last executing test programs: 7.640441896s ago: executing program 2 (id=1924): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34, 0x8}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 7.476007636s ago: executing program 2 (id=1928): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x40}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6d01, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0xce24, 0x1, @mcast2, 0x42}, 0x80, 0x0}, 0x0) 7.372810261s ago: executing program 0 (id=1932): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB="0200"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000400000000000000000000000000000000000000f18498ffcd8d2cc2bfc56acdfb3a1df33d446abe7a4be67656188cd2d8fe3a6da59b2190ce2b7901b884ba7513560e5a3cf642f6c1dd4541"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x199f}, [@call={0x85, 0x0, 0x0, 0x6b}, @ldst={0x3, 0x2, 0x0, 0x0, 0x3, 0x1, 0x10}, @map_idx_val={0x18, 0xf1cfac4de8d3097d, 0x6, 0x0, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0xd1600000, 0x28, &(0x7f0000000180)=""/40, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x3, 0x9, 0x8, 0x100}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x3, 0x3, 0x5, 0xb}, {0x5, 0x2, 0xf, 0xc}, {0x5, 0x3, 0xc, 0x7}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='ifs_status\x00', r0, 0x0, 0x4}, 0xfffffffffffffeb4) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="660a000000000000611169000000000085000000020000009500000000000000f3fb6004cbff15f40b0d5d52586a5c9c61054ec59b7548c64b9eeea5ecebb8a6214cc14a68c4085544f69a632d3e2a50c91c17ec0281875d19f68c73d877da2bb83d31c8ba658728be54f62b83c9c07d82ac5e66d6bd6ea274f00522b9f6ef5bb0ba7b794ec2b19fddd7195593b5123bc187763c4a9707a4597bb8fcb2c55ad44943eb1d94f1af91"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x88) socketpair(0x1, 0x5, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x25, 0x4, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003640)={0x5, 0xb, &(0x7f0000003580)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x98b}}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000080)=ANY=[]) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x21, 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) sendmsg$sock(r1, &(0x7f00000005c0)={&(0x7f0000000440)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000000280)=[{&(0x7f00000004c0)="1d19a379869804cb00d79b07303fafe72133ed903070cd15270e0724943ddd960faba419fda8c9c3e2d63616c27f47750352659e173820cff3648b029b3f9fcdb7c6142be2baf04bc87d45bfb2d3fda8a9e211a4558ab3a6f33cdfce185256f1cf217fe2ba99c69288d27140740b5a5c08e49db12723702428c8cbeb773c1b6f463b7ae22b69d3ab5e067577960c1bc67612d5319aa8569410ca1dce0a36db1aba9caf2f14487b3d8bb47b5e1720ea5604fa26721fc93bfcf6fd9e0e147daece152e4b6ded9d1629c13f196d2382ef09370985752190480c61aa64ef7301e9ca475d", 0xe2}], 0x1}, 0x20020010) 6.407082068s ago: executing program 1 (id=1933): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x3, 0x20}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r1, &(0x7f00000002c0), 0x0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (fail_nth: 5) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00'}, 0x18) 6.404437578s ago: executing program 3 (id=1934): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000850000005000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000240)=[{0x60, 0x113, 0x0, "5f1a79e9da88378eebd78285e98a41cf4c8a3cc2b9242540d66f1ed61b0cec247f6563610e4d10ccc10a572528976bab39853d1062e616d337fbd0e21569f6342c5f22cf38703c4f7670e4"}, {0xa8, 0x112, 0x6, "c05daef217897ff954918f2d52a311f51e78460cef859ffadc9002c49065d1eb10fb013c5e3ebacecfa24af27db668f6b504bf8e3cd7f51a501c410ae08aba23c7f4404dc045a6ca5abe11cca840dfa4fce48a005d3b9b4f1077878bf9e3bfea24cd780a2f22307dc3c6e746dcdf5dfa6bea0ffa15c1127bccdaa7d42d8919ccd617ae10d15e68bd83e032cbcae647e04b0b25e949a9"}], 0x108}, 0x41) syz_clone(0x10000000, &(0x7f0000000080), 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000440)="aaaaee8cf7c01b82595b928d76f1ba99ed3ef6e34d7b2775d9150e69f52c4662e30b393795e15aa179573a6b7ba2e664809988b3cf45075dec0fe8479b85fc1f1b86745dba81ef7135c0dd896f8b1e9b4d590de63a100b31f0750000d69cde342cd7dc7f946f54d2fbb0fb2514b1e0ddc6cd39f3144ccc0380fbcb0fb83571c4b76e8494ce59d17cd077bafc") socket$kcm(0xa, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000850000005000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000240)=[{0x60, 0x113, 0x0, "5f1a79e9da88378eebd78285e98a41cf4c8a3cc2b9242540d66f1ed61b0cec247f6563610e4d10ccc10a572528976bab39853d1062e616d337fbd0e21569f6342c5f22cf38703c4f7670e4"}, {0xa8, 0x112, 0x6, "c05daef217897ff954918f2d52a311f51e78460cef859ffadc9002c49065d1eb10fb013c5e3ebacecfa24af27db668f6b504bf8e3cd7f51a501c410ae08aba23c7f4404dc045a6ca5abe11cca840dfa4fce48a005d3b9b4f1077878bf9e3bfea24cd780a2f22307dc3c6e746dcdf5dfa6bea0ffa15c1127bccdaa7d42d8919ccd617ae10d15e68bd83e032cbcae647e04b0b25e949a9"}], 0x108}, 0x41) (async) syz_clone(0x10000000, &(0x7f0000000080), 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000440)="aaaaee8cf7c01b82595b928d76f1ba99ed3ef6e34d7b2775d9150e69f52c4662e30b393795e15aa179573a6b7ba2e664809988b3cf45075dec0fe8479b85fc1f1b86745dba81ef7135c0dd896f8b1e9b4d590de63a100b31f0750000d69cde342cd7dc7f946f54d2fbb0fb2514b1e0ddc6cd39f3144ccc0380fbcb0fb83571c4b76e8494ce59d17cd077bafc") (async) 6.387658169s ago: executing program 0 (id=1935): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2002) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x6a) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x0, &(0x7f00000000c0)}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x56}, 0x28) close(0xffffffffffffffff) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.382325379s ago: executing program 2 (id=1936): socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x20, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.321067852s ago: executing program 4 (id=1937): socket$kcm(0x10, 0x3, 0x10) r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x500, 0x0, 0x0}, 0x30) socket$kcm(0x2a, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x41) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) close(0x3) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair(0x22, 0x800, 0x0, &(0x7f0000000300)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=""/137, 0x9}, 0x20) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0x5dc}, 0x50) close(0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="2b667265657a5972202d66726565fe52422a19ffb4f6fab7f31686073ac48f1da5e69e53e81ed88fb14c5b50f6cf76b5fabea9fe61e05ab5ab654bca3e2e42c2eca570a16a3993283a69eecdb247dde59f3197387690988b2db36baf99d3804bdf330231851c554abddc3ff65fa5c7203e438e5bb0a96f5bdcd8e49c5b43a1553fbfa6293eb19cfd4493c2d58691d0e9fa5e677c8a8fd966a0d8227c37d7af0391ec40b0f56d94f6b1e820c1ca9a0446c08e80edb61fc71ab45bac7a15cb68ba931671938d"], 0x12) r6 = socket$kcm(0xa, 0x0, 0x3a) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x20000000000003d5, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4d}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) 6.260644886s ago: executing program 3 (id=1938): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34, 0x8}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 5.85004511s ago: executing program 3 (id=1939): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x18000000000002a0, 0xf, 0xfffffffffffffe0d, &(0x7f0000000140)="7c893307000000000008000088471a", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001300)=r3, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5.741556046s ago: executing program 0 (id=1940): ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x41) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB], 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x3, 0xdc}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="2b667265657a5972202d66726565fe52422a19ffb4f6fab7f31686073ac48f1da5e69e53e81ed88fb14c5b50f6cf76b5fabea9fe61e05ab5ab654bca3e2e42c2eca570a16a3993283a69eecdb247dde59f3197387690988b2db36baf99d3804bdf330231851c554abddc3ff65fa5c7203e438e5bb0a96f5bdcd8e49c5b43a1553fbfa6293eb19cfd4493c2d58691d0e9fa5e677c8a8fd966a0d8227c37d7af0391ec40b0f56d94f6b1e820c1ca9a0446c08e80edb61fc71ab45bac7a15cb68ba931671938d"], 0x12) 5.705836418s ago: executing program 0 (id=1941): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5300, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) 3.284646619s ago: executing program 1 (id=1942): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000005000000040013005fcf8f24f26982c6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r2 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) 2.75241908s ago: executing program 4 (id=1943): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd7}], 0x1}, 0x0) 2.713160712s ago: executing program 2 (id=1944): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 2.712620142s ago: executing program 3 (id=1945): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB="0200"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000400000000000000000000000000000000000000f18498ffcd8d2cc2bfc56acdfb3a1df33d446abe7a4be67656188cd2d8fe3a6da59b2190ce2b7901b884ba7513560e5a3cf642f6c1dd4541"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x199f}, [@call={0x85, 0x0, 0x0, 0x6b}, @ldst={0x3, 0x2, 0x0, 0x0, 0x3, 0x1, 0x10}, @map_idx_val={0x18, 0xf1cfac4de8d3097d, 0x6, 0x0, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0xd1600000, 0x28, &(0x7f0000000180)=""/40, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x3, 0x9, 0x8, 0x100}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x3, 0x3, 0x5, 0xb}, {0x5, 0x2, 0xf, 0xc}, {0x5, 0x3, 0xc, 0x7}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='ifs_status\x00', r0, 0x0, 0x4}, 0xfffffffffffffeb4) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="660a000000000000611169000000000085000000020000009500000000000000f3fb6004cbff15f40b0d5d52586a5c9c61054ec59b7548c64b9eeea5ecebb8a6214cc14a68c4085544f69a632d3e2a50c91c17ec0281875d19f68c73d877da2bb83d31c8ba658728be54f62b83c9c07d82ac5e66d6bd6ea274f00522b9f6ef5bb0ba7b794ec2b19fddd7195593b5123bc187763c4a9707a4597bb8fcb2c55ad44943eb1d94f1af91"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x88) socketpair(0x1, 0x5, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x25, 0x4, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003640)={0x5, 0xb, &(0x7f0000003580)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x98b}}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000080)=ANY=[]) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x21, 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) sendmsg$sock(r1, &(0x7f00000005c0)={&(0x7f0000000440)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000000280)=[{&(0x7f00000004c0)="1d19a379869804cb00d79b07303fafe72133ed903070cd15270e0724943ddd960faba419fda8c9c3e2d63616c27f47750352659e173820cff3648b029b3f9fcdb7c6142be2baf04bc87d45bfb2d3fda8a9e211a4558ab3a6f33cdfce185256f1cf217fe2ba99c69288d27140740b5a5c08e49db12723702428c8cbeb773c1b6f463b7ae22b69d3ab5e067577960c1bc67612d5319aa8569410ca1dce0a36db1aba9caf2f14487b3d8bb47b5e1720ea5604fa26721fc93bfcf6fd9e0e147daece152e4b6ded9d1629c13f196d2382ef09370985752190480c61aa64ef7301e9ca475d", 0xe2}], 0x1}, 0x20020010) 2.675538704s ago: executing program 1 (id=1946): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x8000000000000000, 0x3}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffc}, 0x0, 0x1, 0xffffffffffffffff, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001930000001000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000340)={0x6, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x7602, 0x7f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xc3, &(0x7f0000000740)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="2d6d656d6f7279202d72646d61202b6d656d6f7279202d6e65745f636c73202b637075202d667265657a6572202d726c696d697420ccfea2e5bd73bc3e40530b57bfee70b01ed54ab6aa9394ef8204e94818d4c627af265fe526d09d7473c36a2e60f79cba9d79ab95b05cbea90227f3997b99"], 0x35) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000024000000340000000a000000000000000100000d0000000004000000020000000000000000000001000000000000000000000000612e5f613000"], 0x0, 0x46}, 0x20) socket$kcm(0x10, 0x2, 0x4) 2.655322355s ago: executing program 4 (id=1947): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x40}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6d01, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) sendmsg$kcm(r4, 0x0, 0x0) 2.630319127s ago: executing program 0 (id=1948): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0xf, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x200001f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x1000, 0xb, 0xc}]}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x7ffffffe, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) close(0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(r1, 0x10e, 0xc, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x0, 0xfffffffffffffffd}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x2}, 0x48, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r7}, &(0x7f0000000340), &(0x7f0000000380)='%pB \x00'}, 0x20) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) 2.629809557s ago: executing program 2 (id=1949): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000c80)={r0, &(0x7f0000000b40)="74094c92fba60c33c0937337e3311f99469cf2bcc215a3a2ec8d328d98ded7fa443e0ef3a3ee527242823c7954ea6cf14fc8", &(0x7f0000000b80)=""/229}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.524683153s ago: executing program 3 (id=1950): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34, 0x8}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1.638719515s ago: executing program 1 (id=1951): ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x41) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB], 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x3, 0xdc}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="2b667265657a5972202d66726565fe52422a19ffb4f6fab7f31686073ac48f1da5e69e53e81ed88fb14c5b50f6cf76b5fabea9fe61e05ab5ab654bca3e2e42c2eca570a16a3993283a69eecdb247dde59f3197387690988b2db36baf99d3804bdf330231851c554abddc3ff65fa5c7203e438e5bb0a96f5bdcd8e49c5b43a1553fbfa6293eb19cfd4493c2d58691d0e9fa5e677c8a8fd966a0d8227c37d7af0391ec40b0f56d94f6b1e820c1ca9a0446c08e80edb61fc71ab45bac7a15cb68ba931671938d"], 0x12) 1.590079027s ago: executing program 1 (id=1952): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40047438, 0x20000014) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0x2a, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 410.019426ms ago: executing program 3 (id=1953): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1821000000000000000000000000000085000000410000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r2, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37f10c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, &(0x7f0000000000)=r6, 0x20) openat$cgroup_ro(r6, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xdc0, 0x0, &(0x7f0000000240)="259a534f6577119472ae1206", 0x0, 0xf25, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={r6, 0xe0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000440), 0x8, 0x86, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x10, 0x78, 0x48ac1738, 0x9, 0x0, 0x1, 0x6, '\x00', r8, r1, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x23, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000001000000000000000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020752500000000002020207b1af800f8ffffffb702000008000000b7030000520d00008500000006000000181100000914141f30f3101aa7c9d9843a1cfad7019fbd3fcbbc6123c7b0fb52c2b1ddac445802981afd0761546a5ef1ce10ff7abc509103d4f516db64ef4d13089c2eb430cd3a65293fc765fa62cc0bbc3423727310a6b4110b5396d7c1a1c6b8bdb145d84be49047", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bc2afcfff0ffffff38925000f0ffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 363.197029ms ago: executing program 0 (id=1954): socket$kcm(0x10, 0x3, 0x10) r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x500, 0x0, 0x0}, 0x30) socket$kcm(0x2a, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x41) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) close(0x3) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair(0x22, 0x800, 0x0, &(0x7f0000000300)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=""/137, 0x9}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xd, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x82}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0x5dc}, 0x50) close(0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="2b667265657a5972202d66726565fe52422a19ffb4f6fab7f31686073ac48f1da5e69e53e81ed88fb14c5b50f6cf76b5fabea9fe61e05ab5ab654bca3e2e42c2eca570a16a3993283a69eecdb247dde59f3197387690988b2db36baf99d3804bdf330231851c554abddc3ff65fa5c7203e438e5bb0a96f5bdcd8e49c5b43a1553fbfa6293eb19cfd4493c2d58691d0e9fa5e677c8a8fd966a0d8227c37d7af0391ec40b0f56d94f6b1e820c1ca9a0446c08e80edb61fc71ab45bac7a15cb68ba931671938d"], 0x12) r6 = socket$kcm(0xa, 0x0, 0x3a) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x20000000000003d5, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4d}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) 305.095332ms ago: executing program 2 (id=1955): socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x20, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 262.076944ms ago: executing program 4 (id=1956): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000005000000040013005fcf8f24f26982c6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r2 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) 261.070445ms ago: executing program 1 (id=1957): bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xa482}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="91610d", 0x3}], 0x1}, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 161.39745ms ago: executing program 4 (id=1958): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5300, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, 0x0}, 0x240448c4) 0s ago: executing program 4 (id=1959): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x50) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team_slave_0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) (fail_nth: 5) kernel console output (not intermixed with test programs): _1) entered blocking state [ 107.499734][ T5117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.510288][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.518567][ T5117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.628990][ T5117] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 107.660266][ T5124] netlink: 132 bytes leftover after parsing attributes in process `syz.4.321'. [ 107.920382][ T5141] netlink: 168 bytes leftover after parsing attributes in process `syz.0.329'. [ 108.112870][ T5154] netlink: 168 bytes leftover after parsing attributes in process `syz.4.333'. [ 108.124022][ T5152] FAULT_INJECTION: forcing a failure. [ 108.124022][ T5152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.149316][ T5152] CPU: 1 PID: 5152 Comm: syz.2.334 Not tainted syzkaller #0 [ 108.156646][ T5152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.166805][ T5152] Call Trace: [ 108.170102][ T5152] [ 108.173050][ T5152] dump_stack_lvl+0x188/0x250 [ 108.177770][ T5152] ? show_regs_print_info+0x20/0x20 [ 108.182979][ T5152] ? load_image+0x400/0x400 [ 108.187505][ T5152] ? __lock_acquire+0x7d10/0x7d10 [ 108.192572][ T5152] ? aa_sk_perm+0x910/0x910 [ 108.197101][ T5152] should_fail+0x38c/0x4c0 [ 108.201534][ T5152] _copy_from_user+0x2e/0x170 [ 108.206222][ T5152] sock_setsockopt+0x2e5/0x24c0 [ 108.211087][ T5152] ? __sock_set_mark+0x150/0x150 [ 108.216205][ T5152] ? __lock_acquire+0x7d10/0x7d10 [ 108.221249][ T5152] ? aa_sk_perm+0x7dc/0x910 [ 108.225780][ T5152] ? aa_af_perm+0x340/0x340 [ 108.230300][ T5152] ? __fget_files+0x40f/0x480 [ 108.234999][ T5152] ? aa_sock_opt_perm+0x74/0x100 [ 108.239958][ T5152] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 108.245533][ T5152] ? security_socket_setsockopt+0x7a/0xa0 [ 108.251278][ T5152] __sys_setsockopt+0x2f6/0x3d0 [ 108.256129][ T5152] __x64_sys_setsockopt+0xb1/0xc0 [ 108.261139][ T5152] do_syscall_64+0x4c/0xa0 [ 108.265536][ T5152] ? clear_bhb_loop+0x30/0x80 [ 108.270202][ T5152] ? clear_bhb_loop+0x30/0x80 [ 108.274862][ T5152] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.280742][ T5152] RIP: 0033:0x7fa843c83cb9 [ 108.285161][ T5152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.304837][ T5152] RSP: 002b:00007fa841edf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 108.313239][ T5152] RAX: ffffffffffffffda RBX: 00007fa843efefa0 RCX: 00007fa843c83cb9 [ 108.321194][ T5152] RDX: 0000000000000042 RSI: 0000000000000001 RDI: 0000000000000004 [ 108.329149][ T5152] RBP: 00007fa841edf090 R08: 000000000000003b R09: 0000000000000000 [ 108.337106][ T5152] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 108.345142][ T5152] R13: 00007fa843eff038 R14: 00007fa843efefa0 R15: 00007ffd7a4cdcf8 [ 108.353104][ T5152] [ 108.455730][ T5163] validate_nla: 8 callbacks suppressed [ 108.455745][ T5163] netlink: 'syz.4.338': attribute type 4 has an invalid length. [ 108.487051][ T5163] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.338'. [ 108.933533][ T5177] netlink: 'syz.2.345': attribute type 10 has an invalid length. [ 108.951452][ T5177] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.960266][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.065456][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.073012][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.081249][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.088600][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.143083][ T5177] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 109.152748][ T5185] netlink: 'syz.4.348': attribute type 13 has an invalid length. [ 109.163001][ T5185] netlink: 168 bytes leftover after parsing attributes in process `syz.4.348'. [ 109.187752][ T5191] netlink: 132 bytes leftover after parsing attributes in process `syz.2.345'. [ 109.201835][ T5190] netlink: 'syz.3.347': attribute type 13 has an invalid length. [ 109.346073][ T5201] netlink: 'syz.2.349': attribute type 13 has an invalid length. [ 109.372816][ T5199] netlink: 'syz.4.350': attribute type 10 has an invalid length. [ 109.412513][ T5206] netlink: 'syz.1.351': attribute type 4 has an invalid length. [ 109.719839][ T5224] netlink: 'syz.4.363': attribute type 13 has an invalid length. [ 109.934464][ T5230] netlink: 'syz.1.365': attribute type 10 has an invalid length. [ 109.953243][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.962431][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.028122][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.035560][ T5230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.044017][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.051349][ T5230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.082656][ T5242] netlink: 'syz.3.371': attribute type 4 has an invalid length. [ 110.108169][ T5230] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 110.577067][ T5276] FAULT_INJECTION: forcing a failure. [ 110.577067][ T5276] name failslab, interval 1, probability 0, space 0, times 0 [ 110.613496][ T5276] CPU: 0 PID: 5276 Comm: syz.4.383 Not tainted syzkaller #0 [ 110.620824][ T5276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.630872][ T5276] Call Trace: [ 110.634138][ T5276] [ 110.637052][ T5276] dump_stack_lvl+0x188/0x250 [ 110.641716][ T5276] ? show_regs_print_info+0x20/0x20 [ 110.646902][ T5276] ? load_image+0x400/0x400 [ 110.651409][ T5276] ? __might_sleep+0xf0/0xf0 [ 110.655984][ T5276] ? __lock_acquire+0x7d10/0x7d10 [ 110.660999][ T5276] ? lockdep_init_map_type+0x98/0x900 [ 110.666370][ T5276] should_fail+0x38c/0x4c0 [ 110.670792][ T5276] should_failslab+0x5/0x20 [ 110.675298][ T5276] slab_pre_alloc_hook+0x51/0xc0 [ 110.680219][ T5276] ? security_inode_alloc+0x30/0x110 [ 110.685489][ T5276] kmem_cache_alloc+0x3d/0x290 [ 110.690242][ T5276] security_inode_alloc+0x30/0x110 [ 110.695427][ T5276] inode_init_always+0x8f4/0xcb0 [ 110.700368][ T5276] new_inode_pseudo+0x8e/0x210 [ 110.705126][ T5276] __sock_create+0x129/0x900 [ 110.709702][ T5276] __sys_socketpair+0x1bd/0x540 [ 110.714547][ T5276] __x64_sys_socketpair+0x97/0xb0 [ 110.719662][ T5276] do_syscall_64+0x4c/0xa0 [ 110.724128][ T5276] ? clear_bhb_loop+0x30/0x80 [ 110.729323][ T5276] ? clear_bhb_loop+0x30/0x80 [ 110.733983][ T5276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.739879][ T5276] RIP: 0033:0x7f5b59774cb9 [ 110.744273][ T5276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.763864][ T5276] RSP: 002b:00007f5b579d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 110.772284][ T5276] RAX: ffffffffffffffda RBX: 00007f5b599effa0 RCX: 00007f5b59774cb9 [ 110.780245][ T5276] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 110.788199][ T5276] RBP: 00007f5b579d0090 R08: 0000000000000000 R09: 0000000000000000 [ 110.796152][ T5276] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 110.804322][ T5276] R13: 00007f5b599f0038 R14: 00007f5b599effa0 R15: 00007ffc7b72d358 [ 110.812292][ T5276] [ 110.821357][ T5276] socket: no more sockets [ 111.347227][ T5309] device syzkaller0 entered promiscuous mode [ 111.366619][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 111.436902][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 111.510741][ T5300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.779165][ T5324] __nla_validate_parse: 12 callbacks suppressed [ 111.779181][ T5324] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.404'. [ 115.095604][ T5345] validate_nla: 9 callbacks suppressed [ 115.095619][ T5345] netlink: 'syz.2.413': attribute type 39 has an invalid length. [ 115.229999][ T5357] netlink: 'syz.1.414': attribute type 13 has an invalid length. [ 115.242545][ T5356] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.417'. [ 115.259649][ T5360] netlink: 'syz.3.418': attribute type 4 has an invalid length. [ 115.268568][ T5357] netlink: 168 bytes leftover after parsing attributes in process `syz.1.414'. [ 115.293066][ T5360] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.418'. [ 115.532206][ T5376] netlink: 'syz.2.422': attribute type 13 has an invalid length. [ 115.548795][ T5376] netlink: 168 bytes leftover after parsing attributes in process `syz.2.422'. [ 115.866290][ T5392] netlink: 'syz.1.430': attribute type 4 has an invalid length. [ 115.887559][ T5392] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.430'. [ 115.979155][ T5396] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.432'. [ 116.039816][ T5401] netlink: 'syz.1.434': attribute type 13 has an invalid length. [ 116.055296][ T5401] netlink: 168 bytes leftover after parsing attributes in process `syz.1.434'. [ 116.249016][ T5413] netlink: 'syz.2.439': attribute type 39 has an invalid length. [ 116.651959][ T5433] netlink: 'syz.2.445': attribute type 4 has an invalid length. [ 116.661116][ T5433] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.445'. [ 117.011645][ T5446] netlink: 'syz.0.451': attribute type 39 has an invalid length. [ 117.242156][ T5463] netlink: 'syz.2.457': attribute type 4 has an invalid length. [ 117.257821][ T5463] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.457'. [ 117.379039][ T5471] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.460'. [ 117.690118][ T5483] netlink: 152 bytes leftover after parsing attributes in process `syz.4.464'. [ 117.751917][ T5483] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 118.027607][ T5501] tap0: tun_chr_ioctl cmd 1074025677 [ 118.033291][ T5501] tap0: linktype set to 773 [ 118.092660][ T5505] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.475'. [ 118.119156][ T5503] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 118.304435][ T5515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.479'. [ 118.407132][ T5523] netlink: 132 bytes leftover after parsing attributes in process `syz.4.479'. [ 118.576884][ T5530] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.485'. [ 118.609339][ T5536] FAULT_INJECTION: forcing a failure. [ 118.609339][ T5536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.696610][ T5536] CPU: 1 PID: 5536 Comm: syz.4.487 Not tainted syzkaller #0 [ 118.703939][ T5536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.714001][ T5536] Call Trace: [ 118.717296][ T5536] [ 118.720240][ T5536] dump_stack_lvl+0x188/0x250 [ 118.725027][ T5536] ? show_regs_print_info+0x20/0x20 [ 118.730237][ T5536] ? load_image+0x400/0x400 [ 118.734732][ T5536] ? __lock_acquire+0x7d10/0x7d10 [ 118.739746][ T5536] should_fail+0x38c/0x4c0 [ 118.744160][ T5536] _copy_from_user+0x2e/0x170 [ 118.748847][ T5536] __copy_msghdr_from_user+0xc9/0x630 [ 118.754213][ T5536] ? verify_lock_unused+0x140/0x140 [ 118.759434][ T5536] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 118.764736][ T5536] ___sys_sendmsg+0x19a/0x2e0 [ 118.769423][ T5536] ? __sys_sendmsg+0x2a0/0x2a0 [ 118.774197][ T5536] ? vfs_write+0x8b2/0xd60 [ 118.778664][ T5536] __se_sys_sendmsg+0x1af/0x290 [ 118.783514][ T5536] ? __x64_sys_sendmsg+0x80/0x80 [ 118.788446][ T5536] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 118.794435][ T5536] ? lockdep_hardirqs_on+0x94/0x140 [ 118.799643][ T5536] do_syscall_64+0x4c/0xa0 [ 118.804051][ T5536] ? clear_bhb_loop+0x30/0x80 [ 118.808726][ T5536] ? clear_bhb_loop+0x30/0x80 [ 118.813409][ T5536] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.819304][ T5536] RIP: 0033:0x7f5b59774cb9 [ 118.823728][ T5536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.843322][ T5536] RSP: 002b:00007f5b579d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.851736][ T5536] RAX: ffffffffffffffda RBX: 00007f5b599effa0 RCX: 00007f5b59774cb9 [ 118.859797][ T5536] RDX: 0000000000004810 RSI: 0000200000000100 RDI: 0000000000000003 [ 118.867848][ T5536] RBP: 00007f5b579d0090 R08: 0000000000000000 R09: 0000000000000000 [ 118.875818][ T5536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.883777][ T5536] R13: 00007f5b599f0038 R14: 00007f5b599effa0 R15: 00007ffc7b72d358 [ 118.891758][ T5536] [ 119.168756][ T5559] delete_channel: no stack [ 119.184521][ T5559] delete_channel: no stack [ 119.805786][ T5591] netlink: 168 bytes leftover after parsing attributes in process `syz.3.512'. [ 120.120124][ T5600] validate_nla: 8 callbacks suppressed [ 120.120159][ T5600] netlink: 'syz.4.515': attribute type 10 has an invalid length. [ 120.213403][ T5605] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.517'. [ 120.474620][ T5609] netlink: 'syz.4.519': attribute type 21 has an invalid length. [ 120.524518][ T5609] netlink: 164 bytes leftover after parsing attributes in process `syz.4.519'. [ 120.714068][ T1268] wlan1: Trigger new scan to find an IBSS to join [ 120.729310][ T5619] netlink: 'syz.4.523': attribute type 10 has an invalid length. [ 120.769454][ T5619] device geneve0 entered promiscuous mode [ 120.857786][ T5619] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 120.879483][ T5625] netlink: 'syz.0.524': attribute type 21 has an invalid length. [ 120.977068][ T5630] netlink: 'syz.2.526': attribute type 21 has an invalid length. [ 121.170978][ T5643] netlink: 'syz.0.530': attribute type 4 has an invalid length. [ 121.932648][ T5662] netlink: 'syz.1.537': attribute type 2 has an invalid length. [ 122.004928][ T5663] netlink: 'syz.4.538': attribute type 10 has an invalid length. [ 122.503500][ T5682] netlink: 'syz.3.544': attribute type 4 has an invalid length. [ 122.540637][ T5682] __nla_validate_parse: 6 callbacks suppressed [ 122.540651][ T5682] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.544'. [ 122.665448][ T5684] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.545'. [ 122.723559][ T5692] FAULT_INJECTION: forcing a failure. [ 122.723559][ T5692] name failslab, interval 1, probability 0, space 0, times 0 [ 122.725397][ T5690] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.547'. [ 122.769541][ T5692] CPU: 0 PID: 5692 Comm: syz.3.548 Not tainted syzkaller #0 [ 122.776968][ T5692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.787057][ T5692] Call Trace: [ 122.790441][ T5692] [ 122.793388][ T5692] dump_stack_lvl+0x188/0x250 [ 122.798201][ T5692] ? show_regs_print_info+0x20/0x20 [ 122.803437][ T5692] ? load_image+0x400/0x400 [ 122.807979][ T5692] ? __might_sleep+0xf0/0xf0 [ 122.812603][ T5692] ? __lock_acquire+0x7d10/0x7d10 [ 122.817756][ T5692] ? lockdep_init_map_type+0x98/0x900 [ 122.823181][ T5692] should_fail+0x38c/0x4c0 [ 122.827659][ T5692] should_failslab+0x5/0x20 [ 122.832186][ T5692] slab_pre_alloc_hook+0x51/0xc0 [ 122.837152][ T5692] ? security_inode_alloc+0x30/0x110 [ 122.842469][ T5692] kmem_cache_alloc+0x3d/0x290 [ 122.847291][ T5692] security_inode_alloc+0x30/0x110 [ 122.852454][ T5692] inode_init_always+0x8f4/0xcb0 [ 122.857448][ T5692] new_inode_pseudo+0x8e/0x210 [ 122.862254][ T5692] __sock_create+0x129/0x900 [ 122.866898][ T5692] __sys_socketpair+0x1bd/0x540 [ 122.871884][ T5692] __x64_sys_socketpair+0x97/0xb0 [ 122.876941][ T5692] do_syscall_64+0x4c/0xa0 [ 122.881375][ T5692] ? clear_bhb_loop+0x30/0x80 [ 122.886062][ T5692] ? clear_bhb_loop+0x30/0x80 [ 122.890788][ T5692] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.896711][ T5692] RIP: 0033:0x7f8f6e565cb9 [ 122.901148][ T5692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.920797][ T5692] RSP: 002b:00007f8f6c7c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 122.929351][ T5692] RAX: ffffffffffffffda RBX: 00007f8f6e7e0fa0 RCX: 00007f8f6e565cb9 [ 122.937359][ T5692] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 122.945355][ T5692] RBP: 00007f8f6c7c1090 R08: 0000000000000000 R09: 0000000000000000 [ 122.953347][ T5692] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 122.961344][ T5692] R13: 00007f8f6e7e1038 R14: 00007f8f6e7e0fa0 R15: 00007ffe0fe3d418 [ 122.969396][ T5692] [ 123.343116][ T5700] netlink: 'syz.0.550': attribute type 10 has an invalid length. [ 123.376974][ T5700] device geneve0 entered promiscuous mode [ 123.484097][ T5692] socket: no more sockets [ 123.528975][ T5700] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 123.756037][ T9] wlan1: Trigger new scan to find an IBSS to join [ 125.072542][ T5769] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.573'. [ 125.535869][ T5788] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.580'. [ 125.697776][ T5795] netlink: 188 bytes leftover after parsing attributes in process `syz.4.582'. [ 125.871898][ T5801] validate_nla: 3 callbacks suppressed [ 125.871913][ T5801] netlink: 'syz.3.585': attribute type 4 has an invalid length. [ 125.897722][ T5804] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.586'. [ 125.932038][ T5799] netlink: 'syz.0.584': attribute type 10 has an invalid length. [ 125.969100][ T5801] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.585'. [ 126.069294][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.076848][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.391988][ T5820] netlink: 'syz.0.592': attribute type 13 has an invalid length. [ 126.406205][ T5820] netlink: 168 bytes leftover after parsing attributes in process `syz.0.592'. [ 126.466672][ T5818] netlink: 'syz.1.590': attribute type 10 has an invalid length. [ 126.587687][ T5818] device geneve0 entered promiscuous mode [ 126.794659][ T3090] wlan1: Trigger new scan to find an IBSS to join [ 127.018112][ T5818] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 127.436028][ T5839] netlink: 'syz.2.598': attribute type 10 has an invalid length. [ 127.516686][ T5847] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.599'. [ 127.588999][ T5846] netlink: 'syz.4.601': attribute type 4 has an invalid length. [ 127.683868][ T5846] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.601'. [ 127.769931][ T154] wlan1: Creating new IBSS network, BSSID d6:18:2c:79:cd:86 [ 128.775423][ T5877] netlink: 'syz.2.611': attribute type 2 has an invalid length. [ 128.783240][ T5877] netlink: 60 bytes leftover after parsing attributes in process `syz.2.611'. [ 129.014038][ T5886] netlink: 'syz.4.613': attribute type 10 has an invalid length. [ 129.221405][ T5895] netlink: 'syz.4.617': attribute type 4 has an invalid length. [ 129.294491][ T5895] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.617'. [ 129.328380][ T5902] FAULT_INJECTION: forcing a failure. [ 129.328380][ T5902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.384005][ T5902] CPU: 0 PID: 5902 Comm: syz.0.622 Not tainted syzkaller #0 [ 129.391369][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.401448][ T5902] Call Trace: [ 129.404746][ T5902] [ 129.407695][ T5902] dump_stack_lvl+0x188/0x250 [ 129.412408][ T5902] ? show_regs_print_info+0x20/0x20 [ 129.417635][ T5902] ? load_image+0x400/0x400 [ 129.422186][ T5902] ? __lock_acquire+0x7d10/0x7d10 [ 129.427243][ T5902] ? vfs_write+0x8b2/0xd60 [ 129.431696][ T5902] should_fail+0x38c/0x4c0 [ 129.436152][ T5902] _copy_from_user+0x2e/0x170 [ 129.440860][ T5902] __sys_bpf+0x26d/0x6f0 [ 129.445138][ T5902] ? bpf_link_show_fdinfo+0x380/0x380 [ 129.450597][ T5902] ? vtime_user_exit+0x2c8/0x3e0 [ 129.455592][ T5902] __x64_sys_bpf+0x78/0x90 [ 129.460045][ T5902] do_syscall_64+0x4c/0xa0 [ 129.464486][ T5902] ? clear_bhb_loop+0x30/0x80 [ 129.469197][ T5902] ? clear_bhb_loop+0x30/0x80 [ 129.473907][ T5902] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.479825][ T5902] RIP: 0033:0x7f81b0394cb9 [ 129.484295][ T5902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.503917][ T5902] RSP: 002b:00007f81ae5f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.512348][ T5902] RAX: ffffffffffffffda RBX: 00007f81b060ffa0 RCX: 00007f81b0394cb9 [ 129.520320][ T5902] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000015 [ 129.528279][ T5902] RBP: 00007f81ae5f0090 R08: 0000000000000000 R09: 0000000000000000 [ 129.536240][ T5902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.544364][ T5902] R13: 00007f81b0610038 R14: 00007f81b060ffa0 R15: 00007ffc2f8c4c68 [ 129.552385][ T5902] [ 130.162542][ T5923] netlink: 'syz.2.628': attribute type 10 has an invalid length. [ 130.960430][ T5949] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.639'. [ 131.967263][ T5962] netlink: 'syz.2.644': attribute type 4 has an invalid length. [ 132.003712][ T5962] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.644'. [ 132.672895][ T5988] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.653'. [ 132.724097][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.730462][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.341342][ T6003] netlink: 'syz.1.658': attribute type 4 has an invalid length. [ 133.363688][ T6003] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.658'. [ 133.898628][ T6025] netlink: 'syz.2.666': attribute type 6 has an invalid length. [ 134.019239][ T6031] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.669'. [ 140.214378][ T6061] netlink: 'syz.4.676': attribute type 12 has an invalid length. [ 140.222325][ T6061] netlink: 132 bytes leftover after parsing attributes in process `syz.4.676'. [ 140.367178][ T6073] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.682'. [ 140.407632][ T6076] bond0: (slave geneve0): Error: Slave device does not support XDP [ 140.441804][ T6076] netlink: 'syz.2.684': attribute type 10 has an invalid length. [ 140.473151][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.501187][ T6076] device bridge_slave_1 left promiscuous mode [ 140.517261][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.537494][ T6076] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 140.604784][ T6085] netlink: 'syz.3.687': attribute type 10 has an invalid length. [ 140.641930][ T6083] netlink: 'syz.0.685': attribute type 10 has an invalid length. [ 140.676321][ T6083] team0: Device hsr_slave_0 failed to register rx_handler [ 143.863469][ T6107] device wlan0 entered promiscuous mode [ 144.205354][ T6127] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.699'. [ 147.217479][ T6143] netlink: 'syz.1.706': attribute type 4 has an invalid length. [ 147.271806][ T6143] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.706'. [ 147.283160][ T6148] netlink: 'syz.3.704': attribute type 10 has an invalid length. [ 147.370449][ T6148] team0: Device hsr_slave_0 failed to register rx_handler [ 147.404612][ T6147] netlink: 'syz.0.705': attribute type 39 has an invalid length. [ 147.653302][ T6161] bond0: (slave geneve0): Error: Slave device does not support XDP [ 147.678331][ T6161] netlink: 'syz.0.712': attribute type 10 has an invalid length. [ 147.752283][ T6161] device bridge_slave_1 left promiscuous mode [ 147.763259][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.812603][ T6161] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 147.919670][ T6161] syz.0.712 (6161) used greatest stack depth: 18896 bytes left [ 147.954371][ T6163] device wlan0 entered promiscuous mode [ 148.159580][ T6179] netlink: 'syz.0.718': attribute type 4 has an invalid length. [ 148.170032][ T6179] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.718'. [ 148.427070][ T6191] netlink: 'syz.2.720': attribute type 10 has an invalid length. [ 148.614607][ T6191] team0: Device hsr_slave_0 failed to register rx_handler [ 148.888933][ T6190] netlink: 180 bytes leftover after parsing attributes in process `syz.0.722'. [ 149.269418][ T6215] netlink: 'syz.2.732': attribute type 4 has an invalid length. [ 149.278761][ T6215] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.732'. [ 149.645535][ T6228] device wlan0 entered promiscuous mode [ 149.659227][ T6226] netlink: 'syz.0.734': attribute type 10 has an invalid length. [ 149.705148][ T6226] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.712479][ T6226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.804223][ T6226] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 149.858932][ T6225] netlink: 'syz.0.734': attribute type 10 has an invalid length. [ 149.934268][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.311749][ T6246] netlink: 'syz.2.744': attribute type 4 has an invalid length. [ 150.340381][ T6246] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.744'. [ 150.383229][ T6244] FAULT_INJECTION: forcing a failure. [ 150.383229][ T6244] name failslab, interval 1, probability 0, space 0, times 0 [ 150.423271][ T6244] CPU: 0 PID: 6244 Comm: syz.4.742 Not tainted syzkaller #0 [ 150.430608][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.440676][ T6244] Call Trace: [ 150.443974][ T6244] [ 150.446919][ T6244] dump_stack_lvl+0x188/0x250 [ 150.451632][ T6244] ? show_regs_print_info+0x20/0x20 [ 150.456853][ T6244] ? load_image+0x400/0x400 [ 150.461368][ T6244] ? perf_trace_lock+0xe4/0x390 [ 150.466238][ T6244] should_fail+0x38c/0x4c0 [ 150.470677][ T6244] should_failslab+0x5/0x20 [ 150.475204][ T6244] slab_pre_alloc_hook+0x51/0xc0 [ 150.480157][ T6244] kmem_cache_alloc_trace+0x47/0x2a0 [ 150.485451][ T6244] ? __hw_addr_add_ex+0x1fc/0x7a0 [ 150.490494][ T6244] __hw_addr_add_ex+0x1fc/0x7a0 [ 150.495465][ T6244] dev_addr_init+0x147/0x230 [ 150.500079][ T6244] ? dev_addr_flush+0x200/0x200 [ 150.504954][ T6244] alloc_netdev_mqs+0x113/0xc40 [ 150.509805][ T6244] ? ppp_ccp_closed+0x270/0x270 [ 150.514664][ T6244] ppp_ioctl+0x623/0x1a80 [ 150.518999][ T6244] ? ppp_poll+0x250/0x250 [ 150.523431][ T6244] ? bpf_lsm_file_ioctl+0x5/0x10 [ 150.528488][ T6244] ? security_file_ioctl+0x7c/0xa0 [ 150.533627][ T6244] ? ppp_poll+0x250/0x250 [ 150.537993][ T6244] __se_sys_ioctl+0xfa/0x170 [ 150.542591][ T6244] do_syscall_64+0x4c/0xa0 [ 150.547010][ T6244] ? clear_bhb_loop+0x30/0x80 [ 150.551693][ T6244] ? clear_bhb_loop+0x30/0x80 [ 150.556378][ T6244] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.562276][ T6244] RIP: 0033:0x7f5b59774cb9 [ 150.566697][ T6244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.586657][ T6244] RSP: 002b:00007f5b579d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.595083][ T6244] RAX: ffffffffffffffda RBX: 00007f5b599effa0 RCX: 00007f5b59774cb9 [ 150.603157][ T6244] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000008 [ 150.611145][ T6244] RBP: 00007f5b579d0090 R08: 0000000000000000 R09: 0000000000000000 [ 150.619296][ T6244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.627267][ T6244] R13: 00007f5b599f0038 R14: 00007f5b599effa0 R15: 00007ffc7b72d358 [ 150.635267][ T6244] [ 151.053919][ T6260] team0: Device hsr_slave_0 failed to register rx_handler [ 151.457410][ T6274] device wlan0 left promiscuous mode [ 151.499229][ T6274] device wlan0 entered promiscuous mode [ 151.522517][ T6278] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.755'. [ 151.609057][ T6274] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.753'. [ 151.706272][ T6288] FAULT_INJECTION: forcing a failure. [ 151.706272][ T6288] name failslab, interval 1, probability 0, space 0, times 0 [ 151.835180][ T6288] CPU: 1 PID: 6288 Comm: syz.4.758 Not tainted syzkaller #0 [ 151.842530][ T6288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.852609][ T6288] Call Trace: [ 151.855908][ T6288] [ 151.858860][ T6288] dump_stack_lvl+0x188/0x250 [ 151.863577][ T6288] ? show_regs_print_info+0x20/0x20 [ 151.868808][ T6288] ? load_image+0x400/0x400 [ 151.873348][ T6288] ? __might_sleep+0xf0/0xf0 [ 151.878051][ T6288] ? __lock_acquire+0x7d10/0x7d10 [ 151.883118][ T6288] should_fail+0x38c/0x4c0 [ 151.887588][ T6288] should_failslab+0x5/0x20 [ 151.892205][ T6288] slab_pre_alloc_hook+0x51/0xc0 [ 151.897181][ T6288] __kmalloc_node_track_caller+0x68/0x3a0 [ 151.903078][ T6288] ? netlink_sendmsg+0x654/0xbe0 [ 151.908045][ T6288] ? kmem_cache_alloc_node+0x162/0x2d0 [ 151.913623][ T6288] ? __alloc_skb+0xf4/0x750 [ 151.918166][ T6288] ? netlink_sendmsg+0x654/0xbe0 [ 151.923242][ T6288] __alloc_skb+0x22c/0x750 [ 151.927702][ T6288] netlink_sendmsg+0x654/0xbe0 [ 151.932613][ T6288] ? netlink_getsockopt+0x570/0x570 [ 151.937937][ T6288] ? aa_sock_msg_perm+0x94/0x150 [ 151.943012][ T6288] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 151.948495][ T6288] ? security_socket_sendmsg+0x7c/0xa0 [ 151.953995][ T6288] ? netlink_getsockopt+0x570/0x570 [ 151.959224][ T6288] ____sys_sendmsg+0x5b7/0x8f0 [ 151.964066][ T6288] ? __sys_sendmsg_sock+0x30/0x30 [ 151.969149][ T6288] ? import_iovec+0x6f/0xa0 [ 151.973704][ T6288] ___sys_sendmsg+0x236/0x2e0 [ 151.978549][ T6288] ? __sys_sendmsg+0x2a0/0x2a0 [ 151.983379][ T6288] ? vfs_write+0x8b2/0xd60 [ 151.987892][ T6288] __se_sys_sendmsg+0x1af/0x290 [ 151.992916][ T6288] ? __x64_sys_sendmsg+0x80/0x80 [ 151.997878][ T6288] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 152.004097][ T6288] ? lockdep_hardirqs_on+0x94/0x140 [ 152.009357][ T6288] do_syscall_64+0x4c/0xa0 [ 152.013777][ T6288] ? clear_bhb_loop+0x30/0x80 [ 152.018472][ T6288] ? clear_bhb_loop+0x30/0x80 [ 152.023296][ T6288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.029228][ T6288] RIP: 0033:0x7f5b59774cb9 [ 152.033660][ T6288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.053298][ T6288] RSP: 002b:00007f5b579d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.061726][ T6288] RAX: ffffffffffffffda RBX: 00007f5b599effa0 RCX: 00007f5b59774cb9 [ 152.069757][ T6288] RDX: 0000000000048000 RSI: 0000200000000080 RDI: 0000000000000003 [ 152.077735][ T6288] RBP: 00007f5b579d0090 R08: 0000000000000000 R09: 0000000000000000 [ 152.085699][ T6288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.093669][ T6288] R13: 00007f5b599f0038 R14: 00007f5b599effa0 R15: 00007ffc7b72d358 [ 152.101868][ T6288] [ 155.390195][ T6320] validate_nla: 3 callbacks suppressed [ 155.390212][ T6320] netlink: 'syz.3.769': attribute type 4 has an invalid length. [ 155.426553][ T6320] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.769'. [ 155.488124][ T6323] netlink: 'syz.2.770': attribute type 39 has an invalid length. [ 155.646395][ T6332] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.773'. [ 156.077092][ T6348] FAULT_INJECTION: forcing a failure. [ 156.077092][ T6348] name failslab, interval 1, probability 0, space 0, times 0 [ 156.094006][ T6348] CPU: 0 PID: 6348 Comm: syz.0.779 Not tainted syzkaller #0 [ 156.101436][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.111529][ T6348] Call Trace: [ 156.114815][ T6348] [ 156.117742][ T6348] dump_stack_lvl+0x188/0x250 [ 156.122421][ T6348] ? show_regs_print_info+0x20/0x20 [ 156.127617][ T6348] ? load_image+0x400/0x400 [ 156.132111][ T6348] ? __might_sleep+0xf0/0xf0 [ 156.136694][ T6348] ? __lock_acquire+0x7d10/0x7d10 [ 156.141711][ T6348] should_fail+0x38c/0x4c0 [ 156.146115][ T6348] should_failslab+0x5/0x20 [ 156.150687][ T6348] slab_pre_alloc_hook+0x51/0xc0 [ 156.155614][ T6348] kmem_cache_alloc_node_trace+0x4a/0x300 [ 156.161627][ T6348] ? __get_vm_area_node+0x119/0x2d0 [ 156.166815][ T6348] __get_vm_area_node+0x119/0x2d0 [ 156.171834][ T6348] __vmalloc_node_range+0xef/0x8b0 [ 156.176927][ T6348] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 156.182456][ T6348] ? rcu_is_watching+0x11/0xa0 [ 156.187205][ T6348] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 156.193352][ T6348] ? lockdep_hardirqs_on+0x94/0x140 [ 156.198534][ T6348] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 156.204166][ T6348] __vmalloc+0x76/0x80 [ 156.208220][ T6348] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 156.213749][ T6348] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 156.219108][ T6348] bpf_prog_alloc+0x1a/0x1e0 [ 156.223686][ T6348] bpf_prog_load+0x7c6/0x1510 [ 156.228357][ T6348] ? map_freeze+0x350/0x350 [ 156.232844][ T6348] ? __might_fault+0xb7/0x110 [ 156.237527][ T6348] ? __might_fault+0xb3/0x110 [ 156.242188][ T6348] ? bpf_lsm_bpf+0x5/0x10 [ 156.246503][ T6348] ? security_bpf+0x7a/0xa0 [ 156.250996][ T6348] __sys_bpf+0x532/0x6f0 [ 156.255226][ T6348] ? bpf_link_show_fdinfo+0x380/0x380 [ 156.260595][ T6348] __x64_sys_bpf+0x78/0x90 [ 156.264994][ T6348] do_syscall_64+0x4c/0xa0 [ 156.269391][ T6348] ? clear_bhb_loop+0x30/0x80 [ 156.274222][ T6348] ? clear_bhb_loop+0x30/0x80 [ 156.278889][ T6348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.284767][ T6348] RIP: 0033:0x7f81b0394cb9 [ 156.289284][ T6348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.308885][ T6348] RSP: 002b:00007f81ae5f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.317385][ T6348] RAX: ffffffffffffffda RBX: 00007f81b060ffa0 RCX: 00007f81b0394cb9 [ 156.325350][ T6348] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 156.333306][ T6348] RBP: 00007f81ae5f0090 R08: 0000000000000000 R09: 0000000000000000 [ 156.341291][ T6348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.349244][ T6348] R13: 00007f81b0610038 R14: 00007f81b060ffa0 R15: 00007ffc2f8c4c68 [ 156.357318][ T6348] [ 156.386694][ T6348] syz.0.779: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 156.405564][ T6348] CPU: 0 PID: 6348 Comm: syz.0.779 Not tainted syzkaller #0 [ 156.412893][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.422950][ T6348] Call Trace: [ 156.426240][ T6348] [ 156.429168][ T6348] dump_stack_lvl+0x188/0x250 [ 156.433846][ T6348] ? rcu_lock_release+0x5/0x20 [ 156.438623][ T6348] ? show_regs_print_info+0x20/0x20 [ 156.443826][ T6348] ? load_image+0x400/0x400 [ 156.448443][ T6348] ? __rcu_read_unlock+0x78/0xd0 [ 156.453473][ T6348] warn_alloc+0x243/0x320 [ 156.457813][ T6348] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 156.463964][ T6348] ? zone_watermark_ok_safe+0x240/0x240 [ 156.469533][ T6348] ? __sanitizer_cov_trace_pc+0x2c/0x60 [ 156.475269][ T6348] ? __get_vm_area_node+0x2b5/0x2d0 [ 156.480478][ T6348] __vmalloc_node_range+0x2b1/0x8b0 [ 156.485694][ T6348] ? rcu_is_watching+0x11/0xa0 [ 156.490455][ T6348] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 156.496603][ T6348] ? lockdep_hardirqs_on+0x94/0x140 [ 156.501794][ T6348] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 156.507436][ T6348] __vmalloc+0x76/0x80 [ 156.511612][ T6348] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 156.517156][ T6348] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 156.522552][ T6348] bpf_prog_alloc+0x1a/0x1e0 [ 156.527159][ T6348] bpf_prog_load+0x7c6/0x1510 [ 156.531858][ T6348] ? map_freeze+0x350/0x350 [ 156.536460][ T6348] ? __might_fault+0xb7/0x110 [ 156.541138][ T6348] ? __might_fault+0xb3/0x110 [ 156.546159][ T6348] ? bpf_lsm_bpf+0x5/0x10 [ 156.550499][ T6348] ? security_bpf+0x7a/0xa0 [ 156.554994][ T6348] __sys_bpf+0x532/0x6f0 [ 156.559230][ T6348] ? bpf_link_show_fdinfo+0x380/0x380 [ 156.564623][ T6348] __x64_sys_bpf+0x78/0x90 [ 156.569052][ T6348] do_syscall_64+0x4c/0xa0 [ 156.573468][ T6348] ? clear_bhb_loop+0x30/0x80 [ 156.578140][ T6348] ? clear_bhb_loop+0x30/0x80 [ 156.582912][ T6348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.588808][ T6348] RIP: 0033:0x7f81b0394cb9 [ 156.593213][ T6348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.612894][ T6348] RSP: 002b:00007f81ae5f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.621305][ T6348] RAX: ffffffffffffffda RBX: 00007f81b060ffa0 RCX: 00007f81b0394cb9 [ 156.629284][ T6348] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 156.637255][ T6348] RBP: 00007f81ae5f0090 R08: 0000000000000000 R09: 0000000000000000 [ 156.645239][ T6348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.653199][ T6348] R13: 00007f81b0610038 R14: 00007f81b060ffa0 R15: 00007ffc2f8c4c68 [ 156.661170][ T6348] [ 156.680322][ T6348] Mem-Info: [ 156.684158][ T6348] active_anon:274 inactive_anon:12248 isolated_anon:0 [ 156.684158][ T6348] active_file:14104 inactive_file:41432 isolated_file:0 [ 156.684158][ T6348] unevictable:768 dirty:304 writeback:0 [ 156.684158][ T6348] slab_reclaimable:20303 slab_unreclaimable:92181 [ 156.684158][ T6348] mapped:29851 shmem:1629 pagetables:642 bounce:0 [ 156.684158][ T6348] kernel_misc_reclaimable:0 [ 156.684158][ T6348] free:1372361 free_pcp:11006 free_cma:0 [ 156.758728][ T6348] Node 0 active_anon:1064kB inactive_anon:48548kB active_file:56216kB inactive_file:165728kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119484kB dirty:1212kB writeback:0kB shmem:4440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11320kB pagetables:2584kB all_unreclaimable? no [ 156.790726][ T6348] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 156.826121][ T6348] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.859941][ T6348] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 156.866502][ T6348] Node 0 DMA32 free:1547596kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1064kB inactive_anon:48472kB active_file:56216kB inactive_file:165728kB unevictable:1536kB writepending:1212kB present:3129332kB managed:2606560kB mlocked:0kB bounce:0kB free_pcp:42992kB local_pcp:21672kB free_cma:0kB [ 156.916811][ T6348] lowmem_reserve[]: 0 0 0 0 0 [ 156.921589][ T6348] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.948334][ T6348] lowmem_reserve[]: 0 0 0 0 0 [ 156.953102][ T6348] Node 1 Normal free:3925184kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:1304kB local_pcp:1304kB free_cma:0kB [ 156.991079][ T6348] lowmem_reserve[]: 0 0 0 0 0 [ 156.997788][ T6348] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 157.019576][ T6348] Node 0 DMA32: 2452*4kB (UME) 1757*8kB (UME) 1581*16kB (UME) 627*32kB (UME) 790*64kB (UME) 593*128kB (UME) 367*256kB (UME) 262*512kB (UM) 166*1024kB (UME) 38*2048kB (UM) 214*4096kB (UM) = 1548136kB [ 157.071901][ T6348] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 157.114757][ T6348] Node 1 Normal: 154*4kB (UME) 31*8kB (UME) 26*16kB (UME) 174*32kB (UME) 86*64kB (UME) 27*128kB (UE) 7*256kB (UME) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 952*4096kB (M) = 3925184kB [ 157.145275][ T6348] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 157.147633][ T6365] netlink: 'syz.2.784': attribute type 39 has an invalid length. [ 157.160160][ T6348] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 157.172734][ T6348] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 157.187415][ T6371] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.787'. [ 157.214152][ T6348] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 157.224403][ T6348] 57165 total pagecache pages [ 157.239283][ T6348] 0 pages in swap cache [ 157.243480][ T6348] Swap cache stats: add 68, delete 68, find 8/13 [ 157.262032][ T6348] Free swap = 124728kB [ 157.266436][ T6348] Total swap = 124996kB [ 157.270724][ T6348] 2097051 pages RAM [ 157.304014][ T6348] 0 pages HighMem/MovableOnly [ 157.324141][ T6348] 411488 pages reserved [ 157.328345][ T6348] 0 pages cma reserved [ 157.992646][ T6415] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.805'. [ 158.131861][ T6413] netlink: 60 bytes leftover after parsing attributes in process `syz.0.801'. [ 158.280191][ T6432] netlink: 'syz.0.819': attribute type 39 has an invalid length. [ 158.705284][ T6458] netlink: 'syz.0.820': attribute type 4 has an invalid length. [ 158.727605][ T6458] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.820'. [ 158.824836][ T6463] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.823'. [ 159.005158][ T6473] netlink: 'syz.3.827': attribute type 39 has an invalid length. [ 159.626860][ T6496] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.838'. [ 159.735248][ T6499] netlink: 60 bytes leftover after parsing attributes in process `syz.1.839'. [ 159.777692][ T6502] netlink: 'syz.4.840': attribute type 39 has an invalid length. [ 159.827524][ T6507] FAULT_INJECTION: forcing a failure. [ 159.827524][ T6507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.920750][ T6507] CPU: 1 PID: 6507 Comm: syz.2.843 Not tainted syzkaller #0 [ 159.928079][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.938226][ T6507] Call Trace: [ 159.941514][ T6507] [ 159.944439][ T6507] dump_stack_lvl+0x188/0x250 [ 159.949119][ T6507] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 159.955282][ T6507] ? show_regs_print_info+0x20/0x20 [ 159.960482][ T6507] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 159.966651][ T6507] should_fail+0x38c/0x4c0 [ 159.971564][ T6507] _copy_from_user+0x2e/0x170 [ 159.976264][ T6507] __sys_bpf+0x26d/0x6f0 [ 159.980534][ T6507] ? bpf_link_show_fdinfo+0x380/0x380 [ 159.985935][ T6507] __x64_sys_bpf+0x78/0x90 [ 159.990364][ T6507] do_syscall_64+0x4c/0xa0 [ 159.994796][ T6507] ? clear_bhb_loop+0x30/0x80 [ 159.999479][ T6507] ? clear_bhb_loop+0x30/0x80 [ 160.004159][ T6507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.010054][ T6507] RIP: 0033:0x7fa843c83cb9 [ 160.014662][ T6507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.034300][ T6507] RSP: 002b:00007fa841edf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.042734][ T6507] RAX: ffffffffffffffda RBX: 00007fa843efefa0 RCX: 00007fa843c83cb9 [ 160.050721][ T6507] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 160.058695][ T6507] RBP: 00007fa841edf090 R08: 0000000000000000 R09: 0000000000000000 [ 160.066660][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.074624][ T6507] R13: 00007fa843eff038 R14: 00007fa843efefa0 R15: 00007ffd7a4cdcf8 [ 160.082596][ T6507] [ 161.211663][ T6533] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.853'. [ 161.297869][ T6535] netlink: 'syz.2.852': attribute type 29 has an invalid length. [ 161.322855][ T6535] netlink: 'syz.2.852': attribute type 29 has an invalid length. [ 161.351865][ T6540] netlink: 'syz.2.852': attribute type 29 has an invalid length. [ 161.661685][ T6548] netlink: 156 bytes leftover after parsing attributes in process `syz.1.857'. [ 164.580248][ T6571] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.866'. [ 164.623143][ T6574] netlink: 'syz.1.867': attribute type 39 has an invalid length. [ 165.400247][ T6622] netlink: 'syz.3.883': attribute type 39 has an invalid length. [ 165.464410][ T6626] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.885'. [ 165.552041][ T6630] netlink: 'syz.1.884': attribute type 10 has an invalid length. [ 165.642797][ T6630] team0: Device hsr_slave_0 failed to register rx_handler [ 165.841349][ T6642] FAULT_INJECTION: forcing a failure. [ 165.841349][ T6642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.882556][ T6642] CPU: 0 PID: 6642 Comm: syz.2.892 Not tainted syzkaller #0 [ 165.889909][ T6642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.899972][ T6642] Call Trace: [ 165.903261][ T6642] [ 165.906260][ T6642] dump_stack_lvl+0x188/0x250 [ 165.910964][ T6642] ? show_regs_print_info+0x20/0x20 [ 165.916191][ T6642] ? load_image+0x400/0x400 [ 165.920729][ T6642] ? __lock_acquire+0x7d10/0x7d10 [ 165.925794][ T6642] should_fail+0x38c/0x4c0 [ 165.930256][ T6642] _copy_from_user+0x2e/0x170 [ 165.934957][ T6642] __copy_msghdr_from_user+0x48a/0x630 [ 165.937946][ T6637] netlink: 60 bytes leftover after parsing attributes in process `syz.4.890'. [ 165.940607][ T6642] ? verify_lock_unused+0x140/0x140 [ 165.940638][ T6642] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 165.959956][ T6642] ___sys_sendmsg+0x19a/0x2e0 [ 165.964658][ T6642] ? __sys_sendmsg+0x2a0/0x2a0 [ 165.969534][ T6642] ? vfs_write+0x8b2/0xd60 [ 165.973984][ T6642] __se_sys_sendmsg+0x1af/0x290 [ 165.978860][ T6642] ? __x64_sys_sendmsg+0x80/0x80 [ 165.983813][ T6642] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 165.989822][ T6642] ? lockdep_hardirqs_on+0x94/0x140 [ 165.995045][ T6642] do_syscall_64+0x4c/0xa0 [ 165.999455][ T6642] ? clear_bhb_loop+0x30/0x80 [ 166.004117][ T6642] ? clear_bhb_loop+0x30/0x80 [ 166.008783][ T6642] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.014660][ T6642] RIP: 0033:0x7fa843c83cb9 [ 166.019072][ T6642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.038672][ T6642] RSP: 002b:00007fa841edf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.047075][ T6642] RAX: ffffffffffffffda RBX: 00007fa843efefa0 RCX: 00007fa843c83cb9 [ 166.055038][ T6642] RDX: 00000000200ce0c0 RSI: 0000200000000340 RDI: 0000000000000003 [ 166.063001][ T6642] RBP: 00007fa841edf090 R08: 0000000000000000 R09: 0000000000000000 [ 166.070970][ T6642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.078930][ T6642] R13: 00007fa843eff038 R14: 00007fa843efefa0 R15: 00007ffd7a4cdcf8 [ 166.086963][ T6642] [ 166.413813][ T6668] netlink: 'syz.1.901': attribute type 39 has an invalid length. [ 166.593037][ T6673] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.902'. [ 166.797592][ T6679] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 166.865223][ T6679] team0: Device hsr_slave_0 failed to register rx_handler [ 167.381704][ T6713] netlink: 'syz.2.917': attribute type 39 has an invalid length. [ 167.403111][ T6715] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.919'. [ 170.367161][ T6742] FAULT_INJECTION: forcing a failure. [ 170.367161][ T6742] name failslab, interval 1, probability 0, space 0, times 0 [ 170.400387][ T6742] CPU: 0 PID: 6742 Comm: syz.4.928 Not tainted syzkaller #0 [ 170.407892][ T6742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.418087][ T6742] Call Trace: [ 170.421382][ T6742] [ 170.424319][ T6742] dump_stack_lvl+0x188/0x250 [ 170.429006][ T6742] ? show_regs_print_info+0x20/0x20 [ 170.434214][ T6742] ? load_image+0x400/0x400 [ 170.438709][ T6742] ? mark_lock+0x94/0x320 [ 170.443153][ T6742] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 170.449143][ T6742] should_fail+0x38c/0x4c0 [ 170.453584][ T6742] should_failslab+0x5/0x20 [ 170.458090][ T6742] slab_pre_alloc_hook+0x51/0xc0 [ 170.463013][ T6742] ? dst_alloc+0x101/0x160 [ 170.467435][ T6742] kmem_cache_alloc+0x3d/0x290 [ 170.472221][ T6742] dst_alloc+0x101/0x160 [ 170.476466][ T6742] ip_route_output_key_hash_rcu+0x15ee/0x24d0 [ 170.482536][ T6742] ip_route_output_key_hash+0x1c6/0x300 [ 170.488092][ T6742] ? ip_route_input_rcu+0x31d0/0x31d0 [ 170.493497][ T6742] ? crng_make_state+0x50c/0x670 [ 170.498568][ T6742] ? proc_do_uuid+0x2c0/0x2c0 [ 170.503262][ T6742] ip_route_output_flow+0x26/0x150 [ 170.508389][ T6742] sctp_v4_get_dst+0x385/0x1160 [ 170.513268][ T6742] ? sctp_v4_xmit+0xdf0/0xdf0 [ 170.517941][ T6742] ? lockdep_hardirqs_on+0x94/0x140 [ 170.523128][ T6742] sctp_transport_route+0x107/0x2b0 [ 170.528330][ T6742] sctp_assoc_add_peer+0x615/0x15a0 [ 170.533534][ T6742] sctp_connect_new_asoc+0x31f/0x6a0 [ 170.538807][ T6742] ? __sctp_connect+0xd80/0xd80 [ 170.543647][ T6742] ? __local_bh_enable_ip+0x136/0x1c0 [ 170.549002][ T6742] ? _local_bh_enable+0xa0/0xa0 [ 170.553937][ T6742] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 170.559560][ T6742] ? security_sctp_bind_connect+0x85/0xb0 [ 170.565269][ T6742] sctp_sendmsg+0x158d/0x2900 [ 170.569941][ T6742] ? lockdep_hardirqs_on+0x94/0x140 [ 170.575124][ T6742] ? sctp_getsockopt+0x8a0/0x8a0 [ 170.580044][ T6742] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 170.586201][ T6742] ? inet_sendmsg+0x178/0x2f0 [ 170.590863][ T6742] ? inet_sendmsg+0x78/0x2f0 [ 170.595450][ T6742] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 170.600724][ T6742] ? security_socket_sendmsg+0x7c/0xa0 [ 170.606172][ T6742] ? inet_send_prepare+0x260/0x260 [ 170.611479][ T6742] ____sys_sendmsg+0x5b7/0x8f0 [ 170.616231][ T6742] ? __import_iovec+0x388/0x490 [ 170.621064][ T6742] ? __sys_sendmsg_sock+0x30/0x30 [ 170.626256][ T6742] ? import_iovec+0x6f/0xa0 [ 170.630753][ T6742] ___sys_sendmsg+0x236/0x2e0 [ 170.635418][ T6742] ? __sys_sendmsg+0x2a0/0x2a0 [ 170.640168][ T6742] ? ktime_get_real_ts64+0x440/0x440 [ 170.645454][ T6742] __se_sys_sendmsg+0x1af/0x290 [ 170.650289][ T6742] ? __x64_sys_sendmsg+0x80/0x80 [ 170.655218][ T6742] ? syscall_enter_from_user_mode+0x2a/0x70 [ 170.661099][ T6742] do_syscall_64+0x4c/0xa0 [ 170.665506][ T6742] ? clear_bhb_loop+0x30/0x80 [ 170.670164][ T6742] ? clear_bhb_loop+0x30/0x80 [ 170.674820][ T6742] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.680718][ T6742] RIP: 0033:0x7f5b59774cb9 [ 170.685554][ T6742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.705342][ T6742] RSP: 002b:00007f5b579d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.713752][ T6742] RAX: ffffffffffffffda RBX: 00007f5b599effa0 RCX: 00007f5b59774cb9 [ 170.721711][ T6742] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000008 [ 170.729663][ T6742] RBP: 00007f5b579d0090 R08: 0000000000000000 R09: 0000000000000000 [ 170.737617][ T6742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.745569][ T6742] R13: 00007f5b599f0038 R14: 00007f5b599effa0 R15: 00007ffc7b72d358 [ 170.753536][ T6742] [ 170.844332][ T6757] netlink: 'syz.1.931': attribute type 39 has an invalid length. [ 173.015098][ T6781] netlink: 'syz.3.942': attribute type 10 has an invalid length. [ 173.050504][ T6781] team0: Device hsr_slave_0 failed to register rx_handler [ 173.182644][ T6787] netlink: 198364 bytes leftover after parsing attributes in process `syz.4.944'. [ 173.214130][ T6791] netlink: 'syz.3.946': attribute type 39 has an invalid length. [ 173.465060][ T6796] netlink: 'syz.0.947': attribute type 29 has an invalid length. [ 173.481334][ T6796] netlink: 'syz.0.947': attribute type 29 has an invalid length. [ 173.513274][ T6808] netlink: 'syz.0.947': attribute type 29 has an invalid length. [ 174.315918][ T3090] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 175.753766][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 175.753766][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 175.783949][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 175.790300][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 175.800494][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 176.725267][ T6821] FAULT_INJECTION: forcing a failure. [ 176.725267][ T6821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.809741][ T6821] CPU: 0 PID: 6821 Comm: syz.3.968 Not tainted syzkaller #0 [ 176.817073][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.827121][ T6821] Call Trace: [ 176.830394][ T6821] [ 176.833310][ T6821] dump_stack_lvl+0x188/0x250 [ 176.837979][ T6821] ? show_regs_print_info+0x20/0x20 [ 176.843162][ T6821] ? load_image+0x400/0x400 [ 176.847651][ T6821] ? __lock_acquire+0x7d10/0x7d10 [ 176.852655][ T6821] ? __lock_acquire+0x13bc/0x7d10 [ 176.857656][ T6821] ? trace_event_raw_event_lock+0x270/0x270 [ 176.863555][ T6821] should_fail+0x38c/0x4c0 [ 176.867989][ T6821] strncpy_from_user+0x32/0x360 [ 176.872826][ T6821] bpf_prog_load+0x1f0/0x1510 [ 176.877586][ T6821] ? map_freeze+0x350/0x350 [ 176.882072][ T6821] ? __might_fault+0xb7/0x110 [ 176.886832][ T6821] ? __might_fault+0xb3/0x110 [ 176.891493][ T6821] ? bpf_lsm_bpf+0x5/0x10 [ 176.895802][ T6821] ? security_bpf+0x7a/0xa0 [ 176.900374][ T6821] __sys_bpf+0x532/0x6f0 [ 176.904607][ T6821] ? bpf_link_show_fdinfo+0x380/0x380 [ 176.910056][ T6821] ? vtime_user_exit+0x2c8/0x3e0 [ 176.914986][ T6821] __x64_sys_bpf+0x78/0x90 [ 176.919384][ T6821] do_syscall_64+0x4c/0xa0 [ 176.923880][ T6821] ? clear_bhb_loop+0x30/0x80 [ 176.928566][ T6821] ? clear_bhb_loop+0x30/0x80 [ 176.933232][ T6821] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.939215][ T6821] RIP: 0033:0x7f8f6e565cb9 [ 176.943707][ T6821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.963557][ T6821] RSP: 002b:00007f8f6c7c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.971978][ T6821] RAX: ffffffffffffffda RBX: 00007f8f6e7e0fa0 RCX: 00007f8f6e565cb9 [ 176.979945][ T6821] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 176.987987][ T6821] RBP: 00007f8f6c7c1090 R08: 0000000000000000 R09: 0000000000000000 [ 176.995969][ T6821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.004012][ T6821] R13: 00007f8f6e7e1038 R14: 00007f8f6e7e0fa0 R15: 00007ffe0fe3d418 [ 177.011994][ T6821] [ 177.053126][ T6830] netlink: 'syz.4.958': attribute type 10 has an invalid length. [ 177.130413][ T6830] team0: Device hsr_slave_0 failed to register rx_handler [ 177.199956][ T6833] netlink: 'syz.1.961': attribute type 39 has an invalid length. [ 178.940908][ T6867] netlink: 72 bytes leftover after parsing attributes in process `syz.2.976'. [ 178.954428][ T6867] netlink: 149044 bytes leftover after parsing attributes in process `syz.2.976'. [ 180.034811][ T6874] netlink: 'syz.3.978': attribute type 10 has an invalid length. [ 180.121075][ T6874] team0: Device hsr_slave_0 failed to register rx_handler [ 180.496912][ T6891] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.985'. [ 180.662428][ T6903] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.991'. [ 181.005753][ T6914] netlink: 'syz.2.994': attribute type 10 has an invalid length. [ 181.052250][ T6914] team0: Device hsr_slave_0 failed to register rx_handler [ 183.823520][ T6923] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.998'. [ 183.907246][ T6933] netlink: 'syz.4.1003': attribute type 4 has an invalid length. [ 183.909044][ T6927] bridge0: port 2(bond0) entered blocking state [ 183.969528][ T6933] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1003'. [ 183.979938][ T6927] bridge0: port 2(bond0) entered disabled state [ 184.035591][ T6940] netlink: 'syz.1.1005': attribute type 39 has an invalid length. [ 184.076987][ T6943] raw_sendmsg: syz.4.1007 forgot to set AF_INET. Fix it! [ 184.095469][ T6944] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1006'. [ 184.230173][ T6950] netlink: 'syz.3.1009': attribute type 10 has an invalid length. [ 187.466992][ T6979] netlink: 'syz.1.1018': attribute type 4 has an invalid length. [ 187.478374][ T6979] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1018'. [ 187.900004][ T7003] netlink: 'syz.4.1028': attribute type 16 has an invalid length. [ 187.939084][ T7003] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1028'. [ 187.993062][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.106566][ T7013] netlink: 'syz.1.1033': attribute type 4 has an invalid length. [ 188.114561][ T7013] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1033'. [ 191.219282][ T7030] bridge0: port 2(bond0) entered blocking state [ 191.233803][ T7030] bridge0: port 2(bond0) entered disabled state [ 191.280809][ T7041] FAULT_INJECTION: forcing a failure. [ 191.280809][ T7041] name failslab, interval 1, probability 0, space 0, times 0 [ 191.298873][ T7041] CPU: 1 PID: 7041 Comm: syz.2.1042 Not tainted syzkaller #0 [ 191.306296][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.316357][ T7041] Call Trace: [ 191.319644][ T7041] [ 191.322577][ T7041] dump_stack_lvl+0x188/0x250 [ 191.327270][ T7041] ? show_regs_print_info+0x20/0x20 [ 191.332486][ T7041] ? load_image+0x400/0x400 [ 191.337009][ T7041] should_fail+0x38c/0x4c0 [ 191.341436][ T7041] should_failslab+0x5/0x20 [ 191.345948][ T7041] slab_pre_alloc_hook+0x51/0xc0 [ 191.350896][ T7041] ? skb_clone+0x1bd/0x350 [ 191.355321][ T7041] kmem_cache_alloc+0x3d/0x290 [ 191.360100][ T7041] skb_clone+0x1bd/0x350 [ 191.364362][ T7041] __netlink_deliver_tap+0x3cd/0x7c0 [ 191.369674][ T7041] netlink_deliver_tap+0x16c/0x180 [ 191.374815][ T7041] netlink_unicast+0x74f/0x920 [ 191.379601][ T7041] netlink_sendmsg+0x8ba/0xbe0 [ 191.384378][ T7041] ? netlink_getsockopt+0x570/0x570 [ 191.389602][ T7041] ? aa_sock_msg_perm+0x94/0x150 [ 191.394559][ T7041] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 191.399856][ T7041] ? security_socket_sendmsg+0x7c/0xa0 [ 191.405346][ T7041] ? netlink_getsockopt+0x570/0x570 [ 191.410553][ T7041] ____sys_sendmsg+0x5b7/0x8f0 [ 191.415341][ T7041] ? __sys_sendmsg_sock+0x30/0x30 [ 191.420383][ T7041] ? import_iovec+0x6f/0xa0 [ 191.424903][ T7041] ___sys_sendmsg+0x236/0x2e0 [ 191.429602][ T7041] ? __sys_sendmsg+0x2a0/0x2a0 [ 191.434387][ T7041] ? vfs_write+0x8b2/0xd60 [ 191.438838][ T7041] __se_sys_sendmsg+0x1af/0x290 [ 191.443707][ T7041] ? __x64_sys_sendmsg+0x80/0x80 [ 191.448652][ T7041] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 191.454652][ T7041] ? lockdep_hardirqs_on+0x94/0x140 [ 191.459866][ T7041] do_syscall_64+0x4c/0xa0 [ 191.464287][ T7041] ? clear_bhb_loop+0x30/0x80 [ 191.468966][ T7041] ? clear_bhb_loop+0x30/0x80 [ 191.473648][ T7041] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.479547][ T7041] RIP: 0033:0x7fa843c83cb9 [ 191.483973][ T7041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.503756][ T7041] RSP: 002b:00007fa841edf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.512207][ T7041] RAX: ffffffffffffffda RBX: 00007fa843efefa0 RCX: 00007fa843c83cb9 [ 191.520278][ T7041] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 191.528259][ T7041] RBP: 00007fa841edf090 R08: 0000000000000000 R09: 0000000000000000 [ 191.536247][ T7041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.544408][ T7041] R13: 00007fa843eff038 R14: 00007fa843efefa0 R15: 00007ffd7a4cdcf8 [ 191.552407][ T7041] [ 192.586138][ T7041] netlink: 'syz.2.1042': attribute type 16 has an invalid length. [ 192.602125][ T7041] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1042'. [ 192.613941][ T7041] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.791263][ T7061] netlink: 'syz.0.1050': attribute type 4 has an invalid length. [ 192.807718][ T7061] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1050'. [ 193.013062][ T7071] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1054'. [ 194.170272][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.176665][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.916658][ T7080] bridge0: port 3(bond0) entered blocking state [ 195.934363][ T7080] bridge0: port 3(bond0) entered disabled state [ 196.112228][ T7093] netlink: 'syz.4.1063': attribute type 4 has an invalid length. [ 196.120342][ T7093] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1063'. [ 196.297307][ T7102] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1065'. [ 198.569154][ T7115] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1070'. [ 198.824711][ T7128] netlink: 'syz.0.1075': attribute type 4 has an invalid length. [ 198.837923][ T7128] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1075'. [ 198.910920][ T7133] netlink: 'syz.4.1073': attribute type 10 has an invalid length. [ 198.990285][ T7133] team0: Device hsr_slave_0 failed to register rx_handler [ 199.104139][ T7142] netlink: 'syz.0.1090': attribute type 4 has an invalid length. [ 199.111996][ T7142] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1090'. [ 199.134982][ T7139] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1081'. [ 199.343192][ T7151] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1095'. [ 199.356087][ T7152] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1084'. [ 199.442324][ T7157] netlink: 'syz.0.1085': attribute type 10 has an invalid length. [ 199.451446][ T7157] team0: Device hsr_slave_0 failed to register rx_handler [ 199.716122][ T7173] netlink: 'syz.3.1094': attribute type 4 has an invalid length. [ 199.730576][ T7173] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1094'. [ 199.811950][ T7178] netlink: 'syz.4.1097': attribute type 25 has an invalid length. [ 199.827565][ T7178] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.1097'. [ 199.897349][ T7180] netlink: 'syz.0.1096': attribute type 10 has an invalid length. [ 199.931833][ T7180] team0: Device hsr_slave_0 failed to register rx_handler [ 200.178033][ T7190] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1101'. [ 200.621938][ T7211] netlink: 'syz.4.1110': attribute type 4 has an invalid length. [ 200.636629][ T7211] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1110'. [ 203.587340][ T7228] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1117'. [ 203.635206][ T7235] netlink: 'syz.2.1116': attribute type 10 has an invalid length. [ 203.681268][ T7235] team0: Device hsr_slave_0 failed to register rx_handler [ 203.804115][ T7242] netlink: 'syz.4.1122': attribute type 4 has an invalid length. [ 203.854815][ T7242] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1122'. [ 203.910318][ T7249] netlink: 'syz.0.1123': attribute type 10 has an invalid length. [ 203.958796][ T7249] team0: Device hsr_slave_0 failed to register rx_handler [ 204.315573][ T7272] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1135'. [ 204.362679][ T7276] netlink: 'syz.0.1137': attribute type 4 has an invalid length. [ 204.382949][ T7276] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1137'. [ 206.953750][ T1268] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 207.431501][ T7287] netlink: 'syz.1.1150': attribute type 10 has an invalid length. [ 207.469724][ T7296] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1152'. [ 207.584070][ T7301] netlink: 'syz.2.1143': attribute type 10 has an invalid length. [ 207.614069][ T7301] team0: Device hsr_slave_0 failed to register rx_handler [ 210.371562][ T7302] netlink: 'syz.3.1142': attribute type 10 has an invalid length. [ 210.418481][ T7302] team0: Device hsr_slave_0 failed to register rx_handler [ 210.550652][ T7319] netlink: 'syz.3.1149': attribute type 4 has an invalid length. [ 210.591100][ T7319] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1149'. [ 210.652321][ T7325] netlink: 'syz.1.1153': attribute type 10 has an invalid length. [ 210.716139][ T7325] team0: Device hsr_slave_0 failed to register rx_handler [ 210.756963][ T7330] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1157'. [ 211.178067][ T7359] netlink: 'syz.4.1167': attribute type 4 has an invalid length. [ 211.222385][ T7359] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1167'. [ 211.409844][ T7373] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1174'. [ 211.678254][ T7384] netlink: 'syz.4.1176': attribute type 10 has an invalid length. [ 211.719171][ T7384] team0: Device hsr_slave_0 failed to register rx_handler [ 211.836662][ T7391] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1181'. [ 211.980722][ T7397] netlink: 'syz.4.1184': attribute type 4 has an invalid length. [ 212.037798][ T7397] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1184'. [ 212.187369][ T7413] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1190'. [ 212.660597][ T7432] netlink: 'syz.1.1195': attribute type 10 has an invalid length. [ 212.736435][ T7432] team0: Device hsr_slave_0 failed to register rx_handler [ 212.857942][ T7437] netlink: 'syz.0.1199': attribute type 4 has an invalid length. [ 212.906530][ T7437] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1199'. [ 213.046634][ T7441] netlink: 'syz.3.1200': attribute type 10 has an invalid length. [ 213.249041][ T7443] netlink: 'syz.2.1201': attribute type 10 has an invalid length. [ 213.265525][ T7443] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1201'. [ 213.686176][ T7453] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1206'. [ 214.327679][ T7472] team0: Device hsr_slave_0 failed to register rx_handler [ 215.714104][ T7506] validate_nla: 4 callbacks suppressed [ 215.714120][ T7506] netlink: 'syz.1.1227': attribute type 4 has an invalid length. [ 215.760556][ T7506] __nla_validate_parse: 2 callbacks suppressed [ 215.760570][ T7506] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1227'. [ 216.089360][ T7520] netlink: 'syz.0.1230': attribute type 10 has an invalid length. [ 216.146897][ T7520] team0: Device hsr_slave_0 failed to register rx_handler [ 216.388174][ T7523] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1234'. [ 216.514133][ T7525] netlink: 'syz.2.1235': attribute type 10 has an invalid length. [ 216.855335][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 217.007766][ T7531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.215923][ T7544] netlink: 'syz.3.1241': attribute type 4 has an invalid length. [ 217.274596][ T7544] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1241'. [ 217.567408][ T7550] netlink: 'syz.0.1243': attribute type 10 has an invalid length. [ 218.110248][ T7568] netlink: 'syz.2.1248': attribute type 10 has an invalid length. [ 218.170322][ T7568] team0: Device hsr_slave_0 failed to register rx_handler [ 218.439629][ T7574] netlink: 'syz.1.1252': attribute type 10 has an invalid length. [ 218.829495][ T7581] netlink: 'syz.0.1254': attribute type 10 has an invalid length. [ 218.841261][ T7581] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1254'. [ 219.219190][ T7586] netlink: 'syz.2.1256': attribute type 4 has an invalid length. [ 219.255735][ T7586] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1256'. [ 219.567448][ T7598] netlink: 'syz.1.1260': attribute type 10 has an invalid length. [ 220.077297][ T7612] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1267'. [ 220.147829][ T7611] delete_channel: no stack [ 220.308178][ T7621] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1270'. [ 220.587068][ T7629] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1283'. [ 221.143336][ T7640] FAULT_INJECTION: forcing a failure. [ 221.143336][ T7640] name failslab, interval 1, probability 0, space 0, times 0 [ 221.194872][ T7640] CPU: 0 PID: 7640 Comm: syz.1.1277 Not tainted syzkaller #0 [ 221.202401][ T7640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 221.212605][ T7640] Call Trace: [ 221.215920][ T7640] [ 221.218871][ T7640] dump_stack_lvl+0x188/0x250 [ 221.223591][ T7640] ? show_regs_print_info+0x20/0x20 [ 221.228832][ T7640] ? load_image+0x400/0x400 [ 221.233386][ T7640] ? __might_sleep+0xf0/0xf0 [ 221.238018][ T7640] ? __lock_acquire+0x7d10/0x7d10 [ 221.243091][ T7640] ? netlink_insert+0xe95/0x11f0 [ 221.248086][ T7640] should_fail+0x38c/0x4c0 [ 221.252569][ T7640] should_failslab+0x5/0x20 [ 221.257104][ T7640] slab_pre_alloc_hook+0x51/0xc0 [ 221.262097][ T7640] kmem_cache_alloc_node+0x47/0x2d0 [ 221.267327][ T7640] ? __alloc_skb+0xf4/0x750 [ 221.271895][ T7640] __alloc_skb+0xf4/0x750 [ 221.276282][ T7640] netlink_sendmsg+0x654/0xbe0 [ 221.281122][ T7640] ? netlink_getsockopt+0x570/0x570 [ 221.286376][ T7640] ? aa_sock_msg_perm+0x94/0x150 [ 221.291378][ T7640] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 221.296700][ T7640] ? security_socket_sendmsg+0x7c/0xa0 [ 221.302212][ T7640] ? netlink_getsockopt+0x570/0x570 [ 221.307445][ T7640] ____sys_sendmsg+0x5b7/0x8f0 [ 221.312289][ T7640] ? __sys_sendmsg_sock+0x30/0x30 [ 221.317384][ T7640] ? import_iovec+0x6f/0xa0 [ 221.321930][ T7640] ___sys_sendmsg+0x236/0x2e0 [ 221.326667][ T7640] ? __sys_sendmsg+0x2a0/0x2a0 [ 221.331509][ T7640] ? trace_event_raw_event_lock+0x270/0x270 [ 221.337430][ T7640] ? vfs_write+0x8b2/0xd60 [ 221.342063][ T7640] __se_sys_sendmsg+0x1af/0x290 [ 221.347036][ T7640] ? __x64_sys_sendmsg+0x80/0x80 [ 221.351983][ T7640] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 221.358047][ T7640] ? lockdep_hardirqs_on+0x94/0x140 [ 221.363289][ T7640] do_syscall_64+0x4c/0xa0 [ 221.367733][ T7640] ? clear_bhb_loop+0x30/0x80 [ 221.372430][ T7640] ? clear_bhb_loop+0x30/0x80 [ 221.377137][ T7640] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.383041][ T7640] RIP: 0033:0x7f3ff10a4cb9 [ 221.387476][ T7640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.407101][ T7640] RSP: 002b:00007f3fef300028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.415562][ T7640] RAX: ffffffffffffffda RBX: 00007f3ff131ffa0 RCX: 00007f3ff10a4cb9 [ 221.423554][ T7640] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 000000000000000a [ 221.431563][ T7640] RBP: 00007f3fef300090 R08: 0000000000000000 R09: 0000000000000000 [ 221.439558][ T7640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.447554][ T7640] R13: 00007f3ff1320038 R14: 00007f3ff131ffa0 R15: 00007ffd8870e428 [ 221.455620][ T7640] [ 221.925533][ T7656] validate_nla: 3 callbacks suppressed [ 221.925549][ T7656] netlink: 'syz.2.1285': attribute type 16 has an invalid length. [ 221.953814][ T7656] netlink: 'syz.2.1285': attribute type 3 has an invalid length. [ 221.962488][ T7656] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1285'. [ 221.996983][ T7655] delete_channel: no stack [ 222.114433][ T7663] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1287'. [ 223.120458][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 223.189699][ T7680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.256136][ T7685] netlink: 'syz.1.1292': attribute type 10 has an invalid length. [ 223.728596][ T7699] netlink: 'syz.0.1299': attribute type 10 has an invalid length. [ 223.743953][ T7699] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1299'. [ 223.831897][ T7704] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1301'. [ 224.029624][ T7720] FAULT_INJECTION: forcing a failure. [ 224.029624][ T7720] name failslab, interval 1, probability 0, space 0, times 0 [ 224.057024][ T7720] CPU: 1 PID: 7720 Comm: syz.3.1308 Not tainted syzkaller #0 [ 224.064545][ T7720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.074625][ T7720] Call Trace: [ 224.077922][ T7720] [ 224.080860][ T7720] dump_stack_lvl+0x188/0x250 [ 224.085603][ T7720] ? show_regs_print_info+0x20/0x20 [ 224.090837][ T7720] ? load_image+0x400/0x400 [ 224.095375][ T7720] ? __might_sleep+0xf0/0xf0 [ 224.099994][ T7720] ? __lock_acquire+0x7d10/0x7d10 [ 224.105060][ T7720] should_fail+0x38c/0x4c0 [ 224.109520][ T7720] should_failslab+0x5/0x20 [ 224.114043][ T7720] slab_pre_alloc_hook+0x51/0xc0 [ 224.119003][ T7720] __kmalloc_node_track_caller+0x68/0x3a0 [ 224.124729][ T7720] ? netlink_sendmsg+0x654/0xbe0 [ 224.129668][ T7720] ? kmem_cache_alloc_node+0x162/0x2d0 [ 224.135134][ T7720] ? __alloc_skb+0xf4/0x750 [ 224.139667][ T7720] ? netlink_sendmsg+0x654/0xbe0 [ 224.144728][ T7720] __alloc_skb+0x22c/0x750 [ 224.149197][ T7720] netlink_sendmsg+0x654/0xbe0 [ 224.154006][ T7720] ? netlink_getsockopt+0x570/0x570 [ 224.159256][ T7720] ? netlink_getsockopt+0x570/0x570 [ 224.164479][ T7720] ____sys_sendmsg+0x5b7/0x8f0 [ 224.169299][ T7720] ? __sys_sendmsg_sock+0x30/0x30 [ 224.174367][ T7720] ? import_iovec+0x6f/0xa0 [ 224.178899][ T7720] ___sys_sendmsg+0x236/0x2e0 [ 224.183620][ T7720] ? __sys_sendmsg+0x2a0/0x2a0 [ 224.188505][ T7720] __se_sys_sendmsg+0x1af/0x290 [ 224.193393][ T7720] ? __x64_sys_sendmsg+0x80/0x80 [ 224.198359][ T7720] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 224.204397][ T7720] ? lockdep_hardirqs_on+0x94/0x140 [ 224.209631][ T7720] do_syscall_64+0x4c/0xa0 [ 224.214071][ T7720] ? clear_bhb_loop+0x30/0x80 [ 224.218773][ T7720] ? clear_bhb_loop+0x30/0x80 [ 224.223537][ T7720] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.229542][ T7720] RIP: 0033:0x7f8f6e565cb9 [ 224.233980][ T7720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.253606][ T7720] RSP: 002b:00007f8f6c7c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.262045][ T7720] RAX: ffffffffffffffda RBX: 00007f8f6e7e0fa0 RCX: 00007f8f6e565cb9 [ 224.270035][ T7720] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 224.278035][ T7720] RBP: 00007f8f6c7c1090 R08: 0000000000000000 R09: 0000000000000000 [ 224.286021][ T7720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.294004][ T7720] R13: 00007f8f6e7e1038 R14: 00007f8f6e7e0fa0 R15: 00007ffe0fe3d418 [ 224.302035][ T7720] [ 224.726810][ T7748] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1318'. [ 224.831367][ T7753] netlink: 'syz.1.1317': attribute type 10 has an invalid length. [ 224.915655][ T7753] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1317'. [ 225.621932][ T7798] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1335'. [ 225.721474][ T7800] FAULT_INJECTION: forcing a failure. [ 225.721474][ T7800] name failslab, interval 1, probability 0, space 0, times 0 [ 225.746910][ T7800] CPU: 0 PID: 7800 Comm: syz.0.1338 Not tainted syzkaller #0 [ 225.754332][ T7800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.764483][ T7800] Call Trace: [ 225.767769][ T7800] [ 225.770705][ T7800] dump_stack_lvl+0x188/0x250 [ 225.775396][ T7800] ? show_regs_print_info+0x20/0x20 [ 225.780734][ T7800] ? load_image+0x400/0x400 [ 225.785262][ T7800] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 225.791270][ T7800] ? lock_chain_count+0x20/0x20 [ 225.791570][ T7808] netlink: 'syz.3.1340': attribute type 16 has an invalid length. [ 225.796297][ T7800] should_fail+0x38c/0x4c0 [ 225.796341][ T7800] should_failslab+0x5/0x20 [ 225.796357][ T7800] slab_pre_alloc_hook+0x51/0xc0 [ 225.817979][ T7800] ? skb_clone+0x1bd/0x350 [ 225.822411][ T7800] kmem_cache_alloc+0x3d/0x290 [ 225.827189][ T7800] skb_clone+0x1bd/0x350 [ 225.831447][ T7800] bpf_clone_redirect+0xa9/0x390 [ 225.836409][ T7800] bpf_prog_39bf9e0015142c8c+0x19/0x370 [ 225.841965][ T7800] bpf_test_run+0x4ae/0x800 [ 225.843297][ T7808] netlink: 'syz.3.1340': attribute type 3 has an invalid length. [ 225.846494][ T7800] ? convert___skb_to_skb+0x4c0/0x4c0 [ 225.846522][ T7800] ? eth_get_headlen+0x200/0x200 [ 225.846537][ T7800] ? __build_skb+0x1e2/0x2e0 [ 225.846556][ T7800] ? convert___skb_to_skb+0x3d/0x4c0 [ 225.846573][ T7800] bpf_prog_test_run_skb+0x9cc/0x1180 [ 225.846602][ T7800] ? cpu_online+0x60/0x60 [ 225.846616][ T7800] bpf_prog_test_run+0x31e/0x390 [ 225.846638][ T7800] __sys_bpf+0x5a5/0x6f0 [ 225.846657][ T7800] ? bpf_link_show_fdinfo+0x380/0x380 [ 225.846682][ T7800] ? vtime_user_exit+0x2c8/0x3e0 [ 225.877267][ T7808] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1340'. [ 225.879873][ T7800] __x64_sys_bpf+0x78/0x90 [ 225.879902][ T7800] do_syscall_64+0x4c/0xa0 [ 225.921474][ T7800] ? clear_bhb_loop+0x30/0x80 [ 225.926165][ T7800] ? clear_bhb_loop+0x30/0x80 [ 225.930869][ T7800] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 225.936790][ T7800] RIP: 0033:0x7f81b0394cb9 [ 225.941220][ T7800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.960848][ T7800] RSP: 002b:00007f81ae5f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.969281][ T7800] RAX: ffffffffffffffda RBX: 00007f81b060ffa0 RCX: 00007f81b0394cb9 [ 225.977270][ T7800] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 225.985260][ T7800] RBP: 00007f81ae5f0090 R08: 0000000000000000 R09: 0000000000000000 [ 225.993244][ T7800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.001227][ T7800] R13: 00007f81b0610038 R14: 00007f81b060ffa0 R15: 00007ffc2f8c4c68 [ 226.009355][ T7800] [ 226.570434][ T7806] delete_channel: no stack [ 228.853932][ T7816] netlink: 13566 bytes leftover after parsing attributes in process `syz.0.1344'. [ 228.949686][ T7824] netlink: 'syz.1.1342': attribute type 21 has an invalid length. [ 228.994166][ T7824] netlink: 'syz.1.1342': attribute type 6 has an invalid length. [ 229.015906][ T7824] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1342'. [ 233.881345][ T7852] netlink: 'syz.3.1357': attribute type 4 has an invalid length. [ 233.931820][ T7852] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1357'. [ 234.589045][ T7875] netlink: 'syz.4.1365': attribute type 16 has an invalid length. [ 234.641225][ T7875] netlink: 'syz.4.1365': attribute type 3 has an invalid length. [ 234.658269][ T7875] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1365'. [ 234.668269][ T7882] netlink: 'syz.2.1364': attribute type 10 has an invalid length. [ 234.685524][ T7874] delete_channel: no stack [ 234.722400][ T7882] team0: Device hsr_slave_0 failed to register rx_handler [ 234.819081][ T7885] netlink: 'syz.3.1366': attribute type 10 has an invalid length. [ 234.925121][ T7892] netlink: 'syz.1.1371': attribute type 4 has an invalid length. [ 234.938967][ T7892] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1371'. [ 236.404174][ T7906] netlink: 'syz.0.1375': attribute type 10 has an invalid length. [ 237.139726][ T7909] netlink: 'syz.2.1377': attribute type 10 has an invalid length. [ 237.521708][ T7929] netlink: 'syz.4.1383': attribute type 16 has an invalid length. [ 237.557805][ T7929] netlink: 'syz.4.1383': attribute type 3 has an invalid length. [ 237.607129][ T7929] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1383'. [ 237.660739][ T7926] delete_channel: no stack [ 237.723282][ T7937] netlink: 'syz.2.1388': attribute type 16 has an invalid length. [ 237.738271][ T7937] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1388'. [ 237.753133][ T7934] delete_channel: no stack [ 237.816002][ T7939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.923719][ T7954] validate_nla: 2 callbacks suppressed [ 239.923735][ T7954] netlink: 'syz.3.1395': attribute type 21 has an invalid length. [ 239.938807][ T7954] netlink: 'syz.3.1395': attribute type 6 has an invalid length. [ 239.947313][ T7954] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1395'. [ 239.962144][ T7960] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1396'. [ 240.186719][ T7970] netlink: 'syz.4.1400': attribute type 16 has an invalid length. [ 240.224687][ T7970] netlink: 'syz.4.1400': attribute type 3 has an invalid length. [ 240.230264][ T7969] delete_channel: no stack [ 240.236232][ T7970] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1400'. [ 240.276021][ T7967] delete_channel: no stack [ 240.679241][ T7987] netlink: 'syz.4.1406': attribute type 10 has an invalid length. [ 240.884051][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 243.729324][ T8007] delete_channel: no stack [ 243.785794][ T8011] netlink: 'syz.0.1417': attribute type 16 has an invalid length. [ 243.814943][ T8011] netlink: 'syz.0.1417': attribute type 3 has an invalid length. [ 243.825571][ T8011] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1417'. [ 243.870433][ T8009] delete_channel: no stack [ 244.086931][ T8027] netlink: 'syz.0.1422': attribute type 10 has an invalid length. [ 244.097116][ T8028] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1424'. [ 246.691822][ T8045] delete_channel: no stack [ 246.712067][ T8049] netlink: 'syz.0.1432': attribute type 10 has an invalid length. [ 246.829558][ T8055] netlink: 'syz.1.1433': attribute type 16 has an invalid length. [ 246.856417][ T8055] netlink: 'syz.1.1433': attribute type 3 has an invalid length. [ 246.868288][ T8055] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1433'. [ 246.894326][ T8054] delete_channel: no stack [ 247.021147][ T8071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.031644][ T8067] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1438'. [ 247.320384][ T8081] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1443'. [ 249.631211][ T8085] delete_channel: no stack [ 249.836154][ T8091] netlink: 'syz.2.1447': attribute type 10 has an invalid length. [ 249.965937][ T8101] netlink: 'syz.4.1451': attribute type 16 has an invalid length. [ 250.024013][ T8101] netlink: 'syz.4.1451': attribute type 3 has an invalid length. [ 250.063948][ T8101] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1451'. [ 250.107123][ T8099] delete_channel: no stack [ 250.284641][ T8113] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1456'. [ 250.289966][ T8116] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1457'. [ 252.136838][ T8119] delete_channel: no stack [ 252.203668][ T8127] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1459'. [ 252.365532][ T8135] netlink: 'syz.0.1465': attribute type 16 has an invalid length. [ 252.382022][ T8135] netlink: 'syz.0.1465': attribute type 3 has an invalid length. [ 252.390582][ T8135] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1465'. [ 252.405174][ T8133] delete_channel: no stack [ 252.572231][ T8142] netlink: 'syz.4.1468': attribute type 10 has an invalid length. [ 252.640307][ T8145] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1470'. [ 252.690621][ T8149] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1471'. [ 252.980635][ T8160] netlink: 'syz.0.1475': attribute type 10 has an invalid length. [ 253.003905][ T8159] delete_channel: no stack [ 253.053293][ T8160] team0: Device hsr_slave_0 failed to register rx_handler [ 255.605471][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.611985][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.128915][ T8178] netlink: 'syz.3.1481': attribute type 16 has an invalid length. [ 256.138919][ T8178] netlink: 'syz.3.1481': attribute type 3 has an invalid length. [ 256.149575][ T8178] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1481'. [ 256.389928][ T8187] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1484'. [ 256.452834][ T8193] netlink: 'syz.4.1486': attribute type 21 has an invalid length. [ 256.519987][ T8193] netlink: 'syz.4.1486': attribute type 6 has an invalid length. [ 256.539276][ T8193] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1486'. [ 258.011604][ T8223] netlink: 'syz.1.1498': attribute type 16 has an invalid length. [ 258.028707][ T8223] netlink: 'syz.1.1498': attribute type 3 has an invalid length. [ 258.039791][ T8223] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1498'. [ 258.049821][ T8225] netlink: 'syz.4.1499': attribute type 16 has an invalid length. [ 258.058805][ T8225] netlink: 'syz.4.1499': attribute type 3 has an invalid length. [ 258.072993][ T8222] delete_channel: no stack [ 258.081305][ T8225] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1499'. [ 258.270140][ T8233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.460612][ T8264] netlink: 'syz.3.1510': attribute type 10 has an invalid length. [ 260.487929][ T8264] team0: Device hsr_slave_0 failed to register rx_handler [ 260.502490][ T8267] netlink: 'syz.4.1514': attribute type 16 has an invalid length. [ 260.542413][ T8267] netlink: 'syz.4.1514': attribute type 3 has an invalid length. [ 260.578022][ T8267] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1514'. [ 260.591814][ T8270] netlink: 'syz.1.1516': attribute type 16 has an invalid length. [ 260.609576][ T8266] delete_channel: no stack [ 260.617725][ T8270] netlink: 'syz.1.1516': attribute type 3 has an invalid length. [ 260.625805][ T8270] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1516'. [ 260.836355][ T8283] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1521'. [ 261.083361][ T8293] netlink: 'syz.3.1525': attribute type 39 has an invalid length. [ 262.982065][ T8297] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1530'. [ 262.993503][ T8302] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1529'. [ 263.051792][ T8300] delete_channel: no stack [ 263.297269][ T8315] validate_nla: 4 callbacks suppressed [ 263.297284][ T8315] netlink: 'syz.2.1533': attribute type 21 has an invalid length. [ 263.310760][ T8315] netlink: 'syz.2.1533': attribute type 6 has an invalid length. [ 263.318582][ T8315] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1533'. [ 263.483207][ T8325] netlink: 'syz.2.1535': attribute type 10 has an invalid length. [ 263.498345][ T8325] team0: Device hsr_slave_0 failed to register rx_handler [ 263.561249][ T8326] netlink: 'syz.4.1540': attribute type 21 has an invalid length. [ 263.571804][ T8326] netlink: 'syz.4.1540': attribute type 6 has an invalid length. [ 263.595156][ T8326] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1540'. [ 263.717154][ T8334] netlink: 'syz.3.1541': attribute type 39 has an invalid length. [ 263.743077][ T8336] netlink: 'syz.0.1543': attribute type 16 has an invalid length. [ 263.752963][ T8336] netlink: 'syz.0.1543': attribute type 3 has an invalid length. [ 263.773742][ T8336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1543'. [ 263.784391][ T8338] netlink: 'syz.2.1544': attribute type 16 has an invalid length. [ 263.787857][ T8335] delete_channel: no stack [ 263.792419][ T8338] netlink: 'syz.2.1544': attribute type 3 has an invalid length. [ 263.805269][ T8338] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1544'. [ 264.010435][ T8346] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1547'. [ 266.976026][ T8351] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1551'. [ 267.085475][ T8365] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1554'. [ 267.332766][ T8376] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1560'. [ 267.402155][ T8375] delete_channel: no stack [ 267.559362][ T8391] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1568'. [ 270.145354][ T8413] validate_nla: 9 callbacks suppressed [ 270.145369][ T8413] netlink: 'syz.3.1574': attribute type 21 has an invalid length. [ 270.168674][ T8413] netlink: 'syz.3.1574': attribute type 6 has an invalid length. [ 270.179399][ T8413] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1574'. [ 270.255927][ T8423] netlink: 'syz.2.1578': attribute type 16 has an invalid length. [ 270.264304][ T8423] netlink: 'syz.2.1578': attribute type 3 has an invalid length. [ 270.272171][ T8423] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1578'. [ 270.294608][ T8415] delete_channel: no stack [ 270.548386][ T8437] netlink: 'syz.2.1585': attribute type 10 has an invalid length. [ 270.597462][ T8436] netlink: 'syz.3.1586': attribute type 21 has an invalid length. [ 270.619792][ T8436] netlink: 'syz.3.1586': attribute type 6 has an invalid length. [ 270.638711][ T8436] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1586'. [ 273.706103][ T8458] netlink: 'syz.2.1593': attribute type 16 has an invalid length. [ 273.740856][ T8458] netlink: 'syz.2.1593': attribute type 3 has an invalid length. [ 273.759288][ T8458] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1593'. [ 273.791121][ T8464] netlink: 'syz.0.1596': attribute type 21 has an invalid length. [ 273.799442][ T8457] delete_channel: no stack [ 273.828150][ T8464] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1596'. [ 273.911780][ T8472] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1601'. [ 274.155251][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 277.160858][ T8489] validate_nla: 4 callbacks suppressed [ 277.160924][ T8489] netlink: 'syz.0.1616': attribute type 10 has an invalid length. [ 277.727637][ T8511] netlink: 'syz.3.1611': attribute type 16 has an invalid length. [ 277.806736][ T8511] netlink: 'syz.3.1611': attribute type 3 has an invalid length. [ 277.843734][ T8511] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1611'. [ 278.491323][ T8509] delete_channel: no stack [ 280.230119][ T8520] netlink: 'syz.2.1613': attribute type 21 has an invalid length. [ 280.269250][ T8520] netlink: 'syz.2.1613': attribute type 6 has an invalid length. [ 280.300416][ T8520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1613'. [ 281.975393][ T8539] netlink: 'syz.1.1628': attribute type 10 has an invalid length. [ 282.010404][ T8536] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1618'. [ 282.032779][ T8539] team0: Device hsr_slave_0 failed to register rx_handler [ 284.963803][ T8545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.168752][ T8558] netlink: 'syz.1.1623': attribute type 10 has an invalid length. [ 285.254523][ T8558] team0: Device hsr_slave_0 failed to register rx_handler [ 285.271338][ T8560] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1629'. [ 285.312040][ T8556] netlink: 'syz.2.1627': attribute type 10 has an invalid length. [ 285.584708][ T8570] netlink: 'syz.0.1632': attribute type 21 has an invalid length. [ 285.625020][ T8570] netlink: 'syz.0.1632': attribute type 6 has an invalid length. [ 285.632803][ T8570] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1632'. [ 285.925657][ T8578] netlink: 'syz.0.1635': attribute type 10 has an invalid length. [ 285.964802][ T8578] team0: Device hsr_slave_0 failed to register rx_handler [ 289.216040][ T8610] netlink: 'syz.4.1647': attribute type 21 has an invalid length. [ 289.242674][ T8610] netlink: 'syz.4.1647': attribute type 6 has an invalid length. [ 289.277212][ T8610] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1647'. [ 289.307841][ T8613] FAULT_INJECTION: forcing a failure. [ 289.307841][ T8613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.333645][ T8613] CPU: 0 PID: 8613 Comm: syz.2.1649 Not tainted syzkaller #0 [ 289.341164][ T8613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.351234][ T8613] Call Trace: [ 289.354520][ T8613] [ 289.357462][ T8613] dump_stack_lvl+0x188/0x250 [ 289.362164][ T8613] ? show_regs_print_info+0x20/0x20 [ 289.367384][ T8613] ? load_image+0x400/0x400 [ 289.372060][ T8613] ? __lock_acquire+0x7d10/0x7d10 [ 289.377114][ T8613] should_fail+0x38c/0x4c0 [ 289.381557][ T8613] _copy_to_user+0x2e/0x130 [ 289.386097][ T8613] simple_read_from_buffer+0xe3/0x150 [ 289.391494][ T8613] proc_fail_nth_read+0x1a6/0x220 [ 289.396542][ T8613] ? proc_fault_inject_write+0x310/0x310 [ 289.402198][ T8613] ? fsnotify_perm+0x254/0x560 [ 289.407032][ T8613] ? proc_fault_inject_write+0x310/0x310 [ 289.412698][ T8613] vfs_read+0x301/0xd60 [ 289.416909][ T8613] ? kernel_read+0x1e0/0x1e0 [ 289.421523][ T8613] ? __fget_files+0x40f/0x480 [ 289.426219][ T8613] ? mutex_lock_nested+0x17/0x20 [ 289.431173][ T8613] ? __fdget_pos+0x2bf/0x370 [ 289.435769][ T8613] ? ksys_read+0x71/0x260 [ 289.440105][ T8613] ksys_read+0x152/0x260 [ 289.444357][ T8613] ? vfs_write+0xd60/0xd60 [ 289.448781][ T8613] ? lockdep_hardirqs_on+0x94/0x140 [ 289.454000][ T8613] do_syscall_64+0x4c/0xa0 [ 289.458428][ T8613] ? clear_bhb_loop+0x30/0x80 [ 289.463115][ T8613] ? clear_bhb_loop+0x30/0x80 [ 289.467824][ T8613] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 289.473955][ T8613] RIP: 0033:0x7fa843c4458e [ 289.478366][ T8613] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 289.497968][ T8613] RSP: 002b:00007fa841edefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 289.506378][ T8613] RAX: ffffffffffffffda RBX: 00007fa841edf6c0 RCX: 00007fa843c4458e [ 289.514428][ T8613] RDX: 000000000000000f RSI: 00007fa841edf0a0 RDI: 0000000000000005 [ 289.522496][ T8613] RBP: 00007fa841edf090 R08: 0000000000000000 R09: 0000000000000000 [ 289.530948][ T8613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.538975][ T8613] R13: 00007fa843eff038 R14: 00007fa843efefa0 R15: 00007ffd7a4cdcf8 [ 289.546973][ T8613] [ 289.587180][ T8627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.621609][ T8630] netlink: 'syz.1.1655': attribute type 10 has an invalid length. [ 292.901093][ T8657] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1665'. [ 292.977811][ T8662] netlink: 'syz.0.1667': attribute type 2 has an invalid length. [ 292.987477][ T8662] netlink: 'syz.0.1667': attribute type 8 has an invalid length. [ 292.995854][ T8662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1667'. [ 293.009588][ T8662] netlink: 'syz.0.1667': attribute type 2 has an invalid length. [ 293.020438][ T8662] netlink: 'syz.0.1667': attribute type 8 has an invalid length. [ 293.057913][ T8662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1667'. [ 293.083297][ T8655] netlink: 'syz.1.1664': attribute type 10 has an invalid length. [ 293.107612][ T8664] netlink: 'syz.3.1668': attribute type 21 has an invalid length. [ 293.144061][ T8664] netlink: 'syz.3.1668': attribute type 6 has an invalid length. [ 293.159333][ T8664] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1668'. [ 293.180869][ T8662] netlink: 'syz.0.1667': attribute type 2 has an invalid length. [ 293.195829][ T8662] netlink: 'syz.0.1667': attribute type 8 has an invalid length. [ 293.224024][ T8662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1667'. [ 293.249081][ T8662] netlink: 'syz.0.1667': attribute type 2 has an invalid length. [ 293.286334][ T8662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1667'. [ 293.329439][ T8662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1667'. [ 293.364043][ T8662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1667'. [ 293.394318][ T8662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1667'. [ 293.413879][ T8662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1667'. [ 296.205718][ T8688] FAULT_INJECTION: forcing a failure. [ 296.205718][ T8688] name failslab, interval 1, probability 0, space 0, times 0 [ 296.227196][ T8688] CPU: 1 PID: 8688 Comm: syz.3.1676 Not tainted syzkaller #0 [ 296.234728][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 296.244787][ T8688] Call Trace: [ 296.248061][ T8688] [ 296.250982][ T8688] dump_stack_lvl+0x188/0x250 [ 296.255653][ T8688] ? show_regs_print_info+0x20/0x20 [ 296.260936][ T8688] ? load_image+0x400/0x400 [ 296.265439][ T8688] ? __might_sleep+0xf0/0xf0 [ 296.270007][ T8688] ? __lock_acquire+0x7d10/0x7d10 [ 296.275014][ T8688] should_fail+0x38c/0x4c0 [ 296.279422][ T8688] should_failslab+0x5/0x20 [ 296.283903][ T8688] slab_pre_alloc_hook+0x51/0xc0 [ 296.288819][ T8688] kmem_cache_alloc_node+0x47/0x2d0 [ 296.294111][ T8688] ? __alloc_skb+0xf4/0x750 [ 296.298598][ T8688] __alloc_skb+0xf4/0x750 [ 296.302910][ T8688] pfkey_sendmsg+0x1a4/0x1080 [ 296.307567][ T8688] ? __lock_acquire+0x12e8/0x7d10 [ 296.312577][ T8688] ? verify_lock_unused+0x140/0x140 [ 296.317756][ T8688] ? __might_sleep+0xf0/0xf0 [ 296.322331][ T8688] ? pfkey_release+0x310/0x310 [ 296.327085][ T8688] ? aa_sk_perm+0x7dc/0x910 [ 296.331661][ T8688] ? aa_af_perm+0x340/0x340 [ 296.336140][ T8688] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 296.342540][ T8688] ? aa_sock_msg_perm+0x94/0x150 [ 296.347457][ T8688] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 296.352721][ T8688] ? security_socket_sendmsg+0x7c/0xa0 [ 296.358157][ T8688] ? pfkey_release+0x310/0x310 [ 296.362902][ T8688] ____sys_sendmsg+0x5b7/0x8f0 [ 296.367674][ T8688] ? __sys_sendmsg_sock+0x30/0x30 [ 296.372818][ T8688] ? import_iovec+0x6f/0xa0 [ 296.377355][ T8688] ___sys_sendmsg+0x236/0x2e0 [ 296.382132][ T8688] ? __sys_sendmsg+0x2a0/0x2a0 [ 296.386886][ T8688] ? vfs_write+0x8b2/0xd60 [ 296.391301][ T8688] __se_sys_sendmsg+0x1af/0x290 [ 296.396136][ T8688] ? __x64_sys_sendmsg+0x80/0x80 [ 296.401055][ T8688] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 296.407028][ T8688] ? lockdep_hardirqs_on+0x94/0x140 [ 296.412218][ T8688] do_syscall_64+0x4c/0xa0 [ 296.416612][ T8688] ? clear_bhb_loop+0x30/0x80 [ 296.421270][ T8688] ? clear_bhb_loop+0x30/0x80 [ 296.425928][ T8688] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.431802][ T8688] RIP: 0033:0x7f8f6e565cb9 [ 296.436201][ T8688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.455795][ T8688] RSP: 002b:00007f8f6c7c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.464200][ T8688] RAX: ffffffffffffffda RBX: 00007f8f6e7e0fa0 RCX: 00007f8f6e565cb9 [ 296.472155][ T8688] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000006 [ 296.480118][ T8688] RBP: 00007f8f6c7c1090 R08: 0000000000000000 R09: 0000000000000000 [ 296.488164][ T8688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.496119][ T8688] R13: 00007f8f6e7e1038 R14: 00007f8f6e7e0fa0 R15: 00007ffe0fe3d418 [ 296.504112][ T8688] [ 296.848814][ T8708] team0: Device hsr_slave_0 failed to register rx_handler [ 297.734835][ T8747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.440665][ T8756] FAULT_INJECTION: forcing a failure. [ 300.440665][ T8756] name failslab, interval 1, probability 0, space 0, times 0 [ 300.456708][ T8756] CPU: 1 PID: 8756 Comm: syz.0.1702 Not tainted syzkaller #0 [ 300.464137][ T8756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.474237][ T8756] Call Trace: [ 300.477527][ T8756] [ 300.480460][ T8756] dump_stack_lvl+0x188/0x250 [ 300.485160][ T8756] ? show_regs_print_info+0x20/0x20 [ 300.490374][ T8756] ? load_image+0x400/0x400 [ 300.494897][ T8756] ? __might_sleep+0xf0/0xf0 [ 300.499510][ T8756] ? __lock_acquire+0x7d10/0x7d10 [ 300.504558][ T8756] should_fail+0x38c/0x4c0 [ 300.508994][ T8756] should_failslab+0x5/0x20 [ 300.513518][ T8756] slab_pre_alloc_hook+0x51/0xc0 [ 300.518478][ T8756] kmem_cache_alloc_node+0x47/0x2d0 [ 300.523677][ T8756] ? __alloc_skb+0xf4/0x750 [ 300.528170][ T8756] __alloc_skb+0xf4/0x750 [ 300.532521][ T8756] netlink_sendmsg+0x654/0xbe0 [ 300.537273][ T8756] ? netlink_getsockopt+0x570/0x570 [ 300.542454][ T8756] ? aa_sock_msg_perm+0x94/0x150 [ 300.547374][ T8756] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 300.552642][ T8756] ? security_socket_sendmsg+0x7c/0xa0 [ 300.558091][ T8756] ? netlink_getsockopt+0x570/0x570 [ 300.563360][ T8756] ____sys_sendmsg+0x5b7/0x8f0 [ 300.568127][ T8756] ? __sys_sendmsg_sock+0x30/0x30 [ 300.573137][ T8756] ? import_iovec+0x6f/0xa0 [ 300.577631][ T8756] ___sys_sendmsg+0x236/0x2e0 [ 300.582294][ T8756] ? __sys_sendmsg+0x2a0/0x2a0 [ 300.587090][ T8756] __se_sys_sendmsg+0x1af/0x290 [ 300.591927][ T8756] ? __x64_sys_sendmsg+0x80/0x80 [ 300.596852][ T8756] ? syscall_enter_from_user_mode+0x2a/0x70 [ 300.602730][ T8756] do_syscall_64+0x4c/0xa0 [ 300.607135][ T8756] ? clear_bhb_loop+0x30/0x80 [ 300.611791][ T8756] ? clear_bhb_loop+0x30/0x80 [ 300.616447][ T8756] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 300.622342][ T8756] RIP: 0033:0x7f81b0394cb9 [ 300.626740][ T8756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.646328][ T8756] RSP: 002b:00007f81ae5f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.654981][ T8756] RAX: ffffffffffffffda RBX: 00007f81b060ffa0 RCX: 00007f81b0394cb9 [ 300.662935][ T8756] RDX: 0000000004044830 RSI: 0000200000000600 RDI: 0000000000000005 [ 300.670886][ T8756] RBP: 00007f81ae5f0090 R08: 0000000000000000 R09: 0000000000000000 [ 300.678837][ T8756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.686790][ T8756] R13: 00007f81b0610038 R14: 00007f81b060ffa0 R15: 00007ffc2f8c4c68 [ 300.694753][ T8756] [ 300.727865][ T8760] __nla_validate_parse: 59 callbacks suppressed [ 300.727884][ T8760] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1705'. [ 300.770476][ T8764] validate_nla: 126 callbacks suppressed [ 300.770494][ T8764] netlink: 'syz.4.1704': attribute type 10 has an invalid length. [ 300.859380][ T8764] team0: Device hsr_slave_0 failed to register rx_handler [ 300.950047][ T8771] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1708'. [ 301.148875][ T8778] netlink: 'syz.2.1712': attribute type 29 has an invalid length. [ 301.184083][ T8778] netlink: 'syz.2.1712': attribute type 29 has an invalid length. [ 301.193314][ T8781] netlink: 'syz.3.1713': attribute type 39 has an invalid length. [ 301.218798][ T8778] netlink: 'syz.2.1712': attribute type 10 has an invalid length. [ 301.268618][ T8782] netlink: 'syz.0.1711': attribute type 10 has an invalid length. [ 301.568742][ T8801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.667938][ T8805] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1720'. [ 301.689896][ T8802] netlink: 'syz.2.1718': attribute type 10 has an invalid length. [ 301.859632][ T8810] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1722'. [ 302.071130][ T8820] netlink: 'syz.1.1727': attribute type 39 has an invalid length. [ 303.008858][ T8833] netlink: 'syz.4.1732': attribute type 21 has an invalid length. [ 303.024429][ T8833] netlink: 'syz.4.1732': attribute type 1 has an invalid length. [ 303.042218][ T8833] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1732'. [ 303.051818][ T8833] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 304.293339][ T8847] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1736'. [ 304.352525][ T8852] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1738'. [ 304.394341][ T8853] team0: Device hsr_slave_0 failed to register rx_handler [ 304.755330][ T8867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.044479][ T8885] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1751'. [ 305.245994][ T8896] team0: Device hsr_slave_0 failed to register rx_handler [ 305.589704][ T8913] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1765'. [ 305.846725][ T8934] validate_nla: 3 callbacks suppressed [ 305.846761][ T8934] netlink: 'syz.4.1770': attribute type 10 has an invalid length. [ 305.943699][ T8934] team0: Device hsr_slave_0 failed to register rx_handler [ 306.203369][ T8953] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1778'. [ 306.331498][ T8956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.682042][ T8967] netlink: 'syz.4.1785': attribute type 10 has an invalid length. [ 306.711670][ T8967] team0: Device hsr_slave_0 failed to register rx_handler [ 306.825516][ T8976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.933181][ T8967] syz.4.1785 (8967) used greatest stack depth: 18160 bytes left [ 307.363546][ T9010] netlink: 'syz.2.1802': attribute type 10 has an invalid length. [ 307.376717][ T9010] team0: Device hsr_slave_0 failed to register rx_handler [ 307.765892][ T9033] netlink: 'syz.4.1811': attribute type 39 has an invalid length. [ 307.883826][ T9040] netlink: 'syz.0.1814': attribute type 10 has an invalid length. [ 308.083976][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 310.771509][ T9054] netlink: 'syz.1.1816': attribute type 10 has an invalid length. [ 310.805736][ T9054] team0: Device hsr_slave_0 failed to register rx_handler [ 311.115550][ T9066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.134657][ T9072] netlink: 'syz.3.1825': attribute type 39 has an invalid length. [ 311.382092][ T9086] netlink: 'syz.2.1831': attribute type 10 has an invalid length. [ 311.505264][ T9098] FAULT_INJECTION: forcing a failure. [ 311.505264][ T9098] name failslab, interval 1, probability 0, space 0, times 0 [ 311.534395][ T9098] CPU: 0 PID: 9098 Comm: syz.1.1834 Not tainted syzkaller #0 [ 311.541838][ T9098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 311.542200][ T9101] netlink: 'syz.4.1833': attribute type 10 has an invalid length. [ 311.551919][ T9098] Call Trace: [ 311.551938][ T9098] [ 311.551950][ T9098] dump_stack_lvl+0x188/0x250 [ 311.551985][ T9098] ? show_regs_print_info+0x20/0x20 [ 311.552007][ T9098] ? load_image+0x400/0x400 [ 311.552039][ T9098] ? __might_sleep+0xf0/0xf0 [ 311.552062][ T9098] ? __lock_acquire+0x7d10/0x7d10 [ 311.552098][ T9098] should_fail+0x38c/0x4c0 [ 311.552135][ T9098] should_failslab+0x5/0x20 [ 311.552153][ T9098] slab_pre_alloc_hook+0x51/0xc0 [ 311.552188][ T9098] __kmalloc_node_track_caller+0x68/0x3a0 [ 311.609824][ T9098] ? netlink_sendmsg+0x654/0xbe0 [ 311.614792][ T9098] ? kmem_cache_alloc_node+0x162/0x2d0 [ 311.618778][ T9101] team0: Device hsr_slave_0 failed to register rx_handler [ 311.620281][ T9098] ? __alloc_skb+0xf4/0x750 [ 311.620315][ T9098] ? netlink_sendmsg+0x654/0xbe0 [ 311.620341][ T9098] __alloc_skb+0x22c/0x750 [ 311.620377][ T9098] netlink_sendmsg+0x654/0xbe0 [ 311.620422][ T9098] ? netlink_getsockopt+0x570/0x570 [ 311.620452][ T9098] ? aa_sock_msg_perm+0x94/0x150 [ 311.620480][ T9098] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 311.661633][ T9098] ? security_socket_sendmsg+0x7c/0xa0 [ 311.667132][ T9098] ? netlink_getsockopt+0x570/0x570 [ 311.672366][ T9098] ____sys_sendmsg+0x5b7/0x8f0 [ 311.677190][ T9098] ? __sys_sendmsg_sock+0x30/0x30 [ 311.682267][ T9098] ? import_iovec+0x6f/0xa0 [ 311.686823][ T9098] ___sys_sendmsg+0x236/0x2e0 [ 311.691559][ T9098] ? __sys_sendmsg+0x2a0/0x2a0 [ 311.696397][ T9098] ? vfs_write+0x8b2/0xd60 [ 311.700920][ T9098] __se_sys_sendmsg+0x1af/0x290 [ 311.705925][ T9098] ? __x64_sys_sendmsg+0x80/0x80 [ 311.710891][ T9098] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 311.716940][ T9098] ? lockdep_hardirqs_on+0x94/0x140 [ 311.722189][ T9098] do_syscall_64+0x4c/0xa0 [ 311.726637][ T9098] ? clear_bhb_loop+0x30/0x80 [ 311.731338][ T9098] ? clear_bhb_loop+0x30/0x80 [ 311.736053][ T9098] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 311.741968][ T9098] RIP: 0033:0x7f3ff10a4cb9 [ 311.746403][ T9098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.766211][ T9098] RSP: 002b:00007f3fef2df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.774753][ T9098] RAX: ffffffffffffffda RBX: 00007f3ff1320090 RCX: 00007f3ff10a4cb9 [ 311.782752][ T9098] RDX: 0000000000048000 RSI: 0000200000000080 RDI: 0000000000000005 [ 311.790745][ T9098] RBP: 00007f3fef2df090 R08: 0000000000000000 R09: 0000000000000000 [ 311.798738][ T9098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.806732][ T9098] R13: 00007f3ff1320128 R14: 00007f3ff1320090 R15: 00007ffd8870e428 [ 311.814773][ T9098] [ 313.651181][ T9112] device sit0 entered promiscuous mode [ 313.820435][ T9120] netlink: 'syz.2.1842': attribute type 10 has an invalid length. [ 313.907569][ T9120] team0: Device veth1_macvtap failed to register rx_handler [ 314.072070][ T9119] netlink: 'syz.1.1843': attribute type 39 has an invalid length. [ 315.837894][ T9122] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 317.015853][ T9132] netlink: 'syz.4.1848': attribute type 10 has an invalid length. [ 317.044350][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.050787][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.280170][ T9148] FAULT_INJECTION: forcing a failure. [ 317.280170][ T9148] name failslab, interval 1, probability 0, space 0, times 0 [ 317.297289][ T9148] CPU: 0 PID: 9148 Comm: syz.1.1851 Not tainted syzkaller #0 [ 317.304705][ T9148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 317.314760][ T9148] Call Trace: [ 317.318035][ T9148] [ 317.320961][ T9148] dump_stack_lvl+0x188/0x250 [ 317.325641][ T9148] ? show_regs_print_info+0x20/0x20 [ 317.330846][ T9148] ? load_image+0x400/0x400 [ 317.335345][ T9148] ? __might_sleep+0xf0/0xf0 [ 317.339950][ T9148] ? __lock_acquire+0x7d10/0x7d10 [ 317.344972][ T9148] should_fail+0x38c/0x4c0 [ 317.349399][ T9148] should_failslab+0x5/0x20 [ 317.353913][ T9148] slab_pre_alloc_hook+0x51/0xc0 [ 317.358864][ T9148] __kmalloc+0x6b/0x330 [ 317.363034][ T9148] ? fib6_info_alloc+0x2e/0xe0 [ 317.367854][ T9148] fib6_info_alloc+0x2e/0xe0 [ 317.372451][ T9148] ip6_route_info_create+0x44f/0x1210 [ 317.377843][ T9148] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 317.383945][ T9148] ? security_capable+0x85/0xb0 [ 317.388810][ T9148] ip6_route_add+0x24/0x130 [ 317.393319][ T9148] ipv6_route_ioctl+0x3b0/0x500 [ 317.398181][ T9148] ? rt6_purge_dflt_routers+0xad0/0xad0 [ 317.403750][ T9148] ? rcu_lock_release+0x5/0x20 [ 317.408520][ T9148] ? __might_fault+0xb3/0x110 [ 317.413197][ T9148] ? _copy_from_user+0x111/0x170 [ 317.418131][ T9148] inet6_ioctl+0x207/0x280 [ 317.422560][ T9148] ? inet6_getname+0x640/0x640 [ 317.427328][ T9148] ? tomoyo_path_number_perm+0x5b4/0x660 [ 317.433002][ T9148] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 317.438465][ T9148] sock_do_ioctl+0xfb/0x320 [ 317.442968][ T9148] ? sock_show_fdinfo+0xb0/0xb0 [ 317.447827][ T9148] sock_ioctl+0x4d2/0x710 [ 317.452153][ T9148] ? sock_poll+0x410/0x410 [ 317.456574][ T9148] ? bpf_lsm_file_ioctl+0x5/0x10 [ 317.461505][ T9148] ? security_file_ioctl+0x7c/0xa0 [ 317.466873][ T9148] ? sock_poll+0x410/0x410 [ 317.471284][ T9148] __se_sys_ioctl+0xfa/0x170 [ 317.475870][ T9148] do_syscall_64+0x4c/0xa0 [ 317.480279][ T9148] ? clear_bhb_loop+0x30/0x80 [ 317.484950][ T9148] ? clear_bhb_loop+0x30/0x80 [ 317.489618][ T9148] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 317.495515][ T9148] RIP: 0033:0x7f3ff10a4cb9 [ 317.499948][ T9148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.519574][ T9148] RSP: 002b:00007f3fef2df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.527996][ T9148] RAX: ffffffffffffffda RBX: 00007f3ff1320090 RCX: 00007f3ff10a4cb9 [ 317.536050][ T9148] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000006 [ 317.544022][ T9148] RBP: 00007f3fef2df090 R08: 0000000000000000 R09: 0000000000000000 [ 317.552002][ T9148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.559979][ T9148] R13: 00007f3ff1320128 R14: 00007f3ff1320090 R15: 00007ffd8870e428 [ 317.567975][ T9148] [ 317.730790][ T9154] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1854'. [ 318.046458][ T9169] netlink: 'syz.2.1861': attribute type 39 has an invalid length. [ 318.133342][ T9173] netlink: 'syz.3.1863': attribute type 10 has an invalid length. [ 318.197608][ T9176] netlink: 'syz.1.1864': attribute type 10 has an invalid length. [ 318.257216][ T9176] team0: Device hsr_slave_0 failed to register rx_handler [ 319.771922][ T3085] wlan1: Trigger new scan to find an IBSS to join [ 321.283132][ T9201] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 321.304700][ T9206] netlink: 'syz.3.1876': attribute type 39 has an invalid length. [ 321.498561][ T9214] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1878'. [ 321.736344][ T9218] netlink: 'syz.3.1881': attribute type 10 has an invalid length. [ 321.756229][ T9218] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1881'. [ 321.798409][ T9218] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 321.818763][ T9218] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.847383][ T9218] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 321.924697][ T9226] netlink: 'syz.2.1884': attribute type 10 has an invalid length. [ 322.980230][ T9244] netlink: 'syz.1.1891': attribute type 39 has an invalid length. [ 323.030884][ T9249] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1893'. [ 323.094079][ T9255] FAULT_INJECTION: forcing a failure. [ 323.094079][ T9255] name failslab, interval 1, probability 0, space 0, times 0 [ 323.113953][ T9255] CPU: 1 PID: 9255 Comm: syz.3.1895 Not tainted syzkaller #0 [ 323.121368][ T9255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.131435][ T9255] Call Trace: [ 323.134717][ T9255] [ 323.137644][ T9255] dump_stack_lvl+0x188/0x250 [ 323.142314][ T9255] ? show_regs_print_info+0x20/0x20 [ 323.147509][ T9255] ? load_image+0x400/0x400 [ 323.152019][ T9255] ? __might_sleep+0xf0/0xf0 [ 323.156627][ T9255] ? __lock_acquire+0x7d10/0x7d10 [ 323.161757][ T9255] ? netlink_insert+0xe95/0x11f0 [ 323.166694][ T9255] should_fail+0x38c/0x4c0 [ 323.171128][ T9255] should_failslab+0x5/0x20 [ 323.175611][ T9255] slab_pre_alloc_hook+0x51/0xc0 [ 323.180538][ T9255] kmem_cache_alloc_node+0x47/0x2d0 [ 323.185716][ T9255] ? __alloc_skb+0xf4/0x750 [ 323.190300][ T9255] __alloc_skb+0xf4/0x750 [ 323.194615][ T9255] netlink_sendmsg+0x654/0xbe0 [ 323.199370][ T9255] ? netlink_getsockopt+0x570/0x570 [ 323.204551][ T9255] ? aa_sock_msg_perm+0x94/0x150 [ 323.209477][ T9255] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 323.214744][ T9255] ? security_socket_sendmsg+0x7c/0xa0 [ 323.220200][ T9255] ? netlink_getsockopt+0x570/0x570 [ 323.225377][ T9255] ____sys_sendmsg+0x5b7/0x8f0 [ 323.230132][ T9255] ? __sys_sendmsg_sock+0x30/0x30 [ 323.235143][ T9255] ? import_iovec+0x6f/0xa0 [ 323.239640][ T9255] ___sys_sendmsg+0x236/0x2e0 [ 323.244304][ T9255] ? __sys_sendmsg+0x2a0/0x2a0 [ 323.249071][ T9255] ? vfs_write+0x8b2/0xd60 [ 323.253487][ T9255] __se_sys_sendmsg+0x1af/0x290 [ 323.258330][ T9255] ? __x64_sys_sendmsg+0x80/0x80 [ 323.263246][ T9255] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 323.269220][ T9255] ? lockdep_hardirqs_on+0x94/0x140 [ 323.274406][ T9255] do_syscall_64+0x4c/0xa0 [ 323.278804][ T9255] ? clear_bhb_loop+0x30/0x80 [ 323.283456][ T9255] ? clear_bhb_loop+0x30/0x80 [ 323.288114][ T9255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 323.293985][ T9255] RIP: 0033:0x7f8f6e565cb9 [ 323.298381][ T9255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.317967][ T9255] RSP: 002b:00007f8f6c7c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.326363][ T9255] RAX: ffffffffffffffda RBX: 00007f8f6e7e0fa0 RCX: 00007f8f6e565cb9 [ 323.334334][ T9255] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 323.342289][ T9255] RBP: 00007f8f6c7c1090 R08: 0000000000000000 R09: 0000000000000000 [ 323.350265][ T9255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.358230][ T9255] R13: 00007f8f6e7e1038 R14: 00007f8f6e7e0fa0 R15: 00007ffe0fe3d418 [ 323.366200][ T9255] [ 323.500143][ T9253] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1894'. [ 323.502002][ T9262] netlink: 'syz.0.1897': attribute type 21 has an invalid length. [ 323.529242][ T9262] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1897'. [ 323.580221][ T9262] netlink: 'syz.0.1897': attribute type 10 has an invalid length. [ 323.589421][ T9262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1897'. [ 323.600561][ T9262] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 323.607815][ T9262] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.637289][ T9262] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 323.754747][ T9] wlan1: Trigger new scan to find an IBSS to join [ 323.765968][ T144] wlan1: Trigger new scan to find an IBSS to join [ 324.031448][ T9278] netlink: 'syz.0.1904': attribute type 39 has an invalid length. [ 324.322703][ T9286] netlink: 'syz.1.1907': attribute type 1 has an invalid length. [ 324.374154][ T9286] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1907'. [ 324.553906][ T9285] netlink: 'syz.1.1907': attribute type 1 has an invalid length. [ 324.561850][ T9285] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1907'. [ 324.698391][ T3085] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 325.285310][ T9301] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1912'. [ 325.533324][ T9316] netlink: 'syz.0.1918': attribute type 39 has an invalid length. [ 325.629082][ T9326] device syzkaller0 entered promiscuous mode [ 325.664753][ T9326] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 326.299379][ T9349] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1928'. [ 326.469681][ T9355] netlink: 'syz.0.1932': attribute type 39 has an invalid length. [ 326.793703][ T1268] wlan1: Trigger new scan to find an IBSS to join [ 327.404249][ T9363] FAULT_INJECTION: forcing a failure. [ 327.404249][ T9363] name failslab, interval 1, probability 0, space 0, times 0 [ 327.481920][ T9363] CPU: 1 PID: 9363 Comm: syz.1.1933 Not tainted syzkaller #0 [ 327.489356][ T9363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 327.499435][ T9363] Call Trace: [ 327.502736][ T9363] [ 327.505694][ T9363] dump_stack_lvl+0x188/0x250 [ 327.510389][ T9363] ? show_regs_print_info+0x20/0x20 [ 327.515585][ T9363] ? load_image+0x400/0x400 [ 327.520096][ T9363] ? __might_sleep+0xf0/0xf0 [ 327.524700][ T9363] ? __lock_acquire+0x7d10/0x7d10 [ 327.529755][ T9363] should_fail+0x38c/0x4c0 [ 327.534194][ T9363] should_failslab+0x5/0x20 [ 327.538708][ T9363] slab_pre_alloc_hook+0x51/0xc0 [ 327.543687][ T9363] __kmalloc_node_track_caller+0x68/0x3a0 [ 327.549411][ T9363] ? alloc_skb_with_frags+0xa7/0x730 [ 327.554700][ T9363] ? kmem_cache_alloc_node+0x162/0x2d0 [ 327.560172][ T9363] ? __alloc_skb+0xf4/0x750 [ 327.564696][ T9363] ? alloc_skb_with_frags+0xa7/0x730 [ 327.569996][ T9363] __alloc_skb+0x22c/0x750 [ 327.574421][ T9363] alloc_skb_with_frags+0xa7/0x730 [ 327.579545][ T9363] sock_alloc_send_pskb+0x87f/0x9a0 [ 327.584786][ T9363] ? sock_kzfree_s+0x50/0x50 [ 327.589383][ T9363] ? __lock_acquire+0x12e8/0x7d10 [ 327.594404][ T9363] ? verify_lock_unused+0x140/0x140 [ 327.599624][ T9363] ? apparmor_socket_getpeersec_dgram+0x5/0x10 [ 327.605916][ T9363] ? security_socket_getpeersec_dgram+0x9d/0xc0 [ 327.612193][ T9363] unix_stream_sendmsg+0x428/0xc90 [ 327.617358][ T9363] ? unix_show_fdinfo+0xa0/0xa0 [ 327.622219][ T9363] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 327.628656][ T9363] ? aa_sock_msg_perm+0x94/0x150 [ 327.633595][ T9363] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 327.638887][ T9363] ? security_socket_sendmsg+0x7c/0xa0 [ 327.644352][ T9363] ? unix_show_fdinfo+0xa0/0xa0 [ 327.649202][ T9363] ____sys_sendmsg+0x5b7/0x8f0 [ 327.653987][ T9363] ? __sys_sendmsg_sock+0x30/0x30 [ 327.659040][ T9363] ? import_iovec+0x6f/0xa0 [ 327.663546][ T9363] ___sys_sendmsg+0x236/0x2e0 [ 327.668243][ T9363] ? __sys_sendmsg+0x2a0/0x2a0 [ 327.673080][ T9363] __se_sys_sendmsg+0x1af/0x290 [ 327.678076][ T9363] ? __x64_sys_sendmsg+0x80/0x80 [ 327.683033][ T9363] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 327.689037][ T9363] ? trace_sys_enter+0x1f/0x80 [ 327.693806][ T9363] do_syscall_64+0x4c/0xa0 [ 327.698246][ T9363] ? clear_bhb_loop+0x30/0x80 [ 327.703107][ T9363] ? clear_bhb_loop+0x30/0x80 [ 327.707813][ T9363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 327.713717][ T9363] RIP: 0033:0x7f3ff10a4cb9 [ 327.718157][ T9363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.737783][ T9363] RSP: 002b:00007f3fef300028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.746207][ T9363] RAX: ffffffffffffffda RBX: 00007f3ff131ffa0 RCX: 00007f3ff10a4cb9 [ 327.754172][ T9363] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000007 [ 327.762193][ T9363] RBP: 00007f3fef300090 R08: 0000000000000000 R09: 0000000000000000 [ 327.770164][ T9363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.778143][ T9363] R13: 00007f3ff1320038 R14: 00007f3ff131ffa0 R15: 00007ffd8870e428 [ 327.786173][ T9363] [ 330.612042][ T9] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 331.107380][ T9395] netlink: 'syz.3.1945': attribute type 39 has an invalid length. [ 331.211924][ T9403] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1947'. [ 332.257091][ T9415] netlink: 'syz.1.1952': attribute type 10 has an invalid length. [ 332.271681][ T9415] team0: Device hsr_slave_0 failed to register rx_handler [ 333.382833][ T9419] netlink: 'syz.3.1953': attribute type 4 has an invalid length. [ 333.399004][ T9419] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.1953'. [ 333.799986][ C1] ------------[ cut here ]------------ [ 333.805506][ C1] WARNING: CPU: 1 PID: 9436 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 333.814907][ C1] Modules linked in: [ 333.818811][ C1] CPU: 1 PID: 9436 Comm: syz.4.1959 Not tainted syzkaller #0 [ 333.826187][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.836229][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 333.842502][ C1] Code: 24 45 31 f6 31 ff 89 de e8 7d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 333.862206][ C1] RSP: 0018:ffffc90000dd0d30 EFLAGS: 00010006 [ 333.868394][ C1] RAX: ffffffff81a08ea0 RBX: 0000000000000008 RCX: ffff888028e99dc0 [ 333.876407][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.884472][ C1] RBP: 0000000000000000 R08: ffff888028e99dc7 R09: 1ffff110051d33b8 [ 333.892449][ C1] R10: dffffc0000000000 R11: ffffed10051d33b9 R12: ffff888028e9b548 [ 333.900416][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0da8 R15: 0000000020000000 [ 333.908397][ C1] FS: 00007f5b579d06c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 333.917336][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.923918][ C1] CR2: 0000000020000000 CR3: 000000007b8bc000 CR4: 00000000003506e0 [ 333.931884][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 333.939880][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 333.947876][ C1] Call Trace: [ 333.951161][ C1] [ 333.954008][ C1] bpf_probe_read_compat+0xdd/0x170 [ 333.959216][ C1] bpf_prog_bcff4640d6a7c5a9+0x5e/0x52c [ 333.964765][ C1] bpf_trace_run2+0x163/0x2e0 [ 333.969439][ C1] ? bpf_trace_run1+0x2e0/0x2e0 [ 333.974284][ C1] ? flush_tlb_one_user+0x50/0x50 [ 333.979307][ C1] trace_tlb_flush+0xe6/0x110 [ 333.983982][ C1] flush_tlb_func+0x4c7/0x5b0 [ 333.988659][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 333.993859][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 333.998718][ C1] ? native_flush_tlb_multi+0xd0/0xd0 [ 334.004089][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 334.009284][ C1] ? native_flush_tlb_multi+0xd0/0xd0 [ 334.014642][ C1] flush_smp_call_function_queue+0x2a9/0x760 [ 334.020633][ C1] __sysvec_call_function_single+0x98/0x240 [ 334.026541][ C1] sysvec_call_function_single+0x98/0xc0 [ 334.032194][ C1] [ 334.035131][ C1] [ 334.038087][ C1] asm_sysvec_call_function_single+0x16/0x20 [ 334.044120][ C1] RIP: 0010:lock_acquire+0x208/0x400 [ 334.049410][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 334.069030][ C1] RSP: 0018:ffffc900034cfac0 EFLAGS: 00000206 [ 334.075194][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 60fda2c121100200 [ 334.083168][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f780 [ 334.091148][ C1] RBP: ffffc900034cfbc8 R08: dffffc0000000000 R09: 1ffffffff203a239 [ 334.099223][ C1] R10: dffffc0000000000 R11: fffffbfff203a23a R12: ffff888034f94cb0 [ 334.107199][ C1] R13: 1ffff92000699f64 R14: 0000000000000246 R15: dffffc0000000000 [ 334.115213][ C1] ? __might_sleep+0xf0/0xf0 [ 334.119805][ C1] ? read_lock_is_recursive+0x10/0x10 [ 334.125179][ C1] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 334.131758][ C1] ? __raw_spin_lock_init+0x41/0x100 [ 334.137048][ C1] ? __se_sys_perf_event_open+0xc4c/0x1bb0 [ 334.142848][ C1] __mutex_lock_common+0x1e3/0x2400 [ 334.148043][ C1] ? __se_sys_perf_event_open+0xc4c/0x1bb0 [ 334.153852][ C1] ? aa_get_newest_label+0xf5/0x5a0 [ 334.159062][ C1] ? end_current_label_crit_section+0x170/0x170 [ 334.165298][ C1] ? alloc_file_pseudo+0x1aa/0x200 [ 334.170402][ C1] ? read_lock_is_recursive+0x10/0x10 [ 334.175768][ C1] ? mutex_lock_io_nested+0x60/0x60 [ 334.180966][ C1] ? bpf_lsm_capable+0x5/0x10 [ 334.185656][ C1] ? security_capable+0x85/0xb0 [ 334.190518][ C1] ? capable+0x84/0xe0 [ 334.194589][ C1] mutex_lock_nested+0x17/0x20 [ 334.199360][ C1] __se_sys_perf_event_open+0xc4c/0x1bb0 [ 334.205001][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 334.211474][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 334.216688][ C1] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 334.222325][ C1] do_syscall_64+0x4c/0xa0 [ 334.226731][ C1] ? clear_bhb_loop+0x30/0x80 [ 334.231400][ C1] ? clear_bhb_loop+0x30/0x80 [ 334.236160][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.242043][ C1] RIP: 0033:0x7f5b59774cb9 [ 334.246451][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.266133][ C1] RSP: 002b:00007f5b579d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 334.274558][ C1] RAX: ffffffffffffffda RBX: 00007f5b599effa0 RCX: 00007f5b59774cb9 [ 334.282541][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 334.290525][ C1] RBP: 00007f5b597e2bf7 R08: 0000000000000000 R09: 0000000000000000 [ 334.298503][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 334.306466][ C1] R13: 00007f5b599f0038 R14: 00007f5b599effa0 R15: 00007ffc7b72d358 [ 334.314468][ C1] [ 334.317489][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 334.324843][ C1] CPU: 1 PID: 9436 Comm: syz.4.1959 Not tainted syzkaller #0 [ 334.332235][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.342309][ C1] Call Trace: [ 334.345586][ C1] [ 334.348428][ C1] dump_stack_lvl+0x188/0x250 [ 334.353290][ C1] ? show_regs_print_info+0x20/0x20 [ 334.358483][ C1] ? load_image+0x400/0x400 [ 334.363043][ C1] panic+0x2e5/0x810 [ 334.366942][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 334.371460][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 334.377001][ C1] __warn+0x248/0x2b0 [ 334.380974][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 334.386602][ C1] report_bug+0x1b7/0x2e0 [ 334.390939][ C1] handle_bug+0x3a/0x70 [ 334.395088][ C1] exc_invalid_op+0x16/0x40 [ 334.399582][ C1] asm_exc_invalid_op+0x16/0x20 [ 334.404424][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 334.410582][ C1] Code: 24 45 31 f6 31 ff 89 de e8 7d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 334.430207][ C1] RSP: 0018:ffffc90000dd0d30 EFLAGS: 00010006 [ 334.436269][ C1] RAX: ffffffff81a08ea0 RBX: 0000000000000008 RCX: ffff888028e99dc0 [ 334.444232][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.452192][ C1] RBP: 0000000000000000 R08: ffff888028e99dc7 R09: 1ffff110051d33b8 [ 334.460151][ C1] R10: dffffc0000000000 R11: ffffed10051d33b9 R12: ffff888028e9b548 [ 334.468132][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0da8 R15: 0000000020000000 [ 334.476116][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 334.481677][ C1] bpf_probe_read_compat+0xdd/0x170 [ 334.486876][ C1] bpf_prog_bcff4640d6a7c5a9+0x5e/0x52c [ 334.492416][ C1] bpf_trace_run2+0x163/0x2e0 [ 334.497090][ C1] ? bpf_trace_run1+0x2e0/0x2e0 [ 334.501940][ C1] ? flush_tlb_one_user+0x50/0x50 [ 334.506961][ C1] trace_tlb_flush+0xe6/0x110 [ 334.511630][ C1] flush_tlb_func+0x4c7/0x5b0 [ 334.516447][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 334.521664][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 334.526526][ C1] ? native_flush_tlb_multi+0xd0/0xd0 [ 334.531897][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 334.537089][ C1] ? native_flush_tlb_multi+0xd0/0xd0 [ 334.542447][ C1] flush_smp_call_function_queue+0x2a9/0x760 [ 334.548432][ C1] __sysvec_call_function_single+0x98/0x240 [ 334.554318][ C1] sysvec_call_function_single+0x98/0xc0 [ 334.559958][ C1] [ 334.562877][ C1] [ 334.565801][ C1] asm_sysvec_call_function_single+0x16/0x20 [ 334.571770][ C1] RIP: 0010:lock_acquire+0x208/0x400 [ 334.577226][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 334.596819][ C1] RSP: 0018:ffffc900034cfac0 EFLAGS: 00000206 [ 334.602879][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 60fda2c121100200 [ 334.610837][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f780 [ 334.618800][ C1] RBP: ffffc900034cfbc8 R08: dffffc0000000000 R09: 1ffffffff203a239 [ 334.626760][ C1] R10: dffffc0000000000 R11: fffffbfff203a23a R12: ffff888034f94cb0 [ 334.634721][ C1] R13: 1ffff92000699f64 R14: 0000000000000246 R15: dffffc0000000000 [ 334.642746][ C1] ? __might_sleep+0xf0/0xf0 [ 334.647364][ C1] ? read_lock_is_recursive+0x10/0x10 [ 334.652750][ C1] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 334.659423][ C1] ? __raw_spin_lock_init+0x41/0x100 [ 334.664717][ C1] ? __se_sys_perf_event_open+0xc4c/0x1bb0 [ 334.670523][ C1] __mutex_lock_common+0x1e3/0x2400 [ 334.675713][ C1] ? __se_sys_perf_event_open+0xc4c/0x1bb0 [ 334.681529][ C1] ? aa_get_newest_label+0xf5/0x5a0 [ 334.686725][ C1] ? end_current_label_crit_section+0x170/0x170 [ 334.692962][ C1] ? alloc_file_pseudo+0x1aa/0x200 [ 334.698102][ C1] ? read_lock_is_recursive+0x10/0x10 [ 334.703471][ C1] ? mutex_lock_io_nested+0x60/0x60 [ 334.708853][ C1] ? bpf_lsm_capable+0x5/0x10 [ 334.713522][ C1] ? security_capable+0x85/0xb0 [ 334.718375][ C1] ? capable+0x84/0xe0 [ 334.722490][ C1] mutex_lock_nested+0x17/0x20 [ 334.727246][ C1] __se_sys_perf_event_open+0xc4c/0x1bb0 [ 334.732888][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 334.738546][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 334.743734][ C1] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 334.749364][ C1] do_syscall_64+0x4c/0xa0 [ 334.753770][ C1] ? clear_bhb_loop+0x30/0x80 [ 334.758433][ C1] ? clear_bhb_loop+0x30/0x80 [ 334.763637][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.769795][ C1] RIP: 0033:0x7f5b59774cb9 [ 334.774207][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.793804][ C1] RSP: 002b:00007f5b579d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 334.802222][ C1] RAX: ffffffffffffffda RBX: 00007f5b599effa0 RCX: 00007f5b59774cb9 [ 334.810185][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 334.818145][ C1] RBP: 00007f5b597e2bf7 R08: 0000000000000000 R09: 0000000000000000 [ 334.826105][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 334.834061][ C1] R13: 00007f5b599f0038 R14: 00007f5b599effa0 R15: 00007ffc7b72d358 [ 334.842072][ C1] [ 334.845490][ C1] Kernel Offset: disabled [ 334.849967][ C1] Rebooting in 86400 seconds..