last executing test programs: 3.990247535s ago: executing program 0 (id=1979): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) close(0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x480c0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 3.832918151s ago: executing program 0 (id=1981): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xe, 0x5}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r5, 0x20) 3.783377516s ago: executing program 3 (id=1982): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000be0000000a000000020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$kcm(0x2c, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000037000b63446a80648c2594f90b24fc60", 0x14}], 0x1}, 0x5006) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000055f00c83bf9e1868be0c0000000c00000006000000050000000000000604000000000000000000"], 0x0, 0x2a, 0x0, 0x1}, 0x28) socket$kcm(0x2c, 0x3, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x4, 0x0, 0x480000000000000b, 0x954b, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x6, 0xfffffff0, 0xfffc, 0x0, 0x0, 0x0, 0x400000000020}, r2, 0x6, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x8c0}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) recvmsg$unix(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)=""/236, 0xec}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000340)=""/186, 0xba}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000580)=""/44, 0x2c}, {&(0x7f00000008c0)=""/245, 0xf5}, {&(0x7f0000000a80)=""/251, 0xfb}, {&(0x7f0000000b80)=""/140, 0x8c}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x4000) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2d, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002f80)="02db60dafc000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x90) socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) sendmsg(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1}, 0x10000000) 3.733770051s ago: executing program 0 (id=1984): bpf$TOKEN_CREATE(0x24, &(0x7f0000001900), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x11, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @remote}, 0x4, 0x0, 0x1}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)="4bd341a035cc5b13da55c914d406373f95fa1acd8af1fbeb6bb065581587a0c5be450fbae66388cc68a983fc14d41ae6823a99b0535fc6ee8a065e799a8ccd301b129bcd8d4ec0c820ab59871bc31b1cc59427c60eedc46246c678dc5415cb16ef3e78c30e", 0x65}], 0x1, &(0x7f0000000480)=[{0x10, 0x103, 0x81}, {0xa0, 0x10a, 0x1, "d9c47084ae46e3e403ee4d48359624d7590cc4684717cac1ce25fa877fccd750d26933589977c334ce282c17340d478f0165d730734e5ae1da056274d042c208a181f7b2c00f100da0542c60ec2bc7b9c090185c094be6bde60403a5c34d35bda587314ce3abe244c792fd01a8c73f33947cc082e9c4fcf64a528cbd05fcdcb728c5dc6a1b0c7d4fddf8"}], 0xb0}, 0x4044000) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305829, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x100) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r3}, 0x36) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000340)=""/233}, 0x20) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000001940)=r4, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x34, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x8004) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000000000000000000000000400000000008dc7d77fbb6f720654124d99881d47245d346de1a0358544d92a23ed83936395a2fa355762c68348f08894dd8fdb8b0f28baf7520f5302a188989315c8dba6212525ea93dbd66c344924b3070a1d424c0f0208bd80aed548747c6c7bb7dbaf231905d99834ec8fbf6d2aef67e7571ae3176a1619e68b80fd92c15917e9f29439e3fa69cb89f4abff69aafc9c4bc52e16cb5da07a23d3c1f5c3795c6312640aaa72647fc92e6f458962517daa14b6ec54d3d10aff3cebe420254014e78cbc0f6ec3e9e64b9e5c0ee6f532"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='afs_sent_data\x00', r0, 0x0, 0x3}, 0x18) recvmsg(r4, &(0x7f00000018c0)={&(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/239, 0xef}, {&(0x7f0000001800)=""/113, 0x71}], 0x3}, 0x10020) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000002", @ANYRES32, @ANYRES8=r2], 0xfe33) 3.512167842s ago: executing program 3 (id=1987): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000224740000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x100090a0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x6, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9d5a}, [@map_fd={0x18, 0xa}, @alu={0x7, 0x1, 0x0, 0x9, 0x2, 0xffffffffffffffc0}]}, &(0x7f0000000580)='syzkaller\x00', 0x8, 0x2c, &(0x7f00000005c0)=""/44, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0xe, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r1], &(0x7f0000000bc0)=[{0x0, 0x2, 0x3, 0x9}, {0x1, 0x2, 0xb}, {0x3, 0x5, 0xb, 0x8}], 0x10, 0x2}, 0x94) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x18) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 3.371726936s ago: executing program 2 (id=1989): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) close(0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x480c0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 3.224477321s ago: executing program 2 (id=1991): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x1000, 0x2, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x1c, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="183600000400"/16], &(0x7f00000008c0)='GPL\x00', 0x1006, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0xa, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x0, 0x3, 0x0, 0xb}, {0x0, 0x5, 0xf, 0x4}], 0x10, 0x4}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800ffffffffff7a8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r5, r6}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r5, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001c80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x8, 0x0, 0x0}}, 0x10) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x90) 3.143154079s ago: executing program 0 (id=1992): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000037008dc1b36756551f01f324118b170b", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x408e0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xf7fff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) openat$cgroup_int(r4, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 2.754785687s ago: executing program 3 (id=1993): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xe, 0x5}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r5, 0x20) 2.660310827s ago: executing program 2 (id=1995): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, 0x0, 0x0) 2.549772098s ago: executing program 2 (id=1996): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x5, &(0x7f0000001740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000001a00)='syzkaller\x00', 0x9, 0xb8, &(0x7f0000001a40)=""/184, 0x41000, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4087}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="1400000076007f27c8fdc6000000000000000000", 0x14}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x4048000) 2.548671328s ago: executing program 3 (id=1997): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000800)={0x2, 0x3, @local}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000000)="0f", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0xffffffffffff9bed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x903, 0x0, @perf_config_ext={0x400000002}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000000)={'wg2\x00', @random="030000004000"}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x2011) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x29, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000300)=r6, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2008020022003507d25a806f", 0xc}], 0x1}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800020001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8916, &(0x7f00000007c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002200)={0x0, r9, 0x0, 0x81}, 0x18) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00'/12, @ANYRES32=r7, @ANYBLOB="b10fb6509f77351edcb7e754dca95aa27851544bdfd2accc2ca1a904c6694332fd9603f2290acebb27cf544de3203186dc836b93d1c151fc7f4dfd028dd64ae5c1c89162692409c7dd2b01966ec908b7e2b3d541ee9a68a7516f9867c27da24b097d88dc68896ab254c60fd201b2ff1ff07ea4c86cc4fbd888b714870991f48e747ae7418d87e72450748795a71d9e91420a8ed68f6f39b5a003df7693ea0df4aa7f2a6a354c490cf91b7656a40a3c87220379ceaaa86a343f9f5adf0912c0a507a8c25ac4ce15f96cbf1af7", @ANYRES8=r5], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[], 0x20) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) 2.407248662s ago: executing program 2 (id=1998): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000be0000000a000000020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$kcm(0x2c, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000037000b63446a80648c2594f90b24fc60", 0x14}], 0x1}, 0x5006) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000055f00c83bf9e1868be0c0000000c00000006000000050000000000000604000000000000000000"], 0x0, 0x2a, 0x0, 0x1}, 0x28) socket$kcm(0x2c, 0x3, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x4, 0x0, 0x480000000000000b, 0x954b, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x6, 0xfffffff0, 0xfffc, 0x0, 0x0, 0x0, 0x400000000020}, r2, 0x6, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x8c0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) recvmsg$unix(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)=""/236, 0xec}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000340)=""/186, 0xba}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000580)=""/44, 0x2c}, {&(0x7f00000008c0)=""/245, 0xf5}, {&(0x7f0000000a80)=""/251, 0xfb}, {&(0x7f0000000b80)=""/140, 0x8c}], 0x8, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x4000) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002f80)="02db60dafc000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x90) socket$kcm(0x10, 0x2, 0x4) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) sendmsg$inet(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x41) sendmsg(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)='%', 0x1}], 0x1}, 0x10000000) 2.406891202s ago: executing program 0 (id=1999): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) close(0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x480c0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 2.400542663s ago: executing program 3 (id=2000): bpf$TOKEN_CREATE(0x24, &(0x7f0000001900), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x11, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @remote}, 0x4, 0x0, 0x1}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)="4bd341a035cc5b13da55c914d406373f95fa1acd8af1fbeb6bb065581587a0c5be450fbae66388cc68a983fc14d41ae6823a99b0535fc6ee8a065e799a8ccd301b129bcd8d4ec0c820ab59871bc31b1cc59427c60eedc46246c678dc5415cb16ef3e78c30e", 0x65}], 0x1, &(0x7f0000000480)=[{0x10, 0x103, 0x81}, {0xa0, 0x10a, 0x1, "d9c47084ae46e3e403ee4d48359624d7590cc4684717cac1ce25fa877fccd750d26933589977c334ce282c17340d478f0165d730734e5ae1da056274d042c208a181f7b2c00f100da0542c60ec2bc7b9c090185c094be6bde60403a5c34d35bda587314ce3abe244c792fd01a8c73f33947cc082e9c4fcf64a528cbd05fcdcb728c5dc6a1b0c7d4fddf8"}], 0xb0}, 0x4044000) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305829, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x100) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r3}, 0x36) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000340)=""/233}, 0x20) r5 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x7, @perf_config_ext={0x6, 0x40000008000}, 0x4, 0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x34, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x8004) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000000000000000000000000400000000008dc7d77fbb6f720654124d99881d47245d346de1a0358544d92a23ed83936395a2fa355762c68348f08894dd8fdb8b0f28baf7520f5302a188989315c8dba6212525ea93dbd66c344924b3070a1d424c0f0208bd80aed548747c6c7bb7dbaf231905d99834ec8fbf6d2aef67e7571ae3176a1619e68b80fd92c15917e9f29439e3fa69cb89f4abff69aafc9c4bc52e16cb5da07a23d3c1f5c3795c6312640aaa72647fc92e6f458962517daa14b6ec54d3d10aff3cebe420254014e78cbc0f6ec3e9e64b9e5c0ee6f532"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='afs_sent_data\x00', r0, 0x0, 0x3}, 0x18) recvmsg(r4, &(0x7f00000018c0)={&(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/239, 0xef}, {&(0x7f0000001800)=""/113, 0x71}], 0x3}, 0x10020) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000002", @ANYRES32, @ANYRES8=r2], 0xfe33) 2.118674261s ago: executing program 0 (id=2001): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000224740000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x100090a0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x6, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9d5a}, [@map_fd={0x18, 0xa}, @alu={0x7, 0x1, 0x0, 0x9, 0x2, 0xffffffffffffffc0}]}, &(0x7f0000000580)='syzkaller\x00', 0x8, 0x2c, &(0x7f00000005c0)=""/44, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0xe, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r1], &(0x7f0000000bc0)=[{0x0, 0x2, 0x3, 0x9}, {0x1, 0x2, 0xb}, {0x3, 0x5, 0xb, 0x8}], 0x10, 0x2}, 0x94) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x18) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.969245395s ago: executing program 32 (id=2001): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000224740000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x100090a0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x6, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9d5a}, [@map_fd={0x18, 0xa}, @alu={0x7, 0x1, 0x0, 0x9, 0x2, 0xffffffffffffffc0}]}, &(0x7f0000000580)='syzkaller\x00', 0x8, 0x2c, &(0x7f00000005c0)=""/44, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0xe, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r1], &(0x7f0000000bc0)=[{0x0, 0x2, 0x3, 0x9}, {0x1, 0x2, 0xb}, {0x3, 0x5, 0xb, 0x8}], 0x10, 0x2}, 0x94) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x18) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.6170628s ago: executing program 2 (id=2004): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, 0x0, 0x0) 1.579072004s ago: executing program 33 (id=2004): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, 0x0, 0x0) 1.574260904s ago: executing program 3 (id=2005): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xe, 0x5}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r5, 0x20) 1.573983445s ago: executing program 34 (id=2005): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xe, 0x5}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r5, 0x20) 1.352344296s ago: executing program 1 (id=2007): bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18ffb000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000035000000850000007000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.135171098s ago: executing program 1 (id=2008): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000800)={0x2, 0x3, @local}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000000)="0f", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0xffffffffffff9bed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x903, 0x0, @perf_config_ext={0x400000002}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000000)={'wg2\x00', @random="030000004000"}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x2011) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x29, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000300)=r6, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2008020022003507d25a806f", 0xc}], 0x1}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800020001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8916, &(0x7f00000007c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002200)={0x0, r9, 0x0, 0x81}, 0x18) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00'/12, @ANYRES32=r7, @ANYBLOB="b10fb6509f77351edcb7e754dca95aa27851544bdfd2accc2ca1a904c6694332fd9603f2290acebb27cf544de3203186dc836b93d1c151fc7f4dfd028dd64ae5c1c89162692409c7dd2b01966ec908b7e2b3d541ee9a68a7516f9867c27da24b097d88dc68896ab254c60fd201b2ff1ff07ea4c86cc4fbd888b714870991f48e747ae7418d87e72450748795a71d9e91420a8ed68f6f39b5a003df7693ea0df4aa7f2a6a354c490cf91b7656a40a3c87220379ceaaa86a343f9f5adf0912c0a507a8c25ac4ce15f96cbf1af7", @ANYRES8=r5], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[], 0x20) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) 913.31135ms ago: executing program 1 (id=2009): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) close(0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x480c0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 509.456369ms ago: executing program 1 (id=2011): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4780, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0xb, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x4) 330.757817ms ago: executing program 1 (id=2012): bpf$TOKEN_CREATE(0x24, &(0x7f0000001900), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x11, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @remote}, 0x4, 0x0, 0x1}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)="4bd341a035cc5b13da55c914d406373f95fa1acd8af1fbeb6bb065581587a0c5be450fbae66388cc68a983fc14d41ae6823a99b0535fc6ee8a065e799a8ccd301b129bcd8d4ec0c820ab59871bc31b1cc59427c60eedc46246c678dc5415cb16ef3e78c30e", 0x65}], 0x1, &(0x7f0000000480)=[{0x10, 0x103, 0x81}, {0xa0, 0x10a, 0x1, "d9c47084ae46e3e403ee4d48359624d7590cc4684717cac1ce25fa877fccd750d26933589977c334ce282c17340d478f0165d730734e5ae1da056274d042c208a181f7b2c00f100da0542c60ec2bc7b9c090185c094be6bde60403a5c34d35bda587314ce3abe244c792fd01a8c73f33947cc082e9c4fcf64a528cbd05fcdcb728c5dc6a1b0c7d4fddf8"}], 0xb0}, 0x4044000) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305829, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x100) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r3}, 0x36) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000340)=""/233}, 0x20) r5 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x7, @perf_config_ext={0x6, 0x40000008000}, 0x4, 0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x34, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x8004) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000000000000000000000000400000000008dc7d77fbb6f720654124d99881d47245d346de1a0358544d92a23ed83936395a2fa355762c68348f08894dd8fdb8b0f28baf7520f5302a188989315c8dba6212525ea93dbd66c344924b3070a1d424c0f0208bd80aed548747c6c7bb7dbaf231905d99834ec8fbf6d2aef67e7571ae3176a1619e68b80fd92c15917e9f29439e3fa69cb89f4abff69aafc9c4bc52e16cb5da07a23d3c1f5c3795c6312640aaa72647fc92e6f458962517daa14b6ec54d3d10aff3cebe420254014e78cbc0f6ec3e9e64b9e5c0ee6f532"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='afs_sent_data\x00', r0, 0x0, 0x3}, 0x18) recvmsg(r4, &(0x7f00000018c0)={&(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/239, 0xef}, {&(0x7f0000001800)=""/113, 0x71}], 0x3}, 0x10020) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000002", @ANYRES32, @ANYRES8=r2], 0xfe33) 0s ago: executing program 1 (id=2013): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x1000, 0x2, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x1c, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="183600000400"/16], &(0x7f00000008c0)='GPL\x00', 0x1006, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0xa, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x0, 0x3, 0x0, 0xb}, {0x0, 0x5, 0xf, 0x4}], 0x10, 0x4}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800ffffffffff7a8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r5, r6}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r5, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001c80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x8, 0x0, 0x0}}, 0x10) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x90) kernel console output (not intermixed with test programs): 0141 [ 210.469481][ T9200] RAX: ffffffffffffffda RBX: 00007f41421e5fa0 RCX: 00007f4141f8eec9 [ 210.477466][ T9200] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 210.485450][ T9200] RBP: 00007f4142d97090 R08: 0000000000000000 R09: 0000000000000000 [ 210.493444][ T9200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.501427][ T9200] R13: 00007f41421e6038 R14: 00007f41421e5fa0 R15: 00007ffc2a49b1c8 [ 210.509416][ T9200] [ 210.628959][ T9211] hsr_slave_0: left promiscuous mode [ 210.641827][ T9211] hsr_slave_1: left promiscuous mode [ 210.958241][ T9222] netlink: 'syz.3.1143': attribute type 4 has an invalid length. [ 210.972273][ T9222] __nla_validate_parse: 1 callbacks suppressed [ 210.972287][ T9222] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1143'. [ 211.072892][ T1136] wlan1: Trigger new scan to find an IBSS to join [ 211.123568][ T9228] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1144'. [ 211.255713][ T9236] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1148'. [ 211.498631][ T9247] FAULT_INJECTION: forcing a failure. [ 211.498631][ T9247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.511940][ T9247] CPU: 0 PID: 9247 Comm: syz.2.1152 Not tainted syzkaller #0 [ 211.519351][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 211.529417][ T9247] Call Trace: [ 211.532699][ T9247] [ 211.535628][ T9247] dump_stack_lvl+0x16c/0x230 [ 211.540311][ T9247] ? show_regs_print_info+0x20/0x20 [ 211.545511][ T9247] ? load_image+0x3b0/0x3b0 [ 211.550019][ T9247] ? __might_fault+0xaa/0x120 [ 211.554709][ T9247] ? __lock_acquire+0x7c80/0x7c80 [ 211.559764][ T9247] should_fail_ex+0x39d/0x4d0 [ 211.564645][ T9247] _copy_from_user+0x2f/0xe0 [ 211.569253][ T9247] ___sys_recvmsg+0x12f/0x510 [ 211.573959][ T9247] ? __sys_recvmsg+0x270/0x270 [ 211.578745][ T9247] ? ksys_write+0x1c1/0x250 [ 211.583283][ T9247] ? __fget_files+0x44a/0x4d0 [ 211.587986][ T9247] __x64_sys_recvmsg+0x1f2/0x2c0 [ 211.592944][ T9247] ? ___sys_recvmsg+0x510/0x510 [ 211.597827][ T9247] ? lockdep_hardirqs_on+0x98/0x150 [ 211.603050][ T9247] do_syscall_64+0x55/0xb0 [ 211.607477][ T9247] ? clear_bhb_loop+0x40/0x90 [ 211.612161][ T9247] ? clear_bhb_loop+0x40/0x90 [ 211.616865][ T9247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.622786][ T9247] RIP: 0033:0x7fe66b38eec9 [ 211.627220][ T9247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.646837][ T9247] RSP: 002b:00007fe66c1b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 211.655266][ T9247] RAX: ffffffffffffffda RBX: 00007fe66b5e5fa0 RCX: 00007fe66b38eec9 [ 211.663245][ T9247] RDX: 0000000000000102 RSI: 0000200000000dc0 RDI: 0000000000000004 [ 211.671217][ T9247] RBP: 00007fe66c1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 211.679195][ T9247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.687175][ T9247] R13: 00007fe66b5e6038 R14: 00007fe66b5e5fa0 R15: 00007fff1e0105a8 [ 211.695171][ T9247] [ 212.033999][ T9256] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 212.230646][ T9264] FAULT_INJECTION: forcing a failure. [ 212.230646][ T9264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.246200][ T9264] CPU: 1 PID: 9264 Comm: syz.0.1159 Not tainted syzkaller #0 [ 212.253605][ T9264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 212.263677][ T9264] Call Trace: [ 212.266966][ T9264] [ 212.269914][ T9264] dump_stack_lvl+0x16c/0x230 [ 212.274634][ T9264] ? show_regs_print_info+0x20/0x20 [ 212.279865][ T9264] ? load_image+0x3b0/0x3b0 [ 212.284406][ T9264] ? __lock_acquire+0x7c80/0x7c80 [ 212.289441][ T9264] ? __virt_addr_valid+0x18c/0x540 [ 212.294570][ T9264] should_fail_ex+0x39d/0x4d0 [ 212.299261][ T9264] _copy_from_user+0x2f/0xe0 [ 212.303863][ T9264] bpf_test_init+0xf9/0x150 [ 212.308378][ T9264] bpf_prog_test_run_xdp+0x382/0xfa0 [ 212.313716][ T9264] ? dev_put+0x80/0x80 [ 212.317792][ T9264] ? dev_put+0x80/0x80 [ 212.321859][ T9264] bpf_prog_test_run+0x321/0x390 [ 212.326802][ T9264] __sys_bpf+0x440/0x800 [ 212.331048][ T9264] ? bpf_link_show_fdinfo+0x350/0x350 [ 212.336427][ T9264] ? lock_chain_count+0x20/0x20 [ 212.341280][ T9264] __x64_sys_bpf+0x7c/0x90 [ 212.345699][ T9264] do_syscall_64+0x55/0xb0 [ 212.350124][ T9264] ? clear_bhb_loop+0x40/0x90 [ 212.354809][ T9264] ? clear_bhb_loop+0x40/0x90 [ 212.359496][ T9264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.365393][ T9264] RIP: 0033:0x7fabaad8eec9 [ 212.369808][ T9264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.389423][ T9264] RSP: 002b:00007fababbd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 212.397845][ T9264] RAX: ffffffffffffffda RBX: 00007fabaafe5fa0 RCX: 00007fabaad8eec9 [ 212.405813][ T9264] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 212.413869][ T9264] RBP: 00007fababbd3090 R08: 0000000000000000 R09: 0000000000000000 [ 212.421840][ T9264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.429815][ T9264] R13: 00007fabaafe6038 R14: 00007fabaafe5fa0 R15: 00007ffe164a2e48 [ 212.437816][ T9264] [ 212.913186][ T9280] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 213.079101][ T9288] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1169'. [ 213.541829][ T9312] netlink: 'syz.2.1177': attribute type 1 has an invalid length. [ 213.553649][ T9312] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1177'. [ 213.853535][ T9317] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 213.976106][ T9323] pim6reg1: entered promiscuous mode [ 213.981454][ T9323] pim6reg1: entered allmulticast mode [ 214.269938][ T9330] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1184'. [ 214.454805][ T9336] netlink: 'syz.3.1188': attribute type 1 has an invalid length. [ 214.468898][ T9334] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1186'. [ 214.478165][ T9336] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1188'. [ 214.499911][ T9334] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1186'. [ 214.515471][ T9334] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1186'. [ 214.528101][ T9334] netlink: 'syz.0.1186': attribute type 13 has an invalid length. [ 214.800786][ T9350] netlink: 'syz.3.1192': attribute type 4 has an invalid length. [ 215.187789][ T9357] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 215.240038][ T9359] netlink: 'syz.3.1195': attribute type 10 has an invalid length. [ 215.521049][ T9367] netlink: 'syz.0.1199': attribute type 1 has an invalid length. [ 215.874028][ T9387] netlink: 'syz.2.1203': attribute type 4 has an invalid length. [ 216.036017][ T1301] wlan1: Trigger new scan to find an IBSS to join [ 216.286260][ T9400] netlink: 'syz.3.1210': attribute type 1 has an invalid length. [ 216.309157][ T9400] __nla_validate_parse: 5 callbacks suppressed [ 216.309176][ T9400] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1210'. [ 216.716823][ T9413] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1215'. [ 216.864233][ T9420] netlink: 'syz.1.1217': attribute type 4 has an invalid length. [ 216.872032][ T9420] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1217'. [ 217.044389][ T4714] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 217.164739][ T9434] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 217.239613][ T9431] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 217.297900][ T9437] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1223'. [ 217.764404][ T9452] netlink: 'syz.2.1228': attribute type 4 has an invalid length. [ 217.784029][ T9452] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1228'. [ 218.240700][ T9466] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 218.291705][ T9470] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1237'. [ 218.474689][ T9478] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1241'. [ 218.636511][ T9480] validate_nla: 1 callbacks suppressed [ 218.636565][ T9480] netlink: 'syz.2.1242': attribute type 10 has an invalid length. [ 218.933828][ T9489] netlink: 'syz.1.1246': attribute type 1 has an invalid length. [ 218.954745][ T9489] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1246'. [ 219.261151][ T9493] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 219.405524][ T9499] netlink: 'syz.2.1251': attribute type 4 has an invalid length. [ 219.422584][ T9499] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1251'. [ 219.508637][ T9503] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1252'. [ 219.836285][ T9511] netlink: 'syz.1.1253': attribute type 10 has an invalid length. [ 219.859789][ T9511] bridge0: port 4(macsec0) entered blocking state [ 219.870260][ T9511] bridge0: port 4(macsec0) entered disabled state [ 219.883085][ T9511] macsec0: entered allmulticast mode [ 219.889835][ T9511] veth1_macvtap: entered allmulticast mode [ 219.962086][ T9511] macsec0: entered promiscuous mode [ 219.999493][ T9511] bridge0: port 4(macsec0) entered blocking state [ 220.006325][ T9511] bridge0: port 4(macsec0) entered forwarding state [ 220.063208][ T9520] netlink: 'syz.3.1259': attribute type 1 has an invalid length. [ 220.193283][ T9510] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 220.386363][ T9527] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 220.973532][ T9549] netlink: 'syz.2.1270': attribute type 29 has an invalid length. [ 220.981413][ T9549] netlink: 'syz.2.1270': attribute type 3 has an invalid length. [ 221.439907][ T9564] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 221.986879][ T9580] FAULT_INJECTION: forcing a failure. [ 221.986879][ T9580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.032861][ T9580] CPU: 0 PID: 9580 Comm: syz.2.1281 Not tainted syzkaller #0 [ 222.040316][ T9580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 222.050410][ T9580] Call Trace: [ 222.053700][ T9580] [ 222.056643][ T9580] dump_stack_lvl+0x16c/0x230 [ 222.061345][ T9580] ? show_regs_print_info+0x20/0x20 [ 222.066561][ T9580] ? load_image+0x3b0/0x3b0 [ 222.071077][ T9580] ? __might_fault+0xaa/0x120 [ 222.075764][ T9580] ? __lock_acquire+0x7c80/0x7c80 [ 222.080816][ T9580] should_fail_ex+0x39d/0x4d0 [ 222.085510][ T9580] _copy_from_user+0x2f/0xe0 [ 222.090117][ T9580] ____sys_sendmsg+0x30d/0x950 [ 222.094915][ T9580] ? __sys_sendmsg_sock+0x30/0x30 [ 222.099956][ T9580] ? __import_iovec+0x3fa/0x860 [ 222.104844][ T9580] ? import_iovec+0x73/0xa0 [ 222.109374][ T9580] ___sys_sendmsg+0x220/0x290 [ 222.114079][ T9580] ? __sys_sendmsg+0x270/0x270 [ 222.118882][ T9580] ? __lock_acquire+0x7c80/0x7c80 [ 222.123953][ T9580] __se_sys_sendmsg+0x1a5/0x270 [ 222.128828][ T9580] ? perf_trace_preemptirq_template+0x281/0x340 [ 222.135083][ T9580] ? __x64_sys_sendmsg+0x80/0x80 [ 222.140065][ T9580] ? lockdep_hardirqs_on+0x98/0x150 [ 222.145299][ T9580] do_syscall_64+0x55/0xb0 [ 222.149735][ T9580] ? clear_bhb_loop+0x40/0x90 [ 222.154428][ T9580] ? clear_bhb_loop+0x40/0x90 [ 222.159136][ T9580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.165044][ T9580] RIP: 0033:0x7fe66b38eec9 [ 222.169471][ T9580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.189098][ T9580] RSP: 002b:00007fe66c1b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.197534][ T9580] RAX: ffffffffffffffda RBX: 00007fe66b5e5fa0 RCX: 00007fe66b38eec9 [ 222.205517][ T9580] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000004 [ 222.213492][ T9580] RBP: 00007fe66c1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 222.221467][ T9580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.229447][ T9580] R13: 00007fe66b5e6038 R14: 00007fe66b5e5fa0 R15: 00007fff1e0105a8 [ 222.237459][ T9580] [ 222.338906][ T9583] netlink: 'syz.3.1283': attribute type 1 has an invalid length. [ 222.346938][ T9583] __nla_validate_parse: 3 callbacks suppressed [ 222.346952][ T9583] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1283'. [ 222.708995][ T9600] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1289'. [ 223.115188][ T9612] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1293'. [ 223.115223][ T9617] netlink: 'syz.3.1294': attribute type 1 has an invalid length. [ 223.115245][ T9617] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1294'. [ 223.600747][ T9629] syz.3.1298 (9629) used obsolete PPPIOCDETACH ioctl [ 223.869425][ T9638] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1301'. [ 223.924960][ T9640] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1302'. [ 225.114328][ T9677] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1315'. [ 225.381352][ T9688] netlink: 7807 bytes leftover after parsing attributes in process `syz.1.1319'. [ 225.538573][ T9693] netlink: 7807 bytes leftover after parsing attributes in process `syz.0.1330'. [ 225.630852][ T9697] FAULT_INJECTION: forcing a failure. [ 225.630852][ T9697] name failslab, interval 1, probability 0, space 0, times 0 [ 225.658823][ T9697] CPU: 1 PID: 9697 Comm: syz.3.1324 Not tainted syzkaller #0 [ 225.666233][ T9697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 225.676302][ T9697] Call Trace: [ 225.679609][ T9697] [ 225.682564][ T9697] dump_stack_lvl+0x16c/0x230 [ 225.687278][ T9697] ? show_regs_print_info+0x20/0x20 [ 225.692504][ T9697] ? load_image+0x3b0/0x3b0 [ 225.697039][ T9697] ? __might_sleep+0xe0/0xe0 [ 225.701659][ T9697] ? __lock_acquire+0x7c80/0x7c80 [ 225.706798][ T9697] should_fail_ex+0x39d/0x4d0 [ 225.711512][ T9697] should_failslab+0x9/0x20 [ 225.716044][ T9697] slab_pre_alloc_hook+0x59/0x310 [ 225.721103][ T9697] kmem_cache_alloc_node+0x60/0x330 [ 225.726331][ T9697] ? __alloc_skb+0x108/0x2c0 [ 225.730954][ T9697] __alloc_skb+0x108/0x2c0 [ 225.735418][ T9697] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 225.740741][ T9697] ? __dev_close_many+0x22b/0x2a0 [ 225.745791][ T9697] rtmsg_ifinfo+0x8c/0x1a0 [ 225.750265][ T9697] dev_close_many+0x27a/0x400 [ 225.754987][ T9697] ? __dev_open+0x430/0x430 [ 225.759517][ T9697] ? __mod_timer+0x984/0xdb0 [ 225.764158][ T9697] unregister_netdevice_many_notify+0x4c1/0x1810 [ 225.770523][ T9697] ? do_raw_spin_unlock+0x121/0x230 [ 225.775776][ T9697] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 225.781711][ T9697] ? mark_lock+0x94/0x320 [ 225.786065][ T9697] ? unregister_netdevice_many+0x20/0x20 [ 225.791736][ T9697] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 225.797748][ T9697] ? lock_chain_count+0x20/0x20 [ 225.802631][ T9697] ? queue_delayed_work_on+0x10d/0x1e0 [ 225.808133][ T9697] unregister_netdevice_queue+0x324/0x360 [ 225.813908][ T9697] ? delayed_work_timer_fn+0x80/0x80 [ 225.819235][ T9697] ? list_netdevice+0x730/0x730 [ 225.824135][ T9697] __tun_detach+0xd45/0x1500 [ 225.828761][ T9697] ? tun_chr_open+0x510/0x510 [ 225.833468][ T9697] tun_chr_close+0x10d/0x1c0 [ 225.838094][ T9697] __fput+0x234/0x970 [ 225.842109][ T9697] __se_sys_close+0x15f/0x220 [ 225.846807][ T9697] do_syscall_64+0x55/0xb0 [ 225.851244][ T9697] ? clear_bhb_loop+0x40/0x90 [ 225.855930][ T9697] ? clear_bhb_loop+0x40/0x90 [ 225.860618][ T9697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.866521][ T9697] RIP: 0033:0x7f4141f8eec9 [ 225.870938][ T9697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.890544][ T9697] RSP: 002b:00007f4142d97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 225.898969][ T9697] RAX: ffffffffffffffda RBX: 00007f41421e5fa0 RCX: 00007f4141f8eec9 [ 225.906946][ T9697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 225.914915][ T9697] RBP: 00007f4142d97090 R08: 0000000000000000 R09: 0000000000000000 [ 225.922887][ T9697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.930862][ T9697] R13: 00007f41421e6038 R14: 00007f41421e5fa0 R15: 00007ffc2a49b1c8 [ 225.938848][ T9697] [ 226.099578][ T9700] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1326'. [ 226.541209][ T9712] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 226.887320][ T9724] netlink: 'syz.1.1344': attribute type 1 has an invalid length. [ 229.259810][ T9759] __nla_validate_parse: 2 callbacks suppressed [ 229.259830][ T9759] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1348'. [ 229.806438][ T9761] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1347'. [ 229.853595][ T9771] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1351'. [ 230.194126][ T9777] netlink: 'syz.1.1356': attribute type 4 has an invalid length. [ 230.204256][ T9777] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1356'. [ 230.217703][ T9779] FAULT_INJECTION: forcing a failure. [ 230.217703][ T9779] name failslab, interval 1, probability 0, space 0, times 0 [ 230.233529][ T9779] CPU: 1 PID: 9779 Comm: syz.3.1355 Not tainted syzkaller #0 [ 230.240942][ T9779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 230.251022][ T9779] Call Trace: [ 230.254329][ T9779] [ 230.257297][ T9779] dump_stack_lvl+0x16c/0x230 [ 230.262024][ T9779] ? show_regs_print_info+0x20/0x20 [ 230.267272][ T9779] ? load_image+0x3b0/0x3b0 [ 230.271821][ T9779] ? __might_sleep+0xe0/0xe0 [ 230.276454][ T9779] ? __lock_acquire+0x7c80/0x7c80 [ 230.281526][ T9779] should_fail_ex+0x39d/0x4d0 [ 230.286259][ T9779] should_failslab+0x9/0x20 [ 230.290821][ T9779] slab_pre_alloc_hook+0x59/0x310 [ 230.295895][ T9779] ? tomoyo_encode+0x28b/0x540 [ 230.300704][ T9779] ? tomoyo_encode+0x28b/0x540 [ 230.305505][ T9779] __kmem_cache_alloc_node+0x53/0x260 [ 230.310948][ T9779] ? tomoyo_encode+0x28b/0x540 [ 230.315756][ T9779] __kmalloc+0xa4/0x240 [ 230.317498][ T9782] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1357'. [ 230.319948][ T9779] tomoyo_encode+0x28b/0x540 [ 230.320001][ T9779] tomoyo_realpath_from_path+0x592/0x5d0 [ 230.339531][ T9779] tomoyo_path_number_perm+0x1ea/0x590 [ 230.345023][ T9779] ? tomoyo_path_number_perm+0x1ba/0x590 [ 230.350668][ T9779] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 230.356145][ T9779] ? ksys_write+0x1c1/0x250 [ 230.360704][ T9779] ? __fget_files+0x28/0x4d0 [ 230.365325][ T9779] security_file_ioctl+0x70/0xa0 [ 230.370292][ T9779] __se_sys_ioctl+0x48/0x170 [ 230.374928][ T9779] do_syscall_64+0x55/0xb0 [ 230.379365][ T9779] ? clear_bhb_loop+0x40/0x90 [ 230.384055][ T9779] ? clear_bhb_loop+0x40/0x90 [ 230.388741][ T9779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.394647][ T9779] RIP: 0033:0x7f4141f8eec9 [ 230.399088][ T9779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.418720][ T9779] RSP: 002b:00007f4142d97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.427143][ T9779] RAX: ffffffffffffffda RBX: 00007f41421e5fa0 RCX: 00007f4141f8eec9 [ 230.435125][ T9779] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 230.443105][ T9779] RBP: 00007f4142d97090 R08: 0000000000000000 R09: 0000000000000000 [ 230.451082][ T9779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.459075][ T9779] R13: 00007f41421e6038 R14: 00007f41421e5fa0 R15: 00007ffc2a49b1c8 [ 230.467086][ T9779] [ 230.475905][ T9779] ERROR: Out of memory at tomoyo_realpath_from_path. [ 230.599491][ T9785] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 230.860819][ T9789] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1368'. [ 231.197894][ T9798] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.1364'. [ 231.478401][ T9808] netlink: 'syz.2.1366': attribute type 4 has an invalid length. [ 231.486387][ T9808] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1366'. [ 231.520836][ T9800] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1363'. [ 231.641524][ T9816] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1369'. [ 231.651302][ T9817] FAULT_INJECTION: forcing a failure. [ 231.651302][ T9817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.665262][ T9817] CPU: 1 PID: 9817 Comm: syz.0.1371 Not tainted syzkaller #0 [ 231.672663][ T9817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.682744][ T9817] Call Trace: [ 231.686144][ T9817] [ 231.689108][ T9817] dump_stack_lvl+0x16c/0x230 [ 231.693822][ T9817] ? show_regs_print_info+0x20/0x20 [ 231.699057][ T9817] ? load_image+0x3b0/0x3b0 [ 231.703598][ T9817] ? __lock_acquire+0x7c80/0x7c80 [ 231.708638][ T9817] ? snprintf+0xdb/0x120 [ 231.712896][ T9817] should_fail_ex+0x39d/0x4d0 [ 231.717594][ T9817] _copy_to_user+0x2f/0xa0 [ 231.722026][ T9817] simple_read_from_buffer+0xe7/0x150 [ 231.727420][ T9817] proc_fail_nth_read+0x1e3/0x250 [ 231.732464][ T9817] ? proc_fault_inject_write+0x340/0x340 [ 231.738118][ T9817] ? fsnotify_perm+0x271/0x5e0 [ 231.742900][ T9817] ? proc_fault_inject_write+0x340/0x340 [ 231.748544][ T9817] vfs_read+0x27e/0x920 [ 231.752722][ T9817] ? kernel_read+0x1e0/0x1e0 [ 231.757329][ T9817] ? __fget_files+0x28/0x4d0 [ 231.761931][ T9817] ? __fget_files+0x44a/0x4d0 [ 231.766634][ T9817] ? __fdget_pos+0x2a3/0x330 [ 231.771243][ T9817] ? ksys_read+0x75/0x250 [ 231.775591][ T9817] ksys_read+0x147/0x250 [ 231.779864][ T9817] ? vfs_write+0x940/0x940 [ 231.784311][ T9817] ? lockdep_hardirqs_on+0x98/0x150 [ 231.789538][ T9817] do_syscall_64+0x55/0xb0 [ 231.793978][ T9817] ? clear_bhb_loop+0x40/0x90 [ 231.798672][ T9817] ? clear_bhb_loop+0x40/0x90 [ 231.803368][ T9817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.809280][ T9817] RIP: 0033:0x7fabaad8d8dc [ 231.813712][ T9817] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 231.833327][ T9817] RSP: 002b:00007fababbd3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 231.841757][ T9817] RAX: ffffffffffffffda RBX: 00007fabaafe5fa0 RCX: 00007fabaad8d8dc [ 231.849749][ T9817] RDX: 000000000000000f RSI: 00007fababbd30a0 RDI: 0000000000000004 [ 231.857749][ T9817] RBP: 00007fababbd3090 R08: 0000000000000000 R09: 0000000000000000 [ 231.865738][ T9817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.873722][ T9817] R13: 00007fabaafe6038 R14: 00007fabaafe5fa0 R15: 00007ffe164a2e48 [ 231.881731][ T9817] [ 231.927222][ T9818] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 232.362058][ T9833] netlink: 'syz.2.1378': attribute type 4 has an invalid length. [ 232.551408][ T9839] FAULT_INJECTION: forcing a failure. [ 232.551408][ T9839] name failslab, interval 1, probability 0, space 0, times 0 [ 232.574404][ T9839] CPU: 0 PID: 9839 Comm: syz.3.1381 Not tainted syzkaller #0 [ 232.581834][ T9839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 232.591932][ T9839] Call Trace: [ 232.595256][ T9839] [ 232.598222][ T9839] dump_stack_lvl+0x16c/0x230 [ 232.602959][ T9839] ? show_regs_print_info+0x20/0x20 [ 232.608216][ T9839] ? load_image+0x3b0/0x3b0 [ 232.612777][ T9839] ? __lock_acquire+0x7c80/0x7c80 [ 232.617863][ T9839] should_fail_ex+0x39d/0x4d0 [ 232.622610][ T9839] should_failslab+0x9/0x20 [ 232.627159][ T9839] slab_pre_alloc_hook+0x59/0x310 [ 232.632225][ T9839] ? sock_write_iter+0x2bb/0x3f0 [ 232.637206][ T9839] ? vfs_write+0x43b/0x940 [ 232.641668][ T9839] ? ksys_write+0x147/0x250 [ 232.646231][ T9839] kmem_cache_alloc_node+0x60/0x330 [ 232.651477][ T9839] ? alloc_vmap_area+0x1c4/0x1c70 [ 232.656567][ T9839] alloc_vmap_area+0x1c4/0x1c70 [ 232.661534][ T9839] ? vm_map_ram+0xcb0/0xcb0 [ 232.666111][ T9839] ? rcu_is_watching+0x15/0xb0 [ 232.670955][ T9839] __get_vm_area_node+0x162/0x370 [ 232.676069][ T9839] __vmalloc_node_range+0x36e/0x1320 [ 232.681404][ T9839] ? netlink_sendmsg+0x5f3/0xbe0 [ 232.686388][ T9839] ? netlink_insert+0x106a/0x1370 [ 232.691531][ T9839] ? netlink_insert+0x2b3/0x1370 [ 232.696552][ T9839] ? netlink_data_ready+0x10/0x10 [ 232.701658][ T9839] ? free_vm_area+0x50/0x50 [ 232.706244][ T9839] ? netlink_sendmsg+0x5f3/0xbe0 [ 232.711230][ T9839] vmalloc+0x79/0x90 [ 232.715187][ T9839] ? netlink_sendmsg+0x5f3/0xbe0 [ 232.720191][ T9839] netlink_sendmsg+0x5f3/0xbe0 [ 232.725059][ T9839] ? netlink_getsockopt+0x580/0x580 [ 232.730328][ T9839] ? aa_sock_msg_perm+0x94/0x150 [ 232.735321][ T9839] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 232.740655][ T9839] ? security_socket_sendmsg+0x80/0xa0 [ 232.746166][ T9839] sock_write_iter+0x2bb/0x3f0 [ 232.750992][ T9839] ? sock_read_iter+0x3b0/0x3b0 [ 232.755925][ T9839] ? common_file_perm+0x198/0x1f0 [ 232.761032][ T9839] vfs_write+0x43b/0x940 [ 232.765345][ T9839] ? file_end_write+0x250/0x250 [ 232.770285][ T9839] ? __fget_files+0x44a/0x4d0 [ 232.775046][ T9839] ? __fdget_pos+0x1d8/0x330 [ 232.779687][ T9839] ? ksys_write+0x75/0x250 [ 232.784174][ T9839] ksys_write+0x147/0x250 [ 232.788561][ T9839] ? __ia32_sys_read+0x90/0x90 [ 232.793389][ T9839] ? lockdep_hardirqs_on+0x98/0x150 [ 232.798657][ T9839] do_syscall_64+0x55/0xb0 [ 232.803122][ T9839] ? clear_bhb_loop+0x40/0x90 [ 232.807841][ T9839] ? clear_bhb_loop+0x40/0x90 [ 232.812571][ T9839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.818501][ T9839] RIP: 0033:0x7f4141f8eec9 [ 232.822959][ T9839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.842613][ T9839] RSP: 002b:00007f4142d97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.851078][ T9839] RAX: ffffffffffffffda RBX: 00007f41421e5fa0 RCX: 00007f4141f8eec9 [ 232.859122][ T9839] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000005 [ 232.867139][ T9839] RBP: 00007f4142d97090 R08: 0000000000000000 R09: 0000000000000000 [ 232.875155][ T9839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.883165][ T9839] R13: 00007f41421e6038 R14: 00007f41421e5fa0 R15: 00007ffc2a49b1c8 [ 232.891228][ T9839] [ 232.911006][ T9839] syz.3.1381: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 232.944045][ T9839] CPU: 0 PID: 9839 Comm: syz.3.1381 Not tainted syzkaller #0 [ 232.951486][ T9839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 232.961583][ T9839] Call Trace: [ 232.964904][ T9839] [ 232.967940][ T9839] dump_stack_lvl+0x16c/0x230 [ 232.972689][ T9839] ? show_regs_print_info+0x20/0x20 [ 232.977952][ T9839] ? load_image+0x3b0/0x3b0 [ 232.982536][ T9839] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 232.989015][ T9839] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 232.995632][ T9839] warn_alloc+0x210/0x300 [ 233.000041][ T9839] ? slab_free_freelist_hook+0x130/0x1b0 [ 233.005751][ T9839] ? zone_watermark_ok_safe+0x230/0x230 [ 233.011343][ T9839] ? __get_vm_area_node+0x17b/0x370 [ 233.016614][ T9839] ? __get_vm_area_node+0x17b/0x370 [ 233.021892][ T9839] __vmalloc_node_range+0x393/0x1320 [ 233.027233][ T9839] ? netlink_insert+0x106a/0x1370 [ 233.032354][ T9839] ? netlink_insert+0x2b3/0x1370 [ 233.037366][ T9839] ? netlink_data_ready+0x10/0x10 [ 233.042544][ T9839] ? free_vm_area+0x50/0x50 [ 233.047128][ T9839] ? netlink_sendmsg+0x5f3/0xbe0 [ 233.052115][ T9839] vmalloc+0x79/0x90 [ 233.056061][ T9839] ? netlink_sendmsg+0x5f3/0xbe0 [ 233.061045][ T9839] netlink_sendmsg+0x5f3/0xbe0 [ 233.065886][ T9839] ? netlink_getsockopt+0x580/0x580 [ 233.071150][ T9839] ? aa_sock_msg_perm+0x94/0x150 [ 233.076148][ T9839] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 233.081480][ T9839] ? security_socket_sendmsg+0x80/0xa0 [ 233.087002][ T9839] sock_write_iter+0x2bb/0x3f0 [ 233.091832][ T9839] ? sock_read_iter+0x3b0/0x3b0 [ 233.096776][ T9839] ? common_file_perm+0x198/0x1f0 [ 233.101879][ T9839] vfs_write+0x43b/0x940 [ 233.106200][ T9839] ? file_end_write+0x250/0x250 [ 233.111115][ T9839] ? __fget_files+0x44a/0x4d0 [ 233.115872][ T9839] ? __fdget_pos+0x1d8/0x330 [ 233.120600][ T9839] ? ksys_write+0x75/0x250 [ 233.125077][ T9839] ksys_write+0x147/0x250 [ 233.129483][ T9839] ? __ia32_sys_read+0x90/0x90 [ 233.134325][ T9839] ? lockdep_hardirqs_on+0x98/0x150 [ 233.139605][ T9839] do_syscall_64+0x55/0xb0 [ 233.144076][ T9839] ? clear_bhb_loop+0x40/0x90 [ 233.148799][ T9839] ? clear_bhb_loop+0x40/0x90 [ 233.153527][ T9839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.159473][ T9839] RIP: 0033:0x7f4141f8eec9 [ 233.163956][ T9839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.183739][ T9839] RSP: 002b:00007f4142d97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 233.192212][ T9839] RAX: ffffffffffffffda RBX: 00007f41421e5fa0 RCX: 00007f4141f8eec9 [ 233.200238][ T9839] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000005 [ 233.208272][ T9839] RBP: 00007f4142d97090 R08: 0000000000000000 R09: 0000000000000000 [ 233.216282][ T9839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.224289][ T9839] R13: 00007f41421e6038 R14: 00007f41421e5fa0 R15: 00007ffc2a49b1c8 [ 233.232351][ T9839] [ 233.252564][ T9839] Mem-Info: [ 233.256121][ T9839] active_anon:5318 inactive_anon:0 isolated_anon:0 [ 233.256121][ T9839] active_file:16973 inactive_file:39938 isolated_file:0 [ 233.256121][ T9839] unevictable:768 dirty:778 writeback:0 [ 233.256121][ T9839] slab_reclaimable:10156 slab_unreclaimable:92641 [ 233.256121][ T9839] mapped:25978 shmem:1361 pagetables:535 [ 233.256121][ T9839] sec_pagetables:0 bounce:0 [ 233.256121][ T9839] kernel_misc_reclaimable:0 [ 233.256121][ T9839] free:1352689 free_pcp:9385 free_cma:0 [ 233.334428][ T9839] Node 0 active_anon:21372kB inactive_anon:0kB active_file:67892kB inactive_file:159548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103912kB dirty:3108kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11560kB pagetables:2140kB sec_pagetables:0kB all_unreclaimable? no [ 233.369770][ T9839] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 233.432668][ T9839] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.463874][ T9839] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 233.469697][ T9839] Node 0 DMA32 free:1499692kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:21428kB inactive_anon:0kB active_file:67892kB inactive_file:158228kB unevictable:1536kB writepending:3108kB present:3129332kB managed:2589604kB mlocked:0kB bounce:0kB free_pcp:19784kB local_pcp:14528kB free_cma:0kB [ 233.500650][ T9839] lowmem_reserve[]: 0 0 1 1 1 [ 233.506270][ T9839] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.533601][ T9839] lowmem_reserve[]: 0 0 0 0 0 [ 233.538343][ T9839] Node 1 Normal free:3895432kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18944kB local_pcp:9504kB free_cma:0kB [ 233.569237][ T9839] lowmem_reserve[]: 0 0 0 0 0 [ 233.574292][ T9839] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 233.587962][ T9839] Node 0 DMA32: 1707*4kB (UME) 1632*8kB (UM) 1392*16kB (UM) 624*32kB (UME) 436*64kB (UME) 119*128kB (UM) 81*256kB (UME) 59*512kB (UME) 26*1024kB (UM) 11*2048kB (UME) 316*4096kB (UM) = 1499692kB [ 233.608308][ T9839] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 233.626618][ T9839] Node 1 Normal: 254*4kB (UME) 56*8kB (UME) 43*16kB (UME) 79*32kB (UME) 31*64kB (UME) 5*128kB (UM) 2*256kB (ME) 1*512kB (E) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3895432kB [ 233.687156][ T9839] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.718211][ T9839] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 233.729466][ T9839] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.739936][ T9839] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 233.750386][ T9839] 58272 total pagecache pages [ 233.755518][ T9839] 0 pages in swap cache [ 233.799717][ T9839] Free swap = 124996kB [ 233.812263][ T9839] Total swap = 124996kB [ 233.826676][ T9839] 2097051 pages RAM [ 233.830513][ T9839] 0 pages HighMem/MovableOnly [ 233.855912][ T9839] 416136 pages reserved [ 233.872345][ T9839] 0 pages cma reserved [ 233.932712][ T9857] netlink: 'syz.2.1385': attribute type 10 has an invalid length. [ 234.093577][ T9857] veth0_vlan: left promiscuous mode [ 234.101564][ T9857] veth0_vlan: entered promiscuous mode [ 234.126268][ T9857] team0: Device veth0_vlan failed to register rx_handler [ 234.196283][ T9862] netlink: 'syz.1.1387': attribute type 4 has an invalid length. [ 234.291572][ T9866] __nla_validate_parse: 5 callbacks suppressed [ 234.291589][ T9866] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.1388'. [ 234.632838][ T9875] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 234.937462][ T9882] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1394'. [ 235.244148][ T9884] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1404'. [ 236.830969][ T9889] netlink: 7807 bytes leftover after parsing attributes in process `syz.0.1397'. [ 236.861502][ T9895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.347056][ T9912] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 237.550453][ T9920] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.1411'. [ 237.671288][ T9923] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 237.859732][ T9932] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1414'. [ 238.071318][ T9936] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 238.185974][ T9942] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.1420'. [ 238.906459][ T9968] FAULT_INJECTION: forcing a failure. [ 238.906459][ T9968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.923670][ T9968] CPU: 0 PID: 9968 Comm: syz.2.1429 Not tainted syzkaller #0 [ 238.931085][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 238.941248][ T9968] Call Trace: [ 238.944552][ T9968] [ 238.947594][ T9968] dump_stack_lvl+0x16c/0x230 [ 238.952310][ T9968] ? show_regs_print_info+0x20/0x20 [ 238.957550][ T9968] ? load_image+0x3b0/0x3b0 [ 238.962105][ T9968] ? __might_fault+0xaa/0x120 [ 238.966829][ T9968] ? __lock_acquire+0x7c80/0x7c80 [ 238.971889][ T9968] should_fail_ex+0x39d/0x4d0 [ 238.976606][ T9968] _copy_from_user+0x2f/0xe0 [ 238.981243][ T9968] ____sys_sendmsg+0x30d/0x950 [ 238.986054][ T9968] ? __sys_sendmsg_sock+0x30/0x30 [ 238.991099][ T9968] ? __import_iovec+0x3fa/0x860 [ 238.995999][ T9968] ? import_iovec+0x73/0xa0 [ 239.000524][ T9968] ___sys_sendmsg+0x220/0x290 [ 239.005228][ T9968] ? __sys_sendmsg+0x270/0x270 [ 239.010042][ T9968] ? __lock_acquire+0x7c80/0x7c80 [ 239.015119][ T9968] __se_sys_sendmsg+0x1a5/0x270 [ 239.020007][ T9968] ? perf_trace_preemptirq_template+0x281/0x340 [ 239.026281][ T9968] ? __x64_sys_sendmsg+0x80/0x80 [ 239.031253][ T9968] ? lockdep_hardirqs_on+0x98/0x150 [ 239.036477][ T9968] do_syscall_64+0x55/0xb0 [ 239.040910][ T9968] ? clear_bhb_loop+0x40/0x90 [ 239.045595][ T9968] ? clear_bhb_loop+0x40/0x90 [ 239.050307][ T9968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.056212][ T9968] RIP: 0033:0x7fe66b38eec9 [ 239.060637][ T9968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.080275][ T9968] RSP: 002b:00007fe66c1b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.088706][ T9968] RAX: ffffffffffffffda RBX: 00007fe66b5e5fa0 RCX: 00007fe66b38eec9 [ 239.096690][ T9968] RDX: 000000000000e900 RSI: 0000200000000b40 RDI: 0000000000000003 [ 239.104673][ T9968] RBP: 00007fe66c1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 239.112652][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.120634][ T9968] R13: 00007fe66b5e6038 R14: 00007fe66b5e5fa0 R15: 00007fff1e0105a8 [ 239.128642][ T9968] [ 239.148438][ T9970] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 239.239502][ T9974] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1431'. [ 239.316988][ T9978] FAULT_INJECTION: forcing a failure. [ 239.316988][ T9978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.330479][ T9978] CPU: 0 PID: 9978 Comm: syz.0.1433 Not tainted syzkaller #0 [ 239.337884][ T9978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 239.347934][ T9978] Call Trace: [ 239.351204][ T9978] [ 239.354130][ T9978] dump_stack_lvl+0x16c/0x230 [ 239.358808][ T9978] ? show_regs_print_info+0x20/0x20 [ 239.364003][ T9978] ? load_image+0x3b0/0x3b0 [ 239.368515][ T9978] ? __lock_acquire+0x7c80/0x7c80 [ 239.373537][ T9978] ? snprintf+0xdb/0x120 [ 239.377786][ T9978] should_fail_ex+0x39d/0x4d0 [ 239.382482][ T9978] _copy_to_user+0x2f/0xa0 [ 239.386898][ T9978] simple_read_from_buffer+0xe7/0x150 [ 239.392285][ T9978] proc_fail_nth_read+0x1e3/0x250 [ 239.397329][ T9978] ? proc_fault_inject_write+0x340/0x340 [ 239.402975][ T9978] ? fsnotify_perm+0x271/0x5e0 [ 239.407735][ T9978] ? proc_fault_inject_write+0x340/0x340 [ 239.413361][ T9978] vfs_read+0x27e/0x920 [ 239.417643][ T9978] ? kernel_read+0x1e0/0x1e0 [ 239.422252][ T9978] ? __fget_files+0x28/0x4d0 [ 239.426839][ T9978] ? __fget_files+0x44a/0x4d0 [ 239.431515][ T9978] ? __fdget_pos+0x2a3/0x330 [ 239.436098][ T9978] ? ksys_read+0x75/0x250 [ 239.440423][ T9978] ksys_read+0x147/0x250 [ 239.444665][ T9978] ? vfs_write+0x940/0x940 [ 239.449098][ T9978] ? lockdep_hardirqs_on+0x98/0x150 [ 239.454306][ T9978] do_syscall_64+0x55/0xb0 [ 239.458717][ T9978] ? clear_bhb_loop+0x40/0x90 [ 239.463386][ T9978] ? clear_bhb_loop+0x40/0x90 [ 239.468060][ T9978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.473969][ T9978] RIP: 0033:0x7fabaad8d8dc [ 239.478383][ T9978] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 239.497986][ T9978] RSP: 002b:00007fababbd3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.506395][ T9978] RAX: ffffffffffffffda RBX: 00007fabaafe5fa0 RCX: 00007fabaad8d8dc [ 239.514362][ T9978] RDX: 000000000000000f RSI: 00007fababbd30a0 RDI: 0000000000000005 [ 239.522325][ T9978] RBP: 00007fababbd3090 R08: 0000000000000000 R09: 0000000000000000 [ 239.530288][ T9978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.538335][ T9978] R13: 00007fabaafe6038 R14: 00007fabaafe5fa0 R15: 00007ffe164a2e48 [ 239.546311][ T9978] [ 239.796252][ T9987] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1435'. [ 240.235955][ T9998] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 240.321356][T10000] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1442'. [ 240.621616][T10015] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 241.258386][T10029] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 241.270537][T10031] netlink: 209560 bytes leftover after parsing attributes in process `syz.2.1454'. [ 241.603231][T10042] netlink: 'syz.0.1457': attribute type 10 has an invalid length. [ 241.611099][T10042] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1457'. [ 241.657611][T10042] netlink: 'syz.0.1457': attribute type 10 has an invalid length. [ 241.679554][T10042] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1457'. [ 241.723979][T10037] netlink: 'syz.0.1457': attribute type 10 has an invalid length. [ 241.781564][T10037] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1457'. [ 241.885555][T10035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.141534][T10057] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.1464'. [ 242.284067][T10059] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 242.323739][T10064] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 242.639652][T10077] netlink: 'syz.3.1471': attribute type 10 has an invalid length. [ 242.648794][T10077] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1471'. [ 242.658520][T10077] netlink: 'syz.3.1471': attribute type 10 has an invalid length. [ 242.687660][T10077] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1471'. [ 243.018884][T10089] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 243.458856][T10107] netlink: 209560 bytes leftover after parsing attributes in process `syz.0.1486'. [ 243.578041][T10114] netlink: 'syz.1.1484': attribute type 10 has an invalid length. [ 243.604613][T10114] netlink: 'syz.1.1484': attribute type 10 has an invalid length. [ 243.616497][T10110] netlink: 'syz.1.1484': attribute type 10 has an invalid length. [ 243.669301][T10119] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 244.144655][T10141] netlink: zone id is out of range [ 244.151421][T10141] netlink: zone id is out of range [ 244.158124][T10141] netlink: zone id is out of range [ 244.172252][T10141] netlink: zone id is out of range [ 244.181749][T10141] netlink: zone id is out of range [ 244.187299][T10141] netlink: zone id is out of range [ 244.193008][T10141] netlink: zone id is out of range [ 244.198358][T10141] netlink: zone id is out of range [ 244.330683][T10146] netlink: 'syz.1.1500': attribute type 8 has an invalid length. [ 245.015717][T10166] __nla_validate_parse: 6 callbacks suppressed [ 245.015733][T10166] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1508'. [ 245.129105][T10170] FAULT_INJECTION: forcing a failure. [ 245.129105][T10170] name failslab, interval 1, probability 0, space 0, times 0 [ 245.147248][T10170] CPU: 0 PID: 10170 Comm: syz.1.1510 Not tainted syzkaller #0 [ 245.154769][T10170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 245.164887][T10170] Call Trace: [ 245.168187][T10170] [ 245.171133][T10170] dump_stack_lvl+0x16c/0x230 [ 245.175829][T10170] ? show_regs_print_info+0x20/0x20 [ 245.181036][T10170] ? load_image+0x3b0/0x3b0 [ 245.185550][T10170] ? __might_sleep+0xe0/0xe0 [ 245.190157][T10170] ? __lock_acquire+0x7c80/0x7c80 [ 245.195198][T10170] should_fail_ex+0x39d/0x4d0 [ 245.199906][T10170] should_failslab+0x9/0x20 [ 245.204427][T10170] slab_pre_alloc_hook+0x59/0x310 [ 245.209466][T10170] ? nbp_vlan_add+0x20f/0x3c0 [ 245.214161][T10170] __kmem_cache_alloc_node+0x53/0x260 [ 245.219555][T10170] ? __vlan_flush+0x3c0/0x3c0 [ 245.224244][T10170] ? nbp_vlan_add+0x20f/0x3c0 [ 245.228924][T10170] kmalloc_trace+0x2a/0xe0 [ 245.233360][T10170] nbp_vlan_add+0x20f/0x3c0 [ 245.237869][T10170] br_vlan_info+0xfb/0x460 [ 245.242293][T10170] ? br_process_vlan_info+0x890/0x890 [ 245.247679][T10170] br_process_vlan_info+0x302/0x890 [ 245.252894][T10170] ? __lock_acquire+0x1334/0x7c80 [ 245.257921][T10170] ? br_getlink+0x180/0x180 [ 245.262440][T10170] br_afspec+0x392/0x5e0 [ 245.266696][T10170] ? br_setport+0x1670/0x1670 [ 245.271393][T10170] br_setlink+0x28b/0x7e0 [ 245.275739][T10170] ? br_vlan_info+0x460/0x460 [ 245.280458][T10170] ? __mutex_lock+0x95d/0xcc0 [ 245.285147][T10170] ? mutex_is_locked+0x12/0x40 [ 245.289928][T10170] rtnl_bridge_setlink+0x5b1/0x7d0 [ 245.295062][T10170] ? rtnl_bridge_dellink+0x6d0/0x6d0 [ 245.300358][T10170] ? rtnl_bridge_dellink+0x6d0/0x6d0 [ 245.305651][T10170] rtnetlink_rcv_msg+0x7c7/0xf10 [ 245.310601][T10170] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 245.315727][T10170] ? lockdep_hardirqs_on+0x98/0x150 [ 245.320939][T10170] ? rtnetlink_bind+0x80/0x80 [ 245.325629][T10170] ? perf_trace_preemptirq_template+0xa4/0x340 [ 245.331878][T10170] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 245.337864][T10170] ? lock_chain_count+0x20/0x20 [ 245.342810][T10170] ? __local_bh_enable_ip+0x12e/0x1c0 [ 245.348182][T10170] ? lockdep_hardirqs_on+0x98/0x150 [ 245.353407][T10170] ? __local_bh_enable_ip+0x12e/0x1c0 [ 245.358806][T10170] ? _local_bh_enable+0xa0/0xa0 [ 245.363662][T10170] ? __dev_queue_xmit+0x245/0x35a0 [ 245.368778][T10170] ? __dev_queue_xmit+0x1449/0x35a0 [ 245.373997][T10170] ? __dev_queue_xmit+0x245/0x35a0 [ 245.379129][T10170] ? ref_tracker_free+0x634/0x7d0 [ 245.384162][T10170] ? __copy_skb_header+0xa7/0x550 [ 245.389210][T10170] netlink_rcv_skb+0x216/0x480 [ 245.394000][T10170] ? rtnetlink_bind+0x80/0x80 [ 245.398697][T10170] ? netlink_ack+0x1110/0x1110 [ 245.403482][T10170] ? __lock_acquire+0x7c80/0x7c80 [ 245.408520][T10170] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.413734][T10170] netlink_unicast+0x751/0x8d0 [ 245.418512][T10170] netlink_sendmsg+0x8c1/0xbe0 [ 245.423290][T10170] ? netlink_getsockopt+0x580/0x580 [ 245.428518][T10170] ? aa_sock_msg_perm+0x94/0x150 [ 245.433471][T10170] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 245.438768][T10170] ? security_socket_sendmsg+0x80/0xa0 [ 245.444229][T10170] ? netlink_getsockopt+0x580/0x580 [ 245.449438][T10170] ____sys_sendmsg+0x5bf/0x950 [ 245.454323][T10170] ? __asan_memset+0x22/0x40 [ 245.458933][T10170] ? __sys_sendmsg_sock+0x30/0x30 [ 245.463967][T10170] ? __import_iovec+0x5f2/0x860 [ 245.468832][T10170] ? import_iovec+0x73/0xa0 [ 245.473369][T10170] ___sys_sendmsg+0x220/0x290 [ 245.478063][T10170] ? __sys_sendmsg+0x270/0x270 [ 245.482855][T10170] ? __lock_acquire+0x7c80/0x7c80 [ 245.487905][T10170] __se_sys_sendmsg+0x1a5/0x270 [ 245.492768][T10170] ? __x64_sys_sendmsg+0x80/0x80 [ 245.497734][T10170] ? lockdep_hardirqs_on+0x98/0x150 [ 245.502944][T10170] do_syscall_64+0x55/0xb0 [ 245.507365][T10170] ? clear_bhb_loop+0x40/0x90 [ 245.512042][T10170] ? clear_bhb_loop+0x40/0x90 [ 245.516721][T10170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.522625][T10170] RIP: 0033:0x7f5ead18eec9 [ 245.527039][T10170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.546646][T10170] RSP: 002b:00007f5eae117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.555067][T10170] RAX: ffffffffffffffda RBX: 00007f5ead3e5fa0 RCX: 00007f5ead18eec9 [ 245.563039][T10170] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 245.571013][T10170] RBP: 00007f5eae117090 R08: 0000000000000000 R09: 0000000000000000 [ 245.578981][T10170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.586956][T10170] R13: 00007f5ead3e6038 R14: 00007f5ead3e5fa0 R15: 00007ffd94e9db28 [ 245.594984][T10170] [ 245.807235][T10180] netlink: 7807 bytes leftover after parsing attributes in process `syz.0.1512'. [ 246.063807][T10187] netlink: 'syz.3.1517': attribute type 8 has an invalid length. [ 246.072482][T10187] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1517'. [ 246.123398][T10187] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1517'. [ 247.064894][ T1301] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 247.982294][T10221] netlink: 7807 bytes leftover after parsing attributes in process `syz.2.1531'. [ 248.096330][T10223] netlink: 'syz.0.1533': attribute type 8 has an invalid length. [ 248.123270][T10223] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1533'. [ 248.145458][T10223] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1533'. [ 248.228971][T10227] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.1535'. [ 248.231898][T10228] netlink: 'syz.3.1534': attribute type 10 has an invalid length. [ 248.258886][T10228] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1534'. [ 248.268624][T10228] netlink: 'syz.3.1534': attribute type 10 has an invalid length. [ 248.276828][T10228] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1534'. [ 248.601554][T10240] net_ratelimit: 447 callbacks suppressed [ 248.601626][T10240] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 250.153599][T10269] netlink: 'syz.1.1549': attribute type 10 has an invalid length. [ 250.191863][T10269] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1549'. [ 250.201747][T10272] netlink: 'syz.2.1552': attribute type 2 has an invalid length. [ 250.210270][T10272] netlink: 'syz.2.1552': attribute type 8 has an invalid length. [ 250.219248][T10272] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1552'. [ 250.235983][T10269] netlink: 'syz.1.1549': attribute type 10 has an invalid length. [ 250.245490][T10269] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1549'. [ 250.261039][T10265] netlink: 'syz.1.1549': attribute type 10 has an invalid length. [ 250.274651][T10265] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1549'. [ 250.429839][T10281] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1554'. [ 250.450306][T10281] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1554'. [ 250.757930][T10288] netlink: 'syz.2.1557': attribute type 2 has an invalid length. [ 250.944775][T10293] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 251.245397][T10307] netlink: 'syz.2.1563': attribute type 10 has an invalid length. [ 251.254031][T10307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1563'. [ 251.272291][T10307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1563'. [ 251.315224][T10310] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.1564'. [ 251.689919][T10322] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 252.569441][T10333] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 252.680493][T10343] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1576'. [ 253.021889][T10355] netlink: zone id is out of range [ 253.048687][T10355] netlink: zone id is out of range [ 253.068333][T10355] netlink: zone id is out of range [ 253.078557][T10355] netlink: zone id is out of range [ 253.084269][T10355] netlink: zone id is out of range [ 253.097252][T10355] netlink: zone id is out of range [ 253.123535][T10355] netlink: zone id is out of range [ 253.176558][T10360] validate_nla: 4 callbacks suppressed [ 253.176573][T10360] netlink: 'syz.2.1584': attribute type 2 has an invalid length. [ 253.441584][T10371] netlink: 'syz.3.1588': attribute type 2 has an invalid length. [ 253.454259][T10371] FAULT_INJECTION: forcing a failure. [ 253.454259][T10371] name failslab, interval 1, probability 0, space 0, times 0 [ 253.475896][T10371] CPU: 0 PID: 10371 Comm: syz.3.1588 Not tainted syzkaller #0 [ 253.483386][T10371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 253.493457][T10371] Call Trace: [ 253.496762][T10371] [ 253.499719][T10371] dump_stack_lvl+0x16c/0x230 [ 253.504525][T10371] ? show_regs_print_info+0x20/0x20 [ 253.509757][T10371] ? load_image+0x3b0/0x3b0 [ 253.514291][T10371] ? __might_sleep+0xe0/0xe0 [ 253.518996][T10371] ? __lock_acquire+0x7c80/0x7c80 [ 253.524056][T10371] should_fail_ex+0x39d/0x4d0 [ 253.528778][T10371] should_failslab+0x9/0x20 [ 253.533316][T10371] slab_pre_alloc_hook+0x59/0x310 [ 253.538371][T10371] ? lockdep_hardirqs_on+0x98/0x150 [ 253.543606][T10371] kmem_cache_alloc_node+0x60/0x330 [ 253.548834][T10371] ? __alloc_skb+0x108/0x2c0 [ 253.553455][T10371] __alloc_skb+0x108/0x2c0 [ 253.557901][T10371] netlink_ack+0x376/0x1110 [ 253.562444][T10371] ? __dev_queue_xmit+0x245/0x35a0 [ 253.567586][T10371] ? netlink_dump+0xde0/0xde0 [ 253.572297][T10371] ? ref_tracker_free+0x634/0x7d0 [ 253.577343][T10371] ? __copy_skb_header+0xa7/0x550 [ 253.582402][T10371] netlink_rcv_skb+0x29a/0x480 [ 253.587194][T10371] ? rtnetlink_bind+0x80/0x80 [ 253.591904][T10371] ? netlink_ack+0x1110/0x1110 [ 253.596704][T10371] ? __lock_acquire+0x7c80/0x7c80 [ 253.601756][T10371] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.606982][T10371] netlink_unicast+0x751/0x8d0 [ 253.611781][T10371] netlink_sendmsg+0x8c1/0xbe0 [ 253.616581][T10371] ? netlink_getsockopt+0x580/0x580 [ 253.621815][T10371] ? aa_sock_msg_perm+0x94/0x150 [ 253.626777][T10371] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 253.632085][T10371] ? security_socket_sendmsg+0x80/0xa0 [ 253.637568][T10371] ? netlink_getsockopt+0x580/0x580 [ 253.642804][T10371] ____sys_sendmsg+0x5bf/0x950 [ 253.647629][T10371] ? __asan_memset+0x22/0x40 [ 253.652253][T10371] ? __sys_sendmsg_sock+0x30/0x30 [ 253.657306][T10371] ? __import_iovec+0x5f2/0x860 [ 253.662195][T10371] ? import_iovec+0x73/0xa0 [ 253.666745][T10371] ___sys_sendmsg+0x220/0x290 [ 253.671466][T10371] ? __sys_sendmsg+0x270/0x270 [ 253.676273][T10371] ? __lock_acquire+0x7c80/0x7c80 [ 253.681343][T10371] __se_sys_sendmsg+0x1a5/0x270 [ 253.686218][T10371] ? perf_trace_preemptirq_template+0x281/0x340 [ 253.692502][T10371] ? __x64_sys_sendmsg+0x80/0x80 [ 253.697504][T10371] ? lockdep_hardirqs_on+0x98/0x150 [ 253.702738][T10371] do_syscall_64+0x55/0xb0 [ 253.707182][T10371] ? clear_bhb_loop+0x40/0x90 [ 253.711902][T10371] ? clear_bhb_loop+0x40/0x90 [ 253.716619][T10371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.722534][T10371] RIP: 0033:0x7f4141f8eec9 [ 253.726976][T10371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.746601][T10371] RSP: 002b:00007f4142d97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.755041][T10371] RAX: ffffffffffffffda RBX: 00007f41421e5fa0 RCX: 00007f4141f8eec9 [ 253.763030][T10371] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 253.771015][T10371] RBP: 00007f4142d97090 R08: 0000000000000000 R09: 0000000000000000 [ 253.779117][T10371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.787112][T10371] R13: 00007f41421e6038 R14: 00007f41421e5fa0 R15: 00007ffc2a49b1c8 [ 253.795118][T10371] [ 254.032364][ T1021] wlan1: Trigger new scan to find an IBSS to join [ 254.147348][T10386] netlink: 'syz.3.1593': attribute type 10 has an invalid length. [ 254.168678][T10386] netlink: 'syz.3.1593': attribute type 10 has an invalid length. [ 254.349954][T10394] netlink: 'syz.3.1596': attribute type 2 has an invalid length. [ 254.733207][T10404] FAULT_INJECTION: forcing a failure. [ 254.733207][T10404] name failslab, interval 1, probability 0, space 0, times 0 [ 254.750621][T10404] CPU: 0 PID: 10404 Comm: syz.0.1599 Not tainted syzkaller #0 [ 254.758145][T10404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 254.768240][T10404] Call Trace: [ 254.771558][T10404] [ 254.774532][T10404] dump_stack_lvl+0x16c/0x230 [ 254.779290][T10404] ? show_regs_print_info+0x20/0x20 [ 254.784563][T10404] ? load_image+0x3b0/0x3b0 [ 254.789157][T10404] ? __might_sleep+0xe0/0xe0 [ 254.793817][T10404] ? __lock_acquire+0x7c80/0x7c80 [ 254.798905][T10404] should_fail_ex+0x39d/0x4d0 [ 254.803657][T10404] should_failslab+0x9/0x20 [ 254.808205][T10404] slab_pre_alloc_hook+0x59/0x310 [ 254.813292][T10404] ? allocate_cgrp_cset_links+0xc9/0x320 [ 254.818978][T10404] __kmem_cache_alloc_node+0x53/0x260 [ 254.824423][T10404] ? allocate_cgrp_cset_links+0xc9/0x320 [ 254.830113][T10404] kmalloc_trace+0x2a/0xe0 [ 254.834611][T10404] allocate_cgrp_cset_links+0xc9/0x320 [ 254.840158][T10404] find_css_set+0x9dc/0x1540 [ 254.844864][T10404] ? cgroup_migrate_prepare_dst+0x6f0/0x6f0 [ 254.850847][T10404] ? mark_lock+0x94/0x320 [ 254.855283][T10404] cgroup_migrate_prepare_dst+0x130/0x6f0 [ 254.861080][T10404] cgroup_attach_task+0x527/0x830 [ 254.866161][T10404] ? cgroup_attach_task+0x1f3/0x830 [ 254.871412][T10404] ? cgroup_migrate_execute+0xf30/0xf30 [ 254.877049][T10404] ? get_task_cred+0x23/0x300 [ 254.881792][T10404] ? get_task_cred+0x2c1/0x300 [ 254.886599][T10404] ? get_task_cred+0x23/0x300 [ 254.891355][T10404] __cgroup1_procs_write+0x2e0/0x3c0 [ 254.896725][T10404] ? cgroup_pidlist_destroy_work_fn+0x210/0x210 [ 254.903043][T10404] ? __virt_addr_valid+0x18c/0x540 [ 254.908208][T10404] ? cgroup_pidlist_stop+0xf0/0xf0 [ 254.913383][T10404] cgroup_file_write+0x2fc/0x660 [ 254.918380][T10404] ? read_lock_is_recursive+0x20/0x20 [ 254.923823][T10404] ? cgroup_seqfile_stop+0xd0/0xd0 [ 254.929067][T10404] ? cgroup_seqfile_stop+0xd0/0xd0 [ 254.934263][T10404] kernfs_fop_write_iter+0x3b6/0x520 [ 254.939645][T10404] vfs_write+0x43b/0x940 [ 254.943990][T10404] ? file_end_write+0x250/0x250 [ 254.948926][T10404] ? __fget_files+0x44a/0x4d0 [ 254.953721][T10404] ? __fdget_pos+0x2a3/0x330 [ 254.958366][T10404] ? ksys_write+0x75/0x250 [ 254.962848][T10404] ksys_write+0x147/0x250 [ 254.967247][T10404] ? __ia32_sys_read+0x90/0x90 [ 254.972077][T10404] ? lockdep_hardirqs_on+0x98/0x150 [ 254.977344][T10404] do_syscall_64+0x55/0xb0 [ 254.981804][T10404] ? clear_bhb_loop+0x40/0x90 [ 254.986527][T10404] ? clear_bhb_loop+0x40/0x90 [ 254.991256][T10404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.997190][T10404] RIP: 0033:0x7fabaad8eec9 [ 255.001649][T10404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.021284][T10404] RSP: 002b:00007fababbd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 255.029724][T10404] RAX: ffffffffffffffda RBX: 00007fabaafe5fa0 RCX: 00007fabaad8eec9 [ 255.037720][T10404] RDX: 0000000000000012 RSI: 0000200000000380 RDI: 0000000000000004 [ 255.045741][T10404] RBP: 00007fababbd3090 R08: 0000000000000000 R09: 0000000000000000 [ 255.053757][T10404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.061851][T10404] R13: 00007fabaafe6038 R14: 00007fabaafe5fa0 R15: 00007ffe164a2e48 [ 255.069898][T10404] [ 255.282897][T10409] __nla_validate_parse: 8 callbacks suppressed [ 255.282917][T10409] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.1601'. [ 255.875447][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.882011][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.985037][T10429] netlink: 7807 bytes leftover after parsing attributes in process `syz.1.1609'. [ 256.391935][T10437] netlink: 'syz.0.1612': attribute type 4 has an invalid length. [ 256.400729][T10437] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1612'. [ 256.401042][T10438] netlink: 'syz.2.1611': attribute type 10 has an invalid length. [ 256.418455][T10438] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1611'. [ 256.427608][T10438] netlink: 'syz.2.1611': attribute type 10 has an invalid length. [ 256.435693][T10438] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1611'. [ 256.682301][T10443] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.1614'. [ 257.022442][T10449] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1617'. [ 257.055231][T10449] net_ratelimit: 219 callbacks suppressed [ 257.055246][T10449] netlink: zone id is out of range [ 257.078416][T10449] netlink: zone id is out of range [ 257.093711][T10449] netlink: zone id is out of range [ 257.099249][T10449] netlink: zone id is out of range [ 257.254270][T10449] netlink: zone id is out of range [ 257.259492][T10449] netlink: zone id is out of range [ 257.347843][T10449] netlink: zone id is out of range [ 257.365989][T10449] netlink: zone id is out of range [ 257.371161][T10449] netlink: zone id is out of range [ 257.397130][T10449] netlink: zone id is out of range [ 258.042463][ T12] wlan1: Trigger new scan to find an IBSS to join [ 258.427577][T10472] netlink: 'syz.1.1623': attribute type 4 has an invalid length. [ 258.437840][T10472] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1623'. [ 258.676318][T10475] netlink: 'syz.1.1625': attribute type 10 has an invalid length. [ 258.770554][T10475] geneve1: entered promiscuous mode [ 258.780510][T10475] geneve1: entered allmulticast mode [ 258.794077][T10475] team0: Port device geneve1 added [ 258.958189][T10484] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1629'. [ 259.016139][ T12] wlan1: Creating new IBSS network, BSSID b6:7d:8e:48:9b:57 [ 259.061018][T10488] netlink: 7807 bytes leftover after parsing attributes in process `syz.3.1630'. [ 261.312661][T10524] netlink: 'syz.0.1643': attribute type 4 has an invalid length. [ 261.320516][T10524] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1643'. [ 261.460208][T10526] FAULT_INJECTION: forcing a failure. [ 261.460208][T10526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.477332][T10526] CPU: 1 PID: 10526 Comm: syz.0.1644 Not tainted syzkaller #0 [ 261.484837][T10526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 261.494915][T10526] Call Trace: [ 261.498208][T10526] [ 261.501153][T10526] dump_stack_lvl+0x16c/0x230 [ 261.505860][T10526] ? show_regs_print_info+0x20/0x20 [ 261.511085][T10526] ? load_image+0x3b0/0x3b0 [ 261.515611][T10526] ? __lock_acquire+0x7c80/0x7c80 [ 261.520656][T10526] ? __virt_addr_valid+0x18c/0x540 [ 261.525800][T10526] should_fail_ex+0x39d/0x4d0 [ 261.530512][T10526] _copy_from_user+0x2f/0xe0 [ 261.535130][T10526] bpf_test_init+0xf9/0x150 [ 261.539680][T10526] bpf_prog_test_run_xdp+0x382/0xfa0 [ 261.545008][T10526] ? dev_put+0x80/0x80 [ 261.549149][T10526] ? dev_put+0x80/0x80 [ 261.553245][T10526] bpf_prog_test_run+0x321/0x390 [ 261.558214][T10526] __sys_bpf+0x440/0x800 [ 261.562482][T10526] ? bpf_link_show_fdinfo+0x350/0x350 [ 261.567891][T10526] ? lock_chain_count+0x20/0x20 [ 261.572777][T10526] __x64_sys_bpf+0x7c/0x90 [ 261.577220][T10526] do_syscall_64+0x55/0xb0 [ 261.581661][T10526] ? clear_bhb_loop+0x40/0x90 [ 261.586359][T10526] ? clear_bhb_loop+0x40/0x90 [ 261.591062][T10526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.596980][T10526] RIP: 0033:0x7fabaad8eec9 [ 261.601412][T10526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.621028][T10526] RSP: 002b:00007fababbd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.629441][T10526] RAX: ffffffffffffffda RBX: 00007fabaafe5fa0 RCX: 00007fabaad8eec9 [ 261.637424][T10526] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 261.645408][T10526] RBP: 00007fababbd3090 R08: 0000000000000000 R09: 0000000000000000 [ 261.653385][T10526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.661351][T10526] R13: 00007fabaafe6038 R14: 00007fabaafe5fa0 R15: 00007ffe164a2e48 [ 261.669329][T10526] [ 262.194545][T10543] netlink: 'syz.1.1652': attribute type 4 has an invalid length. [ 262.214454][T10543] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1652'. [ 262.309255][T10545] net_ratelimit: 445 callbacks suppressed [ 262.309301][T10545] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 262.705711][T10553] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 263.223627][T10567] FAULT_INJECTION: forcing a failure. [ 263.223627][T10567] name failslab, interval 1, probability 0, space 0, times 0 [ 263.239860][T10567] CPU: 0 PID: 10567 Comm: syz.0.1660 Not tainted syzkaller #0 [ 263.247385][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.257459][T10567] Call Trace: [ 263.260764][T10567] [ 263.263710][T10567] dump_stack_lvl+0x16c/0x230 [ 263.268417][T10567] ? show_regs_print_info+0x20/0x20 [ 263.273636][T10567] ? load_image+0x3b0/0x3b0 [ 263.278164][T10567] ? __might_sleep+0xe0/0xe0 [ 263.282779][T10567] ? __lock_acquire+0x7c80/0x7c80 [ 263.287827][T10567] should_fail_ex+0x39d/0x4d0 [ 263.292536][T10567] should_failslab+0x9/0x20 [ 263.297075][T10567] slab_pre_alloc_hook+0x59/0x310 [ 263.302148][T10567] kmem_cache_alloc_lru+0x4d/0x2e0 [ 263.307286][T10567] ? __d_alloc+0x31/0x730 [ 263.311670][T10567] __d_alloc+0x31/0x730 [ 263.315859][T10567] d_alloc_pseudo+0x1d/0x70 [ 263.320385][T10567] alloc_file_pseudo+0xcc/0x200 [ 263.325263][T10567] ? alloc_empty_backing_file+0xe0/0xe0 [ 263.330838][T10567] ? __lock_acquire+0x7c80/0x7c80 [ 263.335887][T10567] ? __local_bh_enable_ip+0x12e/0x1c0 [ 263.341279][T10567] ? _local_bh_enable+0xa0/0xa0 [ 263.346162][T10567] anon_inode_getfile+0xc5/0x1a0 [ 263.351141][T10567] bpf_link_prime+0xa6/0x1d0 [ 263.355785][T10567] bpf_raw_tp_link_attach+0x33c/0x560 [ 263.361189][T10567] ? bpf_insn_prepare_dump+0x840/0x840 [ 263.366681][T10567] bpf_raw_tracepoint_open+0x197/0x210 [ 263.372153][T10567] __sys_bpf+0x364/0x800 [ 263.376414][T10567] ? bpf_link_show_fdinfo+0x350/0x350 [ 263.381802][T10567] ? lock_chain_count+0x20/0x20 [ 263.386760][T10567] __x64_sys_bpf+0x7c/0x90 [ 263.391185][T10567] do_syscall_64+0x55/0xb0 [ 263.395807][T10567] ? clear_bhb_loop+0x40/0x90 [ 263.400513][T10567] ? clear_bhb_loop+0x40/0x90 [ 263.405199][T10567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.411100][T10567] RIP: 0033:0x7fabaad8eec9 [ 263.415515][T10567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.435121][T10567] RSP: 002b:00007fababbd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 263.443538][T10567] RAX: ffffffffffffffda RBX: 00007fabaafe5fa0 RCX: 00007fabaad8eec9 [ 263.451524][T10567] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000011 [ 263.459497][T10567] RBP: 00007fababbd3090 R08: 0000000000000000 R09: 0000000000000000 [ 263.467476][T10567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.475450][T10567] R13: 00007fabaafe6038 R14: 00007fabaafe5fa0 R15: 00007ffe164a2e48 [ 263.483434][T10567] [ 263.740673][T10571] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1663'. [ 263.764440][T10571] netlink: zone id is out of range [ 263.776452][T10571] netlink: zone id is out of range [ 263.781727][T10571] netlink: zone id is out of range [ 263.790013][T10571] netlink: zone id is out of range [ 263.796810][T10571] netlink: zone id is out of range [ 263.803912][T10571] netlink: zone id is out of range [ 263.812746][T10571] netlink: zone id is out of range [ 263.824514][T10571] netlink: zone id is out of range [ 264.555162][T10588] netlink: 'syz.1.1671': attribute type 10 has an invalid length. [ 264.585017][T10588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1671'. [ 264.597905][T10595] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1674'. [ 264.607258][T10588] netlink: 'syz.1.1671': attribute type 10 has an invalid length. [ 264.607278][T10588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1671'. [ 264.607851][T10591] netlink: 'syz.1.1671': attribute type 10 has an invalid length. [ 264.635036][T10591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1671'. [ 264.815296][T10602] netlink: 'syz.1.1677': attribute type 4 has an invalid length. [ 264.841088][T10602] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1677'. [ 265.570387][T10616] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1683'. [ 265.608845][T10631] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1694'. [ 265.619759][T10632] netlink: 'syz.3.1686': attribute type 10 has an invalid length. [ 265.696111][T10632] netlink: 'syz.3.1686': attribute type 10 has an invalid length. [ 265.744257][T10637] FAULT_INJECTION: forcing a failure. [ 265.744257][T10637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.768927][T10637] CPU: 1 PID: 10637 Comm: syz.0.1689 Not tainted syzkaller #0 [ 265.776439][T10637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.786524][T10637] Call Trace: [ 265.789841][T10637] [ 265.792809][T10637] dump_stack_lvl+0x16c/0x230 [ 265.797529][T10637] ? show_regs_print_info+0x20/0x20 [ 265.802761][T10637] ? load_image+0x3b0/0x3b0 [ 265.807307][T10637] ? __might_fault+0xaa/0x120 [ 265.812032][T10637] should_fail_ex+0x39d/0x4d0 [ 265.816756][T10637] copyin+0x1a/0x90 [ 265.820585][T10637] _copy_from_iter+0x54f/0x1290 [ 265.825447][T10637] ? slab_post_alloc_hook+0x8a/0x4d0 [ 265.830741][T10637] ? __virt_addr_valid+0x18c/0x540 [ 265.835881][T10637] ? copyout_mc+0x70/0x70 [ 265.840226][T10637] ? __virt_addr_valid+0x18c/0x540 [ 265.845365][T10637] ? __virt_addr_valid+0x18c/0x540 [ 265.850485][T10637] ? __virt_addr_valid+0x469/0x540 [ 265.855611][T10637] ? __check_object_size+0x506/0xa30 [ 265.860922][T10637] netlink_sendmsg+0x75c/0xbe0 [ 265.865718][T10637] ? netlink_getsockopt+0x580/0x580 [ 265.870938][T10637] ? aa_sock_msg_perm+0x94/0x150 [ 265.875889][T10637] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 265.881184][T10637] ? security_socket_sendmsg+0x80/0xa0 [ 265.886652][T10637] ? netlink_getsockopt+0x580/0x580 [ 265.891869][T10637] ____sys_sendmsg+0x5bf/0x950 [ 265.896702][T10637] ? __asan_memset+0x22/0x40 [ 265.901326][T10637] ? __sys_sendmsg_sock+0x30/0x30 [ 265.906385][T10637] ? __import_iovec+0x3fa/0x860 [ 265.911299][T10637] ? import_iovec+0x73/0xa0 [ 265.915841][T10637] ___sys_sendmsg+0x220/0x290 [ 265.920538][T10637] ? __sys_sendmsg+0x270/0x270 [ 265.925348][T10637] ? __lock_acquire+0x7c80/0x7c80 [ 265.930427][T10637] __se_sys_sendmsg+0x1a5/0x270 [ 265.935297][T10637] ? __x64_sys_sendmsg+0x80/0x80 [ 265.940295][T10637] ? lockdep_hardirqs_on+0x98/0x150 [ 265.945518][T10637] do_syscall_64+0x55/0xb0 [ 265.949952][T10637] ? clear_bhb_loop+0x40/0x90 [ 265.954654][T10637] ? clear_bhb_loop+0x40/0x90 [ 265.959357][T10637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.965335][T10637] RIP: 0033:0x7fabaad8eec9 [ 265.969772][T10637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.989414][T10637] RSP: 002b:00007fababbd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.997849][T10637] RAX: ffffffffffffffda RBX: 00007fabaafe5fa0 RCX: 00007fabaad8eec9 [ 266.005833][T10637] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 266.013816][T10637] RBP: 00007fababbd3090 R08: 0000000000000000 R09: 0000000000000000 [ 266.021813][T10637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.029804][T10637] R13: 00007fabaafe6038 R14: 00007fabaafe5fa0 R15: 00007ffe164a2e48 [ 266.037815][T10637] [ 266.124498][T10640] netlink: 'syz.3.1690': attribute type 4 has an invalid length. [ 266.337198][T10650] netlink: 'syz.2.1692': attribute type 10 has an invalid length. [ 266.366920][T10650] __nla_validate_parse: 4 callbacks suppressed [ 266.366934][T10650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1692'. [ 266.424686][T10650] netlink: 'syz.2.1692': attribute type 10 has an invalid length. [ 266.464516][T10650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1692'. [ 266.517029][T10655] netlink: 'syz.0.1697': attribute type 10 has an invalid length. [ 266.550829][T10655] geneve1: entered promiscuous mode [ 266.595081][T10655] geneve1: entered allmulticast mode [ 266.631135][T10655] team0: Port device geneve1 added [ 266.787878][T10664] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1699'. [ 266.832291][T10664] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1699'. [ 266.878594][T10667] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1701'. [ 267.048647][T10675] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1705'. [ 267.094105][T10674] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1703'. [ 267.104995][T10676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1704'. [ 267.114197][T10676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1704'. [ 267.152585][T10673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1704'. [ 267.420740][T10685] net_ratelimit: 675 callbacks suppressed [ 267.420778][T10685] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 267.652549][T10699] netlink: zone id is out of range [ 267.658745][T10699] netlink: zone id is out of range [ 267.665202][T10699] netlink: zone id is out of range [ 267.672792][T10699] netlink: zone id is out of range [ 267.682011][T10699] netlink: zone id is out of range [ 267.710482][T10699] netlink: zone id is out of range [ 267.720869][T10699] netlink: zone id is out of range [ 267.727605][T10699] netlink: zone id is out of range [ 267.748303][T10699] netlink: zone id is out of range [ 268.353925][T10726] FAULT_INJECTION: forcing a failure. [ 268.353925][T10726] name failslab, interval 1, probability 0, space 0, times 0 [ 268.390275][T10726] CPU: 1 PID: 10726 Comm: syz.2.1725 Not tainted syzkaller #0 [ 268.397777][T10726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.407851][T10726] Call Trace: [ 268.411154][T10726] [ 268.414108][T10726] dump_stack_lvl+0x16c/0x230 [ 268.418824][T10726] ? show_regs_print_info+0x20/0x20 [ 268.424054][T10726] ? load_image+0x3b0/0x3b0 [ 268.428595][T10726] ? __might_sleep+0xe0/0xe0 [ 268.433213][T10726] ? __lock_acquire+0x7c80/0x7c80 [ 268.438269][T10726] should_fail_ex+0x39d/0x4d0 [ 268.442978][T10726] should_failslab+0x9/0x20 [ 268.447510][T10726] slab_pre_alloc_hook+0x59/0x310 [ 268.452577][T10726] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 268.458330][T10726] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 268.464081][T10726] __kmem_cache_alloc_node+0x53/0x260 [ 268.469501][T10726] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 268.475259][T10726] __kmalloc+0xa4/0x240 [ 268.479451][T10726] tomoyo_realpath_from_path+0xe3/0x5d0 [ 268.485055][T10726] tomoyo_path_number_perm+0x1ea/0x590 [ 268.490545][T10726] ? tomoyo_path_number_perm+0x1ba/0x590 [ 268.496224][T10726] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 268.501716][T10726] ? ksys_write+0x1c1/0x250 [ 268.506275][T10726] ? __fget_files+0x28/0x4d0 [ 268.510908][T10726] security_file_ioctl+0x70/0xa0 [ 268.515874][T10726] __se_sys_ioctl+0x48/0x170 [ 268.520497][T10726] do_syscall_64+0x55/0xb0 [ 268.524933][T10726] ? clear_bhb_loop+0x40/0x90 [ 268.529612][T10726] ? clear_bhb_loop+0x40/0x90 [ 268.534292][T10726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.540185][T10726] RIP: 0033:0x7fe66b38eec9 [ 268.544617][T10726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.564218][T10726] RSP: 002b:00007fe66c195038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.572640][T10726] RAX: ffffffffffffffda RBX: 00007fe66b5e6090 RCX: 00007fe66b38eec9 [ 268.580629][T10726] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000008 [ 268.588609][T10726] RBP: 00007fe66c195090 R08: 0000000000000000 R09: 0000000000000000 [ 268.596583][T10726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.604557][T10726] R13: 00007fe66b5e6128 R14: 00007fe66b5e6090 R15: 00007fff1e0105a8 [ 268.612539][T10726] [ 268.619000][T10726] ERROR: Out of memory at tomoyo_realpath_from_path. [ 268.705800][T10724] wg2: entered promiscuous mode [ 268.711389][T10724] wg2: entered allmulticast mode [ 268.721796][T10726] wg2: entered promiscuous mode [ 268.740734][T10726] wg2: entered allmulticast mode [ 269.420277][T10743] wg2: entered promiscuous mode [ 269.430316][T10743] wg2: entered allmulticast mode [ 269.779017][T10760] FAULT_INJECTION: forcing a failure. [ 269.779017][T10760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.796168][T10760] CPU: 0 PID: 10760 Comm: syz.3.1738 Not tainted syzkaller #0 [ 269.803668][T10760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 269.813739][T10760] Call Trace: [ 269.817038][T10760] [ 269.819993][T10760] dump_stack_lvl+0x16c/0x230 [ 269.824712][T10760] ? show_regs_print_info+0x20/0x20 [ 269.829951][T10760] ? load_image+0x3b0/0x3b0 [ 269.834491][T10760] ? __might_fault+0xaa/0x120 [ 269.839204][T10760] ? __lock_acquire+0x7c80/0x7c80 [ 269.844279][T10760] should_fail_ex+0x39d/0x4d0 [ 269.848996][T10760] _copy_to_user+0x2f/0xa0 [ 269.853458][T10760] dev_ethtool+0x10b0/0x1720 [ 269.858090][T10760] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 269.864360][T10760] ? __lock_acquire+0x7c80/0x7c80 [ 269.869433][T10760] ? dev_load+0x21/0x1f0 [ 269.873715][T10760] dev_ioctl+0x4ca/0x1170 [ 269.878081][T10760] sock_do_ioctl+0x226/0x2f0 [ 269.882709][T10760] ? sock_show_fdinfo+0xb0/0xb0 [ 269.887591][T10760] sock_ioctl+0x623/0x7a0 [ 269.891959][T10760] ? sock_poll+0x3d0/0x3d0 [ 269.896429][T10760] ? bpf_lsm_file_ioctl+0x9/0x10 [ 269.901386][T10760] ? security_file_ioctl+0x80/0xa0 [ 269.906526][T10760] ? sock_poll+0x3d0/0x3d0 [ 269.910980][T10760] __se_sys_ioctl+0xfd/0x170 [ 269.915602][T10760] do_syscall_64+0x55/0xb0 [ 269.920054][T10760] ? clear_bhb_loop+0x40/0x90 [ 269.924763][T10760] ? clear_bhb_loop+0x40/0x90 [ 269.929473][T10760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.935399][T10760] RIP: 0033:0x7f4141f8eec9 [ 269.939839][T10760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.959482][T10760] RSP: 002b:00007f4142d97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.967931][T10760] RAX: ffffffffffffffda RBX: 00007f41421e5fa0 RCX: 00007f4141f8eec9 [ 269.976015][T10760] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000026 [ 269.984004][T10760] RBP: 00007f4142d97090 R08: 0000000000000000 R09: 0000000000000000 [ 269.991994][T10760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.999991][T10760] R13: 00007f41421e6038 R14: 00007f41421e5fa0 R15: 00007ffc2a49b1c8 [ 270.007990][T10760] [ 270.521491][T10774] validate_nla: 21 callbacks suppressed [ 270.521536][T10774] netlink: 'syz.2.1745': attribute type 10 has an invalid length. [ 270.597106][T10779] netlink: 'syz.3.1744': attribute type 10 has an invalid length. [ 270.636276][T10774] team0: Port device geneve1 added [ 270.644082][T10779] netlink: 'syz.3.1744': attribute type 10 has an invalid length. [ 270.755511][T10783] netlink: 'syz.0.1747': attribute type 10 has an invalid length. [ 271.204971][T10804] FAULT_INJECTION: forcing a failure. [ 271.204971][T10804] name failslab, interval 1, probability 0, space 0, times 0 [ 271.218123][T10804] CPU: 1 PID: 10804 Comm: syz.2.1756 Not tainted syzkaller #0 [ 271.225618][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 271.235705][T10804] Call Trace: [ 271.239017][T10804] [ 271.242002][T10804] dump_stack_lvl+0x16c/0x230 [ 271.246728][T10804] ? show_regs_print_info+0x20/0x20 [ 271.251970][T10804] ? load_image+0x3b0/0x3b0 [ 271.256520][T10804] ? __might_sleep+0xe0/0xe0 [ 271.261148][T10804] ? __lock_acquire+0x7c80/0x7c80 [ 271.266218][T10804] should_fail_ex+0x39d/0x4d0 [ 271.270965][T10804] should_failslab+0x9/0x20 [ 271.275512][T10804] slab_pre_alloc_hook+0x59/0x310 [ 271.280597][T10804] kmem_cache_alloc_lru+0x4d/0x2e0 [ 271.285758][T10804] ? sock_alloc_inode+0x28/0xc0 [ 271.290625][T10804] sock_alloc_inode+0x28/0xc0 [ 271.295309][T10804] ? sockfs_init_fs_context+0xb0/0xb0 [ 271.300685][T10804] new_inode_pseudo+0x63/0x1d0 [ 271.305461][T10804] __sock_create+0x12d/0x940 [ 271.310085][T10804] mptcp_subflow_create_socket+0xf7/0xa60 [ 271.315832][T10804] ? mark_lock+0x94/0x320 [ 271.320190][T10804] ? __mptcp_subflow_connect+0x1370/0x1370 [ 271.326038][T10804] ? lock_chain_count+0x20/0x20 [ 271.330909][T10804] __mptcp_nmpc_sk+0x151/0x730 [ 271.335689][T10804] ? __local_bh_enable_ip+0x12e/0x1c0 [ 271.341072][T10804] ? __bpf_trace_subflow_check_data_avail+0x150/0x150 [ 271.347873][T10804] mptcp_setsockopt+0xe2b/0x3250 [ 271.352837][T10804] ? aa_sk_perm+0x7fc/0x930 [ 271.357360][T10804] ? pm_nl_exit_net+0x230/0x230 [ 271.362225][T10804] ? aa_af_perm+0x2b0/0x2b0 [ 271.366748][T10804] ? __fget_files+0x28/0x4d0 [ 271.371352][T10804] ? aa_sock_opt_perm+0x74/0x100 [ 271.376330][T10804] ? sock_common_setsockopt+0x36/0xc0 [ 271.381717][T10804] ? sock_common_recvmsg+0x1b0/0x1b0 [ 271.387015][T10804] do_sock_setsockopt+0x175/0x1a0 [ 271.392055][T10804] ? __fdget+0x180/0x210 [ 271.396311][T10804] __x64_sys_setsockopt+0x184/0x200 [ 271.401533][T10804] do_syscall_64+0x55/0xb0 [ 271.405959][T10804] ? clear_bhb_loop+0x40/0x90 [ 271.410643][T10804] ? clear_bhb_loop+0x40/0x90 [ 271.415332][T10804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.421228][T10804] RIP: 0033:0x7fe66b38eec9 [ 271.425651][T10804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.445267][T10804] RSP: 002b:00007fe66c1b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 271.453692][T10804] RAX: ffffffffffffffda RBX: 00007fe66b5e5fa0 RCX: 00007fe66b38eec9 [ 271.461668][T10804] RDX: 000000000000004e RSI: 0000000000000029 RDI: 0000000000000004 [ 271.469650][T10804] RBP: 00007fe66c1b6090 R08: 0000000000004000 R09: 0000000000000000 [ 271.477636][T10804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.485613][T10804] R13: 00007fe66b5e6038 R14: 00007fe66b5e5fa0 R15: 00007fff1e0105a8 [ 271.493613][T10804] [ 271.765457][T10810] netlink: 'syz.1.1760': attribute type 10 has an invalid length. [ 271.795503][T10809] __nla_validate_parse: 20 callbacks suppressed [ 271.795520][T10809] netlink: 7807 bytes leftover after parsing attributes in process `syz.2.1759'. [ 271.958244][T10816] netlink: 'syz.2.1762': attribute type 10 has an invalid length. [ 272.279887][T10827] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1766'. [ 272.555918][T10836] netlink: 7807 bytes leftover after parsing attributes in process `syz.3.1770'. [ 272.662090][T10841] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.1771'. [ 272.954424][T10845] netlink: 'syz.3.1774': attribute type 10 has an invalid length. [ 273.103324][T10845] geneve1: entered promiscuous mode [ 273.127772][T10845] team0: Port device geneve1 added [ 273.271305][T10861] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1779'. [ 273.296711][T10861] net_ratelimit: 671 callbacks suppressed [ 273.296726][T10861] netlink: zone id is out of range [ 273.311028][T10861] netlink: zone id is out of range [ 273.324142][T10861] netlink: zone id is out of range [ 273.335687][T10861] netlink: zone id is out of range [ 273.346482][T10861] netlink: zone id is out of range [ 273.351646][T10861] netlink: zone id is out of range [ 273.387836][T10861] netlink: zone id is out of range [ 273.412319][T10861] netlink: zone id is out of range [ 273.431665][T10868] netlink: 7807 bytes leftover after parsing attributes in process `syz.3.1782'. [ 273.441289][T10861] netlink: zone id is out of range [ 273.458427][T10861] netlink: zone id is out of range [ 274.070843][T10890] netlink: 'syz.2.1792': attribute type 10 has an invalid length. [ 274.098268][T10892] netlink: 7807 bytes leftover after parsing attributes in process `syz.0.1793'. [ 274.207356][T10898] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1796'. [ 274.595844][T10914] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.1802'. [ 274.695455][T10916] netlink: 7807 bytes leftover after parsing attributes in process `syz.2.1804'. [ 274.880151][T10925] netlink: 'syz.2.1806': attribute type 10 has an invalid length. [ 274.888415][T10925] netlink: 'syz.2.1806': attribute type 10 has an invalid length. [ 275.324962][T10935] FAULT_INJECTION: forcing a failure. [ 275.324962][T10935] name failslab, interval 1, probability 0, space 0, times 0 [ 275.337873][T10935] CPU: 1 PID: 10935 Comm: syz.1.1812 Not tainted syzkaller #0 [ 275.345372][T10935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 275.355449][T10935] Call Trace: [ 275.358746][T10935] [ 275.361697][T10935] dump_stack_lvl+0x16c/0x230 [ 275.366409][T10935] ? show_regs_print_info+0x20/0x20 [ 275.371642][T10935] ? load_image+0x3b0/0x3b0 [ 275.376178][T10935] ? __might_sleep+0xe0/0xe0 [ 275.380795][T10935] ? __lock_acquire+0x7c80/0x7c80 [ 275.385850][T10935] should_fail_ex+0x39d/0x4d0 [ 275.390558][T10935] should_failslab+0x9/0x20 [ 275.395095][T10935] slab_pre_alloc_hook+0x59/0x310 [ 275.400150][T10935] kmem_cache_alloc_node+0x60/0x330 [ 275.405369][T10935] ? lock_chain_count+0x20/0x20 [ 275.410224][T10935] ? dup_task_struct+0x57/0x7c0 [ 275.415095][T10935] dup_task_struct+0x57/0x7c0 [ 275.419773][T10935] ? lockdep_hardirqs_on+0x98/0x150 [ 275.424989][T10935] copy_process+0x549/0x3d70 [ 275.429584][T10935] ? perf_tp_event+0x13a0/0x13a0 [ 275.434534][T10935] ? perf_tp_event+0x12d7/0x13a0 [ 275.439566][T10935] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 275.445386][T10935] ? __pidfd_prepare+0x140/0x140 [ 275.450344][T10935] kernel_clone+0x21b/0x840 [ 275.454850][T10935] ? create_io_thread+0x140/0x140 [ 275.459894][T10935] __x64_sys_clone+0x18c/0x1e0 [ 275.464666][T10935] ? __ia32_sys_vfork+0x100/0x100 [ 275.469705][T10935] ? lock_chain_count+0x20/0x20 [ 275.474568][T10935] ? lockdep_hardirqs_on+0x98/0x150 [ 275.479777][T10935] do_syscall_64+0x55/0xb0 [ 275.484211][T10935] ? clear_bhb_loop+0x40/0x90 [ 275.488891][T10935] ? clear_bhb_loop+0x40/0x90 [ 275.493567][T10935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.499467][T10935] RIP: 0033:0x7f5ead18eec9 [ 275.503891][T10935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.523492][T10935] RSP: 002b:00007f5eae116fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 275.531905][T10935] RAX: ffffffffffffffda RBX: 00007f5ead3e5fa0 RCX: 00007f5ead18eec9 [ 275.539884][T10935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 275.547862][T10935] RBP: 00007f5eae117090 R08: 0000000000000000 R09: 0000000000000000 [ 275.555831][T10935] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 275.563802][T10935] R13: 00007f5ead3e6038 R14: 00007f5ead3e5fa0 R15: 00007ffd94e9db28 [ 275.571795][T10935] [ 275.824427][T10937] wg2: left promiscuous mode [ 275.836686][T10937] wg2: left allmulticast mode [ 275.917136][T10940] wg2: entered promiscuous mode [ 275.932781][T10940] wg2: entered allmulticast mode [ 276.058290][T10951] netlink: 'syz.0.1817': attribute type 10 has an invalid length. [ 276.069784][T10951] netlink: 'syz.0.1817': attribute type 10 has an invalid length. [ 276.079781][T10947] netlink: 'syz.0.1817': attribute type 10 has an invalid length. [ 276.111305][T10949] netlink: 'syz.1.1818': attribute type 10 has an invalid length. [ 276.368998][T10958] netlink: 'syz.0.1827': attribute type 10 has an invalid length. [ 276.391744][T10958] netlink: 'syz.0.1827': attribute type 10 has an invalid length. [ 276.402802][T10956] netlink: 'syz.0.1827': attribute type 10 has an invalid length. [ 276.794714][T10968] netlink: 'syz.0.1824': attribute type 10 has an invalid length. [ 276.884324][T10974] __nla_validate_parse: 10 callbacks suppressed [ 276.884340][T10974] netlink: 7807 bytes leftover after parsing attributes in process `syz.1.1826'. [ 277.053940][T10979] netlink: 'syz.3.1831': attribute type 4 has an invalid length. [ 277.094820][T10982] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.1832'. [ 277.392222][T10980] wg2: entered promiscuous mode [ 277.399176][T10980] wg2: entered allmulticast mode [ 277.653184][T10997] netlink: 7807 bytes leftover after parsing attributes in process `syz.3.1837'. [ 277.970817][T11010] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1842'. [ 278.156491][T11013] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.1843'. [ 278.312445][T11018] netlink: 'syz.1.1845': attribute type 10 has an invalid length. [ 278.320321][T11018] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1845'. [ 278.332968][T11018] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1845'. [ 278.373529][T11017] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1845'. [ 278.441182][T11023] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1847'. [ 278.481649][T11023] net_ratelimit: 898 callbacks suppressed [ 278.481663][T11023] netlink: zone id is out of range [ 278.532246][T11023] netlink: zone id is out of range [ 278.537891][T11023] netlink: zone id is out of range [ 278.553281][T11023] netlink: zone id is out of range [ 278.570694][T11023] netlink: zone id is out of range [ 278.583888][T11023] netlink: zone id is out of range [ 278.600406][T11023] netlink: zone id is out of range [ 278.616703][T11023] netlink: zone id is out of range [ 278.622044][T11023] netlink: zone id is out of range [ 278.635165][T11023] netlink: zone id is out of range [ 278.746164][T11035] netlink: 7807 bytes leftover after parsing attributes in process `syz.3.1851'. [ 280.823078][T11129] FAULT_INJECTION: forcing a failure. [ 280.823078][T11129] name failslab, interval 1, probability 0, space 0, times 0 [ 280.893417][T11129] CPU: 0 PID: 11129 Comm: syz.0.1889 Not tainted syzkaller #0 [ 280.901019][T11129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.911091][T11129] Call Trace: [ 280.914390][T11129] [ 280.917341][T11129] dump_stack_lvl+0x16c/0x230 [ 280.922051][T11129] ? show_regs_print_info+0x20/0x20 [ 280.927279][T11129] ? load_image+0x3b0/0x3b0 [ 280.931811][T11129] ? __might_sleep+0xe0/0xe0 [ 280.936435][T11129] ? __lock_acquire+0x7c80/0x7c80 [ 280.941492][T11129] should_fail_ex+0x39d/0x4d0 [ 280.946200][T11129] should_failslab+0x9/0x20 [ 280.950734][T11129] slab_pre_alloc_hook+0x59/0x310 [ 280.955794][T11129] ? fib_nl2rule+0x334/0x1b50 [ 280.960492][T11129] ? fib_nl2rule+0x334/0x1b50 [ 280.965181][T11129] __kmem_cache_alloc_node+0x53/0x260 [ 280.970564][T11129] ? fib_nl2rule+0x334/0x1b50 [ 280.975260][T11129] __kmalloc+0xa4/0x240 [ 280.979430][T11129] fib_nl2rule+0x334/0x1b50 [ 280.983954][T11129] ? __lock_acquire+0x7c80/0x7c80 [ 280.988989][T11129] ? fib_nl_newrule+0x1d40/0x1d40 [ 280.994021][T11129] ? __nla_parse+0x40/0x50 [ 280.998455][T11129] fib_nl_newrule+0x31f/0x1d40 [ 281.003238][T11129] ? __mutex_trylock_common+0x153/0x250 [ 281.008799][T11129] ? fib_rules_seq_read+0xf0/0xf0 [ 281.013831][T11129] ? rcu_is_watching+0x15/0xb0 [ 281.018603][T11129] ? trace_contention_end+0x39/0xe0 [ 281.023827][T11129] ? fib_rules_seq_read+0xf0/0xf0 [ 281.028859][T11129] rtnetlink_rcv_msg+0x7c7/0xf10 [ 281.033809][T11129] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 281.038931][T11129] ? lockdep_hardirqs_on+0x98/0x150 [ 281.044149][T11129] ? rtnetlink_bind+0x80/0x80 [ 281.048838][T11129] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 281.054820][T11129] ? __dev_queue_xmit+0x245/0x35a0 [ 281.059941][T11129] ? lock_chain_count+0x20/0x20 [ 281.064804][T11129] ? __local_bh_enable_ip+0x12e/0x1c0 [ 281.070184][T11129] ? lockdep_hardirqs_on+0x98/0x150 [ 281.075405][T11129] ? __local_bh_enable_ip+0x12e/0x1c0 [ 281.080780][T11129] ? _local_bh_enable+0xa0/0xa0 [ 281.085652][T11129] ? __dev_queue_xmit+0x245/0x35a0 [ 281.090768][T11129] ? __dev_queue_xmit+0x1449/0x35a0 [ 281.095982][T11129] ? __dev_queue_xmit+0x245/0x35a0 [ 281.101099][T11129] ? ref_tracker_free+0x634/0x7d0 [ 281.106130][T11129] ? __copy_skb_header+0xa7/0x550 [ 281.111167][T11129] netlink_rcv_skb+0x216/0x480 [ 281.115937][T11129] ? rtnetlink_bind+0x80/0x80 [ 281.120624][T11129] ? netlink_ack+0x1110/0x1110 [ 281.125399][T11129] ? __lock_acquire+0x7c80/0x7c80 [ 281.130429][T11129] ? netlink_deliver_tap+0x2e/0x1b0 [ 281.135634][T11129] netlink_unicast+0x751/0x8d0 [ 281.140409][T11129] netlink_sendmsg+0x8c1/0xbe0 [ 281.145183][T11129] ? netlink_getsockopt+0x580/0x580 [ 281.150391][T11129] ? aa_sock_msg_perm+0x94/0x150 [ 281.155332][T11129] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 281.160619][T11129] ? security_socket_sendmsg+0x80/0xa0 [ 281.166164][T11129] ? netlink_getsockopt+0x580/0x580 [ 281.171365][T11129] ____sys_sendmsg+0x5bf/0x950 [ 281.176141][T11129] ? __asan_memset+0x22/0x40 [ 281.180740][T11129] ? __sys_sendmsg_sock+0x30/0x30 [ 281.185774][T11129] ? __import_iovec+0x5f2/0x860 [ 281.190642][T11129] ? import_iovec+0x73/0xa0 [ 281.195173][T11129] ___sys_sendmsg+0x220/0x290 [ 281.199865][T11129] ? __sys_sendmsg+0x270/0x270 [ 281.204664][T11129] ? __lock_acquire+0x7c80/0x7c80 [ 281.209713][T11129] __se_sys_sendmsg+0x1a5/0x270 [ 281.214595][T11129] ? __x64_sys_sendmsg+0x80/0x80 [ 281.219556][T11129] ? lockdep_hardirqs_on+0x98/0x150 [ 281.224771][T11129] do_syscall_64+0x55/0xb0 [ 281.229198][T11129] ? clear_bhb_loop+0x40/0x90 [ 281.233893][T11129] ? clear_bhb_loop+0x40/0x90 [ 281.238571][T11129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.244467][T11129] RIP: 0033:0x7fabaad8eec9 [ 281.248881][T11129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.268484][T11129] RSP: 002b:00007fababbd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.276899][T11129] RAX: ffffffffffffffda RBX: 00007fabaafe5fa0 RCX: 00007fabaad8eec9 [ 281.284873][T11129] RDX: 0000000004048000 RSI: 0000200000000940 RDI: 0000000000000003 [ 281.292843][T11129] RBP: 00007fababbd3090 R08: 0000000000000000 R09: 0000000000000000 [ 281.300813][T11129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.308779][T11129] R13: 00007fabaafe6038 R14: 00007fabaafe5fa0 R15: 00007ffe164a2e48 [ 281.316765][T11129] [ 281.647690][T11152] validate_nla: 10 callbacks suppressed [ 281.647708][T11152] netlink: 'syz.1.1898': attribute type 4 has an invalid length. [ 281.865076][T11157] netlink: 'syz.3.1900': attribute type 10 has an invalid length. [ 281.923510][T11161] FAULT_INJECTION: forcing a failure. [ 281.923510][T11161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.943552][T11161] CPU: 1 PID: 11161 Comm: syz.0.1902 Not tainted syzkaller #0 [ 281.951053][T11161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 281.961211][T11161] Call Trace: [ 281.964513][T11161] [ 281.967464][T11161] dump_stack_lvl+0x16c/0x230 [ 281.972198][T11161] ? show_regs_print_info+0x20/0x20 [ 281.977425][T11161] ? load_image+0x3b0/0x3b0 [ 281.981959][T11161] ? __lock_acquire+0x7c80/0x7c80 [ 281.987015][T11161] ? snprintf+0xdb/0x120 [ 281.991290][T11161] should_fail_ex+0x39d/0x4d0 [ 281.995999][T11161] _copy_to_user+0x2f/0xa0 [ 282.000451][T11161] simple_read_from_buffer+0xe7/0x150 [ 282.005861][T11161] proc_fail_nth_read+0x1e3/0x250 [ 282.010920][T11161] ? proc_fault_inject_write+0x340/0x340 [ 282.016584][T11161] ? fsnotify_perm+0x271/0x5e0 [ 282.021393][T11161] ? proc_fault_inject_write+0x340/0x340 [ 282.027066][T11161] vfs_read+0x27e/0x920 [ 282.031257][T11161] ? kernel_read+0x1e0/0x1e0 [ 282.035875][T11161] ? __fget_files+0x28/0x4d0 [ 282.040488][T11161] ? __fget_files+0x44a/0x4d0 [ 282.045195][T11161] ? __fdget_pos+0x2a3/0x330 [ 282.049816][T11161] ? ksys_read+0x75/0x250 [ 282.054181][T11161] ksys_read+0x147/0x250 [ 282.058435][T11161] ? vfs_write+0x940/0x940 [ 282.062956][T11161] ? lockdep_hardirqs_on+0x98/0x150 [ 282.068176][T11161] do_syscall_64+0x55/0xb0 [ 282.072595][T11161] ? clear_bhb_loop+0x40/0x90 [ 282.077270][T11161] ? clear_bhb_loop+0x40/0x90 [ 282.081951][T11161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.087843][T11161] RIP: 0033:0x7fabaad8d8dc [ 282.092261][T11161] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 282.111867][T11161] RSP: 002b:00007fababbd3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.120287][T11161] RAX: ffffffffffffffda RBX: 00007fabaafe5fa0 RCX: 00007fabaad8d8dc [ 282.128268][T11161] RDX: 000000000000000f RSI: 00007fababbd30a0 RDI: 0000000000000004 [ 282.136240][T11161] RBP: 00007fababbd3090 R08: 0000000000000000 R09: 0000000000000000 [ 282.144207][T11161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.152184][T11161] R13: 00007fabaafe6038 R14: 00007fabaafe5fa0 R15: 00007ffe164a2e48 [ 282.160185][T11161] [ 282.475917][T11180] netlink: 'syz.0.1909': attribute type 4 has an invalid length. [ 282.502221][T11180] __nla_validate_parse: 13 callbacks suppressed [ 282.502235][T11180] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1909'. [ 282.584672][T11188] netlink: 7807 bytes leftover after parsing attributes in process `syz.1.1911'. [ 282.620331][T11190] netlink: 'syz.2.1913': attribute type 10 has an invalid length. [ 282.628357][T11190] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1913'. [ 282.780841][T11194] FAULT_INJECTION: forcing a failure. [ 282.780841][T11194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.799739][T11194] CPU: 1 PID: 11194 Comm: syz.2.1916 Not tainted syzkaller #0 [ 282.807255][T11194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 282.817329][T11194] Call Trace: [ 282.820619][T11194] [ 282.823558][T11194] dump_stack_lvl+0x16c/0x230 [ 282.828257][T11194] ? show_regs_print_info+0x20/0x20 [ 282.833474][T11194] ? load_image+0x3b0/0x3b0 [ 282.837994][T11194] ? __might_fault+0xaa/0x120 [ 282.842683][T11194] ? __lock_acquire+0x7c80/0x7c80 [ 282.847731][T11194] should_fail_ex+0x39d/0x4d0 [ 282.852431][T11194] _copy_to_user+0x2f/0xa0 [ 282.856881][T11194] bpf_test_finish+0x4d8/0x620 [ 282.861684][T11194] ? bpf_test_timer_leave+0x110/0x150 [ 282.867072][T11194] ? convert_skb_to___skb+0x420/0x420 [ 282.872477][T11194] ? read_tsc+0x9/0x20 [ 282.876572][T11194] bpf_prog_test_run_flow_dissector+0x4a1/0x600 [ 282.882835][T11194] ? xdp_convert_buff_to_md+0x200/0x200 [ 282.888402][T11194] ? __fget_files+0x28/0x4d0 [ 282.893026][T11194] ? xdp_convert_buff_to_md+0x200/0x200 [ 282.898589][T11194] bpf_prog_test_run+0x321/0x390 [ 282.903548][T11194] __sys_bpf+0x440/0x800 [ 282.907809][T11194] ? bpf_link_show_fdinfo+0x350/0x350 [ 282.913209][T11194] ? lock_chain_count+0x20/0x20 [ 282.918086][T11194] __x64_sys_bpf+0x7c/0x90 [ 282.922529][T11194] do_syscall_64+0x55/0xb0 [ 282.926961][T11194] ? clear_bhb_loop+0x40/0x90 [ 282.931650][T11194] ? clear_bhb_loop+0x40/0x90 [ 282.936349][T11194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.942248][T11194] RIP: 0033:0x7fe66b38eec9 [ 282.946671][T11194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.966307][T11194] RSP: 002b:00007fe66c1b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 282.974738][T11194] RAX: ffffffffffffffda RBX: 00007fe66b5e5fa0 RCX: 00007fe66b38eec9 [ 282.982755][T11194] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 282.990755][T11194] RBP: 00007fe66c1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 282.998734][T11194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.006713][T11194] R13: 00007fe66b5e6038 R14: 00007fe66b5e5fa0 R15: 00007fff1e0105a8 [ 283.014714][T11194] [ 283.189867][T11196] netlink: 'syz.3.1915': attribute type 10 has an invalid length. [ 283.294380][T11210] FAULT_INJECTION: forcing a failure. [ 283.294380][T11210] name failslab, interval 1, probability 0, space 0, times 0 [ 283.309141][T11210] CPU: 0 PID: 11210 Comm: syz.0.1921 Not tainted syzkaller #0 [ 283.316692][T11210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.326813][T11210] Call Trace: [ 283.330173][T11210] [ 283.333183][T11210] dump_stack_lvl+0x16c/0x230 [ 283.338048][T11210] ? show_regs_print_info+0x20/0x20 [ 283.343344][T11210] ? load_image+0x3b0/0x3b0 [ 283.348045][T11210] ? __might_sleep+0xe0/0xe0 [ 283.352741][T11210] ? __lock_acquire+0x7c80/0x7c80 [ 283.357880][T11210] should_fail_ex+0x39d/0x4d0 [ 283.362665][T11210] should_failslab+0x9/0x20 [ 283.367244][T11210] slab_pre_alloc_hook+0x59/0x310 [ 283.372361][T11210] ? bpf_prog_test_run_skb+0x22c/0x11c0 [ 283.377993][T11210] ? bpf_prog_test_run_skb+0x22c/0x11c0 [ 283.383616][T11210] __kmem_cache_alloc_node+0x53/0x260 [ 283.389174][T11210] ? __lock_acquire+0x7c80/0x7c80 [ 283.394303][T11210] ? bpf_prog_test_run_skb+0x22c/0x11c0 [ 283.399947][T11210] __kmalloc+0xa4/0x240 [ 283.404211][T11210] bpf_prog_test_run_skb+0x22c/0x11c0 [ 283.409673][T11210] ? __fget_files+0x28/0x4d0 [ 283.414359][T11210] ? __fget_files+0x44a/0x4d0 [ 283.419212][T11210] ? cpu_online+0x60/0x60 [ 283.423649][T11210] bpf_prog_test_run+0x321/0x390 [ 283.428652][T11210] __sys_bpf+0x440/0x800 [ 283.432942][T11210] ? bpf_link_show_fdinfo+0x350/0x350 [ 283.438398][T11210] ? lock_chain_count+0x20/0x20 [ 283.443313][T11210] __x64_sys_bpf+0x7c/0x90 [ 283.447757][T11210] do_syscall_64+0x55/0xb0 [ 283.452220][T11210] ? clear_bhb_loop+0x40/0x90 [ 283.456962][T11210] ? clear_bhb_loop+0x40/0x90 [ 283.461712][T11210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.467672][T11210] RIP: 0033:0x7fabaad8eec9 [ 283.472157][T11210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.491827][T11210] RSP: 002b:00007fababbd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.500344][T11210] RAX: ffffffffffffffda RBX: 00007fabaafe5fa0 RCX: 00007fabaad8eec9 [ 283.508384][T11210] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a [ 283.516420][T11210] RBP: 00007fababbd3090 R08: 0000000000000000 R09: 0000000000000000 [ 283.524454][T11210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.532488][T11210] R13: 00007fabaafe6038 R14: 00007fabaafe5fa0 R15: 00007ffe164a2e48 [ 283.540606][T11210] [ 283.560377][T11217] netlink: 'syz.2.1922': attribute type 4 has an invalid length. [ 283.568426][T11217] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1922'. [ 283.852455][T11226] netlink: 7807 bytes leftover after parsing attributes in process `syz.1.1927'. [ 284.112547][T11237] FAULT_INJECTION: forcing a failure. [ 284.112547][T11237] name failslab, interval 1, probability 0, space 0, times 0 [ 284.195090][T11237] CPU: 1 PID: 11237 Comm: syz.3.1932 Not tainted syzkaller #0 [ 284.202604][T11237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.212677][T11237] Call Trace: [ 284.215959][T11237] [ 284.218893][T11237] dump_stack_lvl+0x16c/0x230 [ 284.223591][T11237] ? show_regs_print_info+0x20/0x20 [ 284.228888][T11237] ? load_image+0x3b0/0x3b0 [ 284.233398][T11237] ? __might_sleep+0xe0/0xe0 [ 284.237999][T11237] ? __lock_acquire+0x7c80/0x7c80 [ 284.243039][T11237] should_fail_ex+0x39d/0x4d0 [ 284.247737][T11237] should_failslab+0x9/0x20 [ 284.252254][T11237] slab_pre_alloc_hook+0x59/0x310 [ 284.257305][T11237] kmem_cache_alloc_lru+0x4d/0x2e0 [ 284.262427][T11237] ? __d_alloc+0x31/0x730 [ 284.266765][T11237] __d_alloc+0x31/0x730 [ 284.270933][T11237] d_alloc_pseudo+0x1d/0x70 [ 284.275442][T11237] alloc_file_pseudo+0xcc/0x200 [ 284.280304][T11237] ? alloc_empty_backing_file+0xe0/0xe0 [ 284.285871][T11237] ? __lock_acquire+0x7c80/0x7c80 [ 284.290896][T11237] ? __local_bh_enable_ip+0x12e/0x1c0 [ 284.296266][T11237] ? _local_bh_enable+0xa0/0xa0 [ 284.301118][T11237] anon_inode_getfile+0xc5/0x1a0 [ 284.306078][T11237] bpf_link_prime+0xa6/0x1d0 [ 284.310675][T11237] bpf_raw_tp_link_attach+0x33c/0x560 [ 284.316060][T11237] ? bpf_insn_prepare_dump+0x840/0x840 [ 284.321536][T11237] bpf_raw_tracepoint_open+0x197/0x210 [ 284.327006][T11237] __sys_bpf+0x364/0x800 [ 284.331255][T11237] ? bpf_link_show_fdinfo+0x350/0x350 [ 284.336638][T11237] ? lock_chain_count+0x20/0x20 [ 284.341500][T11237] __x64_sys_bpf+0x7c/0x90 [ 284.345927][T11237] do_syscall_64+0x55/0xb0 [ 284.350353][T11237] ? clear_bhb_loop+0x40/0x90 [ 284.355040][T11237] ? clear_bhb_loop+0x40/0x90 [ 284.359725][T11237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.365625][T11237] RIP: 0033:0x7f4141f8eec9 [ 284.370052][T11237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.389669][T11237] RSP: 002b:00007f4142d97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 284.398095][T11237] RAX: ffffffffffffffda RBX: 00007f41421e5fa0 RCX: 00007f4141f8eec9 [ 284.406067][T11237] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 284.414041][T11237] RBP: 00007f4142d97090 R08: 0000000000000000 R09: 0000000000000000 [ 284.422009][T11237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.429986][T11237] R13: 00007f41421e6038 R14: 00007f41421e5fa0 R15: 00007ffc2a49b1c8 [ 284.437977][T11237] [ 284.474261][T11243] netlink: 'syz.0.1935': attribute type 4 has an invalid length. [ 284.483265][T11243] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1935'. [ 284.844378][T11260] netlink: 7807 bytes leftover after parsing attributes in process `syz.3.1941'. [ 285.182912][T11277] netlink: 'syz.1.1947': attribute type 4 has an invalid length. [ 285.190822][T11277] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1947'. [ 285.383742][T11286] FAULT_INJECTION: forcing a failure. [ 285.383742][T11286] name failslab, interval 1, probability 0, space 0, times 0 [ 285.407099][T11286] CPU: 1 PID: 11286 Comm: syz.0.1951 Not tainted syzkaller #0 [ 285.414600][T11286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.424685][T11286] Call Trace: [ 285.427986][T11286] [ 285.430939][T11286] dump_stack_lvl+0x16c/0x230 [ 285.435658][T11286] ? show_regs_print_info+0x20/0x20 [ 285.440895][T11286] ? load_image+0x3b0/0x3b0 [ 285.445433][T11286] ? __might_sleep+0xe0/0xe0 [ 285.450056][T11286] ? __lock_acquire+0x7c80/0x7c80 [ 285.455110][T11286] should_fail_ex+0x39d/0x4d0 [ 285.459812][T11286] should_failslab+0x9/0x20 [ 285.464340][T11286] slab_pre_alloc_hook+0x59/0x310 [ 285.469381][T11286] ? percpu_ref_put+0x12/0x100 [ 285.474173][T11286] ? apparmor_sk_alloc_security+0x77/0x100 [ 285.479992][T11286] __kmem_cache_alloc_node+0x53/0x260 [ 285.485385][T11286] ? apparmor_sk_alloc_security+0x77/0x100 [ 285.491205][T11286] kmalloc_trace+0x2a/0xe0 [ 285.495645][T11286] apparmor_sk_alloc_security+0x77/0x100 [ 285.501285][T11286] security_sk_alloc+0x6e/0xa0 [ 285.506054][T11286] sk_prot_alloc+0x101/0x210 [ 285.510648][T11286] sk_alloc+0x3a/0x360 [ 285.514726][T11286] inet_create+0x7a0/0xfe0 [ 285.519157][T11286] ? inet_create+0x9c/0xfe0 [ 285.523671][T11286] __sock_create+0x4a6/0x940 [ 285.528279][T11286] mptcp_subflow_create_socket+0xf7/0xa60 [ 285.534031][T11286] ? lock_chain_count+0x20/0x20 [ 285.538890][T11286] ? __mptcp_subflow_connect+0x1370/0x1370 [ 285.544724][T11286] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 285.550881][T11286] ? lockdep_hardirqs_on+0x98/0x150 [ 285.556091][T11286] __mptcp_nmpc_sk+0x151/0x730 [ 285.560865][T11286] ? __bpf_trace_subflow_check_data_avail+0x150/0x150 [ 285.567646][T11286] ? __local_bh_enable_ip+0x136/0x1c0 [ 285.573024][T11286] mptcp_sendmsg_fastopen+0x7f/0x4d0 [ 285.578325][T11286] mptcp_sendmsg+0x14a3/0x16b0 [ 285.583098][T11286] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 285.589099][T11286] ? lock_chain_count+0x20/0x20 [ 285.593961][T11286] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 285.600120][T11286] ? lockdep_hardirqs_on+0x98/0x150 [ 285.605335][T11286] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 285.611496][T11286] ? mptcp_shutdown+0x80/0x80 [ 285.616182][T11286] ? inet_sendmsg+0xd6/0x2f0 [ 285.620789][T11286] ? inet_sendmsg+0xe9/0x2f0 [ 285.625383][T11286] ? inet_send_prepare+0x260/0x260 [ 285.630526][T11286] ____sys_sendmsg+0x5bf/0x950 [ 285.635303][T11286] ? __asan_memset+0x22/0x40 [ 285.639902][T11286] ? __sys_sendmsg_sock+0x30/0x30 [ 285.644941][T11286] ? __import_iovec+0x3fa/0x860 [ 285.649810][T11286] ? import_iovec+0x73/0xa0 [ 285.654330][T11286] ___sys_sendmsg+0x220/0x290 [ 285.659020][T11286] ? __sys_sendmsg+0x270/0x270 [ 285.663851][T11286] __se_sys_sendmsg+0x1a5/0x270 [ 285.668708][T11286] ? perf_trace_preemptirq_template+0x281/0x340 [ 285.674955][T11286] ? __x64_sys_sendmsg+0x80/0x80 [ 285.679923][T11286] ? lockdep_hardirqs_on+0x98/0x150 [ 285.685139][T11286] do_syscall_64+0x55/0xb0 [ 285.689566][T11286] ? clear_bhb_loop+0x40/0x90 [ 285.694250][T11286] ? clear_bhb_loop+0x40/0x90 [ 285.698927][T11286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.704819][T11286] RIP: 0033:0x7fabaad8eec9 [ 285.709242][T11286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.728866][T11286] RSP: 002b:00007fababbd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.737287][T11286] RAX: ffffffffffffffda RBX: 00007fabaafe5fa0 RCX: 00007fabaad8eec9 [ 285.745265][T11286] RDX: 0000000030004001 RSI: 0000200000000080 RDI: 000000000000000a [ 285.753250][T11286] RBP: 00007fababbd3090 R08: 0000000000000000 R09: 0000000000000000 [ 285.761224][T11286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.769199][T11286] R13: 00007fabaafe6038 R14: 00007fabaafe5fa0 R15: 00007ffe164a2e48 [ 285.777216][T11286] [ 286.103763][T11303] FAULT_INJECTION: forcing a failure. [ 286.103763][T11303] name failslab, interval 1, probability 0, space 0, times 0 [ 286.119513][T11304] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1956'. [ 286.160750][T11303] CPU: 1 PID: 11303 Comm: syz.0.1957 Not tainted syzkaller #0 [ 286.168276][T11303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.178374][T11303] Call Trace: [ 286.181700][T11303] [ 286.184673][T11303] dump_stack_lvl+0x16c/0x230 [ 286.189440][T11303] ? show_regs_print_info+0x20/0x20 [ 286.194707][T11303] ? load_image+0x3b0/0x3b0 [ 286.199284][T11303] ? __might_sleep+0xe0/0xe0 [ 286.203948][T11303] ? __lock_acquire+0x7c80/0x7c80 [ 286.209040][T11303] should_fail_ex+0x39d/0x4d0 [ 286.213810][T11303] should_failslab+0x9/0x20 [ 286.218369][T11303] slab_pre_alloc_hook+0x59/0x310 [ 286.223481][T11303] kmem_cache_alloc_node+0x60/0x330 [ 286.228819][T11303] ? __alloc_skb+0x108/0x2c0 [ 286.233478][T11303] __alloc_skb+0x108/0x2c0 [ 286.237965][T11303] alloc_skb_with_frags+0xca/0x7c0 [ 286.243124][T11303] ? __lock_acquire+0x7c80/0x7c80 [ 286.248228][T11303] sock_alloc_send_pskb+0x857/0x990 [ 286.253532][T11303] ? sock_kzfree_s+0x50/0x50 [ 286.258191][T11303] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 286.264073][T11303] tun_get_user+0x9dc/0x3bf0 [ 286.268742][T11303] ? trace_event_raw_event_lock+0x230/0x230 [ 286.274684][T11303] ? aa_file_perm+0x120/0xec0 [ 286.279428][T11303] ? aa_file_perm+0x3e8/0xec0 [ 286.284181][T11303] ? rcu_read_unlock+0xa0/0xa0 [ 286.289032][T11303] ? tun_get+0x1c/0x2e0 [ 286.293261][T11303] ? __lock_acquire+0x7c80/0x7c80 [ 286.298353][T11303] ? tun_get+0x1c/0x2e0 [ 286.302589][T11303] tun_chr_write_iter+0x119/0x200 [ 286.307679][T11303] vfs_write+0x43b/0x940 [ 286.311994][T11303] ? file_end_write+0x250/0x250 [ 286.316913][T11303] ? __fget_files+0x44a/0x4d0 [ 286.321664][T11303] ? __fdget_pos+0x1d8/0x330 [ 286.326300][T11303] ? ksys_write+0x75/0x250 [ 286.330778][T11303] ksys_write+0x147/0x250 [ 286.335163][T11303] ? __ia32_sys_read+0x90/0x90 [ 286.340006][T11303] ? lockdep_hardirqs_on+0x98/0x150 [ 286.345307][T11303] do_syscall_64+0x55/0xb0 [ 286.349810][T11303] ? clear_bhb_loop+0x40/0x90 [ 286.354538][T11303] ? clear_bhb_loop+0x40/0x90 [ 286.359280][T11303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.365225][T11303] RIP: 0033:0x7fabaad8eec9 [ 286.369691][T11303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.389357][T11303] RSP: 002b:00007fababbd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 286.397834][T11303] RAX: ffffffffffffffda RBX: 00007fabaafe5fa0 RCX: 00007fabaad8eec9 [ 286.405827][T11303] RDX: 000000000000fdef RSI: 0000200000000500 RDI: 00000000000000c8 [ 286.413829][T11303] RBP: 00007fababbd3090 R08: 0000000000000000 R09: 0000000000000000 [ 286.421808][T11303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.429795][T11303] R13: 00007fabaafe6038 R14: 00007fabaafe5fa0 R15: 00007ffe164a2e48 [ 286.437814][T11303] [ 286.571804][T11309] netlink: 'syz.1.1961': attribute type 4 has an invalid length. [ 286.580488][T11309] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1961'. [ 287.106344][T11339] sctp: [Deprecated]: syz.1.1972 (pid 11339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.106344][T11339] Use struct sctp_sack_info instead [ 287.377089][T11351] netlink: 'syz.3.1975': attribute type 4 has an invalid length. [ 287.485604][T11353] netlink: 'syz.0.1976': attribute type 10 has an invalid length. [ 288.008323][T11373] netlink: 'syz.2.1985': attribute type 4 has an invalid length. [ 288.025833][T11373] __nla_validate_parse: 2 callbacks suppressed [ 288.025846][T11373] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1985'. [ 288.174835][T11379] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1984'. [ 288.243938][T11378] netlink: 'syz.3.1987': attribute type 10 has an invalid length. [ 288.321844][T11386] netlink: 'syz.1.1990': attribute type 10 has an invalid length. [ 288.330995][T11386] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1990'. [ 288.341194][T11386] FAULT_INJECTION: forcing a failure. [ 288.341194][T11386] name failslab, interval 1, probability 0, space 0, times 0 [ 288.371369][T11386] CPU: 1 PID: 11386 Comm: syz.1.1990 Not tainted syzkaller #0 [ 288.378980][T11386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.389074][T11386] Call Trace: [ 288.392391][T11386] [ 288.395336][T11386] dump_stack_lvl+0x16c/0x230 [ 288.400058][T11386] ? show_regs_print_info+0x20/0x20 [ 288.405295][T11386] ? load_image+0x3b0/0x3b0 [ 288.409833][T11386] ? __might_sleep+0xe0/0xe0 [ 288.414456][T11386] ? __lock_acquire+0x7c80/0x7c80 [ 288.419516][T11386] should_fail_ex+0x39d/0x4d0 [ 288.424241][T11386] should_failslab+0x9/0x20 [ 288.428772][T11386] slab_pre_alloc_hook+0x59/0x310 [ 288.433810][T11386] ? fib_nl2rule+0x334/0x1b50 [ 288.438494][T11386] ? fib_nl2rule+0x334/0x1b50 [ 288.443171][T11386] __kmem_cache_alloc_node+0x53/0x260 [ 288.448553][T11386] ? fib_nl2rule+0x334/0x1b50 [ 288.453235][T11386] __kmalloc+0xa4/0x240 [ 288.457400][T11386] fib_nl2rule+0x334/0x1b50 [ 288.461933][T11386] ? __lock_acquire+0x7c80/0x7c80 [ 288.466969][T11386] ? fib_nl_newrule+0x1d40/0x1d40 [ 288.472003][T11386] ? __nla_parse+0x40/0x50 [ 288.476428][T11386] fib_nl_newrule+0x31f/0x1d40 [ 288.481209][T11386] ? __mutex_trylock_common+0x153/0x250 [ 288.486764][T11386] ? fib_rules_seq_read+0xf0/0xf0 [ 288.491794][T11386] ? rcu_is_watching+0x15/0xb0 [ 288.496565][T11386] ? trace_contention_end+0x39/0xe0 [ 288.501789][T11386] ? fib_rules_seq_read+0xf0/0xf0 [ 288.506817][T11386] rtnetlink_rcv_msg+0x7c7/0xf10 [ 288.511764][T11386] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 288.516884][T11386] ? lockdep_hardirqs_on+0x98/0x150 [ 288.522183][T11386] ? rtnetlink_bind+0x80/0x80 [ 288.526973][T11386] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 288.532960][T11386] ? __dev_queue_xmit+0x245/0x35a0 [ 288.538083][T11386] ? lock_chain_count+0x20/0x20 [ 288.542944][T11386] ? __local_bh_enable_ip+0x12e/0x1c0 [ 288.548322][T11386] ? lockdep_hardirqs_on+0x98/0x150 [ 288.553537][T11386] ? __local_bh_enable_ip+0x12e/0x1c0 [ 288.558915][T11386] ? _local_bh_enable+0xa0/0xa0 [ 288.563800][T11386] ? __dev_queue_xmit+0x245/0x35a0 [ 288.569044][T11386] ? __dev_queue_xmit+0x1449/0x35a0 [ 288.574268][T11386] ? __dev_queue_xmit+0x245/0x35a0 [ 288.579405][T11386] ? ref_tracker_free+0x634/0x7d0 [ 288.584441][T11386] ? __copy_skb_header+0xa7/0x550 [ 288.589487][T11386] netlink_rcv_skb+0x216/0x480 [ 288.594292][T11386] ? rtnetlink_bind+0x80/0x80 [ 288.598997][T11386] ? netlink_ack+0x1110/0x1110 [ 288.603791][T11386] ? __lock_acquire+0x7c80/0x7c80 [ 288.608826][T11386] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.614034][T11386] netlink_unicast+0x751/0x8d0 [ 288.618812][T11386] netlink_sendmsg+0x8c1/0xbe0 [ 288.623592][T11386] ? netlink_getsockopt+0x580/0x580 [ 288.628804][T11386] ? aa_sock_msg_perm+0x94/0x150 [ 288.633754][T11386] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 288.639052][T11386] ? security_socket_sendmsg+0x80/0xa0 [ 288.644558][T11386] ? netlink_getsockopt+0x580/0x580 [ 288.649780][T11386] ____sys_sendmsg+0x5bf/0x950 [ 288.654569][T11386] ? __asan_memset+0x22/0x40 [ 288.659180][T11386] ? __sys_sendmsg_sock+0x30/0x30 [ 288.664221][T11386] ? __import_iovec+0x5f2/0x860 [ 288.669097][T11386] ? import_iovec+0x73/0xa0 [ 288.673625][T11386] ___sys_sendmsg+0x220/0x290 [ 288.678345][T11386] ? __sys_sendmsg+0x270/0x270 [ 288.683249][T11386] ? __lock_acquire+0x7c80/0x7c80 [ 288.688301][T11386] __se_sys_sendmsg+0x1a5/0x270 [ 288.693169][T11386] ? __x64_sys_sendmsg+0x80/0x80 [ 288.698129][T11386] ? lockdep_hardirqs_on+0x98/0x150 [ 288.703343][T11386] do_syscall_64+0x55/0xb0 [ 288.707765][T11386] ? clear_bhb_loop+0x40/0x90 [ 288.712467][T11386] ? clear_bhb_loop+0x40/0x90 [ 288.717151][T11386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.723050][T11386] RIP: 0033:0x7f5ead18eec9 [ 288.727471][T11386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.747083][T11386] RSP: 002b:00007f5eae117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.755504][T11386] RAX: ffffffffffffffda RBX: 00007f5ead3e5fa0 RCX: 00007f5ead18eec9 [ 288.763476][T11386] RDX: 0000000004048000 RSI: 0000200000000940 RDI: 0000000000000003 [ 288.771454][T11386] RBP: 00007f5eae117090 R08: 0000000000000000 R09: 0000000000000000 [ 288.779435][T11386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.787417][T11386] R13: 00007f5ead3e6038 R14: 00007f5ead3e5fa0 R15: 00007ffd94e9db28 [ 288.795399][T11386] [ 289.042013][ T1301] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 289.074093][T11403] netlink: 'syz.2.1996': attribute type 10 has an invalid length. [ 289.081946][T11403] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1996'. [ 289.484273][ T1317] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.662357][ T1317] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.735354][ T1317] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.874643][ T1317] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.525854][T11425] netlink: 'syz.1.2008': attribute type 4 has an invalid length. [ 290.543373][T11425] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2008'. [ 290.632292][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 290.681330][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 290.689227][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 290.725548][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 290.741337][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 290.752343][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 290.792377][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 290.801177][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 290.809216][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 290.845967][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.855055][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 290.863372][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.871357][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 290.884457][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 290.888379][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.905039][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.915309][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 290.924969][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 291.441012][T11448] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2012'. [ 291.604267][ T1317] [ 291.606636][ T1317] ====================================================== [ 291.613660][ T1317] WARNING: possible circular locking dependency detected [ 291.620688][ T1317] syzkaller #0 Not tainted [ 291.625097][ T1317] ------------------------------------------------------ [ 291.632110][ T1317] kworker/u4:8/1317 is trying to acquire lock: [ 291.638255][ T1317] ffff888141fdcd00 (team->team_lock_key){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 291.647653][ T1317] [ 291.647653][ T1317] but task is already holding lock: [ 291.655010][ T1317] ffff888076ac8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 291.665367][ T1317] [ 291.665367][ T1317] which lock already depends on the new lock. [ 291.665367][ T1317] [ 291.675762][ T1317] [ 291.675762][ T1317] the existing dependency chain (in reverse order) is: [ 291.684764][ T1317] [ 291.684764][ T1317] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 291.692497][ T1317] __mutex_lock+0x129/0xcc0 [ 291.697524][ T1317] ieee80211_open+0x144/0x200 [ 291.702736][ T1317] __dev_open+0x2bc/0x430 [ 291.707592][ T1317] dev_open+0xab/0x170 [ 291.712184][ T1317] team_add_slave+0xae7/0x2660 [ 291.717476][ T1317] do_setlink+0xe14/0x3fb0 [ 291.722416][ T1317] rtnl_newlink+0x175b/0x2020 [ 291.727615][ T1317] rtnetlink_rcv_msg+0x7c7/0xf10 [ 291.733077][ T1317] netlink_rcv_skb+0x216/0x480 [ 291.738361][ T1317] netlink_unicast+0x751/0x8d0 [ 291.743645][ T1317] netlink_sendmsg+0x8c1/0xbe0 [ 291.748926][ T1317] ____sys_sendmsg+0x5bf/0x950 [ 291.754299][ T1317] ___sys_sendmsg+0x220/0x290 [ 291.759504][ T1317] __se_sys_sendmsg+0x1a5/0x270 [ 291.764882][ T1317] do_syscall_64+0x55/0xb0 [ 291.769829][ T1317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.776248][ T1317] [ 291.776248][ T1317] -> #0 (team->team_lock_key){+.+.}-{3:3}: [ 291.784233][ T1317] __lock_acquire+0x2ddb/0x7c80 [ 291.789604][ T1317] lock_acquire+0x197/0x410 [ 291.794629][ T1317] __mutex_lock+0x129/0xcc0 [ 291.799660][ T1317] team_del_slave+0x32/0x1c0 [ 291.804773][ T1317] team_device_event+0x28d/0xa20 [ 291.810261][ T1317] notifier_call_chain+0x197/0x390 [ 291.815901][ T1317] unregister_netdevice_many_notify+0xf36/0x1810 [ 291.822750][ T1317] unregister_netdevice_queue+0x324/0x360 [ 291.828992][ T1317] _cfg80211_unregister_wdev+0x16b/0x580 [ 291.835148][ T1317] ieee80211_remove_interfaces+0x496/0x680 [ 291.841472][ T1317] ieee80211_unregister_hw+0x5d/0x2a0 [ 291.847361][ T1317] mac80211_hwsim_del_radio+0x274/0x450 [ 291.853425][ T1317] hwsim_exit_net+0x585/0x640 [ 291.858623][ T1317] cleanup_net+0x6f4/0xb90 [ 291.863561][ T1317] process_scheduled_works+0xa45/0x15b0 [ 291.869632][ T1317] worker_thread+0xa55/0xfc0 [ 291.874753][ T1317] kthread+0x2fa/0x390 [ 291.879358][ T1317] ret_from_fork+0x48/0x80 [ 291.884312][ T1317] ret_from_fork_asm+0x11/0x20 [ 291.889605][ T1317] [ 291.889605][ T1317] other info that might help us debug this: [ 291.889605][ T1317] [ 291.899836][ T1317] Possible unsafe locking scenario: [ 291.899836][ T1317] [ 291.907285][ T1317] CPU0 CPU1 [ 291.912734][ T1317] ---- ---- [ 291.918101][ T1317] lock(&rdev->wiphy.mtx); [ 291.922606][ T1317] lock(team->team_lock_key); [ 291.929986][ T1317] lock(&rdev->wiphy.mtx); [ 291.937038][ T1317] lock(team->team_lock_key); [ 291.941797][ T1317] [ 291.941797][ T1317] *** DEADLOCK *** [ 291.941797][ T1317] [ 291.949941][ T1317] 5 locks held by kworker/u4:8/1317: [ 291.955222][ T1317] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 291.966105][ T1317] #1: ffffc90004fafd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 291.976632][ T1317] #2: ffffffff8dfae850 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 291.986031][ T1317] #3: ffffffff8dfbb688 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 291.995866][ T1317] #4: ffff888076ac8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 292.006652][ T1317] [ 292.006652][ T1317] stack backtrace: [ 292.012532][ T1317] CPU: 1 PID: 1317 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 292.020073][ T1317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 292.030134][ T1317] Workqueue: netns cleanup_net [ 292.034909][ T1317] Call Trace: [ 292.038184][ T1317] [ 292.041133][ T1317] dump_stack_lvl+0x16c/0x230 [ 292.045811][ T1317] ? load_image+0x3b0/0x3b0 [ 292.050325][ T1317] ? show_regs_print_info+0x20/0x20 [ 292.055524][ T1317] ? print_circular_bug+0x12b/0x1a0 [ 292.060723][ T1317] check_noncircular+0x2bd/0x3c0 [ 292.065682][ T1317] ? print_deadlock_bug+0x5d0/0x5d0 [ 292.070879][ T1317] ? lockdep_lock+0xe0/0x220 [ 292.075470][ T1317] ? _find_first_zero_bit+0xd3/0x100 [ 292.080763][ T1317] __lock_acquire+0x2ddb/0x7c80 [ 292.085621][ T1317] ? verify_lock_unused+0x140/0x140 [ 292.090834][ T1317] ? verify_lock_unused+0x140/0x140 [ 292.096038][ T1317] lock_acquire+0x197/0x410 [ 292.100539][ T1317] ? team_del_slave+0x32/0x1c0 [ 292.105393][ T1317] ? __might_sleep+0xe0/0xe0 [ 292.109985][ T1317] ? read_lock_is_recursive+0x20/0x20 [ 292.115371][ T1317] __mutex_lock+0x129/0xcc0 [ 292.119879][ T1317] ? team_del_slave+0x32/0x1c0 [ 292.124647][ T1317] ? __lock_acquire+0x7c80/0x7c80 [ 292.129671][ T1317] ? rcu_is_watching+0x15/0xb0 [ 292.134444][ T1317] ? trace_contention_end+0x39/0xe0 [ 292.139655][ T1317] ? __mutex_lock+0x304/0xcc0 [ 292.144344][ T1317] ? team_del_slave+0x32/0x1c0 [ 292.149134][ T1317] ? mutex_lock_nested+0x20/0x20 [ 292.154091][ T1317] ? bond_netdev_event+0xe1/0xef0 [ 292.159216][ T1317] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 292.164860][ T1317] ? bond_ipsec_offload_ok+0x410/0x410 [ 292.170345][ T1317] team_del_slave+0x32/0x1c0 [ 292.174936][ T1317] team_device_event+0x28d/0xa20 [ 292.179877][ T1317] notifier_call_chain+0x197/0x390 [ 292.185017][ T1317] unregister_netdevice_many_notify+0xf36/0x1810 [ 292.191365][ T1317] ? lock_chain_count+0x20/0x20 [ 292.196228][ T1317] ? unregister_netdevice_many+0x20/0x20 [ 292.201867][ T1317] ? kernfs_remove_by_name_ns+0x117/0x150 [ 292.207588][ T1317] ? __lock_acquire+0x7c80/0x7c80 [ 292.212617][ T1317] unregister_netdevice_queue+0x324/0x360 [ 292.218341][ T1317] ? list_netdevice+0x730/0x730 [ 292.223196][ T1317] ? kernfs_remove_by_name_ns+0x117/0x150 [ 292.228926][ T1317] _cfg80211_unregister_wdev+0x16b/0x580 [ 292.234575][ T1317] ieee80211_remove_interfaces+0x496/0x680 [ 292.240425][ T1317] ? ieee80211_do_stop+0x1db0/0x1db0 [ 292.245718][ T1317] ? rcu_is_watching+0x15/0xb0 [ 292.250490][ T1317] ieee80211_unregister_hw+0x5d/0x2a0 [ 292.255885][ T1317] mac80211_hwsim_del_radio+0x274/0x450 [ 292.261445][ T1317] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 292.266994][ T1317] hwsim_exit_net+0x585/0x640 [ 292.271677][ T1317] ? hwsim_init_net+0x90/0x90 [ 292.276356][ T1317] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 292.282157][ T1317] cleanup_net+0x6f4/0xb90 [ 292.286577][ T1317] ? ops_free_list+0x3b0/0x3b0 [ 292.291344][ T1317] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.296537][ T1317] ? process_scheduled_works+0x957/0x15b0 [ 292.302253][ T1317] ? process_scheduled_works+0x957/0x15b0 [ 292.307985][ T1317] process_scheduled_works+0xa45/0x15b0 [ 292.313556][ T1317] ? assign_work+0x400/0x400 [ 292.318152][ T1317] ? assign_work+0x39e/0x400 [ 292.322744][ T1317] worker_thread+0xa55/0xfc0 [ 292.327345][ T1317] kthread+0x2fa/0x390 [ 292.331407][ T1317] ? pr_cont_work+0x560/0x560 [ 292.336081][ T1317] ? kthread_blkcg+0xd0/0xd0 [ 292.340665][ T1317] ret_from_fork+0x48/0x80 [ 292.345083][ T1317] ? kthread_blkcg+0xd0/0xd0 [ 292.349673][ T1317] ret_from_fork_asm+0x11/0x20 [ 292.354449][ T1317] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 292.382264][ T1317] mac80211_hwsim hwsim3 wlan1 (unregistering): left promiscuous mode [ 292.391700][ T1317] team0: Port device wlan1 removed [ 292.813843][ T1317] hsr_slave_1: left promiscuous mode [ 292.842135][ T5795] Bluetooth: hci1: command tx timeout [ 292.862254][ T1317] team0: left allmulticast mode [ 292.867133][ T1317] team_slave_1: left allmulticast mode [ 292.885575][ T1317] geneve1: left allmulticast mode [ 292.890783][ T1317] bridge0: port 3(team0) entered disabled state [ 292.912249][ T5795] Bluetooth: hci2: command tx timeout [ 292.973712][ T1317] bridge_slave_1: left allmulticast mode [ 292.979389][ T1317] bridge_slave_1: left promiscuous mode [ 292.992169][ T5795] Bluetooth: hci3: command tx timeout [ 293.012409][ T1317] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.043012][ T1317] bridge_slave_0: left allmulticast mode [ 293.052498][ T1317] bridge_slave_0: left promiscuous mode [ 293.058281][ T1317] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.117366][ T1317] veth1_vlan: left promiscuous mode [ 293.136034][ T1317] veth0_vlan: left promiscuous mode [ 293.204121][ T1317] geneve1 (unregistering): left promiscuous mode [ 293.211675][ T1317] team0 (unregistering): Port device geneve1 removed [ 293.290899][ T1317] team_slave_1 (unregistering): left promiscuous mode [ 293.298731][ T1317] team0 (unregistering): Port device team_slave_1 removed [ 293.343705][ T1317]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.365048][ T1317]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.575388][ T1317]  (unregistering): Released all slaves [ 294.174737][ T1317] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.227678][ T1317] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.277980][ T1317] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.333556][ T1317] : (slave netdevsim0): Releasing backup interface [ 294.341372][ T1317] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.445754][ T1317] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.501490][ T1317] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.569821][ T1317] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.624696][ T1317] : (slave netdevsim0): Releasing backup interface [ 294.632886][ T1317] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.757903][ T1317] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.830308][ T1317] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.897623][ T1317] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.937949][ T1317] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.963523][ T1317] mac80211_hwsim hwsim5 wlan1 (unregistering): left promiscuous mode [ 295.971642][ T1317] mac80211_hwsim hwsim5 wlan1 (unregistering): left allmulticast mode [ 295.981525][ T1317] team0: Port device wlan1 removed [ 296.113663][ T1317] mac80211_hwsim hwsim8 wlan1 (unregistering): left promiscuous mode [ 296.125569][ T1317] team0: Port device wlan1 removed [ 296.350412][ T1317] hsr_slave_0: left promiscuous mode [ 296.358480][ T1317] hsr_slave_1: left promiscuous mode [ 296.365927][ T1317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.373709][ T1317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.381500][ T1317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.390436][ T1317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.399025][ T1317] macsec0: left allmulticast mode [ 296.404260][ T1317] veth1_macvtap: left allmulticast mode [ 296.409859][ T1317] macsec0: left promiscuous mode [ 296.415544][ T1317] bridge0: port 4(macsec0) entered disabled state [ 296.423667][ T1317] team0: left allmulticast mode [ 296.428546][ T1317] team_slave_1: left allmulticast mode [ 296.434541][ T1317] geneve1: left allmulticast mode [ 296.439760][ T1317] bridge0: port 3(team0) entered disabled state [ 296.447529][ T1317] bridge_slave_1: left allmulticast mode [ 296.453642][ T1317] bridge_slave_1: left promiscuous mode [ 296.459350][ T1317] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.468580][ T1317] bridge_slave_0: left allmulticast mode [ 296.476146][ T1317] bridge_slave_0: left promiscuous mode [ 296.481859][ T1317] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.499737][ T1317] hsr_slave_1: left promiscuous mode [ 296.512122][ T1317] veth1_macvtap: left promiscuous mode [ 296.518403][ T1317] veth0_macvtap: left promiscuous mode [ 296.525095][ T1317] veth1_vlan: left promiscuous mode [ 296.530409][ T1317] veth0_vlan: left promiscuous mode [ 296.539969][ T1317] veth1_vlan: left promiscuous mode [ 296.545333][ T1317] veth0_vlan: left promiscuous mode [ 296.551699][ T1317] veth1_macvtap: left promiscuous mode [ 296.557799][ T1317] veth0_macvtap: left promiscuous mode [ 296.563894][ T1317] veth1_vlan: left promiscuous mode [ 296.720663][ T1317] bond0 (unregistering): Released all slaves [ 297.910891][ T1317] geneve1 (unregistering): left promiscuous mode [ 297.917953][ T1317] team0 (unregistering): Port device geneve1 removed [ 298.034398][ T1317] team_slave_1 (unregistering): left promiscuous mode [ 298.041729][ T1317] team0 (unregistering): Port device team_slave_1 removed [ 298.087283][ T1317]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.108153][ T1317]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.323925][ T1317]  (unregistering): Released all slaves [ 298.397916][ T1317] bond0 (unregistering): Released all slaves [ 298.443095][ T1317] bond0 (unregistering): Released all slaves [ 298.515885][ T1317] geneve1 (unregistering): left promiscuous mode [ 298.522891][ T1317] team0 (unregistering): Port device geneve1 removed [ 298.616964][ T1317] team_slave_1 (unregistering): left promiscuous mode [ 298.625593][ T1317] team0 (unregistering): Port device team_slave_1 removed [ 298.669327][ T1317]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.690192][ T1317]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.892668][ T1317]  (unregistering): Released all slaves [ 298.911683][ T1317] team0 (unregistering): Port device geneve1 removed [ 299.036468][ T1317] team0 (unregistering): Port device team_slave_1 removed [ 299.083905][ T1317]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.105079][ T1317]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.306596][ T1317]  (unregistering): Released all slaves