last executing test programs: 8.028933376s ago: executing program 0 (id=2137): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x64e55f0204cc0d30}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r0, 0x1d, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) socket$kcm(0xa, 0x5, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfe9, 0x200000000000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000001200000000000000000095", @ANYRES64=0x0, @ANYRESDEC=r3, @ANYRESDEC=r2], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000940), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)="27031c00160014000000002f1eafacf706e105000000894f0003000183ae7544bb00eadeee0b80558ddbba9b5b3c2d29a50ed00e48", 0x35}], 0x1}, 0x4048884) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="9fcb01001800400000000000000000000000ea000200eaff0000522998643e99e56fec61a4d8d5926c5f9c6d091c26c807de46f70ebc5483d7158fd760cf0085798300c7e313b4645939df7cb49c1d611a7cfe2756dd7de1cc6cfc26202c21a38a9b18cfa0d987104eb44b11ef1d414ac2109ad28c03c8b0f378c9a3735276f4fd4c385275afbb96e58ebb17448f282176b0a750fef79d213fd9b434a9462d688be7335a88e8e0e100e94d1db9c8a7729751caf04178c7b635ea558185744823187e845bade4184b45e371e958a9cb7eb0f76b3dc04163fd16c8f1126f404a0991c925aa1833a4"], &(0x7f0000000140)=""/237, 0x1a, 0xed, 0x1}, 0x28) socket$kcm(0x21, 0x2, 0x2) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}}, 0x0, 0xd, r6, 0x0) r8 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x891b, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000050000000300000000000010080000000300000000000011030000000000000000000000010000040400ecb4f50ed002e2a8d6a3f65103000000000000"], 0x0, 0x51}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000a00000000000000000000000000000000b7f7295f2fa42ccd4b5c2cfcc07531d5cd61f465398eb94290bc70742d93357eb80ac8399a4318ba167e32cbf7de1f91e69cf6befb8508b3030000000000000070fac320e9d92e3f754901fc1485b19b5b59da554ed3b5d8a281", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 7.843520091s ago: executing program 2 (id=2140): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab1bab4023b09aab56e3fab1f9950a1ca4007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5d", 0xd8}], 0x1}, 0x20048812) socketpair(0x1e, 0x1, 0x40, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x2}, 0x100540, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={0x0, 0x2}, 0x18, 0x0, 0x0, 0x0, 0x0, 0x200100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x1005, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&-0\t||') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x9, @perf_config_ext={0x7e, 0x7}, 0x108200, 0xac5d, 0xffff7ffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) sendmsg$inet(r3, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000300), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x24000840) socket$kcm(0x2c, 0x3, 0x0) 7.409867592s ago: executing program 1 (id=2145): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_config_ext={0x1, 0x80000de}, 0x0, 0xc8, 0x0, 0x7, 0x4000000004, 0x2, 0x13, 0x0, 0x20, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xe, 0xeb3}, 0xc081, 0x10004, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x18000, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.304716045s ago: executing program 0 (id=2147): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x24, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x8821, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r5, r4}) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f00000001c0), 0x4) 7.214303768s ago: executing program 2 (id=2148): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x9, 0x0, 0x8, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xb) (async, rerun: 64) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x2, 0x0, 0x2}, {0x0, 0x6, 0xfffffffb}], "6418"}, @datasec={0xb, 0x0, 0x0, 0xf, 0x2, [], "5803"}]}, {0x0, [0x61]}}, &(0x7f0000000d80)=""/129, 0x4f, 0x81, 0x5}, 0x28) (async, rerun: 64) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x2) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001200)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000011c0)}, 0x20) (async) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001280)=@generic={&(0x7f0000001240)='./file0\x00'}, 0x18) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@bloom_filter={0x1e, 0x5, 0x8001, 0xffff, 0x840, 0x1, 0x6, '\x00', 0x0, r2, 0x5, 0x3, 0x2, 0xe}, 0x50) (async) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001380)=@generic={&(0x7f0000001340)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0x0, 0x0, &(0x7f0000000c80)='syzkaller\x00', 0x1ac, 0x4, &(0x7f0000000cc0)=""/4, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0x5, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000013c0)=[r3, r4, r5, 0xffffffffffffffff, r6], &(0x7f0000001400)=[{0x4, 0x2, 0x7, 0x7}], 0x10, 0x3488}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000500)='\xd2\x9f\xdc\x95\x1e\xf4\x0f\xdf\x14\r\xf6ZvZo\x80y\xc9+t\x8e\xd3\xd5c\x7f\x10\xf2\xc1?^\xec\x81}r/K\xf9s\xf1\x93\xb2\xa9\xcc\x8dl\xc3\xc6f]\x88E,\xd7\xc7k\x9e\xf1\x01jg\x97\xf2u\x9e\x9fm\x7fb\x0e\xfftou\x035\b\xf2\'h\xec\x88\xe7R\x9a\x05\xe4\xec\v\xac#K\xe7\x88\xb8{E\x04\xd4\xd2a\xcc\xe7+\xa3\x19\xda\xeb\xc7\xbc\xc9\xfbf\fX\x14\xfa\xf2|8\x15\fJ#\x9b\xc10x0}, 0x40) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x85, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x15, 0x2a, r8, @void, @void, @void, @value=r10, r9}, 0x20) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r12}, &(0x7f0000002480), &(0x7f00000024c0)=r11, 0x2}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x58, &(0x7f0000000740)}, 0x10) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000800), 0x4) (async) r13 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r13, 0x541b, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.359485224s ago: executing program 0 (id=2150): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 4.347323144s ago: executing program 2 (id=2151): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)=""/49, 0xe9, 0x31, 0x1, 0x9, 0x10000}, 0x28) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4110, 0x0, 0x1, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000200)=@caif, 0x80, 0x0}, 0x88010) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x200002d9, &(0x7f0000000200)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0xffffffffffffff24, &(0x7f00000006c0)=""/229, 0x0, 0x11}, 0x90) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd257}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 4.309790505s ago: executing program 1 (id=2152): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x6, 0x7fff}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x900000000000000) socketpair(0x2b, 0x6, 0xbe79, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x400, 0xc8, &(0x7f0000000540)=""/200, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000006c0)=[{0x2, 0x5, 0x6, 0xb}], 0x10, 0x1000}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000007c0)=r5, 0x4) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000300895f4bf971560000000000c2000003c9944dfed18df85398803dff6af06cbb00003d47e7c2808ea015c67397136792259574292927d845000000"]) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) 3.975285314s ago: executing program 4 (id=2155): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a00000700", 0x15}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 3.75738757s ago: executing program 0 (id=2156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES64], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000b80)) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="01a0985cefbd4af254920d281d5d1fd72eb7c1048d7500337ccc89b84d86a7cf64d128ed70f7eb86d8c052710fa661b8dfdfa9432f8949350dfc7145b7b3a1bd0419e897a5d704c8d7be8416", @ANYRES8=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x3, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000ff0300000100000041500300", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000004000000000000000004000000001000000000060000", @ANYRES32=r4, @ANYBLOB], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x9, &(0x7f0000000ac0)=ANY=[@ANYBLOB="85000000136100001d4afeff0100000085100000ffffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018100000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000b40)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000bc0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0xd, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000c40)=[r5, r5, r5, r5, 0x1, 0xffffffffffffffff, r5, r5, r5], &(0x7f0000000c80)=[{0x5, 0x1, 0x3, 0x1}], 0x10, 0x8}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) r9 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r11 = perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x0, 0x3, 0x6, 0x41, 0x0, 0x6, 0xa5189, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000680)}, 0x200, 0x4, 0x2, 0x6, 0x4007, 0x9, 0xfffd, 0x0, 0xfffff800, 0x0, 0x7}, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000580)={0x3, 0x80, 0x7, 0x8, 0x5, 0x4, 0x0, 0x4, 0x1a048, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x100bb0, 0x100000000000000, 0x5, 0x0, 0x3, 0x4, 0x7, 0x0, 0x2, 0x0, 0x45f}, r10, 0xffffffffffffffff, r11, 0xc) r12 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000300)=r7, 0x4) (async) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000540)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x176}, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) (async) r14 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r14, 0x107, 0xe, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000"], 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f00000008c0)=""/167, 0x0, 0xa7, 0x2000, 0x1000, 0x10000}, 0x28) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 3.576012685s ago: executing program 3 (id=2157): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x404, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x2}, 0x48) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x300, 0x0, 0x0, 0x0}, 0x50) 3.538833055s ago: executing program 4 (id=2158): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab1bab4023b09aab56e3fab1f9950a1ca4007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5d", 0xd8}], 0x1}, 0x20048812) socketpair(0x1e, 0x1, 0x40, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x2}, 0x100540, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={0x0, 0x2}, 0x18, 0x0, 0x0, 0x0, 0x0, 0x200100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x1005, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&-0\t||') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x9, @perf_config_ext={0x7e, 0x7}, 0x108200, 0xac5d, 0xffff7ffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) sendmsg$inet(r3, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000300), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x24000840) socket$kcm(0x2c, 0x3, 0x0) 3.479927907s ago: executing program 1 (id=2159): socket$kcm(0xa, 0x2, 0x88) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'ip6tnl0\x00', @local}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x1000004, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r5}, &(0x7f00000003c0), &(0x7f0000000780)=r6}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x4, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r8}) setsockopt$sock_attach_bpf(r2, 0x6, 0x13, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100fea0020037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002880), 0x0, &(0x7f00000028c0)}, 0x20000895) 3.479561837s ago: executing program 2 (id=2160): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x2, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0xff, 0x91, &(0x7f00000000c0)=""/145, 0x40f00, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x8, 0xfffffffc, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x4, 0x2, 0x3, 0x4}, {0x4, 0x4, 0xc, 0x9}], 0x10, 0xfff}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0xe, &(0x7f0000000040), 0x3b) 3.296011622s ago: executing program 3 (id=2161): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e", 0x19}], 0x1}, 0x20) socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x3, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r1, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_sys\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff0000}, [@generic={0xfd, 0x1, 0x2, 0x3, 0x2}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}]}, &(0x7f0000000140)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0xf, 0xc4f, 0x466}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{0x4, 0x5, 0xa, 0x2}, {0x2, 0x1, 0x9, 0x9}, {0x1, 0x5, 0x10, 0x2}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0x36, 0x1, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex=r4, r2, 0x17, 0x2020, 0x0, @void, @void, @value=r1, @void, r3}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 3.205943354s ago: executing program 2 (id=2162): syz_clone(0xb0004000, &(0x7f0000000000)="34f1014ed59e7fdac1d106b17e01", 0xe, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="7850ade3ea5c9211d1384f18b800b32388a6da51443e0a13f6e7cc66039d196b7639cbd0c600588b989931ad5e0e53254cd7e7208c051080df0497b7e78641102fbb8980f117a4bafc17438b793efa7ee27b56a54eefe199684071669e8f0d77bb8b7997dd422fb8f0faf9eb33b1213cff34d8bcb657f274191d3718e4d95ff167") r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x1, 0xff, 0x0, 0x400000000, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x201, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x710}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c00, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x4ecb14dfdbcba6a8, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0x69) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffffffffffffffff) 3.159767985s ago: executing program 1 (id=2163): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_config_ext={0x1, 0x80000de}, 0x0, 0xc8, 0x0, 0x7, 0x4000000004, 0x2, 0x13, 0x0, 0x20, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xe, 0xeb3}, 0xc081, 0x10004, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x18000, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.080257598s ago: executing program 3 (id=2164): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000005c0)=r0, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3.068014388s ago: executing program 0 (id=2165): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000010000000000000f03000000005f2a"], 0x0, 0x28, 0x0, 0xffffffff, 0xfffffffc}, 0x28) r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x9}, 0x10c002, 0xc}, 0x0, 0xd, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000280)={r0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) close(r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r2, 0x0, 0x0}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000000000000000e4191000900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc561", 0xcb}], 0x1}, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc, 0x1, 0x5, 0xfe, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0x14}, 0x10d527, 0xac5d, 0x0, 0x0, 0x2, 0x78d, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0xc, 0x0, 0x0) close(0x3) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, 0x0, 0x200008c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 2.99798878s ago: executing program 4 (id=2166): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 2.911127872s ago: executing program 3 (id=2167): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000100) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4108, 0x100c}], 0x1}, 0x2002) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f0000000a740100053582c137153e370248018000", 0x29}], 0x1}, 0x0) 2.727608687s ago: executing program 4 (id=2168): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a00000700", 0x15}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 628.505993ms ago: executing program 3 (id=2169): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r1, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) (fail_nth: 5) 586.602284ms ago: executing program 1 (id=2170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000540)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="0000000000000000020000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 505.965886ms ago: executing program 4 (id=2171): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f00000009c0)="9d7fcf3efc6300b3b2377876021d7131b838059f96bd206d4776b444405422368ed2a92432e5af71000000000000000000000000000000008a596976dd10f3928b006bb2c2760977caf15455525ae6227e246681dcba160dde12ddcee430eacdfb6d9ec7a60ffdef417b662007c1f9ffa86530ba7ff75622b154afd53c6b4931f4be2d90ca60b1fbe6dc02aa051c9a9c05557a7fd376f174908fd1a6dc0aad663e010a10117c304eb7e40d629aa8ecd0f847fc0efe9ddab4545505105ba291410c1cb0e4d50bd63e8fa06fc4", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32, 0x80fe}}, @ip_pktinfo={{0x0, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x66, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x101040, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x6b, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x3d, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x4, '\x00', r2, r3, 0x3, 0x4, 0x4}, 0x50) 416.361209ms ago: executing program 2 (id=2172): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000090000000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 390.21301ms ago: executing program 0 (id=2173): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)='\x00'/14, 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0xa, 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8929, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086ddfacfce80ced38645b0e0865a6596aff57b000000000000ee0000000000004501e2c44d6b5c5f18dc45947304c87047f07333c6ef0c23089ba36532d65a0d57f30e617bde24749c7fe39c7dd5fab23562341f9ebca012ca8d0f82b1b20583b798a1bfdd9fc4276947e4b5cec10eb7f911d8d7a9286be6c95b615eb8400f51c60e3e0f18194f95f84fbb7a795eba0217660d149b57557d5af76bc04d73343da8692cb81ff747493684784ed1a64d6b6f132a77c08e92"], 0xffffffffffffffc7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r1], 0xfe33) 153.106226ms ago: executing program 4 (id=2174): socket$kcm(0xa, 0x2, 0x88) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'ip6tnl0\x00', @local}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x1000004, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r5}, &(0x7f00000003c0), &(0x7f0000000780)=r6}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x4, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r8}) setsockopt$sock_attach_bpf(r2, 0x6, 0x13, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100fea0020037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002880), 0x0, &(0x7f00000028c0)}, 0x20000895) 145.158256ms ago: executing program 1 (id=2184): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b702000000000000b703000000000000850000007c000000b70000000100000095000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, &(0x7f00000006c0)="000000000000000002000000060000007f00000100000000000000000000000000000000500000007f0000010000000000000000000000000000000050", 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf00000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="00ced87fa5df6a000000000000ae7108410f630a2e0b0ffcde30462058b50de41d130e4a74a8b8af4c2ba1f55aac80ae65d9746257ecdba5dba76fd0ce3fd559efae026b1cfe16381ef17d76fa1f180ea16a1d943c66a25429f18b7b2338557cfc450cbe8c83d02df3f637a83c83de68659d7e0d492fbd03b3e698aeb5edb957810f904dd4f43f84f309759e03951d6f5ac8066902d437584fe614eaf0887981c8e662394a292d97e65edfe90da848", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r2}, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYRESDEC=r4], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ccd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="450a00000000000061118c0000000000180000000000000000000000000064cec99ec14349ba000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cgroup.kill\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b44", 0x3c5}], 0x1}, 0x0) r7 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000100), &(0x7f0000000540)=r6}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93424fc60", 0x8c0}], 0x1}, 0x0) recvmsg(r8, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x100) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r10, @ANYBLOB="0100000002"], 0x40) 0s ago: executing program 3 (id=2175): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x8, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1c00000014006b030031a6080c00", 0xe}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="1700000014006b81566463cc7a43a9280a5f768e7e0000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000002c0)=0x3, 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034007410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001380)={&(0x7f0000000340)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8ed, 0x1}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000a40)="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", 0xfb}, {&(0x7f0000000c40)="5623ebb7ec751d91b33212069ffaf4acfd712a1ffb44050112d44d6e8d9b70988c873ecd189c689eded6599489f001df809d8a25fddab7c1400d9d287ee462d5a7d728fc5a6247c92c0987c63f78f1dc71733a1f4db893912f9b60f36230b2139e2a21cc75d6156e19c92d428eeceae448c5e822d9238218848b1be707de4f261d343c502aaecc1b6761fdd218574e0c155bc3937a8f9f1cff068f9c00ee901288f2c6ddc735fd8fbf26dfb0a49df8a27105d9f21ddbadaa1d575eff10cac05986ff3b8f3e763af8d57451e16646a45c5eb978d489d90aad3a4402c60b6a0b81e53964e1eecee8c1703b3b9898b81a", 0xef}, {&(0x7f0000000d40)="ce5527862fbecc0de6e9900aaea92c1060b8763efd3d1a74dccda5088cf928a1ee6d06fe2bd6779b7b6ece9647c17911ac89fb0e8e45fde345abfc218f1982d7e056d7d0e6b8ef85c4b09b2b7092def606ebf8f808b5ad8d6a5b62c6177cc417bd9ca9f5c563225da5d3a8623643d89cb714bca0018b9953f980fda2d1838aa58cb8a40d9f2314a1b3a9d3f63e913cd369a26d915b76b01e56ec0e58472f6fd832b1e9541fba3401367dbc6a16d9e3fdc5c5d9a763334bdce03ba4b2a5c25cf95a004736d3cc0be80ab3114fbc51217521403a", 0xd3}, {&(0x7f0000000e40)="5f9b7a1462880620fb41e02c972f8bc5b0d7675731efad38a8bcb1526c3a5761acdd42a030e40370ab3f031db84a2f046e58d89b5b903be05f8b429eb83c098b13e194cd9809c7232685a44e2209f135cbad4af21eeb1f2b60eaf41b500dbd43437f4c62d9ab1798b8e250e1f55d8cbf7b1c1b418cb6c2311f5dbd66026280db5248fddc5e48e854a44a2c23215d7e4b14bd120ffa51b56e9fafcfaa12c6867996356445ce9d0e34b503bbb359c1a1135fe7c2871b6d3b5d0bc872a4550dac7dfa6e353d99d4d5bf2fc6f8667d25539c834e47d4d0702def0797d58d14301e4cc3bcc775f6ad46884d1e1c127d6c3893ceabcf436c57", 0xf6}, {&(0x7f0000000f40)="7ec5cfd65ca4ed95382b989ffc3404160997fa64bc803e827a8281f3b1ae235437910bda634bf326adaa80ae80fcc2936c4f2ce10b5656673b79438ec1f78c62721ccb53b6daef2a4d087c395433ace5387d607965e626e371e0a59759634d226114e3c45c01c6a91c8eb139c2477de5d8bf7df45bbbf887454658cde52dfcd21dc43fafde1ffdfab7b4b3faa6519c04edb3e5ed31214ce939318ee70cf115650403a2621f9a99c0f18bb717874add0f8d1dd5a83d9dfe1511a433db165e8745618db7c1e8079ff7a492bea9ab86be34eb1f4a753cc59b03be1ed1690a66b4b635b2f15e85db002aeea9a99ae8", 0xed}, {&(0x7f0000001040)="c5337e82da94", 0x6}, {&(0x7f0000001080)}, {&(0x7f00000010c0)="2cf11f240532d9b37ff7d2e6c82ccde63dda50e979376add767fb98f49e1fe8ede8d70d880ab048cc032315cd86790da3ae11dfc87e97b60fa1d7ff55d2a66eac559e0c0583129d4453fa23248761ef534845485bd7264012782e5d735011accf5a554210779b8c8325c45c15e85432d9e795e8f038dac125022b19e1174bfa1e6faf03a972b2bb74bbc67d5cae6773cd156d93cd53a7d89dfe28d56d2520f433587b027468c6c21f6bd342d7d06ca97ae30179a0a5225ab535466460ae4a9a237b2aac803a96de26680e07e61747edff2ae176a96428214", 0xd8}], 0x8, &(0x7f0000001240)=[{0x108, 0x10a, 0x1, "5221acf51718e4019a7d19515e0bfee259d44eddd0f0be3dfda3fa50578ca0d56f464409532a760eae5f0de661a622e0b88c9a549356b9a850483a219ae5195b1e8d7789f37a28c4867bd2649dbc37d0e6282adf5cb67fa4ad38010729e9b5d215feac7e46e13cbcd32113314da6fedd6baf950dd80d4d028be276bb7871d34b8c49c0a614171d03cda01600fabc5eb802dd744870dec043e078f4dbc2ce95210e680f5d43495f4891233f9da98d5c8ac40d370ea224a24f0d7538345db94b59a08d3363ce0ddb5f4f8c6477e16de9a5a605d1071da0a50e229d23fafc5279afed1782ad1afe83d4bc1d6beab5978387819d"}], 0x108}, 0x4004884) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800fd6e2d4e4e4120c7d89418002a4e11b5b9e6e8485cc8f64c0000000000000000000000000061199400"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1c, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xac5d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x3, 0x0, 0x1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) sendmsg$kcm(r6, &(0x7f0000000a40)={&(0x7f0000000500)=@llc={0x1a, 0x103, 0x5, 0xfe, 0x8, 0x5, @broadcast}, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)="698b2733fde35a1b58008110ecef46fc986801792f5b6a6522ef3e664961a609e8744d1cf114fabed9f57ee5643c", 0x2e}, {&(0x7f0000000600)="23c0370254917bb1d6dc8694c23d68c321c37244be948116699c6af41ba266858211326ef2c7b54329a0173f2f1192f887543df8470f3c464c7939578c0af9fbbd16a99a082672176a6b7e81db0f2a7a38bebdcdfb73a93ab6e2645767a02d5bf89a9c3dc857b600a85525bd696f38d679320e726eff1a6ea12fc3f17c31203356d1cb2f926f8d5755c50158c1fa2d25c7369746f1e18aeca9e0e8d107b8d263adf50cea68150ab16cbde9a6066f5f", 0xaf}, {&(0x7f00000006c0)="8599a564297804f2299d290f9db3a7d0421686c60adf3d81ad426907da9132a3199ad9e639d5035042c9a90933f086d70212288e98a8a915b68af5b71bfcaf56caedd9db5c2e13e6f903540a3027c9aec46414642775201c665833cec70b5520a0c318ce22f775b9b4176eadf475a087ec6f5f558e15f7e1d12e866f9cda2a5f7e31bdfe1890bbbd9e7f6f05402ae60e86ab0431df3d66e562cd2ab8b6ce25ca3712d1ea155ed014b5ad5595e54ad9e24194e2574c3a2036cd6ae800c3", 0xbd}, {&(0x7f0000000780)="d79dfaf8fd12f2c4818d72416e87ede4fff9e60d41b610f1fdc5e32141c73f42c50a7b8d1c45b95f327e1e05051088492a8d768bb107d7e253c0c34079c7bd3b22416e3b3d2110682cb360e006c42e9c213acf0ba2b07dba5c22e03b90892a350ce2cd0dd7df58bcef07851a45f5b49fbebdb5b6fe8917887e68ce02005637340992c7034ab2058f102b546b3e64c409c97c76aef319d8d06d0593b68339b311faf1974cbb79e02f30d1abacff0cec2d585d2a210eafc53c5d61099c167f9d", 0xbf}], 0x4, &(0x7f00000008c0)=[{0x70, 0x1a7, 0x1, "642ca55914b002b3400d2c4be6af9f3fa2a76a00598621a166ae4b431e71a8d2b4b770ef36179ab4074d214aa36ee19f26f80b026e971530692a09f62781b7a22bf9fb8e729ad9863e32af06c8314464f611ff0705066a3d8c9d57"}, {0x88, 0x1, 0x80000001, "907eb75ba69168b6f75134eec9255b0956a0b8623c6714ffce372bf121a57c6df7d0bdfa2f20e55ac54410a5ef6e1725df32f98efaba8654b7786597a7b8b157a829b0a52a4ff7c87e40f8e4518973b6df2f200363d6e077e760ba749216734186ab42c914fbafb8454b759b66e636a3739259200f"}], 0xf8}, 0x1) kernel console output (not intermixed with test programs): 94][ T7123] ? do_raw_spin_lock+0x128/0x2f0 [ 323.198554][ T7123] ? __rwlock_init+0x140/0x140 [ 323.203348][ T7123] ? do_raw_spin_unlock+0x11d/0x230 [ 323.208576][ T7123] unix_dgram_sendmsg+0x5c1/0x16f0 [ 323.213720][ T7123] ? aa_sk_perm+0x81f/0x950 [ 323.218264][ T7123] ? aa_af_perm+0x340/0x340 [ 323.222802][ T7123] ? unix_dgram_poll+0x680/0x680 [ 323.227767][ T7123] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 323.234221][ T7123] ? apparmor_socket_sendmsg+0x8a/0x330 [ 323.239827][ T7123] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 323.245432][ T7123] ? unix_dgram_peer_wake_me+0x430/0x430 [ 323.251209][ T7123] ____sys_sendmsg+0x5ed/0x9a0 [ 323.256026][ T7123] ? __might_fault+0xa6/0x120 [ 323.260753][ T7123] ? __sys_sendmsg_sock+0x30/0x30 [ 323.265853][ T7123] ? __import_iovec+0x306/0x510 [ 323.270793][ T7123] ? import_iovec+0x6f/0xa0 [ 323.275350][ T7123] ___sys_sendmsg+0x2a2/0x360 [ 323.280100][ T7123] ? __sys_sendmsg+0x2a0/0x2a0 [ 323.284953][ T7123] ? __lock_acquire+0x7ea0/0x7ea0 [ 323.290068][ T7123] __se_sys_sendmsg+0x1c3/0x2b0 [ 323.294966][ T7123] ? __x64_sys_sendmsg+0x80/0x80 [ 323.299993][ T7123] ? lockdep_hardirqs_on+0x94/0x140 [ 323.305287][ T7123] do_syscall_64+0x4c/0xa0 [ 323.309750][ T7123] ? clear_bhb_loop+0x60/0xb0 [ 323.314508][ T7123] ? clear_bhb_loop+0x60/0xb0 [ 323.319231][ T7123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.325162][ T7123] RIP: 0033:0x7f85d3d9e199 [ 323.329633][ T7123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.349274][ T7123] RSP: 002b:00007f85d4cc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.357719][ T7123] RAX: ffffffffffffffda RBX: 00007f85d4025fa0 RCX: 00007f85d3d9e199 [ 323.365721][ T7123] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000006 [ 323.373899][ T7123] RBP: 00007f85d4cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 323.381903][ T7123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.389903][ T7123] R13: 00007f85d4026038 R14: 00007f85d4025fa0 R15: 00007ffd2999d0f8 [ 323.397928][ T7123] [ 323.563170][ T7132] netlink: 14 bytes leftover after parsing attributes in process `syz.3.886'. [ 324.214234][ T7146] netlink: 'syz.4.891': attribute type 2 has an invalid length. [ 324.240298][ T7146] netlink: 14 bytes leftover after parsing attributes in process `syz.4.891'. [ 324.455636][ T7154] FAULT_INJECTION: forcing a failure. [ 324.455636][ T7154] name failslab, interval 1, probability 0, space 0, times 0 [ 324.512999][ T7154] CPU: 1 PID: 7154 Comm: syz.0.894 Not tainted syzkaller #0 [ 324.520418][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 324.530527][ T7154] Call Trace: [ 324.533874][ T7154] [ 324.536847][ T7154] dump_stack_lvl+0x188/0x24e [ 324.541583][ T7154] ? show_regs_print_info+0x12/0x12 [ 324.546836][ T7154] ? load_image+0x410/0x410 [ 324.551389][ T7154] ? __might_sleep+0xd0/0xd0 [ 324.556035][ T7154] ? __lock_acquire+0x7ea0/0x7ea0 [ 324.561113][ T7154] ? mark_lock+0x94/0x320 [ 324.565516][ T7154] should_fail_ex+0x390/0x4c0 [ 324.570257][ T7154] should_failslab+0x5/0x20 [ 324.574801][ T7154] slab_pre_alloc_hook+0x59/0x300 [ 324.579886][ T7154] ? __get_vm_area_node+0x122/0x330 [ 324.585139][ T7154] __kmem_cache_alloc_node+0x4f/0x270 [ 324.590560][ T7154] ? __get_vm_area_node+0x122/0x330 [ 324.595813][ T7154] kmalloc_node_trace+0x22/0xe0 [ 324.600714][ T7154] __get_vm_area_node+0x122/0x330 [ 324.605800][ T7154] __vmalloc_node_range+0x357/0x1380 [ 324.611156][ T7154] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 324.616770][ T7154] ? trace_event_raw_event_lock+0x230/0x230 [ 324.622740][ T7154] ? aa_get_newest_label+0xf9/0x5b0 [ 324.628000][ T7154] ? free_vm_area+0x50/0x50 [ 324.632546][ T7154] ? end_current_label_crit_section+0x170/0x170 [ 324.638851][ T7154] ? __lock_acquire+0x7ea0/0x7ea0 [ 324.643942][ T7154] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 324.649532][ T7154] __vmalloc+0x76/0x80 [ 324.653636][ T7154] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 324.659245][ T7154] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 324.664663][ T7154] ? bpf_prog_alloc+0x13/0x1b0 [ 324.669478][ T7154] bpf_prog_alloc+0x1c/0x1b0 [ 324.674133][ T7154] bpf_prog_load+0x7d4/0x1530 [ 324.678858][ T7154] ? map_freeze+0x390/0x390 [ 324.683398][ T7154] ? __might_fault+0xa6/0x120 [ 324.688121][ T7154] ? __might_fault+0xa6/0x120 [ 324.692822][ T7154] ? __might_fault+0xc2/0x120 [ 324.697524][ T7154] ? __might_fault+0xa6/0x120 [ 324.702226][ T7154] ? bpf_lsm_bpf+0x5/0x10 [ 324.706582][ T7154] ? security_bpf+0x7a/0xa0 [ 324.711118][ T7154] __sys_bpf+0x5b8/0x780 [ 324.715403][ T7154] ? bpf_link_show_fdinfo+0x380/0x380 [ 324.720828][ T7154] ? lock_chain_count+0x20/0x20 [ 324.725747][ T7154] __x64_sys_bpf+0x78/0x90 [ 324.730309][ T7154] do_syscall_64+0x4c/0xa0 [ 324.734784][ T7154] ? clear_bhb_loop+0x60/0xb0 [ 324.739494][ T7154] ? clear_bhb_loop+0x60/0xb0 [ 324.744204][ T7154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.750131][ T7154] RIP: 0033:0x7f6bb339e199 [ 324.754571][ T7154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.774213][ T7154] RSP: 002b:00007f6bb15f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.782658][ T7154] RAX: ffffffffffffffda RBX: 00007f6bb3625fa0 RCX: 00007f6bb339e199 [ 324.790653][ T7154] RDX: 0000000000000094 RSI: 0000200000000740 RDI: 0000000000000005 [ 324.798655][ T7154] RBP: 00007f6bb15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 324.806654][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.814651][ T7154] R13: 00007f6bb3626038 R14: 00007f6bb3625fa0 R15: 00007ffef43c8908 [ 324.822664][ T7154] [ 324.887514][ T7154] syz.0.894: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 324.984867][ T7154] CPU: 0 PID: 7154 Comm: syz.0.894 Not tainted syzkaller #0 [ 324.992257][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 325.002366][ T7154] Call Trace: [ 325.005688][ T7154] [ 325.008679][ T7154] dump_stack_lvl+0x188/0x24e [ 325.013415][ T7154] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 325.019927][ T7154] ? show_regs_print_info+0x12/0x12 [ 325.025195][ T7154] ? load_image+0x410/0x410 [ 325.029792][ T7154] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 325.036273][ T7154] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 325.042848][ T7154] warn_alloc+0x242/0x330 [ 325.047245][ T7154] ? __get_vm_area_node+0x122/0x330 [ 325.052511][ T7154] ? zone_watermark_ok_safe+0x270/0x270 [ 325.058154][ T7154] ? rcu_is_watching+0x11/0xa0 [ 325.062985][ T7154] ? __get_vm_area_node+0x318/0x330 [ 325.068241][ T7154] __vmalloc_node_range+0x37c/0x1380 [ 325.073595][ T7154] ? trace_event_raw_event_lock+0x230/0x230 [ 325.079547][ T7154] ? aa_get_newest_label+0xf9/0x5b0 [ 325.084787][ T7154] ? free_vm_area+0x50/0x50 [ 325.089321][ T7154] ? end_current_label_crit_section+0x170/0x170 [ 325.095601][ T7154] ? __lock_acquire+0x7ea0/0x7ea0 [ 325.100690][ T7154] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 325.106278][ T7154] __vmalloc+0x76/0x80 [ 325.110379][ T7154] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 325.115962][ T7154] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 325.121467][ T7154] ? bpf_prog_alloc+0x13/0x1b0 [ 325.126282][ T7154] bpf_prog_alloc+0x1c/0x1b0 [ 325.130935][ T7154] bpf_prog_load+0x7d4/0x1530 [ 325.135663][ T7154] ? map_freeze+0x390/0x390 [ 325.140203][ T7154] ? __might_fault+0xa6/0x120 [ 325.144927][ T7154] ? __might_fault+0xa6/0x120 [ 325.149632][ T7154] ? __might_fault+0xc2/0x120 [ 325.154367][ T7154] ? __might_fault+0xa6/0x120 [ 325.159079][ T7154] ? bpf_lsm_bpf+0x5/0x10 [ 325.163444][ T7154] ? security_bpf+0x7a/0xa0 [ 325.167984][ T7154] __sys_bpf+0x5b8/0x780 [ 325.172262][ T7154] ? bpf_link_show_fdinfo+0x380/0x380 [ 325.177683][ T7154] ? lock_chain_count+0x20/0x20 [ 325.182576][ T7154] __x64_sys_bpf+0x78/0x90 [ 325.187025][ T7154] do_syscall_64+0x4c/0xa0 [ 325.191473][ T7154] ? clear_bhb_loop+0x60/0xb0 [ 325.196186][ T7154] ? clear_bhb_loop+0x60/0xb0 [ 325.200896][ T7154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.206822][ T7154] RIP: 0033:0x7f6bb339e199 [ 325.211261][ T7154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.230915][ T7154] RSP: 002b:00007f6bb15f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.239384][ T7154] RAX: ffffffffffffffda RBX: 00007f6bb3625fa0 RCX: 00007f6bb339e199 [ 325.247414][ T7154] RDX: 0000000000000094 RSI: 0000200000000740 RDI: 0000000000000005 [ 325.255415][ T7154] RBP: 00007f6bb15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 325.263417][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.271412][ T7154] R13: 00007f6bb3626038 R14: 00007f6bb3625fa0 R15: 00007ffef43c8908 [ 325.279434][ T7154] [ 325.604592][ T7161] netlink: 'syz.1.893': attribute type 10 has an invalid length. [ 325.704853][ T7161] netlink: 168 bytes leftover after parsing attributes in process `syz.1.893'. [ 325.796685][ T7161] netlink: 'syz.1.893': attribute type 10 has an invalid length. [ 325.985463][ T7154] Mem-Info: [ 325.988689][ T7154] active_anon:64222 inactive_anon:0 isolated_anon:0 [ 325.988689][ T7154] active_file:24934 inactive_file:40052 isolated_file:0 [ 325.988689][ T7154] unevictable:768 dirty:102 writeback:0 [ 325.988689][ T7154] slab_reclaimable:21381 slab_unreclaimable:93928 [ 325.988689][ T7154] mapped:43165 shmem:58174 pagetables:831 [ 325.988689][ T7154] sec_pagetables:0 bounce:0 [ 325.988689][ T7154] kernel_misc_reclaimable:0 [ 325.988689][ T7154] free:1250085 free_pcp:14248 free_cma:0 [ 326.142858][ T7154] Node 0 active_anon:252888kB inactive_anon:0kB active_file:99736kB inactive_file:160008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:176660kB dirty:408kB writeback:0kB shmem:226760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11336kB pagetables:3424kB sec_pagetables:0kB all_unreclaimable? no [ 326.233340][ T7154] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 326.330230][ T7154] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 326.450217][ T7154] lowmem_reserve[]: 0 2511 2513 2513 2513 [ 326.456215][ T7154] Node 0 DMA32 free:1095944kB boost:0kB min:34556kB low:43192kB high:51828kB reserved_highatomic:0KB active_anon:254288kB inactive_anon:0kB active_file:99736kB inactive_file:160008kB unevictable:1536kB writepending:408kB present:3129332kB managed:2576776kB mlocked:0kB bounce:0kB free_pcp:37116kB local_pcp:20800kB free_cma:0kB [ 326.550137][ T7154] lowmem_reserve[]: 0 0 1 1 1 [ 326.577525][ T7154] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1680kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 326.644953][ T7154] lowmem_reserve[]: 0 0 0 0 0 [ 326.660118][ T7154] Node 1 Normal free:3890980kB boost:0kB min:55324kB low:69152kB high:82980kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20676kB local_pcp:11296kB free_cma:0kB [ 326.715331][ T7154] lowmem_reserve[]: 0 0 0 0 0 [ 326.720167][ T7154] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 326.766136][ T7154] Node 0 DMA32: 1828*4kB (UM) 998*8kB (UE) 1697*16kB (UM) 30*32kB (U) 211*64kB (UM) 118*128kB (UME) 12*256kB (UME) 3*512kB (UM) 10*1024kB (UE) 7*2048kB (UME) 240*4096kB (UM) = 1084240kB [ 326.814780][ T7154] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 326.866351][ T7154] Node 1 Normal: 227*4kB (UE) 55*8kB (U) 32*16kB (UME) 31*32kB (UME) 18*64kB (UME) 9*128kB (UM) 5*256kB (UM) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3890980kB [ 326.894758][ T7154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 326.904393][ T7154] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 326.940199][ T7154] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 326.964933][ T7154] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 326.974337][ T7154] 128800 total pagecache pages [ 326.989152][ T7154] 0 pages in swap cache [ 326.993394][ T7154] Free swap = 124996kB [ 327.014828][ T7154] Total swap = 124996kB [ 327.019078][ T7154] 2097051 pages RAM [ 327.022962][ T7154] 0 pages HighMem/MovableOnly [ 327.053913][ T7154] 419192 pages reserved [ 327.058233][ T7154] 0 pages cma reserved [ 327.265487][ T7173] netlink: 'syz.0.896': attribute type 13 has an invalid length. [ 327.305308][ T7173] netlink: 148 bytes leftover after parsing attributes in process `syz.0.896'. [ 327.898739][ T7178] netlink: 'syz.2.898': attribute type 10 has an invalid length. [ 327.976858][ T7182] netlink: 'syz.0.900': attribute type 2 has an invalid length. [ 328.023089][ T7182] netlink: 14 bytes leftover after parsing attributes in process `syz.0.900'. [ 328.027692][ T7185] FAULT_INJECTION: forcing a failure. [ 328.027692][ T7185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.234744][ T7185] CPU: 0 PID: 7185 Comm: syz.4.899 Not tainted syzkaller #0 [ 328.242218][ T7185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 328.252324][ T7185] Call Trace: [ 328.255649][ T7185] [ 328.258623][ T7185] dump_stack_lvl+0x188/0x24e [ 328.263369][ T7185] ? show_regs_print_info+0x12/0x12 [ 328.268623][ T7185] ? load_image+0x410/0x410 [ 328.273183][ T7185] ? __lock_acquire+0x7ea0/0x7ea0 [ 328.278280][ T7185] should_fail_ex+0x390/0x4c0 [ 328.283065][ T7185] _copy_to_user+0x2c/0x130 [ 328.287653][ T7185] map_get_next_key+0x4f5/0x620 [ 328.292567][ T7185] ? map_get_next_key+0x2cf/0x620 [ 328.297663][ T7185] __sys_bpf+0x466/0x780 [ 328.301977][ T7185] ? bpf_link_show_fdinfo+0x380/0x380 [ 328.307472][ T7185] ? lock_chain_count+0x20/0x20 [ 328.312404][ T7185] __x64_sys_bpf+0x78/0x90 [ 328.316880][ T7185] do_syscall_64+0x4c/0xa0 [ 328.321346][ T7185] ? clear_bhb_loop+0x60/0xb0 [ 328.326073][ T7185] ? clear_bhb_loop+0x60/0xb0 [ 328.330823][ T7185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.336777][ T7185] RIP: 0033:0x7f1ec0b9e199 [ 328.341270][ T7185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.360942][ T7185] RSP: 002b:00007f1ec1a16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 328.369420][ T7185] RAX: ffffffffffffffda RBX: 00007f1ec0e26090 RCX: 00007f1ec0b9e199 [ 328.377469][ T7185] RDX: 0000000000000020 RSI: 0000200000001600 RDI: 0000000000000004 [ 328.385486][ T7185] RBP: 00007f1ec1a16090 R08: 0000000000000000 R09: 0000000000000000 [ 328.393515][ T7185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.401534][ T7185] R13: 00007f1ec0e26128 R14: 00007f1ec0e26090 R15: 00007ffce2281cf8 [ 328.409572][ T7185] [ 328.630377][ T7191] netlink: 'syz.3.902': attribute type 3 has an invalid length. [ 328.700140][ T7191] netlink: 'syz.3.902': attribute type 3 has an invalid length. [ 328.751205][ T7191] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.902'. [ 329.049366][ T7194] netlink: 128 bytes leftover after parsing attributes in process `syz.2.903'. [ 329.135499][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 329.288251][ T7194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.101078][ T7218] netlink: 'syz.2.911': attribute type 10 has an invalid length. [ 330.121287][ T7218] netlink: 168 bytes leftover after parsing attributes in process `syz.2.911'. [ 330.205291][ T7218] netlink: 'syz.2.911': attribute type 10 has an invalid length. [ 330.332498][ T7223] FAULT_INJECTION: forcing a failure. [ 330.332498][ T7223] name failslab, interval 1, probability 0, space 0, times 0 [ 330.489841][ T7223] CPU: 1 PID: 7223 Comm: syz.1.910 Not tainted syzkaller #0 [ 330.497254][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 330.507354][ T7223] Call Trace: [ 330.510678][ T7223] [ 330.513646][ T7223] dump_stack_lvl+0x188/0x24e [ 330.518383][ T7223] ? show_regs_print_info+0x12/0x12 [ 330.523640][ T7223] ? load_image+0x410/0x410 [ 330.528235][ T7223] ? __might_sleep+0xd0/0xd0 [ 330.532879][ T7223] ? __lock_acquire+0x7ea0/0x7ea0 [ 330.538003][ T7223] should_fail_ex+0x390/0x4c0 [ 330.542754][ T7223] should_failslab+0x5/0x20 [ 330.547310][ T7223] slab_pre_alloc_hook+0x59/0x300 [ 330.552434][ T7223] kmem_cache_alloc_node+0x5a/0x310 [ 330.557692][ T7223] ? __alloc_skb+0xf9/0x7d0 [ 330.562248][ T7223] __alloc_skb+0xf9/0x7d0 [ 330.566632][ T7223] alloc_skb_with_frags+0xa7/0x710 [ 330.571805][ T7223] ? aa_label_sk_perm+0x501/0x6b0 [ 330.576890][ T7223] sock_alloc_send_pskb+0x87f/0x9a0 [ 330.582166][ T7223] ? sock_kzfree_s+0x50/0x50 [ 330.586823][ T7223] ? trace_event_raw_event_lock+0x230/0x230 [ 330.592784][ T7223] ? apparmor_socket_getpeersec_dgram+0x5/0x10 [ 330.599004][ T7223] ? security_socket_getpeersec_dgram+0x9d/0xc0 [ 330.605347][ T7223] unix_stream_sendmsg+0x431/0xa70 [ 330.610545][ T7223] ? unix_show_fdinfo+0x2c0/0x2c0 [ 330.615624][ T7223] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 330.622106][ T7223] ? apparmor_socket_sendmsg+0x8a/0x330 [ 330.627723][ T7223] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 330.633065][ T7223] ? security_socket_sendmsg+0x7c/0xa0 [ 330.638592][ T7223] ? unix_show_fdinfo+0x2c0/0x2c0 [ 330.643694][ T7223] ____sys_sendmsg+0x5ed/0x9a0 [ 330.648535][ T7223] ? __sys_sendmsg_sock+0x30/0x30 [ 330.653619][ T7223] ? __import_iovec+0x306/0x510 [ 330.658550][ T7223] ? import_iovec+0x6f/0xa0 [ 330.663124][ T7223] ___sys_sendmsg+0x2a2/0x360 [ 330.667861][ T7223] ? __sys_sendmsg+0x2a0/0x2a0 [ 330.672705][ T7223] ? __lock_acquire+0x7ea0/0x7ea0 [ 330.677820][ T7223] __se_sys_sendmsg+0x1c3/0x2b0 [ 330.682732][ T7223] ? __x64_sys_sendmsg+0x80/0x80 [ 330.687741][ T7223] ? lockdep_hardirqs_on+0x94/0x140 [ 330.693009][ T7223] do_syscall_64+0x4c/0xa0 [ 330.697480][ T7223] ? clear_bhb_loop+0x60/0xb0 [ 330.702224][ T7223] ? clear_bhb_loop+0x60/0xb0 [ 330.706951][ T7223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.712892][ T7223] RIP: 0033:0x7f0332d9e199 [ 330.717355][ T7223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.737055][ T7223] RSP: 002b:00007f0333cad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.745539][ T7223] RAX: ffffffffffffffda RBX: 00007f0333026180 RCX: 00007f0332d9e199 [ 330.753555][ T7223] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000007 [ 330.761572][ T7223] RBP: 00007f0333cad090 R08: 0000000000000000 R09: 0000000000000000 [ 330.769596][ T7223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.777615][ T7223] R13: 00007f0333026218 R14: 00007f0333026180 R15: 00007fff4353acb8 [ 330.785650][ T7223] [ 332.767268][ T7231] netlink: 60 bytes leftover after parsing attributes in process `syz.2.913'. [ 332.805449][ T7231] netlink: 60 bytes leftover after parsing attributes in process `syz.2.913'. [ 332.838933][ T7228] netlink: 60 bytes leftover after parsing attributes in process `syz.2.913'. [ 332.903288][ T7228] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.913'. [ 336.249821][ T7263] netlink: 'syz.4.924': attribute type 10 has an invalid length. [ 336.264229][ T7263] netlink: 168 bytes leftover after parsing attributes in process `syz.4.924'. [ 336.305386][ T7267] netlink: 'syz.4.924': attribute type 10 has an invalid length. [ 336.424229][ T7269] netlink: 'syz.3.927': attribute type 29 has an invalid length. [ 336.461365][ T7269] netlink: 'syz.3.927': attribute type 29 has an invalid length. [ 336.481622][ T7272] netlink: 'syz.3.927': attribute type 29 has an invalid length. [ 336.610387][ T7274] netlink: 'syz.1.928': attribute type 29 has an invalid length. [ 336.621327][ T7274] netlink: 'syz.1.928': attribute type 29 has an invalid length. [ 336.656836][ T7274] netlink: 'syz.1.928': attribute type 29 has an invalid length. [ 336.689878][ T7274] netlink: 'syz.1.928': attribute type 29 has an invalid length. [ 336.723059][ T7274] netlink: 'syz.1.928': attribute type 29 has an invalid length. [ 336.759413][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.928'. [ 336.860997][ T7278] netlink: 60 bytes leftover after parsing attributes in process `syz.3.929'. [ 336.916816][ T7278] netlink: 60 bytes leftover after parsing attributes in process `syz.3.929'. [ 336.934353][ T7279] netlink: 60 bytes leftover after parsing attributes in process `syz.3.929'. [ 337.061303][ T7278] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.929'. [ 338.922176][ T7300] netlink: 156 bytes leftover after parsing attributes in process `syz.4.936'. [ 339.065394][ T7301] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.934'. [ 339.428657][ T7312] sctp: [Deprecated]: syz.1.937 (pid 7312) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.428657][ T7312] Use struct sctp_sack_info instead [ 342.250723][ T7334] validate_nla: 5 callbacks suppressed [ 342.250766][ T7334] netlink: 'syz.1.948': attribute type 10 has an invalid length. [ 342.296849][ T7334] netlink: 168 bytes leftover after parsing attributes in process `syz.1.948'. [ 342.324179][ T7334] netlink: 'syz.1.948': attribute type 10 has an invalid length. [ 342.333596][ T7341] netlink: 14 bytes leftover after parsing attributes in process `syz.2.950'. [ 342.357725][ T7341] openvswitch: netlink: Message has 6 unknown bytes. [ 342.440535][ T7344] netlink: 'syz.3.951': attribute type 29 has an invalid length. [ 342.454269][ T7344] netlink: 'syz.3.951': attribute type 29 has an invalid length. [ 342.463730][ T7344] netlink: 'syz.3.951': attribute type 29 has an invalid length. [ 345.018008][ T7373] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.962'. [ 347.914809][ T7376] netlink: 'syz.0.964': attribute type 2 has an invalid length. [ 347.967916][ T7376] netlink: 14 bytes leftover after parsing attributes in process `syz.0.964'. [ 348.118805][ T7384] netlink: 14 bytes leftover after parsing attributes in process `syz.4.967'. [ 348.189435][ T7385] netlink: 'syz.2.968': attribute type 10 has an invalid length. [ 348.209279][ T7384] openvswitch: netlink: Message has 6 unknown bytes. [ 348.223406][ T7385] netlink: 168 bytes leftover after parsing attributes in process `syz.2.968'. [ 348.253735][ T7385] netlink: 'syz.2.968': attribute type 10 has an invalid length. [ 349.250829][ T7409] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.975'. [ 349.472058][ T7411] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.976'. [ 350.069583][ T7414] netlink: 'syz.1.977': attribute type 29 has an invalid length. [ 351.507858][ T7414] netlink: 'syz.1.977': attribute type 29 has an invalid length. [ 351.521883][ T7415] netlink: 'syz.1.977': attribute type 29 has an invalid length. [ 351.881789][ T7429] netlink: 14 bytes leftover after parsing attributes in process `syz.4.984'. [ 351.916894][ T7429] openvswitch: netlink: Message has 6 unknown bytes. [ 351.934531][ T7433] netlink: 'syz.3.983': attribute type 10 has an invalid length. [ 351.942927][ T7433] netlink: 168 bytes leftover after parsing attributes in process `syz.3.983'. [ 351.985428][ T7433] netlink: 'syz.3.983': attribute type 10 has an invalid length. [ 352.226013][ T7438] netlink: 'syz.4.985': attribute type 2 has an invalid length. [ 352.237999][ T7438] netlink: 14 bytes leftover after parsing attributes in process `syz.4.985'. [ 352.363437][ T7450] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.988'. [ 353.915948][ T7461] netlink: 128 bytes leftover after parsing attributes in process `syz.4.992'. [ 353.965342][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 354.072961][ T7461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.223834][ T7475] netlink: 14 bytes leftover after parsing attributes in process `syz.3.996'. [ 356.263049][ T7475] openvswitch: netlink: Message has 6 unknown bytes. [ 356.725946][ T7487] netlink: 'syz.3.1002': attribute type 2 has an invalid length. [ 356.777472][ T7487] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1002'. [ 356.880075][ T7488] netlink: 'syz.4.1000': attribute type 10 has an invalid length. [ 357.015527][ T7488] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1000'. [ 357.093426][ T7489] netlink: 'syz.4.1000': attribute type 10 has an invalid length. [ 357.744416][ T7510] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.1006'. [ 358.860469][ T7516] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1012'. [ 358.920474][ T7516] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 358.974886][ T7516] CPU: 0 PID: 7516 Comm: syz.1.1012 Not tainted syzkaller #0 [ 358.982358][ T7516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 358.992472][ T7516] Call Trace: [ 358.995799][ T7516] [ 358.998778][ T7516] dump_stack_lvl+0x188/0x24e [ 359.003525][ T7516] ? show_regs_print_info+0x12/0x12 [ 359.008789][ T7516] ? load_image+0x410/0x410 [ 359.013719][ T7516] sysfs_warn_dup+0x8a/0xa0 [ 359.018289][ T7516] sysfs_do_create_link_sd+0xc0/0x110 [ 359.023727][ T7516] device_add+0x83b/0x1050 [ 359.028216][ T7516] wiphy_register+0x1d8b/0x2aa0 [ 359.033152][ T7516] ? cfg80211_event_work+0x40/0x40 [ 359.038327][ T7516] ? minstrel_ht_alloc+0x894/0xa20 [ 359.043511][ T7516] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 359.049650][ T7516] ieee80211_register_hw+0x2e33/0x3b00 [ 359.055166][ T7516] ? ieee80211_register_hw+0xeb1/0x3b00 [ 359.060746][ T7516] ? ieee80211_register_hw+0xeb1/0x3b00 [ 359.066334][ T7516] ? ieee80211_tasklet_handler+0x20/0x20 [ 359.072001][ T7516] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 359.077928][ T7516] ? __debug_object_init+0xed/0x440 [ 359.083162][ T7516] ? memset+0x1e/0x40 [ 359.087182][ T7516] ? __hrtimer_init+0x189/0x270 [ 359.092066][ T7516] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 359.097827][ T7516] ? memcpy+0x3c/0x60 [ 359.101843][ T7516] hwsim_new_radio_nl+0xab7/0xc90 [ 359.106910][ T7516] genl_family_rcv_msg_doit+0x22f/0x350 [ 359.112493][ T7516] ? end_current_label_crit_section+0x170/0x170 [ 359.119822][ T7516] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 359.125757][ T7516] ? bpf_lsm_capable+0x5/0x10 [ 359.130471][ T7516] ? security_capable+0x85/0xb0 [ 359.135400][ T7516] genl_rcv_msg+0x601/0x790 [ 359.139938][ T7516] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 359.146145][ T7516] ? genl_bind+0x360/0x360 [ 359.150596][ T7516] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 359.157047][ T7516] ? kasan_check_range+0x84/0x290 [ 359.162119][ T7516] netlink_rcv_skb+0x1ef/0x440 [ 359.166916][ T7516] ? genl_bind+0x360/0x360 [ 359.171370][ T7516] ? netlink_ack+0x1160/0x1160 [ 359.176173][ T7516] ? down_read+0x1a8/0x2d0 [ 359.180630][ T7516] genl_rcv+0x24/0x40 [ 359.184640][ T7516] netlink_unicast+0x7ad/0x920 [ 359.189445][ T7516] netlink_sendmsg+0x8ad/0xbd0 [ 359.194256][ T7516] ? netlink_getsockopt+0x550/0x550 [ 359.199536][ T7516] ? apparmor_socket_sendmsg+0x8a/0x330 [ 359.205311][ T7516] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 359.210627][ T7516] ? security_socket_sendmsg+0x7c/0xa0 [ 359.216144][ T7516] ? netlink_getsockopt+0x550/0x550 [ 359.221465][ T7516] ____sys_sendmsg+0x5ed/0x9a0 [ 359.226278][ T7516] ? __sys_sendmsg_sock+0x30/0x30 [ 359.231331][ T7516] ? __import_iovec+0x306/0x510 [ 359.236232][ T7516] ? import_iovec+0x6f/0xa0 [ 359.240788][ T7516] ___sys_sendmsg+0x2a2/0x360 [ 359.245511][ T7516] ? __sys_sendmsg+0x2a0/0x2a0 [ 359.250357][ T7516] __se_sys_sendmsg+0x1c3/0x2b0 [ 359.255252][ T7516] ? __x64_sys_sendmsg+0x80/0x80 [ 359.260242][ T7516] ? lockdep_hardirqs_on+0x94/0x140 [ 359.265480][ T7516] do_syscall_64+0x4c/0xa0 [ 359.269927][ T7516] ? clear_bhb_loop+0x60/0xb0 [ 359.274654][ T7516] ? clear_bhb_loop+0x60/0xb0 [ 359.279376][ T7516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.285387][ T7516] RIP: 0033:0x7f0332d9e199 [ 359.289837][ T7516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.309474][ T7516] RSP: 002b:00007f0333cef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.317926][ T7516] RAX: ffffffffffffffda RBX: 00007f0333025fa0 RCX: 00007f0332d9e199 [ 359.325929][ T7516] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 359.333927][ T7516] RBP: 00007f0332e35888 R08: 0000000000000000 R09: 0000000000000000 [ 359.342036][ T7516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.350053][ T7516] R13: 00007f0333026038 R14: 00007f0333025fa0 R15: 00007fff4353acb8 [ 359.358079][ T7516] [ 360.771679][ T7521] FAULT_INJECTION: forcing a failure. [ 360.771679][ T7521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.809294][ T7521] CPU: 1 PID: 7521 Comm: syz.4.1014 Not tainted syzkaller #0 [ 360.816759][ T7521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 360.826869][ T7521] Call Trace: [ 360.830222][ T7521] [ 360.833297][ T7521] dump_stack_lvl+0x188/0x24e [ 360.838043][ T7521] ? show_regs_print_info+0x12/0x12 [ 360.843298][ T7521] ? load_image+0x410/0x410 [ 360.847860][ T7521] ? __lock_acquire+0x7ea0/0x7ea0 [ 360.852942][ T7521] ? __lock_acquire+0x1359/0x7ea0 [ 360.858032][ T7521] should_fail_ex+0x390/0x4c0 [ 360.862776][ T7521] _copy_from_user+0x2c/0x170 [ 360.867515][ T7521] br_dev_siocdevprivate+0x115/0x1770 [ 360.872952][ T7521] ? br_handle_local_finish+0x20/0x20 [ 360.878383][ T7521] ? __mutex_trylock_common+0x15c/0x260 [ 360.883982][ T7521] ? trace_raw_output_contention_end+0xd0/0xd0 [ 360.890202][ T7521] ? rcu_is_watching+0x11/0xa0 [ 360.895032][ T7521] ? trace_contention_end+0x5f/0x170 [ 360.900403][ T7521] ? full_name_hash+0x8e/0xe0 [ 360.905240][ T7521] dev_ifsioc+0xa4a/0xd50 [ 360.909634][ T7521] ? dev_ioctl+0xe80/0xe80 [ 360.914109][ T7521] ? __lock_acquire+0x7ea0/0x7ea0 [ 360.919187][ T7521] ? full_name_hash+0x8e/0xe0 [ 360.923925][ T7521] ? dev_load+0x1d/0x1e0 [ 360.928197][ T7521] ? dev_load+0x1d/0x1e0 [ 360.932469][ T7521] dev_ioctl+0x5f8/0xe80 [ 360.936745][ T7521] ? get_user_ifreq+0xc7/0x170 [ 360.941534][ T7521] sock_ioctl+0x679/0x700 [ 360.945892][ T7521] ? sock_poll+0x420/0x420 [ 360.950348][ T7521] ? bpf_lsm_file_ioctl+0x5/0x10 [ 360.955321][ T7521] ? security_file_ioctl+0x7c/0xa0 [ 360.960457][ T7521] ? sock_poll+0x420/0x420 [ 360.964913][ T7521] __se_sys_ioctl+0xfa/0x170 [ 360.969554][ T7521] do_syscall_64+0x4c/0xa0 [ 360.974004][ T7521] ? clear_bhb_loop+0x60/0xb0 [ 360.978708][ T7521] ? clear_bhb_loop+0x60/0xb0 [ 360.983419][ T7521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.989350][ T7521] RIP: 0033:0x7f1ec0b9e199 [ 360.993796][ T7521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.013423][ T7521] RSP: 002b:00007f1ec1a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.021866][ T7521] RAX: ffffffffffffffda RBX: 00007f1ec0e25fa0 RCX: 00007f1ec0b9e199 [ 361.029864][ T7521] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 361.037857][ T7521] RBP: 00007f1ec1a37090 R08: 0000000000000000 R09: 0000000000000000 [ 361.045857][ T7521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.053949][ T7521] R13: 00007f1ec0e26038 R14: 00007f1ec0e25fa0 R15: 00007ffce2281cf8 [ 361.061991][ T7521] [ 361.160777][ T7527] netlink: 'syz.1.1017': attribute type 2 has an invalid length. [ 361.199966][ T7527] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1017'. [ 361.637427][ T7541] netlink: 'syz.3.1018': attribute type 10 has an invalid length. [ 361.694836][ T7541] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1018'. [ 361.704544][ T7536] netlink: 'syz.3.1018': attribute type 10 has an invalid length. [ 361.747133][ T7547] __sock_release: fasync list not empty! [ 362.054097][ T7558] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1025'. [ 366.053040][ T7581] netlink: 'syz.1.1033': attribute type 3 has an invalid length. [ 366.091182][ T7577] netlink: 'syz.3.1035': attribute type 2 has an invalid length. [ 366.111482][ T7577] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1035'. [ 366.124844][ T7581] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1033'. [ 366.237030][ T7587] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1037'. [ 366.615273][ T7593] __sock_release: fasync list not empty! [ 367.395839][ T7610] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1041'. [ 369.630395][ T7620] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 369.743742][ T7622] netlink: 'syz.1.1046': attribute type 10 has an invalid length. [ 369.795436][ T7622] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1046'. [ 369.821554][ T7622] device hsr0 entered promiscuous mode [ 369.830027][ T7622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 369.856703][ T7622] bridge0: port 3(hsr0) entered blocking state [ 369.863148][ T7622] bridge0: port 3(hsr0) entered disabled state [ 369.897138][ T7622] bridge0: port 3(hsr0) entered blocking state [ 369.903452][ T7622] bridge0: port 3(hsr0) entered forwarding state [ 369.949491][ T7627] netlink: 'syz.3.1047': attribute type 2 has an invalid length. [ 369.958697][ T7627] netlink: 'syz.3.1047': attribute type 8 has an invalid length. [ 369.968082][ T7627] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1047'. [ 370.134342][ T7632] netlink: 'syz.3.1047': attribute type 2 has an invalid length. [ 370.163540][ T7632] netlink: 'syz.3.1047': attribute type 8 has an invalid length. [ 370.201667][ T7632] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1047'. [ 372.433599][ T7646] netlink: 'syz.1.1052': attribute type 2 has an invalid length. [ 372.504094][ T7650] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1052'. [ 372.754944][ T7655] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1055'. [ 372.795179][ T7655] openvswitch: netlink: Message has 6 unknown bytes. [ 372.893879][ T7658] sctp: [Deprecated]: syz.0.1050 (pid 7658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.893879][ T7658] Use struct sctp_sack_info instead [ 374.332458][ T7686] netlink: 'syz.0.1062': attribute type 2 has an invalid length. [ 374.346193][ T7686] netlink: 'syz.0.1062': attribute type 8 has an invalid length. [ 374.360465][ T7686] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1062'. [ 374.379785][ T7686] netlink: 'syz.0.1062': attribute type 2 has an invalid length. [ 374.392334][ T7686] netlink: 'syz.0.1062': attribute type 8 has an invalid length. [ 374.405104][ T7686] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1062'. [ 377.197834][ T7707] FAULT_INJECTION: forcing a failure. [ 377.197834][ T7707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.243173][ T7707] CPU: 0 PID: 7707 Comm: syz.0.1070 Not tainted syzkaller #0 [ 377.250667][ T7707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 377.260957][ T7707] Call Trace: [ 377.264288][ T7707] [ 377.267266][ T7707] dump_stack_lvl+0x188/0x24e [ 377.272021][ T7707] ? show_regs_print_info+0x12/0x12 [ 377.277286][ T7707] ? load_image+0x410/0x410 [ 377.281846][ T7707] ? __lock_acquire+0x7ea0/0x7ea0 [ 377.286991][ T7707] ? __bpf_prog_test_run_raw_tp+0x2a6/0x430 [ 377.292960][ T7707] should_fail_ex+0x390/0x4c0 [ 377.297725][ T7707] _copy_to_user+0x2c/0x130 [ 377.302290][ T7707] bpf_prog_test_run_raw_tp+0x4de/0x680 [ 377.307906][ T7707] ? trace_bpf_test_finish+0x220/0x220 [ 377.313438][ T7707] ? trace_bpf_test_finish+0x220/0x220 [ 377.318955][ T7707] bpf_prog_test_run+0x31c/0x390 [ 377.323960][ T7707] __sys_bpf+0x62b/0x780 [ 377.328276][ T7707] ? bpf_link_show_fdinfo+0x380/0x380 [ 377.333723][ T7707] ? lock_chain_count+0x20/0x20 [ 377.338640][ T7707] __x64_sys_bpf+0x78/0x90 [ 377.343119][ T7707] do_syscall_64+0x4c/0xa0 [ 377.347595][ T7707] ? clear_bhb_loop+0x60/0xb0 [ 377.352327][ T7707] ? clear_bhb_loop+0x60/0xb0 [ 377.357676][ T7707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.363620][ T7707] RIP: 0033:0x7f6bb339e199 [ 377.368081][ T7707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.387741][ T7707] RSP: 002b:00007f6bb15f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.396212][ T7707] RAX: ffffffffffffffda RBX: 00007f6bb3625fa0 RCX: 00007f6bb339e199 [ 377.404237][ T7707] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 377.412271][ T7707] RBP: 00007f6bb15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 377.420296][ T7707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.428322][ T7707] R13: 00007f6bb3626038 R14: 00007f6bb3625fa0 R15: 00007ffef43c8908 [ 377.436368][ T7707] [ 377.720173][ T7710] netlink: 'syz.2.1071': attribute type 21 has an invalid length. [ 378.585861][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.592577][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.549813][ T7725] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1077'. [ 380.565539][ T7723] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.1074'. [ 380.584915][ T7725] openvswitch: netlink: Message has 6 unknown bytes. [ 380.592447][ T7723] netlink: zone id is out of range [ 380.615899][ T7723] netlink: zone id is out of range [ 380.636008][ T7723] netlink: zone id is out of range [ 380.654914][ T7723] netlink: zone id is out of range [ 380.677764][ T7723] netlink: zone id is out of range [ 380.693751][ T7723] netlink: zone id is out of range [ 380.724220][ T7723] netlink: zone id is out of range [ 380.744521][ T7723] netlink: zone id is out of range [ 380.764899][ T7723] netlink: zone id is out of range [ 380.979067][ T7731] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1088'. [ 381.267335][ T7739] netlink: 'syz.4.1082': attribute type 10 has an invalid length. [ 381.304188][ T7739] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1082'. [ 381.351087][ T7739] netlink: 'syz.4.1082': attribute type 10 has an invalid length. [ 387.163327][ T7788] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1096'. [ 387.200216][ T7788] net_ratelimit: 41 callbacks suppressed [ 387.200235][ T7788] openvswitch: netlink: Message has 6 unknown bytes. [ 387.457853][ T7795] netlink: 'syz.1.1099': attribute type 10 has an invalid length. [ 387.476374][ T7795] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1099'. [ 387.507913][ T7795] netlink: 'syz.1.1099': attribute type 10 has an invalid length. [ 387.997332][ T7811] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1106'. [ 391.095312][ T7826] netlink: 'syz.4.1110': attribute type 2 has an invalid length. [ 391.119249][ T7828] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1110'. [ 391.366370][ T7838] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1113'. [ 391.416552][ T7838] openvswitch: netlink: Message has 6 unknown bytes. [ 392.645574][ T7874] netlink: 'syz.1.1127': attribute type 2 has an invalid length. [ 392.667263][ T7874] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1127'. [ 392.834265][ T7881] netlink: 'syz.2.1129': attribute type 11 has an invalid length. [ 392.873134][ T7881] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1129'. [ 393.091780][ T7884] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1130'. [ 393.134478][ T7884] openvswitch: netlink: Message has 6 unknown bytes. [ 393.365515][ T7880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.883143][ T7894] netlink: 'syz.2.1133': attribute type 10 has an invalid length. [ 393.915081][ T7894] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1133'. [ 394.029392][ T7894] netlink: 'syz.2.1133': attribute type 10 has an invalid length. [ 395.017885][ T7913] netlink: 'syz.3.1138': attribute type 11 has an invalid length. [ 395.085767][ T7913] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1138'. [ 395.410783][ T7910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.908695][ T7918] device syzkaller0 entered promiscuous mode [ 396.799502][ T7929] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1143'. [ 396.869797][ T7929] openvswitch: netlink: Message has 6 unknown bytes. [ 396.990890][ T7926] bridge0: port 3(hsr0) entered disabled state [ 396.997387][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.004707][ T7926] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.198914][ T7931] netlink: 'syz.3.1144': attribute type 2 has an invalid length. [ 397.295470][ T7933] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1144'. [ 397.312835][ T7937] bridge0: port 3(hsr0) entered disabled state [ 397.423184][ T7937] device bridge_slave_1 left promiscuous mode [ 397.463720][ T7937] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.501238][ T7937] device bridge_slave_0 left promiscuous mode [ 397.525624][ T7937] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.894285][ T7941] netlink: 'syz.2.1147': attribute type 10 has an invalid length. [ 397.904979][ T7941] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1147'. [ 397.959967][ T7944] netlink: 'syz.2.1147': attribute type 10 has an invalid length. [ 399.432073][ T7967] FAULT_INJECTION: forcing a failure. [ 399.432073][ T7967] name failslab, interval 1, probability 0, space 0, times 0 [ 399.446894][ T7967] CPU: 1 PID: 7967 Comm: syz.4.1157 Not tainted syzkaller #0 [ 399.454338][ T7967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 399.464452][ T7967] Call Trace: [ 399.467774][ T7967] [ 399.470742][ T7967] dump_stack_lvl+0x188/0x24e [ 399.475481][ T7967] ? show_regs_print_info+0x12/0x12 [ 399.480745][ T7967] ? load_image+0x410/0x410 [ 399.485303][ T7967] ? __lock_acquire+0x7ea0/0x7ea0 [ 399.490430][ T7967] should_fail_ex+0x390/0x4c0 [ 399.495174][ T7967] should_failslab+0x5/0x20 [ 399.499727][ T7967] slab_pre_alloc_hook+0x59/0x300 [ 399.504807][ T7967] ? security_sk_alloc+0x47/0x130 [ 399.509925][ T7967] __kmem_cache_alloc_node+0x4f/0x270 [ 399.515349][ T7967] ? security_sk_alloc+0x47/0x130 [ 399.520418][ T7967] __kmalloc+0xa3/0x240 [ 399.524615][ T7967] ? sk_prot_alloc+0xe7/0x210 [ 399.529328][ T7967] security_sk_alloc+0x47/0x130 [ 399.534215][ T7967] sk_prot_alloc+0x101/0x210 [ 399.538869][ T7967] ? sk_alloc+0x20/0x330 [ 399.543142][ T7967] sk_alloc+0x36/0x330 [ 399.547243][ T7967] ? bpf_ctx_init+0x154/0x190 [ 399.551954][ T7967] bpf_prog_test_run_skb+0x36d/0x18e0 [ 399.557372][ T7967] ? lockdep_hardirqs_on+0x94/0x140 [ 399.562618][ T7967] ? cpu_online+0xa0/0xa0 [ 399.566978][ T7967] bpf_prog_test_run+0x31c/0x390 [ 399.571948][ T7967] __sys_bpf+0x62b/0x780 [ 399.576261][ T7967] ? bpf_link_show_fdinfo+0x380/0x380 [ 399.581768][ T7967] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 399.587963][ T7967] __x64_sys_bpf+0x78/0x90 [ 399.592408][ T7967] do_syscall_64+0x4c/0xa0 [ 399.596866][ T7967] ? clear_bhb_loop+0x60/0xb0 [ 399.601571][ T7967] ? clear_bhb_loop+0x60/0xb0 [ 399.606280][ T7967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.612197][ T7967] RIP: 0033:0x7f1ec0b9e199 [ 399.616635][ T7967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.636267][ T7967] RSP: 002b:00007f1ec1a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 399.644711][ T7967] RAX: ffffffffffffffda RBX: 00007f1ec0e25fa0 RCX: 00007f1ec0b9e199 [ 399.652721][ T7967] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 399.660735][ T7967] RBP: 00007f1ec1a37090 R08: 0000000000000000 R09: 0000000000000000 [ 399.668726][ T7967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.676735][ T7967] R13: 00007f1ec0e26038 R14: 00007f1ec0e25fa0 R15: 00007ffce2281cf8 [ 399.684747][ T7967] [ 400.331987][ T7981] netlink: 'syz.2.1161': attribute type 3 has an invalid length. [ 400.393722][ T7981] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1161'. [ 400.823332][ T7992] netlink: 'syz.4.1162': attribute type 22 has an invalid length. [ 400.865623][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1162'. [ 403.271469][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'. [ 403.362602][ T7996] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1163'. [ 403.453693][ T7999] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1165'. [ 403.511103][ T7999] device hsr_slave_0 left promiscuous mode [ 403.547854][ T7999] device hsr_slave_1 left promiscuous mode [ 404.333434][ T8014] netlink: 'syz.2.1171': attribute type 11 has an invalid length. [ 404.364918][ T8014] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1171'. [ 404.590053][ T8018] netlink: 'syz.4.1173': attribute type 2 has an invalid length. [ 404.627288][ T8018] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1173'. [ 404.826776][ T8013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.892529][ T8021] netlink: 'syz.3.1175': attribute type 10 has an invalid length. [ 404.973716][ T8021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.220731][ T8021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.349755][ T8021] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 405.399647][ T8041] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1179'. [ 405.525160][ T8043] IPv6: NLM_F_CREATE should be specified when creating new route [ 405.553782][ T8043] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.561184][ T8043] IPv6: NLM_F_CREATE should be set when creating new route [ 405.568642][ T8043] IPv6: NLM_F_CREATE should be set when creating new route [ 405.576048][ T8043] IPv6: NLM_F_CREATE should be set when creating new route [ 405.612733][ T8044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.631878][ T8043] netlink: 'syz.0.1180': attribute type 29 has an invalid length. [ 405.667399][ T8043] netlink: 'syz.0.1180': attribute type 29 has an invalid length. [ 408.801695][ T8065] netlink: 'syz.2.1187': attribute type 2 has an invalid length. [ 408.809959][ T8066] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1187'. [ 408.995792][ T8071] netlink: 'syz.3.1189': attribute type 3 has an invalid length. [ 409.014174][ T8071] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1189'. [ 409.110766][ T8073] netlink: 'syz.0.1190': attribute type 10 has an invalid length. [ 409.174827][ T8073] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1190'. [ 409.331154][ T8080] netlink: 'syz.0.1190': attribute type 10 has an invalid length. [ 409.803961][ T8087] netlink: 'syz.2.1192': attribute type 2 has an invalid length. [ 411.221690][ T8090] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1192'. [ 411.284950][ T8094] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1194'. [ 411.687776][ T8082] netlink: 'syz.1.1188': attribute type 10 has an invalid length. [ 412.086636][ T8082] device veth0_vlan left promiscuous mode [ 412.115979][ T8082] device veth0_vlan entered promiscuous mode [ 412.147176][ T8082] team0: Device veth0_vlan failed to register rx_handler [ 415.249787][ T8122] netlink: 'syz.4.1202': attribute type 2 has an invalid length. [ 415.321639][ T8127] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1202'. [ 416.015752][ T8126] netlink: 'syz.0.1204': attribute type 2 has an invalid length. [ 416.024556][ T8126] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1204'. [ 416.479138][ T8149] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1211'. [ 416.540518][ T8147] netlink: 'syz.0.1220': attribute type 2 has an invalid length. [ 416.552519][ T8149] openvswitch: netlink: Message has 6 unknown bytes. [ 416.563597][ T8147] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1220'. [ 416.691176][ T8143] netlink: 'syz.2.1208': attribute type 10 has an invalid length. [ 416.809153][ T8143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.245125][ T8143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.808437][ T8143] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 418.134165][ T8154] netlink: 'syz.4.1210': attribute type 10 has an invalid length. [ 418.179361][ T8178] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1217'. [ 420.770941][ T8207] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1225'. [ 420.804806][ T8207] openvswitch: netlink: Message has 6 unknown bytes. [ 422.269056][ T8224] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1232'. [ 422.341732][ T8225] FAULT_INJECTION: forcing a failure. [ 422.341732][ T8225] name failslab, interval 1, probability 0, space 0, times 0 [ 422.384911][ T8225] CPU: 0 PID: 8225 Comm: syz.0.1230 Not tainted syzkaller #0 [ 422.392410][ T8225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 422.402535][ T8225] Call Trace: [ 422.405917][ T8225] [ 422.408915][ T8225] dump_stack_lvl+0x188/0x24e [ 422.413684][ T8225] ? show_regs_print_info+0x12/0x12 [ 422.418978][ T8225] ? load_image+0x410/0x410 [ 422.423566][ T8225] ? __might_sleep+0xd0/0xd0 [ 422.428282][ T8225] ? __lock_acquire+0x7ea0/0x7ea0 [ 422.433417][ T8225] should_fail_ex+0x390/0x4c0 [ 422.438175][ T8225] should_failslab+0x5/0x20 [ 422.442724][ T8225] slab_pre_alloc_hook+0x59/0x300 [ 422.447805][ T8225] ? __get_vm_area_node+0x122/0x330 [ 422.453059][ T8225] __kmem_cache_alloc_node+0x4f/0x270 [ 422.458521][ T8225] ? __get_vm_area_node+0x122/0x330 [ 422.463769][ T8225] kmalloc_node_trace+0x22/0xe0 [ 422.468671][ T8225] __get_vm_area_node+0x122/0x330 [ 422.473743][ T8225] ? __local_bh_enable_ip+0x136/0x1c0 [ 422.479169][ T8225] __vmalloc_node_range+0x357/0x1380 [ 422.484514][ T8225] ? netlink_sendmsg+0x5ec/0xbd0 [ 422.489534][ T8225] ? netlink_insert+0x28d/0x13b0 [ 422.494569][ T8225] ? free_vm_area+0x50/0x50 [ 422.499171][ T8225] ? netlink_sendmsg+0x5ec/0xbd0 [ 422.504171][ T8225] vmalloc+0x75/0x80 [ 422.508124][ T8225] ? netlink_sendmsg+0x5ec/0xbd0 [ 422.513143][ T8225] netlink_sendmsg+0x5ec/0xbd0 [ 422.518004][ T8225] ? netlink_getsockopt+0x550/0x550 [ 422.523284][ T8225] ? apparmor_socket_sendmsg+0x8a/0x330 [ 422.528934][ T8225] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 422.534263][ T8225] ? security_socket_sendmsg+0x7c/0xa0 [ 422.539785][ T8225] sock_write_iter+0x2d5/0x3e0 [ 422.544606][ T8225] ? sock_read_iter+0x3a0/0x3a0 [ 422.549535][ T8225] ? common_file_perm+0x171/0x1c0 [ 422.554639][ T8225] vfs_write+0x482/0x9a0 [ 422.558973][ T8225] ? file_end_write+0x250/0x250 [ 422.563898][ T8225] ? __fget_files+0x3fc/0x460 [ 422.568651][ T8225] ? __fdget_pos+0x1d4/0x360 [ 422.573312][ T8225] ? ksys_write+0x70/0x260 [ 422.577793][ T8225] ksys_write+0x14d/0x260 [ 422.582187][ T8225] ? __ia32_sys_read+0x80/0x80 [ 422.587017][ T8225] ? lockdep_hardirqs_on+0x94/0x140 [ 422.592283][ T8225] do_syscall_64+0x4c/0xa0 [ 422.596753][ T8225] ? clear_bhb_loop+0x60/0xb0 [ 422.601478][ T8225] ? clear_bhb_loop+0x60/0xb0 [ 422.606231][ T8225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.612167][ T8225] RIP: 0033:0x7f6bb339e199 [ 422.616656][ T8225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.636317][ T8225] RSP: 002b:00007f6bb15f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 422.644797][ T8225] RAX: ffffffffffffffda RBX: 00007f6bb3625fa0 RCX: 00007f6bb339e199 [ 422.652841][ T8225] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000007 [ 422.660853][ T8225] RBP: 00007f6bb15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 422.668870][ T8225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.676900][ T8225] R13: 00007f6bb3626038 R14: 00007f6bb3625fa0 R15: 00007ffef43c8908 [ 422.684953][ T8225] [ 422.745308][ T8225] syz.0.1230: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 422.759045][ T8221] netlink: 'syz.1.1231': attribute type 2 has an invalid length. [ 422.789997][ T8221] netlink: 'syz.1.1231': attribute type 1 has an invalid length. [ 422.804567][ T8225] CPU: 1 PID: 8225 Comm: syz.0.1230 Not tainted syzkaller #0 [ 422.804600][ T8225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 422.804618][ T8225] Call Trace: [ 422.804635][ T8225] [ 422.804650][ T8225] dump_stack_lvl+0x188/0x24e [ 422.804690][ T8225] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 422.804729][ T8225] ? show_regs_print_info+0x12/0x12 [ 422.804767][ T8225] ? load_image+0x410/0x410 [ 422.804817][ T8225] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 422.856017][ T8225] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 422.862607][ T8225] warn_alloc+0x242/0x330 [ 422.865237][ T8221] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1231'. [ 422.867029][ T8225] ? __get_vm_area_node+0x122/0x330 [ 422.867088][ T8225] ? zone_watermark_ok_safe+0x270/0x270 [ 422.867130][ T8225] ? rcu_is_watching+0x11/0xa0 [ 422.867192][ T8225] ? __get_vm_area_node+0x318/0x330 [ 422.867228][ T8225] ? __local_bh_enable_ip+0x136/0x1c0 [ 422.902858][ T8225] __vmalloc_node_range+0x37c/0x1380 [ 422.908296][ T8225] ? netlink_insert+0x28d/0x13b0 [ 422.913348][ T8225] ? free_vm_area+0x50/0x50 [ 422.917959][ T8225] ? netlink_sendmsg+0x5ec/0xbd0 [ 422.922994][ T8225] vmalloc+0x75/0x80 [ 422.926968][ T8225] ? netlink_sendmsg+0x5ec/0xbd0 [ 422.931975][ T8225] netlink_sendmsg+0x5ec/0xbd0 [ 422.936844][ T8225] ? netlink_getsockopt+0x550/0x550 [ 422.942130][ T8225] ? apparmor_socket_sendmsg+0x8a/0x330 [ 422.947826][ T8225] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 422.953179][ T8225] ? security_socket_sendmsg+0x7c/0xa0 [ 422.958728][ T8225] sock_write_iter+0x2d5/0x3e0 [ 422.963609][ T8225] ? sock_read_iter+0x3a0/0x3a0 [ 422.968581][ T8225] ? common_file_perm+0x171/0x1c0 [ 422.973723][ T8225] vfs_write+0x482/0x9a0 [ 422.978073][ T8225] ? file_end_write+0x250/0x250 [ 422.983018][ T8225] ? __fget_files+0x3fc/0x460 [ 422.987821][ T8225] ? __fdget_pos+0x1d4/0x360 [ 422.992487][ T8225] ? ksys_write+0x70/0x260 [ 422.996995][ T8225] ksys_write+0x14d/0x260 [ 423.001439][ T8225] ? __ia32_sys_read+0x80/0x80 [ 423.006299][ T8225] ? lockdep_hardirqs_on+0x94/0x140 [ 423.011597][ T8225] do_syscall_64+0x4c/0xa0 [ 423.016089][ T8225] ? clear_bhb_loop+0x60/0xb0 [ 423.020832][ T8225] ? clear_bhb_loop+0x60/0xb0 [ 423.025586][ T8225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.031553][ T8225] RIP: 0033:0x7f6bb339e199 [ 423.036038][ T8225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.055835][ T8225] RSP: 002b:00007f6bb15f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 423.064330][ T8225] RAX: ffffffffffffffda RBX: 00007f6bb3625fa0 RCX: 00007f6bb339e199 [ 423.072369][ T8225] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000007 [ 423.080405][ T8225] RBP: 00007f6bb15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 423.088438][ T8225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.096466][ T8225] R13: 00007f6bb3626038 R14: 00007f6bb3625fa0 R15: 00007ffef43c8908 [ 423.104558][ T8225] [ 423.145555][ T8225] Mem-Info: [ 423.148759][ T8225] active_anon:29387 inactive_anon:0 isolated_anon:0 [ 423.148759][ T8225] active_file:25363 inactive_file:40086 isolated_file:0 [ 423.148759][ T8225] unevictable:768 dirty:95 writeback:0 [ 423.148759][ T8225] slab_reclaimable:21252 slab_unreclaimable:93748 [ 423.148759][ T8225] mapped:39625 shmem:23558 pagetables:608 [ 423.148759][ T8225] sec_pagetables:0 bounce:0 [ 423.148759][ T8225] kernel_misc_reclaimable:0 [ 423.148759][ T8225] free:1288255 free_pcp:11546 free_cma:0 [ 423.200533][ T8225] Node 0 active_anon:115148kB inactive_anon:0kB active_file:101452kB inactive_file:160144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158500kB dirty:380kB writeback:0kB shmem:90296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10548kB pagetables:2432kB sec_pagetables:0kB all_unreclaimable? no [ 423.246340][ T8225] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 423.284311][ T8225] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 423.375492][ T8225] lowmem_reserve[]: 0 2511 2513 2513 2513 [ 423.381362][ T8225] Node 0 DMA32 free:1251416kB boost:0kB min:34556kB low:43192kB high:51828kB reserved_highatomic:0KB active_anon:109548kB inactive_anon:0kB active_file:101452kB inactive_file:160144kB unevictable:1536kB writepending:380kB present:3129332kB managed:2576776kB mlocked:0kB bounce:0kB free_pcp:27264kB local_pcp:5856kB free_cma:0kB [ 423.485861][ T8234] netlink: 'syz.2.1244': attribute type 2 has an invalid length. [ 423.515213][ T8225] lowmem_reserve[]: 0 0 1 1 1 [ 423.516707][ T8234] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1244'. [ 423.533700][ T8225] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1680kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 423.575654][ T8228] netlink: 'syz.4.1234': attribute type 10 has an invalid length. [ 423.600174][ T8225] lowmem_reserve[]: 0 0 0 0 0 [ 423.615005][ T8225] Node 1 Normal free:3890980kB boost:0kB min:55324kB low:69152kB high:82980kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20676kB local_pcp:9380kB free_cma:0kB [ 423.975708][ T8225] lowmem_reserve[]: 0 0 0 0 0 [ 424.010039][ T8225] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 424.124808][ T8225] Node 0 DMA32: 1211*4kB (ME) 2398*8kB (UME) 1928*16kB (UME) 896*32kB (UME) 445*64kB (UME) 193*128kB (UME) 56*256kB (UME) 58*512kB (UME) 34*1024kB (UME) 17*2048kB (UME) 250*4096kB (UM) = 1274396kB [ 424.191959][ T8225] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 424.227846][ T8228] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 424.265373][ T8225] Node 1 Normal: 227*4kB (UE) 55*8kB (U) 32*16kB (UME) 31*32kB (UME) 18*64kB (UME) 9*128kB (UM) 5*256kB (UM) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3890980kB [ 424.412308][ T8225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 424.498493][ T8225] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 424.569364][ T8225] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 424.614990][ T8225] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 424.624381][ T8225] 85076 total pagecache pages [ 424.711074][ T8225] 0 pages in swap cache [ 424.770748][ T8225] Free swap = 124996kB [ 424.851107][ T8225] Total swap = 124996kB [ 424.894219][ T8225] 2097051 pages RAM [ 424.940492][ T8225] 0 pages HighMem/MovableOnly [ 425.004767][ T8225] 419192 pages reserved [ 425.009016][ T8225] 0 pages cma reserved [ 425.091357][ T8256] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1241'. [ 425.136403][ T8256] openvswitch: netlink: Message has 6 unknown bytes. [ 425.743846][ T8267] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1245'. [ 426.123100][ T8275] netlink: 'syz.4.1250': attribute type 2 has an invalid length. [ 426.155848][ T8275] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1250'. [ 426.248019][ T8273] netlink: 'syz.0.1247': attribute type 10 has an invalid length. [ 426.404198][ T8273] team0: Device nlmon0 is of different type [ 426.872633][ T8294] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1255'. [ 426.919516][ T8294] openvswitch: netlink: Message has 6 unknown bytes. [ 427.957452][ T8312] netlink: 'syz.3.1261': attribute type 39 has an invalid length. [ 428.423750][ T8320] netlink: 'syz.3.1263': attribute type 10 has an invalid length. [ 428.781689][ T8325] netlink: 'syz.1.1265': attribute type 3 has an invalid length. [ 428.810752][ T8325] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1265'. [ 428.940832][ T8328] netlink: 'syz.3.1267': attribute type 2 has an invalid length. [ 428.992405][ T8332] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1267'. [ 429.264331][ T8337] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1269'. [ 429.314592][ T8337] openvswitch: netlink: Message has 6 unknown bytes. [ 429.363927][ T8338] netlink: 'syz.4.1268': attribute type 29 has an invalid length. [ 429.415973][ T8338] netlink: 'syz.4.1268': attribute type 29 has an invalid length. [ 429.548511][ T8345] netlink: 'syz.0.1272': attribute type 10 has an invalid length. [ 430.762755][ T8368] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1280'. [ 430.857429][ T8368] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 431.865967][ T8384] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1284'. [ 431.937371][ T8384] openvswitch: netlink: Message has 6 unknown bytes. [ 432.356425][ T8391] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.1286'. [ 432.846649][ T8400] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1289'. [ 432.927275][ T8400] openvswitch: netlink: Message has 6 unknown bytes. [ 433.548894][ T8408] netlink: 'syz.1.1292': attribute type 2 has an invalid length. [ 433.604433][ T8411] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1292'. [ 436.405218][ T8427] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1298'. [ 436.452937][ T8427] openvswitch: netlink: Message has 6 unknown bytes. [ 436.747163][ T8438] netlink: 126288 bytes leftover after parsing attributes in process `syz.0.1301'. [ 437.066020][ T8444] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1303'. [ 437.126684][ T8444] openvswitch: netlink: Message has 6 unknown bytes. [ 437.341167][ T8451] -1: renamed from syzkaller0 [ 437.703877][ T8449] netlink: 'syz.3.1304': attribute type 2 has an invalid length. [ 437.726426][ T8452] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1304'. [ 438.020073][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 438.105124][ T8462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.643459][ T8483] netlink: 126288 bytes leftover after parsing attributes in process `syz.0.1313'. [ 439.065490][ T8495] netlink: 'syz.4.1318': attribute type 3 has an invalid length. [ 439.127834][ T8495] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.1318'. [ 439.505877][ T8502] netlink: 'syz.1.1320': attribute type 2 has an invalid length. [ 439.544288][ T8502] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1320'. [ 440.012184][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.018617][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.276907][ T8511] -1: renamed from syzkaller0 [ 441.030748][ T8524] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.1327'. [ 441.045898][ T8522] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1326'. [ 442.494985][ T8555] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1336'. [ 442.504066][ T8555] openvswitch: netlink: Message has 6 unknown bytes. [ 442.604247][ T8558] netlink: 'syz.2.1338': attribute type 10 has an invalid length. [ 442.656998][ T8558] device syz_tun entered promiscuous mode [ 442.735616][ T8563] netlink: 'syz.3.1337': attribute type 2 has an invalid length. [ 442.772877][ T8562] netlink: 'syz.3.1337': attribute type 2 has an invalid length. [ 442.958507][ T8558] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 443.450805][ T8574] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.1342'. [ 443.480380][ T8563] device .*! entered promiscuous mode [ 443.487651][ T8570] netlink: 'syz.4.1341': attribute type 10 has an invalid length. [ 444.444934][ T8594] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1351'. [ 444.465070][ T8594] openvswitch: netlink: Message has 6 unknown bytes. [ 444.878475][ T8606] netlink: 126288 bytes leftover after parsing attributes in process `syz.4.1356'. [ 445.635344][ T8620] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1362'. [ 445.722045][ T8618] netlink: 'syz.1.1361': attribute type 2 has an invalid length. [ 445.777436][ T8628] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1361'. [ 445.965291][ T8632] FAULT_INJECTION: forcing a failure. [ 445.965291][ T8632] name failslab, interval 1, probability 0, space 0, times 0 [ 446.019858][ T8632] CPU: 0 PID: 8632 Comm: syz.0.1366 Not tainted syzkaller #0 [ 446.027370][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 446.037477][ T8632] Call Trace: [ 446.040801][ T8632] [ 446.043809][ T8632] dump_stack_lvl+0x188/0x24e [ 446.048544][ T8632] ? show_regs_print_info+0x12/0x12 [ 446.053779][ T8632] ? load_image+0x410/0x410 [ 446.058320][ T8632] ? __might_sleep+0xd0/0xd0 [ 446.062944][ T8632] ? __lock_acquire+0x7ea0/0x7ea0 [ 446.068012][ T8632] should_fail_ex+0x390/0x4c0 [ 446.072732][ T8632] should_failslab+0x5/0x20 [ 446.077271][ T8632] slab_pre_alloc_hook+0x59/0x300 [ 446.082340][ T8632] kmem_cache_alloc_node+0x5a/0x310 [ 446.087595][ T8632] ? __alloc_skb+0xf9/0x7d0 [ 446.092139][ T8632] __alloc_skb+0xf9/0x7d0 [ 446.096505][ T8632] alloc_skb_with_frags+0xa7/0x710 [ 446.101653][ T8632] ? __lock_acquire+0x1359/0x7ea0 [ 446.106741][ T8632] sock_alloc_send_pskb+0x87f/0x9a0 [ 446.112081][ T8632] ? sock_kzfree_s+0x50/0x50 [ 446.116720][ T8632] ? perf_trace_lock+0xf8/0x390 [ 446.121619][ T8632] __ip6_append_data+0x2a80/0x3e30 [ 446.126794][ T8632] ? __lock_acquire+0x7ea0/0x7ea0 [ 446.131862][ T8632] ? inet6_sk+0xe0/0xe0 [ 446.136065][ T8632] ? ip6_setup_cork+0xff0/0xff0 [ 446.140972][ T8632] ? ip6_setup_cork+0xa4a/0xff0 [ 446.145868][ T8632] ip6_append_data+0x1c8/0x3d0 [ 446.150679][ T8632] ? inet6_sk+0xe0/0xe0 [ 446.154879][ T8632] ping_v6_sendmsg+0xdab/0x1170 [ 446.159861][ T8632] ? ping_v6_pre_connect+0x30/0x30 [ 446.165007][ T8632] ? ct_irq_exit_irqson+0x113/0x170 [ 446.170414][ T8632] ? __local_bh_enable_ip+0x136/0x1c0 [ 446.175841][ T8632] ? lockdep_hardirqs_on+0x94/0x140 [ 446.181096][ T8632] ? _local_bh_enable+0xa0/0xa0 [ 446.186030][ T8632] ? do_raw_spin_unlock+0x11d/0x230 [ 446.191287][ T8632] ? inet_sendmsg+0x109/0x2a0 [ 446.196007][ T8632] ? inet_sendmsg+0x109/0x2a0 [ 446.200731][ T8632] ? inet_send_prepare+0x250/0x250 [ 446.205884][ T8632] ____sys_sendmsg+0x5ed/0x9a0 [ 446.210686][ T8632] ? __sys_sendmsg_sock+0x30/0x30 [ 446.215776][ T8632] ? __import_iovec+0x306/0x510 [ 446.220680][ T8632] ? import_iovec+0x6f/0xa0 [ 446.225227][ T8632] ___sys_sendmsg+0x2a2/0x360 [ 446.229946][ T8632] ? __sys_sendmsg+0x2a0/0x2a0 [ 446.234769][ T8632] ? __lock_acquire+0x7ea0/0x7ea0 [ 446.239892][ T8632] __se_sys_sendmsg+0x1c3/0x2b0 [ 446.244808][ T8632] ? __x64_sys_sendmsg+0x80/0x80 [ 446.249840][ T8632] ? lockdep_hardirqs_on+0x94/0x140 [ 446.255092][ T8632] do_syscall_64+0x4c/0xa0 [ 446.259540][ T8632] ? clear_bhb_loop+0x60/0xb0 [ 446.264244][ T8632] ? clear_bhb_loop+0x60/0xb0 [ 446.268961][ T8632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.274916][ T8632] RIP: 0033:0x7f6bb339e199 [ 446.279361][ T8632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.299005][ T8632] RSP: 002b:00007f6bb15f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.307456][ T8632] RAX: ffffffffffffffda RBX: 00007f6bb3625fa0 RCX: 00007f6bb339e199 [ 446.315465][ T8632] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 446.323490][ T8632] RBP: 00007f6bb15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 446.331506][ T8632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.339544][ T8632] R13: 00007f6bb3626038 R14: 00007f6bb3625fa0 R15: 00007ffef43c8908 [ 446.347577][ T8632] [ 447.279319][ T8643] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.1369'. [ 448.287581][ T5255] tipc: Subscription rejected, illegal request [ 448.748802][ T8662] netlink: 'syz.1.1377': attribute type 10 has an invalid length. [ 448.868972][ T8662] device veth1_macvtap left promiscuous mode [ 451.856679][ T8664] netlink: 'syz.0.1378': attribute type 10 has an invalid length. [ 451.886769][ T8664] team0: Device vxcan1 is of different type [ 452.126174][ T8682] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.1384'. [ 452.280464][ T8689] netlink: 'syz.0.1386': attribute type 19 has an invalid length. [ 453.396211][ T8708] sock: sock_set_timeout: `syz.2.1389' (pid 8708) tries to set negative timeout [ 453.560567][ T8703] netlink: 'syz.0.1390': attribute type 10 has an invalid length. [ 453.596335][ T8703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.904346][ T8703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.005972][ T8703] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 454.015818][ T8706] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1389'. [ 454.326406][ T8728] netlink: 'syz.4.1395': attribute type 29 has an invalid length. [ 454.347902][ T8728] netlink: 'syz.4.1395': attribute type 29 has an invalid length. [ 454.404012][ T8730] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.1398'. [ 454.414125][ T8731] netlink: 'syz.4.1395': attribute type 29 has an invalid length. [ 454.712461][ T8737] netlink: 'syz.2.1401': attribute type 3 has an invalid length. [ 454.747657][ T8737] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1401'. [ 454.799452][ T8742] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1403'. [ 455.022102][ T8748] netlink: 'syz.1.1405': attribute type 3 has an invalid length. [ 455.024174][ T8747] netlink: 'syz.1.1405': attribute type 3 has an invalid length. [ 455.049800][ T8747] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1405'. [ 455.067221][ T8748] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1405'. [ 455.270554][ T8755] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 455.366930][ T8759] netlink: 'syz.3.1408': attribute type 10 has an invalid length. [ 455.541250][ T8764] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.1411'. [ 457.076996][ T8798] netlink: 'syz.0.1424': attribute type 2 has an invalid length. [ 457.116250][ T8798] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1424'. [ 460.467456][ T8813] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1430'. [ 460.505365][ T8813] netlink: 'syz.4.1430': attribute type 10 has an invalid length. [ 460.529212][ T8813] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 460.845533][ T8825] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1435'. [ 460.920573][ T8825] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1435'. [ 461.005439][ T8824] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1435'. [ 461.038488][ T8824] : renamed from caif0 [ 461.391711][ T8824] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 461.856235][ T8851] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1444'. [ 461.866847][ T8855] netlink: 'syz.3.1442': attribute type 2 has an invalid length. [ 461.885715][ T8855] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1442'. [ 461.963389][ T8851] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 462.110372][ T8854] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1444'. [ 462.173811][ T8854] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 462.198114][ T8854] CPU: 0 PID: 8854 Comm: syz.4.1444 Not tainted syzkaller #0 [ 462.205937][ T8854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 462.216099][ T8854] Call Trace: [ 462.219429][ T8854] [ 462.222410][ T8854] dump_stack_lvl+0x188/0x24e [ 462.227159][ T8854] ? show_regs_print_info+0x12/0x12 [ 462.232431][ T8854] ? load_image+0x410/0x410 [ 462.237006][ T8854] sysfs_warn_dup+0x8a/0xa0 [ 462.241574][ T8854] sysfs_do_create_link_sd+0xc0/0x110 [ 462.247026][ T8854] device_add+0x83b/0x1050 [ 462.251509][ T8854] wiphy_register+0x1d8b/0x2aa0 [ 462.256443][ T8854] ? cfg80211_event_work+0x40/0x40 [ 462.261621][ T8854] ? minstrel_ht_alloc+0x894/0xa20 [ 462.266808][ T8854] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 462.272939][ T8854] ieee80211_register_hw+0x2e33/0x3b00 [ 462.278469][ T8854] ? ieee80211_register_hw+0xeb1/0x3b00 [ 462.284073][ T8854] ? ieee80211_register_hw+0xeb1/0x3b00 [ 462.289685][ T8854] ? ieee80211_tasklet_handler+0x20/0x20 [ 462.295350][ T8854] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 462.301277][ T8854] ? __debug_object_init+0xed/0x440 [ 462.306506][ T8854] ? memset+0x1e/0x40 [ 462.310522][ T8854] ? __hrtimer_init+0x189/0x270 [ 462.315406][ T8854] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 462.321163][ T8854] ? memcpy+0x3c/0x60 [ 462.325183][ T8854] hwsim_new_radio_nl+0xab7/0xc90 [ 462.330272][ T8854] genl_family_rcv_msg_doit+0x22f/0x350 [ 462.335872][ T8854] ? end_current_label_crit_section+0x170/0x170 [ 462.342153][ T8854] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 462.348085][ T8854] ? bpf_lsm_capable+0x5/0x10 [ 462.352882][ T8854] ? security_capable+0x85/0xb0 [ 462.357772][ T8854] genl_rcv_msg+0x601/0x790 [ 462.362318][ T8854] ? lock_chain_count+0x20/0x20 [ 462.367210][ T8854] ? genl_bind+0x360/0x360 [ 462.371654][ T8854] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 462.378021][ T8854] netlink_rcv_skb+0x1ef/0x440 [ 462.382815][ T8854] ? genl_bind+0x360/0x360 [ 462.387263][ T8854] ? netlink_ack+0x1160/0x1160 [ 462.392088][ T8854] ? down_read+0x1a8/0x2d0 [ 462.396542][ T8854] genl_rcv+0x24/0x40 [ 462.400563][ T8854] netlink_unicast+0x7ad/0x920 [ 462.405381][ T8854] netlink_sendmsg+0x8ad/0xbd0 [ 462.410195][ T8854] ? netlink_getsockopt+0x550/0x550 [ 462.415440][ T8854] ? apparmor_socket_sendmsg+0x8a/0x330 [ 462.421056][ T8854] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 462.426401][ T8854] ? security_socket_sendmsg+0x7c/0xa0 [ 462.431894][ T8854] ? netlink_getsockopt+0x550/0x550 [ 462.437137][ T8854] ____sys_sendmsg+0x5ed/0x9a0 [ 462.441954][ T8854] ? __sys_sendmsg_sock+0x30/0x30 [ 462.447052][ T8854] ? __import_iovec+0x306/0x510 [ 462.451949][ T8854] ? import_iovec+0x6f/0xa0 [ 462.456494][ T8854] ___sys_sendmsg+0x2a2/0x360 [ 462.461207][ T8854] ? handle_mm_fault+0x33f5/0x3d40 [ 462.466357][ T8854] ? __sys_sendmsg+0x2a0/0x2a0 [ 462.471197][ T8854] __se_sys_sendmsg+0x1c3/0x2b0 [ 462.476075][ T8854] ? __x64_sys_sendmsg+0x80/0x80 [ 462.481083][ T8854] ? lockdep_hardirqs_on+0x94/0x140 [ 462.486321][ T8854] do_syscall_64+0x4c/0xa0 [ 462.490773][ T8854] ? clear_bhb_loop+0x60/0xb0 [ 462.495480][ T8854] ? clear_bhb_loop+0x60/0xb0 [ 462.500191][ T8854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.506113][ T8854] RIP: 0033:0x7f1ec0b9e199 [ 462.510587][ T8854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.530249][ T8854] RSP: 002b:00007f1ec19f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.538710][ T8854] RAX: ffffffffffffffda RBX: 00007f1ec0e26180 RCX: 00007f1ec0b9e199 [ 462.546706][ T8854] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 462.554706][ T8854] RBP: 00007f1ec0c35888 R08: 0000000000000000 R09: 0000000000000000 [ 462.562704][ T8854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.570698][ T8854] R13: 00007f1ec0e26218 R14: 00007f1ec0e26180 R15: 00007ffce2281cf8 [ 462.578713][ T8854] [ 462.649549][ T8860] netlink: 'syz.1.1443': attribute type 6 has an invalid length. [ 462.680756][ T8860] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1443'. [ 464.164290][ T8895] netlink: 126288 bytes leftover after parsing attributes in process `syz.1.1456'. [ 464.624988][ T8901] netlink: 'syz.4.1457': attribute type 2 has an invalid length. [ 464.652619][ T8901] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1457'. [ 467.312907][ T8927] __nla_validate_parse: 1 callbacks suppressed [ 467.312931][ T8927] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.1468'. [ 468.617804][ T8954] netlink: 'syz.2.1476': attribute type 2 has an invalid length. [ 468.653744][ T8954] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1476'. [ 468.717457][ T8960] FAULT_INJECTION: forcing a failure. [ 468.717457][ T8960] name failslab, interval 1, probability 0, space 0, times 0 [ 468.757163][ T8960] CPU: 0 PID: 8960 Comm: syz.4.1466 Not tainted syzkaller #0 [ 468.764673][ T8960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 468.774774][ T8960] Call Trace: [ 468.778093][ T8960] [ 468.781060][ T8960] dump_stack_lvl+0x188/0x24e [ 468.785799][ T8960] ? show_regs_print_info+0x12/0x12 [ 468.791048][ T8960] ? load_image+0x410/0x410 [ 468.795607][ T8960] ? __might_sleep+0xd0/0xd0 [ 468.800251][ T8960] ? __lock_acquire+0x7ea0/0x7ea0 [ 468.805330][ T8960] ? mark_lock+0x94/0x320 [ 468.809734][ T8960] should_fail_ex+0x390/0x4c0 [ 468.814485][ T8960] should_failslab+0x5/0x20 [ 468.819046][ T8960] slab_pre_alloc_hook+0x59/0x300 [ 468.824117][ T8960] ? __get_vm_area_node+0x122/0x330 [ 468.829355][ T8960] __kmem_cache_alloc_node+0x4f/0x270 [ 468.834762][ T8960] ? __get_vm_area_node+0x122/0x330 [ 468.840016][ T8960] kmalloc_node_trace+0x22/0xe0 [ 468.844903][ T8960] __get_vm_area_node+0x122/0x330 [ 468.849974][ T8960] __vmalloc_node_range+0x357/0x1380 [ 468.855326][ T8960] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 468.860928][ T8960] ? aa_get_newest_label+0xf9/0x5b0 [ 468.866167][ T8960] ? free_vm_area+0x50/0x50 [ 468.870698][ T8960] ? end_current_label_crit_section+0x170/0x170 [ 468.877083][ T8960] ? __lock_acquire+0x7ea0/0x7ea0 [ 468.882162][ T8960] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 468.887753][ T8960] __vmalloc+0x76/0x80 [ 468.891861][ T8960] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 468.897466][ T8960] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 468.902902][ T8960] ? bpf_prog_alloc+0x13/0x1b0 [ 468.907704][ T8960] bpf_prog_alloc+0x1c/0x1b0 [ 468.912340][ T8960] bpf_prog_load+0x7d4/0x1530 [ 468.917070][ T8960] ? map_freeze+0x390/0x390 [ 468.921605][ T8960] ? __might_fault+0xa6/0x120 [ 468.926323][ T8960] ? __might_fault+0xa6/0x120 [ 468.931031][ T8960] ? __might_fault+0xc2/0x120 [ 468.935739][ T8960] ? __might_fault+0xa6/0x120 [ 468.940484][ T8960] ? bpf_lsm_bpf+0x5/0x10 [ 468.944849][ T8960] ? security_bpf+0x7a/0xa0 [ 468.949388][ T8960] __sys_bpf+0x5b8/0x780 [ 468.953670][ T8960] ? bpf_link_show_fdinfo+0x380/0x380 [ 468.959090][ T8960] ? lock_chain_count+0x20/0x20 [ 468.964000][ T8960] __x64_sys_bpf+0x78/0x90 [ 468.968455][ T8960] do_syscall_64+0x4c/0xa0 [ 468.972913][ T8960] ? clear_bhb_loop+0x60/0xb0 [ 468.977621][ T8960] ? clear_bhb_loop+0x60/0xb0 [ 468.982334][ T8960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.988269][ T8960] RIP: 0033:0x7f1ec0b9e199 [ 468.992712][ T8960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.012352][ T8960] RSP: 002b:00007f1ec1a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 469.020794][ T8960] RAX: ffffffffffffffda RBX: 00007f1ec0e25fa0 RCX: 00007f1ec0b9e199 [ 469.028793][ T8960] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 469.036794][ T8960] RBP: 00007f1ec1a37090 R08: 0000000000000000 R09: 0000000000000000 [ 469.044798][ T8960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.052812][ T8960] R13: 00007f1ec0e26038 R14: 00007f1ec0e25fa0 R15: 00007ffce2281cf8 [ 469.060914][ T8960] [ 469.488682][ T8966] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.1479'. [ 469.668010][ T8960] syz.4.1466: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 469.704702][ T8960] CPU: 0 PID: 8960 Comm: syz.4.1466 Not tainted syzkaller #0 [ 469.712248][ T8960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 469.722339][ T8960] Call Trace: [ 469.725644][ T8960] [ 469.728612][ T8960] dump_stack_lvl+0x188/0x24e [ 469.733335][ T8960] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 469.739791][ T8960] ? show_regs_print_info+0x12/0x12 [ 469.745026][ T8960] ? load_image+0x410/0x410 [ 469.749564][ T8960] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 469.756012][ T8960] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 469.762551][ T8960] warn_alloc+0x242/0x330 [ 469.766933][ T8960] ? zone_watermark_ok_safe+0x270/0x270 [ 469.772527][ T8960] ? __get_vm_area_node+0x318/0x330 [ 469.777761][ T8960] __vmalloc_node_range+0x37c/0x1380 [ 469.783100][ T8960] ? aa_get_newest_label+0xf9/0x5b0 [ 469.788340][ T8960] ? free_vm_area+0x50/0x50 [ 469.792877][ T8960] ? end_current_label_crit_section+0x170/0x170 [ 469.799163][ T8960] ? __lock_acquire+0x7ea0/0x7ea0 [ 469.804255][ T8960] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 469.809859][ T8960] __vmalloc+0x76/0x80 [ 469.813963][ T8960] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 469.819550][ T8960] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 469.824972][ T8960] ? bpf_prog_alloc+0x13/0x1b0 [ 469.829767][ T8960] bpf_prog_alloc+0x1c/0x1b0 [ 469.834395][ T8960] bpf_prog_load+0x7d4/0x1530 [ 469.839117][ T8960] ? map_freeze+0x390/0x390 [ 469.843657][ T8960] ? __might_fault+0xa6/0x120 [ 469.848373][ T8960] ? __might_fault+0xa6/0x120 [ 469.853074][ T8960] ? __might_fault+0xc2/0x120 [ 469.857776][ T8960] ? __might_fault+0xa6/0x120 [ 469.862479][ T8960] ? bpf_lsm_bpf+0x5/0x10 [ 469.866894][ T8960] ? security_bpf+0x7a/0xa0 [ 469.871553][ T8960] __sys_bpf+0x5b8/0x780 [ 469.875849][ T8960] ? bpf_link_show_fdinfo+0x380/0x380 [ 469.881277][ T8960] ? lock_chain_count+0x20/0x20 [ 469.886183][ T8960] __x64_sys_bpf+0x78/0x90 [ 469.890640][ T8960] do_syscall_64+0x4c/0xa0 [ 469.895092][ T8960] ? clear_bhb_loop+0x60/0xb0 [ 469.899799][ T8960] ? clear_bhb_loop+0x60/0xb0 [ 469.904509][ T8960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.910431][ T8960] RIP: 0033:0x7f1ec0b9e199 [ 469.914959][ T8960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.934595][ T8960] RSP: 002b:00007f1ec1a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 469.943045][ T8960] RAX: ffffffffffffffda RBX: 00007f1ec0e25fa0 RCX: 00007f1ec0b9e199 [ 469.951043][ T8960] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 469.959045][ T8960] RBP: 00007f1ec1a37090 R08: 0000000000000000 R09: 0000000000000000 [ 469.967042][ T8960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.975037][ T8960] R13: 00007f1ec0e26038 R14: 00007f1ec0e25fa0 R15: 00007ffce2281cf8 [ 469.983046][ T8960] [ 470.014814][ T8960] Mem-Info: [ 470.018119][ T8960] active_anon:14272 inactive_anon:0 isolated_anon:0 [ 470.018119][ T8960] active_file:25363 inactive_file:40104 isolated_file:0 [ 470.018119][ T8960] unevictable:768 dirty:156 writeback:0 [ 470.018119][ T8960] slab_reclaimable:21326 slab_unreclaimable:95479 [ 470.018119][ T8960] mapped:36507 shmem:8390 pagetables:652 [ 470.018119][ T8960] sec_pagetables:0 bounce:0 [ 470.018119][ T8960] kernel_misc_reclaimable:0 [ 470.018119][ T8960] free:1305533 free_pcp:7305 free_cma:0 [ 470.116612][ T8960] Node 0 active_anon:60488kB inactive_anon:0kB active_file:101452kB inactive_file:160216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149428kB dirty:624kB writeback:0kB shmem:35424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10552kB pagetables:2608kB sec_pagetables:0kB all_unreclaimable? no [ 470.184355][ T8960] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 470.254777][ T8960] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 470.304758][ T8960] lowmem_reserve[]: 0 2511 2513 2513 2513 [ 470.310625][ T8960] Node 0 DMA32 free:1303312kB boost:0kB min:34556kB low:43192kB high:51828kB reserved_highatomic:0KB active_anon:66488kB inactive_anon:0kB active_file:101452kB inactive_file:160216kB unevictable:1536kB writepending:624kB present:3129332kB managed:2576776kB mlocked:0kB bounce:0kB free_pcp:10144kB local_pcp:1124kB free_cma:0kB [ 470.374948][ T8960] lowmem_reserve[]: 0 0 1 1 1 [ 470.379767][ T8960] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1680kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 470.444829][ T8960] lowmem_reserve[]: 0 0 0 0 0 [ 470.449756][ T8960] Node 1 Normal free:3890980kB boost:0kB min:55324kB low:69152kB high:82980kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20676kB local_pcp:11296kB free_cma:0kB [ 470.514762][ T8960] lowmem_reserve[]: 0 0 0 0 0 [ 470.519570][ T8960] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 470.554859][ T8960] Node 0 DMA32: 3*4kB (UME) 459*8kB (UME) 821*16kB (ME) 1602*32kB (UME) 811*64kB (UME) 381*128kB (UME) 115*256kB (UME) 71*512kB (UME) 32*1024kB (UM) 7*2048kB (UME) 247*4096kB (UM) = 1293364kB [ 470.594755][ T8960] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 470.614728][ T8960] Node 1 Normal: 227*4kB (UE) 55*8kB (U) 32*16kB (UME) 31*32kB (UME) 18*64kB (UME) 9*128kB (UM) 5*256kB (UM) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3890980kB [ 470.654771][ T8960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 470.664489][ T8960] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 470.694752][ T8960] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 470.704387][ T8960] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 470.734738][ T8960] 79357 total pagecache pages [ 470.739497][ T8960] 0 pages in swap cache [ 470.743680][ T8960] Free swap = 124996kB [ 470.764699][ T8960] Total swap = 124996kB [ 470.768940][ T8960] 2097051 pages RAM [ 470.772791][ T8960] 0 pages HighMem/MovableOnly [ 470.784722][ T8960] 419192 pages reserved [ 470.788946][ T8960] 0 pages cma reserved [ 472.020223][ T8990] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1489'. [ 472.412274][ T8997] netlink: 'syz.4.1491': attribute type 10 has an invalid length. [ 472.441283][ T8997] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1491'. [ 472.467916][ T8997] netlink: 'syz.4.1491': attribute type 10 has an invalid length. [ 472.730485][ T9004] netlink: 'syz.0.1493': attribute type 2 has an invalid length. [ 472.757603][ T9004] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1493'. [ 472.949410][ T9010] netlink: 126288 bytes leftover after parsing attributes in process `syz.1.1495'. [ 476.968986][ T9036] FAULT_INJECTION: forcing a failure. [ 476.968986][ T9036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.028912][ T9036] CPU: 0 PID: 9036 Comm: syz.3.1503 Not tainted syzkaller #0 [ 477.029547][ T9037] netlink: 'syz.2.1501': attribute type 10 has an invalid length. [ 477.036390][ T9036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 477.036415][ T9036] Call Trace: [ 477.036432][ T9036] [ 477.036453][ T9036] dump_stack_lvl+0x188/0x24e [ 477.036523][ T9036] ? show_regs_print_info+0x12/0x12 [ 477.036572][ T9036] ? load_image+0x410/0x410 [ 477.036636][ T9036] ? __might_fault+0xa6/0x120 [ 477.036729][ T9036] should_fail_ex+0x390/0x4c0 [ 477.036814][ T9036] copyin+0x1b/0x120 [ 477.036878][ T9036] _copy_from_iter+0x447/0x1130 [ 477.036987][ T9036] ? copyout_mc+0x110/0x110 [ 477.037061][ T9036] ? copyout_mc+0x110/0x110 [ 477.037104][ T9036] ? __virt_addr_valid+0x188/0x540 [ 477.037178][ T9036] ? page_copy_sane+0x194/0x390 [ 477.037248][ T9036] copy_page_from_iter+0x77/0x100 [ 477.037351][ T9036] skb_copy_datagram_from_iter+0x2c5/0x6b0 [ 477.037474][ T9036] unix_stream_sendmsg+0x4d5/0xa70 [ 477.037626][ T9036] ? unix_show_fdinfo+0x2c0/0x2c0 [ 477.037668][ T9036] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 477.037754][ T9036] ? apparmor_socket_sendmsg+0x8a/0x330 [ 477.037820][ T9036] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 477.037854][ T9036] ? security_socket_sendmsg+0x7c/0xa0 [ 477.037895][ T9036] ? unix_show_fdinfo+0x2c0/0x2c0 [ 477.163721][ T9036] ____sys_sendmsg+0x5ed/0x9a0 [ 477.168638][ T9036] ? __sys_sendmsg_sock+0x30/0x30 [ 477.173736][ T9036] ? __import_iovec+0x306/0x510 [ 477.178717][ T9036] ? import_iovec+0x6f/0xa0 [ 477.183322][ T9036] ___sys_sendmsg+0x2a2/0x360 [ 477.188100][ T9036] ? __sys_sendmsg+0x2a0/0x2a0 [ 477.193040][ T9036] ? __lock_acquire+0x7ea0/0x7ea0 [ 477.198265][ T9036] __se_sys_sendmsg+0x1c3/0x2b0 [ 477.203214][ T9036] ? __x64_sys_sendmsg+0x80/0x80 [ 477.208318][ T9036] ? lockdep_hardirqs_on+0x94/0x140 [ 477.213669][ T9036] do_syscall_64+0x4c/0xa0 [ 477.218166][ T9036] ? clear_bhb_loop+0x60/0xb0 [ 477.222927][ T9036] ? clear_bhb_loop+0x60/0xb0 [ 477.227693][ T9036] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.233662][ T9036] RIP: 0033:0x7ff3cf59e199 [ 477.238155][ T9036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.257840][ T9036] RSP: 002b:00007ff3d050a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.266333][ T9036] RAX: ffffffffffffffda RBX: 00007ff3cf825fa0 RCX: 00007ff3cf59e199 [ 477.274375][ T9036] RDX: 0000000000008841 RSI: 0000200000000500 RDI: 0000000000000007 [ 477.282406][ T9036] RBP: 00007ff3d050a090 R08: 0000000000000000 R09: 0000000000000000 [ 477.290439][ T9036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 477.298493][ T9036] R13: 00007ff3cf826038 R14: 00007ff3cf825fa0 R15: 00007ffd69c68298 [ 477.306610][ T9036] [ 477.352185][ T9037] bridge0: port 4(hsr0) entered disabled state [ 477.360944][ T9037] bridge0: port 3(veth1_to_team) entered disabled state [ 477.371967][ T9037] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.382153][ T9037] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.603092][ T9037] bridge0: port 4(hsr0) entered blocking state [ 477.610664][ T9037] bridge0: port 4(hsr0) entered forwarding state [ 477.620797][ T9037] bridge0: port 3(veth1_to_team) entered blocking state [ 477.629123][ T9037] bridge0: port 3(veth1_to_team) entered forwarding state [ 477.638500][ T9037] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.647045][ T9037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.656516][ T9037] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.665029][ T9037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.772909][ T9037] team0: Port device bridge0 added [ 477.831977][ T9055] netlink: 126288 bytes leftover after parsing attributes in process `syz.4.1506'. [ 478.083806][ T9058] netlink: 'syz.0.1507': attribute type 10 has an invalid length. [ 478.127547][ T9058] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1507'. [ 478.173869][ T9058] netlink: 'syz.0.1507': attribute type 10 has an invalid length. [ 478.295924][ T9068] FAULT_INJECTION: forcing a failure. [ 478.295924][ T9068] name failslab, interval 1, probability 0, space 0, times 0 [ 478.350924][ T9065] netlink: 'syz.2.1510': attribute type 2 has an invalid length. [ 478.355417][ T9068] CPU: 1 PID: 9068 Comm: syz.4.1511 Not tainted syzkaller #0 [ 478.366196][ T9068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 478.376304][ T9068] Call Trace: [ 478.379627][ T9068] [ 478.382595][ T9068] dump_stack_lvl+0x188/0x24e [ 478.387335][ T9068] ? show_regs_print_info+0x12/0x12 [ 478.392606][ T9068] ? load_image+0x410/0x410 [ 478.397198][ T9068] ? __might_sleep+0xd0/0xd0 [ 478.401845][ T9068] ? __lock_acquire+0x7ea0/0x7ea0 [ 478.406932][ T9068] should_fail_ex+0x390/0x4c0 [ 478.411664][ T9068] should_failslab+0x5/0x20 [ 478.416199][ T9068] slab_pre_alloc_hook+0x59/0x300 [ 478.421258][ T9068] kmem_cache_alloc_node+0x5a/0x310 [ 478.426484][ T9068] ? __alloc_skb+0xf9/0x7d0 [ 478.431040][ T9068] __alloc_skb+0xf9/0x7d0 [ 478.435402][ T9068] netlink_sendmsg+0x654/0xbd0 [ 478.440205][ T9068] ? netlink_getsockopt+0x550/0x550 [ 478.445454][ T9068] ? apparmor_socket_sendmsg+0x16c/0x330 [ 478.451124][ T9068] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 478.456608][ T9068] ? security_socket_sendmsg+0x7c/0xa0 [ 478.462097][ T9068] ? netlink_getsockopt+0x550/0x550 [ 478.467325][ T9068] ____sys_sendmsg+0x5ed/0x9a0 [ 478.472123][ T9068] ? __sys_sendmsg_sock+0x30/0x30 [ 478.477175][ T9068] ? __import_iovec+0x306/0x510 [ 478.482065][ T9068] ? import_iovec+0x6f/0xa0 [ 478.486611][ T9068] ___sys_sendmsg+0x2a2/0x360 [ 478.491328][ T9068] ? __sys_sendmsg+0x2a0/0x2a0 [ 478.496134][ T9068] ? __lock_acquire+0x7ea0/0x7ea0 [ 478.501209][ T9068] __se_sys_sendmsg+0x1c3/0x2b0 [ 478.506096][ T9068] ? __x64_sys_sendmsg+0x80/0x80 [ 478.511071][ T9068] ? lockdep_hardirqs_on+0x94/0x140 [ 478.516308][ T9068] do_syscall_64+0x4c/0xa0 [ 478.520776][ T9068] ? clear_bhb_loop+0x60/0xb0 [ 478.525504][ T9068] ? clear_bhb_loop+0x60/0xb0 [ 478.530212][ T9068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.536133][ T9068] RIP: 0033:0x7f1ec0b9e199 [ 478.540583][ T9068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.560215][ T9068] RSP: 002b:00007f1ec1a37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.568657][ T9068] RAX: ffffffffffffffda RBX: 00007f1ec0e25fa0 RCX: 00007f1ec0b9e199 [ 478.576676][ T9068] RDX: 0000000020004000 RSI: 0000200000000140 RDI: 0000000000000003 [ 478.584672][ T9068] RBP: 00007f1ec1a37090 R08: 0000000000000000 R09: 0000000000000000 [ 478.592668][ T9068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.600686][ T9068] R13: 00007f1ec0e26038 R14: 00007f1ec0e25fa0 R15: 00007ffce2281cf8 [ 478.608693][ T9068] [ 478.612542][ T9065] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1510'. [ 479.653812][ T9093] netlink: 126288 bytes leftover after parsing attributes in process `syz.4.1519'. [ 480.021744][ T9103] sctp: [Deprecated]: syz.2.1518 (pid 9103) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.021744][ T9103] Use struct sctp_sack_info instead [ 481.719783][ T9107] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1522'. [ 482.051333][ T9117] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1524'. [ 482.157655][ T9122] netlink: 'syz.0.1526': attribute type 2 has an invalid length. [ 482.176872][ T9122] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1526'. [ 483.158479][ T9142] netlink: 126288 bytes leftover after parsing attributes in process `syz.1.1534'. [ 485.889726][ T9159] FAULT_INJECTION: forcing a failure. [ 485.889726][ T9159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.967353][ T9159] CPU: 1 PID: 9159 Comm: syz.1.1538 Not tainted syzkaller #0 [ 485.974811][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 485.984925][ T9159] Call Trace: [ 485.988245][ T9159] [ 485.991298][ T9159] dump_stack_lvl+0x188/0x24e [ 485.996017][ T9159] ? show_regs_print_info+0x12/0x12 [ 486.001251][ T9159] ? load_image+0x410/0x410 [ 486.005790][ T9159] ? __lock_acquire+0x7ea0/0x7ea0 [ 486.010856][ T9159] should_fail_ex+0x390/0x4c0 [ 486.015569][ T9159] _copy_from_user+0x2c/0x170 [ 486.020290][ T9159] __sys_bpf+0x2ea/0x780 [ 486.024567][ T9159] ? bpf_link_show_fdinfo+0x380/0x380 [ 486.029993][ T9159] ? lock_chain_count+0x20/0x20 [ 486.034883][ T9159] __x64_sys_bpf+0x78/0x90 [ 486.039331][ T9159] do_syscall_64+0x4c/0xa0 [ 486.043773][ T9159] ? clear_bhb_loop+0x60/0xb0 [ 486.048480][ T9159] ? clear_bhb_loop+0x60/0xb0 [ 486.053187][ T9159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.059107][ T9159] RIP: 0033:0x7f0332d9e199 [ 486.063572][ T9159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.083222][ T9159] RSP: 002b:00007f0333cef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 486.091671][ T9159] RAX: ffffffffffffffda RBX: 00007f0333025fa0 RCX: 00007f0332d9e199 [ 486.099668][ T9159] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 486.107660][ T9159] RBP: 00007f0333cef090 R08: 0000000000000000 R09: 0000000000000000 [ 486.115652][ T9159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.123646][ T9159] R13: 00007f0333026038 R14: 00007f0333025fa0 R15: 00007fff4353acb8 [ 486.131655][ T9159] [ 486.180011][ T9166] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1541'. [ 486.207358][ T9166] team0: Port device team_slave_0 removed [ 486.217934][ T9166] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 486.254151][ T9170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1539'. [ 486.519129][ T9179] netlink: 'syz.2.1543': attribute type 2 has an invalid length. [ 486.547899][ T9179] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1543'. [ 486.841027][ T9189] netlink: 126288 bytes leftover after parsing attributes in process `syz.1.1548'. [ 487.628731][ T9210] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1555'. [ 490.239554][ T9210] device hsr_slave_0 left promiscuous mode [ 490.272875][ T9210] device hsr_slave_1 left promiscuous mode [ 490.322691][ T9210] bridge0: port 4(hsr0) entered disabled state [ 490.427119][ T9210] bridge0: port 4(hsr0) entered disabled state [ 490.472062][ T9217] netlink: 'syz.2.1557': attribute type 10 has an invalid length. [ 490.497469][ T9217] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1557'. [ 490.558046][ T9221] netlink: 'syz.2.1557': attribute type 10 has an invalid length. [ 490.787861][ T9232] netlink: 126288 bytes leftover after parsing attributes in process `syz.4.1560'. [ 491.268551][ T9240] netlink: 125520 bytes leftover after parsing attributes in process `syz.0.1564'. [ 491.402732][ T9242] netlink: 'syz.4.1565': attribute type 2 has an invalid length. [ 491.425604][ T9242] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1565'. [ 493.099535][ T9272] netlink: 'syz.2.1573': attribute type 10 has an invalid length. [ 493.129838][ T9272] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1573'. [ 493.186116][ T9277] netlink: 'syz.2.1573': attribute type 10 has an invalid length. [ 493.239625][ T9279] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.1575'. [ 494.125726][ T9301] netlink: 'syz.1.1580': attribute type 2 has an invalid length. [ 494.160414][ T9301] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1580'. [ 496.328674][ T9325] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.1587'. [ 497.928764][ T9340] netlink: 'syz.1.1592': attribute type 10 has an invalid length. [ 497.962099][ T9340] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1592'. [ 498.006024][ T9340] netlink: 'syz.1.1592': attribute type 10 has an invalid length. [ 498.520096][ T9347] FAULT_INJECTION: forcing a failure. [ 498.520096][ T9347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.572206][ T9347] CPU: 0 PID: 9347 Comm: syz.3.1595 Not tainted syzkaller #0 [ 498.579679][ T9347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 498.589783][ T9347] Call Trace: [ 498.593102][ T9347] [ 498.596070][ T9347] dump_stack_lvl+0x188/0x24e [ 498.600813][ T9347] ? show_regs_print_info+0x12/0x12 [ 498.606075][ T9347] ? load_image+0x410/0x410 [ 498.610631][ T9347] ? __lock_acquire+0x7ea0/0x7ea0 [ 498.615707][ T9347] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 498.621745][ T9347] ? perf_tp_event+0xc10/0xc10 [ 498.626570][ T9347] should_fail_ex+0x390/0x4c0 [ 498.631315][ T9347] _copy_from_user+0x2c/0x170 [ 498.636065][ T9347] ___sys_sendmsg+0x1c3/0x360 [ 498.640804][ T9347] ? __sys_sendmsg+0x2a0/0x2a0 [ 498.645670][ T9347] __se_sys_sendmsg+0x1c3/0x2b0 [ 498.650567][ T9347] ? ct_nmi_exit+0x145/0x1c0 [ 498.655225][ T9347] ? __x64_sys_sendmsg+0x80/0x80 [ 498.660237][ T9347] ? lockdep_hardirqs_on+0x94/0x140 [ 498.665499][ T9347] do_syscall_64+0x4c/0xa0 [ 498.669965][ T9347] ? clear_bhb_loop+0x60/0xb0 [ 498.674699][ T9347] ? clear_bhb_loop+0x60/0xb0 [ 498.679432][ T9347] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 498.685372][ T9347] RIP: 0033:0x7ff3cf59e199 [ 498.689843][ T9347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.709513][ T9347] RSP: 002b:00007ff3d050a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.717986][ T9347] RAX: ffffffffffffffda RBX: 00007ff3cf825fa0 RCX: 00007ff3cf59e199 [ 498.726008][ T9347] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 498.734031][ T9347] RBP: 00007ff3d050a090 R08: 0000000000000000 R09: 0000000000000000 [ 498.742058][ T9347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.750079][ T9347] R13: 00007ff3cf826038 R14: 00007ff3cf825fa0 R15: 00007ffd69c68298 [ 498.758126][ T9347] [ 499.489408][ T9368] netlink: 'syz.2.1600': attribute type 3 has an invalid length. [ 499.574925][ T9368] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1600'. [ 499.640749][ T9368] netlink: 'syz.2.1600': attribute type 3 has an invalid length. [ 499.651974][ T9368] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1600'. [ 501.439820][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.446469][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.961643][ T9380] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.1605'. [ 502.018125][ T9376] netlink: 'syz.0.1603': attribute type 2 has an invalid length. [ 502.037768][ T9376] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1603'. [ 502.103825][ T9383] netlink: 'syz.4.1606': attribute type 10 has an invalid length. [ 502.143353][ T9383] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1606'. [ 502.217713][ T9383] netlink: 'syz.4.1606': attribute type 10 has an invalid length. [ 506.232628][ T9422] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.1619'. [ 506.659742][ T9431] netlink: 'syz.1.1622': attribute type 2 has an invalid length. [ 506.679576][ T9431] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1622'. [ 507.232694][ T9450] netlink: 'syz.0.1626': attribute type 10 has an invalid length. [ 507.272046][ T9450] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1626'. [ 507.353698][ T9444] netlink: 'syz.0.1626': attribute type 10 has an invalid length. [ 507.375730][ T9448] netlink: 'syz.4.1628': attribute type 21 has an invalid length. [ 507.398652][ T9448] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1628'. [ 507.433868][ T9446] netlink: 'syz.4.1628': attribute type 21 has an invalid length. [ 507.458453][ T9456] netlink: 126288 bytes leftover after parsing attributes in process `syz.1.1630'. [ 507.488247][ T9446] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1628'. [ 508.143780][ T9463] netlink: 'syz.2.1634': attribute type 49 has an invalid length. [ 510.494803][ T9476] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1638'. [ 510.513891][ T9476] openvswitch: netlink: Message has 6 unknown bytes. [ 510.567122][ T9481] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1637'. [ 510.621520][ T9483] netlink: 'syz.1.1639': attribute type 29 has an invalid length. [ 510.798070][ T9481] netlink: 'syz.4.1637': attribute type 10 has an invalid length. [ 510.806435][ T9481] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 510.817209][ T9490] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1640'. [ 510.831709][ T9483] netlink: 'syz.1.1639': attribute type 29 has an invalid length. [ 510.841243][ T9487] netlink: 'syz.3.1640': attribute type 2 has an invalid length. [ 511.343575][ T9509] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1646'. [ 511.562191][ T9521] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1650'. [ 511.584772][ T9521] openvswitch: netlink: Message has 6 unknown bytes. [ 514.050568][ T9527] device wlan1 entered promiscuous mode [ 514.056692][ T9531] FAULT_INJECTION: forcing a failure. [ 514.056692][ T9531] name failslab, interval 1, probability 0, space 0, times 0 [ 514.072922][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 514.121914][ T9531] CPU: 1 PID: 9531 Comm: syz.1.1653 Not tainted syzkaller #0 [ 514.129401][ T9531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 514.139513][ T9531] Call Trace: [ 514.142846][ T9531] [ 514.145828][ T9531] dump_stack_lvl+0x188/0x24e [ 514.150583][ T9531] ? show_regs_print_info+0x12/0x12 [ 514.155860][ T9531] ? load_image+0x410/0x410 [ 514.160428][ T9531] ? __lock_acquire+0x7ea0/0x7ea0 [ 514.165522][ T9531] ? __mutex_trylock_common+0x15c/0x260 [ 514.171159][ T9531] should_fail_ex+0x390/0x4c0 [ 514.175928][ T9531] should_failslab+0x5/0x20 [ 514.180497][ T9531] slab_pre_alloc_hook+0x59/0x300 [ 514.185584][ T9531] ? __mutex_lock+0x1ab/0xae0 [ 514.190324][ T9531] ? tracepoint_add_func+0x2f1/0xa10 [ 514.195683][ T9531] __kmem_cache_alloc_node+0x4f/0x270 [ 514.201134][ T9531] ? tracepoint_add_func+0x2f1/0xa10 [ 514.206497][ T9531] __kmalloc+0xa3/0x240 [ 514.210724][ T9531] ? trace_event_raw_event_cgroup+0x3a0/0x3a0 [ 514.216885][ T9531] tracepoint_add_func+0x2f1/0xa10 [ 514.222070][ T9531] ? pcpu_alloc+0x1102/0x16b0 [ 514.226879][ T9531] ? trace_event_raw_event_cgroup+0x3a0/0x3a0 [ 514.233041][ T9531] tracepoint_probe_register+0x5a/0x90 [ 514.238571][ T9531] ? trace_event_raw_event_cgroup+0x3a0/0x3a0 [ 514.244721][ T9531] perf_trace_event_init+0x41e/0x940 [ 514.250261][ T9531] perf_trace_init+0x234/0x2d0 [ 514.255103][ T9531] perf_tp_event_init+0x89/0x110 [ 514.260113][ T9531] perf_try_init_event+0x12b/0x3d0 [ 514.265288][ T9531] ? perf_event_alloc+0xb28/0x21e0 [ 514.270472][ T9531] perf_event_alloc+0xea0/0x21e0 [ 514.275476][ T9531] ? _raw_spin_unlock+0x24/0x40 [ 514.280398][ T9531] ? alloc_fd+0x590/0x640 [ 514.284823][ T9531] __se_sys_perf_event_open+0x5dc/0x1ec0 [ 514.290524][ T9531] ? __fget_files+0x3fc/0x460 [ 514.295303][ T9531] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 514.301016][ T9531] ? lockdep_hardirqs_on+0x94/0x140 [ 514.306268][ T9531] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 514.311949][ T9531] do_syscall_64+0x4c/0xa0 [ 514.316425][ T9531] ? clear_bhb_loop+0x60/0xb0 [ 514.321142][ T9531] ? clear_bhb_loop+0x60/0xb0 [ 514.325867][ T9531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 514.331794][ T9531] RIP: 0033:0x7f0332d9e199 [ 514.336246][ T9531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.355899][ T9531] RSP: 002b:00007f0333cef028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 514.364351][ T9531] RAX: ffffffffffffffda RBX: 00007f0333025fa0 RCX: 00007f0332d9e199 [ 514.372358][ T9531] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000003c0 [ 514.380357][ T9531] RBP: 00007f0333cef090 R08: 0000000000000000 R09: 0000000000000000 [ 514.388358][ T9531] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 514.396382][ T9531] R13: 00007f0333026038 R14: 00007f0333025fa0 R15: 00007fff4353acb8 [ 514.404414][ T9531] [ 514.724246][ T9544] validate_nla: 7 callbacks suppressed [ 514.724269][ T9544] netlink: 'syz.4.1657': attribute type 2 has an invalid length. [ 514.777193][ T9550] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1657'. [ 515.631706][ T9567] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1663'. [ 515.669171][ T9567] openvswitch: netlink: Message has 6 unknown bytes. [ 516.191057][ T9582] netlink: 'syz.4.1665': attribute type 10 has an invalid length. [ 516.222827][ T9582] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1665'. [ 516.314251][ T9587] netlink: 'syz.4.1665': attribute type 10 has an invalid length. [ 519.125673][ T9594] netlink: 'syz.1.1671': attribute type 10 has an invalid length. [ 519.230347][ T9594] team0: Device hsr_slave_0 failed to register rx_handler [ 519.251591][ T9606] netlink: 'syz.2.1674': attribute type 29 has an invalid length. [ 519.450764][ T9606] netlink: 'syz.2.1674': attribute type 29 has an invalid length. [ 519.465072][ T9603] netlink: 'syz.2.1674': attribute type 29 has an invalid length. [ 519.486078][ T9601] netlink: 'syz.3.1675': attribute type 2 has an invalid length. [ 519.519539][ T9615] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1677'. [ 519.530868][ T9605] netlink: 'syz.4.1673': attribute type 10 has an invalid length. [ 519.550775][ T9615] openvswitch: netlink: Message has 6 unknown bytes. [ 519.560137][ T9609] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1675'. [ 519.628014][ T9608] netlink: 'syz.2.1674': attribute type 29 has an invalid length. [ 520.117954][ T9633] validate_nla: 2 callbacks suppressed [ 520.117997][ T9633] netlink: 'syz.4.1683': attribute type 10 has an invalid length. [ 520.145165][ T9633] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1683'. [ 520.177615][ T9636] netlink: 'syz.4.1683': attribute type 10 has an invalid length. [ 520.688652][ T9645] netlink: 'syz.2.1687': attribute type 10 has an invalid length. [ 522.923127][ T9645] team0: Port device geneve1 added [ 523.139617][ T9649] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1688'. [ 523.156445][ T9653] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1690'. [ 523.213012][ T9653] openvswitch: netlink: Message has 6 unknown bytes. [ 523.218107][ T9649] netlink: 'syz.0.1688': attribute type 10 has an invalid length. [ 523.255386][ T9649] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 523.277143][ T9655] netlink: 'syz.1.1700': attribute type 10 has an invalid length. [ 523.314801][ T9655] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1700'. [ 523.355958][ T9657] netlink: 'syz.1.1700': attribute type 10 has an invalid length. [ 523.520344][ T9662] netlink: 'syz.3.1691': attribute type 29 has an invalid length. [ 523.529676][ T9663] netlink: 'syz.4.1692': attribute type 2 has an invalid length. [ 523.539737][ T9663] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1692'. [ 523.555824][ T9662] netlink: 'syz.3.1691': attribute type 29 has an invalid length. [ 523.587059][ T9662] netlink: 'syz.3.1691': attribute type 29 has an invalid length. [ 527.505101][ T9704] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1704'. [ 527.514192][ T9704] openvswitch: netlink: Message has 6 unknown bytes. [ 527.564182][ T9701] validate_nla: 4 callbacks suppressed [ 527.564283][ T9701] netlink: 'syz.2.1705': attribute type 2 has an invalid length. [ 527.615679][ T9703] netlink: 'syz.0.1706': attribute type 10 has an invalid length. [ 527.645209][ T9703] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1706'. [ 527.767252][ T9701] device .*! entered promiscuous mode [ 527.790002][ T9703] netlink: 'syz.0.1706': attribute type 10 has an invalid length. [ 530.499238][ T9715] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1707'. [ 530.538674][ T9715] netlink: 'syz.1.1707': attribute type 10 has an invalid length. [ 530.565017][ T9715] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 530.802580][ T9721] netlink: 'syz.2.1713': attribute type 2 has an invalid length. [ 530.853097][ T9723] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1713'. [ 531.445000][ T9735] netlink: 'syz.0.1718': attribute type 21 has an invalid length. [ 531.484114][ T9735] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1718'. [ 533.086609][ T9742] netlink: 'syz.4.1719': attribute type 22 has an invalid length. [ 533.148286][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1719'. [ 533.169834][ T9743] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1719'. [ 533.295271][ T9743] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1719'. [ 533.316775][ T9744] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1719'. [ 533.350734][ T9742] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1719'. [ 534.273740][ T9752] netlink: 'syz.0.1721': attribute type 2 has an invalid length. [ 534.291777][ T9754] netlink: 'syz.1.1722': attribute type 10 has an invalid length. [ 534.312017][ T9758] netlink: 'syz.3.1724': attribute type 29 has an invalid length. [ 534.313893][ T9754] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1722'. [ 534.355735][ T9752] device .*! entered promiscuous mode [ 534.369770][ T9754] netlink: 'syz.1.1722': attribute type 10 has an invalid length. [ 534.393300][ T9758] netlink: 'syz.3.1724': attribute type 29 has an invalid length. [ 534.405186][ T9762] netlink: 'syz.3.1724': attribute type 29 has an invalid length. [ 534.427179][ T9758] netlink: 'syz.3.1724': attribute type 29 has an invalid length. [ 534.475237][ T9758] netlink: 'syz.3.1724': attribute type 29 has an invalid length. [ 535.533534][ T9774] netlink: 'syz.3.1730': attribute type 2 has an invalid length. [ 535.557796][ T9774] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1730'. [ 536.599972][ T9790] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1733'. [ 536.951131][ T9803] IPv6: NLM_F_CREATE should be specified when creating new route [ 537.005064][ T9803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 537.012447][ T9803] IPv6: NLM_F_CREATE should be set when creating new route [ 537.020280][ T9803] IPv6: NLM_F_CREATE should be set when creating new route [ 537.077236][ T9802] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1738'. [ 537.115577][ T9802] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 537.548457][ T9806] device .*! entered promiscuous mode [ 537.893339][ T9822] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1743'. [ 541.445586][ T9861] validate_nla: 4 callbacks suppressed [ 541.445603][ T9861] netlink: 'syz.3.1756': attribute type 21 has an invalid length. [ 541.459549][ T9861] __nla_validate_parse: 1 callbacks suppressed [ 541.459566][ T9861] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1756'. [ 541.709654][ T9867] netlink: 'syz.2.1757': attribute type 2 has an invalid length. [ 541.733214][ T9867] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1757'. [ 542.057294][ T9873] FAULT_INJECTION: forcing a failure. [ 542.057294][ T9873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.155234][ T9873] CPU: 1 PID: 9873 Comm: syz.1.1760 Not tainted syzkaller #0 [ 542.162707][ T9873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 542.172815][ T9873] Call Trace: [ 542.176141][ T9873] [ 542.179296][ T9873] dump_stack_lvl+0x188/0x24e [ 542.184040][ T9873] ? show_regs_print_info+0x12/0x12 [ 542.189310][ T9873] ? load_image+0x410/0x410 [ 542.193868][ T9873] ? __lock_acquire+0x7ea0/0x7ea0 [ 542.198951][ T9873] ? perf_trace_buf_update+0xa8/0x230 [ 542.204372][ T9873] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 542.210252][ T9873] should_fail_ex+0x390/0x4c0 [ 542.214993][ T9873] _copy_from_user+0x2c/0x170 [ 542.219729][ T9873] ___sys_sendmsg+0x1c3/0x360 [ 542.224461][ T9873] ? __sys_sendmsg+0x2a0/0x2a0 [ 542.229327][ T9873] __se_sys_sendmsg+0x1c3/0x2b0 [ 542.234240][ T9873] ? __x64_sys_sendmsg+0x80/0x80 [ 542.239248][ T9873] ? syscall_enter_from_user_mode+0x2a/0x80 [ 542.245203][ T9873] do_syscall_64+0x4c/0xa0 [ 542.249672][ T9873] ? clear_bhb_loop+0x60/0xb0 [ 542.254398][ T9873] ? clear_bhb_loop+0x60/0xb0 [ 542.259133][ T9873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.265088][ T9873] RIP: 0033:0x7f0332d9e199 [ 542.269553][ T9873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.289219][ T9873] RSP: 002b:00007f0333cef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.297692][ T9873] RAX: ffffffffffffffda RBX: 00007f0333025fa0 RCX: 00007f0332d9e199 [ 542.305718][ T9873] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000009 [ 542.313734][ T9873] RBP: 00007f0333cef090 R08: 0000000000000000 R09: 0000000000000000 [ 542.321756][ T9873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.329765][ T9873] R13: 00007f0333026038 R14: 00007f0333025fa0 R15: 00007fff4353acb8 [ 542.337816][ T9873] [ 542.935564][ T9885] netlink: 'syz.4.1762': attribute type 3 has an invalid length. [ 543.097826][ T9885] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1762'. [ 543.431540][ T9894] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1765'. [ 543.440849][ T9884] FAULT_INJECTION: forcing a failure. [ 543.440849][ T9884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.440887][ T9884] CPU: 1 PID: 9884 Comm: syz.3.1763 Not tainted syzkaller #0 [ 543.440913][ T9884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 543.471413][ T9884] Call Trace: [ 543.474729][ T9884] [ 543.477701][ T9884] dump_stack_lvl+0x188/0x24e [ 543.482431][ T9884] ? show_regs_print_info+0x12/0x12 [ 543.487676][ T9884] ? load_image+0x410/0x410 [ 543.492214][ T9884] ? __lock_acquire+0x7ea0/0x7ea0 [ 543.497284][ T9884] should_fail_ex+0x390/0x4c0 [ 543.502032][ T9884] _copy_from_user+0x2c/0x170 [ 543.506738][ T9884] kstrtouint_from_user+0xda/0x170 [ 543.511884][ T9884] ? kstrtol_from_user+0x190/0x190 [ 543.517071][ T9884] proc_fail_nth_write+0x8b/0x200 [ 543.522120][ T9884] ? proc_fail_nth_read+0x220/0x220 [ 543.527346][ T9884] ? common_file_perm+0x171/0x1c0 [ 543.532407][ T9884] ? proc_fail_nth_read+0x220/0x220 [ 543.537634][ T9884] vfs_write+0x2dc/0x9a0 [ 543.541911][ T9884] ? file_end_write+0x250/0x250 [ 543.546792][ T9884] ? __fget_files+0x28/0x460 [ 543.551411][ T9884] ? __fget_files+0x3fc/0x460 [ 543.556124][ T9884] ? __fdget_pos+0x2ae/0x360 [ 543.560747][ T9884] ? ksys_write+0x70/0x260 [ 543.565200][ T9884] ksys_write+0x14d/0x260 [ 543.569570][ T9884] ? __ia32_sys_read+0x80/0x80 [ 543.574368][ T9884] ? lockdep_hardirqs_on+0x94/0x140 [ 543.579611][ T9884] do_syscall_64+0x4c/0xa0 [ 543.584051][ T9884] ? clear_bhb_loop+0x60/0xb0 [ 543.588753][ T9884] ? clear_bhb_loop+0x60/0xb0 [ 543.593458][ T9884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.599374][ T9884] RIP: 0033:0x7ff3cf55e9ce [ 543.603848][ T9884] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 543.623477][ T9884] RSP: 002b:00007ff3d0509fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 543.631920][ T9884] RAX: ffffffffffffffda RBX: 00007ff3d050a6c0 RCX: 00007ff3cf55e9ce [ 543.639916][ T9884] RDX: 0000000000000001 RSI: 00007ff3d050a0a0 RDI: 0000000000000007 [ 543.647907][ T9884] RBP: 00007ff3d050a090 R08: 0000000000000000 R09: 0000000000000000 [ 543.655920][ T9884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.663927][ T9884] R13: 00007ff3cf826038 R14: 00007ff3cf825fa0 R15: 00007ffd69c68298 [ 543.671937][ T9884] [ 545.505364][ T9907] netlink: 'syz.3.1771': attribute type 10 has an invalid length. [ 545.526012][ T9907] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1771'. [ 545.558212][ T9911] netlink: 'syz.3.1771': attribute type 10 has an invalid length. [ 545.586287][ T9911] device wlan1 left promiscuous mode [ 545.714189][ T9915] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1774'. [ 545.771196][ T9916] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1775'. [ 545.801777][ T9916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.911328][ T9937] sctp: [Deprecated]: syz.2.1781 (pid 9937) Use of int in maxseg socket option. [ 546.911328][ T9937] Use struct sctp_assoc_value instead [ 550.721840][ T9972] FAULT_INJECTION: forcing a failure. [ 550.721840][ T9972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.741762][ T9972] CPU: 1 PID: 9972 Comm: syz.4.1795 Not tainted syzkaller #0 [ 550.749292][ T9972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 550.759384][ T9972] Call Trace: [ 550.762697][ T9972] [ 550.765665][ T9972] dump_stack_lvl+0x188/0x24e [ 550.770391][ T9972] ? show_regs_print_info+0x12/0x12 [ 550.775632][ T9972] ? load_image+0x410/0x410 [ 550.780182][ T9972] ? __lock_acquire+0x7ea0/0x7ea0 [ 550.785262][ T9972] should_fail_ex+0x390/0x4c0 [ 550.789993][ T9972] _copy_from_user+0x2c/0x170 [ 550.794715][ T9972] map_update_elem+0x473/0x6a0 [ 550.799537][ T9972] __sys_bpf+0x4ec/0x780 [ 550.803843][ T9972] ? bpf_link_show_fdinfo+0x380/0x380 [ 550.809281][ T9972] ? lock_chain_count+0x20/0x20 [ 550.814226][ T9972] __x64_sys_bpf+0x78/0x90 [ 550.818696][ T9972] do_syscall_64+0x4c/0xa0 [ 550.823158][ T9972] ? clear_bhb_loop+0x60/0xb0 [ 550.827875][ T9972] ? clear_bhb_loop+0x60/0xb0 [ 550.832620][ T9972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 550.838554][ T9972] RIP: 0033:0x7f1ec0b9e199 [ 550.843012][ T9972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.862662][ T9972] RSP: 002b:00007f1ec1a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 550.871139][ T9972] RAX: ffffffffffffffda RBX: 00007f1ec0e25fa0 RCX: 00007f1ec0b9e199 [ 550.879157][ T9972] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000002 [ 550.887191][ T9972] RBP: 00007f1ec1a37090 R08: 0000000000000000 R09: 0000000000000000 [ 550.895202][ T9972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.903214][ T9972] R13: 00007f1ec0e26038 R14: 00007f1ec0e25fa0 R15: 00007ffce2281cf8 [ 550.911243][ T9972] [ 552.653741][ T9957] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1789'. [ 552.668383][ T9957] device hsr_slave_0 left promiscuous mode [ 552.684384][ T9957] device hsr_slave_1 left promiscuous mode [ 552.711758][ T9957] bridge0: port 4(hsr0) entered disabled state [ 552.760357][ T9957] bridge0: port 4(hsr0) entered disabled state [ 552.836268][ T9978] device syzkaller0 entered promiscuous mode [ 552.988171][ T9992] netlink: 'syz.2.1799': attribute type 27 has an invalid length. [ 552.999611][ T9992] netlink: 'syz.2.1799': attribute type 3 has an invalid length. [ 553.013170][ T9992] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1799'. [ 555.946749][ T4276] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 556.078993][T10007] netlink: 'syz.2.1806': attribute type 16 has an invalid length. [ 556.112341][T10007] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1806'. [ 556.132085][T10008] netlink: 'syz.2.1806': attribute type 16 has an invalid length. [ 556.155320][T10008] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1806'. [ 559.327208][T10030] netlink: 'syz.0.1812': attribute type 4 has an invalid length. [ 559.362115][T10030] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1812'. [ 559.767892][T10040] FAULT_INJECTION: forcing a failure. [ 559.767892][T10040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.784905][T10040] CPU: 0 PID: 10040 Comm: syz.0.1817 Not tainted syzkaller #0 [ 559.792438][T10040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 559.802536][T10040] Call Trace: [ 559.805859][T10040] [ 559.808829][T10040] dump_stack_lvl+0x188/0x24e [ 559.813561][T10040] ? show_regs_print_info+0x12/0x12 [ 559.818811][T10040] ? load_image+0x410/0x410 [ 559.823372][T10040] ? __lock_acquire+0x7ea0/0x7ea0 [ 559.828456][T10040] should_fail_ex+0x390/0x4c0 [ 559.833195][T10040] _copy_from_iter+0x1c0/0x1130 [ 559.838101][T10040] ? __lock_acquire+0x7ea0/0x7ea0 [ 559.843189][T10040] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 559.848661][T10040] ? copyout_mc+0x110/0x110 [ 559.853220][T10040] ? __virt_addr_valid+0x188/0x540 [ 559.858391][T10040] ? __virt_addr_valid+0x188/0x540 [ 559.863558][T10040] ? __virt_addr_valid+0x467/0x540 [ 559.868727][T10040] ? __check_object_size+0x4f6/0xa70 [ 559.874069][T10040] skb_copy_datagram_from_iter+0xee/0x6b0 [ 559.879860][T10040] ? skb_put+0x10e/0x200 [ 559.884153][T10040] tun_get_user+0x1526/0x3be0 [ 559.888903][T10040] ? trace_event_raw_event_lock+0x160/0x230 [ 559.894863][T10040] ? rcu_read_unlock+0xa0/0xa0 [ 559.899695][T10040] ? tun_get+0x1c/0x2e0 [ 559.903913][T10040] ? __lock_acquire+0x7ea0/0x7ea0 [ 559.909007][T10040] ? tun_get+0x1c/0x2e0 [ 559.913229][T10040] tun_chr_write_iter+0x112/0x1f0 [ 559.918321][T10040] vfs_write+0x482/0x9a0 [ 559.922631][T10040] ? file_end_write+0x250/0x250 [ 559.927567][T10040] ? __fget_files+0x3fc/0x460 [ 559.932308][T10040] ? __fdget_pos+0x1d4/0x360 [ 559.936949][T10040] ? ksys_write+0x70/0x260 [ 559.941426][T10040] ksys_write+0x14d/0x260 [ 559.945810][T10040] ? __ia32_sys_read+0x80/0x80 [ 559.950638][T10040] ? lockdep_hardirqs_on+0x94/0x140 [ 559.955904][T10040] do_syscall_64+0x4c/0xa0 [ 559.960369][T10040] ? clear_bhb_loop+0x60/0xb0 [ 559.965089][T10040] ? clear_bhb_loop+0x60/0xb0 [ 559.969825][T10040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 559.975767][T10040] RIP: 0033:0x7f6bb339e199 [ 559.980243][T10040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.999900][T10040] RSP: 002b:00007f6bb15d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 560.008366][T10040] RAX: ffffffffffffffda RBX: 00007f6bb3626090 RCX: 00007f6bb339e199 [ 560.016414][T10040] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 560.024435][T10040] RBP: 00007f6bb15d5090 R08: 0000000000000000 R09: 0000000000000000 [ 560.032453][T10040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.040474][T10040] R13: 00007f6bb3626128 R14: 00007f6bb3626090 R15: 00007ffef43c8908 [ 560.048513][T10040] [ 562.384118][T10051] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1820'. [ 562.880553][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.887069][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.872398][T10085] netlink: 'syz.2.1832': attribute type 20 has an invalid length. [ 569.030002][T10111] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1839'. [ 569.042823][T10109] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 569.080123][T10112] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1836'. [ 569.269989][T10119] netlink: 'syz.3.1841': attribute type 4 has an invalid length. [ 569.301661][T10115] netlink: 'syz.0.1840': attribute type 21 has an invalid length. [ 569.338624][T10119] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1841'. [ 569.477874][T10123] netlink: 'syz.4.1843': attribute type 29 has an invalid length. [ 569.504095][T10123] netlink: 'syz.4.1843': attribute type 29 has an invalid length. [ 569.534524][T10127] netlink: 'syz.4.1843': attribute type 29 has an invalid length. [ 569.550275][T10123] netlink: 'syz.4.1843': attribute type 29 has an invalid length. [ 569.573074][T10123] netlink: 'syz.4.1843': attribute type 29 has an invalid length. [ 572.419415][T10162] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1854'. [ 573.321773][T10185] netlink: 'syz.4.1864': attribute type 21 has an invalid length. [ 573.350993][T10189] netlink: 'syz.0.1865': attribute type 39 has an invalid length. [ 576.938693][T10222] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1880'. [ 576.948743][T10223] netlink: 'syz.2.1879': attribute type 16 has an invalid length. [ 577.025043][T10223] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1879'. [ 577.671770][T10237] netlink: 'syz.3.1882': attribute type 2 has an invalid length. [ 577.696873][T10241] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1882'. [ 578.185986][T10259] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1891'. [ 578.267577][T10259] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1891'. [ 578.351346][T10260] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1891'. [ 578.420229][T10269] netlink: 'syz.4.1891': attribute type 10 has an invalid length. [ 578.593335][T10276] netlink: 15039 bytes leftover after parsing attributes in process `syz.2.1894'. [ 578.942359][T10285] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.1899'. [ 578.966986][T10286] netlink: 'syz.3.1897': attribute type 2 has an invalid length. [ 579.004337][T10286] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.1897'. [ 579.042705][T10292] netlink: 'syz.3.1897': attribute type 10 has an invalid length. [ 579.086811][T10292] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1897'. [ 579.128580][T10292] bridge0: port 4(veth0_vlan) entered blocking state [ 579.164795][T10292] bridge0: port 4(veth0_vlan) entered disabled state [ 579.191244][T10292] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 579.729921][T10309] netlink: 'syz.0.1905': attribute type 2 has an invalid length. [ 580.790326][T10328] FAULT_INJECTION: forcing a failure. [ 580.790326][T10328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.846501][T10328] CPU: 1 PID: 10328 Comm: syz.4.1914 Not tainted syzkaller #0 [ 580.854061][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 580.864299][T10328] Call Trace: [ 580.867622][T10328] [ 580.870594][T10328] dump_stack_lvl+0x188/0x24e [ 580.875340][T10328] ? show_regs_print_info+0x12/0x12 [ 580.880588][T10328] ? load_image+0x410/0x410 [ 580.885152][T10328] ? __lock_acquire+0x7ea0/0x7ea0 [ 580.890239][T10328] ? snprintf+0xe5/0x140 [ 580.894540][T10328] should_fail_ex+0x390/0x4c0 [ 580.899309][T10328] _copy_to_user+0x2c/0x130 [ 580.903866][T10328] simple_read_from_buffer+0xe3/0x150 [ 580.909294][T10328] proc_fail_nth_read+0x1a6/0x220 [ 580.914381][T10328] ? proc_fault_inject_write+0x310/0x310 [ 580.920074][T10328] ? fsnotify_perm+0x248/0x550 [ 580.924905][T10328] ? proc_fault_inject_write+0x310/0x310 [ 580.930589][T10328] vfs_read+0x2db/0x960 [ 580.934845][T10328] ? kernel_read+0x1e0/0x1e0 [ 580.939503][T10328] ? __fget_files+0x28/0x460 [ 580.944160][T10328] ? __fget_files+0x3fc/0x460 [ 580.948911][T10328] ? __fdget_pos+0x2ae/0x360 [ 580.953567][T10328] ? ksys_read+0x70/0x260 [ 580.957958][T10328] ksys_read+0x14d/0x260 [ 580.962246][T10328] ? vfs_write+0x9a0/0x9a0 [ 580.966705][T10328] ? lockdep_hardirqs_on+0x94/0x140 [ 580.971943][T10328] do_syscall_64+0x4c/0xa0 [ 580.976402][T10328] ? clear_bhb_loop+0x60/0xb0 [ 580.981130][T10328] ? clear_bhb_loop+0x60/0xb0 [ 580.985836][T10328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 580.991759][T10328] RIP: 0033:0x7f1ec0b5e9ce [ 580.996198][T10328] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 581.015945][T10328] RSP: 002b:00007f1ec1a36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 581.024486][T10328] RAX: ffffffffffffffda RBX: 00007f1ec1a376c0 RCX: 00007f1ec0b5e9ce [ 581.032513][T10328] RDX: 000000000000000f RSI: 00007f1ec1a370a0 RDI: 0000000000000004 [ 581.040628][T10328] RBP: 00007f1ec1a37090 R08: 0000000000000000 R09: 0000000000000000 [ 581.048634][T10328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.056632][T10328] R13: 00007f1ec0e26038 R14: 00007f1ec0e25fa0 R15: 00007ffce2281cf8 [ 581.064654][T10328] [ 581.699639][T10340] netlink: 'syz.1.1917': attribute type 275 has an invalid length. [ 582.571763][T10369] __nla_validate_parse: 1 callbacks suppressed [ 582.571784][T10369] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1928'. [ 585.024110][T10370] netlink: 'syz.1.1927': attribute type 10 has an invalid length. [ 585.076577][T10370] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1927'. [ 585.887111][T10398] netlink: 'syz.1.1936': attribute type 2 has an invalid length. [ 586.002636][T10396] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1936'. [ 586.412915][T10411] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1952'. [ 586.476212][T10411] netlink: 'syz.3.1952': attribute type 29 has an invalid length. [ 586.556059][T10411] netlink: 'syz.3.1952': attribute type 29 has an invalid length. [ 586.607236][T10414] netlink: 'syz.3.1952': attribute type 29 has an invalid length. [ 586.675099][T10415] netlink: 'syz.3.1952': attribute type 29 has an invalid length. [ 586.757980][T10411] netlink: 'syz.3.1952': attribute type 29 has an invalid length. [ 587.291084][T10430] netlink: 'syz.4.1944': attribute type 2 has an invalid length. [ 587.387543][T10433] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1944'. [ 588.771462][T10445] -: renamed from syzkaller0 [ 589.934784][T10455] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1953'. [ 590.079223][T10458] netlink: 'syz.0.1957': attribute type 21 has an invalid length. [ 590.141963][T10458] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1957'. [ 590.202408][T10461] device wlan1 entered promiscuous mode [ 590.221429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 590.244434][T10461] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1958'. [ 590.375087][T10465] netlink: 'syz.3.1959': attribute type 2 has an invalid length. [ 590.397602][T10465] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1959'. [ 590.455961][T10470] netlink: 'syz.0.1961': attribute type 21 has an invalid length. [ 590.494350][T10470] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1961'. [ 594.212610][T10522] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1971'. [ 594.291149][T10524] netlink: 'syz.2.1975': attribute type 3 has an invalid length. [ 594.304666][T10524] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1975'. [ 594.331872][T10522] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 594.686855][T10525] device wlan1 entered promiscuous mode [ 594.720557][T10525] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1974'. [ 595.208423][T10532] netlink: 'syz.1.1976': attribute type 2 has an invalid length. [ 595.328386][T10529] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1976'. [ 595.439089][T10534] netlink: 'syz.3.1986': attribute type 10 has an invalid length. [ 595.643144][T10534] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 598.868441][T10585] netlink: 'syz.0.1988': attribute type 13 has an invalid length. [ 599.162721][T10592] netlink: 'syz.0.1990': attribute type 3 has an invalid length. [ 599.192558][T10592] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1990'. [ 599.312172][T10593] device wlan1 entered promiscuous mode [ 600.017534][T10603] netlink: 'syz.3.1992': attribute type 2 has an invalid length. [ 600.131102][T10605] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1992'. [ 601.752411][T10637] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2005'. [ 602.266694][T10649] netlink: 'syz.3.2009': attribute type 21 has an invalid length. [ 602.299551][T10649] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2009'. [ 603.245525][T10662] netlink: 'syz.3.2014': attribute type 1 has an invalid length. [ 604.555416][T10676] FAULT_INJECTION: forcing a failure. [ 604.555416][T10676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.644921][T10676] CPU: 0 PID: 10676 Comm: syz.1.2017 Not tainted syzkaller #0 [ 604.652502][T10676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 604.662628][T10676] Call Trace: [ 604.666022][T10676] [ 604.669014][T10676] dump_stack_lvl+0x188/0x24e [ 604.673768][T10676] ? show_regs_print_info+0x12/0x12 [ 604.679043][T10676] ? load_image+0x410/0x410 [ 604.683614][T10676] ? __lock_acquire+0x7ea0/0x7ea0 [ 604.688702][T10676] ? snprintf+0xe5/0x140 [ 604.693005][T10676] should_fail_ex+0x390/0x4c0 [ 604.697740][T10676] _copy_to_user+0x2c/0x130 [ 604.702340][T10676] simple_read_from_buffer+0xe3/0x150 [ 604.707760][T10676] proc_fail_nth_read+0x1a6/0x220 [ 604.712835][T10676] ? proc_fault_inject_write+0x310/0x310 [ 604.718517][T10676] ? fsnotify_perm+0x248/0x550 [ 604.723337][T10676] ? proc_fault_inject_write+0x310/0x310 [ 604.729016][T10676] vfs_read+0x2db/0x960 [ 604.733230][T10676] ? kernel_read+0x1e0/0x1e0 [ 604.737870][T10676] ? __fget_files+0x28/0x460 [ 604.742514][T10676] ? __fget_files+0x3fc/0x460 [ 604.747245][T10676] ? __fdget_pos+0x2ae/0x360 [ 604.751882][T10676] ? ksys_read+0x70/0x260 [ 604.756271][T10676] ksys_read+0x14d/0x260 [ 604.760568][T10676] ? vfs_write+0x9a0/0x9a0 [ 604.765036][T10676] ? lockdep_hardirqs_on+0x94/0x140 [ 604.770288][T10676] do_syscall_64+0x4c/0xa0 [ 604.774748][T10676] ? clear_bhb_loop+0x60/0xb0 [ 604.779477][T10676] ? clear_bhb_loop+0x60/0xb0 [ 604.784196][T10676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 604.790222][T10676] RIP: 0033:0x7f0332d5e9ce [ 604.794680][T10676] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 604.814434][T10676] RSP: 002b:00007f0333ccdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 604.822895][T10676] RAX: ffffffffffffffda RBX: 00007f0333cce6c0 RCX: 00007f0332d5e9ce [ 604.830910][T10676] RDX: 000000000000000f RSI: 00007f0333cce0a0 RDI: 0000000000000004 [ 604.838940][T10676] RBP: 00007f0333cce090 R08: 0000000000000000 R09: 0000000000000000 [ 604.846963][T10676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.855060][T10676] R13: 00007f0333026128 R14: 00007f0333026090 R15: 00007fff4353acb8 [ 604.863090][T10676] [ 605.122742][T10683] netlink: 'syz.2.2020': attribute type 21 has an invalid length. [ 605.153928][T10683] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2020'. [ 605.690627][T10697] netlink: 'syz.1.2026': attribute type 3 has an invalid length. [ 605.704033][T10695] netlink: 'syz.0.2025': attribute type 2 has an invalid length. [ 605.714669][T10697] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2026'. [ 605.734739][T10699] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2025'. [ 605.810366][T10693] netlink: 'syz.3.2024': attribute type 10 has an invalid length. [ 605.862849][T10693] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2024'. [ 605.918572][T10701] netlink: 'syz.3.2024': attribute type 10 has an invalid length. [ 606.262807][T10711] FAULT_INJECTION: forcing a failure. [ 606.262807][T10711] name failslab, interval 1, probability 0, space 0, times 0 [ 606.276046][T10711] CPU: 1 PID: 10711 Comm: syz.3.2031 Not tainted syzkaller #0 [ 606.283578][T10711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 606.293691][T10711] Call Trace: [ 606.297016][T10711] [ 606.300001][T10711] dump_stack_lvl+0x188/0x24e [ 606.304740][T10711] ? show_regs_print_info+0x12/0x12 [ 606.310000][T10711] ? load_image+0x410/0x410 [ 606.314606][T10711] ? mark_lock+0x94/0x320 [ 606.319013][T10711] should_fail_ex+0x390/0x4c0 [ 606.323796][T10711] should_failslab+0x5/0x20 [ 606.328346][T10711] slab_pre_alloc_hook+0x59/0x300 [ 606.333429][T10711] kmem_cache_alloc+0x56/0x2f0 [ 606.338297][T10711] ? radix_tree_node_alloc+0x7e/0x3a0 [ 606.343732][T10711] radix_tree_node_alloc+0x7e/0x3a0 [ 606.349023][T10711] ? ____kasan_slab_free+0x126/0x1f0 [ 606.354376][T10711] ? __kmem_cache_free+0xb6/0x200 [ 606.359452][T10711] ? btf_new_fd+0x557/0x760 [ 606.364009][T10711] radix_tree_extend+0x14c/0x590 [ 606.369016][T10711] idr_get_free+0x1b3/0xa10 [ 606.373593][T10711] idr_alloc_cyclic+0x286/0x610 [ 606.378520][T10711] ? idr_alloc+0x2e0/0x2e0 [ 606.382999][T10711] ? do_raw_spin_lock+0x128/0x2f0 [ 606.388089][T10711] ? __radix_tree_preload+0x82/0x880 [ 606.393436][T10711] ? btf_alloc_id+0x30/0x2d0 [ 606.398129][T10711] btf_alloc_id+0x4f/0x2d0 [ 606.402661][T10711] btf_new_fd+0x597/0x760 [ 606.407056][T10711] __sys_bpf+0x612/0x780 [ 606.411357][T10711] ? bpf_link_show_fdinfo+0x380/0x380 [ 606.416810][T10711] ? lock_chain_count+0x20/0x20 [ 606.421784][T10711] __x64_sys_bpf+0x78/0x90 [ 606.426433][T10711] do_syscall_64+0x4c/0xa0 [ 606.430900][T10711] ? clear_bhb_loop+0x60/0xb0 [ 606.435628][T10711] ? clear_bhb_loop+0x60/0xb0 [ 606.440438][T10711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 606.446357][T10711] RIP: 0033:0x7ff3cf59e199 [ 606.450798][T10711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.470430][T10711] RSP: 002b:00007ff3d050a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 606.478870][T10711] RAX: ffffffffffffffda RBX: 00007ff3cf825fa0 RCX: 00007ff3cf59e199 [ 606.486865][T10711] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000012 [ 606.494974][T10711] RBP: 00007ff3d050a090 R08: 0000000000000000 R09: 0000000000000000 [ 606.502972][T10711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 606.511076][T10711] R13: 00007ff3cf826038 R14: 00007ff3cf825fa0 R15: 00007ffd69c68298 [ 606.519108][T10711] [ 606.779441][T10716] netlink: 'syz.2.2033': attribute type 21 has an invalid length. [ 606.804927][T10716] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2033'. [ 606.968365][T10720] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2035'. [ 607.557897][T10734] netlink: 'syz.0.2041': attribute type 3 has an invalid length. [ 607.617063][T10734] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2041'. [ 607.824379][T10736] netlink: 'syz.3.2042': attribute type 10 has an invalid length. [ 607.854129][T10736] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2042'. [ 607.881329][T10737] netlink: 'syz.3.2042': attribute type 10 has an invalid length. [ 608.125517][T10744] netlink: 'syz.2.2045': attribute type 3 has an invalid length. [ 608.169868][T10744] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2045'. [ 608.470640][T10750] netlink: 'syz.4.2047': attribute type 2 has an invalid length. [ 608.558690][T10753] netlink: 'syz.1.2048': attribute type 21 has an invalid length. [ 608.586211][T10753] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2048'. [ 608.628222][T10756] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2047'. [ 609.109345][T10766] netlink: 'syz.1.2054': attribute type 3 has an invalid length. [ 609.125252][T10766] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2054'. [ 611.322341][T10768] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2055'. [ 611.351968][T10770] netlink: 'syz.1.2056': attribute type 10 has an invalid length. [ 611.378459][T10770] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2056'. [ 611.440720][T10770] netlink: 'syz.1.2056': attribute type 10 has an invalid length. [ 611.774287][T10775] netlink: 'syz.3.2059': attribute type 11 has an invalid length. [ 611.815028][T10775] __nla_validate_parse: 1 callbacks suppressed [ 611.815047][T10775] netlink: 125060 bytes leftover after parsing attributes in process `syz.3.2059'. [ 612.110802][T10790] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2062'. [ 613.620790][T10819] validate_nla: 2 callbacks suppressed [ 613.620808][T10819] netlink: 'syz.3.2074': attribute type 21 has an invalid length. [ 613.642285][T10819] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2074'. [ 613.878015][T10825] netlink: 'syz.0.2076': attribute type 10 has an invalid length. [ 613.897322][T10829] netlink: 'syz.3.2077': attribute type 3 has an invalid length. [ 613.920678][T10829] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2077'. [ 613.949548][T10825] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2076'. [ 613.980315][T10827] netlink: 'syz.0.2076': attribute type 10 has an invalid length. [ 614.025466][T10827] device wlan1 left promiscuous mode [ 617.531833][T10849] device netdevsim0 entered promiscuous mode [ 617.801724][T10860] netlink: 'syz.1.2087': attribute type 21 has an invalid length. [ 617.828859][T10860] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2087'. [ 618.509479][T10869] FAULT_INJECTION: forcing a failure. [ 618.509479][T10869] name failslab, interval 1, probability 0, space 0, times 0 [ 618.564755][T10869] CPU: 0 PID: 10869 Comm: syz.3.2091 Not tainted syzkaller #0 [ 618.572321][T10869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 618.582400][T10869] Call Trace: [ 618.585702][T10869] [ 618.588657][T10869] dump_stack_lvl+0x188/0x24e [ 618.593378][T10869] ? show_regs_print_info+0x12/0x12 [ 618.598610][T10869] ? load_image+0x410/0x410 [ 618.603140][T10869] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 618.609180][T10869] ? __lock_acquire+0x7ea0/0x7ea0 [ 618.614248][T10869] ? lock_chain_count+0x20/0x20 [ 618.619142][T10869] should_fail_ex+0x390/0x4c0 [ 618.623854][T10869] should_failslab+0x5/0x20 [ 618.628407][T10869] slab_pre_alloc_hook+0x59/0x300 [ 618.633466][T10869] kmem_cache_alloc+0x56/0x2f0 [ 618.638276][T10869] ? __build_skb+0x27/0x3b0 [ 618.642806][T10869] __build_skb+0x27/0x3b0 [ 618.647269][T10869] ? build_skb+0x14/0x230 [ 618.651627][T10869] build_skb+0x1e/0x230 [ 618.655812][T10869] bpf_prog_test_run_skb+0x38d/0x18e0 [ 618.661245][T10869] ? __fget_files+0x28/0x460 [ 618.665870][T10869] ? __fget_files+0x3fc/0x460 [ 618.670594][T10869] ? cpu_online+0xa0/0xa0 [ 618.674959][T10869] bpf_prog_test_run+0x31c/0x390 [ 618.679936][T10869] __sys_bpf+0x62b/0x780 [ 618.684223][T10869] ? bpf_link_show_fdinfo+0x380/0x380 [ 618.689638][T10869] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 618.695832][T10869] __x64_sys_bpf+0x78/0x90 [ 618.700280][T10869] do_syscall_64+0x4c/0xa0 [ 618.704722][T10869] ? clear_bhb_loop+0x60/0xb0 [ 618.709426][T10869] ? clear_bhb_loop+0x60/0xb0 [ 618.714159][T10869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.720106][T10869] RIP: 0033:0x7ff3cf59e199 [ 618.724549][T10869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.744201][T10869] RSP: 002b:00007ff3d050a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 618.752665][T10869] RAX: ffffffffffffffda RBX: 00007ff3cf825fa0 RCX: 00007ff3cf59e199 [ 618.760685][T10869] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 618.768680][T10869] RBP: 00007ff3d050a090 R08: 0000000000000000 R09: 0000000000000000 [ 618.776682][T10869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.784702][T10869] R13: 00007ff3cf826038 R14: 00007ff3cf825fa0 R15: 00007ffd69c68298 [ 618.792712][T10869] [ 619.409387][T10883] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2096'. [ 619.454353][T10883] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 620.947592][T10901] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2100'. [ 620.964003][T10901] netlink: 'syz.2.2100': attribute type 11 has an invalid length. [ 620.979784][T10901] netlink: 'syz.2.2100': attribute type 6 has an invalid length. [ 621.004785][T10901] netlink: 125060 bytes leftover after parsing attributes in process `syz.2.2100'. [ 621.122525][T10904] netlink: 'syz.3.2101': attribute type 10 has an invalid length. [ 621.165842][T10904] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2101'. [ 621.191141][T10908] netlink: 'syz.3.2101': attribute type 10 has an invalid length. [ 622.275792][T10929] netlink: 'syz.3.2110': attribute type 3 has an invalid length. [ 622.283639][T10929] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2110'. [ 623.193923][T10937] netlink: 'syz.0.2112': attribute type 2 has an invalid length. [ 623.207574][T10937] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2112'. [ 623.906791][T10941] C: renamed from team_slave_0 [ 624.319510][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.325957][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.514491][T10941] netlink: 'syz.0.2113': attribute type 2 has an invalid length. [ 625.522819][T10941] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2113'. [ 625.532736][T10941] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 625.773380][T10950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2117'. [ 625.810774][T10946] netlink: 'syz.4.2115': attribute type 10 has an invalid length. [ 625.816512][T10950] netlink: 'syz.1.2117': attribute type 11 has an invalid length. [ 625.849952][T10950] netlink: 'syz.1.2117': attribute type 6 has an invalid length. [ 625.874739][T10950] netlink: 125060 bytes leftover after parsing attributes in process `syz.1.2117'. [ 625.885144][T10946] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2115'. [ 626.629790][T10965] FAULT_INJECTION: forcing a failure. [ 626.629790][T10965] name failslab, interval 1, probability 0, space 0, times 0 [ 626.665355][T10965] CPU: 0 PID: 10965 Comm: syz.0.2121 Not tainted syzkaller #0 [ 626.672905][T10965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 626.683008][T10965] Call Trace: [ 626.686330][T10965] [ 626.689315][T10965] dump_stack_lvl+0x188/0x24e [ 626.694053][T10965] ? show_regs_print_info+0x12/0x12 [ 626.699306][T10965] ? load_image+0x410/0x410 [ 626.703868][T10965] ? __lock_acquire+0x7ea0/0x7ea0 [ 626.708961][T10965] should_fail_ex+0x390/0x4c0 [ 626.713711][T10965] should_failslab+0x5/0x20 [ 626.718260][T10965] slab_pre_alloc_hook+0x59/0x300 [ 626.723337][T10965] ? verify_lock_unused+0x140/0x140 [ 626.728594][T10965] ? bpf_test_init+0x9f/0x140 [ 626.733321][T10965] __kmem_cache_alloc_node+0x4f/0x270 [ 626.738746][T10965] ? bpf_test_init+0x9f/0x140 [ 626.743472][T10965] __kmalloc+0xa3/0x240 [ 626.747673][T10965] bpf_test_init+0x9f/0x140 [ 626.752233][T10965] bpf_prog_test_run_xdp+0x488/0xf80 [ 626.757567][T10965] ? __lock_acquire+0x7ea0/0x7ea0 [ 626.762662][T10965] ? dev_put+0x80/0x80 [ 626.766822][T10965] ? dev_put+0x80/0x80 [ 626.770955][T10965] bpf_prog_test_run+0x31c/0x390 [ 626.775999][T10965] __sys_bpf+0x62b/0x780 [ 626.780308][T10965] ? bpf_link_show_fdinfo+0x380/0x380 [ 626.785759][T10965] ? lock_chain_count+0x20/0x20 [ 626.790673][T10965] __x64_sys_bpf+0x78/0x90 [ 626.795151][T10965] do_syscall_64+0x4c/0xa0 [ 626.799643][T10965] ? clear_bhb_loop+0x60/0xb0 [ 626.804400][T10965] ? clear_bhb_loop+0x60/0xb0 [ 626.809134][T10965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 626.815078][T10965] RIP: 0033:0x7f6bb339e199 [ 626.819539][T10965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.839196][T10965] RSP: 002b:00007f6bb15f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 626.847664][T10965] RAX: ffffffffffffffda RBX: 00007f6bb3625fa0 RCX: 00007f6bb339e199 [ 626.855803][T10965] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 626.863822][T10965] RBP: 00007f6bb15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 626.871839][T10965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.879855][T10965] R13: 00007f6bb3626038 R14: 00007f6bb3625fa0 R15: 00007ffef43c8908 [ 626.887887][T10965] [ 627.047685][T10946] device wlan1 left promiscuous mode [ 627.319186][T10969] validate_nla: 1 callbacks suppressed [ 627.319208][T10969] netlink: 'syz.3.2125': attribute type 3 has an invalid length. [ 627.347980][T10969] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2125'. [ 627.438359][T10974] netlink: 'syz.0.2123': attribute type 2 has an invalid length. [ 627.466558][T10974] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2123'. [ 628.525900][T10993] netlink: 'syz.2.2131': attribute type 10 has an invalid length. [ 630.613039][T10993] device wlan1 left promiscuous mode [ 630.887996][T11000] netlink: 'syz.4.2134': attribute type 2 has an invalid length. [ 630.914773][T11000] netlink: 'syz.4.2134': attribute type 1 has an invalid length. [ 630.923047][T11002] netlink: 'syz.3.2135': attribute type 1 has an invalid length. [ 630.923083][T11002] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.2135'. [ 630.942229][T11000] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.2134'. [ 631.262323][T11011] netlink: 'syz.0.2137': attribute type 10 has an invalid length. [ 631.292142][T11011] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2137'. [ 631.367135][T11019] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2142'. [ 631.394236][T11021] netlink: 'syz.0.2137': attribute type 10 has an invalid length. [ 635.231485][T11101] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2155'. [ 635.563957][T11110] IPv6: Can't replace route, no match found [ 636.030599][T11121] device syzkaller0 entered promiscuous mode [ 638.363066][T11138] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2168'. [ 638.534949][T11145] FAULT_INJECTION: forcing a failure. [ 638.534949][T11145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.574858][T11145] CPU: 1 PID: 11145 Comm: syz.3.2169 Not tainted syzkaller #0 [ 638.582492][T11145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 638.592593][T11145] Call Trace: [ 638.595948][T11145] [ 638.598920][T11145] dump_stack_lvl+0x188/0x24e [ 638.603741][T11145] ? show_regs_print_info+0x12/0x12 [ 638.608992][T11145] ? load_image+0x410/0x410 [ 638.613541][T11145] ? __lock_acquire+0x7ea0/0x7ea0 [ 638.618644][T11145] ? snprintf+0xe5/0x140 [ 638.622978][T11145] should_fail_ex+0x390/0x4c0 [ 638.627715][T11145] _copy_to_user+0x2c/0x130 [ 638.632265][T11145] simple_read_from_buffer+0xe3/0x150 [ 638.637699][T11145] proc_fail_nth_read+0x1a6/0x220 [ 638.642781][T11145] ? proc_fault_inject_write+0x310/0x310 [ 638.648592][T11145] ? fsnotify_perm+0x248/0x550 [ 638.653402][T11145] ? proc_fault_inject_write+0x310/0x310 [ 638.659088][T11145] vfs_read+0x2db/0x960 [ 638.663342][T11145] ? kernel_read+0x1e0/0x1e0 [ 638.667988][T11145] ? __fget_files+0x28/0x460 [ 638.672633][T11145] ? __fget_files+0x3fc/0x460 [ 638.677378][T11145] ? __fdget_pos+0x2ae/0x360 [ 638.682045][T11145] ? ksys_read+0x70/0x260 [ 638.686435][T11145] ksys_read+0x14d/0x260 [ 638.690748][T11145] ? vfs_write+0x9a0/0x9a0 [ 638.695239][T11145] ? lockdep_hardirqs_on+0x94/0x140 [ 638.700503][T11145] do_syscall_64+0x4c/0xa0 [ 638.704973][T11145] ? clear_bhb_loop+0x60/0xb0 [ 638.709695][T11145] ? clear_bhb_loop+0x60/0xb0 [ 638.714420][T11145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 638.720382][T11145] RIP: 0033:0x7ff3cf55e9ce [ 638.724848][T11145] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 638.744527][T11145] RSP: 002b:00007ff3d0509fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 638.752996][T11145] RAX: ffffffffffffffda RBX: 00007ff3d050a6c0 RCX: 00007ff3cf55e9ce [ 638.761016][T11145] RDX: 000000000000000f RSI: 00007ff3d050a0a0 RDI: 0000000000000006 [ 638.769090][T11145] RBP: 00007ff3d050a090 R08: 0000000000000000 R09: 0000000000000000 [ 638.777116][T11145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.785169][T11145] R13: 00007ff3cf826038 R14: 00007ff3cf825fa0 R15: 00007ffd69c68298 [ 638.793305][T11145] [ 638.959528][T11156] IPv6: …: Disabled Multicast RS [ 639.105765][T11153] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.2173'.