last executing test programs: 9.98430389s ago: executing program 1 (id=2859): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), 0x0, 0xa7c, r1, 0x0, 0xfffe}, 0x38) 9.859517104s ago: executing program 1 (id=2860): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800ff207c05e8fe55a10a0015000200142603600e12080005007f370401a800160020000600057c027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 9.694255727s ago: executing program 1 (id=2861): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0x10, 0x7, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r2, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0xe, 0x0, &(0x7f00000004c0)="63eced8e46dc07000000c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, 0x0, 0xff0f000020000080) 9.034221424s ago: executing program 1 (id=2866): socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x1, @perf_config_ext={0x3d95, 0xffffffffffffffff}, 0x400, 0x7, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4000008, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180073c59f88056c04ea000f0000000061121c00040000b650aedccb6c451b00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0xa2, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0xfffffffe, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xe8}, 0x14002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) socket$kcm(0x15, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r3, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) close(r3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000900)="2e00000011008108090f9becdb4cb92e02483137140000f60d000300020450bf0500050012010000000000000000", 0x2e}], 0x1}, 0x20000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 8.575805575s ago: executing program 2 (id=2872): sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="610773490cfcf2c1d66928af92fe23bd7cd59db8d56a49adce3e539f125b83243d02322aaeefae6603de0d6189d7fc2abdd319ae9eb0ced39711a8e16ecb71b7b1fab109e0762026019fd73bacc7dc1dc1e4d92d58052d59d1266a2a58acc1e73d4ef2de3d7fedf2f8ce8df01eed06306d269957ba", 0x75}, {&(0x7f0000000380)="09f42360d3e2eef10a92f57d9df642d650cc7a8f5c19daf2d1ca5c3a3d7fdccc57ea570024a7ec8daa31a477b0d1f58d53fdfdae8ddeea12069b0c3afc289df5b90cd5a841967c2ff4e949fd4e678eb186719212dcedcc9d4e350735646a0026a19887cb82ab15e57f1e35768b6adbc590976da1c81e978b93a162c609fd710f148bb786fce1079ed55d0936e81b047c629f23f79e9b8707bb4c893901e32a1317d926194e96178b34", 0xa9}, {&(0x7f0000000440)="5c88984a2439", 0x6}], 0x3}, 0x20008880) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000000000008400000006"], 0x48}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x5, 0x7, 0x7, 0x0, 0x5, 0xa401b, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x800, 0x8b1, 0x10001, 0x9, 0x4, 0x401, 0x10, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x3, 0x4, 0x6, 0x0, 0x3, 0x40, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4c, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x5, 0xff, 0x6, 0x8, 0x2337, 0x9, 0x0, 0x80, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000003e3680a7131df43af74a42b722af9d2ecd6f5bb6d6d93cddbd5f1fab799b3e6d0cd8d21d60a5171db355a1b15e1281c0b332a0dc64b4fff7df2a8b06e2e7d92eb1e48ca86ccf6b2a012dd3b612c4bc4702f106a9d9e3f6d47d3889381d1e42d5250cc40c46508c13b20af0f5a94691c332a878b8018903f91f17dbc6658d95eb1"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000005c0), 0x6c, r2}, 0x38) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.418393101s ago: executing program 1 (id=2873): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b18e00212ba0d8105040a601100fe0f040b067c55a1bc0009001e000500000000001500150005000000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbecbf29d746e7372f2a00001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="f4e5359dfcfbe78d199b13b5510bedf30f5ea56f92f2fc0052f0298478c2a98f21627dfe049e56494b16435fcd072e8f27b62caef680c59bb6dce5fa41f23df09a0b1db19b13f058f2ad8c5e7348b2ee3c9f395b6a650b5f77aac990c4e5af18ea70fb992bed8128f8819e5e0e38507c74d6416c22d44c3dea1151100e1447418b641f72d7e61d7a1dd579a0b774234104002b7aab52b79f8791bc9d2f5827766d0b67a89901d0dd4f", 0xa9}, {&(0x7f0000000040)="7fd765d84b8123f9e393c3660a863baa23590b9c72a6042fca817a0392a3f08bc0e0e011adff6dcb86d55519d3f83c8eccfeed1eac34851d", 0x38}], 0x2}, 0x2000e840) (rerun: 32) 8.246834995s ago: executing program 1 (id=2875): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x7, 0xd}, {0x10000002, 0x5, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13, 0x400, 0x4, 0x9, 0x2c, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000000)=[{&(0x7f0000000040)="0209000402000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x6, 0x6, 0x81, 0x4, 0x0, 0x6, 0x2, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x18600, 0x3, 0xd, 0x5, 0xceb0e3e, 0x6, 0x3, 0x0, 0xfff}, r1, 0x1, r3, 0x6) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0xa14, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='c 75:'], 0x5d) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a00380012001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x72, &(0x7f0000000000)=r3, 0xc) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d80000001e0081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d93452a09004b43370e9703890723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x24004814) 7.992261059s ago: executing program 3 (id=2877): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff82}, [@call={0x85, 0x0, 0x0, 0x41}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000e77910c0000000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x94, &(0x7f00000000c0)=""/148}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1b, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e12b0000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 7.822687562s ago: executing program 2 (id=2878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x7, 0x8, &(0x7f0000000040)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88}, @tail_call, @call={0x85, 0x0, 0x0, 0x23}], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x1000, &(0x7f00000000c0)=""/4096, 0x40f00, 0x6c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001100)={0x4, 0x5, 0x9, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000001140)=[0xffffffffffffffff, 0x1], &(0x7f0000001180)=[{0x0, 0x3, 0x4, 0x7}, {0x4, 0x5, 0x5, 0x8}], 0x10, 0x7}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000001280)=r1) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000012c0)={r2}) close(r3) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001300)={r3}) r5 = perf_event_open(&(0x7f0000001380)={0x1, 0x80, 0x7f, 0x3, 0x9, 0x3, 0x0, 0x2, 0x20, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000001340), 0x8}, 0x0, 0x4, 0x2, 0x3, 0x101, 0x2, 0x5, 0x0, 0x80000001}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000001400)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001500)='syz0\x00', 0x200002, 0x0) r7 = perf_event_open(&(0x7f0000001540)={0x3, 0x80, 0x31, 0x7, 0xe, 0xcf, 0x0, 0x4, 0x908, 0x818c84e40a904a35, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x96b, 0x1, @perf_config_ext={0x6, 0xfd}, 0x2814, 0x0, 0x3, 0x2, 0x7fff, 0x10000, 0x4, 0x0, 0xd1d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r5, 0x2) perf_event_open$cgroup(&(0x7f0000001480)={0x2, 0x80, 0x81, 0x6, 0x5, 0x3, 0x0, 0x5, 0x2002, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000001440), 0x2}, 0x104240, 0x1000, 0x1000, 0x7, 0x401, 0x2, 0x9, 0x0, 0x2f2, 0x0, 0x9}, r6, 0x2, r7, 0x4) r8 = gettid() r9 = perf_event_open(&(0x7f0000001600)={0x2, 0x80, 0x0, 0xcc, 0x4, 0x18, 0x0, 0x2, 0x4000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000015c0), 0x8}, 0x0, 0x10, 0x6, 0x2, 0x1, 0x0, 0xe, 0x0, 0xdd6, 0x0, 0x8}, r8, 0xb, r7, 0xa) r10 = getpid() r11 = perf_event_open(&(0x7f0000001680)={0x1, 0x80, 0x4, 0x4, 0x1, 0xd8, 0x0, 0x34e, 0x0, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x3}, 0x1800, 0x8, 0x3, 0x0, 0x0, 0x6, 0x1, 0x0, 0x3, 0x0, 0x8}, r10, 0x1, r9, 0x8) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000001700), 0x220002, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000001740)={'pimreg\x00', 0x800}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x1) perf_event_open(&(0x7f00000017c0)={0x1, 0x80, 0x2, 0xeb, 0x3, 0x0, 0x0, 0x100000000, 0x8c120, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xbad, 0x0, @perf_bp={&(0x7f0000001780), 0x7}, 0x1000, 0x0, 0x724, 0x1, 0x10, 0x8, 0x33ef, 0x0, 0x5, 0x0, 0xe3c}, 0xffffffffffffffff, 0x4, r11, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={r1, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000019c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000001a00)=[0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0], 0x0, 0x2d, &(0x7f0000001a80)=[{}], 0x8, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xfb, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001cc0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0x15, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7}, @generic={0xfc, 0x6, 0x0, 0xffb9, 0x80000000}]}, &(0x7f0000001900)='GPL\x00', 0xf3, 0x53, &(0x7f0000001940)=""/83, 0x40f00, 0x20, '\x00', r13, 0x0, r14, 0x8, &(0x7f0000001d00)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001d40)=[{0x3, 0x3, 0x3, 0xe}, {0x3, 0x2, 0x1, 0x3}, {0x3, 0x4, 0xb, 0x8}], 0x10, 0x8}, 0x94) sendmsg$inet(r4, &(0x7f0000003300)={0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000001e40)="b6e76a3e", 0x4}, {&(0x7f0000001e80)="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", 0x1000}, {&(0x7f0000002e80)="473ff9c1ce109db0e287839afd66d2ab1faa137dc2b9e53a0fe8ad25db3defee65769a90c8be98a65876342c537d31ef1bcd396a3c7535b40ca19e48d3299275", 0x40}, {&(0x7f0000002ec0)="18c88cb38d5651ca0a8bca9388ae99ed1da02ba4d3ee5ba425747d88a71be55aaa7eeb592816828f0e394ed4fb6328b208e026e9472dfaeacab3e6950177172c8567c9eedd01ce8ded7880cce9c1e687ca05e4a80cc87596e7bef31269d4e91a9c77be317a6ef279bc2dbf99aa98c17045b36b89ec248c57cc15f3468aa25cdde6", 0x81}, {&(0x7f0000002f80)="4480d41cd81db7f2a84a869a718db9d729ea8598edde1c38ccb7ac7b0cdc62", 0x1f}, {&(0x7f0000002fc0)="3db35d632d429c4a856740443101608c0829680ba2518e07f23f67aabc063bd27625afd30dc7196d5abf7598fb4d622f4aa0ff66680b55e56a985086ef777b4a95db55edff62771d911ce2991e236f00c14fdb1fbbeb77e65aa05d04df7653c5b478dd1532dc5213964fdce4b36391f6b924bc187cacf247371224a9a2dbebbe56da7ead98a7fbbe5c0c8e9632c7bb3a7bc633d9693dcf99b9792c", 0x9b}, {&(0x7f0000003080)="7f2dfba0db801941d9ec0d58f1c0b9ea3f7cf852233044600f88d0285638429229c7d4d6b178a878330c28e7f94c1a4de20eefef5717221844aa5562d573fdaba76260a2201e1647c0fb7d2d3d91e2cb234e0792b0fb43c30462173a48532babfbf757d46146e73b8d447df5b83121faa209ac12c697a39ed3eeda63e5a4eb1b73810cfbaaf8fc9842d6e5a705452dbed8f1c7c55a09df33651518f2232a20bb3d06c5a22b9e57c276ff9199346c56044f765a9d35813df4ea86a2358c7b3f", 0xbf}, {&(0x7f0000003140)="9015f0fe27277c980c836fd685c898b02be89db1967224920d581eec826446197a542123ea27cb9d5bb5d5de8fddebd46c7cb6bc9c860d7158ecd54d2ed820326ea71ab10b58589cd224b5a26e55cb20cb447405138fc4e96d26217e744641904703ddedc4cc0ea976eec882dd1681846bfa4b2f004f941867d266e4a6426364", 0x80}, {&(0x7f00000031c0)}], 0x9, &(0x7f00000032c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9b71}}], 0x18}, 0x40000) r15 = syz_clone(0x180a0000, &(0x7f0000003340)="8d3f9354585110765e1a6c76639c699583694085304d36955e2016502ed84000d8d9119e3e873a9eb3cc2e7364723fac0ea0e211fb887eecaf8980dd024aa6c29eb38148d62479227a9e76975fd6a08c29b70162c3d93f6feee27abd7d9f2f1faaf8209250b52e6ed7742e2cdcc09b0f", 0x70, &(0x7f00000033c0), &(0x7f0000003400), &(0x7f0000003440)="bbaa78afe07e5182f01939e49391ba7aba8a2f400c3635ab3bc4560a2780afc26ab61e13a49e8d3a86f3709dd9e1814ac6d59c833fb23d2f289518c11b7f99a859a6e165a25b394a0ad4e2063dfbb4031c599ab61446bb9b976a5dc8d4d75feaa7e3d7fb0ef024f56998ac627ddf2ad0d792e3bab735e68997e3badc72d44228ab6f488d03cc2f19c34df1bf3cc544fe254f91d7b55513401b82bf25fe48473fb73bcd8b5d385e576787c445aa5884db80639e75f88cf7349314fcd53aa0a2f9f827e6fe82b8ccf15d103f87c0463fbe9b26d5ffea9627f8ddab") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003580)={r15, r5, 0x0, 0x3, &(0x7f0000003540)='\xdf!\x00'}, 0x30) recvmsg$kcm(r4, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f00000035c0)=""/221, 0xdd}, {&(0x7f00000036c0)=""/235, 0xeb}], 0x2}, 0x0) openat$cgroup_pressure(r6, &(0x7f0000003840)='cpu.pressure\x00', 0x2, 0x0) socketpair(0x10, 0x3, 0x9, &(0x7f0000003880)) 7.721063421s ago: executing program 0 (id=2879): close(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8918, 0x0) 7.701542496s ago: executing program 3 (id=2880): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, 0xfffe, 0x0, 0x5b8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xeef8db63234610ca) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x2, 0x1, 0x84) r1 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r7 = perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x8, 0x8, 0x2, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYBLOB="3ee901"], 0x9a) setsockopt$sock_attach_bpf(r0, 0x84, 0x83, &(0x7f0000000000), 0x8) r9 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r9, &(0x7f0000000080)=ANY=[], 0xfefb) r10 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r10, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r10, &(0x7f0000000040)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0xffffffff, @local}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="f40000ffffff8800fe8000000000000000721ef69e7ffd002000000000000100"/41, 0x29}], 0x1}, 0x804) socket$kcm(0x11, 0x200000000000002, 0x300) 7.646220085s ago: executing program 2 (id=2881): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) socket$kcm(0x2, 0x3, 0x106) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32], 0x50) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x80000001, 0x5, 0x0, 0x8000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8100000, 0x0, 0x2000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x2}, 0x0, 0xfffffffffffffffd, 0xc2ba, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x5a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000010c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000001100), 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3583], 0x0, 0x2}, 0x94) sendmsg$inet(r0, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x20048094) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001140)={0x2, 0x80, 0x29, 0x1, 0x4, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x26, 0x0, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 7.279119095s ago: executing program 0 (id=2883): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="07020000867700000000000000000000180100002020702500000000002020207b1ae1fd00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000ff0000000000f8ffffffb702000008000000b703000000000000009500"/152], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x300) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x2, 0x2}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)='a', 0x1}], 0x1}, 0x4000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x0, 0x5, 0x8}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x40000100) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES16=r1], 0x2) 6.764174543s ago: executing program 3 (id=2886): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0xffffffff, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x20100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 6.51884099s ago: executing program 3 (id=2887): perf_event_open(0x0, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) sendmsg$sock(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18, 0x1802}, 0x4000081) 6.258460904s ago: executing program 3 (id=2888): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x3b, &(0x7f0000000100)=r1, 0x120) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000000a0000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 6.073594764s ago: executing program 3 (id=2889): sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="610773490cfcf2c1d66928af92fe23bd7cd59db8d56a49adce3e539f125b83243d02322aaeefae6603de0d6189d7fc2abdd319ae9eb0ced39711a8e16ecb71b7b1fab109e0762026019fd73bacc7dc1dc1e4d92d58052d59d1266a2a58acc1e73d4ef2de3d7fedf2f8ce8df01eed06306d269957ba", 0x75}, {&(0x7f0000000380)="09f42360d3e2eef10a92f57d9df642d650cc7a8f5c19daf2d1ca5c3a3d7fdccc57ea570024a7ec8daa31a477b0d1f58d53fdfdae8ddeea12069b0c3afc289df5b90cd5a841967c2ff4e949fd4e678eb186719212dcedcc9d4e350735646a0026a19887cb82ab15e57f1e35768b6adbc590976da1c81e978b93a162c609fd710f148bb786fce1079ed55d0936e81b047c629f23f79e9b8707bb4c893901e32a1317d926194e96178b34", 0xa9}, {&(0x7f0000000440)="5c88984a2439", 0x6}], 0x3}, 0x20008880) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000000000008400000006"], 0x48}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x5, 0x7, 0x7, 0x0, 0x5, 0xa401b, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x800, 0x8b1, 0x10001, 0x9, 0x4, 0x401, 0x10, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x3, 0x4, 0x6, 0x0, 0x3, 0x40, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4c, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x5, 0xff, 0x6, 0x8, 0x2337, 0x9, 0x0, 0x80, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000003e3680a7131df43af74a42b722af9d2ecd6f5bb6d6d93cddbd5f1fab799b3e6d0cd8d21d60a5171db355a1b15e1281c0b332a0dc64b4fff7df2a8b06e2e7d92eb1e48ca86ccf6b2a012dd3b612c4bc4702f106a9d9e3f6d47d3889381d1e42d5250cc40c46508c13b20af0f5a94691c332a878b8018903f91f17dbc6658d95eb1"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000005c0), 0x6c, r2}, 0x38) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.071392024s ago: executing program 2 (id=2898): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xa1021, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.539290988s ago: executing program 2 (id=2890): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff82}, [@call={0x85, 0x0, 0x0, 0x41}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000e77910c0000000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x94, &(0x7f00000000c0)=""/148}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1b, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e12b0000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 4.078386242s ago: executing program 4 (id=2891): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x50) 4.077999922s ago: executing program 0 (id=2892): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b4fad1f60a64c9f408000300060100000400000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.923564779s ago: executing program 2 (id=2893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@noop, @noop, @timestamp={0x44, 0x18, 0x13, 0x0, 0x4, [0x7, 0x1, 0x3, 0x75, 0x3]}, @cipso={0x86, 0x21, 0x3, [{0x2, 0x5, "b55026"}, {0x5, 0x6, "19401804"}, {0x7, 0x7, "fc47cf4f76"}, {0x5, 0x9, "73026e9cb116ec"}]}, @noop, @generic={0x88, 0x10, "c6278f735956eee69901d2ea089a"}, @ssrr={0x89, 0x1b, 0x24, [@local, @empty, @local, @empty, @multicast2, @multicast1]}, @timestamp_addr={0x44, 0x24, 0x82, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x40}, {@loopback, 0x3}, {@remote, 0x3}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0xc, 0x1, 0x6}, @timestamp={0x44, 0x1c, 0x11, 0x0, 0x4, [0x401, 0x100, 0xfffffff9, 0x8e, 0x321, 0xaf0a]}, @ssrr={0x89, 0x7, 0x97, [@loopback]}, @end]}}}, @ip_retopts={{0x10}}], 0x100}, 0x4000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="160000000000000006000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_clone(0x100, &(0x7f0000000f80)="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", 0x1000, &(0x7f0000000a00), &(0x7f0000000b80), &(0x7f0000000bc0)="fb16321c083d9ae8efc99bc07f3696d39e85e549d6e5ec412dc1b4d18510f6193b26df1c889f3d63d5cc1b381a9c8e05f6b61683d2ad760d439bcd0cdeb789a15f1a7732a461a3d2a23bd221948f0997f873a6210f54952de5a0b209ad7a7ef3d5210a3a5f36b10dd96b713ff7380d72e735fa23945c7809c7fa4a78cee795fdfe001616e897850e991c7217d95616c2d3ade48227aeb078a6ffc3d86d83c416900656983c568092cc8d3e7347259ab27755986269f696d8534f679ef5146451dbda0528357f9de575dc4396638c3a6716f7b9d946e025d7d07cf4026487c53df2fc20c099829967cb39ad1c962c410491") perf_event_open(&(0x7f0000000b00)={0x3, 0x80, 0x80, 0x7, 0x0, 0xd9, 0x0, 0x8000000000000001, 0x54000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x86e, 0x1, @perf_bp={&(0x7f00000009c0), 0x4}, 0x100000, 0x9, 0x3, 0x1, 0x5, 0x7, 0x2, 0x0, 0x8, 0x0, 0x3}, r6, 0x3, 0xffffffffffffffff, 0x8) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff007}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3.874093368s ago: executing program 4 (id=2894): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r0, 0x84, 0x82, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x6f, 0x2000}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 2.145689454s ago: executing program 0 (id=2895): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x414, 0x2000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 32) close(r1) (async) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0004000071106b00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async, rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 32) close(r2) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0x58, &(0x7f0000000540)}, 0x10) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, @perf_config_ext, 0x102002, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) close(r3) (async) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) sendmsg$tipc(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="16cd45d4735594ac0902589d13ca11c3a7db9bb552def449450a0ecb421a7dffff1d911abd5f5906a485530511ab9501223e64c8af1c6a4658e06bc9002bcfcbbc1c88d1", 0x44}, {&(0x7f00000002c0)}], 0x2, &(0x7f0000000480)="749c145b5f772ae255d07c132764cc705fd5b89e38e7c4a0be2a8e9e6422", 0x1e}, 0x20000011) (async, rerun: 64) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1a9) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230041) (async, rerun: 32) close(r0) (async, rerun: 32) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x800a, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 2.145121624s ago: executing program 4 (id=2896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x800}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000fa40000007010000080020007500feff0000820095000000d3031a006da911b0d632b4e2e86b7ad015836e4d27f5182b60bbb7c19e7a69a85411c531002b1b2c0f21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6da7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250}, 0x23) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) write$cgroup_subtree(r3, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.144864494s ago: executing program 0 (id=2897): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r1, 0x2000002, 0xe, 0xfd47, &(0x7f0000000200)="df33c9f7b9a60000000000000002", 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.795076128s ago: executing program 0 (id=2899): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0xd, &(0x7f0000000000), 0x4) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x8, 0x7f}, 0x0, 0x1f, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = socket$kcm(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r5, &(0x7f0000000840)={&(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/13, 0xd}, {&(0x7f0000000500)=""/118, 0x76}, {&(0x7f0000000440)=""/64, 0x40}, {0x0}, {&(0x7f0000000600)=""/101, 0x65}], 0x5, &(0x7f0000000740)=""/241, 0xf1}, 0x40) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, &(0x7f0000000980)=ANY=[@ANYRES8=r1, @ANYRES16=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000001c0)=r8, 0x4) sendmsg$kcm(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006000000036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000c79919c6e2f713db1ada8eb900000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000880)=r5, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3250}, 0x0, 0x0, 0x4, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 1.655501888s ago: executing program 4 (id=2900): socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000140000000000010000000100", @ANYRES32], 0x30, 0x20004000}, 0x48044) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 935.372352ms ago: executing program 4 (id=2901): socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 4 (id=2902): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x81, 0x0, 0x0, 0x0, 0x200, 0xa810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1a}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x48004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000440), 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x10400, &(0x7f0000000580)="8555451985e93ae51af05b6faec3bc8aa826dc25ea7622f4b639d1aec6e11b4509d48399a1eccb34f145a531180e02dae7b3b76502d3429b5311c8aeda564a0304188c520b9116aba382e63fad54ba2a4357bc3c54decb76be04b191009485f9eb3ccc97333eca2879d8ac8ce1272cf6879c6ef81da9ec7709e9aa0a3a95daedd999a92404dc9d92d3a0befa8f4e93a829a3d37d7d5ef06d945e84aac44c3bcd2b4b85afa8fdbed3d060f2ac21406b19df1e8ecc", 0xb4, 0x0, &(0x7f00000006c0), &(0x7f0000000700)="04d978da36bb2c23a54ea29983340e62175bf3fbb155019f2d08f30d06fd1e1c6cbece4588724071") syz_open_procfs$namespace(r2, &(0x7f0000000840)='ns/mnt\x00') r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000400000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70700000000000018010000202070c84ec73887202500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x43, &(0x7f00000015c0)=ANY=[@ANYRES16], &(0x7f0000000340)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r6, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0xfffffffc}, 0x10}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.4.1414'. [ 393.936785][ T9140] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 394.027915][ T9147] netlink: 'syz.3.1417': attribute type 10 has an invalid length. [ 394.050819][ T9147] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1417'. [ 394.438400][ T9155] device syzkaller0 entered promiscuous mode [ 395.015139][ T9176] netlink: 'syz.4.1427': attribute type 21 has an invalid length. [ 395.072737][ T9176] netlink: 'syz.4.1427': attribute type 15 has an invalid length. [ 395.147343][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 395.158455][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 395.642555][ T9186] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 395.650468][ T9186] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 395.934661][ T9184] netlink: 'syz.3.1430': attribute type 21 has an invalid length. [ 395.947930][ T9184] netlink: 'syz.3.1430': attribute type 15 has an invalid length. [ 396.361282][ T9207] netlink: 'syz.1.1433': attribute type 3 has an invalid length. [ 396.374079][ T9207] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1433'. [ 396.553987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 398.458177][ T9209] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0 [ 398.486926][ T9219] netlink: 'syz.2.1437': attribute type 4 has an invalid length. [ 398.505969][ T9219] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1437'. [ 398.519310][ T9219] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 398.537757][ T9232] netlink: 'syz.0.1443': attribute type 21 has an invalid length. [ 398.546943][ T9232] netlink: 'syz.0.1443': attribute type 15 has an invalid length. [ 398.750683][ T9240] FAULT_INJECTION: forcing a failure. [ 398.750683][ T9240] name failslab, interval 1, probability 0, space 0, times 0 [ 398.779973][ T9240] CPU: 0 PID: 9240 Comm: syz.3.1446 Not tainted syzkaller #0 [ 398.787522][ T9240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.797721][ T9240] Call Trace: [ 398.801051][ T9240] [ 398.804026][ T9240] dump_stack_lvl+0x188/0x24e [ 398.808785][ T9240] ? show_regs_print_info+0x12/0x12 [ 398.814055][ T9240] ? load_image+0x400/0x400 [ 398.818628][ T9240] ? __might_sleep+0xd0/0xd0 [ 398.823290][ T9240] ? __lock_acquire+0x7d10/0x7d10 [ 398.828413][ T9240] should_fail_ex+0x399/0x4d0 [ 398.833169][ T9240] should_failslab+0x5/0x20 [ 398.837741][ T9240] slab_pre_alloc_hook+0x59/0x310 [ 398.842819][ T9240] ? copyin+0xe7/0x120 [ 398.846937][ T9240] kmem_cache_alloc_node+0x5a/0x320 [ 398.852170][ T9240] ? __alloc_skb+0xfc/0x7e0 [ 398.856718][ T9240] __alloc_skb+0xfc/0x7e0 [ 398.861082][ T9240] ? copyout_mc+0x110/0x110 [ 398.865630][ T9240] _sctp_make_chunk+0x5e/0x420 [ 398.870436][ T9240] sctp_make_datafrag_empty+0xa8/0x530 [ 398.875926][ T9240] ? sctp_user_addto_chunk+0xac/0x220 [ 398.881334][ T9240] sctp_datamsg_from_user+0x71e/0xee0 [ 398.886765][ T9240] sctp_sendmsg_to_asoc+0x107b/0x1830 [ 398.892186][ T9240] ? sctp_assoc_add_peer+0xeb7/0x1640 [ 398.897612][ T9240] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 398.903458][ T9240] ? __sctp_connect+0xd80/0xd80 [ 398.908343][ T9240] ? __local_bh_enable_ip+0x136/0x1c0 [ 398.913843][ T9240] ? _local_bh_enable+0xa0/0xa0 [ 398.918750][ T9240] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 398.924609][ T9240] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 398.930458][ T9240] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 398.936036][ T9240] ? security_sctp_bind_connect+0x85/0xb0 [ 398.941809][ T9240] sctp_sendmsg+0x1984/0x2940 [ 398.946531][ T9240] ? trace_event_raw_event_lock+0x250/0x250 [ 398.952471][ T9240] ? aa_sk_perm+0x811/0x950 [ 398.957015][ T9240] ? sctp_getsockopt+0x8a0/0x8a0 [ 398.961996][ T9240] ? __might_fault+0xa6/0x120 [ 398.966706][ T9240] ? aa_af_perm+0x340/0x340 [ 398.971245][ T9240] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 398.977708][ T9240] ? inet_sendmsg+0x78/0x2f0 [ 398.982375][ T9240] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 398.987739][ T9240] ? security_socket_sendmsg+0x7c/0xa0 [ 398.993266][ T9240] ? inet_send_prepare+0x260/0x260 [ 398.998448][ T9240] ____sys_sendmsg+0x5be/0x970 [ 399.003290][ T9240] ? __sys_sendmsg_sock+0x30/0x30 [ 399.008369][ T9240] ? __import_iovec+0x315/0x500 [ 399.013268][ T9240] ? import_iovec+0x6f/0xa0 [ 399.017811][ T9240] ___sys_sendmsg+0x2a2/0x360 [ 399.022533][ T9240] ? __sys_sendmsg+0x290/0x290 [ 399.027365][ T9240] ? __lock_acquire+0x7d10/0x7d10 [ 399.032477][ T9240] __se_sys_sendmsg+0x1bb/0x2a0 [ 399.037382][ T9240] ? __x64_sys_sendmsg+0x80/0x80 [ 399.042406][ T9240] ? lockdep_hardirqs_on+0x94/0x140 [ 399.047644][ T9240] do_syscall_64+0x4c/0xa0 [ 399.052116][ T9240] ? clear_bhb_loop+0x60/0xb0 [ 399.056823][ T9240] ? clear_bhb_loop+0x60/0xb0 [ 399.061538][ T9240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.067473][ T9240] RIP: 0033:0x7f085979c799 [ 399.071934][ T9240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.091567][ T9240] RSP: 002b:00007f085a706028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.099999][ T9240] RAX: ffffffffffffffda RBX: 00007f0859a15fa0 RCX: 00007f085979c799 [ 399.108004][ T9240] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 399.116078][ T9240] RBP: 00007f085a706090 R08: 0000000000000000 R09: 0000000000000000 [ 399.124246][ T9240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.132259][ T9240] R13: 00007f0859a16038 R14: 00007f0859a15fa0 R15: 00007ffe156181b8 [ 399.140277][ T9240] [ 399.165086][ T9244] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 399.172266][ T9244] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 399.314496][ T9246] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1449'. [ 400.050080][ T9261] netlink: 'syz.0.1454': attribute type 11 has an invalid length. [ 400.073073][ T9261] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1454'. [ 400.111139][ T9261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.132484][ T9267] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.1453'. [ 400.185270][ T9257] netlink: 'syz.4.1452': attribute type 3 has an invalid length. [ 400.194517][ T9257] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.1452'. [ 400.414638][ T9275] netlink: 'syz.3.1457': attribute type 21 has an invalid length. [ 400.424085][ T9275] netlink: 'syz.3.1457': attribute type 15 has an invalid length. [ 400.466091][ T9278] netlink: 'syz.0.1458': attribute type 10 has an invalid length. [ 400.481812][ T9278] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1458'. [ 400.524262][ T9278] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 401.669414][ T9316] netlink: 'syz.4.1472': attribute type 21 has an invalid length. [ 401.677335][ T9316] netlink: 'syz.4.1472': attribute type 15 has an invalid length. [ 401.737492][ T9310] delete_channel: no stack [ 401.908051][ T9314] netlink: 'syz.1.1471': attribute type 3 has an invalid length. [ 401.925201][ T9314] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1471'. [ 402.295472][ T9338] device syzkaller0 entered promiscuous mode [ 402.340340][ T9328] syzkaller0: mtu less than device minimum [ 402.777665][ T9356] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 402.785256][ T9356] IPv6: NLM_F_CREATE should be set when creating new route [ 402.792817][ T9356] IPv6: NLM_F_CREATE should be set when creating new route [ 402.800409][ T9356] IPv6: NLM_F_CREATE should be set when creating new route [ 403.008901][ T9362] netlink: 'syz.1.1486': attribute type 21 has an invalid length. [ 403.024970][ T9362] netlink: 'syz.1.1486': attribute type 15 has an invalid length. [ 403.112164][ T9364] bridge0: port 3(team0) entered disabled state [ 403.122899][ T9364] device bridge_slave_1 left promiscuous mode [ 403.129411][ T9364] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.178253][ T9364] device bridge_slave_0 left promiscuous mode [ 403.192816][ T9364] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.380324][ T9373] FAULT_INJECTION: forcing a failure. [ 403.380324][ T9373] name failslab, interval 1, probability 0, space 0, times 0 [ 403.393152][ T9373] CPU: 0 PID: 9373 Comm: syz.2.1490 Not tainted syzkaller #0 [ 403.400574][ T9373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.410663][ T9373] Call Trace: [ 403.413974][ T9373] [ 403.416943][ T9373] dump_stack_lvl+0x188/0x24e [ 403.421673][ T9373] ? call_fib_notifiers+0x2d/0x60 [ 403.426735][ T9373] ? __ip6_del_rt_siblings+0x4d6/0x7b0 [ 403.432233][ T9373] ? show_regs_print_info+0x12/0x12 [ 403.437522][ T9373] ? load_image+0x400/0x400 [ 403.442083][ T9373] should_fail_ex+0x399/0x4d0 [ 403.446816][ T9373] should_failslab+0x5/0x20 [ 403.451374][ T9373] slab_pre_alloc_hook+0x59/0x310 [ 403.456436][ T9373] ? nsim_fib_event_nb+0x1f1/0x1040 [ 403.461780][ T9373] __kmem_cache_alloc_node+0x4f/0x260 [ 403.467260][ T9373] ? nsim_fib_event_nb+0x1f1/0x1040 [ 403.472516][ T9373] __kmalloc+0xa0/0x240 [ 403.476736][ T9373] nsim_fib_event_nb+0x1f1/0x1040 [ 403.481838][ T9373] atomic_notifier_call_chain+0x17a/0x2b0 [ 403.487639][ T9373] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 403.498753][ T9373] call_fib_notifiers+0x2d/0x60 [ 403.503684][ T9373] fib6_del+0xf8a/0x1530 [ 403.508010][ T9373] ? fib6_del+0x601/0x1530 [ 403.512530][ T9373] ? fib6_locate_1+0x6c0/0x6c0 [ 403.517361][ T9373] ? do_raw_spin_lock+0x128/0x2f0 [ 403.522440][ T9373] ? __ip6_del_rt_siblings+0xa7/0x7b0 [ 403.527853][ T9373] __ip6_del_rt_siblings+0x4d6/0x7b0 [ 403.533199][ T9373] ip6_route_del+0x1431/0x14f0 [ 403.538055][ T9373] ? ip6_route_del+0xdf/0x14f0 [ 403.542871][ T9373] ? ipv6_route_ioctl+0x31e/0x500 [ 403.547944][ T9373] ? mutex_lock_nested+0x10/0x10 [ 403.552921][ T9373] ? ipv6_route_ioctl+0x500/0x500 [ 403.558006][ T9373] ? l3mdev_fib_table_by_index+0x30/0x2c0 [ 403.563763][ T9373] ? l3mdev_fib_table_by_index+0x30/0x2c0 [ 403.569532][ T9373] ipv6_route_ioctl+0x385/0x500 [ 403.574461][ T9373] ? rt6_purge_dflt_routers+0xb10/0xb10 [ 403.580075][ T9373] ? __might_fault+0xa6/0x120 [ 403.584792][ T9373] ? __might_fault+0xc2/0x120 [ 403.589506][ T9373] ? __might_fault+0xa6/0x120 [ 403.594222][ T9373] inet6_ioctl+0x207/0x280 [ 403.598692][ T9373] ? __kmem_cache_free+0xb6/0x1f0 [ 403.603761][ T9373] ? inet6_getname+0x640/0x640 [ 403.608555][ T9373] ? tomoyo_path_number_perm+0x205/0x650 [ 403.614233][ T9373] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 403.619743][ T9373] sock_do_ioctl+0xfb/0x320 [ 403.624297][ T9373] ? sock_show_fdinfo+0xb0/0xb0 [ 403.629211][ T9373] sock_ioctl+0x4d2/0x710 [ 403.633620][ T9373] ? sock_poll+0x410/0x410 [ 403.638101][ T9373] ? bpf_lsm_file_ioctl+0x5/0x10 [ 403.643072][ T9373] ? security_file_ioctl+0x7c/0xa0 [ 403.648223][ T9373] ? sock_poll+0x410/0x410 [ 403.652709][ T9373] __se_sys_ioctl+0xfa/0x170 [ 403.657340][ T9373] do_syscall_64+0x4c/0xa0 [ 403.661795][ T9373] ? clear_bhb_loop+0x60/0xb0 [ 403.666504][ T9373] ? clear_bhb_loop+0x60/0xb0 [ 403.671225][ T9373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.677149][ T9373] RIP: 0033:0x7f9b6e19c799 [ 403.681594][ T9373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.701231][ T9373] RSP: 002b:00007f9b6ef8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.709690][ T9373] RAX: ffffffffffffffda RBX: 00007f9b6e416090 RCX: 00007f9b6e19c799 [ 403.717712][ T9373] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 403.725751][ T9373] RBP: 00007f9b6ef8e090 R08: 0000000000000000 R09: 0000000000000000 [ 403.733756][ T9373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.741760][ T9373] R13: 00007f9b6e416128 R14: 00007f9b6e416090 R15: 00007ffd56055f48 [ 403.749784][ T9373] [ 405.712191][ T9407] netlink: 'syz.0.1502': attribute type 21 has an invalid length. [ 405.730994][ T9407] netlink: 'syz.0.1502': attribute type 15 has an invalid length. [ 405.830659][ T9409] device syzkaller0 entered promiscuous mode [ 406.684463][ T9414] device syzkaller0 entered promiscuous mode [ 406.756621][ T9437] tipc: Started in network mode [ 406.762152][ T9437] tipc: Node identity 9215a268, cluster identity 4711 [ 406.786761][ T9437] tipc: Node number set to 2450891368 [ 406.799713][ T9417] delete_channel: no stack [ 406.806035][ T9435] netlink: 'syz.2.1510': attribute type 10 has an invalid length. [ 406.814365][ T9437] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1512'. [ 406.835493][ T9435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1510'. [ 409.295827][ T9455] netlink: 'syz.0.1519': attribute type 21 has an invalid length. [ 409.303741][ T9455] netlink: 'syz.0.1519': attribute type 15 has an invalid length. [ 409.424436][ T9462] device syzkaller0 entered promiscuous mode [ 410.415711][ T9476] delete_channel: no stack [ 410.505016][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.512356][ C1] bridge0: topology change detected, propagating [ 410.519580][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.526841][ C1] bridge0: topology change detected, propagating [ 412.825297][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 413.027621][ T9493] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 413.034756][ T9493] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 413.087516][ T9492] netlink: 'syz.3.1527': attribute type 10 has an invalid length. [ 413.100111][ T9492] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1527'. [ 413.433630][ T9503] netlink: 'syz.2.1534': attribute type 21 has an invalid length. [ 413.455208][ T9503] netlink: 'syz.2.1534': attribute type 15 has an invalid length. [ 413.537832][ T9510] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1536'. [ 414.026608][ T9520] netlink: 'syz.2.1539': attribute type 1 has an invalid length. [ 414.076965][ T9520] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.1539'. [ 415.689988][ T9510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.716910][ T9510] bond0 (unregistering): Released all slaves [ 415.746076][ T9515] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1533'. [ 415.986971][ T9528] tipc: Started in network mode [ 416.004430][ T9528] tipc: Node identity 9215a268, cluster identity 4711 [ 416.024987][ T9528] tipc: Node number set to 2450891368 [ 416.273031][ T9528] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1550'. [ 417.165575][ T9531] delete_channel: no stack [ 417.806627][ T9559] netlink: 'syz.0.1549': attribute type 21 has an invalid length. [ 417.852739][ T9559] netlink: 'syz.0.1549': attribute type 15 has an invalid length. [ 418.110955][ T9569] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1553'. [ 418.880656][ T9574] netlink: 'syz.4.1555': attribute type 1 has an invalid length. [ 418.905549][ T9574] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.1555'. [ 419.451418][ T9578] FAULT_INJECTION: forcing a failure. [ 419.451418][ T9578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.469348][ T9578] CPU: 0 PID: 9578 Comm: syz.1.1566 Not tainted syzkaller #0 [ 419.476792][ T9578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.486986][ T9578] Call Trace: [ 419.490342][ T9578] [ 419.493319][ T9578] dump_stack_lvl+0x188/0x24e [ 419.498046][ T9578] ? show_regs_print_info+0x12/0x12 [ 419.503287][ T9578] ? load_image+0x400/0x400 [ 419.507902][ T9578] ? __lock_acquire+0x7d10/0x7d10 [ 419.512975][ T9578] ? snprintf+0xe5/0x140 [ 419.517256][ T9578] should_fail_ex+0x399/0x4d0 [ 419.521988][ T9578] _copy_to_user+0x2c/0x130 [ 419.526709][ T9578] simple_read_from_buffer+0xe3/0x150 [ 419.532117][ T9578] proc_fail_nth_read+0x1a6/0x220 [ 419.537177][ T9578] ? proc_fault_inject_write+0x310/0x310 [ 419.542830][ T9578] ? fsnotify_perm+0x248/0x550 [ 419.547639][ T9578] ? proc_fault_inject_write+0x310/0x310 [ 419.553327][ T9578] vfs_read+0x2de/0xa00 [ 419.557520][ T9578] ? kernel_read+0x1e0/0x1e0 [ 419.562145][ T9578] ? __fget_files+0x28/0x4b0 [ 419.566856][ T9578] ? __fget_files+0x28/0x4b0 [ 419.571498][ T9578] ? __fget_files+0x43d/0x4b0 [ 419.576223][ T9578] ? __fdget_pos+0x2ae/0x360 [ 419.580867][ T9578] ? ksys_read+0x71/0x250 [ 419.585262][ T9578] ksys_read+0x14c/0x250 [ 419.589568][ T9578] ? vfs_write+0xa30/0xa30 [ 419.594026][ T9578] ? lockdep_hardirqs_on+0x94/0x140 [ 419.599262][ T9578] do_syscall_64+0x4c/0xa0 [ 419.603713][ T9578] ? clear_bhb_loop+0x60/0xb0 [ 419.608421][ T9578] ? clear_bhb_loop+0x60/0xb0 [ 419.613130][ T9578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.619089][ T9578] RIP: 0033:0x7f4d0255cfce [ 419.623526][ T9578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 419.643155][ T9578] RSP: 002b:00007f4d03414fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 419.651619][ T9578] RAX: ffffffffffffffda RBX: 00007f4d034156c0 RCX: 00007f4d0255cfce [ 419.659622][ T9578] RDX: 000000000000000f RSI: 00007f4d034150a0 RDI: 0000000000000005 [ 419.667618][ T9578] RBP: 00007f4d03415090 R08: 0000000000000000 R09: 0000000000000000 [ 419.675638][ T9578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.683679][ T9578] R13: 00007f4d02816038 R14: 00007f4d02815fa0 R15: 00007ffdf0e87458 [ 419.691695][ T9578] [ 419.761003][ T9583] tipc: Started in network mode [ 419.780810][ T9583] tipc: Node identity 9215a268, cluster identity 4711 [ 419.805010][ T9583] tipc: Node number set to 2450891368 [ 419.871246][ T9583] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1558'. [ 420.443805][ T9599] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1563'. [ 424.506908][ T9626] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1570'. [ 424.571047][ T9629] netlink: 'syz.4.1571': attribute type 10 has an invalid length. [ 424.770925][ T9638] netlink: 'syz.1.1575': attribute type 1 has an invalid length. [ 424.837968][ T9638] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.1575'. [ 424.891195][ T9641] device syzkaller0 entered promiscuous mode [ 425.597707][ T9666] netlink: 'syz.1.1583': attribute type 29 has an invalid length. [ 425.704047][ T9666] netlink: 'syz.1.1583': attribute type 29 has an invalid length. [ 426.933675][ T9694] FAULT_INJECTION: forcing a failure. [ 426.933675][ T9694] name failslab, interval 1, probability 0, space 0, times 0 [ 426.972119][ T9694] CPU: 1 PID: 9694 Comm: syz.3.1592 Not tainted syzkaller #0 [ 426.979581][ T9694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 426.989681][ T9694] Call Trace: [ 426.992985][ T9694] [ 426.995945][ T9694] dump_stack_lvl+0x188/0x24e [ 427.000659][ T9694] ? show_regs_print_info+0x12/0x12 [ 427.005912][ T9694] ? load_image+0x400/0x400 [ 427.010450][ T9694] should_fail_ex+0x399/0x4d0 [ 427.015257][ T9694] should_failslab+0x5/0x20 [ 427.019797][ T9694] slab_pre_alloc_hook+0x59/0x310 [ 427.024844][ T9694] ? nf_ct_ext_add+0x1a7/0x3e0 [ 427.029640][ T9694] __kmem_cache_alloc_node+0x4f/0x260 [ 427.035045][ T9694] ? nf_ct_ext_add+0x1a7/0x3e0 [ 427.039845][ T9694] __kmalloc_node_track_caller+0x9e/0x230 [ 427.045602][ T9694] krealloc+0x6a/0x100 [ 427.049700][ T9694] nf_ct_ext_add+0x1a7/0x3e0 [ 427.054406][ T9694] init_conntrack+0x8af/0x11a0 [ 427.059219][ T9694] ? early_drop+0x870/0x870 [ 427.063759][ T9694] ? nf_conntrack_find_get+0x670/0x670 [ 427.069260][ T9694] ? __siphash_unaligned+0x25b/0x3a0 [ 427.074594][ T9694] nf_conntrack_in+0xd3e/0x17b0 [ 427.079509][ T9694] ? nf_ct_pernet+0x270/0x270 [ 427.084230][ T9694] ? ipt_do_table+0x2bd/0x15a0 [ 427.089039][ T9694] ? read_lock_is_recursive+0x10/0x10 [ 427.094483][ T9694] ? ipv4_conntrack_defrag+0x284/0x5b0 [ 427.099999][ T9694] ? ipv4_conntrack_local+0x11f/0x200 [ 427.105394][ T9694] ? ipv4_conntrack_in+0x20/0x20 [ 427.110366][ T9694] nf_hook_slow+0xb9/0x200 [ 427.114802][ T9694] ? nf_hook+0x390/0x390 [ 427.119072][ T9694] nf_hook+0x224/0x390 [ 427.123176][ T9694] ? nf_hook+0x9e/0x390 [ 427.127349][ T9694] ? __ip_local_out+0x5d0/0x5d0 [ 427.132222][ T9694] ? nf_hook+0x390/0x390 [ 427.136500][ T9694] ? ip_fast_csum+0x1ea/0x2b0 [ 427.141201][ T9694] __ip_local_out+0x49c/0x5d0 [ 427.145903][ T9694] ? nf_hook+0x390/0x390 [ 427.150272][ T9694] ip_send_skb+0x48/0x1c0 [ 427.154626][ T9694] raw_sendmsg+0x153d/0x1b20 [ 427.159253][ T9694] ? raw_sendmsg+0x590/0x1b20 [ 427.163967][ T9694] ? compat_raw_ioctl+0x60/0x60 [ 427.168873][ T9694] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 427.175415][ T9694] ? sock_rps_record_flow+0x19/0x3f0 [ 427.180743][ T9694] ? inet_sendmsg+0x78/0x2f0 [ 427.185366][ T9694] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 427.190688][ T9694] ? security_socket_sendmsg+0x7c/0xa0 [ 427.196178][ T9694] ? inet_send_prepare+0x260/0x260 [ 427.201324][ T9694] ____sys_sendmsg+0x5be/0x970 [ 427.206135][ T9694] ? __sys_sendmsg_sock+0x30/0x30 [ 427.211195][ T9694] ? __import_iovec+0x315/0x500 [ 427.216081][ T9694] ? import_iovec+0x6f/0xa0 [ 427.220611][ T9694] ___sys_sendmsg+0x2a2/0x360 [ 427.225502][ T9694] ? __sys_sendmsg+0x290/0x290 [ 427.230313][ T9694] ? __lock_acquire+0x7d10/0x7d10 [ 427.235383][ T9694] __se_sys_sendmsg+0x1bb/0x2a0 [ 427.240268][ T9694] ? ct_nmi_exit+0x145/0x1c0 [ 427.244965][ T9694] ? __x64_sys_sendmsg+0x80/0x80 [ 427.249949][ T9694] ? lockdep_hardirqs_on+0x94/0x140 [ 427.255170][ T9694] do_syscall_64+0x4c/0xa0 [ 427.259613][ T9694] ? clear_bhb_loop+0x60/0xb0 [ 427.264316][ T9694] ? clear_bhb_loop+0x60/0xb0 [ 427.269022][ T9694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.274946][ T9694] RIP: 0033:0x7f085979c799 [ 427.279389][ T9694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.299013][ T9694] RSP: 002b:00007f085a6e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.307450][ T9694] RAX: ffffffffffffffda RBX: 00007f0859a16090 RCX: 00007f085979c799 [ 427.315453][ T9694] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 427.323452][ T9694] RBP: 00007f085a6e5090 R08: 0000000000000000 R09: 0000000000000000 [ 427.331451][ T9694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 427.339448][ T9694] R13: 00007f0859a16128 R14: 00007f0859a16090 R15: 00007ffe156181b8 [ 427.347498][ T9694] [ 427.523978][ T4270] Bluetooth: hci1: ISO packet for unknown connection handle 9 [ 429.572959][ T9681] netlink: 'syz.2.1587': attribute type 10 has an invalid length. [ 429.592460][ T9681] team0: Device vxcan1 is of different type [ 429.627215][ T9708] device syzkaller0 entered promiscuous mode [ 429.817618][ T9727] netlink: 'syz.3.1598': attribute type 29 has an invalid length. [ 429.836901][ T9727] netlink: 'syz.3.1598': attribute type 29 has an invalid length. [ 429.848747][ T9725] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 429.856198][ T9725] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 430.618076][ T9745] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1604'. [ 431.344751][ T9758] device syzkaller0 entered promiscuous mode [ 432.067974][ T9776] netlink: 'syz.0.1613': attribute type 29 has an invalid length. [ 432.570039][ T9776] netlink: 'syz.0.1613': attribute type 29 has an invalid length. [ 432.588224][ T9779] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1614'. [ 435.000081][ T9817] FAULT_INJECTION: forcing a failure. [ 435.000081][ T9817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.020381][ T9817] CPU: 0 PID: 9817 Comm: syz.1.1622 Not tainted syzkaller #0 [ 435.027830][ T9817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.037931][ T9817] Call Trace: [ 435.041245][ T9817] [ 435.044212][ T9817] dump_stack_lvl+0x188/0x24e [ 435.048961][ T9817] ? show_regs_print_info+0x12/0x12 [ 435.054231][ T9817] ? load_image+0x400/0x400 [ 435.058781][ T9817] ? __lock_acquire+0x7d10/0x7d10 [ 435.063865][ T9817] should_fail_ex+0x399/0x4d0 [ 435.068608][ T9817] _copy_from_user+0x2c/0x170 [ 435.073338][ T9817] __copy_msghdr+0x3b7/0x580 [ 435.077992][ T9817] ___sys_sendmsg+0x210/0x360 [ 435.082722][ T9817] ? __sys_sendmsg+0x290/0x290 [ 435.087567][ T9817] ? __lock_acquire+0x7d10/0x7d10 [ 435.092686][ T9817] __se_sys_sendmsg+0x1bb/0x2a0 [ 435.097596][ T9817] ? __x64_sys_sendmsg+0x80/0x80 [ 435.102610][ T9817] ? lockdep_hardirqs_on+0x94/0x140 [ 435.107869][ T9817] do_syscall_64+0x4c/0xa0 [ 435.112344][ T9817] ? clear_bhb_loop+0x60/0xb0 [ 435.117099][ T9817] ? clear_bhb_loop+0x60/0xb0 [ 435.121829][ T9817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.127768][ T9817] RIP: 0033:0x7f4d0259c799 [ 435.132222][ T9817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.151869][ T9817] RSP: 002b:00007f4d03415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.160333][ T9817] RAX: ffffffffffffffda RBX: 00007f4d02815fa0 RCX: 00007f4d0259c799 [ 435.168348][ T9817] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 435.176369][ T9817] RBP: 00007f4d03415090 R08: 0000000000000000 R09: 0000000000000000 [ 435.184390][ T9817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.192404][ T9817] R13: 00007f4d02816038 R14: 00007f4d02815fa0 R15: 00007ffdf0e87458 [ 435.200437][ T9817] [ 435.438966][ T9825] FAULT_INJECTION: forcing a failure. [ 435.438966][ T9825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.482765][ T9825] CPU: 0 PID: 9825 Comm: syz.1.1626 Not tainted syzkaller #0 [ 435.490428][ T9825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.500570][ T9825] Call Trace: [ 435.503901][ T9825] [ 435.506872][ T9825] dump_stack_lvl+0x188/0x24e [ 435.511606][ T9825] ? show_regs_print_info+0x12/0x12 [ 435.516933][ T9825] ? load_image+0x400/0x400 [ 435.521491][ T9825] ? __lock_acquire+0x7d10/0x7d10 [ 435.526586][ T9825] ? snprintf+0xe5/0x140 [ 435.530879][ T9825] should_fail_ex+0x399/0x4d0 [ 435.535649][ T9825] _copy_to_user+0x2c/0x130 [ 435.540217][ T9825] simple_read_from_buffer+0xe3/0x150 [ 435.545678][ T9825] proc_fail_nth_read+0x1a6/0x220 [ 435.550754][ T9825] ? proc_fault_inject_write+0x310/0x310 [ 435.556440][ T9825] ? fsnotify_perm+0x248/0x550 [ 435.561254][ T9825] ? proc_fault_inject_write+0x310/0x310 [ 435.566940][ T9825] vfs_read+0x2de/0xa00 [ 435.571150][ T9825] ? kernel_read+0x1e0/0x1e0 [ 435.575791][ T9825] ? __fget_files+0x28/0x4b0 [ 435.580433][ T9825] ? __fget_files+0x28/0x4b0 [ 435.585083][ T9825] ? __fget_files+0x43d/0x4b0 [ 435.589829][ T9825] ? __fdget_pos+0x2ae/0x360 [ 435.594474][ T9825] ? ksys_read+0x71/0x250 [ 435.598886][ T9825] ksys_read+0x14c/0x250 [ 435.603192][ T9825] ? vfs_write+0xa30/0xa30 [ 435.607668][ T9825] ? lockdep_hardirqs_on+0x94/0x140 [ 435.612918][ T9825] do_syscall_64+0x4c/0xa0 [ 435.617380][ T9825] ? clear_bhb_loop+0x60/0xb0 [ 435.622115][ T9825] ? clear_bhb_loop+0x60/0xb0 [ 435.626842][ T9825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.632787][ T9825] RIP: 0033:0x7f4d0255cfce [ 435.637245][ T9825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 435.656910][ T9825] RSP: 002b:00007f4d03414fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 435.665374][ T9825] RAX: ffffffffffffffda RBX: 00007f4d034156c0 RCX: 00007f4d0255cfce [ 435.673398][ T9825] RDX: 000000000000000f RSI: 00007f4d034150a0 RDI: 0000000000000006 [ 435.681408][ T9825] RBP: 00007f4d03415090 R08: 0000000000000000 R09: 0000000000000000 [ 435.689420][ T9825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 435.697436][ T9825] R13: 00007f4d02816038 R14: 00007f4d02815fa0 R15: 00007ffdf0e87458 [ 435.705553][ T9825] [ 436.194810][ T9831] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1628'. [ 439.808191][ T9833] device syzkaller0 entered promiscuous mode [ 439.941733][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.948210][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.203536][ T9877] FAULT_INJECTION: forcing a failure. [ 440.203536][ T9877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.218172][ T9877] CPU: 1 PID: 9877 Comm: syz.1.1641 Not tainted syzkaller #0 [ 440.225599][ T9877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 440.235705][ T9877] Call Trace: [ 440.239022][ T9877] [ 440.241979][ T9877] dump_stack_lvl+0x188/0x24e [ 440.246736][ T9877] ? show_regs_print_info+0x12/0x12 [ 440.251988][ T9877] ? load_image+0x400/0x400 [ 440.256540][ T9877] ? __lock_acquire+0x7d10/0x7d10 [ 440.261620][ T9877] should_fail_ex+0x399/0x4d0 [ 440.266351][ T9877] _copy_from_user+0x2c/0x170 [ 440.271073][ T9877] ___sys_sendmsg+0x1c3/0x360 [ 440.275817][ T9877] ? __sys_sendmsg+0x290/0x290 [ 440.280649][ T9877] ? __lock_acquire+0x7d10/0x7d10 [ 440.285751][ T9877] __se_sys_sendmsg+0x1bb/0x2a0 [ 440.290644][ T9877] ? __x64_sys_sendmsg+0x80/0x80 [ 440.295643][ T9877] ? lockdep_hardirqs_on+0x94/0x140 [ 440.300884][ T9877] do_syscall_64+0x4c/0xa0 [ 440.305344][ T9877] ? clear_bhb_loop+0x60/0xb0 [ 440.310081][ T9877] ? clear_bhb_loop+0x60/0xb0 [ 440.314805][ T9877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.320743][ T9877] RIP: 0033:0x7f4d0259c799 [ 440.325191][ T9877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.344918][ T9877] RSP: 002b:00007f4d033f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.353374][ T9877] RAX: ffffffffffffffda RBX: 00007f4d02816090 RCX: 00007f4d0259c799 [ 440.361385][ T9877] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 440.369390][ T9877] RBP: 00007f4d033f4090 R08: 0000000000000000 R09: 0000000000000000 [ 440.377398][ T9877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.385495][ T9877] R13: 00007f4d02816128 R14: 00007f4d02816090 R15: 00007ffdf0e87458 [ 440.393624][ T9877] [ 441.585981][ T9893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1647'. [ 442.103038][ T9897] FAULT_INJECTION: forcing a failure. [ 442.103038][ T9897] name failslab, interval 1, probability 0, space 0, times 0 [ 442.117686][ T9897] CPU: 1 PID: 9897 Comm: syz.0.1648 Not tainted syzkaller #0 [ 442.125116][ T9897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 442.135213][ T9897] Call Trace: [ 442.138541][ T9897] [ 442.141508][ T9897] dump_stack_lvl+0x188/0x24e [ 442.146236][ T9897] ? show_regs_print_info+0x12/0x12 [ 442.151488][ T9897] ? load_image+0x400/0x400 [ 442.156032][ T9897] ? __lock_acquire+0x7d10/0x7d10 [ 442.161093][ T9897] ? get_random_u64+0x16c/0x8d0 [ 442.165963][ T9897] ? get_random_u64+0x53a/0x8d0 [ 442.170844][ T9897] should_fail_ex+0x399/0x4d0 [ 442.175555][ T9897] should_failslab+0x5/0x20 [ 442.180090][ T9897] slab_pre_alloc_hook+0x59/0x310 [ 442.185136][ T9897] ? memset+0x1e/0x40 [ 442.189138][ T9897] kmem_cache_alloc+0x56/0x2f0 [ 442.193922][ T9897] ? prepare_creds+0x3c/0x610 [ 442.198623][ T9897] prepare_creds+0x3c/0x610 [ 442.203147][ T9897] copy_creds+0x146/0xd50 [ 442.207507][ T9897] copy_process+0x932/0x4030 [ 442.212136][ T9897] ? idle_dummy+0x10/0x10 [ 442.216490][ T9897] kernel_clone+0x24b/0x900 [ 442.221007][ T9897] ? ksys_write+0x1c0/0x250 [ 442.225544][ T9897] ? create_io_thread+0x170/0x170 [ 442.230605][ T9897] __x64_sys_clone+0x1a7/0x220 [ 442.235398][ T9897] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 442.241579][ T9897] ? __ia32_sys_vfork+0x140/0x140 [ 442.246628][ T9897] ? lock_chain_count+0x20/0x20 [ 442.251509][ T9897] ? lockdep_hardirqs_on+0x94/0x140 [ 442.256727][ T9897] do_syscall_64+0x4c/0xa0 [ 442.261169][ T9897] ? clear_bhb_loop+0x60/0xb0 [ 442.265865][ T9897] ? clear_bhb_loop+0x60/0xb0 [ 442.270559][ T9897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.276470][ T9897] RIP: 0033:0x7f53ec19c799 [ 442.280903][ T9897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.300527][ T9897] RSP: 002b:00007f53ecff8fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 442.308957][ T9897] RAX: ffffffffffffffda RBX: 00007f53ec415fa0 RCX: 00007f53ec19c799 [ 442.316947][ T9897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000a1000 [ 442.324940][ T9897] RBP: 00007f53ecff9090 R08: 0000000000000000 R09: 0000000000000000 [ 442.332933][ T9897] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 442.340928][ T9897] R13: 00007f53ec416038 R14: 00007f53ec415fa0 R15: 00007ffd7e8b1eb8 [ 442.348935][ T9897] [ 443.362576][ T9882] netlink: 'syz.3.1643': attribute type 21 has an invalid length. [ 443.371256][ T9882] netlink: 'syz.3.1643': attribute type 15 has an invalid length. [ 443.379775][ T9893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1647'. [ 443.389206][ T9900] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1649'. [ 444.414655][ T9933] netlink: 'syz.2.1660': attribute type 21 has an invalid length. [ 444.485296][ T9933] netlink: 'syz.2.1660': attribute type 15 has an invalid length. [ 444.836427][ T9941] device syzkaller0 entered promiscuous mode [ 444.883515][ T9949] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1665'. [ 448.847362][ T9980] netlink: 'syz.0.1674': attribute type 21 has an invalid length. [ 448.855462][ T9980] netlink: 'syz.0.1674': attribute type 15 has an invalid length. [ 449.558406][ T9994] netlink: 'syz.4.1678': attribute type 21 has an invalid length. [ 449.595258][ T9994] IPv6: NLM_F_CREATE should be specified when creating new route [ 449.615883][T10000] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1681'. [ 449.635377][ T9994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.642717][ T9994] IPv6: NLM_F_CREATE should be set when creating new route [ 449.650127][ T9994] IPv6: NLM_F_CREATE should be set when creating new route [ 449.657425][ T9994] IPv6: NLM_F_CREATE should be set when creating new route [ 449.875076][T10000] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1681'. [ 450.409899][T10012] netlink: 'syz.0.1684': attribute type 10 has an invalid length. [ 450.846963][T10016] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1685'. [ 450.869948][T10016] tc_dump_action: action bad kind [ 450.906507][T10025] netlink: 'syz.0.1686': attribute type 21 has an invalid length. [ 450.914446][T10025] netlink: 'syz.0.1686': attribute type 15 has an invalid length. [ 451.110282][T10009] device syzkaller0 entered promiscuous mode [ 456.127936][T10066] netlink: 'syz.2.1698': attribute type 21 has an invalid length. [ 456.135886][T10066] netlink: 'syz.2.1698': attribute type 15 has an invalid length. [ 456.150037][T10074] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1700'. [ 456.160027][T10074] tc_dump_action: action bad kind [ 456.167123][T10073] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1701'. [ 456.783282][T10093] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 456.790071][T10093] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 458.530862][T10114] netlink: 'syz.4.1712': attribute type 21 has an invalid length. [ 458.550839][T10114] netlink: 'syz.4.1712': attribute type 15 has an invalid length. [ 459.284783][T10116] device syzkaller0 entered promiscuous mode [ 460.075996][T10131] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1717'. [ 460.095045][T10131] tc_dump_action: action bad kind [ 460.156075][T10124] delete_channel: no stack [ 460.611285][T10151] netlink: 'syz.4.1721': attribute type 3 has an invalid length. [ 460.656188][T10150] netlink: 'syz.4.1721': attribute type 3 has an invalid length. [ 460.697686][T10150] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1721'. [ 460.746823][T10151] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1721'. [ 463.802850][T10136] device syzkaller0 entered promiscuous mode [ 465.683192][T10159] netlink: 'syz.0.1724': attribute type 21 has an invalid length. [ 465.692503][T10159] netlink: 'syz.0.1724': attribute type 15 has an invalid length. [ 465.840592][T10204] syz.2.1738 uses obsolete (PF_INET,SOCK_PACKET) [ 465.911845][T10204] device sit0 entered promiscuous mode [ 466.338842][T10225] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1742'. [ 466.441449][T10225] netlink: 'syz.4.1742': attribute type 4 has an invalid length. [ 466.502178][T10225] netlink: 'syz.4.1742': attribute type 8 has an invalid length. [ 466.512055][T10225] netlink: 193092 bytes leftover after parsing attributes in process `syz.4.1742'. [ 466.591428][T10233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1745'. [ 466.733662][T10238] netlink: 'syz.4.1747': attribute type 21 has an invalid length. [ 466.755129][T10238] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1747'. [ 466.764722][T10240] netlink: 'syz.2.1748': attribute type 21 has an invalid length. [ 466.773113][T10240] netlink: 'syz.2.1748': attribute type 15 has an invalid length. [ 467.793071][T10261] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1755'. [ 468.083666][T10265] netlink: 'syz.2.1756': attribute type 10 has an invalid length. [ 468.131078][T10265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1756'. [ 468.157127][T10265] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 468.273709][T10268] netlink: 'syz.3.1755': attribute type 10 has an invalid length. [ 468.763921][T10273] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1757'. [ 468.900855][T10273] netlink: 'syz.1.1757': attribute type 4 has an invalid length. [ 468.965036][T10273] netlink: 193092 bytes leftover after parsing attributes in process `syz.1.1757'. [ 469.158540][T10289] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1764'. [ 469.239875][T10294] device wg2 entered promiscuous mode [ 469.320353][T10291] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1765'. [ 469.345780][T10291] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 471.193486][T10333] validate_nla: 5 callbacks suppressed [ 471.193505][T10333] netlink: 'syz.4.1778': attribute type 21 has an invalid length. [ 471.277950][T10333] netlink: 'syz.4.1778': attribute type 15 has an invalid length. [ 471.328738][T10335] netlink: 'syz.3.1777': attribute type 4 has an invalid length. [ 471.428948][T10335] netlink: 'syz.3.1777': attribute type 8 has an invalid length. [ 471.499429][T10335] __nla_validate_parse: 2 callbacks suppressed [ 471.499449][T10335] netlink: 193092 bytes leftover after parsing attributes in process `syz.3.1777'. [ 471.906618][T10351] netlink: 'syz.0.1783': attribute type 29 has an invalid length. [ 471.957737][T10351] netlink: 'syz.0.1783': attribute type 29 has an invalid length. [ 472.035821][T10351] netlink: 'syz.0.1783': attribute type 29 has an invalid length. [ 472.226975][T10358] netlink: 'syz.1.1786': attribute type 39 has an invalid length. [ 472.829551][T10371] netlink: 'syz.4.1793': attribute type 21 has an invalid length. [ 472.838522][T10371] netlink: 'syz.4.1793': attribute type 15 has an invalid length. [ 473.772860][T10396] device syzkaller0 entered promiscuous mode [ 474.261428][T10412] device syzkaller0 entered promiscuous mode [ 478.099872][T10438] device syzkaller0 entered promiscuous mode [ 480.084976][T10478] validate_nla: 2 callbacks suppressed [ 480.084993][T10478] netlink: 'syz.4.1819': attribute type 21 has an invalid length. [ 480.099378][T10478] netlink: 'syz.4.1819': attribute type 15 has an invalid length. [ 480.392261][T10495] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1824'. [ 480.404700][T10486] device syzkaller0 entered promiscuous mode [ 480.415956][T10495] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1824'. [ 480.451694][T10493] netlink: 'syz.1.1822': attribute type 4 has an invalid length. [ 480.470904][T10493] netlink: 98028 bytes leftover after parsing attributes in process `syz.1.1822'. [ 480.480708][T10497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1824'. [ 480.560827][T10493] device wlan1 entered promiscuous mode [ 480.582006][T10495] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1824'. [ 481.406196][T10519] netlink: 'syz.4.1830': attribute type 3 has an invalid length. [ 481.427334][T10519] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1830'. [ 482.833697][ T4295] wlan1: Trigger new scan to find an IBSS to join [ 483.125212][T10524] netlink: 'syz.3.1831': attribute type 21 has an invalid length. [ 483.133087][T10524] netlink: 'syz.3.1831': attribute type 15 has an invalid length. [ 483.142066][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1830'. [ 483.154985][T10528] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1830'. [ 483.396895][T10540] device syzkaller0 entered promiscuous mode [ 483.585336][T10550] device syzkaller0 entered promiscuous mode [ 483.909193][T10564] device syzkaller0 entered promiscuous mode [ 486.826658][ T29] wlan1: Trigger new scan to find an IBSS to join [ 487.716504][ T9] wlan1: Creating new IBSS network, BSSID 1e:e0:7c:94:c1:cb [ 487.987574][T10587] netlink: 'syz.2.1848': attribute type 2 has an invalid length. [ 489.607228][T10584] netlink: 'syz.1.1847': attribute type 21 has an invalid length. [ 489.615270][T10584] netlink: 'syz.1.1847': attribute type 15 has an invalid length. [ 489.623287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 489.640725][T10587] device 0 entered promiscuous mode [ 489.669598][T10599] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 489.675697][T10599] syzkaller0: linktype set to 769 [ 489.701498][T10601] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 489.890018][T10610] netlink: 'syz.2.1853': attribute type 10 has an invalid length. [ 490.074591][T10616] sctp: [Deprecated]: syz.1.1856 (pid 10616) Use of int in maxseg socket option. [ 490.074591][T10616] Use struct sctp_assoc_value instead [ 490.131041][T10621] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1857'. [ 490.142643][T10621] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1857'. [ 490.224392][T10626] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1857'. [ 490.274738][T10626] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1857'. [ 490.521083][T10632] device syzkaller0 entered promiscuous mode [ 490.823771][T10635] netlink: 'syz.2.1858': attribute type 16 has an invalid length. [ 491.241332][T10651] netlink: 'syz.1.1864': attribute type 11 has an invalid length. [ 491.252320][T10651] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1864'. [ 491.267261][T10652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.300929][T10643] netlink: 'syz.4.1862': attribute type 21 has an invalid length. [ 491.340371][T10643] netlink: 'syz.4.1862': attribute type 15 has an invalid length. [ 491.423346][T10656] netlink: 126288 bytes leftover after parsing attributes in process `syz.0.1863'. [ 494.052472][T10683] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.059847][T10683] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.881410][T10699] device syzkaller0 entered promiscuous mode [ 495.132392][T10712] netlink: 'syz.3.1877': attribute type 21 has an invalid length. [ 495.164537][T10712] netlink: 'syz.3.1877': attribute type 15 has an invalid length. [ 495.944760][T10729] netlink: 'syz.1.1879': attribute type 16 has an invalid length. [ 497.773833][T10733] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1883'. [ 497.980674][T10766] netlink: 'syz.2.1890': attribute type 21 has an invalid length. [ 497.991761][T10766] netlink: 'syz.2.1890': attribute type 15 has an invalid length. [ 498.056048][T10768] netlink: 'syz.0.1888': attribute type 10 has an invalid length. [ 498.103556][T10768] bond0: (slave bond_slave_0): Releasing backup interface [ 498.299959][T10765] delete_channel: no stack [ 498.360322][T10776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.814782][T10778] netlink: 'syz.1.1895': attribute type 10 has an invalid length. [ 498.888144][T10778] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1895'. [ 499.003685][T10778] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 499.553798][T10799] device syzkaller0 entered promiscuous mode [ 499.877630][T10813] netlink: 'syz.2.1904': attribute type 21 has an invalid length. [ 499.927588][T10813] netlink: 'syz.2.1904': attribute type 15 has an invalid length. [ 501.379000][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.395475][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.657864][T10828] delete_channel: no stack [ 503.972601][T10830] netlink: 'syz.2.1907': attribute type 10 has an invalid length. [ 503.988585][T10848] netlink: 'syz.3.1910': attribute type 10 has an invalid length. [ 504.006350][T10848] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1910'. [ 504.016964][T10851] netlink: 'syz.1.1912': attribute type 4 has an invalid length. [ 504.024765][T10851] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1912'. [ 504.043322][T10851] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 504.351468][T10867] device syzkaller0 entered promiscuous mode [ 504.515929][T10871] device sit0 entered promiscuous mode [ 506.358597][T10900] delete_channel: no stack [ 507.636867][T10905] netlink: 'syz.1.1926': attribute type 10 has an invalid length. [ 507.645935][T10908] netlink: 'syz.3.1927': attribute type 11 has an invalid length. [ 507.653768][T10908] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1927'. [ 507.990632][T10913] netlink: 'syz.4.1929': attribute type 10 has an invalid length. [ 508.015274][T10913] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1929'. [ 508.045299][T10913] batman_adv: batadv0: Adding interface: veth0_vlan [ 508.065896][T10913] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.116008][T10913] batman_adv: batadv0: Interface activated: veth0_vlan [ 508.160612][T10921] device sit0 left promiscuous mode [ 508.539144][T10925] device sit0 entered promiscuous mode [ 509.037073][T10932] device sit0 entered promiscuous mode [ 509.557260][T10946] device syzkaller0 entered promiscuous mode [ 511.611167][T10960] delete_channel: no stack [ 512.674965][T10973] netlink: 'syz.4.1941': attribute type 10 has an invalid length. [ 512.714251][T10967] device syzkaller0 entered promiscuous mode [ 514.698011][T11005] FAULT_INJECTION: forcing a failure. [ 514.698011][T11005] name failslab, interval 1, probability 0, space 0, times 0 [ 514.764599][T11005] CPU: 1 PID: 11005 Comm: syz.2.1949 Not tainted syzkaller #0 [ 514.772159][T11005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 514.782274][T11005] Call Trace: [ 514.785603][T11005] [ 514.788586][T11005] dump_stack_lvl+0x188/0x24e [ 514.793345][T11005] ? show_regs_print_info+0x12/0x12 [ 514.798639][T11005] ? load_image+0x400/0x400 [ 514.803201][T11005] ? __might_sleep+0xd0/0xd0 [ 514.807847][T11005] ? __lock_acquire+0x7d10/0x7d10 [ 514.812944][T11005] should_fail_ex+0x399/0x4d0 [ 514.817705][T11005] should_failslab+0x5/0x20 [ 514.822278][T11005] slab_pre_alloc_hook+0x59/0x310 [ 514.827370][T11005] ? netlink_dump+0xf2/0xd00 [ 514.832037][T11005] kmem_cache_alloc_node+0x5a/0x320 [ 514.837301][T11005] ? __alloc_skb+0xfc/0x7e0 [ 514.841885][T11005] __alloc_skb+0xfc/0x7e0 [ 514.846292][T11005] netlink_dump+0x1ee/0xd00 [ 514.850875][T11005] ? kasan_quarantine_put+0xd4/0x220 [ 514.856234][T11005] ? lockdep_hardirqs_on+0x94/0x140 [ 514.861492][T11005] ? netlink_lookup+0x200/0x200 [ 514.866427][T11005] ? netlink_recvmsg+0x5e3/0xe00 [ 514.871439][T11005] ? kmem_cache_free+0xf7/0x290 [ 514.876349][T11005] netlink_recvmsg+0x68f/0xe00 [ 514.881179][T11005] ? netlink_sendmsg+0xbd0/0xbd0 [ 514.886181][T11005] ? aa_af_perm+0x340/0x340 [ 514.890769][T11005] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 514.896085][T11005] ? security_socket_recvmsg+0x85/0xb0 [ 514.901587][T11005] ? netlink_sendmsg+0xbd0/0xbd0 [ 514.906569][T11005] ____sys_recvmsg+0x2cb/0x5e0 [ 514.911387][T11005] ? __sys_recvmsg_sock+0x40/0x40 [ 514.916479][T11005] ? import_iovec+0x6f/0xa0 [ 514.921017][T11005] ___sys_recvmsg+0x212/0x590 [ 514.925739][T11005] ? __sys_recvmsg+0x290/0x290 [ 514.930545][T11005] ? common_file_perm+0x171/0x1c0 [ 514.935613][T11005] ? __fget_files+0x43d/0x4b0 [ 514.940352][T11005] __x64_sys_recvmsg+0x205/0x2e0 [ 514.945363][T11005] ? ___sys_recvmsg+0x590/0x590 [ 514.950275][T11005] ? lockdep_hardirqs_on+0x94/0x140 [ 514.955666][T11005] do_syscall_64+0x4c/0xa0 [ 514.960124][T11005] ? clear_bhb_loop+0x60/0xb0 [ 514.964837][T11005] ? clear_bhb_loop+0x60/0xb0 [ 514.969559][T11005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 514.975483][T11005] RIP: 0033:0x7f9b6e19c799 [ 514.979929][T11005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.999659][T11005] RSP: 002b:00007f9b6efaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 515.008102][T11005] RAX: ffffffffffffffda RBX: 00007f9b6e415fa0 RCX: 00007f9b6e19c799 [ 515.016102][T11005] RDX: 0000000000000120 RSI: 0000200000000240 RDI: 0000000000000004 [ 515.024115][T11005] RBP: 00007f9b6efaf090 R08: 0000000000000000 R09: 0000000000000000 [ 515.032130][T11005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.040127][T11005] R13: 00007f9b6e416038 R14: 00007f9b6e415fa0 R15: 00007ffd56055f48 [ 515.048160][T11005] [ 515.106981][T11006] netlink: 'syz.0.1947': attribute type 10 has an invalid length. [ 515.122098][T11006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1947'. [ 515.132980][T11006] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 515.159322][T11010] sctp: [Deprecated]: syz.3.1950 (pid 11010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 515.159322][T11010] Use struct sctp_sack_info instead [ 515.484881][T11019] device sit0 left promiscuous mode [ 515.542795][T11019] device sit0 entered promiscuous mode [ 516.094139][T11024] netlink: 'syz.0.1956': attribute type 21 has an invalid length. [ 516.115559][T11024] netlink: 'syz.0.1956': attribute type 15 has an invalid length. [ 518.299949][T11048] netlink: 'syz.4.1960': attribute type 1 has an invalid length. [ 519.134217][T11058] device syzkaller0 entered promiscuous mode [ 519.167625][T11062] delete_channel: no stack [ 519.174613][T11060] device sit0 left promiscuous mode [ 519.353120][T11067] device sit0 entered promiscuous mode [ 522.501057][T11101] device sit0 entered promiscuous mode [ 522.813741][T11112] device syzkaller0 entered promiscuous mode [ 522.948722][T11124] sctp: [Deprecated]: syz.4.1980 (pid 11124) Use of struct sctp_assoc_value in delayed_ack socket option. [ 522.948722][T11124] Use struct sctp_sack_info instead [ 523.217872][ T4270] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 523.225964][ T4270] Bluetooth: hci3: Invalid handle: 0x85b0 > 0x0eff [ 525.947319][T11147] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1985'. [ 526.001119][T11152] device syzkaller0 entered promiscuous mode [ 526.013974][T11173] netlink: 'syz.4.1991': attribute type 10 has an invalid length. [ 526.871337][T11191] sctp: [Deprecated]: syz.2.1994 (pid 11191) Use of struct sctp_assoc_value in delayed_ack socket option. [ 526.871337][T11191] Use struct sctp_sack_info instead [ 528.451682][T11192] netlink: 'syz.4.1995': attribute type 10 has an invalid length. [ 528.460045][T11197] netlink: 'syz.0.1997': attribute type 10 has an invalid length. [ 528.497860][T11196] delete_channel: no stack [ 528.560898][T11197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.574161][T11197] team0: Port device bond0 added [ 528.740372][T11203] netlink: 'syz.3.2000': attribute type 21 has an invalid length. [ 528.784201][T11203] netlink: 'syz.3.2000': attribute type 15 has an invalid length. [ 529.193285][T11214] netlink: 'syz.0.2014': attribute type 21 has an invalid length. [ 529.201639][T11214] netlink: 'syz.0.2014': attribute type 15 has an invalid length. [ 529.509357][T11216] device syzkaller0 entered promiscuous mode [ 529.833563][T11222] netlink: 'syz.2.2016': attribute type 21 has an invalid length. [ 529.862158][T11222] netlink: 'syz.2.2016': attribute type 15 has an invalid length. [ 530.495461][T11228] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2006'. [ 531.373698][T11239] netlink: 'syz.2.2010': attribute type 2 has an invalid length. [ 531.474630][T11239] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2010'. [ 532.097879][T11255] FAULT_INJECTION: forcing a failure. [ 532.097879][T11255] name failslab, interval 1, probability 0, space 0, times 0 [ 532.111294][T11255] CPU: 1 PID: 11255 Comm: syz.2.2015 Not tainted syzkaller #0 [ 532.118814][T11255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 532.128926][T11255] Call Trace: [ 532.132258][T11255] [ 532.135234][T11255] dump_stack_lvl+0x188/0x24e [ 532.139984][T11255] ? show_regs_print_info+0x12/0x12 [ 532.145245][T11255] ? load_image+0x400/0x400 [ 532.149816][T11255] ? __might_sleep+0xd0/0xd0 [ 532.154469][T11255] ? __lock_acquire+0x7d10/0x7d10 [ 532.159645][T11255] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 532.165358][T11255] should_fail_ex+0x399/0x4d0 [ 532.170118][T11255] should_failslab+0x5/0x20 [ 532.174683][T11255] slab_pre_alloc_hook+0x59/0x310 [ 532.179781][T11255] kmem_cache_alloc+0x56/0x2f0 [ 532.184592][T11255] ? getname_flags+0xb7/0x500 [ 532.189348][T11255] getname_flags+0xb7/0x500 [ 532.193935][T11255] __x64_sys_mkdirat+0x78/0x90 [ 532.198771][T11255] do_syscall_64+0x4c/0xa0 [ 532.203263][T11255] ? clear_bhb_loop+0x60/0xb0 [ 532.208022][T11255] ? clear_bhb_loop+0x60/0xb0 [ 532.212758][T11255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 532.218710][T11255] RIP: 0033:0x7f9b6e19c799 [ 532.223174][T11255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.242846][T11255] RSP: 002b:00007f9b6efaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 532.251340][T11255] RAX: ffffffffffffffda RBX: 00007f9b6e415fa0 RCX: 00007f9b6e19c799 [ 532.259375][T11255] RDX: 00000000000001ff RSI: 0000200000000780 RDI: 0000000000000004 [ 532.267402][T11255] RBP: 00007f9b6efaf090 R08: 0000000000000000 R09: 0000000000000000 [ 532.275426][T11255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.283453][T11255] R13: 00007f9b6e416038 R14: 00007f9b6e415fa0 R15: 00007ffd56055f48 [ 532.291604][T11255] [ 532.307908][T11257] sctp: [Deprecated]: syz.0.2012 (pid 11257) Use of struct sctp_assoc_value in delayed_ack socket option. [ 532.307908][T11257] Use struct sctp_sack_info instead [ 533.702929][T11236] netlink: 'syz.1.2009': attribute type 10 has an invalid length. [ 533.712750][T11236] team0: Device vxcan1 is of different type [ 533.867164][T11250] device syzkaller0 entered promiscuous mode [ 535.987612][T11270] netlink: 'syz.3.2020': attribute type 10 has an invalid length. [ 536.157241][T11290] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2023'. [ 536.811995][T11302] device syzkaller0 entered promiscuous mode [ 539.442819][T11310] device syzkaller0 entered promiscuous mode [ 539.568373][T11334] netlink: 'syz.4.2034': attribute type 21 has an invalid length. [ 539.578814][T11334] netlink: 'syz.4.2034': attribute type 6 has an invalid length. [ 539.586763][T11334] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2034'. [ 539.598377][T11337] netlink: 'syz.0.2035': attribute type 17 has an invalid length. [ 539.610798][T11337] netlink: 'syz.0.2035': attribute type 41 has an invalid length. [ 539.620276][T11337] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2035'. [ 540.625586][T11361] FAULT_INJECTION: forcing a failure. [ 540.625586][T11361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.664909][T11361] CPU: 1 PID: 11361 Comm: syz.1.2044 Not tainted syzkaller #0 [ 540.672439][T11361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 540.682521][T11361] Call Trace: [ 540.685837][T11361] [ 540.688822][T11361] dump_stack_lvl+0x188/0x24e [ 540.693545][T11361] ? show_regs_print_info+0x12/0x12 [ 540.698800][T11361] ? load_image+0x400/0x400 [ 540.703440][T11361] ? __lock_acquire+0x7d10/0x7d10 [ 540.708517][T11361] should_fail_ex+0x399/0x4d0 [ 540.713253][T11361] _copy_from_user+0x2c/0x170 [ 540.717981][T11361] iovec_from_user+0x143/0x360 [ 540.722785][T11361] __import_iovec+0x6d/0x500 [ 540.727396][T11361] ? __might_fault+0xc2/0x120 [ 540.732098][T11361] import_iovec+0x6f/0xa0 [ 540.736455][T11361] ___sys_sendmsg+0x252/0x360 [ 540.741175][T11361] ? __sys_sendmsg+0x290/0x290 [ 540.746073][T11361] ? __lock_acquire+0x7d10/0x7d10 [ 540.751149][T11361] __se_sys_sendmsg+0x1bb/0x2a0 [ 540.756031][T11361] ? __x64_sys_sendmsg+0x80/0x80 [ 540.761052][T11361] ? lockdep_hardirqs_on+0x94/0x140 [ 540.766272][T11361] do_syscall_64+0x4c/0xa0 [ 540.770710][T11361] ? clear_bhb_loop+0x60/0xb0 [ 540.775421][T11361] ? clear_bhb_loop+0x60/0xb0 [ 540.780135][T11361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 540.786055][T11361] RIP: 0033:0x7f4d0259c799 [ 540.790510][T11361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.810135][T11361] RSP: 002b:00007f4d03415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.818586][T11361] RAX: ffffffffffffffda RBX: 00007f4d02815fa0 RCX: 00007f4d0259c799 [ 540.826578][T11361] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 540.834573][T11361] RBP: 00007f4d03415090 R08: 0000000000000000 R09: 0000000000000000 [ 540.842572][T11361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.850561][T11361] R13: 00007f4d02816038 R14: 00007f4d02815fa0 R15: 00007ffdf0e87458 [ 540.858563][T11361] [ 542.323261][T11340] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2035'. [ 542.871398][T11403] netlink: 'syz.3.2057': attribute type 1 has an invalid length. [ 542.887748][T11403] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.2057'. [ 542.926048][T11402] delete_channel: no stack [ 543.669369][T11422] device syzkaller0 entered promiscuous mode [ 543.905184][T11415] €Â0: renamed from pim6reg1 [ 544.478731][T11441] FAULT_INJECTION: forcing a failure. [ 544.478731][T11441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.517926][T11441] CPU: 0 PID: 11441 Comm: syz.2.2069 Not tainted syzkaller #0 [ 544.525479][T11441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 544.535589][T11441] Call Trace: [ 544.538911][T11441] [ 544.541905][T11441] dump_stack_lvl+0x188/0x24e [ 544.546651][T11441] ? show_regs_print_info+0x12/0x12 [ 544.551925][T11441] ? load_image+0x400/0x400 [ 544.556497][T11441] ? __lock_acquire+0x7d10/0x7d10 [ 544.561602][T11441] should_fail_ex+0x399/0x4d0 [ 544.566357][T11441] _copy_from_user+0x2c/0x170 [ 544.571108][T11441] iovec_from_user+0x143/0x360 [ 544.575939][T11441] __import_iovec+0x6d/0x500 [ 544.580625][T11441] import_iovec+0x6f/0xa0 [ 544.585021][T11441] ___sys_sendmsg+0x252/0x360 [ 544.589787][T11441] ? __sys_sendmsg+0x290/0x290 [ 544.594653][T11441] ? __lock_acquire+0x7d10/0x7d10 [ 544.599791][T11441] __se_sys_sendmsg+0x1bb/0x2a0 [ 544.604709][T11441] ? __x64_sys_sendmsg+0x80/0x80 [ 544.609740][T11441] ? lockdep_hardirqs_on+0x94/0x140 [ 544.614991][T11441] do_syscall_64+0x4c/0xa0 [ 544.619461][T11441] ? clear_bhb_loop+0x60/0xb0 [ 544.624187][T11441] ? clear_bhb_loop+0x60/0xb0 [ 544.628928][T11441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 544.634876][T11441] RIP: 0033:0x7f9b6e19c799 [ 544.639339][T11441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.659012][T11441] RSP: 002b:00007f9b6efaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.667501][T11441] RAX: ffffffffffffffda RBX: 00007f9b6e415fa0 RCX: 00007f9b6e19c799 [ 544.675538][T11441] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 544.683568][T11441] RBP: 00007f9b6efaf090 R08: 0000000000000000 R09: 0000000000000000 [ 544.691593][T11441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.699612][T11441] R13: 00007f9b6e416038 R14: 00007f9b6e415fa0 R15: 00007ffd56055f48 [ 544.707689][T11441] [ 546.414405][T11476] FAULT_INJECTION: forcing a failure. [ 546.414405][T11476] name failslab, interval 1, probability 0, space 0, times 0 [ 546.475210][T11476] CPU: 1 PID: 11476 Comm: syz.0.2078 Not tainted syzkaller #0 [ 546.482762][T11476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 546.492956][T11476] Call Trace: [ 546.496273][T11476] [ 546.499238][T11476] dump_stack_lvl+0x188/0x24e [ 546.503966][T11476] ? show_regs_print_info+0x12/0x12 [ 546.509210][T11476] ? load_image+0x400/0x400 [ 546.513756][T11476] ? __might_sleep+0xd0/0xd0 [ 546.518404][T11476] ? __lock_acquire+0x7d10/0x7d10 [ 546.523487][T11476] ? ct_irq_exit_irqson+0x113/0x170 [ 546.528740][T11476] should_fail_ex+0x399/0x4d0 [ 546.533473][T11476] should_failslab+0x5/0x20 [ 546.538045][T11476] slab_pre_alloc_hook+0x59/0x310 [ 546.543140][T11476] ? security_prepare_creds+0x47/0x130 [ 546.548644][T11476] __kmem_cache_alloc_node+0x4f/0x260 [ 546.554055][T11476] ? security_prepare_creds+0x47/0x130 [ 546.559543][T11476] __kmalloc+0xa0/0x240 [ 546.563738][T11476] security_prepare_creds+0x47/0x130 [ 546.569083][T11476] prepare_creds+0x450/0x610 [ 546.573702][T11476] copy_creds+0x146/0xd50 [ 546.578068][T11476] copy_process+0x932/0x4030 [ 546.582688][T11476] ? debug_object_activate+0x4f0/0x4f0 [ 546.588176][T11476] ? do_raw_spin_unlock+0x11d/0x230 [ 546.593431][T11476] ? idle_dummy+0x10/0x10 [ 546.597811][T11476] ? __lock_acquire+0x7d10/0x7d10 [ 546.602882][T11476] kernel_clone+0x24b/0x900 [ 546.607412][T11476] ? ktime_get+0x7b/0x270 [ 546.611771][T11476] ? ktime_get+0x7b/0x270 [ 546.616124][T11476] ? create_io_thread+0x170/0x170 [ 546.621178][T11476] __x64_sys_clone+0x1a7/0x220 [ 546.625965][T11476] ? clockevents_program_event+0x22c/0x310 [ 546.631801][T11476] ? __ia32_sys_vfork+0x140/0x140 [ 546.636870][T11476] ? lock_chain_count+0x20/0x20 [ 546.641758][T11476] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 546.647776][T11476] ? lockdep_hardirqs_on+0x94/0x140 [ 546.652995][T11476] do_syscall_64+0x4c/0xa0 [ 546.657440][T11476] ? clear_bhb_loop+0x60/0xb0 [ 546.662139][T11476] ? clear_bhb_loop+0x60/0xb0 [ 546.666849][T11476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.672769][T11476] RIP: 0033:0x7f53ec19c799 [ 546.677290][T11476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.697007][T11476] RSP: 002b:00007f53ecff8fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 546.705440][T11476] RAX: ffffffffffffffda RBX: 00007f53ec415fa0 RCX: 00007f53ec19c799 [ 546.713433][T11476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000a1000 [ 546.721420][T11476] RBP: 00007f53ecff9090 R08: 0000000000000000 R09: 0000000000000000 [ 546.729406][T11476] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 546.737400][T11476] R13: 00007f53ec416038 R14: 00007f53ec415fa0 R15: 00007ffd7e8b1eb8 [ 546.745417][T11476] [ 548.788938][T11506] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2084'. [ 549.808630][T11490] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 549.814410][T11490] dvmrp1: ignored: set checksum disabled [ 549.824199][T11492] €Â0: renamed from pim6reg1 [ 549.832667][T11506] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2084'. [ 550.080921][T11514] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2086'. [ 550.125102][T11514] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2086'. [ 550.167448][T11519] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2086'. [ 550.328000][T11514] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2086'. [ 551.277660][T11538] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2096'. [ 551.324235][T11539] netlink: 'syz.1.2095': attribute type 10 has an invalid length. [ 554.478720][T11545] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2098'. [ 554.871016][T11567] netlink: 'syz.2.2103': attribute type 3 has an invalid length. [ 554.937217][T11567] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2103'. [ 555.308097][T11578] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2108'. [ 556.566071][T11608] netlink: 'syz.2.2118': attribute type 10 has an invalid length. [ 557.422729][T11633] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2126'. [ 559.145757][T11654] netlink: 'syz.3.2133': attribute type 10 has an invalid length. [ 559.851716][T11675] netlink: 'syz.0.2142': attribute type 10 has an invalid length. [ 559.896576][T11675] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2142'. [ 561.570881][T11703] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2147'. [ 561.939487][T11716] netlink: 'syz.0.2150': attribute type 41 has an invalid length. [ 562.820010][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.826410][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.575387][T11763] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2165'. [ 563.760972][T11767] netlink: 'syz.4.2167': attribute type 1 has an invalid length. [ 563.834280][T11767] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2167'. [ 564.423598][T11784] netlink: 'syz.3.2169': attribute type 1 has an invalid length. [ 564.472128][T11784] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2169'. [ 564.550611][T11790] IPv6: Can't replace route, no match found [ 565.996182][T11821] netlink: 'syz.4.2183': attribute type 3 has an invalid length. [ 566.039312][T11821] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2183'. [ 566.824320][T11837] netlink: 'syz.3.2188': attribute type 21 has an invalid length. [ 566.874410][T11837] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2188'. [ 567.925941][T11854] netlink: 'syz.4.2194': attribute type 41 has an invalid length. [ 568.072607][T11860] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2205'. [ 568.084344][T11862] FAULT_INJECTION: forcing a failure. [ 568.084344][T11862] name failslab, interval 1, probability 0, space 0, times 0 [ 568.200202][T11862] CPU: 1 PID: 11862 Comm: syz.2.2197 Not tainted syzkaller #0 [ 568.207749][T11862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 568.217859][T11862] Call Trace: [ 568.221198][T11862] [ 568.224204][T11862] dump_stack_lvl+0x188/0x24e [ 568.228944][T11862] ? sctp_sendmsg+0x15b0/0x2940 [ 568.233876][T11862] ? ___sys_sendmsg+0x2a2/0x360 [ 568.238782][T11862] ? show_regs_print_info+0x12/0x12 [ 568.244040][T11862] ? load_image+0x400/0x400 [ 568.248605][T11862] should_fail_ex+0x399/0x4d0 [ 568.253351][T11862] should_failslab+0x5/0x20 [ 568.257920][T11862] slab_pre_alloc_hook+0x59/0x310 [ 568.262991][T11862] ? sctp_add_bind_addr+0x89/0x350 [ 568.268162][T11862] __kmem_cache_alloc_node+0x4f/0x260 [ 568.273672][T11862] ? sctp_add_bind_addr+0x89/0x350 [ 568.278856][T11862] kmalloc_trace+0x26/0xe0 [ 568.283329][T11862] sctp_add_bind_addr+0x89/0x350 [ 568.288335][T11862] sctp_copy_local_addr_list+0x311/0x4e0 [ 568.294046][T11862] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 568.299848][T11862] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 568.305988][T11862] ? sctp_v4_is_any+0x31/0x50 [ 568.310718][T11862] ? sctp_copy_one_addr+0x93/0x660 [ 568.315888][T11862] sctp_bind_addr_copy+0xaf/0x3c0 [ 568.320964][T11862] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 568.327364][T11862] sctp_connect_new_asoc+0x2f5/0x6a0 [ 568.332705][T11862] ? __sctp_connect+0xd80/0xd80 [ 568.337599][T11862] ? __local_bh_enable_ip+0x136/0x1c0 [ 568.343009][T11862] ? _local_bh_enable+0xa0/0xa0 [ 568.347898][T11862] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 568.353747][T11862] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 568.359747][T11862] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 568.365333][T11862] ? security_sctp_bind_connect+0x85/0xb0 [ 568.371106][T11862] sctp_sendmsg+0x15b0/0x2940 [ 568.375830][T11862] ? trace_event_raw_event_lock+0x250/0x250 [ 568.381776][T11862] ? aa_sk_perm+0x811/0x950 [ 568.386330][T11862] ? sctp_getsockopt+0x8a0/0x8a0 [ 568.391328][T11862] ? __might_fault+0xa6/0x120 [ 568.396057][T11862] ? aa_af_perm+0x340/0x340 [ 568.400625][T11862] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 568.407102][T11862] ? inet_sendmsg+0x78/0x2f0 [ 568.411744][T11862] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 568.417074][T11862] ? security_socket_sendmsg+0x7c/0xa0 [ 568.422584][T11862] ? inet_send_prepare+0x260/0x260 [ 568.427751][T11862] ____sys_sendmsg+0x5be/0x970 [ 568.432611][T11862] ? __sys_sendmsg_sock+0x30/0x30 [ 568.437686][T11862] ? __import_iovec+0x315/0x500 [ 568.442590][T11862] ? import_iovec+0x6f/0xa0 [ 568.447144][T11862] ___sys_sendmsg+0x2a2/0x360 [ 568.451895][T11862] ? __sys_sendmsg+0x290/0x290 [ 568.456739][T11862] ? __lock_acquire+0x7d10/0x7d10 [ 568.461847][T11862] __se_sys_sendmsg+0x1bb/0x2a0 [ 568.466751][T11862] ? ct_nmi_exit+0x145/0x1c0 [ 568.471397][T11862] ? __x64_sys_sendmsg+0x80/0x80 [ 568.476410][T11862] ? lockdep_hardirqs_on+0x94/0x140 [ 568.481655][T11862] do_syscall_64+0x4c/0xa0 [ 568.486124][T11862] ? clear_bhb_loop+0x60/0xb0 [ 568.490862][T11862] ? clear_bhb_loop+0x60/0xb0 [ 568.495593][T11862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 568.501527][T11862] RIP: 0033:0x7f9b6e19c799 [ 568.505976][T11862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.525626][T11862] RSP: 002b:00007f9b6efaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.534085][T11862] RAX: ffffffffffffffda RBX: 00007f9b6e415fa0 RCX: 00007f9b6e19c799 [ 568.542115][T11862] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 568.550123][T11862] RBP: 00007f9b6efaf090 R08: 0000000000000000 R09: 0000000000000000 [ 568.558121][T11862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 568.566116][T11862] R13: 00007f9b6e416038 R14: 00007f9b6e415fa0 R15: 00007ffd56055f48 [ 568.574122][T11862] [ 569.015553][T11867] netlink: 'syz.1.2209': attribute type 10 has an invalid length. [ 569.056109][T11867] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2209'. [ 572.306476][T11887] device sit0 entered promiscuous mode [ 572.368394][T11901] netlink: 'syz.0.2206': attribute type 21 has an invalid length. [ 572.395029][T11901] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2206'. [ 572.482788][T11909] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 572.491052][T11909] syzkaller1: group set to 778 [ 572.854412][T11926] netlink: 'syz.2.2214': attribute type 10 has an invalid length. [ 572.915330][T11926] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2214'. [ 572.967019][T11926] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 574.292898][T11945] netlink: 'syz.1.2220': attribute type 21 has an invalid length. [ 574.321287][T11945] IPv6: NLM_F_CREATE should be specified when creating new route [ 574.710669][T11953] netlink: 'syz.2.2222': attribute type 10 has an invalid length. [ 574.718873][T11953] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2222'. [ 574.730587][T11953] device team0 entered promiscuous mode [ 574.745010][T11953] device team_slave_1 entered promiscuous mode [ 574.787347][T11953] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 575.093437][T11964] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2225'. [ 575.172737][T11964] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 576.411518][T11988] device syzkaller0 entered promiscuous mode [ 577.051000][T11993] device syzkaller0 entered promiscuous mode [ 577.240266][T12012] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 577.248719][T12012] dvmrp1: ignored: set checksum disabled [ 577.338617][T12020] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2242'. [ 577.349778][T12020] tc_dump_action: action bad kind [ 584.391033][T12052] netlink: 'syz.4.2254': attribute type 10 has an invalid length. [ 584.399136][T12052] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2254'. [ 584.426042][T12052] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 584.735237][T12052] batman_adv: batadv0: Removing interface: veth0_vlan [ 586.317900][T12125] device syzkaller0 entered promiscuous mode [ 586.432697][T12135] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 587.637314][T12143] netlink: 'syz.1.2282': attribute type 10 has an invalid length. [ 587.645856][T12143] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2282'. [ 587.896752][T12159] netlink: 'syz.4.2287': attribute type 2 has an invalid length. [ 587.905759][T12159] netlink: 119 bytes leftover after parsing attributes in process `syz.4.2287'. [ 587.924576][T12162] netlink: 'syz.4.2287': attribute type 10 has an invalid length. [ 588.071992][T12162] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.103844][T12162] bond0: (slave team0): Enslaving as an active interface with an up link [ 593.378916][T12208] netlink: 'syz.2.2302': attribute type 10 has an invalid length. [ 594.486919][T12220] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.2307'. [ 595.149180][T12226] device syzkaller0 entered promiscuous mode [ 597.940439][T12258] device syzkaller0 entered promiscuous mode [ 598.251492][T12266] netlink: 'syz.3.2315': attribute type 11 has an invalid length. [ 598.337951][T12266] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2315'. [ 598.448088][T12266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.833454][T12296] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 603.839465][T12296] syzkaller0: owner set to 0 [ 604.248779][T12307] device syzkaller0 entered promiscuous mode [ 604.300501][T12309] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2337'. [ 608.416310][T12335] netlink: 'syz.1.2334': attribute type 10 has an invalid length. [ 608.424179][T12335] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2334'. [ 608.474085][T12336] device syzkaller0 entered promiscuous mode [ 613.306541][T12357] netlink: 'syz.0.2340': attribute type 10 has an invalid length. [ 613.314478][T12357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2340'. [ 613.609136][T12387] netlink: 'syz.0.2347': attribute type 10 has an invalid length. [ 613.675330][T12387] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2347'. [ 613.908530][T12395] netlink: 'syz.3.2349': attribute type 21 has an invalid length. [ 613.916884][T12395] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2349'. [ 614.547341][T12417] device syzkaller0 entered promiscuous mode [ 619.258890][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2364'. [ 619.353417][T12442] device syzkaller0 entered promiscuous mode [ 623.769145][T12477] netlink: 'syz.3.2370': attribute type 10 has an invalid length. [ 623.777788][T12477] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2370'. [ 624.138861][T12513] device syzkaller0 entered promiscuous mode [ 624.179877][T12519] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2383'. [ 624.257800][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.264163][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.275495][T12526] FAULT_INJECTION: forcing a failure. [ 624.275495][T12526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.385263][T12526] CPU: 0 PID: 12526 Comm: syz.0.2385 Not tainted syzkaller #0 [ 624.392907][T12526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 624.403018][T12526] Call Trace: [ 624.406329][T12526] [ 624.409345][T12526] dump_stack_lvl+0x188/0x24e [ 624.414126][T12526] ? show_regs_print_info+0x12/0x12 [ 624.419378][T12526] ? load_image+0x400/0x400 [ 624.423923][T12526] ? __lock_acquire+0x7d10/0x7d10 [ 624.429001][T12526] should_fail_ex+0x399/0x4d0 [ 624.433734][T12526] _copy_from_user+0x2c/0x170 [ 624.438464][T12526] bpf_prog_test_run_skb+0x262/0x12a0 [ 624.443895][T12526] ? __fget_files+0x28/0x4b0 [ 624.448535][T12526] ? __fget_files+0x28/0x4b0 [ 624.453169][T12526] ? __fget_files+0x43d/0x4b0 [ 624.457902][T12526] ? cpu_online+0xa0/0xa0 [ 624.462269][T12526] bpf_prog_test_run+0x31e/0x390 [ 624.467260][T12526] __sys_bpf+0x62b/0x780 [ 624.471552][T12526] ? bpf_link_show_fdinfo+0x380/0x380 [ 624.476988][T12526] ? lock_chain_count+0x20/0x20 [ 624.481892][T12526] __x64_sys_bpf+0x78/0x90 [ 624.486368][T12526] do_syscall_64+0x4c/0xa0 [ 624.490842][T12526] ? clear_bhb_loop+0x60/0xb0 [ 624.495566][T12526] ? clear_bhb_loop+0x60/0xb0 [ 624.500296][T12526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.506252][T12526] RIP: 0033:0x7f53ec19c799 [ 624.510708][T12526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.530365][T12526] RSP: 002b:00007f53ecff9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 624.538829][T12526] RAX: ffffffffffffffda RBX: 00007f53ec415fa0 RCX: 00007f53ec19c799 [ 624.546849][T12526] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 000000000000000a [ 624.554862][T12526] RBP: 00007f53ecff9090 R08: 0000000000000000 R09: 0000000000000000 [ 624.562893][T12526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.570899][T12526] R13: 00007f53ec416038 R14: 00007f53ec415fa0 R15: 00007ffd7e8b1eb8 [ 624.578925][T12526] [ 624.962093][T12519] device syzkaller0 entered promiscuous mode [ 627.541008][T12535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.549602][T12535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.558169][T12535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.565980][T12535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.619045][T12541] netlink: 'syz.3.2390': attribute type 10 has an invalid length. [ 627.628455][T12541] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2390'. [ 628.170830][T12573] sctp: [Deprecated]: syz.3.2402 (pid 12573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 628.170830][T12573] Use struct sctp_sack_info instead [ 631.076070][T12567] device syzkaller0 entered promiscuous mode [ 634.033156][T12615] device syzkaller0 entered promiscuous mode [ 637.047318][T12628] netlink: 'syz.1.2404': attribute type 10 has an invalid length. [ 637.058439][T12628] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2404'. [ 637.181734][T12651] device syzkaller0 entered promiscuous mode [ 639.649049][T12697] netlink: 'syz.4.2422': attribute type 10 has an invalid length. [ 639.683138][T12697] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2422'. [ 639.737897][T12709] netlink: 26 bytes leftover after parsing attributes in process `syz.1.2425'. [ 639.913060][T12710] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.2428'. [ 640.148259][T12715] netlink: 'syz.3.2428': attribute type 10 has an invalid length. [ 640.927096][T12725] netlink: 'syz.2.2440': attribute type 10 has an invalid length. [ 640.954914][T12725] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2440'. [ 641.938455][T12745] FAULT_INJECTION: forcing a failure. [ 641.938455][T12745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.951796][T12745] CPU: 1 PID: 12745 Comm: syz.2.2436 Not tainted syzkaller #0 [ 641.959329][T12745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 641.969543][T12745] Call Trace: [ 641.972872][T12745] [ 641.975870][T12745] dump_stack_lvl+0x188/0x24e [ 641.980627][T12745] ? show_regs_print_info+0x12/0x12 [ 641.985894][T12745] ? load_image+0x400/0x400 [ 641.990472][T12745] ? __lock_acquire+0x7d10/0x7d10 [ 641.995582][T12745] should_fail_ex+0x399/0x4d0 [ 642.000346][T12745] strncpy_from_user+0x32/0x350 [ 642.005367][T12745] getname_flags+0xf2/0x500 [ 642.009947][T12745] __x64_sys_mkdirat+0x78/0x90 [ 642.014770][T12745] do_syscall_64+0x4c/0xa0 [ 642.019240][T12745] ? clear_bhb_loop+0x60/0xb0 [ 642.023981][T12745] ? clear_bhb_loop+0x60/0xb0 [ 642.028720][T12745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 642.034663][T12745] RIP: 0033:0x7f9b6e19c799 [ 642.039128][T12745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.058789][T12745] RSP: 002b:00007f9b6efaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 642.067266][T12745] RAX: ffffffffffffffda RBX: 00007f9b6e415fa0 RCX: 00007f9b6e19c799 [ 642.075335][T12745] RDX: 00000000000001ff RSI: 0000200000000780 RDI: 0000000000000004 [ 642.083359][T12745] RBP: 00007f9b6efaf090 R08: 0000000000000000 R09: 0000000000000000 [ 642.091385][T12745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.099418][T12745] R13: 00007f9b6e416038 R14: 00007f9b6e415fa0 R15: 00007ffd56055f48 [ 642.107573][T12745] [ 642.283643][T12752] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 642.319878][T12752] dvmrp1: ignored: set checksum disabled [ 642.379421][T12752] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2439'. [ 642.409700][T12755] netlink: 'syz.4.2439': attribute type 21 has an invalid length. [ 642.465019][T12755] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2439'. [ 642.500367][T12755] netlink: 'syz.4.2439': attribute type 4 has an invalid length. [ 642.664541][T12766] netlink: 'syz.1.2444': attribute type 10 has an invalid length. [ 642.856888][T12771] netlink: 'syz.3.2445': attribute type 39 has an invalid length. [ 643.138520][T12781] netlink: 'syz.4.2447': attribute type 10 has an invalid length. [ 643.196851][T12781] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2447'. [ 643.557963][T12780] netlink: 'syz.2.2449': attribute type 10 has an invalid length. [ 643.615697][T12780] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2449'. [ 645.497760][T12834] FAULT_INJECTION: forcing a failure. [ 645.497760][T12834] name failslab, interval 1, probability 0, space 0, times 0 [ 645.534598][T12834] CPU: 1 PID: 12834 Comm: syz.4.2465 Not tainted syzkaller #0 [ 645.542144][T12834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 645.552238][T12834] Call Trace: [ 645.555559][T12834] [ 645.558532][T12834] dump_stack_lvl+0x188/0x24e [ 645.563267][T12834] ? show_regs_print_info+0x12/0x12 [ 645.568513][T12834] ? load_image+0x400/0x400 [ 645.573059][T12834] ? __might_sleep+0xd0/0xd0 [ 645.577691][T12834] ? __lock_acquire+0x7d10/0x7d10 [ 645.582758][T12834] ? fib4_rule_action+0x8b/0x330 [ 645.587746][T12834] should_fail_ex+0x399/0x4d0 [ 645.592489][T12834] should_failslab+0x5/0x20 [ 645.597050][T12834] slab_pre_alloc_hook+0x59/0x310 [ 645.602123][T12834] kmem_cache_alloc_node+0x5a/0x320 [ 645.607360][T12834] ? __alloc_skb+0xfc/0x7e0 [ 645.611940][T12834] __alloc_skb+0xfc/0x7e0 [ 645.616324][T12834] __ip_append_data+0x26b8/0x3850 [ 645.621394][T12834] ? verify_lock_unused+0x140/0x140 [ 645.626673][T12834] ? raw_send_hdrinc+0x1150/0x1150 [ 645.631845][T12834] ? ip_setup_cork+0x850/0x850 [ 645.636668][T12834] ? ip_setup_cork+0x532/0x850 [ 645.641509][T12834] ip_append_data+0x132/0x1a0 [ 645.646237][T12834] ? raw_send_hdrinc+0x1150/0x1150 [ 645.651402][T12834] raw_sendmsg+0x14b9/0x1b20 [ 645.656059][T12834] ? raw_sendmsg+0x590/0x1b20 [ 645.660789][T12834] ? compat_raw_ioctl+0x60/0x60 [ 645.665711][T12834] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 645.672180][T12834] ? sock_rps_record_flow+0x19/0x3f0 [ 645.677550][T12834] ? inet_sendmsg+0x78/0x2f0 [ 645.682186][T12834] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 645.687504][T12834] ? security_socket_sendmsg+0x7c/0xa0 [ 645.693029][T12834] ? inet_send_prepare+0x260/0x260 [ 645.698185][T12834] ____sys_sendmsg+0x5be/0x970 [ 645.703010][T12834] ? __sys_sendmsg_sock+0x30/0x30 [ 645.708090][T12834] ? __import_iovec+0x315/0x500 [ 645.712990][T12834] ? import_iovec+0x6f/0xa0 [ 645.717536][T12834] ___sys_sendmsg+0x2a2/0x360 [ 645.722277][T12834] ? __sys_sendmsg+0x290/0x290 [ 645.727104][T12834] ? __lock_acquire+0x7d10/0x7d10 [ 645.732195][T12834] __se_sys_sendmsg+0x1bb/0x2a0 [ 645.737193][T12834] ? __x64_sys_sendmsg+0x80/0x80 [ 645.742194][T12834] ? lockdep_hardirqs_on+0x94/0x140 [ 645.747427][T12834] do_syscall_64+0x4c/0xa0 [ 645.751909][T12834] ? clear_bhb_loop+0x60/0xb0 [ 645.756630][T12834] ? clear_bhb_loop+0x60/0xb0 [ 645.761380][T12834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.767400][T12834] RIP: 0033:0x7f88ceb9c799 [ 645.771852][T12834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.791502][T12834] RSP: 002b:00007f88cfa65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.800023][T12834] RAX: ffffffffffffffda RBX: 00007f88cee15fa0 RCX: 00007f88ceb9c799 [ 645.808031][T12834] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 645.816038][T12834] RBP: 00007f88cfa65090 R08: 0000000000000000 R09: 0000000000000000 [ 645.824041][T12834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.832049][T12834] R13: 00007f88cee16038 R14: 00007f88cee15fa0 R15: 00007ffcf6547448 [ 645.840076][T12834] [ 645.877362][T12839] netlink: 'syz.0.2463': attribute type 10 has an invalid length. [ 645.886607][T12839] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2463'. [ 646.872100][T12870] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2477'. [ 646.909283][T12870] netlink: 'syz.2.2477': attribute type 6 has an invalid length. [ 646.925434][T12870] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2477'. [ 647.090218][T12875] netlink: 'syz.3.2479': attribute type 21 has an invalid length. [ 647.108699][T12875] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2479'. [ 647.537248][T12898] FAULT_INJECTION: forcing a failure. [ 647.537248][T12898] name failslab, interval 1, probability 0, space 0, times 0 [ 647.587701][T12898] CPU: 1 PID: 12898 Comm: syz.1.2488 Not tainted syzkaller #0 [ 647.595281][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 647.605415][T12898] Call Trace: [ 647.608742][T12898] [ 647.611727][T12898] dump_stack_lvl+0x188/0x24e [ 647.616481][T12898] ? show_regs_print_info+0x12/0x12 [ 647.621753][T12898] ? load_image+0x400/0x400 [ 647.626316][T12898] ? __might_sleep+0xd0/0xd0 [ 647.630958][T12898] ? __lock_acquire+0x7d10/0x7d10 [ 647.636047][T12898] should_fail_ex+0x399/0x4d0 [ 647.640799][T12898] should_failslab+0x5/0x20 [ 647.645383][T12898] slab_pre_alloc_hook+0x59/0x310 [ 647.650466][T12898] kmem_cache_alloc_node+0x5a/0x320 [ 647.655723][T12898] ? __alloc_skb+0xfc/0x7e0 [ 647.660303][T12898] __alloc_skb+0xfc/0x7e0 [ 647.664746][T12898] ? netlink_autobind+0xda/0x300 [ 647.669770][T12898] netlink_sendmsg+0x654/0xbd0 [ 647.674714][T12898] ? netlink_getsockopt+0x550/0x550 [ 647.679976][T12898] ? aa_sock_msg_perm+0x94/0x150 [ 647.684972][T12898] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 647.690315][T12898] ? security_socket_sendmsg+0x7c/0xa0 [ 647.695831][T12898] ? netlink_getsockopt+0x550/0x550 [ 647.701070][T12898] ____sys_sendmsg+0x5be/0x970 [ 647.705897][T12898] ? __sys_sendmsg_sock+0x30/0x30 [ 647.710954][T12898] ? __import_iovec+0x315/0x500 [ 647.715848][T12898] ? import_iovec+0x6f/0xa0 [ 647.720383][T12898] ___sys_sendmsg+0x2a2/0x360 [ 647.725132][T12898] ? __sys_sendmsg+0x290/0x290 [ 647.729961][T12898] ? __lock_acquire+0x7d10/0x7d10 [ 647.736354][T12898] __se_sys_sendmsg+0x1bb/0x2a0 [ 647.741246][T12898] ? __x64_sys_sendmsg+0x80/0x80 [ 647.746237][T12898] ? lockdep_hardirqs_on+0x94/0x140 [ 647.751478][T12898] do_syscall_64+0x4c/0xa0 [ 647.755922][T12898] ? clear_bhb_loop+0x60/0xb0 [ 647.760632][T12898] ? clear_bhb_loop+0x60/0xb0 [ 647.765346][T12898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.771271][T12898] RIP: 0033:0x7f4d0259c799 [ 647.775712][T12898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.795342][T12898] RSP: 002b:00007f4d03415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.803784][T12898] RAX: ffffffffffffffda RBX: 00007f4d02815fa0 RCX: 00007f4d0259c799 [ 647.811778][T12898] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 647.819775][T12898] RBP: 00007f4d03415090 R08: 0000000000000000 R09: 0000000000000000 [ 647.827858][T12898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.835859][T12898] R13: 00007f4d02816038 R14: 00007f4d02815fa0 R15: 00007ffdf0e87458 [ 647.843892][T12898] [ 649.199070][T12948] netlink: 'syz.2.2501': attribute type 3 has an invalid length. [ 649.227710][T12948] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2501'. [ 649.689290][T12963] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2508'. [ 649.719679][T12963] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2508'. [ 649.750359][T12965] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2508'. [ 649.810858][T12963] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2508'. [ 650.380566][T12979] netlink: 'syz.4.2509': attribute type 9 has an invalid length. [ 650.455086][T12979] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.2509'. [ 654.325978][T13023] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2526'. [ 656.413533][T13041] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2532'. [ 656.834958][T13050] device syzkaller0 entered promiscuous mode [ 657.144031][T13062] netlink: 'syz.3.2537': attribute type 3 has an invalid length. [ 657.175093][T13062] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2537'. [ 657.429777][T13069] netlink: 'syz.2.2540': attribute type 10 has an invalid length. [ 659.947583][T13099] netlink: 'syz.2.2550': attribute type 10 has an invalid length. [ 659.956231][T13099] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2550'. [ 660.252848][T13113] device syzkaller0 entered promiscuous mode [ 661.099156][T13144] netlink: 'syz.0.2564': attribute type 3 has an invalid length. [ 661.133750][T13144] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2564'. [ 663.823215][T13156] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2565'. [ 664.116993][T13178] device syzkaller0 entered promiscuous mode [ 664.278321][T13189] netlink: 'syz.2.2577': attribute type 6 has an invalid length. [ 664.493717][T13196] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2580'. [ 665.624162][T13202] netlink: 'syz.3.2582': attribute type 13 has an invalid length. [ 665.653244][T13202] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.2582'. [ 665.886123][T13219] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2585'. [ 670.055943][T13233] Ÿë: port 1(erspan0) entered blocking state [ 670.062161][T13233] Ÿë: port 1(erspan0) entered disabled state [ 670.107568][T13233] device erspan0 entered promiscuous mode [ 670.301255][T13260] FAULT_INJECTION: forcing a failure. [ 670.301255][T13260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.349451][T13260] CPU: 0 PID: 13260 Comm: syz.0.2597 Not tainted syzkaller #0 [ 670.356988][T13260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 670.367077][T13260] Call Trace: [ 670.370391][T13260] [ 670.373436][T13260] dump_stack_lvl+0x188/0x24e [ 670.378165][T13260] ? show_regs_print_info+0x12/0x12 [ 670.383409][T13260] ? load_image+0x400/0x400 [ 670.387959][T13260] ? __might_fault+0xa6/0x120 [ 670.392682][T13260] should_fail_ex+0x399/0x4d0 [ 670.397431][T13260] copyin+0x1b/0x120 [ 670.401375][T13260] _copy_from_iter+0x447/0x1130 [ 670.406361][T13260] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 670.411869][T13260] ? copyout_mc+0x110/0x110 [ 670.416420][T13260] ? __virt_addr_valid+0x188/0x540 [ 670.421576][T13260] ? __virt_addr_valid+0x188/0x540 [ 670.426729][T13260] ? __virt_addr_valid+0x465/0x540 [ 670.431890][T13260] ? __check_object_size+0x500/0xa40 [ 670.437218][T13260] skb_copy_datagram_from_iter+0xef/0x690 [ 670.442982][T13260] ? skb_put+0x117/0x210 [ 670.447276][T13260] queue_oob+0x145/0x4f0 [ 670.451572][T13260] ? __lock_acquire+0x7d10/0x7d10 [ 670.456651][T13260] ? scm_stat_add+0xc0/0xc0 [ 670.461232][T13260] ? sock_def_readable+0x1e/0x280 [ 670.466303][T13260] ? sock_def_readable+0x226/0x280 [ 670.471484][T13260] unix_stream_sendmsg+0x8cf/0xa70 [ 670.476648][T13260] ? unix_show_fdinfo+0x2c0/0x2c0 [ 670.481713][T13260] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 670.488177][T13260] ? __virt_addr_valid+0x188/0x540 [ 670.493335][T13260] ? aa_sock_msg_perm+0x94/0x150 [ 670.498311][T13260] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 670.503631][T13260] ? security_socket_sendmsg+0x7c/0xa0 [ 670.509156][T13260] ? unix_show_fdinfo+0x2c0/0x2c0 [ 670.514212][T13260] ____sys_sendmsg+0x5be/0x970 [ 670.519033][T13260] ? __sys_sendmsg_sock+0x30/0x30 [ 670.524102][T13260] ? __import_iovec+0x315/0x500 [ 670.529011][T13260] ? import_iovec+0x6f/0xa0 [ 670.533555][T13260] ___sys_sendmsg+0x2a2/0x360 [ 670.538290][T13260] ? __sys_sendmsg+0x290/0x290 [ 670.543135][T13260] ? __lock_acquire+0x7d10/0x7d10 [ 670.548238][T13260] __se_sys_sendmsg+0x1bb/0x2a0 [ 670.553147][T13260] ? __x64_sys_sendmsg+0x80/0x80 [ 670.558154][T13260] ? lockdep_hardirqs_on+0x94/0x140 [ 670.563405][T13260] do_syscall_64+0x4c/0xa0 [ 670.567866][T13260] ? clear_bhb_loop+0x60/0xb0 [ 670.572581][T13260] ? clear_bhb_loop+0x60/0xb0 [ 670.577305][T13260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 670.583235][T13260] RIP: 0033:0x7f53ec19c799 [ 670.587699][T13260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.607609][T13260] RSP: 002b:00007f53ecff9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.616110][T13260] RAX: ffffffffffffffda RBX: 00007f53ec415fa0 RCX: 00007f53ec19c799 [ 670.624146][T13260] RDX: 0000000000020001 RSI: 0000200000000d40 RDI: 0000000000000003 [ 670.632161][T13260] RBP: 00007f53ecff9090 R08: 0000000000000000 R09: 0000000000000000 [ 670.640166][T13260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 670.648176][T13260] R13: 00007f53ec416038 R14: 00007f53ec415fa0 R15: 00007ffd7e8b1eb8 [ 670.656198][T13260] [ 671.415655][T13284] FAULT_INJECTION: forcing a failure. [ 671.415655][T13284] name failslab, interval 1, probability 0, space 0, times 0 [ 671.433143][T13284] CPU: 0 PID: 13284 Comm: syz.4.2607 Not tainted syzkaller #0 [ 671.440685][T13284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 671.450787][T13284] Call Trace: [ 671.454152][T13284] [ 671.457122][T13284] dump_stack_lvl+0x188/0x24e [ 671.461851][T13284] ? sctp_sendmsg+0x15b0/0x2940 [ 671.466757][T13284] ? ___sys_sendmsg+0x2a2/0x360 [ 671.471659][T13284] ? show_regs_print_info+0x12/0x12 [ 671.476926][T13284] ? load_image+0x400/0x400 [ 671.481486][T13284] should_fail_ex+0x399/0x4d0 [ 671.486225][T13284] should_failslab+0x5/0x20 [ 671.490783][T13284] slab_pre_alloc_hook+0x59/0x310 [ 671.495849][T13284] ? sctp_add_bind_addr+0x89/0x350 [ 671.501015][T13284] __kmem_cache_alloc_node+0x4f/0x260 [ 671.506438][T13284] ? sctp_add_bind_addr+0x89/0x350 [ 671.511629][T13284] kmalloc_trace+0x26/0xe0 [ 671.516100][T13284] sctp_add_bind_addr+0x89/0x350 [ 671.521090][T13284] sctp_copy_local_addr_list+0x311/0x4e0 [ 671.526770][T13284] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 671.532558][T13284] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 671.538687][T13284] ? sctp_v4_is_any+0x31/0x50 [ 671.543439][T13284] ? sctp_copy_one_addr+0x93/0x660 [ 671.548612][T13284] sctp_bind_addr_copy+0xaf/0x3c0 [ 671.553689][T13284] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 671.560077][T13284] sctp_connect_new_asoc+0x2f5/0x6a0 [ 671.565418][T13284] ? __sctp_connect+0xd80/0xd80 [ 671.570314][T13284] ? __local_bh_enable_ip+0x136/0x1c0 [ 671.575729][T13284] ? _local_bh_enable+0xa0/0xa0 [ 671.580650][T13284] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 671.586516][T13284] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 671.592399][T13284] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 671.597992][T13284] ? security_sctp_bind_connect+0x85/0xb0 [ 671.603763][T13284] sctp_sendmsg+0x15b0/0x2940 [ 671.608508][T13284] ? aa_sk_perm+0x811/0x950 [ 671.613100][T13284] ? sctp_getsockopt+0x8a0/0x8a0 [ 671.618097][T13284] ? __might_fault+0xa6/0x120 [ 671.621584][T13288] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2606'. [ 671.622806][T13284] ? aa_af_perm+0x340/0x340 [ 671.622891][T13284] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 671.639396][T13288] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 671.642872][T13284] ? inet_sendmsg+0x78/0x2f0 [ 671.642906][T13284] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 671.642929][T13284] ? security_socket_sendmsg+0x7c/0xa0 [ 671.642965][T13284] ? inet_send_prepare+0x260/0x260 [ 671.642996][T13284] ____sys_sendmsg+0x5be/0x970 [ 671.675240][T13284] ? __sys_sendmsg_sock+0x30/0x30 [ 671.680330][T13284] ? __import_iovec+0x315/0x500 [ 671.685238][T13284] ? import_iovec+0x6f/0xa0 [ 671.689781][T13284] ___sys_sendmsg+0x2a2/0x360 [ 671.694515][T13284] ? __sys_sendmsg+0x290/0x290 [ 671.699347][T13284] ? __lock_acquire+0x7d10/0x7d10 [ 671.704445][T13284] __se_sys_sendmsg+0x1bb/0x2a0 [ 671.709356][T13284] ? __x64_sys_sendmsg+0x80/0x80 [ 671.714364][T13284] ? lockdep_hardirqs_on+0x94/0x140 [ 671.719604][T13284] do_syscall_64+0x4c/0xa0 [ 671.724070][T13284] ? clear_bhb_loop+0x60/0xb0 [ 671.728792][T13284] ? clear_bhb_loop+0x60/0xb0 [ 671.733519][T13284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 671.739455][T13284] RIP: 0033:0x7f88ceb9c799 [ 671.743913][T13284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.763563][T13284] RSP: 002b:00007f88cfa65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.772027][T13284] RAX: ffffffffffffffda RBX: 00007f88cee15fa0 RCX: 00007f88ceb9c799 [ 671.780056][T13284] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 671.788074][T13284] RBP: 00007f88cfa65090 R08: 0000000000000000 R09: 0000000000000000 [ 671.796114][T13284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 671.804118][T13284] R13: 00007f88cee16038 R14: 00007f88cee15fa0 R15: 00007ffcf6547448 [ 671.812174][T13284] [ 671.859254][T13290] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2608'. [ 671.877977][T13291] netlink: 'syz.3.2606': attribute type 11 has an invalid length. [ 671.890856][T13291] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2606'. [ 671.909501][T13290] device caif0 entered promiscuous mode [ 671.920556][T13291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.069441][T13298] netlink: 'syz.4.2611': attribute type 21 has an invalid length. [ 672.094576][T13298] netlink: 'syz.4.2611': attribute type 15 has an invalid length. [ 674.207339][T13335] netlink: 'syz.1.2620': attribute type 10 has an invalid length. [ 674.244885][T13335] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2620'. [ 674.295542][T13335] bridge0: port 3(team0) entered blocking state [ 674.317828][T13335] bridge0: port 3(team0) entered disabled state [ 674.349595][T13335] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 674.638649][T13350] netlink: 'syz.1.2627': attribute type 21 has an invalid length. [ 674.673851][T13350] netlink: 'syz.1.2627': attribute type 15 has an invalid length. [ 674.720049][T13353] netlink: 'syz.4.2628': attribute type 10 has an invalid length. [ 674.783260][T13353] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.790878][T13353] bridge0: port 2(bridge_slave_1) entered listening state [ 674.799409][T13353] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.806732][T13353] bridge0: port 1(bridge_slave_0) entered listening state [ 674.847723][T13353] team0: Port device bridge0 added [ 675.096811][T13357] device syzkaller0 entered promiscuous mode [ 676.763554][T13384] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2637'. [ 678.666330][T13408] netlink: 'syz.2.2643': attribute type 21 has an invalid length. [ 678.683193][T13410] sctp: [Deprecated]: syz.3.2646 (pid 13410) Use of int in max_burst socket option deprecated. [ 678.683193][T13410] Use struct sctp_assoc_value instead [ 678.691779][T13408] netlink: 'syz.2.2643': attribute type 15 has an invalid length. [ 678.799178][T13414] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2645'. [ 679.504395][T13431] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 679.515339][T13431] dvmrp1: ignored: set checksum disabled [ 680.386661][T13453] netlink: 'syz.4.2660': attribute type 21 has an invalid length. [ 680.405094][T13453] netlink: 'syz.4.2660': attribute type 15 has an invalid length. [ 681.516438][T13468] sctp: [Deprecated]: syz.4.2664 (pid 13468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 681.516438][T13468] Use struct sctp_sack_info instead [ 682.059156][T11134] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 682.653140][T13488] netlink: 'syz.0.2671': attribute type 21 has an invalid length. [ 682.720085][T13488] netlink: 'syz.0.2671': attribute type 15 has an invalid length. [ 683.009354][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2674'. [ 683.934951][T13514] FAULT_INJECTION: forcing a failure. [ 683.934951][T13514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.976256][T13514] CPU: 1 PID: 13514 Comm: syz.4.2680 Not tainted syzkaller #0 [ 683.983830][T13514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 683.994039][T13514] Call Trace: [ 683.997445][T13514] [ 684.000417][T13514] dump_stack_lvl+0x188/0x24e [ 684.005259][T13514] ? show_regs_print_info+0x12/0x12 [ 684.010523][T13514] ? load_image+0x400/0x400 [ 684.015185][T13514] ? __lock_acquire+0x7d10/0x7d10 [ 684.020266][T13514] ? perf_trace_lock_acquire+0x100/0x3e0 [ 684.025950][T13514] should_fail_ex+0x399/0x4d0 [ 684.030688][T13514] strncpy_from_user+0x32/0x350 [ 684.035602][T13514] bpf_prog_load+0x1f3/0x1560 [ 684.040352][T13514] ? map_freeze+0x390/0x390 [ 684.044905][T13514] ? __might_fault+0xa6/0x120 [ 684.049643][T13514] ? __might_fault+0xa6/0x120 [ 684.054365][T13514] ? __might_fault+0xc2/0x120 [ 684.059079][T13514] ? __might_fault+0xa6/0x120 [ 684.063796][T13514] ? bpf_lsm_bpf+0x5/0x10 [ 684.068171][T13514] ? security_bpf+0x7a/0xa0 [ 684.072717][T13514] __sys_bpf+0x5b8/0x780 [ 684.077036][T13514] ? bpf_link_show_fdinfo+0x380/0x380 [ 684.082486][T13514] ? lock_chain_count+0x20/0x20 [ 684.087405][T13514] __x64_sys_bpf+0x78/0x90 [ 684.091873][T13514] do_syscall_64+0x4c/0xa0 [ 684.096334][T13514] ? clear_bhb_loop+0x60/0xb0 [ 684.101059][T13514] ? clear_bhb_loop+0x60/0xb0 [ 684.105783][T13514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 684.111738][T13514] RIP: 0033:0x7f88ceb9c799 [ 684.116235][T13514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.135972][T13514] RSP: 002b:00007f88cfa65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 684.144437][T13514] RAX: ffffffffffffffda RBX: 00007f88cee15fa0 RCX: 00007f88ceb9c799 [ 684.152548][T13514] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 684.160601][T13514] RBP: 00007f88cfa65090 R08: 0000000000000000 R09: 0000000000000000 [ 684.168794][T13514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.176991][T13514] R13: 00007f88cee16038 R14: 00007f88cee15fa0 R15: 00007ffcf6547448 [ 684.185069][T13514] [ 684.421969][T13520] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2682'. [ 684.441329][T13520] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2682'. [ 684.460969][T13520] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2682'. [ 684.482178][T13520] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2682'. [ 684.871130][T13530] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2685'. [ 684.916631][T13530] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2685'. [ 685.250695][T13534] netlink: 'syz.0.2687': attribute type 21 has an invalid length. [ 685.295612][T13534] netlink: 'syz.0.2687': attribute type 15 has an invalid length. [ 685.371687][T13530] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2685'. [ 685.533378][T13538] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2685'. [ 685.708109][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.714494][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.316325][T13555] netlink: 'syz.1.2694': attribute type 29 has an invalid length. [ 686.365598][T13555] netlink: 'syz.1.2694': attribute type 29 has an invalid length. [ 686.394682][T13557] netlink: 'syz.1.2694': attribute type 29 has an invalid length. [ 686.486914][T13555] device wg2 entered promiscuous mode [ 687.125120][T13565] netlink: 'syz.0.2696': attribute type 21 has an invalid length. [ 687.161015][T13565] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2696'. [ 687.615323][T13573] netlink: 'syz.1.2700': attribute type 21 has an invalid length. [ 687.665673][T13573] netlink: 'syz.1.2700': attribute type 15 has an invalid length. [ 690.174933][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 690.182229][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 690.249456][T13598] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2707'. [ 690.591558][T13607] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2709'. [ 690.600770][T13604] netlink: 'syz.0.2708': attribute type 19 has an invalid length. [ 690.610883][T13604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2708'. [ 690.675979][T13607] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2709'. [ 690.846095][T13612] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2709'. [ 691.029944][T13614] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2709'. [ 691.460423][T13616] device syzkaller0 entered promiscuous mode [ 700.953548][T13625] netlink: 'syz.4.2713': attribute type 21 has an invalid length. [ 700.975609][T13625] netlink: 'syz.4.2713': attribute type 15 has an invalid length. [ 701.814040][T13739] netlink: 'syz.3.2735': attribute type 21 has an invalid length. [ 701.854897][T13739] netlink: 'syz.3.2735': attribute type 15 has an invalid length. [ 702.317807][T13745] netlink: 'syz.0.2737': attribute type 21 has an invalid length. [ 702.384714][T13745] netlink: 'syz.0.2737': attribute type 15 has an invalid length. [ 704.938542][T13769] netlink: 'syz.3.2731': attribute type 10 has an invalid length. [ 705.018202][T13769] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2731'. [ 705.553019][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.560705][ C1] bridge0: topology change detected, propagating [ 705.568634][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.576244][ C1] bridge0: topology change detected, propagating [ 706.052717][T13767] netlink: 'syz.2.2732': attribute type 10 has an invalid length. [ 706.107802][T13767] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2732'. [ 706.270633][T13783] device syzkaller0 entered promiscuous mode [ 706.284585][T13719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 706.953211][T13817] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2744'. [ 707.628737][T13826] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2746'. [ 707.777954][T13827] netlink: 'syz.4.2746': attribute type 1 has an invalid length. [ 707.787397][T13827] netlink: 126288 bytes leftover after parsing attributes in process `syz.4.2746'. [ 707.797847][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2746'. [ 708.963429][T13801] netlink: 'syz.3.2741': attribute type 21 has an invalid length. [ 708.971662][T13801] netlink: 'syz.3.2741': attribute type 15 has an invalid length. [ 708.984993][T13817] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2744'. [ 709.012058][T13826] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2746'. [ 709.419439][T13832] device syzkaller0 entered promiscuous mode [ 709.523190][T13830] netlink: 'syz.3.2747': attribute type 10 has an invalid length. [ 709.543469][T13830] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2747'. [ 709.587750][T13846] netlink: 'syz.1.2750': attribute type 10 has an invalid length. [ 709.601066][T13846] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2750'. [ 712.208370][T13865] netlink: 'syz.4.2757': attribute type 21 has an invalid length. [ 712.216417][T13865] netlink: 'syz.4.2757': attribute type 15 has an invalid length. [ 712.224421][T13863] netlink: 'syz.1.2756': attribute type 10 has an invalid length. [ 712.232471][T13863] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2756'. [ 712.242485][T13871] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2759'. [ 712.454024][T13879] device syzkaller0 entered promiscuous mode [ 712.948343][T13900] device lo entered promiscuous mode [ 713.016594][T13900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 713.126621][T13894] netlink: 'syz.3.2765': attribute type 10 has an invalid length. [ 713.159587][T13894] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2765'. [ 713.187516][T13899] IPv6: NLM_F_CREATE should be specified when creating new route [ 717.205499][T13915] netlink: 'syz.1.2772': attribute type 21 has an invalid length. [ 717.213459][T13915] netlink: 'syz.1.2772': attribute type 15 has an invalid length. [ 717.272858][T13911] device syzkaller0 entered promiscuous mode [ 719.556850][T13960] netlink: 'syz.2.2783': attribute type 10 has an invalid length. [ 719.565870][T13960] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2783'. [ 719.582048][T13980] netlink: 'syz.1.2788': attribute type 21 has an invalid length. [ 719.594873][T13980] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2788'. [ 719.967384][T13995] netlink: 'syz.0.2795': attribute type 21 has an invalid length. [ 720.020028][T13995] netlink: 'syz.0.2795': attribute type 15 has an invalid length. [ 720.270125][T14005] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2797'. [ 721.470287][T14021] netlink: 'syz.3.2801': attribute type 10 has an invalid length. [ 721.481688][T14021] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2801'. [ 721.942232][T14029] device syzkaller0 entered promiscuous mode [ 721.958803][T14033] netlink: 'syz.0.2805': attribute type 21 has an invalid length. [ 721.974861][T14033] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2805'. [ 722.301229][T14041] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2808'. [ 722.312112][T14041] bridge_slave_1: default FDB implementation only supports local addresses [ 722.553249][T14050] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2812'. [ 724.211986][T14052] netlink: 'syz.1.2810': attribute type 21 has an invalid length. [ 724.220159][T14052] netlink: 'syz.1.2810': attribute type 15 has an invalid length. [ 724.384470][T14058] netlink: 'syz.0.2823': attribute type 21 has an invalid length. [ 724.412646][T14058] netlink: 'syz.0.2823': attribute type 15 has an invalid length. [ 725.300948][T14076] netlink: 'syz.0.2819': attribute type 10 has an invalid length. [ 725.354178][T14076] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2819'. [ 726.656925][T14087] netlink: 'syz.0.2825': attribute type 16 has an invalid length. [ 726.682893][T14087] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2825'. [ 728.067024][T14113] netlink: 'syz.0.2833': attribute type 23 has an invalid length. [ 728.457713][T14117] netlink: 'syz.3.2830': attribute type 10 has an invalid length. [ 728.636882][T14125] FAULT_INJECTION: forcing a failure. [ 728.636882][T14125] name failslab, interval 1, probability 0, space 0, times 0 [ 728.680544][T14125] CPU: 0 PID: 14125 Comm: syz.1.2834 Not tainted syzkaller #0 [ 728.688128][T14125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 728.698278][T14125] Call Trace: [ 728.701643][T14125] [ 728.704651][T14125] dump_stack_lvl+0x188/0x24e [ 728.709546][T14125] ? show_regs_print_info+0x12/0x12 [ 728.714821][T14125] ? load_image+0x400/0x400 [ 728.719386][T14125] ? __might_sleep+0xd0/0xd0 [ 728.724108][T14125] ? __lock_acquire+0x7d10/0x7d10 [ 728.729241][T14125] should_fail_ex+0x399/0x4d0 [ 728.734025][T14125] should_failslab+0x5/0x20 [ 728.738592][T14125] slab_pre_alloc_hook+0x59/0x310 [ 728.743776][T14125] kmem_cache_alloc_lru+0x49/0x2e0 [ 728.748927][T14125] ? __d_alloc+0x31/0x700 [ 728.753339][T14125] __d_alloc+0x31/0x700 [ 728.757544][T14125] ? rwsem_write_trylock+0x135/0x1c0 [ 728.762986][T14125] d_alloc+0x4a/0x250 [ 728.767039][T14125] lookup_one_qstr_excl+0xc6/0x240 [ 728.772210][T14125] filename_create+0x23a/0x470 [ 728.777064][T14125] ? kern_path_create+0x50/0x50 [ 728.781986][T14125] ? __virt_addr_valid+0x188/0x540 [ 728.787183][T14125] ? __virt_addr_valid+0x465/0x540 [ 728.792374][T14125] do_mkdirat+0xa5/0x440 [ 728.796691][T14125] ? vfs_mkdir+0x570/0x570 [ 728.801218][T14125] __x64_sys_mkdirat+0x85/0x90 [ 728.806042][T14125] do_syscall_64+0x4c/0xa0 [ 728.810517][T14125] ? clear_bhb_loop+0x60/0xb0 [ 728.815242][T14125] ? clear_bhb_loop+0x60/0xb0 [ 728.819981][T14125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 728.825922][T14125] RIP: 0033:0x7f4d0259c799 [ 728.830388][T14125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.850131][T14125] RSP: 002b:00007f4d03415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 728.858598][T14125] RAX: ffffffffffffffda RBX: 00007f4d02815fa0 RCX: 00007f4d0259c799 [ 728.867921][T14125] RDX: 00000000000001ff RSI: 0000200000000780 RDI: 0000000000000004 [ 728.875932][T14125] RBP: 00007f4d03415090 R08: 0000000000000000 R09: 0000000000000000 [ 728.883944][T14125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.892042][T14125] R13: 00007f4d02816038 R14: 00007f4d02815fa0 R15: 00007ffdf0e87458 [ 728.900122][T14125] [ 729.039224][T14121] netlink: 'syz.2.2835': attribute type 10 has an invalid length. [ 729.055199][T14121] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2835'. [ 729.420572][T14138] netlink: 'syz.4.2840': attribute type 17 has an invalid length. [ 730.470216][T14146] netlink: 'syz.3.2842': attribute type 10 has an invalid length. [ 730.658063][T14151] netlink: 'syz.2.2844': attribute type 21 has an invalid length. [ 730.689982][T14151] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2844'. [ 730.904607][T14161] netlink: 'syz.3.2847': attribute type 21 has an invalid length. [ 730.935812][T14161] netlink: 'syz.3.2847': attribute type 15 has an invalid length. [ 731.093123][T14174] FAULT_INJECTION: forcing a failure. [ 731.093123][T14174] name failslab, interval 1, probability 0, space 0, times 0 [ 731.123921][T14174] CPU: 1 PID: 14174 Comm: syz.1.2852 Not tainted syzkaller #0 [ 731.131459][T14174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 731.141570][T14174] Call Trace: [ 731.144885][T14174] [ 731.147856][T14174] dump_stack_lvl+0x188/0x24e [ 731.152647][T14174] ? show_regs_print_info+0x12/0x12 [ 731.157921][T14174] ? load_image+0x400/0x400 [ 731.162474][T14174] ? kasan_set_track+0x60/0x70 [ 731.167282][T14174] ? kasan_set_track+0x4b/0x70 [ 731.172168][T14174] ? __kasan_slab_alloc+0x6b/0x80 [ 731.177232][T14174] ? slab_post_alloc_hook+0x4b/0x480 [ 731.182542][T14174] should_fail_ex+0x399/0x4d0 [ 731.187262][T14174] should_failslab+0x5/0x20 [ 731.191883][T14174] slab_pre_alloc_hook+0x59/0x310 [ 731.196932][T14174] ? ref_tracker_alloc+0x14e/0x4b0 [ 731.202084][T14174] __kmem_cache_alloc_node+0x4f/0x260 [ 731.207478][T14174] ? ref_tracker_alloc+0x14e/0x4b0 [ 731.212615][T14174] kmalloc_trace+0x26/0xe0 [ 731.217065][T14174] ref_tracker_alloc+0x14e/0x4b0 [ 731.222047][T14174] ? ref_tracker_dir_print+0x150/0x150 [ 731.227651][T14174] ? __kasan_slab_alloc+0x6b/0x80 [ 731.232697][T14174] ? slab_post_alloc_hook+0x67/0x480 [ 731.237991][T14174] ? slab_pre_alloc_hook+0x59/0x310 [ 731.243219][T14174] dst_init+0xda/0x410 [ 731.247314][T14174] dst_alloc+0x12a/0x160 [ 731.251576][T14174] ip_route_output_key_hash_rcu+0x14a4/0x23f0 [ 731.257659][T14174] ? ip_route_output_key_hash_rcu+0x1361/0x23f0 [ 731.263928][T14174] ? ip_route_output_key_hash+0x139/0x330 [ 731.269663][T14174] ip_route_output_key_hash+0x1ef/0x330 [ 731.275232][T14174] ? ip_route_input_rcu+0x3160/0x3160 [ 731.280626][T14174] ? __lock_acquire+0x7d10/0x7d10 [ 731.285678][T14174] ip_route_output_flow+0x26/0x150 [ 731.290814][T14174] ? security_sk_classify_flow+0x77/0x90 [ 731.296481][T14174] raw_sendmsg+0x116d/0x1b20 [ 731.301097][T14174] ? raw_sendmsg+0x590/0x1b20 [ 731.305808][T14174] ? compat_raw_ioctl+0x60/0x60 [ 731.310714][T14174] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 731.317162][T14174] ? sock_rps_record_flow+0x19/0x3f0 [ 731.322478][T14174] ? inet_sendmsg+0x78/0x2f0 [ 731.327091][T14174] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 731.332396][T14174] ? security_socket_sendmsg+0x7c/0xa0 [ 731.337883][T14174] ? inet_send_prepare+0x260/0x260 [ 731.343023][T14174] ____sys_sendmsg+0x5be/0x970 [ 731.347829][T14174] ? __sys_sendmsg_sock+0x30/0x30 [ 731.352878][T14174] ? __import_iovec+0x315/0x500 [ 731.357757][T14174] ? import_iovec+0x6f/0xa0 [ 731.362292][T14174] ___sys_sendmsg+0x2a2/0x360 [ 731.367002][T14174] ? __sys_sendmsg+0x290/0x290 [ 731.371809][T14174] ? __lock_acquire+0x7d10/0x7d10 [ 731.376910][T14174] __se_sys_sendmsg+0x1bb/0x2a0 [ 731.381814][T14174] ? __x64_sys_sendmsg+0x80/0x80 [ 731.386792][T14174] ? lockdep_hardirqs_on+0x94/0x140 [ 731.392010][T14174] do_syscall_64+0x4c/0xa0 [ 731.396447][T14174] ? clear_bhb_loop+0x60/0xb0 [ 731.401143][T14174] ? clear_bhb_loop+0x60/0xb0 [ 731.405850][T14174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 731.411766][T14174] RIP: 0033:0x7f4d0259c799 [ 731.416201][T14174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.435831][T14174] RSP: 002b:00007f4d03415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.444267][T14174] RAX: ffffffffffffffda RBX: 00007f4d02815fa0 RCX: 00007f4d0259c799 [ 731.452263][T14174] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 731.460284][T14174] RBP: 00007f4d03415090 R08: 0000000000000000 R09: 0000000000000000 [ 731.468278][T14174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.476269][T14174] R13: 00007f4d02816038 R14: 00007f4d02815fa0 R15: 00007ffdf0e87458 [ 731.484299][T14174] [ 731.496215][T14174] memory allocation failure, unreliable refcount tracker. [ 731.649676][T14178] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2854'. [ 731.991784][T14200] netlink: 'syz.1.2860': attribute type 21 has an invalid length. [ 732.000130][T14200] netlink: 'syz.1.2860': attribute type 6 has an invalid length. [ 732.008444][T14200] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2860'. [ 732.693521][T14206] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2862'. [ 732.959357][T14219] netlink: 'syz.1.2866': attribute type 5 has an invalid length. [ 733.316697][T14230] netlink: 'syz.0.2869': attribute type 10 has an invalid length. [ 733.329730][T14230] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2869'. [ 733.726492][T14249] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2875'. [ 733.762353][T14249] netlink: 'syz.1.2875': attribute type 5 has an invalid length. [ 733.770704][T14249] netlink: 'syz.1.2875': attribute type 9 has an invalid length. [ 733.892499][T14251] device syzkaller0 entered promiscuous mode [ 735.706895][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 735.726767][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 735.735017][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 735.752157][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 735.760236][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 735.769574][ T4270] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 737.741221][T14298] validate_nla: 2 callbacks suppressed [ 737.741239][T14298] netlink: 'syz.2.2890': attribute type 21 has an invalid length. [ 737.794998][T14298] netlink: 'syz.2.2890': attribute type 15 has an invalid length. [ 737.855434][T11134] Bluetooth: hci5: command 0x0409 tx timeout [ 737.983412][T14305] device syzkaller0 entered promiscuous mode [ 738.211868][T14315] netlink: 'syz.4.2896': attribute type 29 has an invalid length. [ 738.243794][T14315] netlink: 'syz.4.2896': attribute type 29 has an invalid length. [ 738.341012][T13713] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.945634][T11134] Bluetooth: hci5: command 0x041b tx timeout [ 739.971866][T14288] chnl_net:caif_netlink_parms(): no params data found [ 740.042782][T13713] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.078893][T14324] sctp: [Deprecated]: syz.0.2899 (pid 14324) Use of int in maxseg socket option. [ 740.078893][T14324] Use struct sctp_assoc_value instead [ 740.204267][T13713] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.254926][ T4313] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2640 jiffies s: 158745 root: 0x1/. [ 768.272682][ T4313] rcu: blocking rcu_node structures (internal RCU debug): [ 768.287452][ T4313] Sending NMI from CPU 1 to CPUs 0: [ 768.292722][ C0] NMI backtrace for cpu 0 [ 768.292732][ C0] CPU: 0 PID: 14336 Comm: syz.4.2902 Not tainted syzkaller #0 [ 768.292747][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 768.292756][ C0] RIP: 0010:asm_sysvec_irq_work+0x0/0x20 [ 768.292782][ C0] Code: e9 b5 03 00 00 90 90 90 90 90 0f 01 ca fc 6a ff e8 b5 02 00 00 48 89 c4 48 89 e7 e8 9a 70 ec ff e9 95 03 00 00 90 90 90 90 90 <0f> 01 ca fc 6a ff e8 95 02 00 00 48 89 c4 48 89 e7 e8 6a 75 ec ff [ 768.292795][ C0] RSP: 0018:ffffc90000007958 EFLAGS: 00000006 [ 768.292808][ C0] RAX: 2138d62350962200 RBX: 1ffff92000000f38 RCX: 2138d62350962200 [ 768.292820][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0de0 [ 768.292832][ C0] RBP: ffffc90000007a80 R08: ffffffff90af532f R09: 1ffffffff215ea65 [ 768.292848][ C0] R10: dffffc0000000000 R11: fffffbfff215ea66 R12: 0000000000000246 [ 768.292877][ C0] R13: dffffc0000000000 R14: ffff8880b8e3b900 R15: 0000000000000001 [ 768.292889][ C0] FS: 00007f88cfa656c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 768.292903][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 768.292914][ C0] CR2: 000000110c26765d CR3: 0000000026c2d000 CR4: 00000000003506f0 [ 768.292929][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000008d24 [ 768.292938][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 768.292948][ C0] Call Trace: [ 768.292953][ C0] [ 768.292958][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 768.292976][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 92 31 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 768.292989][ C0] RSP: 0018:ffffc90000007980 EFLAGS: 00000206 [ 768.293003][ C0] ? _raw_spin_lock_irq+0xd0/0xf0 [ 768.293021][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 768.293038][ C0] ? __mod_timer+0x91e/0xd00 [ 768.293057][ C0] __rcu_read_unlock+0x78/0xd0 [ 768.293073][ C0] hsr_announce+0x2ca/0x340 [ 768.293097][ C0] ? read_lock_is_recursive+0x10/0x10 [ 768.293119][ C0] ? hsr_announce+0x80/0x340 [ 768.293141][ C0] ? hsr_dev_finalize+0x840/0x840 [ 768.293162][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 768.293190][ C0] call_timer_fn+0x1ac/0x670 [ 768.293207][ C0] ? hsr_dev_finalize+0x840/0x840 [ 768.293228][ C0] ? call_timer_fn+0xcf/0x670 [ 768.293244][ C0] ? __run_timers+0x800/0x800 [ 768.293266][ C0] ? hsr_dev_finalize+0x840/0x840 [ 768.293289][ C0] __run_timers+0x53e/0x800 [ 768.293311][ C0] ? detach_timer+0x350/0x350 [ 768.293330][ C0] ? lock_chain_count+0x20/0x20 [ 768.293355][ C0] run_timer_softirq+0x63/0xf0 [ 768.293371][ C0] handle_softirqs+0x2a1/0x930 [ 768.293390][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 768.293408][ C0] ? do_softirq+0x210/0x210 [ 768.293428][ C0] __irq_exit_rcu+0x13b/0x230 [ 768.293443][ C0] ? irq_exit_rcu+0x20/0x20 [ 768.293463][ C0] irq_exit_rcu+0x5/0x20 [ 768.293476][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 768.293503][ C0] [ 768.293507][ C0] [ 768.293512][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 768.293532][ C0] RIP: 0010:put_cpu_partial+0x1b0/0x250 [ 768.293551][ C0] Code: 3b 44 24 18 0f 85 b4 00 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3c be 59 08 f7 c5 00 02 00 00 74 c0 fb 4d 85 e4 <75> bf eb c8 e8 87 e1 3a 02 85 c0 0f 84 e9 fe ff ff 83 3d 80 1a 4d [ 768.293564][ C0] RSP: 0018:ffffc900033c7b40 EFLAGS: 00000246 [ 768.293577][ C0] RAX: 2138d62350962200 RBX: ffff8880174418c0 RCX: 2138d62350962200 [ 768.293589][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0de0 [ 768.293601][ C0] RBP: 0000000000000282 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 768.293612][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000000 [ 768.293624][ C0] R13: 0000000000000000 R14: ffff8880728ed940 R15: ffff8880b8e3e6a0 [ 768.293643][ C0] ? put_cpu_partial+0x6e/0x250 [ 768.293663][ C0] qlist_free_all+0x76/0xe0 [ 768.293682][ C0] kasan_quarantine_reduce+0x144/0x160 [ 768.293719][ C0] __kasan_slab_alloc+0x1e/0x80 [ 768.293742][ C0] slab_post_alloc_hook+0x4b/0x480 [ 768.293761][ C0] ? slab_pre_alloc_hook+0x2e7/0x310 [ 768.293781][ C0] kmem_cache_alloc+0x123/0x2f0 [ 768.293798][ C0] ? __alloc_file+0x25/0x230 [ 768.293816][ C0] __alloc_file+0x25/0x230 [ 768.293833][ C0] alloc_empty_file+0x90/0x180 [ 768.293856][ C0] alloc_file+0x5c/0x5f0 [ 768.293875][ C0] alloc_file_pseudo+0x180/0x200 [ 768.293893][ C0] ? alloc_empty_file_noaccount+0x80/0x80 [ 768.293912][ C0] ? _raw_spin_unlock+0x24/0x40 [ 768.293927][ C0] ? alloc_fd+0x58f/0x630 [ 768.293952][ C0] sock_alloc_file+0xb3/0x240 [ 768.293975][ C0] __sys_socket+0x12a/0x190 [ 768.293999][ C0] __x64_sys_socket+0x76/0x80 [ 768.294022][ C0] do_syscall_64+0x4c/0xa0 [ 768.294043][ C0] ? clear_bhb_loop+0x60/0xb0 [ 768.294061][ C0] ? clear_bhb_loop+0x60/0xb0 [ 768.294082][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 768.294101][ C0] RIP: 0033:0x7f88ceb9c799 [ 768.294115][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.294129][ C0] RSP: 002b:00007f88cfa65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 768.294145][ C0] RAX: ffffffffffffffda RBX: 00007f88cee15fa0 RCX: 00007f88ceb9c799 [ 768.294157][ C0] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000000a [ 768.294166][ C0] RBP: 00007f88cec32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 768.294176][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.294186][ C0] R13: 00007f88cee16038 R14: 00007f88cee15fa0 R15: 00007ffcf6547448 [ 768.294207][ C0]