e0 [ 785.356111][T14813] ? bpf_lsm_file_ioctl+0x9/0x10 [ 785.361093][T14813] ? security_file_ioctl+0x80/0xa0 [ 785.366225][T14813] ? sock_poll+0x3e0/0x3e0 [ 785.370664][T14813] __se_sys_ioctl+0xfd/0x170 [ 785.375280][T14813] do_syscall_64+0x55/0xb0 [ 785.379713][T14813] ? clear_bhb_loop+0x40/0x90 [ 785.384402][T14813] ? clear_bhb_loop+0x40/0x90 [ 785.389109][T14813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.395031][T14813] RIP: 0033:0x7fdd5a59ce59 [ 785.399459][T14813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.419078][T14813] RSP: 002b:00007fdd587f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 785.427504][T14813] RAX: ffffffffffffffda RBX: 00007fdd5a815fa0 RCX: 00007fdd5a59ce59 [ 785.435498][T14813] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000c [ 785.443497][T14813] RBP: 00007fdd587f6090 R08: 0000000000000000 R09: 0000000000000000 [ 785.451518][T14813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 785.459502][T14813] R13: 00007fdd5a816038 R14: 00007fdd5a815fa0 R15: 00007ffc86937288 [ 785.467524][T14813] [ 785.477003][T12714] Bluetooth: hci3: command 0x0406 tx timeout [ 785.798193][T14826] netlink: 'syz.2.2851': attribute type 3 has an invalid length. [ 785.856598][T14826] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2851'. [ 785.867623][T14827] netlink: 'syz.2.2851': attribute type 10 has an invalid length. [ 786.488568][T14842] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2857'. [ 789.421660][T14851] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2859'. [ 789.492825][T14851] netlink: 'syz.0.2859': attribute type 30 has an invalid length. [ 790.127905][T14866] netlink: 'syz.2.2864': attribute type 3 has an invalid length. [ 790.143525][T14866] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2864'. [ 790.179665][T14866] netlink: 'syz.2.2864': attribute type 10 has an invalid length. [ 790.931750][T14885] FAULT_INJECTION: forcing a failure. [ 790.931750][T14885] name failslab, interval 1, probability 0, space 0, times 0 [ 790.945071][T14885] CPU: 0 PID: 14885 Comm: syz.3.2870 Not tainted syzkaller #0 [ 790.952595][T14885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 790.962680][T14885] Call Trace: [ 790.965985][T14885] [ 790.968950][T14885] dump_stack_lvl+0x18c/0x250 [ 790.973671][T14885] ? show_regs_print_info+0x20/0x20 [ 790.978900][T14885] ? load_image+0x420/0x420 [ 790.983438][T14885] ? __might_sleep+0xe0/0xe0 [ 790.988067][T14885] ? __lock_acquire+0x7d80/0x7d80 [ 790.993128][T14885] should_fail_ex+0x394/0x4c0 [ 790.997842][T14885] should_failslab+0x9/0x20 [ 791.002377][T14885] slab_pre_alloc_hook+0x59/0x300 [ 791.007517][T14885] ? tomoyo_encode+0x2ad/0x570 [ 791.012307][T14885] ? tomoyo_encode+0x2ad/0x570 [ 791.017093][T14885] __kmem_cache_alloc_node+0x53/0x250 [ 791.022503][T14885] ? tomoyo_encode+0x2ad/0x570 [ 791.027294][T14885] __kmalloc+0xa7/0x240 [ 791.031495][T14885] tomoyo_encode+0x2ad/0x570 [ 791.036128][T14885] tomoyo_realpath_from_path+0x57c/0x5c0 [ 791.041789][T14885] ? tomoyo_domain+0xd6/0x120 [ 791.046510][T14885] tomoyo_path_number_perm+0x248/0x5e0 [ 791.052015][T14885] ? tomoyo_path_number_perm+0x217/0x5e0 [ 791.057684][T14885] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 791.063167][T14885] ? ksys_write+0x1d2/0x260 [ 791.067741][T14885] ? __fget_files+0x28/0x460 [ 791.072375][T14885] security_file_ioctl+0x70/0xa0 [ 791.077333][T14885] __se_sys_ioctl+0x48/0x170 [ 791.081979][T14885] do_syscall_64+0x55/0xb0 [ 791.086424][T14885] ? clear_bhb_loop+0x40/0x90 [ 791.091127][T14885] ? clear_bhb_loop+0x40/0x90 [ 791.095840][T14885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.101776][T14885] RIP: 0033:0x7f71abb9ce59 [ 791.106219][T14885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.125855][T14885] RSP: 002b:00007f71aca11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 791.134305][T14885] RAX: ffffffffffffffda RBX: 00007f71abe15fa0 RCX: 00007f71abb9ce59 [ 791.142297][T14885] RDX: 0000200000000100 RSI: 000000000000894b RDI: 000000000000000c [ 791.150298][T14885] RBP: 00007f71aca11090 R08: 0000000000000000 R09: 0000000000000000 [ 791.158293][T14885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.166292][T14885] R13: 00007f71abe16038 R14: 00007f71abe15fa0 R15: 00007ffe761c8068 [ 791.174322][T14885] [ 791.207713][T14885] ERROR: Out of memory at tomoyo_realpath_from_path. [ 794.162805][T14893] FAULT_INJECTION: forcing a failure. [ 794.162805][T14893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.194860][T14893] CPU: 1 PID: 14893 Comm: syz.3.2874 Not tainted syzkaller #0 [ 794.202401][T14893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 794.212488][T14893] Call Trace: [ 794.215809][T14893] [ 794.218773][T14893] dump_stack_lvl+0x18c/0x250 [ 794.223500][T14893] ? show_regs_print_info+0x20/0x20 [ 794.228770][T14893] ? load_image+0x420/0x420 [ 794.233339][T14893] ? __might_fault+0xaa/0x120 [ 794.238057][T14893] ? __lock_acquire+0x7d80/0x7d80 [ 794.243121][T14893] should_fail_ex+0x394/0x4c0 [ 794.247875][T14893] _copy_from_user+0x2f/0xe0 [ 794.252501][T14893] ___sys_sendmsg+0x1c7/0x360 [ 794.257224][T14893] ? __sys_sendmsg+0x2b0/0x2b0 [ 794.262061][T14893] ? trace_call_bpf+0xc3/0x6c0 [ 794.266905][T14893] __se_sys_sendmsg+0x1d0/0x2c0 [ 794.271805][T14893] ? perf_trace_preemptirq_template+0x269/0x330 [ 794.278112][T14893] ? __x64_sys_sendmsg+0x80/0x80 [ 794.283107][T14893] ? lockdep_hardirqs_on+0x98/0x150 [ 794.288352][T14893] do_syscall_64+0x55/0xb0 [ 794.292809][T14893] ? clear_bhb_loop+0x40/0x90 [ 794.297538][T14893] ? clear_bhb_loop+0x40/0x90 [ 794.302254][T14893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 794.308191][T14893] RIP: 0033:0x7f71abb9ce59 [ 794.312677][T14893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.332315][T14893] RSP: 002b:00007f71aca11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.340755][T14893] RAX: ffffffffffffffda RBX: 00007f71abe15fa0 RCX: 00007f71abb9ce59 [ 794.348760][T14893] RDX: 0000000000040000 RSI: 0000200000000600 RDI: 000000000000000c [ 794.356747][T14893] RBP: 00007f71aca11090 R08: 0000000000000000 R09: 0000000000000000 [ 794.364728][T14893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.372735][T14893] R13: 00007f71abe16038 R14: 00007f71abe15fa0 R15: 00007ffe761c8068 [ 794.380766][T14893] [ 794.687784][T14897] netlink: 'syz.3.2877': attribute type 3 has an invalid length. [ 794.717643][T14897] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2877'. [ 795.464251][T12714] Bluetooth: hci4: command 0x0406 tx timeout [ 795.783424][T14901] netlink: 'syz.3.2877': attribute type 10 has an invalid length. [ 796.005340][T14910] bridge_slave_1: left allmulticast mode [ 796.012181][T14910] bridge_slave_1: left promiscuous mode [ 796.025922][T14910] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.153117][T14910] bridge_slave_0: left allmulticast mode [ 796.169836][T14910] bridge_slave_0: left promiscuous mode [ 796.195560][T14910] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.845163][T14925] netlink: 'syz.3.2885': attribute type 2 has an invalid length. [ 796.863666][T14925] netlink: 'syz.3.2885': attribute type 8 has an invalid length. [ 796.871686][T14925] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2885'. [ 797.100282][T14938] netlink: 'syz.0.2889': attribute type 3 has an invalid length. [ 797.118879][T14938] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2889'. [ 797.152789][T14938] netlink: 'syz.0.2889': attribute type 10 has an invalid length. [ 800.213129][T14952] netlink: 'syz.2.2894': attribute type 10 has an invalid length. [ 800.245777][T14952] bond0: (slave netdevsim0): Releasing backup interface [ 800.284699][T14952] team0: Port device netdevsim0 added [ 800.352506][T14953] netlink: 'syz.1.2895': attribute type 3 has an invalid length. [ 800.373653][T14953] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2895'. [ 800.421536][T14951] delete_channel: no stack [ 800.500048][T14962] netlink: 'syz.2.2898': attribute type 3 has an invalid length. [ 800.519911][T14962] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2898'. [ 800.547214][T14962] netlink: 'syz.2.2898': attribute type 10 has an invalid length. [ 800.645705][T14962] team0: Port device netdevsim0 removed [ 800.658665][T14962] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 800.788281][T14969] netlink: 'syz.1.2908': attribute type 10 has an invalid length. [ 800.855667][T14969] team0: Port device netdevsim0 added [ 800.891899][T14969] syz.1.2908 (14969) used greatest stack depth: 17688 bytes left [ 801.032917][T14974] netlink: 'syz.0.2901': attribute type 10 has an invalid length. [ 804.227300][T14987] syz.2.2906[14987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 804.227519][T14987] syz.2.2906[14987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 804.381608][T14992] netlink: 'syz.3.2909': attribute type 3 has an invalid length. [ 804.414463][T14992] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2909'. [ 804.441676][T14993] netlink: 'syz.3.2909': attribute type 10 has an invalid length. [ 804.768648][T14999] netlink: 'syz.3.2911': attribute type 3 has an invalid length. [ 804.793559][T14999] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2911'. [ 804.824307][T14998] delete_channel: no stack [ 805.268161][T15012] netlink: 'syz.3.2915': attribute type 10 has an invalid length. [ 808.327363][T15020] netlink: 'syz.3.2918': attribute type 11 has an invalid length. [ 808.363942][T15020] FAULT_INJECTION: forcing a failure. [ 808.363942][T15020] name failslab, interval 1, probability 0, space 0, times 0 [ 808.394197][T15020] CPU: 1 PID: 15020 Comm: syz.3.2918 Not tainted syzkaller #0 [ 808.401759][T15020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 808.412052][T15020] Call Trace: [ 808.415409][T15020] [ 808.418396][T15020] dump_stack_lvl+0x18c/0x250 [ 808.423176][T15020] ? show_regs_print_info+0x20/0x20 [ 808.428454][T15020] ? load_image+0x420/0x420 [ 808.433056][T15020] ? __might_sleep+0xe0/0xe0 [ 808.437729][T15020] ? __lock_acquire+0x7d80/0x7d80 [ 808.442844][T15020] should_fail_ex+0x394/0x4c0 [ 808.447624][T15020] should_failslab+0x9/0x20 [ 808.452194][T15020] slab_pre_alloc_hook+0x59/0x300 [ 808.457310][T15020] ? fib_trie_table+0x33/0x1c0 [ 808.462150][T15020] ? fib_trie_table+0x33/0x1c0 [ 808.466979][T15020] __kmem_cache_alloc_node+0x53/0x250 [ 808.472460][T15020] ? fib_trie_table+0x33/0x1c0 [ 808.477307][T15020] __kmalloc+0xa7/0x240 [ 808.481563][T15020] fib_trie_table+0x33/0x1c0 [ 808.486244][T15020] fib_new_table+0x135/0x2d0 [ 808.490935][T15020] inet_rtm_newroute+0x133/0x240 [ 808.495969][T15020] ? rcu_read_unlock+0xa0/0xa0 [ 808.500942][T15020] ? rcu_read_unlock+0xa0/0xa0 [ 808.506223][T15020] rtnetlink_rcv_msg+0x843/0xf90 [ 808.511242][T15020] ? rtnetlink_rcv_msg+0x220/0xf90 [ 808.516454][T15020] ? rtnetlink_bind+0x80/0x80 [ 808.521214][T15020] ? trace_call_bpf+0xc3/0x6c0 [ 808.526096][T15020] ? trace_call_bpf+0xc3/0x6c0 [ 808.530952][T15020] ? __lock_acquire+0x7d80/0x7d80 [ 808.536052][T15020] ? __local_bh_enable_ip+0x13a/0x1c0 [ 808.541527][T15020] ? trace_call_bpf+0xc3/0x6c0 [ 808.546545][T15020] ? trace_call_bpf+0xc3/0x6c0 [ 808.551395][T15020] ? trace_call_bpf+0x5e9/0x6c0 [ 808.556323][T15020] ? trace_call_bpf+0xc3/0x6c0 [ 808.561158][T15020] ? __dev_queue_xmit+0x275/0x3630 [ 808.566356][T15020] ? __dev_queue_xmit+0x1bc2/0x3630 [ 808.571657][T15020] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 808.577802][T15020] ? __dev_queue_xmit+0x275/0x3630 [ 808.583042][T15020] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 808.588944][T15020] ? perf_trace_lock+0x303/0x3b0 [ 808.593991][T15020] netlink_rcv_skb+0x235/0x4c0 [ 808.598833][T15020] ? rtnetlink_bind+0x80/0x80 [ 808.603596][T15020] ? netlink_ack+0x1160/0x1160 [ 808.608479][T15020] ? __lock_acquire+0x7d80/0x7d80 [ 808.613605][T15020] ? netlink_deliver_tap+0x2e/0x1b0 [ 808.618885][T15020] netlink_unicast+0x7b1/0x930 [ 808.623750][T15020] netlink_sendmsg+0x8d0/0xbf0 [ 808.628584][T15020] ? perf_trace_lock+0x303/0x3b0 [ 808.633615][T15020] ? netlink_getsockopt+0x590/0x590 [ 808.638897][T15020] ? aa_sock_msg_perm+0x94/0x150 [ 808.643936][T15020] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 808.649316][T15020] ? security_socket_sendmsg+0x80/0xa0 [ 808.654846][T15020] ? netlink_getsockopt+0x590/0x590 [ 808.660135][T15020] ____sys_sendmsg+0x61b/0x980 [ 808.664981][T15020] ? __asan_memset+0x22/0x40 [ 808.669635][T15020] ? __sys_sendmsg_sock+0x30/0x30 [ 808.674728][T15020] ? __import_iovec+0x5f2/0x850 [ 808.679664][T15020] ? import_iovec+0x73/0xa0 [ 808.684266][T15020] ___sys_sendmsg+0x2a6/0x360 [ 808.689043][T15020] ? __sys_sendmsg+0x2b0/0x2b0 [ 808.693978][T15020] ? __lock_acquire+0x7d80/0x7d80 [ 808.699150][T15020] __se_sys_sendmsg+0x1d0/0x2c0 [ 808.704087][T15020] ? __x64_sys_sendmsg+0x80/0x80 [ 808.709184][T15020] ? lockdep_hardirqs_on+0x98/0x150 [ 808.714478][T15020] do_syscall_64+0x55/0xb0 [ 808.718968][T15020] ? clear_bhb_loop+0x40/0x90 [ 808.723712][T15020] ? clear_bhb_loop+0x40/0x90 [ 808.728470][T15020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 808.734438][T15020] RIP: 0033:0x7f71abb9ce59 [ 808.738933][T15020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.758609][T15020] RSP: 002b:00007f71aca11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 808.767088][T15020] RAX: ffffffffffffffda RBX: 00007f71abe15fa0 RCX: 00007f71abb9ce59 [ 808.775106][T15020] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 808.783165][T15020] RBP: 00007f71aca11090 R08: 0000000000000000 R09: 0000000000000000 [ 808.791198][T15020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.799230][T15020] R13: 00007f71abe16038 R14: 00007f71abe15fa0 R15: 00007ffe761c8068 [ 808.807353][T15020] [ 808.819140][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.836331][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.979141][T15028] netlink: 'syz.1.2919': attribute type 10 has an invalid length. [ 809.109865][T15028] team0: Port device netdevsim0 removed [ 809.435225][T15042] netlink: 'syz.2.2924': attribute type 3 has an invalid length. [ 809.474501][T15042] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2924'. [ 809.619652][T15036] delete_channel: no stack [ 810.716805][T15063] netlink: 'syz.0.2931': attribute type 6 has an invalid length. [ 810.725029][T15063] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2931'. [ 812.982368][T15065] netlink: 'syz.1.2933': attribute type 10 has an invalid length. [ 813.201824][T15075] FAULT_INJECTION: forcing a failure. [ 813.201824][T15075] name failslab, interval 1, probability 0, space 0, times 0 [ 813.251200][T15075] CPU: 0 PID: 15075 Comm: syz.1.2938 Not tainted syzkaller #0 [ 813.258732][T15075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 813.268817][T15075] Call Trace: [ 813.272124][T15075] [ 813.275088][T15075] dump_stack_lvl+0x18c/0x250 [ 813.279813][T15075] ? show_regs_print_info+0x20/0x20 [ 813.285058][T15075] ? load_image+0x420/0x420 [ 813.289609][T15075] ? __might_sleep+0xe0/0xe0 [ 813.294233][T15075] ? __lock_acquire+0x7d80/0x7d80 [ 813.299291][T15075] should_fail_ex+0x394/0x4c0 [ 813.304011][T15075] should_failslab+0x9/0x20 [ 813.308561][T15075] slab_pre_alloc_hook+0x59/0x300 [ 813.313634][T15075] ? sk_prot_alloc+0xe7/0x210 [ 813.318347][T15075] ? sk_prot_alloc+0xe7/0x210 [ 813.323059][T15075] __kmem_cache_alloc_node+0x53/0x250 [ 813.328478][T15075] ? sk_prot_alloc+0xe7/0x210 [ 813.333197][T15075] __kmalloc+0xa7/0x240 [ 813.337406][T15075] sk_prot_alloc+0xe7/0x210 [ 813.341976][T15075] ? sk_alloc+0x24/0x350 [ 813.346270][T15075] sk_alloc+0x3a/0x350 [ 813.350378][T15075] ? bpf_ctx_init+0x154/0x190 [ 813.355098][T15075] bpf_prog_test_run_skb+0x371/0x18f0 [ 813.360504][T15075] ? __fget_files+0x28/0x460 [ 813.365165][T15075] ? __fget_files+0x3fc/0x460 [ 813.369909][T15075] ? cpu_online+0x60/0x60 [ 813.374282][T15075] bpf_prog_test_run+0x31f/0x390 [ 813.379254][T15075] __sys_bpf+0x49d/0x890 [ 813.383529][T15075] ? bpf_link_show_fdinfo+0x390/0x390 [ 813.388955][T15075] ? lock_chain_count+0x20/0x20 [ 813.393845][T15075] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 813.399891][T15075] __x64_sys_bpf+0x7c/0x90 [ 813.404342][T15075] do_syscall_64+0x55/0xb0 [ 813.408791][T15075] ? clear_bhb_loop+0x40/0x90 [ 813.413494][T15075] ? clear_bhb_loop+0x40/0x90 [ 813.418229][T15075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 813.424166][T15075] RIP: 0033:0x7fdd5a59ce59 [ 813.428612][T15075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.448269][T15075] RSP: 002b:00007fdd587f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 813.456732][T15075] RAX: ffffffffffffffda RBX: 00007fdd5a815fa0 RCX: 00007fdd5a59ce59 [ 813.464734][T15075] RDX: 0000000000000050 RSI: 0000200000000880 RDI: 000000000000000a [ 813.472746][T15075] RBP: 00007fdd587f6090 R08: 0000000000000000 R09: 0000000000000000 [ 813.480762][T15075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.488768][T15075] R13: 00007fdd5a816038 R14: 00007fdd5a815fa0 R15: 00007ffc86937288 [ 813.496828][T15075] [ 813.774191][T15079] netlink: 'syz.0.2939': attribute type 3 has an invalid length. [ 813.782834][T15079] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2939'. [ 814.379199][T15077] delete_channel: no stack [ 819.529871][T15105] netlink: 'syz.3.2946': attribute type 10 has an invalid length. [ 819.700306][T15111] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2949'. [ 819.754738][T15111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 819.847572][T15118] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2951'. [ 819.893792][T15118] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.2951'. [ 821.019123][T15137] netlink: 'syz.3.2958': attribute type 10 has an invalid length. [ 821.222044][T15141] netlink: 'syz.3.2960': attribute type 10 has an invalid length. [ 821.807354][T15149] delete_channel: no stack [ 821.825325][T15149] delete_channel: no stack [ 821.897087][T15149] netlink: 'syz.0.2962': attribute type 3 has an invalid length. [ 821.918169][T15149] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2962'. [ 823.248675][T15162] netlink: 'syz.1.2968': attribute type 10 has an invalid length. [ 823.491616][T15169] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2970'. [ 823.592639][T15174] netlink: 'syz.1.2973': attribute type 3 has an invalid length. [ 823.607539][T15174] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2973'. [ 827.364737][T15197] netlink: 'syz.1.2981': attribute type 10 has an invalid length. [ 827.533566][T15208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 827.601343][T15208] netlink: 'syz.1.2986': attribute type 29 has an invalid length. [ 827.614567][T15208] netlink: 'syz.1.2986': attribute type 29 has an invalid length. [ 827.637354][T15208] netlink: 'syz.1.2986': attribute type 29 has an invalid length. [ 827.652658][T15208] netlink: 'syz.1.2986': attribute type 29 has an invalid length. [ 827.664007][T15208] netlink: 'syz.1.2986': attribute type 29 has an invalid length. [ 828.249585][T15227] syzkaller0: entered promiscuous mode [ 828.262873][T15227] syzkaller0: entered allmulticast mode [ 830.859215][T15232] netlink: 'syz.0.2994': attribute type 3 has an invalid length. [ 830.883492][T15232] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2994'. [ 831.315328][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 832.377049][T15234] netlink: 'syz.0.2994': attribute type 10 has an invalid length. [ 832.387674][T15239] Ÿë: port 2(veth0_to_team) entered blocking state [ 832.403777][T15239] Ÿë: port 2(veth0_to_team) entered disabled state [ 832.420508][T15239] veth0_to_team: entered allmulticast mode [ 832.436810][T15239] veth0_to_team: entered promiscuous mode [ 832.618713][T15248] Ÿë: port 2(ip6gretap0) entered blocking state [ 832.626747][T15248] Ÿë: port 2(ip6gretap0) entered disabled state [ 832.634554][T15248] ip6gretap0: entered allmulticast mode [ 832.646816][T15248] ip6gretap0: entered promiscuous mode [ 832.658389][T15251] netlink: 'syz.2.3000': attribute type 10 has an invalid length. [ 832.696263][T15254] netlink: 'syz.3.3001': attribute type 3 has an invalid length. [ 832.730875][T15254] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.3001'. [ 836.019874][T15268] netlink: 'syz.2.3006': attribute type 3 has an invalid length. [ 836.049191][T15268] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3006'. [ 836.085120][T15267] netlink: 'syz.2.3006': attribute type 10 has an invalid length. [ 836.237311][T15275] Ÿë: port 3(veth0_to_team) entered blocking state [ 836.247788][T15275] Ÿë: port 3(veth0_to_team) entered disabled state [ 836.256253][T15275] veth0_to_team: entered allmulticast mode [ 836.270351][T15275] veth0_to_team: entered promiscuous mode [ 836.320345][T15279] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3010'. [ 836.547283][T15283] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3011'. [ 839.236494][T15300] netlink: 'syz.2.3019': attribute type 3 has an invalid length. [ 839.252615][T15300] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3019'. [ 839.382651][T15300] netlink: 'syz.2.3019': attribute type 10 has an invalid length. [ 840.248148][T15318] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3024'. [ 843.438485][T15334] netlink: 'syz.0.3030': attribute type 3 has an invalid length. [ 843.460406][T15334] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3030'. [ 843.557566][T15334] netlink: 'syz.0.3030': attribute type 10 has an invalid length. [ 844.228878][T15351] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3035'. [ 844.273510][T15351] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3035'. [ 844.353631][T15352] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3035'. [ 844.363975][T15351] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3035'. [ 844.394743][T15351] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3035'. [ 844.635834][T15360] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3038'. [ 844.646565][T15359] netlink: 'syz.3.3037': attribute type 9 has an invalid length. [ 844.663777][T15360] bridge_slave_1: entered promiscuous mode [ 844.691832][T15359] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3037'. [ 846.351689][T15366] netlink: 'syz.1.3040': attribute type 3 has an invalid length. [ 846.392252][T15366] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3040'. [ 846.496040][T15366] netlink: 'syz.1.3040': attribute type 10 has an invalid length. [ 846.969871][T15374] Ÿë: port 2(ip6gretap0) entered blocking state [ 846.980077][T15374] Ÿë: port 2(ip6gretap0) entered disabled state [ 846.989516][T15374] ip6gretap0: entered allmulticast mode [ 847.002179][T15374] ip6gretap0: entered promiscuous mode [ 847.418343][T15392] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3050'. [ 850.476069][T15394] netlink: 'syz.3.3051': attribute type 3 has an invalid length. [ 850.514469][T15394] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3051'. [ 850.534028][T15394] netlink: 'syz.3.3051': attribute type 10 has an invalid length. [ 851.354673][T15423] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3060'. [ 851.865068][T15430] Ÿë: port 2(ip6gretap0) entered blocking state [ 851.872787][T15430] Ÿë: port 2(ip6gretap0) entered disabled state [ 851.883218][T15430] ip6gretap0: entered allmulticast mode [ 851.928136][T15430] ip6gretap0: entered promiscuous mode [ 852.198626][T15442] netlink: 'syz.1.3066': attribute type 10 has an invalid length. [ 852.228651][T15442] team0: Port device geneve1 added [ 852.709087][T15455] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3070'. [ 856.087537][T15478] netlink: 'syz.0.3079': attribute type 10 has an invalid length. [ 856.434425][T15493] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3084'. [ 856.908582][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 859.925439][T15523] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3093'. [ 859.976524][T15519] netlink: 'syz.3.3092': attribute type 10 has an invalid length. [ 860.169360][T15530] netlink: 'syz.0.3095': attribute type 3 has an invalid length. [ 860.202086][T15530] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3095'. [ 860.480146][T15539] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3097'. [ 863.371307][T15552] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3108'. [ 866.870993][T15583] FAULT_INJECTION: forcing a failure. [ 866.870993][T15583] name failslab, interval 1, probability 0, space 0, times 0 [ 866.884087][T15583] CPU: 0 PID: 15583 Comm: syz.1.3114 Not tainted syzkaller #0 [ 866.891613][T15583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 866.901740][T15583] Call Trace: [ 866.905081][T15583] [ 866.908060][T15583] dump_stack_lvl+0x18c/0x250 [ 866.912809][T15583] ? show_regs_print_info+0x20/0x20 [ 866.918070][T15583] ? load_image+0x420/0x420 [ 866.922670][T15583] ? __might_sleep+0xe0/0xe0 [ 866.927368][T15583] ? __lock_acquire+0x7d80/0x7d80 [ 866.932490][T15583] should_fail_ex+0x394/0x4c0 [ 866.937295][T15583] should_failslab+0x9/0x20 [ 866.941882][T15583] slab_pre_alloc_hook+0x59/0x300 [ 866.947021][T15583] kmem_cache_alloc_node+0x5e/0x310 [ 866.952314][T15583] ? __alloc_skb+0x103/0x2c0 [ 866.957012][T15583] __alloc_skb+0x103/0x2c0 [ 866.961516][T15583] alloc_skb_with_frags+0xcd/0x7a0 [ 866.966738][T15583] ? __lock_acquire+0x7d80/0x7d80 [ 866.971851][T15583] sock_alloc_send_pskb+0x883/0x9a0 [ 866.977150][T15583] ? sock_kzfree_s+0x50/0x50 [ 866.981799][T15583] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 866.987674][T15583] tun_get_user+0xa53/0x3d40 [ 866.992338][T15583] ? aa_file_perm+0x11b/0xee0 [ 866.997082][T15583] ? aa_file_perm+0x3e3/0xee0 [ 867.001821][T15583] ? rcu_read_unlock+0xa0/0xa0 [ 867.006676][T15583] ? tun_get+0x1c/0x2e0 [ 867.010903][T15583] ? __lock_acquire+0x7d80/0x7d80 [ 867.015999][T15583] ? tun_get+0x1c/0x2e0 [ 867.020217][T15583] tun_chr_write_iter+0x119/0x200 [ 867.025296][T15583] vfs_write+0x474/0x9a0 [ 867.029594][T15583] ? file_end_write+0x250/0x250 [ 867.034506][T15583] ? __fget_files+0x3fc/0x460 [ 867.039258][T15583] ? __fdget_pos+0x1d8/0x330 [ 867.043917][T15583] ? ksys_write+0x74/0x260 [ 867.048407][T15583] ksys_write+0x151/0x260 [ 867.052799][T15583] ? __ia32_sys_read+0x90/0x90 [ 867.057624][T15583] ? trace_sys_enter+0x1f/0x80 [ 867.062449][T15583] do_syscall_64+0x55/0xb0 [ 867.066902][T15583] ? clear_bhb_loop+0x40/0x90 [ 867.071621][T15583] ? clear_bhb_loop+0x40/0x90 [ 867.076347][T15583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 867.082284][T15583] RIP: 0033:0x7fdd5a59ce59 [ 867.086725][T15583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.106355][T15583] RSP: 002b:00007fdd587f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 867.114806][T15583] RAX: ffffffffffffffda RBX: 00007fdd5a815fa0 RCX: 00007fdd5a59ce59 [ 867.122816][T15583] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 00000000000000c8 [ 867.130851][T15583] RBP: 00007fdd587f6090 R08: 0000000000000000 R09: 0000000000000000 [ 867.138852][T15583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.146846][T15583] R13: 00007fdd5a816038 R14: 00007fdd5a815fa0 R15: 00007ffc86937288 [ 867.154897][T15583] [ 867.177975][T15581] netlink: 'syz.2.3113': attribute type 3 has an invalid length. [ 867.195510][T15581] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3113'. [ 867.488321][T15593] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3116'. [ 870.189647][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.202247][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.534185][T15603] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3120'. [ 871.544952][T15629] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3129'. [ 874.325006][T15652] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3135'. [ 874.556649][T15657] netlink: 'syz.0.3137': attribute type 46 has an invalid length. [ 874.571621][T15657] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3137'. [ 874.923909][T15665] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3138'. [ 874.948195][T15665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3138'. [ 879.108170][T15696] netlink: 'syz.2.3147': attribute type 3 has an invalid length. [ 879.129285][T15696] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3147'. [ 879.269182][T15698] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3149'. [ 879.325110][T15698] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3149'. [ 879.380847][T15701] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3149'. [ 879.443361][T15705] FAULT_INJECTION: forcing a failure. [ 879.443361][T15705] name failslab, interval 1, probability 0, space 0, times 0 [ 879.456519][T15705] CPU: 0 PID: 15705 Comm: syz.3.3151 Not tainted syzkaller #0 [ 879.464020][T15705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 879.474098][T15705] Call Trace: [ 879.477398][T15705] [ 879.480334][T15705] dump_stack_lvl+0x18c/0x250 [ 879.485040][T15705] ? show_regs_print_info+0x20/0x20 [ 879.490255][T15705] ? load_image+0x420/0x420 [ 879.494769][T15705] ? mark_lock+0x94/0x320 [ 879.499113][T15705] ? __lock_acquire+0x1336/0x7d80 [ 879.504153][T15705] should_fail_ex+0x394/0x4c0 [ 879.508848][T15705] should_failslab+0x9/0x20 [ 879.513367][T15705] slab_pre_alloc_hook+0x59/0x300 [ 879.518423][T15705] kmem_cache_alloc+0x5a/0x2c0 [ 879.523200][T15705] ? radix_tree_node_alloc+0x7e/0x3a0 [ 879.528610][T15705] radix_tree_node_alloc+0x7e/0x3a0 [ 879.533847][T15705] idr_get_free+0x28f/0xa10 [ 879.538393][T15705] idr_alloc_cyclic+0x28a/0x610 [ 879.543280][T15705] ? idr_alloc+0x2e0/0x2e0 [ 879.547726][T15705] ? do_raw_spin_lock+0x11f/0x2b0 [ 879.552768][T15705] ? __radix_tree_preload+0x82/0x880 [ 879.558069][T15705] ? btf_alloc_id+0x30/0x2d0 [ 879.562689][T15705] btf_alloc_id+0x4f/0x2d0 [ 879.567125][T15705] btf_new_fd+0x80a/0x9e0 [ 879.571480][T15705] ? bpf_btf_show_fdinfo+0x80/0x80 [ 879.576616][T15705] ? capable+0x88/0xe0 [ 879.580699][T15705] __sys_bpf+0x670/0x890 [ 879.584958][T15705] ? bpf_link_show_fdinfo+0x390/0x390 [ 879.590352][T15705] ? lock_chain_count+0x20/0x20 [ 879.595219][T15705] __x64_sys_bpf+0x7c/0x90 [ 879.599650][T15705] do_syscall_64+0x55/0xb0 [ 879.604086][T15705] ? clear_bhb_loop+0x40/0x90 [ 879.608776][T15705] ? clear_bhb_loop+0x40/0x90 [ 879.613465][T15705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 879.619373][T15705] RIP: 0033:0x7f71abb9ce59 [ 879.623797][T15705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.643511][T15705] RSP: 002b:00007f71aca11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 879.651941][T15705] RAX: ffffffffffffffda RBX: 00007f71abe15fa0 RCX: 00007f71abb9ce59 [ 879.659952][T15705] RDX: 0000000000000028 RSI: 0000200000002340 RDI: 0000000000000012 [ 879.667939][T15705] RBP: 00007f71aca11090 R08: 0000000000000000 R09: 0000000000000000 [ 879.675945][T15705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 879.683924][T15705] R13: 00007f71abe16038 R14: 00007f71abe15fa0 R15: 00007ffe761c8068 [ 879.691931][T15705] [ 880.250473][T15716] netlink: 'syz.3.3155': attribute type 10 has an invalid length. [ 880.864942][T12714] Bluetooth: hci3: ISO packet for unknown connection handle 29 [ 880.995235][T15735] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3161'. [ 881.268011][T15742] FAULT_INJECTION: forcing a failure. [ 881.268011][T15742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.293240][T15742] CPU: 0 PID: 15742 Comm: syz.1.3163 Not tainted syzkaller #0 [ 881.300754][T15742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 881.310962][T15742] Call Trace: [ 881.314278][T15742] [ 881.317263][T15742] dump_stack_lvl+0x18c/0x250 [ 881.321991][T15742] ? show_regs_print_info+0x20/0x20 [ 881.327231][T15742] ? load_image+0x420/0x420 [ 881.331773][T15742] ? __lock_acquire+0x7d80/0x7d80 [ 881.336858][T15742] ? snprintf+0xe9/0x140 [ 881.341142][T15742] should_fail_ex+0x394/0x4c0 [ 881.345881][T15742] _copy_to_user+0x2f/0xa0 [ 881.350337][T15742] simple_read_from_buffer+0xe7/0x150 [ 881.355764][T15742] proc_fail_nth_read+0x1e8/0x260 [ 881.360854][T15742] ? proc_fault_inject_write+0x360/0x360 [ 881.366534][T15742] ? fsnotify_perm+0x271/0x5e0 [ 881.371338][T15742] ? proc_fault_inject_write+0x360/0x360 [ 881.377018][T15742] vfs_read+0x298/0x990 [ 881.381220][T15742] ? kernel_read+0x1e0/0x1e0 [ 881.385859][T15742] ? __fget_files+0x28/0x460 [ 881.390489][T15742] ? __fget_files+0x3fc/0x460 [ 881.395205][T15742] ? __fdget_pos+0x2a3/0x330 [ 881.399827][T15742] ? ksys_read+0x74/0x260 [ 881.404195][T15742] ksys_read+0x151/0x260 [ 881.408467][T15742] ? vfs_write+0x9a0/0x9a0 [ 881.412902][T15742] ? lockdep_hardirqs_on+0x98/0x150 [ 881.418122][T15742] do_syscall_64+0x55/0xb0 [ 881.422552][T15742] ? clear_bhb_loop+0x40/0x90 [ 881.427255][T15742] ? clear_bhb_loop+0x40/0x90 [ 881.431958][T15742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 881.437888][T15742] RIP: 0033:0x7fdd5a55d68e [ 881.442318][T15742] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 881.461943][T15742] RSP: 002b:00007fdd587d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 881.470379][T15742] RAX: ffffffffffffffda RBX: 00007fdd587d56c0 RCX: 00007fdd5a55d68e [ 881.478361][T15742] RDX: 000000000000000f RSI: 00007fdd587d50a0 RDI: 0000000000000005 [ 881.486342][T15742] RBP: 00007fdd587d5090 R08: 0000000000000000 R09: 0000000000000000 [ 881.494332][T15742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.502343][T15742] R13: 00007fdd5a816128 R14: 00007fdd5a816090 R15: 00007ffc86937288 [ 881.510344][T15742] [ 881.594530][T15744] netlink: 'syz.0.3165': attribute type 10 has an invalid length. [ 882.176419][T15762] netlink: 'syz.1.3171': attribute type 2 has an invalid length. [ 882.194455][T15762] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3171'. [ 882.823259][T15778] netlink: 'syz.1.3177': attribute type 11 has an invalid length. [ 882.831773][T15778] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.3177'. [ 883.027970][T15781] netlink: 'syz.2.3178': attribute type 10 has an invalid length. [ 883.421065][T15791] FAULT_INJECTION: forcing a failure. [ 883.421065][T15791] name failslab, interval 1, probability 0, space 0, times 0 [ 883.473365][T15791] CPU: 0 PID: 15791 Comm: syz.0.3181 Not tainted syzkaller #0 [ 883.480979][T15791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 883.491076][T15791] Call Trace: [ 883.494394][T15791] [ 883.497350][T15791] dump_stack_lvl+0x18c/0x250 [ 883.502072][T15791] ? show_regs_print_info+0x20/0x20 [ 883.507322][T15791] ? load_image+0x420/0x420 [ 883.511877][T15791] ? __might_sleep+0xe0/0xe0 [ 883.516509][T15791] ? __lock_acquire+0x7d80/0x7d80 [ 883.521571][T15791] should_fail_ex+0x394/0x4c0 [ 883.526285][T15791] should_failslab+0x9/0x20 [ 883.530852][T15791] slab_pre_alloc_hook+0x59/0x300 [ 883.535912][T15791] ? cpuset_write_resmask+0x1f7/0x1fb0 [ 883.541402][T15791] ? cpuset_write_resmask+0x1f7/0x1fb0 [ 883.546881][T15791] __kmem_cache_alloc_node+0x53/0x250 [ 883.552273][T15791] ? cpuset_write_resmask+0x1f7/0x1fb0 [ 883.557752][T15791] __kmalloc_node_track_caller+0xa4/0x230 [ 883.563501][T15791] kmemdup+0x2b/0x70 [ 883.567411][T15791] cpuset_write_resmask+0x1f7/0x1fb0 [ 883.572720][T15791] ? __mutex_trylock_common+0x160/0x270 [ 883.578287][T15791] ? trace_raw_output_contention_end+0xd0/0xd0 [ 883.584461][T15791] ? cpuset_common_seq_show+0x250/0x250 [ 883.590018][T15791] ? rcu_is_watching+0x15/0xb0 [ 883.594808][T15791] ? cpuset_common_seq_show+0x250/0x250 [ 883.600372][T15791] cgroup_file_write+0x2cd/0x6a0 [ 883.605353][T15791] ? kernfs_fop_write_iter+0x1dc/0x520 [ 883.610854][T15791] ? cgroup_seqfile_stop+0xd0/0xd0 [ 883.615988][T15791] ? __virt_addr_valid+0x10c/0x380 [ 883.621138][T15791] ? __virt_addr_valid+0x10c/0x380 [ 883.626284][T15791] ? cgroup_seqfile_stop+0xd0/0xd0 [ 883.631415][T15791] kernfs_fop_write_iter+0x3a4/0x520 [ 883.636733][T15791] vfs_write+0x474/0x9a0 [ 883.641000][T15791] ? file_end_write+0x250/0x250 [ 883.645881][T15791] ? __fget_files+0x3fc/0x460 [ 883.650580][T15791] ? __fdget_pos+0x2a3/0x330 [ 883.655188][T15791] ? ksys_write+0x74/0x260 [ 883.659628][T15791] ksys_write+0x151/0x260 [ 883.663981][T15791] ? __ia32_sys_read+0x90/0x90 [ 883.668760][T15791] ? lockdep_hardirqs_on+0x98/0x150 [ 883.673974][T15791] do_syscall_64+0x55/0xb0 [ 883.678401][T15791] ? clear_bhb_loop+0x40/0x90 [ 883.683088][T15791] ? clear_bhb_loop+0x40/0x90 [ 883.687870][T15791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 883.693776][T15791] RIP: 0033:0x7f555dd9ce59 [ 883.698213][T15791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.717832][T15791] RSP: 002b:00007f555eceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 883.726265][T15791] RAX: ffffffffffffffda RBX: 00007f555e015fa0 RCX: 00007f555dd9ce59 [ 883.734248][T15791] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000007 [ 883.742310][T15791] RBP: 00007f555eceb090 R08: 0000000000000000 R09: 0000000000000000 [ 883.750319][T15791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.758300][T15791] R13: 00007f555e016038 R14: 00007f555e015fa0 R15: 00007ffc0de88cb8 [ 883.766295][T15791] [ 884.396731][T15818] netlink: 'syz.0.3188': attribute type 11 has an invalid length. [ 884.766401][T15827] netlink: 'syz.0.3190': attribute type 10 has an invalid length. [ 886.941708][T15860] FAULT_INJECTION: forcing a failure. [ 886.941708][T15860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 887.005860][T15860] CPU: 1 PID: 15860 Comm: syz.1.3198 Not tainted syzkaller #0 [ 887.013396][T15860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 887.023480][T15860] Call Trace: [ 887.026787][T15860] [ 887.029740][T15860] dump_stack_lvl+0x18c/0x250 [ 887.034461][T15860] ? show_regs_print_info+0x20/0x20 [ 887.039698][T15860] ? load_image+0x420/0x420 [ 887.044234][T15860] ? __lock_acquire+0x7d80/0x7d80 [ 887.049388][T15860] ? snprintf+0xe9/0x140 [ 887.053667][T15860] should_fail_ex+0x394/0x4c0 [ 887.058392][T15860] _copy_to_user+0x2f/0xa0 [ 887.062890][T15860] simple_read_from_buffer+0xe7/0x150 [ 887.068307][T15860] proc_fail_nth_read+0x1e8/0x260 [ 887.073401][T15860] ? proc_fault_inject_write+0x360/0x360 [ 887.079085][T15860] ? fsnotify_perm+0x271/0x5e0 [ 887.083907][T15860] ? proc_fault_inject_write+0x360/0x360 [ 887.089606][T15860] vfs_read+0x298/0x990 [ 887.093806][T15860] ? kernel_read+0x1e0/0x1e0 [ 887.098452][T15860] ? __fget_files+0x28/0x460 [ 887.103094][T15860] ? __fget_files+0x3fc/0x460 [ 887.107834][T15860] ? __fdget_pos+0x2a3/0x330 [ 887.112458][T15860] ? ksys_read+0x74/0x260 [ 887.116833][T15860] ksys_read+0x151/0x260 [ 887.121122][T15860] ? vfs_write+0x9a0/0x9a0 [ 887.125593][T15860] ? lockdep_hardirqs_on+0x98/0x150 [ 887.130881][T15860] do_syscall_64+0x55/0xb0 [ 887.135342][T15860] ? clear_bhb_loop+0x40/0x90 [ 887.140054][T15860] ? clear_bhb_loop+0x40/0x90 [ 887.144786][T15860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.150729][T15860] RIP: 0033:0x7fdd5a55d68e [ 887.155218][T15860] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 887.174857][T15860] RSP: 002b:00007fdd587f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 887.183312][T15860] RAX: ffffffffffffffda RBX: 00007fdd587f66c0 RCX: 00007fdd5a55d68e [ 887.191322][T15860] RDX: 000000000000000f RSI: 00007fdd587f60a0 RDI: 0000000000000005 [ 887.199327][T15860] RBP: 00007fdd587f6090 R08: 0000000000000000 R09: 0000000000000000 [ 887.207325][T15860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.215335][T15860] R13: 00007fdd5a816038 R14: 00007fdd5a815fa0 R15: 00007ffc86937288 [ 887.223353][T15860] [ 887.722674][T15875] netlink: 'syz.0.3200': attribute type 10 has an invalid length. [ 888.236856][T15892] FAULT_INJECTION: forcing a failure. [ 888.236856][T15892] name failslab, interval 1, probability 0, space 0, times 0 [ 888.270262][T15892] CPU: 0 PID: 15892 Comm: syz.1.3206 Not tainted syzkaller #0 [ 888.277773][T15892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 888.287938][T15892] Call Trace: [ 888.291276][T15892] [ 888.294241][T15892] dump_stack_lvl+0x18c/0x250 [ 888.298955][T15892] ? show_regs_print_info+0x20/0x20 [ 888.304210][T15892] ? load_image+0x420/0x420 [ 888.308888][T15892] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 888.314910][T15892] ? __asan_memset+0x22/0x40 [ 888.319554][T15892] should_fail_ex+0x394/0x4c0 [ 888.324312][T15892] should_failslab+0x9/0x20 [ 888.328852][T15892] slab_pre_alloc_hook+0x59/0x300 [ 888.333919][T15892] ? __debug_object_init+0xec/0x450 [ 888.339155][T15892] kmem_cache_alloc+0x5a/0x2c0 [ 888.343974][T15892] ? slab_build_skb+0x28/0x3e0 [ 888.348777][T15892] slab_build_skb+0x28/0x3e0 [ 888.353409][T15892] bpf_prog_test_run_skb+0x38f/0x18f0 [ 888.358821][T15892] ? __fget_files+0x28/0x460 [ 888.363452][T15892] ? __fget_files+0x3fc/0x460 [ 888.368171][T15892] ? cpu_online+0x60/0x60 [ 888.372534][T15892] bpf_prog_test_run+0x31f/0x390 [ 888.377520][T15892] __sys_bpf+0x49d/0x890 [ 888.381784][T15892] ? bpf_link_show_fdinfo+0x390/0x390 [ 888.387183][T15892] ? lock_chain_count+0x20/0x20 [ 888.392050][T15892] __x64_sys_bpf+0x7c/0x90 [ 888.396480][T15892] do_syscall_64+0x55/0xb0 [ 888.400922][T15892] ? clear_bhb_loop+0x40/0x90 [ 888.405622][T15892] ? clear_bhb_loop+0x40/0x90 [ 888.410334][T15892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 888.416259][T15892] RIP: 0033:0x7fdd5a59ce59 [ 888.420701][T15892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.440343][T15892] RSP: 002b:00007fdd587d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 888.448768][T15892] RAX: ffffffffffffffda RBX: 00007fdd5a816090 RCX: 00007fdd5a59ce59 [ 888.456750][T15892] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a [ 888.464736][T15892] RBP: 00007fdd587d5090 R08: 0000000000000000 R09: 0000000000000000 [ 888.472724][T15892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.480724][T15892] R13: 00007fdd5a816128 R14: 00007fdd5a816090 R15: 00007ffc86937288 [ 888.488760][T15892] [ 888.903221][T15896] netlink: 'syz.0.3207': attribute type 21 has an invalid length. [ 888.934632][T15896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 888.942093][T15896] IPv6: NLM_F_CREATE should be set when creating new route [ 888.949436][T15896] IPv6: NLM_F_CREATE should be set when creating new route [ 888.956748][T15896] IPv6: NLM_F_CREATE should be set when creating new route [ 889.096963][T15901] netlink: set zone limit has 8 unknown bytes [ 891.384097][T15927] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3217'. [ 891.404262][T15927] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3217'. [ 891.415628][T15924] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3217'. [ 891.464935][T15928] netlink: 'syz.0.3215': attribute type 10 has an invalid length. [ 891.685796][T15933] syzkaller0: entered promiscuous mode [ 891.691343][T15933] syzkaller0: entered allmulticast mode [ 894.344426][T15962] FAULT_INJECTION: forcing a failure. [ 894.344426][T15962] name failslab, interval 1, probability 0, space 0, times 0 [ 894.383523][T15962] CPU: 0 PID: 15962 Comm: syz.0.3227 Not tainted syzkaller #0 [ 894.391054][T15962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 894.401146][T15962] Call Trace: [ 894.404466][T15962] [ 894.407425][T15962] dump_stack_lvl+0x18c/0x250 [ 894.412143][T15962] ? show_regs_print_info+0x20/0x20 [ 894.417368][T15962] ? lockdep_hardirqs_on+0x98/0x150 [ 894.422604][T15962] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 894.428813][T15962] should_fail_ex+0x394/0x4c0 [ 894.433548][T15962] should_failslab+0x9/0x20 [ 894.438090][T15962] slab_pre_alloc_hook+0x59/0x300 [ 894.443166][T15962] kmem_cache_alloc_node+0x5e/0x310 [ 894.448409][T15962] ? __alloc_skb+0x103/0x2c0 [ 894.453052][T15962] __alloc_skb+0x103/0x2c0 [ 894.457512][T15962] tcp_stream_alloc_skb+0x3d/0x330 [ 894.462685][T15962] tcp_sendmsg_locked+0xcf0/0x4ab0 [ 894.467859][T15962] ? mark_lock+0x94/0x320 [ 894.472229][T15962] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 894.478269][T15962] ? tcp_set_state+0x6c0/0x6c0 [ 894.483082][T15962] tcp_sendmsg+0x2f/0x50 [ 894.487354][T15962] ? inet_send_prepare+0x250/0x250 [ 894.492508][T15962] ____sys_sendmsg+0x61b/0x980 [ 894.497310][T15962] ? __asan_memset+0x22/0x40 [ 894.501955][T15962] ? __sys_sendmsg_sock+0x30/0x30 [ 894.507014][T15962] ? __import_iovec+0x5f2/0x850 [ 894.511994][T15962] ? import_iovec+0x73/0xa0 [ 894.516546][T15962] ___sys_sendmsg+0x2a6/0x360 [ 894.521266][T15962] ? __sys_sendmsg+0x2b0/0x2b0 [ 894.526090][T15962] ? ktime_get+0x7f/0x280 [ 894.530449][T15962] ? trace_call_bpf+0xc3/0x6c0 [ 894.535294][T15962] __se_sys_sendmsg+0x1d0/0x2c0 [ 894.540194][T15962] ? perf_trace_preemptirq_template+0x269/0x330 [ 894.546484][T15962] ? __x64_sys_sendmsg+0x80/0x80 [ 894.551478][T15962] ? lockdep_hardirqs_on+0x98/0x150 [ 894.556722][T15962] do_syscall_64+0x55/0xb0 [ 894.561175][T15962] ? clear_bhb_loop+0x40/0x90 [ 894.565893][T15962] ? clear_bhb_loop+0x40/0x90 [ 894.570604][T15962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 894.576538][T15962] RIP: 0033:0x7f555dd9ce59 [ 894.580988][T15962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.600643][T15962] RSP: 002b:00007f555eceb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.609094][T15962] RAX: ffffffffffffffda RBX: 00007f555e015fa0 RCX: 00007f555dd9ce59 [ 894.617088][T15962] RDX: 0000000000000010 RSI: 0000200000002480 RDI: 000000000000000d [ 894.625082][T15962] RBP: 00007f555eceb090 R08: 0000000000000000 R09: 0000000000000000 [ 894.633083][T15962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.641085][T15962] R13: 00007f555e016038 R14: 00007f555e015fa0 R15: 00007ffc0de88cb8 [ 894.649128][T15962] [ 894.780455][T15970] netlink: set zone limit has 8 unknown bytes [ 894.788661][T15970] FAULT_INJECTION: forcing a failure. [ 894.788661][T15970] name failslab, interval 1, probability 0, space 0, times 0 [ 894.823408][T15970] CPU: 0 PID: 15970 Comm: syz.1.3229 Not tainted syzkaller #0 [ 894.830969][T15970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 894.841087][T15970] Call Trace: [ 894.844405][T15970] [ 894.847344][T15970] dump_stack_lvl+0x18c/0x250 [ 894.852056][T15970] ? show_regs_print_info+0x20/0x20 [ 894.857316][T15970] ? load_image+0x420/0x420 [ 894.861884][T15970] ? __might_sleep+0xe0/0xe0 [ 894.866565][T15970] ? __lock_acquire+0x7d80/0x7d80 [ 894.871658][T15970] should_fail_ex+0x394/0x4c0 [ 894.876401][T15970] should_failslab+0x9/0x20 [ 894.880954][T15970] slab_pre_alloc_hook+0x59/0x300 [ 894.886021][T15970] ? genl_family_rcv_msg_doit+0x268/0x310 [ 894.891813][T15970] kmem_cache_alloc_node+0x5e/0x310 [ 894.897073][T15970] ? __alloc_skb+0x103/0x2c0 [ 894.901731][T15970] __alloc_skb+0x103/0x2c0 [ 894.906213][T15970] netlink_ack+0x377/0x1160 [ 894.910799][T15970] ? genl_rcv_msg+0x281/0x7a0 [ 894.915550][T15970] ? genl_bind+0x360/0x360 [ 894.920010][T15970] ? netlink_dump+0xec0/0xec0 [ 894.924753][T15970] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 894.931388][T15970] ? ref_tracker_free+0x686/0x830 [ 894.936475][T15970] netlink_rcv_skb+0x2b3/0x4c0 [ 894.941293][T15970] ? genl_bind+0x360/0x360 [ 894.945742][T15970] ? netlink_ack+0x1160/0x1160 [ 894.950544][T15970] ? __lock_acquire+0x7d80/0x7d80 [ 894.955608][T15970] ? down_read+0x1ac/0x2e0 [ 894.960057][T15970] genl_rcv+0x28/0x40 [ 894.964062][T15970] netlink_unicast+0x7b1/0x930 [ 894.968877][T15970] netlink_sendmsg+0x8d0/0xbf0 [ 894.973695][T15970] ? netlink_getsockopt+0x590/0x590 [ 894.978921][T15970] ? aa_sock_msg_perm+0x94/0x150 [ 894.983890][T15970] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 894.989201][T15970] ? security_socket_sendmsg+0x80/0xa0 [ 894.994676][T15970] ? netlink_getsockopt+0x590/0x590 [ 894.999896][T15970] ____sys_sendmsg+0x61b/0x980 [ 895.004702][T15970] ? __asan_memset+0x22/0x40 [ 895.009321][T15970] ? __sys_sendmsg_sock+0x30/0x30 [ 895.014371][T15970] ? __import_iovec+0x5f2/0x850 [ 895.019261][T15970] ? import_iovec+0x73/0xa0 [ 895.023791][T15970] ___sys_sendmsg+0x2a6/0x360 [ 895.028496][T15970] ? __sys_sendmsg+0x2b0/0x2b0 [ 895.033332][T15970] ? trace_call_bpf+0xc3/0x6c0 [ 895.038168][T15970] __se_sys_sendmsg+0x1d0/0x2c0 [ 895.043039][T15970] ? perf_trace_preemptirq_template+0x269/0x330 [ 895.049317][T15970] ? __x64_sys_sendmsg+0x80/0x80 [ 895.054306][T15970] ? lockdep_hardirqs_on+0x98/0x150 [ 895.059539][T15970] do_syscall_64+0x55/0xb0 [ 895.063984][T15970] ? clear_bhb_loop+0x40/0x90 [ 895.068686][T15970] ? clear_bhb_loop+0x40/0x90 [ 895.073392][T15970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 895.079335][T15970] RIP: 0033:0x7fdd5a59ce59 [ 895.083776][T15970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.103410][T15970] RSP: 002b:00007fdd587f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 895.111867][T15970] RAX: ffffffffffffffda RBX: 00007fdd5a815fa0 RCX: 00007fdd5a59ce59 [ 895.119864][T15970] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 895.127876][T15970] RBP: 00007fdd587f6090 R08: 0000000000000000 R09: 0000000000000000 [ 895.135887][T15970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 895.143886][T15970] R13: 00007fdd5a816038 R14: 00007fdd5a815fa0 R15: 00007ffc86937288 [ 895.151915][T15970] [ 895.745631][T15979] netlink: 'syz.1.3233': attribute type 9 has an invalid length. [ 895.753636][T15979] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3233'. [ 895.781223][T15980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3232'. [ 896.982679][T15976] gretap0: refused to change device tx_queue_len [ 897.000985][T15980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3232'. [ 897.015689][T15981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3233'. [ 897.063431][T15982] netlink: 'syz.1.3233': attribute type 9 has an invalid length. [ 897.085758][T15982] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3233'. [ 897.567966][T16000] ƒ: renamed from tunl0 (while UP) [ 898.428228][T16017] netlink: 'syz.2.3248': attribute type 21 has an invalid length. [ 898.463461][T16017] IPv6: NLM_F_CREATE should be specified when creating new route [ 898.471320][T16017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 898.478709][T16017] IPv6: NLM_F_CREATE should be set when creating new route [ 898.486103][T16017] IPv6: NLM_F_CREATE should be set when creating new route [ 898.493466][T16017] IPv6: NLM_F_CREATE should be set when creating new route [ 900.468293][T16033] netlink: 'syz.2.3252': attribute type 12 has an invalid length. [ 900.493492][T16033] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3252'. [ 900.721790][T16038] netlink: 'syz.1.3255': attribute type 10 has an invalid length. [ 901.078803][T16049] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3257'. [ 901.164975][T16049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.189210][T16049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.213071][T16049] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 901.234680][T16049] bond0 (unregistering): Released all slaves [ 901.515404][T16059] netlink: 'syz.3.3261': attribute type 21 has an invalid length. [ 901.523830][T16059] IPv6: NLM_F_CREATE should be specified when creating new route [ 901.532714][T16059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 901.540060][T16059] IPv6: NLM_F_CREATE should be set when creating new route [ 901.547361][T16059] IPv6: NLM_F_CREATE should be set when creating new route [ 901.554728][T16059] IPv6: NLM_F_CREATE should be set when creating new route [ 902.045084][T16069] netlink: 'syz.0.3264': attribute type 10 has an invalid length. [ 904.433549][T16083] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3270'. [ 904.657054][T16091] netlink: 'syz.1.3273': attribute type 10 has an invalid length. [ 904.731865][T16095] netlink: 'syz.2.3274': attribute type 21 has an invalid length. [ 904.749527][T16095] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3274'. [ 904.771700][T16095] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3274'. [ 904.782514][T16095] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3274'. [ 904.924074][T16101] netlink: 'syz.1.3276': attribute type 21 has an invalid length. [ 904.932250][T16101] IPv6: NLM_F_CREATE should be specified when creating new route [ 904.965751][T16101] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 904.973056][T16101] IPv6: NLM_F_CREATE should be set when creating new route [ 904.980463][T16101] IPv6: NLM_F_CREATE should be set when creating new route [ 904.987832][T16101] IPv6: NLM_F_CREATE should be set when creating new route [ 906.471140][T16116] netlink: 'syz.2.3282': attribute type 10 has an invalid length. [ 906.559149][T16121] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3284'. [ 906.695125][T16126] netlink: 'syz.0.3285': attribute type 10 has an invalid length. [ 907.066332][T16140] FAULT_INJECTION: forcing a failure. [ 907.066332][T16140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.081324][T16140] CPU: 0 PID: 16140 Comm: syz.0.3292 Not tainted syzkaller #0 [ 907.088844][T16140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 907.098919][T16140] Call Trace: [ 907.102206][T16140] [ 907.105168][T16140] dump_stack_lvl+0x18c/0x250 [ 907.109903][T16140] ? show_regs_print_info+0x20/0x20 [ 907.115117][T16140] ? load_image+0x420/0x420 [ 907.119646][T16140] ? __might_fault+0xaa/0x120 [ 907.124341][T16140] ? __lock_acquire+0x7d80/0x7d80 [ 907.129386][T16140] should_fail_ex+0x394/0x4c0 [ 907.134083][T16140] _copy_from_iter+0x1cd/0x1290 [ 907.139082][T16140] ? __might_fault+0xaa/0x120 [ 907.143778][T16140] ? copyout_mc+0x70/0x70 [ 907.148130][T16140] ? copyout_mc+0x70/0x70 [ 907.152483][T16140] ? __virt_addr_valid+0x10c/0x380 [ 907.157607][T16140] ? page_copy_sane+0x16a/0x270 [ 907.162502][T16140] copy_page_from_iter+0x7b/0x100 [ 907.167548][T16140] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 907.173384][T16140] unix_stream_sendmsg+0x562/0xbf0 [ 907.178638][T16140] ? unix_show_fdinfo+0x280/0x280 [ 907.183673][T16140] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 907.190109][T16140] ? aa_sock_msg_perm+0x94/0x150 [ 907.195072][T16140] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 907.200391][T16140] ? security_socket_sendmsg+0x80/0xa0 [ 907.205864][T16140] sock_write_iter+0x2dc/0x420 [ 907.210644][T16140] ? sock_read_iter+0x3f0/0x3f0 [ 907.215540][T16140] ? common_file_perm+0x198/0x1f0 [ 907.220588][T16140] vfs_write+0x474/0x9a0 [ 907.224863][T16140] ? file_end_write+0x250/0x250 [ 907.229742][T16140] ? __fget_files+0x3fc/0x460 [ 907.234455][T16140] ? __fdget_pos+0x1d8/0x330 [ 907.239099][T16140] ? ksys_write+0x74/0x260 [ 907.243541][T16140] ksys_write+0x151/0x260 [ 907.247885][T16140] ? __ia32_sys_read+0x90/0x90 [ 907.252673][T16140] ? trace_sys_enter+0x1f/0x80 [ 907.257485][T16140] do_syscall_64+0x55/0xb0 [ 907.261933][T16140] ? clear_bhb_loop+0x40/0x90 [ 907.266656][T16140] ? clear_bhb_loop+0x40/0x90 [ 907.271354][T16140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 907.277284][T16140] RIP: 0033:0x7f555dd9ce59 [ 907.281716][T16140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.301434][T16140] RSP: 002b:00007f555eceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 907.309866][T16140] RAX: ffffffffffffffda RBX: 00007f555e015fa0 RCX: 00007f555dd9ce59 [ 907.317871][T16140] RDX: 000000011ffffce1 RSI: 0000200000000080 RDI: 0000000000000003 [ 907.325955][T16140] RBP: 00007f555eceb090 R08: 0000000000000000 R09: 0000000000000000 [ 907.333944][T16140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 907.341948][T16140] R13: 00007f555e016038 R14: 00007f555e015fa0 R15: 00007ffc0de88cb8 [ 907.349959][T16140] [ 907.563149][T16146] netlink: 'syz.3.3293': attribute type 10 has an invalid length. [ 907.728788][T16149] netlink: 'syz.3.3295': attribute type 39 has an invalid length. [ 907.785950][T16151] netlink: 'syz.0.3296': attribute type 1 has an invalid length. [ 907.795413][T16151] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.3296'. [ 908.063493][T16158] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3297'. [ 908.358078][T16168] netlink: 'syz.3.3299': attribute type 10 has an invalid length. [ 909.106371][T16199] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3310'. [ 909.470529][T16210] FAULT_INJECTION: forcing a failure. [ 909.470529][T16210] name failslab, interval 1, probability 0, space 0, times 0 [ 909.484385][T16210] CPU: 0 PID: 16210 Comm: syz.0.3316 Not tainted syzkaller #0 [ 909.491895][T16210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 909.502095][T16210] Call Trace: [ 909.505405][T16210] [ 909.508367][T16210] dump_stack_lvl+0x18c/0x250 [ 909.513090][T16210] ? show_regs_print_info+0x20/0x20 [ 909.518330][T16210] ? load_image+0x420/0x420 [ 909.522973][T16210] ? __asan_memset+0x22/0x40 [ 909.527603][T16210] should_fail_ex+0x394/0x4c0 [ 909.532352][T16210] should_failslab+0x9/0x20 [ 909.536902][T16210] slab_pre_alloc_hook+0x59/0x300 [ 909.541988][T16210] ? __debug_object_init+0xec/0x450 [ 909.547259][T16210] kmem_cache_alloc+0x5a/0x2c0 [ 909.552052][T16210] ? slab_build_skb+0x28/0x3e0 [ 909.556833][T16210] slab_build_skb+0x28/0x3e0 [ 909.561446][T16210] bpf_prog_test_run_skb+0x38f/0x18f0 [ 909.566853][T16210] ? lockdep_hardirqs_on+0x98/0x150 [ 909.572087][T16210] ? cpu_online+0x60/0x60 [ 909.576436][T16210] bpf_prog_test_run+0x31f/0x390 [ 909.581406][T16210] __sys_bpf+0x49d/0x890 [ 909.585671][T16210] ? bpf_link_show_fdinfo+0x390/0x390 [ 909.591076][T16210] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 909.597276][T16210] __x64_sys_bpf+0x7c/0x90 [ 909.601724][T16210] do_syscall_64+0x55/0xb0 [ 909.606170][T16210] ? clear_bhb_loop+0x40/0x90 [ 909.610870][T16210] ? clear_bhb_loop+0x40/0x90 [ 909.615563][T16210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.621478][T16210] RIP: 0033:0x7f555dd9ce59 [ 909.625911][T16210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.645553][T16210] RSP: 002b:00007f555eceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 909.653983][T16210] RAX: ffffffffffffffda RBX: 00007f555e015fa0 RCX: 00007f555dd9ce59 [ 909.661967][T16210] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 909.669966][T16210] RBP: 00007f555eceb090 R08: 0000000000000000 R09: 0000000000000000 [ 909.677947][T16210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.685925][T16210] R13: 00007f555e016038 R14: 00007f555e015fa0 R15: 00007ffc0de88cb8 [ 909.693916][T16210] [ 909.760844][T16212] netlink: 2220 bytes leftover after parsing attributes in process `syz.1.3317'. [ 910.125069][T16205] FAULT_INJECTION: forcing a failure. [ 910.125069][T16205] name fail_futex, interval 1, probability 0, space 0, times 1 [ 910.138291][T16205] CPU: 0 PID: 16205 Comm: syz.3.3314 Not tainted syzkaller #0 [ 910.145815][T16205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 910.155906][T16205] Call Trace: [ 910.159192][T16205] [ 910.162126][T16205] dump_stack_lvl+0x18c/0x250 [ 910.166845][T16205] ? show_regs_print_info+0x20/0x20 [ 910.172096][T16205] ? load_image+0x420/0x420 [ 910.176615][T16205] ? __lock_acquire+0x1336/0x7d80 [ 910.181651][T16205] should_fail_ex+0x394/0x4c0 [ 910.186360][T16205] get_futex_key+0x136/0x1030 [ 910.191253][T16205] ? futex_setup_timer+0xc0/0xc0 [ 910.196216][T16205] futex_wake+0x127/0x4f0 [ 910.200554][T16205] ? futex_wake_mark+0x150/0x150 [ 910.205517][T16205] do_futex+0x35d/0x3e0 [ 910.209692][T16205] ? __might_fault+0xaa/0x120 [ 910.214379][T16205] ? __ia32_sys_get_robust_list+0x110/0x110 [ 910.220303][T16205] ? __might_fault+0xc6/0x120 [ 910.225039][T16205] mm_release+0x184/0x3a0 [ 910.229392][T16205] ? exit_mm_release+0x30/0x30 [ 910.234157][T16205] ? lockdep_hardirqs_on+0x98/0x150 [ 910.239370][T16205] exit_mm+0xa4/0x340 [ 910.243377][T16205] ? do_exit+0x2530/0x2530 [ 910.247868][T16205] ? taskstats_exit+0x359/0x9e0 [ 910.252773][T16205] do_exit+0x909/0x2530 [ 910.256957][T16205] ? put_task_struct+0xc0/0xc0 [ 910.261758][T16205] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 910.267764][T16205] ? get_signal+0x100e/0x1390 [ 910.272447][T16205] ? lock_chain_count+0x20/0x20 [ 910.277302][T16205] do_group_exit+0x22d/0x2f0 [ 910.281898][T16205] ? lockdep_hardirqs_on+0x98/0x150 [ 910.287118][T16205] get_signal+0x12a6/0x1390 [ 910.291642][T16205] arch_do_signal_or_restart+0xc2/0x7b0 [ 910.297241][T16205] ? get_sigframe_size+0x20/0x20 [ 910.302198][T16205] ? exit_to_user_mode_loop+0x3b/0x110 [ 910.307662][T16205] exit_to_user_mode_loop+0x70/0x110 [ 910.312958][T16205] exit_to_user_mode_prepare+0xee/0x180 [ 910.318512][T16205] syscall_exit_to_user_mode+0x1a/0x50 [ 910.323987][T16205] do_syscall_64+0x61/0xb0 [ 910.328428][T16205] ? clear_bhb_loop+0x40/0x90 [ 910.333120][T16205] ? clear_bhb_loop+0x40/0x90 [ 910.337813][T16205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 910.343721][T16205] RIP: 0033:0x7f71abb9ce59 [ 910.348171][T16205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.367810][T16205] RSP: 002b:00007f71ac9f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 910.376244][T16205] RAX: fffffffffffffe00 RBX: 00007f71abe16090 RCX: 00007f71abb9ce59 [ 910.384225][T16205] RDX: 0000000000000010 RSI: 0000200000002480 RDI: 000000000000000c [ 910.392229][T16205] RBP: 00007f71ac9f0090 R08: 0000000000000000 R09: 0000000000000000 [ 910.400207][T16205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.408180][T16205] R13: 00007f71abe16128 R14: 00007f71abe16090 R15: 00007ffe761c8068 [ 910.416167][T16205] [ 911.409271][T16250] syzkaller0: entered promiscuous mode [ 911.415018][T16250] syzkaller0: entered allmulticast mode [ 911.435274][T16249] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 65487 [ 911.899604][T16266] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3338'. [ 911.910442][T16266] bridge_slave_0: entered allmulticast mode [ 911.981000][T16275] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3342'. [ 912.018115][T16273] netlink: 'syz.1.3341': attribute type 10 has an invalid length. [ 912.501905][T16288] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.3345'. [ 912.606337][T16288] netlink: 'syz.3.3345': attribute type 33 has an invalid length. [ 912.679925][T16288] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3345'. [ 913.964288][T16306] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3351'. [ 914.121293][T16306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.163027][T16306] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 914.196371][T16306] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 914.206929][T16306] bond0 (unregistering): Released all slaves [ 916.045708][T16334] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 916.268156][T16340] FAULT_INJECTION: forcing a failure. [ 916.268156][T16340] name failslab, interval 1, probability 0, space 0, times 0 [ 916.330267][T16340] CPU: 0 PID: 16340 Comm: syz.0.3363 Not tainted syzkaller #0 [ 916.337788][T16340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 916.347888][T16340] Call Trace: [ 916.351221][T16340] [ 916.354194][T16340] dump_stack_lvl+0x18c/0x250 [ 916.358969][T16340] ? show_regs_print_info+0x20/0x20 [ 916.364221][T16340] ? load_image+0x420/0x420 [ 916.368865][T16340] ? __might_sleep+0xe0/0xe0 [ 916.373492][T16340] ? __lock_acquire+0x7d80/0x7d80 [ 916.378568][T16340] should_fail_ex+0x394/0x4c0 [ 916.383306][T16340] should_failslab+0x9/0x20 [ 916.387846][T16340] slab_pre_alloc_hook+0x59/0x300 [ 916.392924][T16340] ? __request_module+0x2ed/0x600 [ 916.397978][T16340] ? __request_module+0x2ed/0x600 [ 916.403038][T16340] __kmem_cache_alloc_node+0x53/0x250 [ 916.408466][T16340] ? __request_module+0x2ed/0x600 [ 916.413533][T16340] __kmalloc_node_track_caller+0xa4/0x230 [ 916.419311][T16340] kstrdup+0x3b/0x80 [ 916.423246][T16340] __request_module+0x2ed/0x600 [ 916.428126][T16340] ? module_enforce_rwx_sections+0x150/0x150 [ 916.434140][T16340] ? dev_load+0x21/0x1f0 [ 916.438440][T16340] ? bpf_lsm_capable+0x9/0x10 [ 916.443177][T16340] ? dev_load+0x21/0x1f0 [ 916.447478][T16340] dev_load+0x18b/0x1f0 [ 916.451679][T16340] dev_ioctl+0x837/0x1140 [ 916.456148][T16340] sock_ioctl+0x74c/0x7e0 [ 916.460540][T16340] ? sock_poll+0x3e0/0x3e0 [ 916.464999][T16340] ? bpf_lsm_file_ioctl+0x9/0x10 [ 916.470064][T16340] ? security_file_ioctl+0x80/0xa0 [ 916.475233][T16340] ? sock_poll+0x3e0/0x3e0 [ 916.479684][T16340] __se_sys_ioctl+0xfd/0x170 [ 916.484332][T16340] do_syscall_64+0x55/0xb0 [ 916.488779][T16340] ? clear_bhb_loop+0x40/0x90 [ 916.493482][T16340] ? clear_bhb_loop+0x40/0x90 [ 916.498234][T16340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 916.504193][T16340] RIP: 0033:0x7f555dd9ce59 [ 916.508647][T16340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.528287][T16340] RSP: 002b:00007f555eceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 916.536827][T16340] RAX: ffffffffffffffda RBX: 00007f555e015fa0 RCX: 00007f555dd9ce59 [ 916.544841][T16340] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000009 [ 916.552839][T16340] RBP: 00007f555eceb090 R08: 0000000000000000 R09: 0000000000000000 [ 916.560874][T16340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.568882][T16340] R13: 00007f555e016038 R14: 00007f555e015fa0 R15: 00007ffc0de88cb8 [ 916.576909][T16340] [ 921.902134][T16400] FAULT_INJECTION: forcing a failure. [ 921.902134][T16400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 921.917350][T16400] CPU: 0 PID: 16400 Comm: syz.2.3383 Not tainted syzkaller #0 [ 921.924873][T16400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 921.934974][T16400] Call Trace: [ 921.938326][T16400] [ 921.941328][T16400] dump_stack_lvl+0x18c/0x250 [ 921.946074][T16400] ? show_regs_print_info+0x20/0x20 [ 921.951325][T16400] ? load_image+0x420/0x420 [ 921.955877][T16400] ? __lock_acquire+0x7d80/0x7d80 [ 921.960941][T16400] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 921.966632][T16400] should_fail_ex+0x394/0x4c0 [ 921.971370][T16400] _copy_from_user+0x2f/0xe0 [ 921.976009][T16400] bpf_prog_test_run_skb+0x267/0x18f0 [ 921.981434][T16400] ? __fget_files+0x28/0x460 [ 921.986102][T16400] ? __fget_files+0x3fc/0x460 [ 921.990886][T16400] ? cpu_online+0x60/0x60 [ 921.995263][T16400] bpf_prog_test_run+0x31f/0x390 [ 922.000251][T16400] __sys_bpf+0x49d/0x890 [ 922.004537][T16400] ? bpf_link_show_fdinfo+0x390/0x390 [ 922.010000][T16400] ? lock_chain_count+0x20/0x20 [ 922.015021][T16400] __x64_sys_bpf+0x7c/0x90 [ 922.019486][T16400] do_syscall_64+0x55/0xb0 [ 922.023955][T16400] ? clear_bhb_loop+0x40/0x90 [ 922.028668][T16400] ? clear_bhb_loop+0x40/0x90 [ 922.033410][T16400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 922.039389][T16400] RIP: 0033:0x7fdb4759ce59 [ 922.043854][T16400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.063509][T16400] RSP: 002b:00007fdb4842a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 922.071970][T16400] RAX: ffffffffffffffda RBX: 00007fdb47815fa0 RCX: 00007fdb4759ce59 [ 922.080001][T16400] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 922.088017][T16400] RBP: 00007fdb4842a090 R08: 0000000000000000 R09: 0000000000000000 [ 922.096037][T16400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.104036][T16400] R13: 00007fdb47816038 R14: 00007fdb47815fa0 R15: 00007ffcd0734f88 [ 922.112112][T16400] [ 923.047527][T16415] netlink: 'syz.2.3387': attribute type 10 has an invalid length. [ 924.040567][T16430] syzkaller0: entered promiscuous mode [ 924.046467][T16430] syzkaller0: entered allmulticast mode [ 924.579268][T16444] FAULT_INJECTION: forcing a failure. [ 924.579268][T16444] name failslab, interval 1, probability 0, space 0, times 0 [ 924.595766][T16444] CPU: 0 PID: 16444 Comm: syz.2.3397 Not tainted syzkaller #0 [ 924.603275][T16444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 924.613363][T16444] Call Trace: [ 924.616690][T16444] [ 924.619623][T16444] dump_stack_lvl+0x18c/0x250 [ 924.624325][T16444] ? show_regs_print_info+0x20/0x20 [ 924.629539][T16444] ? load_image+0x420/0x420 [ 924.634048][T16444] ? __might_sleep+0xe0/0xe0 [ 924.638659][T16444] ? __lock_acquire+0x7d80/0x7d80 [ 924.643712][T16444] ? tcp_current_mss+0x6e0/0x6e0 [ 924.648664][T16444] should_fail_ex+0x394/0x4c0 [ 924.653400][T16444] should_failslab+0x9/0x20 [ 924.657918][T16444] slab_pre_alloc_hook+0x59/0x300 [ 924.662962][T16444] kmem_cache_alloc_node+0x5e/0x310 [ 924.668164][T16444] ? __alloc_skb+0x103/0x2c0 [ 924.672769][T16444] __alloc_skb+0x103/0x2c0 [ 924.677194][T16444] tcp_stream_alloc_skb+0x3d/0x330 [ 924.682309][T16444] tcp_sendmsg_locked+0xcf0/0x4ab0 [ 924.687443][T16444] ? iovec_from_user+0x87/0x240 [ 924.692330][T16444] ? mark_lock+0x94/0x320 [ 924.696691][T16444] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 924.702682][T16444] ? tcp_set_state+0x6c0/0x6c0 [ 924.707469][T16444] tcp_sendmsg+0x2f/0x50 [ 924.711712][T16444] ? inet_send_prepare+0x250/0x250 [ 924.716856][T16444] ____sys_sendmsg+0x61b/0x980 [ 924.721636][T16444] ? __asan_memset+0x22/0x40 [ 924.726257][T16444] ? __sys_sendmsg_sock+0x30/0x30 [ 924.731292][T16444] ? __import_iovec+0x3fa/0x850 [ 924.736155][T16444] ? import_iovec+0x73/0xa0 [ 924.740665][T16444] ___sys_sendmsg+0x2a6/0x360 [ 924.745352][T16444] ? get_pid_task+0x20/0x1e0 [ 924.749977][T16444] ? __sys_sendmsg+0x2b0/0x2b0 [ 924.754758][T16444] ? __lock_acquire+0x7d80/0x7d80 [ 924.759796][T16444] __se_sys_sendmsg+0x1d0/0x2c0 [ 924.764651][T16444] ? __x64_sys_sendmsg+0x80/0x80 [ 924.769623][T16444] ? lockdep_hardirqs_on+0x98/0x150 [ 924.774826][T16444] do_syscall_64+0x55/0xb0 [ 924.779243][T16444] ? clear_bhb_loop+0x40/0x90 [ 924.783924][T16444] ? clear_bhb_loop+0x40/0x90 [ 924.788597][T16444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 924.794501][T16444] RIP: 0033:0x7fdb4759ce59 [ 924.798919][T16444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.818526][T16444] RSP: 002b:00007fdb4842a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 924.826963][T16444] RAX: ffffffffffffffda RBX: 00007fdb47815fa0 RCX: 00007fdb4759ce59 [ 924.834934][T16444] RDX: 00000000000012cd RSI: 0000200000000040 RDI: 0000000000000003 [ 924.842902][T16444] RBP: 00007fdb4842a090 R08: 0000000000000000 R09: 0000000000000000 [ 924.850899][T16444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.858871][T16444] R13: 00007fdb47816038 R14: 00007fdb47815fa0 R15: 00007ffcd0734f88 [ 924.866851][T16444] [ 926.079538][T16434] netlink: 'syz.3.3395': attribute type 64 has an invalid length. [ 926.553127][T16459] netlink: 'syz.3.3402': attribute type 10 has an invalid length. [ 927.085312][T16468] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3404'. [ 929.931776][T16472] netlink: 'syz.2.3407': attribute type 10 has an invalid length. [ 930.244756][T16486] netlink: 'syz.0.3413': attribute type 10 has an invalid length. [ 930.601427][T16490] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.3415'. [ 930.864573][T16497] netlink: 'syz.3.3417': attribute type 10 has an invalid length. [ 930.966194][T16499] netlink: 'syz.2.3418': attribute type 10 has an invalid length. [ 931.051941][T16507] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3420'. [ 931.711182][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.719998][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.985386][T16514] FAULT_INJECTION: forcing a failure. [ 933.985386][T16514] name failslab, interval 1, probability 0, space 0, times 0 [ 934.018732][T16514] CPU: 0 PID: 16514 Comm: syz.2.3421 Not tainted syzkaller #0 [ 934.026313][T16514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 934.036449][T16514] Call Trace: [ 934.039804][T16514] [ 934.042809][T16514] dump_stack_lvl+0x18c/0x250 [ 934.047686][T16514] ? show_regs_print_info+0x20/0x20 [ 934.053005][T16514] ? load_image+0x420/0x420 [ 934.057605][T16514] ? __lock_acquire+0x7d80/0x7d80 [ 934.062746][T16514] should_fail_ex+0x394/0x4c0 [ 934.067553][T16514] should_failslab+0x9/0x20 [ 934.072127][T16514] slab_pre_alloc_hook+0x59/0x300 [ 934.077290][T16514] kmem_cache_alloc_lru+0x4d/0x2b0 [ 934.082485][T16514] ? iget_locked+0x205/0x8c0 [ 934.087170][T16514] iget_locked+0x205/0x8c0 [ 934.091720][T16514] kernfs_get_inode+0x4f/0x6e0 [ 934.096627][T16514] cgroup_attach_permissions+0x272/0x9e0 [ 934.102374][T16514] __cgroup_procs_write+0x1e5/0x350 [ 934.107678][T16514] cgroup_procs_write+0x27/0x50 [ 934.112597][T16514] ? cgroup_procs_next+0xa0/0xa0 [ 934.117635][T16514] cgroup_file_write+0x2cd/0x6a0 [ 934.122649][T16514] ? kernfs_fop_write_iter+0x1dc/0x520 [ 934.128215][T16514] ? cgroup_seqfile_stop+0xd0/0xd0 [ 934.133408][T16514] ? __virt_addr_valid+0x10c/0x380 [ 934.138592][T16514] ? __virt_addr_valid+0x10c/0x380 [ 934.143824][T16514] ? cgroup_seqfile_stop+0xd0/0xd0 [ 934.149000][T16514] kernfs_fop_write_iter+0x3a4/0x520 [ 934.154378][T16514] vfs_write+0x474/0x9a0 [ 934.158810][T16514] ? file_end_write+0x250/0x250 [ 934.163756][T16514] ? __fget_files+0x3fc/0x460 [ 934.168552][T16514] ? __fdget_pos+0x2a3/0x330 [ 934.173215][T16514] ? ksys_write+0x74/0x260 [ 934.177729][T16514] ksys_write+0x151/0x260 [ 934.182163][T16514] ? __ia32_sys_read+0x90/0x90 [ 934.187009][T16514] ? lockdep_hardirqs_on+0x98/0x150 [ 934.192297][T16514] do_syscall_64+0x55/0xb0 [ 934.196787][T16514] ? clear_bhb_loop+0x40/0x90 [ 934.201549][T16514] ? clear_bhb_loop+0x40/0x90 [ 934.206304][T16514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 934.212263][T16514] RIP: 0033:0x7fdb4759ce59 [ 934.216840][T16514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.236644][T16514] RSP: 002b:00007fdb4842a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 934.245144][T16514] RAX: ffffffffffffffda RBX: 00007fdb47815fa0 RCX: 00007fdb4759ce59 [ 934.253175][T16514] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 000000000000000f [ 934.261214][T16514] RBP: 00007fdb4842a090 R08: 0000000000000000 R09: 0000000000000000 [ 934.269265][T16514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.277317][T16514] R13: 00007fdb47816038 R14: 00007fdb47815fa0 R15: 00007ffcd0734f88 [ 934.285417][T16514] [ 934.434095][T16517] netlink: 'syz.1.3422': attribute type 1 has an invalid length. [ 934.442132][T16517] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.3422'. [ 935.147321][T16527] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.3426'. [ 935.302281][T16531] netlink: 'syz.1.3428': attribute type 10 has an invalid length. [ 935.520182][T16535] netlink: 'syz.1.3429': attribute type 10 has an invalid length. [ 937.385288][T16540] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3431'. [ 938.349714][T16561] netlink: 'syz.1.3440': attribute type 16 has an invalid length. [ 938.383469][T16561] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3440'. [ 938.417958][T16564] netlink: 'syz.0.3439': attribute type 10 has an invalid length. [ 938.923950][T16568] netlink: 'syz.0.3441': attribute type 10 has an invalid length. [ 939.296410][T16576] netlink: 'syz.3.3443': attribute type 16 has an invalid length. [ 939.314900][T16576] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3443'. [ 939.358853][T16577] netlink: 'syz.3.3443': attribute type 2 has an invalid length. [ 939.506183][T16583] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3444'. [ 941.601978][T16588] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3445'. [ 941.834020][T12714] Bluetooth: hci4: ISO packet for unknown connection handle 4095 [ 941.986592][T16610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3454'. [ 942.055522][T16607] netlink: 'syz.3.3453': attribute type 10 has an invalid length. [ 942.161223][T16612] netlink: 'syz.0.3452': attribute type 10 has an invalid length. [ 942.695182][T16633] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3459'. [ 942.767044][T16636] netlink: 'syz.3.3462': attribute type 10 has an invalid length. [ 942.800367][T16636] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3462'. [ 945.970035][T16644] netlink: 'syz.2.3465': attribute type 10 has an invalid length. [ 946.065135][T16648] netlink: 'syz.3.3466': attribute type 10 has an invalid length. [ 946.179346][T16650] netlink: 'syz.2.3467': attribute type 2 has an invalid length. [ 946.188384][T16650] netlink: 'syz.2.3467': attribute type 1 has an invalid length. [ 946.198376][T16650] netlink: 'syz.2.3467': attribute type 2 has an invalid length. [ 946.210039][T16650] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.3467'. [ 946.233106][T16653] FAULT_INJECTION: forcing a failure. [ 946.233106][T16653] name failslab, interval 1, probability 0, space 0, times 0 [ 946.263457][T16653] CPU: 1 PID: 16653 Comm: syz.1.3468 Not tainted syzkaller #0 [ 946.270991][T16653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 946.281085][T16653] Call Trace: [ 946.284415][T16653] [ 946.287398][T16653] dump_stack_lvl+0x18c/0x250 [ 946.292130][T16653] ? show_regs_print_info+0x20/0x20 [ 946.297367][T16653] ? load_image+0x420/0x420 [ 946.301903][T16653] ? __might_sleep+0xe0/0xe0 [ 946.306539][T16653] ? __lock_acquire+0x7d80/0x7d80 [ 946.311595][T16653] should_fail_ex+0x394/0x4c0 [ 946.316313][T16653] should_failslab+0x9/0x20 [ 946.320880][T16653] slab_pre_alloc_hook+0x59/0x300 [ 946.325945][T16653] ? __get_vm_area_node+0x125/0x370 [ 946.331173][T16653] __kmem_cache_alloc_node+0x53/0x250 [ 946.336579][T16653] ? __get_vm_area_node+0x125/0x370 [ 946.341814][T16653] kmalloc_node_trace+0x26/0xe0 [ 946.346698][T16653] __get_vm_area_node+0x125/0x370 [ 946.351778][T16653] __vmalloc_node_range+0x36f/0x1320 [ 946.357098][T16653] ? netlink_sendmsg+0x602/0xbf0 [ 946.362085][T16653] ? netlink_insert+0x1094/0x1390 [ 946.367150][T16653] ? netlink_insert+0x2ba/0x1390 [ 946.372127][T16653] ? free_vm_area+0x50/0x50 [ 946.376667][T16653] ? netlink_sendmsg+0x602/0xbf0 [ 946.381648][T16653] vmalloc+0x79/0x90 [ 946.385568][T16653] ? netlink_sendmsg+0x602/0xbf0 [ 946.390521][T16653] netlink_sendmsg+0x602/0xbf0 [ 946.395304][T16653] ? netlink_getsockopt+0x590/0x590 [ 946.400524][T16653] ? aa_sock_msg_perm+0x94/0x150 [ 946.405498][T16653] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 946.410826][T16653] ? security_socket_sendmsg+0x80/0xa0 [ 946.416313][T16653] ? netlink_getsockopt+0x590/0x590 [ 946.421542][T16653] ____sys_sendmsg+0x61b/0x980 [ 946.426339][T16653] ? __asan_memset+0x22/0x40 [ 946.430956][T16653] ? __sys_sendmsg_sock+0x30/0x30 [ 946.436003][T16653] ? __import_iovec+0x5f2/0x850 [ 946.440892][T16653] ? import_iovec+0x73/0xa0 [ 946.445424][T16653] ___sys_sendmsg+0x2a6/0x360 [ 946.450145][T16653] ? __sys_sendmsg+0x2b0/0x2b0 [ 946.454948][T16653] ? ktime_get+0x7f/0x280 [ 946.459320][T16653] __se_sys_sendmsg+0x1d0/0x2c0 [ 946.464195][T16653] ? perf_trace_preemptirq_template+0x269/0x330 [ 946.470469][T16653] ? __x64_sys_sendmsg+0x80/0x80 [ 946.475472][T16653] ? lockdep_hardirqs_on+0x98/0x150 [ 946.480723][T16653] do_syscall_64+0x55/0xb0 [ 946.485163][T16653] ? clear_bhb_loop+0x40/0x90 [ 946.489864][T16653] ? clear_bhb_loop+0x40/0x90 [ 946.494571][T16653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 946.500491][T16653] RIP: 0033:0x7fdd5a59ce59 [ 946.504952][T16653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.524859][T16653] RSP: 002b:00007fdd587f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 946.533320][T16653] RAX: ffffffffffffffda RBX: 00007fdd5a815fa0 RCX: 00007fdd5a59ce59 [ 946.541308][T16653] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 946.549295][T16653] RBP: 00007fdd587f6090 R08: 0000000000000000 R09: 0000000000000000 [ 946.557299][T16653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 946.565285][T16653] R13: 00007fdd5a816038 R14: 00007fdd5a815fa0 R15: 00007ffc86937288 [ 946.573291][T16653] [ 946.583617][T16653] warn_alloc: 1 callbacks suppressed [ 946.583647][T16653] syz.1.3468: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 946.640936][T16653] CPU: 0 PID: 16653 Comm: syz.1.3468 Not tainted syzkaller #0 [ 946.648457][T16653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 946.658552][T16653] Call Trace: [ 946.661877][T16653] [ 946.664852][T16653] dump_stack_lvl+0x18c/0x250 [ 946.669585][T16653] ? show_regs_print_info+0x20/0x20 [ 946.674838][T16653] ? load_image+0x420/0x420 [ 946.679391][T16653] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 946.685861][T16653] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 946.692401][T16653] warn_alloc+0x246/0x340 [ 946.696776][T16653] ? __get_vm_area_node+0x125/0x370 [ 946.702054][T16653] ? zone_watermark_ok_safe+0x230/0x230 [ 946.707668][T16653] ? rcu_is_watching+0x15/0xb0 [ 946.712489][T16653] ? __get_vm_area_node+0x356/0x370 [ 946.718079][T16653] __vmalloc_node_range+0x394/0x1320 [ 946.723404][T16653] ? netlink_insert+0x1094/0x1390 [ 946.728475][T16653] ? netlink_insert+0x2ba/0x1390 [ 946.733453][T16653] ? free_vm_area+0x50/0x50 [ 946.738021][T16653] ? netlink_sendmsg+0x602/0xbf0 [ 946.742992][T16653] vmalloc+0x79/0x90 [ 946.746945][T16653] ? netlink_sendmsg+0x602/0xbf0 [ 946.751918][T16653] netlink_sendmsg+0x602/0xbf0 [ 946.756755][T16653] ? netlink_getsockopt+0x590/0x590 [ 946.762000][T16653] ? aa_sock_msg_perm+0x94/0x150 [ 946.766991][T16653] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 946.772327][T16653] ? security_socket_sendmsg+0x80/0xa0 [ 946.777831][T16653] ? netlink_getsockopt+0x590/0x590 [ 946.783065][T16653] ____sys_sendmsg+0x61b/0x980 [ 946.787870][T16653] ? __asan_memset+0x22/0x40 [ 946.792492][T16653] ? __sys_sendmsg_sock+0x30/0x30 [ 946.797544][T16653] ? __import_iovec+0x5f2/0x850 [ 946.802438][T16653] ? import_iovec+0x73/0xa0 [ 946.806980][T16653] ___sys_sendmsg+0x2a6/0x360 [ 946.811709][T16653] ? __sys_sendmsg+0x2b0/0x2b0 [ 946.816541][T16653] ? ktime_get+0x7f/0x280 [ 946.820961][T16653] __se_sys_sendmsg+0x1d0/0x2c0 [ 946.825861][T16653] ? perf_trace_preemptirq_template+0x269/0x330 [ 946.832146][T16653] ? __x64_sys_sendmsg+0x80/0x80 [ 946.837145][T16653] ? lockdep_hardirqs_on+0x98/0x150 [ 946.842393][T16653] do_syscall_64+0x55/0xb0 [ 946.846938][T16653] ? clear_bhb_loop+0x40/0x90 [ 946.851664][T16653] ? clear_bhb_loop+0x40/0x90 [ 946.856392][T16653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 946.862352][T16653] RIP: 0033:0x7fdd5a59ce59 [ 946.866865][T16653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.886504][T16653] RSP: 002b:00007fdd587f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 946.894963][T16653] RAX: ffffffffffffffda RBX: 00007fdd5a815fa0 RCX: 00007fdd5a59ce59 [ 946.902971][T16653] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 946.910982][T16653] RBP: 00007fdd587f6090 R08: 0000000000000000 R09: 0000000000000000 [ 946.919006][T16653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 946.927030][T16653] R13: 00007fdd5a816038 R14: 00007fdd5a815fa0 R15: 00007ffc86937288 [ 946.935044][T16653] [ 946.982716][T16653] Mem-Info: [ 947.043388][T16653] active_anon:11401 inactive_anon:0 isolated_anon:0 [ 947.043388][T16653] active_file:21381 inactive_file:40313 isolated_file:0 [ 947.043388][T16653] unevictable:768 dirty:319 writeback:0 [ 947.043388][T16653] slab_reclaimable:10778 slab_unreclaimable:92802 [ 947.043388][T16653] mapped:25556 shmem:2131 pagetables:589 [ 947.043388][T16653] sec_pagetables:0 bounce:0 [ 947.043388][T16653] kernel_misc_reclaimable:0 [ 947.043388][T16653] free:1338690 free_pcp:9248 free_cma:0 [ 947.214402][T16653] Node 0 active_anon:47804kB inactive_anon:0kB active_file:85524kB inactive_file:161052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104824kB dirty:1276kB writeback:0kB shmem:9588kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10228kB pagetables:2156kB sec_pagetables:0kB all_unreclaimable? no [ 947.302055][T16653] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 947.409976][T16653] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 947.483347][T16653] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 947.496754][T16653] Node 0 DMA32 free:1450252kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:52068kB inactive_anon:0kB active_file:85524kB inactive_file:160228kB unevictable:1536kB writepending:1276kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:5272kB local_pcp:4516kB free_cma:0kB [ 947.537469][T16653] lowmem_reserve[]: 0 0 0 0 0 [ 947.542314][T16653] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 947.571297][T16653] lowmem_reserve[]: 0 0 0 0 0 [ 947.578288][T16653] Node 1 Normal free:3900856kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13764kB local_pcp:5792kB free_cma:0kB [ 947.608959][T16653] lowmem_reserve[]: 0 0 0 0 0 [ 947.614316][T16653] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 947.629819][T16653] Node 0 DMA32: 1444*4kB (UME) 2217*8kB (UME) 2215*16kB (UME) 1833*32kB (UME) 1773*64kB (UME) 1453*128kB (UME) 779*256kB (UM) 559*512kB (UM) 403*1024kB (UM) 27*2048kB (UME) 19*4096kB (UM) = 1448488kB [ 947.694323][T16653] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 947.706547][T16653] Node 1 Normal: 204*4kB (U) 63*8kB (UE) 35*16kB (UE) 185*32kB (UE) 51*64kB (UME) 13*128kB (UME) 2*256kB (U) 1*512kB (M) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3900856kB [ 947.729070][T16653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 947.739396][T16653] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 947.749900][T16653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 947.818326][T16676] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3473'. [ 947.825709][T16653] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 947.854596][T16653] 66775 total pagecache pages [ 947.858484][T16676] bridge_slave_1: left promiscuous mode [ 947.859302][T16653] 0 pages in swap cache [ 947.859313][T16653] Free swap = 124728kB [ 947.891963][T16653] Total swap = 124996kB [ 947.900242][T16653] 2097051 pages RAM [ 947.908487][T16653] 0 pages HighMem/MovableOnly [ 947.913207][T16653] 416931 pages reserved [ 947.923438][T16653] 0 pages cma reserved [ 948.415125][T16695] netlink: 'syz.0.3477': attribute type 10 has an invalid length. [ 948.608001][T16702] netlink: 'syz.3.3478': attribute type 10 has an invalid length. [ 949.060384][T16711] netlink: 'syz.0.3490': attribute type 10 has an invalid length. [ 949.426378][T16716] netlink: 'syz.0.3492': attribute type 10 has an invalid length. [ 949.614811][T16723] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3484'. [ 949.836829][T16731] netlink: 'syz.0.3496': attribute type 10 has an invalid length. [ 950.547967][T16754] netlink: 'syz.1.3495': attribute type 10 has an invalid length. [ 951.129537][T16771] netlink: 'syz.3.3499': attribute type 10 has an invalid length. [ 952.533667][T16793] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3507'. [ 952.577000][T16793] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3507'. [ 952.901410][T16803] netlink: 'syz.3.3509': attribute type 10 has an invalid length. [ 953.041779][T16806] FAULT_INJECTION: forcing a failure. [ 953.041779][T16806] name failslab, interval 1, probability 0, space 0, times 0 [ 953.083641][T16806] CPU: 1 PID: 16806 Comm: syz.2.3511 Not tainted syzkaller #0 [ 953.091170][T16806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 953.101268][T16806] Call Trace: [ 953.104596][T16806] [ 953.107551][T16806] dump_stack_lvl+0x18c/0x250 [ 953.112275][T16806] ? show_regs_print_info+0x20/0x20 [ 953.117527][T16806] ? load_image+0x420/0x420 [ 953.122076][T16806] ? __might_sleep+0xe0/0xe0 [ 953.126711][T16806] ? __lock_acquire+0x7d80/0x7d80 [ 953.131774][T16806] ? tcp_current_mss+0x6e0/0x6e0 [ 953.136769][T16806] should_fail_ex+0x394/0x4c0 [ 953.141507][T16806] should_failslab+0x9/0x20 [ 953.146053][T16806] slab_pre_alloc_hook+0x59/0x300 [ 953.151130][T16806] kmem_cache_alloc_node+0x5e/0x310 [ 953.156386][T16806] ? __alloc_skb+0x103/0x2c0 [ 953.161023][T16806] __alloc_skb+0x103/0x2c0 [ 953.165485][T16806] tcp_stream_alloc_skb+0x3d/0x330 [ 953.170630][T16806] tcp_sendmsg_locked+0xcf0/0x4ab0 [ 953.175810][T16806] ? mark_lock+0x94/0x320 [ 953.180185][T16806] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 953.186241][T16806] ? tcp_set_state+0x6c0/0x6c0 [ 953.191067][T16806] tcp_sendmsg+0x2f/0x50 [ 953.195365][T16806] ? inet_send_prepare+0x250/0x250 [ 953.200545][T16806] ____sys_sendmsg+0x61b/0x980 [ 953.205386][T16806] ? __asan_memset+0x22/0x40 [ 953.210032][T16806] ? __sys_sendmsg_sock+0x30/0x30 [ 953.215099][T16806] ? __import_iovec+0x3fa/0x850 [ 953.220088][T16806] ? import_iovec+0x73/0xa0 [ 953.224629][T16806] ___sys_sendmsg+0x2a6/0x360 [ 953.229352][T16806] ? __sys_sendmsg+0x2b0/0x2b0 [ 953.234192][T16806] __se_sys_sendmsg+0x1d0/0x2c0 [ 953.239086][T16806] ? __x64_sys_sendmsg+0x80/0x80 [ 953.244104][T16806] do_syscall_64+0x55/0xb0 [ 953.248565][T16806] ? clear_bhb_loop+0x40/0x90 [ 953.253263][T16806] ? clear_bhb_loop+0x40/0x90 [ 953.257967][T16806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 953.263906][T16806] RIP: 0033:0x7fdb4759ce59 [ 953.268364][T16806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.288002][T16806] RSP: 002b:00007fdb4842a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 953.296449][T16806] RAX: ffffffffffffffda RBX: 00007fdb47815fa0 RCX: 00007fdb4759ce59 [ 953.304453][T16806] RDX: 00000000000012cd RSI: 0000200000000040 RDI: 000000000000000d [ 953.312458][T16806] RBP: 00007fdb4842a090 R08: 0000000000000000 R09: 0000000000000000 [ 953.320460][T16806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.328457][T16806] R13: 00007fdb47816038 R14: 00007fdb47815fa0 R15: 00007ffcd0734f88 [ 953.336476][T16806] [ 953.499350][T16810] netlink: 'syz.1.3512': attribute type 10 has an invalid length. [ 953.806543][T16819] netlink: 'syz.1.3515': attribute type 21 has an invalid length. [ 955.818707][T16844] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3523'. [ 955.840016][T16845] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3523'. [ 955.906244][T16842] netlink: 'syz.3.3522': attribute type 10 has an invalid length. [ 955.938045][T16844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.976976][T16844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.061784][T16844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.106164][T16844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.450104][T16852] netlink: 'syz.2.3525': attribute type 21 has an invalid length. [ 956.922090][T16863] netlink: 'syz.2.3529': attribute type 39 has an invalid length. [ 956.960699][T16859] netlink: 'syz.0.3528': attribute type 21 has an invalid length. [ 957.031381][T16865] FAULT_INJECTION: forcing a failure. [ 957.031381][T16865] name failslab, interval 1, probability 0, space 0, times 0 [ 957.044374][T16865] CPU: 1 PID: 16865 Comm: syz.1.3530 Not tainted syzkaller #0 [ 957.051884][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 957.061982][T16865] Call Trace: [ 957.065304][T16865] [ 957.068264][T16865] dump_stack_lvl+0x18c/0x250 [ 957.072992][T16865] ? show_regs_print_info+0x20/0x20 [ 957.078234][T16865] ? load_image+0x420/0x420 [ 957.082779][T16865] ? __local_bh_enable_ip+0x13a/0x1c0 [ 957.088187][T16865] ? lockdep_hardirqs_on+0x98/0x150 [ 957.093439][T16865] should_fail_ex+0x394/0x4c0 [ 957.098173][T16865] should_failslab+0x9/0x20 [ 957.102712][T16865] slab_pre_alloc_hook+0x59/0x300 [ 957.107790][T16865] ? tipc_conn_lookup+0x1e6/0x270 [ 957.112852][T16865] ? tipc_topsrv_queue_evt+0xeb/0x2a0 [ 957.118267][T16865] __kmem_cache_alloc_node+0x53/0x250 [ 957.123693][T16865] ? tipc_topsrv_queue_evt+0xeb/0x2a0 [ 957.129115][T16865] kmalloc_trace+0x2a/0xe0 [ 957.133592][T16865] tipc_topsrv_queue_evt+0xeb/0x2a0 [ 957.138840][T16865] tipc_sub_report_overlap+0x4b8/0x8a0 [ 957.144340][T16865] tipc_nametbl_insert_publ+0xe40/0x1380 [ 957.150035][T16865] tipc_nametbl_publish+0xbd/0x1f0 [ 957.155195][T16865] tipc_sk_publish+0x1cc/0x430 [ 957.160020][T16865] ? __lock_acquire+0x7d80/0x7d80 [ 957.165095][T16865] ? tipc_sk_withdraw+0x640/0x640 [ 957.170171][T16865] ? tipc_nametbl_build_group+0x2e/0x4c0 [ 957.176022][T16865] ? tipc_nametbl_build_group+0x482/0x4c0 [ 957.181786][T16865] ? tipc_nametbl_build_group+0x2e/0x4c0 [ 957.187485][T16865] tipc_sk_join+0x3b0/0x6a0 [ 957.192061][T16865] ? __tipc_sendstream+0x1290/0x1290 [ 957.197399][T16865] tipc_setsockopt+0x73f/0x990 [ 957.202209][T16865] ? tipc_shutdown+0x4d0/0x4d0 [ 957.207024][T16865] ? __fget_files+0x28/0x460 [ 957.211665][T16865] ? aa_sock_opt_perm+0x74/0x100 [ 957.216656][T16865] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 957.222250][T16865] ? security_socket_setsockopt+0x7e/0xa0 [ 957.228063][T16865] ? tipc_shutdown+0x4d0/0x4d0 [ 957.232906][T16865] do_sock_setsockopt+0x175/0x1a0 [ 957.237980][T16865] ? __fdget+0x180/0x210 [ 957.242286][T16865] __x64_sys_setsockopt+0x182/0x200 [ 957.247542][T16865] do_syscall_64+0x55/0xb0 [ 957.252009][T16865] ? clear_bhb_loop+0x40/0x90 [ 957.256744][T16865] ? clear_bhb_loop+0x40/0x90 [ 957.261468][T16865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 957.267426][T16865] RIP: 0033:0x7fdd5a59ce59 [ 957.271890][T16865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.291548][T16865] RSP: 002b:00007fdd587f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 957.300008][T16865] RAX: ffffffffffffffda RBX: 00007fdd5a815fa0 RCX: 00007fdd5a59ce59 [ 957.308015][T16865] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000008 [ 957.316000][T16865] RBP: 00007fdd587f6090 R08: 0000000000000043 R09: 0000000000000000 [ 957.323990][T16865] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000002 [ 957.332005][T16865] R13: 00007fdd5a816038 R14: 00007fdd5a815fa0 R15: 00007ffc86937288 [ 957.340011][T16865] [ 957.605223][T16877] FAULT_INJECTION: forcing a failure. [ 957.605223][T16877] name failslab, interval 1, probability 0, space 0, times 0 [ 957.663305][T16877] CPU: 0 PID: 16877 Comm: syz.2.3533 Not tainted syzkaller #0 [ 957.665050][T16879] netlink: 'syz.0.3534': attribute type 21 has an invalid length. [ 957.670828][T16877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 957.670861][T16877] Call Trace: [ 957.670871][T16877] [ 957.670881][T16877] dump_stack_lvl+0x18c/0x250 [ 957.670918][T16877] ? show_regs_print_info+0x20/0x20 [ 957.688986][T16879] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3534'. [ 957.692080][T16877] ? load_image+0x420/0x420 [ 957.692109][T16877] ? verify_lock_unused+0x140/0x140 [ 957.719957][T16879] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3534'. [ 957.723719][T16877] should_fail_ex+0x394/0x4c0 [ 957.723759][T16877] should_failslab+0x9/0x20 [ 957.723787][T16877] slab_pre_alloc_hook+0x59/0x300 [ 957.723820][T16877] kmem_cache_alloc+0x5a/0x2c0 [ 957.751775][T16877] ? skb_clone+0x1eb/0x370 [ 957.756221][T16877] skb_clone+0x1eb/0x370 [ 957.760479][T16877] __netlink_deliver_tap+0x411/0x7f0 [ 957.765790][T16877] ? netlink_deliver_tap+0x2e/0x1b0 [ 957.771011][T16877] netlink_deliver_tap+0x19c/0x1b0 [ 957.776141][T16877] netlink_unicast+0x77b/0x930 [ 957.780926][T16877] netlink_sendmsg+0x8d0/0xbf0 [ 957.785715][T16877] ? netlink_getsockopt+0x590/0x590 [ 957.790931][T16877] ? aa_sock_msg_perm+0x94/0x150 [ 957.795900][T16877] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 957.801202][T16877] ? security_socket_sendmsg+0x80/0xa0 [ 957.806679][T16877] ? netlink_getsockopt+0x590/0x590 [ 957.811909][T16877] ____sys_sendmsg+0x61b/0x980 [ 957.816702][T16877] ? __asan_memset+0x22/0x40 [ 957.821309][T16877] ? __sys_sendmsg_sock+0x30/0x30 [ 957.826349][T16877] ? __import_iovec+0x5f2/0x850 [ 957.831224][T16877] ? import_iovec+0x73/0xa0 [ 957.835746][T16877] ___sys_sendmsg+0x2a6/0x360 [ 957.840473][T16877] ? get_pid_task+0x20/0x1e0 [ 957.845089][T16877] ? __sys_sendmsg+0x2b0/0x2b0 [ 957.849879][T16877] ? __lock_acquire+0x7d80/0x7d80 [ 957.854952][T16877] __se_sys_sendmsg+0x1d0/0x2c0 [ 957.859825][T16877] ? __x64_sys_sendmsg+0x80/0x80 [ 957.864812][T16877] ? trace_sys_enter+0x1f/0x80 [ 957.869611][T16877] do_syscall_64+0x55/0xb0 [ 957.874064][T16877] ? clear_bhb_loop+0x40/0x90 [ 957.878753][T16877] ? clear_bhb_loop+0x40/0x90 [ 957.883467][T16877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 957.889375][T16877] RIP: 0033:0x7fdb4759ce59 [ 957.893812][T16877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.913442][T16877] RSP: 002b:00007fdb4842a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 957.921892][T16877] RAX: ffffffffffffffda RBX: 00007fdb47815fa0 RCX: 00007fdb4759ce59 [ 957.929895][T16877] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000003 [ 957.937888][T16877] RBP: 00007fdb4842a090 R08: 0000000000000000 R09: 0000000000000000 [ 957.945887][T16877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.953872][T16877] R13: 00007fdb47816038 R14: 00007fdb47815fa0 R15: 00007ffcd0734f88 [ 957.961868][T16877] [ 957.993403][T16877] netlink: 'syz.2.3533': attribute type 46 has an invalid length. [ 958.001299][T16877] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3533'. [ 958.263502][T16888] netlink: 'syz.1.3535': attribute type 10 has an invalid length. [ 958.320018][T16887] netlink: 'syz.0.3537': attribute type 21 has an invalid length. [ 958.810662][T16898] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3541'. [ 958.849387][T16898] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3541'. [ 958.870465][T16902] netlink: 'syz.2.3542': attribute type 9 has an invalid length. [ 958.882282][T16902] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.3542'. [ 959.346663][T16907] netlink: 'syz.1.3544': attribute type 6 has an invalid length. [ 959.366698][T16907] netlink: 'syz.1.3544': attribute type 1 has an invalid length. [ 959.387605][T16907] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.3544'. [ 959.837484][T16920] netlink: 'syz.2.3548': attribute type 21 has an invalid length. [ 960.082290][T16923] netlink: 'syz.1.3549': attribute type 21 has an invalid length. [ 960.202834][T16926] netlink: 'syz.3.3550': attribute type 10 has an invalid length. [ 960.296634][T16928] netlink: 'syz.2.3551': attribute type 10 has an invalid length. [ 960.482473][T16932] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3552'. [ 960.511228][T16932] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.3552'. [ 960.531207][T16932] tipc: Started in network mode [ 960.555032][T16934] FAULT_INJECTION: forcing a failure. [ 960.555032][T16934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 960.593332][T16932] tipc: Node identity b, cluster identity 73 [ 960.599382][T16932] tipc: Node number set to 11 [ 960.608320][T16934] CPU: 1 PID: 16934 Comm: syz.2.3552 Not tainted syzkaller #0 [ 960.615829][T16934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 960.625908][T16934] Call Trace: [ 960.629214][T16934] [ 960.632178][T16934] dump_stack_lvl+0x18c/0x250 [ 960.636889][T16934] ? show_regs_print_info+0x20/0x20 [ 960.642105][T16934] ? load_image+0x420/0x420 [ 960.646630][T16934] ? __might_fault+0xaa/0x120 [ 960.651329][T16934] ? __lock_acquire+0x7d80/0x7d80 [ 960.656391][T16934] should_fail_ex+0x394/0x4c0 [ 960.661108][T16934] _copy_from_user+0x2f/0xe0 [ 960.665722][T16934] kstrtouint_from_user+0xde/0x170 [ 960.670866][T16934] ? kstrtol_from_user+0x190/0x190 [ 960.676016][T16934] proc_fail_nth_write+0x8f/0x250 [ 960.681066][T16934] ? proc_fail_nth_read+0x260/0x260 [ 960.686304][T16934] ? proc_fail_nth_read+0x260/0x260 [ 960.691532][T16934] vfs_write+0x299/0x9a0 [ 960.695804][T16934] ? file_end_write+0x250/0x250 [ 960.700676][T16934] ? __fget_files+0x28/0x460 [ 960.705278][T16934] ? __fget_files+0x3fc/0x460 [ 960.709973][T16934] ? __fdget_pos+0x2a3/0x330 [ 960.714583][T16934] ? ksys_write+0x74/0x260 [ 960.719023][T16934] ksys_write+0x151/0x260 [ 960.723383][T16934] ? __ia32_sys_read+0x90/0x90 [ 960.728184][T16934] ? lockdep_hardirqs_on+0x98/0x150 [ 960.733416][T16934] do_syscall_64+0x55/0xb0 [ 960.737853][T16934] ? clear_bhb_loop+0x40/0x90 [ 960.742547][T16934] ? clear_bhb_loop+0x40/0x90 [ 960.747323][T16934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 960.753238][T16934] RIP: 0033:0x7fdb4755d68e [ 960.757680][T16934] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 960.777379][T16934] RSP: 002b:00007fdb48408fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 960.785801][T16934] RAX: ffffffffffffffda RBX: 00007fdb484096c0 RCX: 00007fdb4755d68e [ 960.793786][T16934] RDX: 0000000000000001 RSI: 00007fdb484090a0 RDI: 000000000000000c [ 960.801772][T16934] RBP: 00007fdb48409090 R08: 0000000000000000 R09: 0000000000000000 [ 960.809764][T16934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.817749][T16934] R13: 00007fdb47816128 R14: 00007fdb47816090 R15: 00007ffcd0734f88 [ 960.825739][T16934] [ 961.040458][T16938] syzkaller0: entered promiscuous mode [ 961.061365][T16938] syzkaller0: entered allmulticast mode [ 961.088337][T16940] netlink: 'syz.0.3554': attribute type 46 has an invalid length. [ 961.096398][T16940] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3554'. [ 964.978929][T16963] netlink: 'syz.3.3560': attribute type 21 has an invalid length. [ 964.987307][T16962] netlink: 'syz.0.3561': attribute type 10 has an invalid length. [ 965.251340][T16975] netlink: 'syz.1.3565': attribute type 10 has an invalid length. [ 965.425114][T16986] netlink: 'syz.2.3569': attribute type 21 has an invalid length. [ 965.433005][T16986] netlink: 'syz.2.3569': attribute type 22 has an invalid length. [ 965.461562][T16986] netlink: 'syz.2.3569': attribute type 13 has an invalid length. [ 965.469662][T16986] netlink: 6188 bytes leftover after parsing attributes in process `syz.2.3569'. [ 965.586887][T16991] netlink: 'syz.1.3571': attribute type 10 has an invalid length. [ 966.061104][T17008] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3579'. [ 966.317077][T12714] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 966.668809][T17021] netlink: 'syz.0.3582': attribute type 6 has an invalid length. [ 966.705727][T17021] netlink: 'syz.0.3582': attribute type 1 has an invalid length. [ 966.731113][T17021] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3582'. [ 966.998641][T17028] netlink: 'syz.3.3586': attribute type 1 has an invalid length. [ 967.013580][T17028] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3586'. [ 967.972552][T12714] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 968.345161][T12714] Bluetooth: hci2: command 0x0406 tx timeout [ 968.518051][T17062] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.3594'. [ 968.562015][T17064] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3602'. [ 968.787228][T17069] FAULT_INJECTION: forcing a failure. [ 968.787228][T17069] name failslab, interval 1, probability 0, space 0, times 0 [ 968.918225][T17069] CPU: 1 PID: 17069 Comm: syz.1.3595 Not tainted syzkaller #0 [ 968.925760][T17069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 968.935850][T17069] Call Trace: [ 968.939151][T17069] [ 968.942103][T17069] dump_stack_lvl+0x18c/0x250 [ 968.946819][T17069] ? show_regs_print_info+0x20/0x20 [ 968.952061][T17069] ? load_image+0x420/0x420 [ 968.956644][T17069] ? __might_sleep+0xe0/0xe0 [ 968.961282][T17069] ? __lock_acquire+0x7d80/0x7d80 [ 968.966358][T17069] should_fail_ex+0x394/0x4c0 [ 968.971090][T17069] should_failslab+0x9/0x20 [ 968.975641][T17069] slab_pre_alloc_hook+0x59/0x300 [ 968.980703][T17069] ? kernfs_fop_write_iter+0x158/0x520 [ 968.986196][T17069] ? kernfs_fop_write_iter+0x158/0x520 [ 968.991696][T17069] __kmem_cache_alloc_node+0x53/0x250 [ 968.997142][T17069] ? kernfs_fop_write_iter+0x158/0x520 [ 969.002654][T17069] __kmalloc+0xa7/0x240 [ 969.006857][T17069] kernfs_fop_write_iter+0x158/0x520 [ 969.012198][T17069] vfs_write+0x474/0x9a0 [ 969.016483][T17069] ? file_end_write+0x250/0x250 [ 969.021385][T17069] ? __fget_files+0x3fc/0x460 [ 969.026123][T17069] ? __fdget_pos+0x2a3/0x330 [ 969.030751][T17069] ? ksys_write+0x74/0x260 [ 969.035187][T17069] ksys_write+0x151/0x260 [ 969.039558][T17069] ? __ia32_sys_read+0x90/0x90 [ 969.044361][T17069] ? lockdep_hardirqs_on+0x98/0x150 [ 969.049602][T17069] do_syscall_64+0x55/0xb0 [ 969.054147][T17069] ? clear_bhb_loop+0x40/0x90 [ 969.058862][T17069] ? clear_bhb_loop+0x40/0x90 [ 969.063569][T17069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 969.069499][T17069] RIP: 0033:0x7fdd5a59ce59 [ 969.073944][T17069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.093594][T17069] RSP: 002b:00007fdd587b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 969.102062][T17069] RAX: ffffffffffffffda RBX: 00007fdd5a816180 RCX: 00007fdd5a59ce59 [ 969.110062][T17069] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000007 [ 969.118059][T17069] RBP: 00007fdd587b4090 R08: 0000000000000000 R09: 0000000000000000 [ 969.126100][T17069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.134102][T17069] R13: 00007fdd5a816218 R14: 00007fdd5a816180 R15: 00007ffc86937288 [ 969.142138][T17069] [ 971.609154][T17078] validate_nla: 2 callbacks suppressed [ 971.609169][T17078] netlink: 'syz.1.3599': attribute type 29 has an invalid length. [ 971.623210][T17076] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3598'. [ 971.643841][T17078] netlink: 'syz.1.3599': attribute type 29 has an invalid length. [ 971.658129][T17078] netlink: 'syz.1.3599': attribute type 29 has an invalid length. [ 971.674953][T17078] netlink: 'syz.1.3599': attribute type 28 has an invalid length. [ 971.682841][T17078] netlink: 'syz.1.3599': attribute type 29 has an invalid length. [ 971.691285][T17078] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3599'. [ 972.116861][T17094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3606'. [ 972.412171][T17097] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3607'. [ 972.469350][T17097] bridge_slave_1: entered promiscuous mode [ 974.429941][T17122] netlink: 'syz.1.3615': attribute type 10 has an invalid length. [ 974.448692][T17122] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3615'. [ 974.478722][T17122] hsr0: entered promiscuous mode [ 974.507013][T17122] bridge0: port 3(hsr0) entered blocking state [ 974.521779][T17122] bridge0: port 3(hsr0) entered disabled state [ 974.530371][T17122] hsr0: entered allmulticast mode [ 974.536652][T17122] hsr_slave_0: entered allmulticast mode [ 974.542805][T17122] hsr_slave_1: entered allmulticast mode [ 974.713301][T17122] bridge0: port 3(hsr0) entered blocking state [ 974.720745][T17122] bridge0: port 3(hsr0) entered forwarding state [ 975.091151][T17145] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3622'. [ 977.264864][T17127] FAULT_INJECTION: forcing a failure. [ 977.264864][T17127] name fail_futex, interval 1, probability 0, space 0, times 0 [ 977.283145][T17127] CPU: 0 PID: 17127 Comm: syz.3.3616 Not tainted syzkaller #0 [ 977.290733][T17127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 977.300821][T17127] Call Trace: [ 977.304150][T17127] [ 977.307106][T17127] dump_stack_lvl+0x18c/0x250 [ 977.311824][T17127] ? show_regs_print_info+0x20/0x20 [ 977.317061][T17127] ? load_image+0x420/0x420 [ 977.321600][T17127] ? __lock_acquire+0x1336/0x7d80 [ 977.326669][T17127] should_fail_ex+0x394/0x4c0 [ 977.331387][T17127] get_futex_key+0x136/0x1030 [ 977.336118][T17127] ? futex_setup_timer+0xc0/0xc0 [ 977.341089][T17127] ? trace_call_bpf+0xc3/0x6c0 [ 977.345892][T17127] ? trace_call_bpf+0x5e9/0x6c0 [ 977.350788][T17127] futex_wake+0x127/0x4f0 [ 977.355167][T17127] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 977.361274][T17127] ? futex_wake_mark+0x150/0x150 [ 977.366266][T17127] do_futex+0x35d/0x3e0 [ 977.370487][T17127] ? __might_fault+0xaa/0x120 [ 977.375211][T17127] ? __ia32_sys_get_robust_list+0x110/0x110 [ 977.381139][T17127] ? __might_fault+0xc6/0x120 [ 977.385849][T17127] mm_release+0x184/0x3a0 [ 977.390207][T17127] ? exit_mm_release+0x30/0x30 [ 977.395000][T17127] ? lockdep_hardirqs_on+0x98/0x150 [ 977.400241][T17127] exit_mm+0xa4/0x340 [ 977.404258][T17127] ? do_exit+0x2530/0x2530 [ 977.408710][T17127] ? taskstats_exit+0x359/0x9e0 [ 977.413611][T17127] do_exit+0x909/0x2530 [ 977.417817][T17127] ? put_task_struct+0xc0/0xc0 [ 977.422614][T17127] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 977.428624][T17127] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 977.435852][T17127] ? lock_chain_count+0x20/0x20 [ 977.440742][T17127] ? _raw_spin_lock_irq+0xbb/0xf0 [ 977.445834][T17127] do_group_exit+0x22d/0x2f0 [ 977.450452][T17127] ? lockdep_hardirqs_on+0x98/0x150 [ 977.455697][T17127] get_signal+0x12a6/0x1390 [ 977.460248][T17127] arch_do_signal_or_restart+0xc2/0x7b0 [ 977.465878][T17127] ? get_sigframe_size+0x20/0x20 [ 977.470877][T17127] ? perf_trace_preemptirq_template+0xac/0x330 [ 977.477090][T17127] ? exit_to_user_mode_loop+0x3b/0x110 [ 977.482674][T17127] exit_to_user_mode_loop+0x70/0x110 [ 977.487996][T17127] exit_to_user_mode_prepare+0xee/0x180 [ 977.493585][T17127] syscall_exit_to_user_mode+0x1a/0x50 [ 977.499093][T17127] do_syscall_64+0x61/0xb0 [ 977.503533][T17127] ? clear_bhb_loop+0x40/0x90 [ 977.508235][T17127] ? clear_bhb_loop+0x40/0x90 [ 977.512944][T17127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 977.518886][T17127] RIP: 0033:0x7f71abb9ce59 [ 977.523345][T17127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.542986][T17127] RSP: 002b:00007f71ac9f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 977.551431][T17127] RAX: fffffffffffffe00 RBX: 00007f71abe16090 RCX: 00007f71abb9ce59 [ 977.559442][T17127] RDX: 0000000000000010 RSI: 0000200000002480 RDI: 000000000000000c [ 977.567452][T17127] RBP: 00007f71ac9f0090 R08: 0000000000000000 R09: 0000000000000000 [ 977.575443][T17127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.583438][T17127] R13: 00007f71abe16128 R14: 00007f71abe16090 R15: 00007ffe761c8068 [ 977.591461][T17127] [ 978.109506][T12714] Bluetooth: hci4: unexpected event 0x04 length: 151 > 10 [ 978.445326][ C0] [ 978.445336][ C0] ================================ [ 978.445343][ C0] WARNING: inconsistent lock state [ 978.445360][ C0] syzkaller #0 Not tainted [ 978.445369][ C0] -------------------------------- [ 978.445374][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 978.445381][ C0] syz.1.3629/17160 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 978.445401][ C0] ffffffff8d2974d8 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x88/0xbd0 [ 978.445457][ C0] {INITIAL USE} state was registered at: [ 978.445464][ C0] lock_acquire+0x19e/0x420 [ 978.445484][ C0] _raw_write_lock_irq+0xaf/0xf0 [ 978.445512][ C0] kernfs_rename_ns+0x5e4/0x830 [ 978.445535][ C0] sysfs_rename_link_ns+0x175/0x1b0 [ 978.445551][ C0] device_rename+0x110/0x1e0 [ 978.445574][ C0] dev_change_name+0x308/0x8e0 [ 978.445596][ C0] do_setlink+0x925/0x3f40 [ 978.445616][ C0] rtnl_newlink+0x1848/0x2170 [ 978.445636][ C0] rtnetlink_rcv_msg+0x843/0xf90 [ 978.445656][ C0] netlink_rcv_skb+0x235/0x4c0 [ 978.445675][ C0] netlink_unicast+0x7b1/0x930 [ 978.445690][ C0] netlink_sendmsg+0x8d0/0xbf0 [ 978.445707][ C0] __sys_sendto+0x4a9/0x6b0 [ 978.445724][ C0] __x64_sys_sendto+0xde/0xf0 [ 978.445742][ C0] do_syscall_64+0x55/0xb0 [ 978.445761][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 978.445793][ C0] irq event stamp: 1814 [ 978.445800][ C0] hardirqs last enabled at (1813): [] syscall_enter_from_user_mode+0x25/0x80 [ 978.445833][ C0] hardirqs last disabled at (1814): [] exc_debug+0x73/0x140 [ 978.445860][ C0] softirqs last enabled at (1780): [] bpf_prog_load+0x1204/0x1610 [ 978.445883][ C0] softirqs last disabled at (1778): [] bpf_ksym_add+0x2c/0x330 [ 978.445907][ C0] [ 978.445907][ C0] other info that might help us debug this: [ 978.445913][ C0] Possible unsafe locking scenario: [ 978.445913][ C0] [ 978.445918][ C0] CPU0 [ 978.445921][ C0] ---- [ 978.445925][ C0] lock(kernfs_rename_lock); [ 978.445937][ C0] [ 978.445940][ C0] lock(kernfs_rename_lock); [ 978.445951][ C0] [ 978.445951][ C0] *** DEADLOCK *** [ 978.445951][ C0] [ 978.445955][ C0] no locks held by syz.1.3629/17160. [ 978.445963][ C0] [ 978.445963][ C0] stack backtrace: [ 978.445969][ C0] CPU: 0 PID: 17160 Comm: syz.1.3629 Not tainted syzkaller #0 [ 978.445987][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 978.445997][ C0] Call Trace: [ 978.446005][ C0] <#DB> [ 978.446012][ C0] dump_stack_lvl+0x18c/0x250 [ 978.446045][ C0] ? show_regs_print_info+0x20/0x20 [ 978.446068][ C0] ? print_usage_bug+0x43d/0x6a0 [ 978.446087][ C0] ? verify_lock_unused+0x15/0x140 [ 978.446107][ C0] lock_acquire+0x2c2/0x420 [ 978.446126][ C0] ? trim_init_extable+0x6f0/0x6f0 [ 978.446150][ C0] ? kernfs_path_from_node+0x88/0xbd0 [ 978.446174][ C0] ? read_lock_is_recursive+0x20/0x20 [ 978.446193][ C0] ? __get_user_nocheck_8+0xa/0x20 [ 978.446215][ C0] ? fixup_exception+0x11bb/0x1d90 [ 978.446241][ C0] ? look_up_lock_class+0x75/0x140 [ 978.446267][ C0] _raw_read_lock_irqsave+0xbc/0x100 [ 978.446293][ C0] ? kernfs_path_from_node+0x88/0xbd0 [ 978.446316][ C0] ? _raw_read_lock+0x50/0x50 [ 978.446339][ C0] ? rcu_is_watching+0x15/0xb0 [ 978.446361][ C0] ? lock_release+0xb5/0x8c0 [ 978.446380][ C0] ? percpu_ref_tryget+0x15/0x180 [ 978.446401][ C0] kernfs_path_from_node+0x88/0xbd0 [ 978.446424][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 978.446444][ C0] ? rcu_is_watching+0x15/0xb0 [ 978.446468][ C0] ? kernfs_name+0x140/0x140 [ 978.446490][ C0] ? get_mem_cgroup_from_mm+0x38/0x290 [ 978.446507][ C0] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 978.446525][ C0] get_mm_memcg_path+0xb9/0x360 [ 978.446550][ C0] __mmap_lock_do_trace_start_locking+0xe6/0x2f0 [ 978.446577][ C0] ? __bpf_trace_mmap_lock_acquire_returned+0x230/0x230 [ 978.446614][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 978.446637][ C0] ? _raw_spin_unlock+0x28/0x40 [ 978.446663][ C0] stack_map_get_build_id_offset+0x5d3/0x720 [ 978.446688][ C0] ? pcpu_freelist_pop+0x12a/0x190 [ 978.446712][ C0] ? __bpf_get_stackid+0x900/0x900 [ 978.446732][ C0] ? perf_prepare_sample+0x1558/0x1db0 [ 978.446755][ C0] __bpf_get_stackid+0x564/0x900 [ 978.446780][ C0] bpf_prog_12712c88fd19bd5b+0x29/0x2d [ 978.446797][ C0] bpf_overflow_handler+0x1fc/0x510 [ 978.446822][ C0] ? look_up_lock_class+0x75/0x140 [ 978.446847][ C0] ? bpf_overflow_handler+0xde/0x510 [ 978.446869][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 978.446892][ C0] ? rcu_is_watching+0x15/0xb0 [ 978.446914][ C0] ? lock_release+0xb5/0x8c0 [ 978.446934][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 978.446955][ C0] __perf_event_overflow+0x461/0x660 [ 978.446977][ C0] perf_swevent_event+0x319/0x570 [ 978.446998][ C0] ? perf_tp_event+0x1550/0x1550 [ 978.447015][ C0] ? trace_call_bpf+0x5e9/0x6c0 [ 978.447040][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 978.447069][ C0] perf_bp_event+0x319/0x430 [ 978.447091][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 978.447110][ C0] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 978.447144][ C0] ? lock_acquire+0x2c2/0x420 [ 978.447165][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 978.447189][ C0] notifier_call_chain+0x18f/0x380 [ 978.447212][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 978.447241][ C0] atomic_notifier_call_chain+0xda/0x180 [ 978.447264][ C0] notify_die+0x145/0x1a0 [ 978.447286][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 978.447311][ C0] ? rcu_is_watching+0x15/0xb0 [ 978.447334][ C0] notify_debug+0x2e/0x50 [ 978.447350][ C0] exc_debug+0xde/0x140 [ 978.447372][ C0] asm_exc_debug+0x1e/0x40 [ 978.447397][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 978.447421][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 978.447435][ C0] RSP: 0018:ffffc9000364fb48 EFLAGS: 00050202 [ 978.447450][ C0] RAX: ffffffff84294d01 RBX: 0000000000000dc0 RCX: 0000000000000b80 [ 978.447462][ C0] RDX: 0000000000000001 RSI: 0000200000000340 RDI: ffff88805ad16340 [ 978.447474][ C0] RBP: 0000000000000100 R08: ffff88805ad16ebf R09: 1ffff1100b5a2dd7 [ 978.447486][ C0] R10: dffffc0000000000 R11: ffffed100b5a2dd8 R12: 0000200000000ec0 [ 978.447498][ C0] R13: 0000000000000dc0 R14: ffff88805ad16100 R15: 0000200000000100 [ 978.447514][ C0] ? rcuref_put_slowpath+0x141/0x150 [ 978.447541][ C0] [ 978.447546][ C0] [ 978.447551][ C0] _copy_from_user+0x8b/0xe0 [ 978.447573][ C0] bpf_test_init+0xde/0x140 [ 978.447598][ C0] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 978.447622][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 978.447646][ C0] ? dev_put+0x80/0x80 [ 978.447673][ C0] ? dev_put+0x80/0x80 [ 978.447695][ C0] bpf_prog_test_run+0x31f/0x390 [ 978.447715][ C0] __sys_bpf+0x49d/0x890 [ 978.447734][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 978.447760][ C0] ? lock_chain_count+0x20/0x20 [ 978.447782][ C0] __x64_sys_bpf+0x7c/0x90 [ 978.447799][ C0] do_syscall_64+0x55/0xb0 [ 978.447818][ C0] ? clear_bhb_loop+0x40/0x90 [ 978.447834][ C0] ? clear_bhb_loop+0x40/0x90 [ 978.447850][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 978.447875][ C0] RIP: 0033:0x7fdd5a59ce59 [ 978.447889][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.447903][ C0] RSP: 002b:00007fdd587f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 978.447920][ C0] RAX: ffffffffffffffda RBX: 00007fdd5a815fa0 RCX: 00007fdd5a59ce59 [ 978.447932][ C0] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 978.447942][ C0] RBP: 00007fdd5a632e6f R08: 0000000000000000 R09: 0000000000000000 [ 978.447952][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 978.447962][ C0] R13: 00007fdd5a816038 R14: 00007fdd5a815fa0 R15: 00007ffc86937288 [ 978.447981][ C0] [ 978.802520][T17166] sctp: [Deprecated]: syz.1.3629 (pid 17166) Use of int in maxseg socket option. [ 978.802520][T17166] Use struct sctp_assoc_value instead [ 980.183329][T12714] Bluetooth: hci4: command 0x0406 tx timeout