last executing test programs: 5.328544904s ago: executing program 2 (id=1519): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xcbf, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x10, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40) 4.986127193s ago: executing program 2 (id=1523): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async, rerun: 32) perf_event_open$cgroup(&(0x7f00000003c0)={0x5, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x48, 0x3}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r1, 0xfe, 0xfffffffffffffffc}, 0x10) (async, rerun: 64) close(0xffffffffffffffff) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x3}, 0xffffffffffffff05) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004b80)={0x0, 0x0, 0x0}, 0x100) (async) r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='(())') (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110840000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000006040000000000000000"], 0x0, 0x5a}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="5900000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000400"/28], 0x50) (async, rerun: 64) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000100)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.878934556s ago: executing program 2 (id=1524): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="000000000f0000000000000000000000000000000000000000000040"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001cc0)={r0, 0x58, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001b40)={@ifindex=r1, 0xffffffffffffffff, 0x23, 0x30}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000084000000000100000100000000000000", @ANYBLOB="00000000fdfffffffffffffff6", @ANYBLOB="e45f", @ANYRES8], 0x50) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x9}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) socket$kcm(0x2, 0x5, 0x84) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7) mkdir(&(0x7f0000000000)='./file0\x00', 0x180) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000640)="7d8d17f8d8187457676c85759213719206243531880cae9b7f852b3bbb5395ca1f85c17779bd9af3a79cafb08bdc425bc24849abc500d2b39ffb6c466e10631d74445c4dd782333e19829cab207ac195977a46846bcdd27c1c", 0x59}], 0x1, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [r3, r4, 0xffffffffffffffff, r6, r5, r4, r2, 0xffffffffffffffff, r2]}}], 0x58, 0x7795c2fd017c6e54}, 0x4000801) recvmsg$kcm(r6, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000007c0)=ANY=[], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@ifindex, 0xffffffffffffffff, 0x36, 0x1c}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e8a9b", 0xd8}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x2, 0xd, &(0x7f00000001c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x10, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000063079501000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', r1}, 0x94) 4.148186356s ago: executing program 2 (id=1536): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) write$cgroup_int(r1, &(0x7f0000000100)=0x1, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f7ff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 3.755681157s ago: executing program 2 (id=1542): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000880), 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x104, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xf, 0x10}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x51) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005d31, 0x9041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe01, 0x0, @perf_bp={0x0, 0x54742c2ef8f1b59}, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000180), &(0x7f0000000500)='%pS \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&0\x05\t&&') socket$kcm(0x2b, 0x1, 0x0) r3 = gettid() perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xb, 0x79, 0x9, 0x1, 0x0, 0x6d1, 0x80200, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ac6, 0x0, @perf_config_ext={0xffd}, 0x840, 0x800, 0x8739, 0x6, 0x3, 0x16, 0x7, 0x0, 0x5, 0x0, 0x8}, r3, 0x2, 0xffffffffffffffff, 0x3) syz_open_procfs$namespace(r3, &(0x7f0000000380)='ns/time\x00') 3.544667372s ago: executing program 2 (id=1544): socket$kcm(0x10, 0x5, 0x10) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x4b200000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x4b200000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xb, [@volatile={0xf, 0x0, 0x0, 0x9, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x9}}, @float={0xc, 0x0, 0x0, 0x10, 0xc}, @volatile={0x2, 0x0, 0x0, 0x9, 0x2}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x2e, 0x2e, 0x61, 0x5f, 0x0, 0x2e, 0x61, 0x61, 0x0]}}, &(0x7f0000000080)=""/210, 0x6b, 0xd2, 0x1, 0xfbf3}, 0x28) 2.858184551s ago: executing program 4 (id=1554): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0xe000, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000084) 2.782431763s ago: executing program 4 (id=1555): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="720ac4ff242900007114b300000000009585000bb87500000000faff00005b4d0010000000005f3f1d5c7739760f323295e285ca2cbd28a0068db772e77b8ba0210c0ba16c54f869115bfa3aed7f7e9ea4a8e36485f2dbc731947db16af1c8012b992171254eaf9bcc3b64c80bc1f233e69cba3405cc264bdaec8b2f0b813e3c1b72b77035accc5094464d921333a43d9eeaf5130f28ec80f789436e947f547c1b28e8ce0bae68a906010f38bd3d89e6eb624401a6dd0b7b"], &(0x7f0000000480)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x3, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0x1, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r0, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000a00)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@generic={&(0x7f0000000c40)='./file0\x00', 0x0, 0x10}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x1d, 0xb97, 0x7, 0x10, 0x5400, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50) r8 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x14, &(0x7f0000000000)=r10, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)='%pB \x00'}, 0x20) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)={0x1b, 0x0, 0x0, 0xc5, 0x0, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="8100000000000000000000000000000000000000d9d47244721eea1fcc4b47d7359303a2a3f0247c4b940c8989f7f0639679e356087e9f1731de22cc136062dff49566a6895c321d3d5c26ffc4c1e16d0709b3267f85ad7b96ee98865df5a03af4aedc205d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x12, 0xb, &(0x7f0000000700)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000780)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x2, '\x00', r3, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x4, 0x0, 0x7}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000f00)=[r5, r6, r7, r10, r11, r12, r13], 0x0, 0x10, 0x6}, 0x94) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002a80)={{r14}, &(0x7f0000000680), &(0x7f0000000940)=r1}, 0x20) r16 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r18 = perf_event_open$cgroup(&(0x7f00000004c0)={0x2, 0x80, 0x7, 0xe, 0x7, 0x8, 0x0, 0x1, 0x23293, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x4020, 0x2, 0x0, 0x8, 0x6, 0xc, 0x5, 0x0, 0x7f, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r14, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r18, 0x40082406, &(0x7f00000006c0)='syzkaller\x00') bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r17, @ANYRES32=r16, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r17}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18) 2.18916608s ago: executing program 0 (id=1561): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x10ae80, 0x2, 0x0, 0x5, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030031000b05d25a806c8c6f94f90224fc600e0007000a000200053582c137153e370e0c0180040010000400", 0x33fe0}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) socket$kcm(0x29, 0x5, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair(0xa, 0x2, 0x2, &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100a01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x40086602, 0x110e22fff6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d80000003000b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93450000000000000000", 0xd8}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ip6erspan0\x00', 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x1d, 0x0, 0xc3a2, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0]}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2.152349391s ago: executing program 1 (id=1562): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb8, 0x3, 0x0, 0x0, 0x0, 0x6, 0x80470, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={0x0, 0x2}, 0x300, 0x103, 0x200000, 0x7, 0x29a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007118270000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8983, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) 2.034805984s ago: executing program 3 (id=1563): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) write$cgroup_subtree(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xaac, 0xffffffff, 0x2, 0x1, 0xffffffffffffffff, 0x4, '\x00', r6, 0xffffffffffffffff, 0x1, 0x5, 0x5, 0x9}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @map_idx={0x18, 0x14, 0x5, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0xf4, &(0x7f0000000640)=""/244, 0x40f00, 0x54, '\x00', r6, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0xc, 0xb, 0xffffffe9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r0, r4, r4, r0, r0, r7, r5, r5, r5], 0x0, 0x10, 0x40}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a2, &(0x7f0000000080)) 1.794614091s ago: executing program 4 (id=1564): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) write$cgroup_subtree(r3, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @map_idx={0x18, 0x14, 0x5, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0xf4, &(0x7f0000000640)=""/244, 0x40f00, 0x54, '\x00', r6, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0xc, 0xb, 0xffffffe9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r0, r4, r4, r0, r0, r7, r5, r5, r5], 0x0, 0x10, 0x40}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) 1.678402924s ago: executing program 1 (id=1565): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000005000000000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.459674029s ago: executing program 1 (id=1566): bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xffffffffffffffc7) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x4800, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.297774854s ago: executing program 3 (id=1567): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48) 1.297303554s ago: executing program 0 (id=1568): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.194585707s ago: executing program 4 (id=1569): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f0000000380)='\xfc\xfe:\xa4\xa5\x1f\xaa\xac\x94Paq\x85\x13\x7f\xca\x12\x8b\x1b\x1b\x1b\xe8\xc0_\x90\x193\xab\xd5\xd1\xe55\xa1\x82\x8cnk\x16\f~F\r\xed\xaa*\xc8!v\xf2n\xc3\xb2\xea\x84\xf8t\x04eV\t\x91n\x9d\xcaM{`f\xce\x9f`]\xf9G\xab@\x17x\xc2d\x9c\x91\xff\xbb\xc8\x19 \xd85\x15\xb5\xf8\x95D+\x81\xba\xf5\"\xdb\xa5h2,\xeb5\x9c2[\x9a\xbc\x03z\xa5]o\xf0Y\xe8[\x10J\xd8\x16\xe5\xf7\x14;\xa8') r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x0, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r3, 0x8, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000000)={0x1, 0x80, 0x4, 0xf9, 0x5, 0x20, 0x0, 0x10001, 0x840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x4, 0xfffffffffffff6dd}, 0x10a00, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x44, 0x0, 0xfffffffffffffffd}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 1.194284917s ago: executing program 3 (id=1570): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$tipc(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="246ab6c323838c21148f45c44d8061dcd5788b4670a5efbe796b372dcbd3a13e5b7eef41886d8274cb10a03d93", 0x2d}, {&(0x7f0000000940)="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", 0x598}], 0x2, 0x0, 0x0, 0x40000090}, 0x0) 1.168089288s ago: executing program 0 (id=1571): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.015951942s ago: executing program 0 (id=1572): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="15000000220d0000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=0x0], 0x20) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x8040) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) bpf$ITER_CREATE(0xb, 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000000)={0x1, 0x80, 0x4, 0xf9, 0x5, 0x20, 0x0, 0x10001, 0x840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x4, 0xfffffffffffff6dd}, 0x10a00, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x44, 0x0, 0xfffffffffffffffd}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) 950.798693ms ago: executing program 3 (id=1573): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 939.751834ms ago: executing program 1 (id=1574): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x2, {{0x2, 0x4}}}, 0x10, 0x0}, 0x0) 853.170246ms ago: executing program 3 (id=1575): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="15000000220d0000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=0x0], 0x20) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x8040) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) bpf$ITER_CREATE(0xb, 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000000)={0x1, 0x80, 0x4, 0xf9, 0x5, 0x20, 0x0, 0x10001, 0x840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x4, 0xfffffffffffff6dd}, 0x10a00, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x44, 0x0, 0xfffffffffffffffd}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) 654.731382ms ago: executing program 1 (id=1576): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=ANY=[], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000080)=ANY=[]) 654.262922ms ago: executing program 4 (id=1577): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x5) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2b, 'pids'}]}, 0xb) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x40089, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa, 0xa}, 0x118600, 0x4, 0x0, 0x5, 0x0, 0x7ff, 0xc51}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext={0x100000001000}, 0x31, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @remote}) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x73, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/72, 0x48}, {&(0x7f00000010c0)=""/138, 0x8a}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x4, &(0x7f0000002480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x10060) socketpair(0x25, 0x5, 0x28, &(0x7f0000001400)) 587.872213ms ago: executing program 0 (id=1578): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x38}, 0x28) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={0x0, 0xc}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 575.211664ms ago: executing program 3 (id=1579): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32=r4, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x8004745a, &(0x7f0000000180)) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 142.650826ms ago: executing program 4 (id=1580): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000380)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 134.295056ms ago: executing program 0 (id=1581): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3, 0xffffffffffffffff, 0x2000000}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=1582): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xc48, 0x8000}, 0x100018, 0xc8, 0x4, 0x5, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0, 0x8, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) kernel console output (not intermixed with test programs): f) already exists on: batadv_slave_1 [ 57.331451][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.342616][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.350446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.358986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.369877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.378812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.387937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.396890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.428223][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.439381][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.451002][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.461281][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.481551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.490894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.499989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.509113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.525879][ T4186] device veth0_macvtap entered promiscuous mode [ 57.547906][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.550819][ T4196] device veth0_vlan entered promiscuous mode [ 57.563519][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.570319][ T4186] device veth1_macvtap entered promiscuous mode [ 57.593596][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.616540][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.626797][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.635459][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.643728][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.652806][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.673026][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.686752][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.696733][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.707321][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.717393][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.728066][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.739996][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.749256][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.759301][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.803940][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.816960][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.829452][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.855231][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.866319][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.877311][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.888559][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.905824][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.920534][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.943331][ T4196] device veth1_vlan entered promiscuous mode [ 57.973302][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.982777][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.991887][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.000848][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.054176][ T1519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.078785][ T1519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.092483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.100793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.109375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.118099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.127042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.137953][ T4196] device veth0_macvtap entered promiscuous mode [ 58.156047][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.163890][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.179576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.188805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.198487][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.206987][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.217090][ T4196] device veth1_macvtap entered promiscuous mode [ 58.237663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.246125][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 58.247980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.258332][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 58.266869][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 58.273100][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 58.287668][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.309103][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.330823][ T2304] Bluetooth: hci4: command 0x040f tx timeout [ 58.341861][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.381451][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.393433][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.406934][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.418064][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.429074][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.439962][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.450059][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.461689][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.473060][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.485379][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.500440][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.520990][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.531032][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.540752][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.549451][ T4265] netlink: 'syz.2.3': attribute type 27 has an invalid length. [ 58.589263][ T4265] bond0: (slave bond_slave_0): Releasing backup interface [ 58.632052][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.643925][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.655916][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.666788][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.676991][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.687817][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.700095][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.710960][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.743644][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.774534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.793847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.804779][ C1] hrtimer: interrupt took 36391 ns [ 58.808271][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.818774][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.835566][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.843673][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.858782][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.870406][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.899392][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.934581][ T4271] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 58.955229][ T4271] device geneve0 entered promiscuous mode [ 59.013033][ T4271] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 59.112559][ T4277] netlink: 'syz.1.2': attribute type 15 has an invalid length. [ 59.122909][ T4278] netlink: 'syz.3.7': attribute type 7 has an invalid length. [ 59.133600][ T4277] netlink: 'syz.1.2': attribute type 7 has an invalid length. [ 59.154105][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.176130][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.184558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.266036][ T4278] netlink: 'syz.3.7': attribute type 1 has an invalid length. [ 59.277228][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.281408][ T4282] netlink: 'syz.0.8': attribute type 7 has an invalid length. [ 59.305650][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.327057][ T4278] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7'. [ 59.337280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.358177][ T4282] netlink: 'syz.0.8': attribute type 1 has an invalid length. [ 59.375494][ T4282] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8'. [ 59.495186][ T21] cfg80211: failed to load regulatory.db [ 59.507691][ T4286] Zero length message leads to an empty skb [ 59.597219][ T4292] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 59.830633][ T4297] netlink: 'syz.1.11': attribute type 10 has an invalid length. [ 59.936537][ T4297] team0: Port device geneve1 added [ 60.259868][ T4313] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.14'. [ 60.295078][ T4307] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.16'. [ 60.326921][ T2304] Bluetooth: hci1: command 0x0419 tx timeout [ 60.338480][ T2304] Bluetooth: hci2: command 0x0419 tx timeout [ 60.380026][ T2304] Bluetooth: hci3: command 0x0419 tx timeout [ 60.426820][ T2304] Bluetooth: hci0: command 0x0419 tx timeout [ 60.455135][ T2304] Bluetooth: hci4: command 0x0419 tx timeout [ 60.626747][ T4308] netlink: 'syz.3.14': attribute type 10 has an invalid length. [ 60.701325][ T4308] device hsr0 entered promiscuous mode [ 60.743140][ T4308] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 60.767186][ T4308] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 60.859838][ T4308] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 60.873004][ T4308] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 60.981024][ T4318] netlink: 205996 bytes leftover after parsing attributes in process `syz.4.17'. [ 61.372647][ T4329] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.20'. [ 61.443349][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 61.484016][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 61.503442][ T4334] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.23'. [ 61.767104][ C1] Illegal XDP return value 16128, expect packet loss! [ 62.029525][ T4352] netlink: 132 bytes leftover after parsing attributes in process `syz.2.27'. [ 62.117453][ T4354] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.29'. [ 62.230495][ T4360] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30'. [ 62.611115][ T4365] bridge_slave_1: default FDB implementation only supports local addresses [ 62.950697][ T4376] device hsr_slave_0 left promiscuous mode [ 63.012854][ T4376] device hsr_slave_1 left promiscuous mode [ 63.120649][ T4381] device veth0_macvtap left promiscuous mode [ 63.191241][ T4383] device bridge_slave_1 left promiscuous mode [ 63.215793][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.345902][ T4383] device bridge_slave_0 left promiscuous mode [ 63.356652][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.673289][ T4386] validate_nla: 12 callbacks suppressed [ 63.673333][ T4386] netlink: 'syz.1.37': attribute type 21 has an invalid length. [ 63.857160][ T4390] netlink: 'syz.3.38': attribute type 10 has an invalid length. [ 63.971763][ T4390] team0: Port device macvlan0 added [ 64.025785][ T4406] netlink: 'syz.4.43': attribute type 3 has an invalid length. [ 64.141835][ T4412] netlink: 'syz.0.45': attribute type 21 has an invalid length. [ 64.175697][ T4411] netlink: 'syz.1.44': attribute type 10 has an invalid length. [ 64.193956][ T4411] device geneve0 entered promiscuous mode [ 64.371619][ T4403] device syzkaller0 entered promiscuous mode [ 64.551282][ T4422] netlink: 'syz.4.48': attribute type 21 has an invalid length. [ 64.584265][ T4422] __nla_validate_parse: 5 callbacks suppressed [ 64.584306][ T4422] netlink: 132 bytes leftover after parsing attributes in process `syz.4.48'. [ 65.166403][ T4423] netlink: 'syz.0.47': attribute type 10 has an invalid length. [ 65.500456][ T4423] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 65.539903][ T4435] netlink: 'syz.2.51': attribute type 21 has an invalid length. [ 65.552192][ T4435] netlink: 132 bytes leftover after parsing attributes in process `syz.2.51'. [ 65.564254][ T4437] netlink: 'syz.1.60': attribute type 21 has an invalid length. [ 65.590907][ T4437] netlink: 132 bytes leftover after parsing attributes in process `syz.1.60'. [ 65.631262][ T4441] netlink: 'syz.4.50': attribute type 10 has an invalid length. [ 65.662793][ T4441] device veth0_macvtap left promiscuous mode [ 66.703490][ T4468] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.59'. [ 66.955167][ T4472] device syzkaller0 entered promiscuous mode [ 66.972121][ T4476] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.62'. [ 67.713206][ T4490] team0: Port device macvlan0 added [ 67.807844][ T4495] netlink: 132 bytes leftover after parsing attributes in process `syz.0.68'. [ 68.114906][ T4499] bond0: (slave bond_slave_0): Releasing backup interface [ 68.174991][ T4503] device veth0_macvtap left promiscuous mode [ 68.471909][ T4501] device syzkaller0 entered promiscuous mode [ 68.566922][ T4498] syz.4.69 (4498) used greatest stack depth: 18512 bytes left [ 68.687099][ T4524] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.74'. [ 68.834643][ T4520] validate_nla: 7 callbacks suppressed [ 68.834658][ T4520] netlink: 'syz.2.74': attribute type 10 has an invalid length. [ 68.873081][ T4520] device hsr0 entered promiscuous mode [ 68.930535][ T4520] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 68.955560][ T4520] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 68.984442][ T4520] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 69.022174][ T4520] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 69.068112][ T4535] netlink: 'syz.0.82': attribute type 7 has an invalid length. [ 69.102761][ T4535] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 69.112410][ T4540] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.84'. [ 69.121596][ T4535] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.82'. [ 69.793646][ T4566] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.87'. [ 69.943205][ T4563] netlink: 'syz.3.88': attribute type 27 has an invalid length. [ 70.055834][ T4563] bond0: (slave bond_slave_0): Releasing backup interface [ 70.426286][ T4583] netlink: 'syz.0.96': attribute type 7 has an invalid length. [ 70.459204][ T4583] netlink: 'syz.0.96': attribute type 1 has an invalid length. [ 70.473450][ T4583] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.96'. [ 70.572237][ T4577] device syzkaller0 entered promiscuous mode [ 70.636956][ T4586] netlink: 'syz.2.98': attribute type 10 has an invalid length. [ 70.699330][ T4589] netlink: 'syz.1.99': attribute type 21 has an invalid length. [ 70.736092][ T4589] netlink: 132 bytes leftover after parsing attributes in process `syz.1.99'. [ 71.289196][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.295958][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.313429][ T4616] device syzkaller0 entered promiscuous mode [ 71.476406][ T4625] netlink: 'syz.0.111': attribute type 2 has an invalid length. [ 71.513176][ T4625] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.111'. [ 71.522905][ T4627] netlink: 'syz.3.112': attribute type 21 has an invalid length. [ 71.541864][ T4627] netlink: 132 bytes leftover after parsing attributes in process `syz.3.112'. [ 71.860714][ T4640] netlink: 14 bytes leftover after parsing attributes in process `syz.4.117'. [ 72.715333][ T4661] netlink: 132 bytes leftover after parsing attributes in process `syz.0.124'. [ 73.039048][ T4675] netlink: 56 bytes leftover after parsing attributes in process `syz.1.127'. [ 73.082042][ T4675] FAULT_INJECTION: forcing a failure. [ 73.082042][ T4675] name failslab, interval 1, probability 0, space 0, times 1 [ 73.156300][ T4675] CPU: 1 PID: 4675 Comm: syz.1.127 Not tainted syzkaller #0 [ 73.163626][ T4675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 73.173701][ T4675] Call Trace: [ 73.176989][ T4675] [ 73.180061][ T4675] dump_stack_lvl+0x188/0x250 [ 73.184774][ T4675] ? show_regs_print_info+0x20/0x20 [ 73.189974][ T4675] ? load_image+0x400/0x400 [ 73.194480][ T4675] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 73.200558][ T4675] ? lock_chain_count+0x20/0x20 [ 73.205421][ T4675] should_fail+0x38c/0x4c0 [ 73.209848][ T4675] should_failslab+0x5/0x20 [ 73.214349][ T4675] slab_pre_alloc_hook+0x51/0xc0 [ 73.219450][ T4675] ? skb_clone+0x1bd/0x350 [ 73.223875][ T4675] kmem_cache_alloc+0x3d/0x290 [ 73.228647][ T4675] skb_clone+0x1bd/0x350 [ 73.232897][ T4675] __netlink_deliver_tap+0x3cd/0x7c0 [ 73.238193][ T4675] netlink_deliver_tap+0x16c/0x180 [ 73.243306][ T4675] netlink_sendskb+0x64/0x130 [ 73.247982][ T4675] netlink_ack+0x87d/0xb50 [ 73.252401][ T4675] ? netlink_dump+0xcf0/0xcf0 [ 73.257089][ T4675] ? __skb_clone+0x480/0x790 [ 73.261707][ T4675] netlink_rcv_skb+0x27a/0x440 [ 73.266482][ T4675] ? rtnetlink_bind+0x80/0x80 [ 73.271163][ T4675] ? netlink_ack+0xb50/0xb50 [ 73.275766][ T4675] netlink_unicast+0x774/0x920 [ 73.280537][ T4675] netlink_sendmsg+0x8ba/0xbe0 [ 73.285307][ T4675] ? netlink_getsockopt+0x570/0x570 [ 73.290502][ T4675] ? aa_sock_msg_perm+0x94/0x150 [ 73.295437][ T4675] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 73.300726][ T4675] ? security_socket_sendmsg+0x7c/0xa0 [ 73.306199][ T4675] ? netlink_getsockopt+0x570/0x570 [ 73.311400][ T4675] ____sys_sendmsg+0x5b7/0x8f0 [ 73.316177][ T4675] ? __sys_sendmsg_sock+0x30/0x30 [ 73.321217][ T4675] ? import_iovec+0x6f/0xa0 [ 73.325739][ T4675] ___sys_sendmsg+0x236/0x2e0 [ 73.330423][ T4675] ? __sys_sendmsg+0x2a0/0x2a0 [ 73.335243][ T4675] ? vfs_write+0x8b2/0xd60 [ 73.339771][ T4675] __se_sys_sendmsg+0x1af/0x290 [ 73.344624][ T4675] ? __x64_sys_sendmsg+0x80/0x80 [ 73.349559][ T4675] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 73.355554][ T4675] ? lockdep_hardirqs_on+0x94/0x140 [ 73.360756][ T4675] do_syscall_64+0x4c/0xa0 [ 73.365170][ T4675] ? clear_bhb_loop+0x30/0x80 [ 73.369840][ T4675] ? clear_bhb_loop+0x30/0x80 [ 73.374513][ T4675] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.380417][ T4675] RIP: 0033:0x7f7ee0db5dd9 [ 73.384829][ T4675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.404426][ T4675] RSP: 002b:00007f7edefee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.412833][ T4675] RAX: ffffffffffffffda RBX: 00007f7ee102f090 RCX: 00007f7ee0db5dd9 [ 73.420795][ T4675] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 73.428864][ T4675] RBP: 00007f7edefee090 R08: 0000000000000000 R09: 0000000000000000 [ 73.436840][ T4675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.444816][ T4675] R13: 00007f7ee102f128 R14: 00007f7ee102f090 R15: 00007fff511aa238 [ 73.452805][ T4675] [ 73.860274][ T4700] validate_nla: 2 callbacks suppressed [ 73.860392][ T4700] netlink: 'syz.0.139': attribute type 21 has an invalid length. [ 73.897504][ T4700] netlink: 132 bytes leftover after parsing attributes in process `syz.0.139'. [ 73.931565][ T4699] netlink: 152 bytes leftover after parsing attributes in process `syz.4.140'. [ 74.104304][ T4706] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.171079][ T4704] netlink: 'syz.2.141': attribute type 29 has an invalid length. [ 74.215891][ T4704] netlink: 'syz.2.141': attribute type 29 has an invalid length. [ 74.245836][ T4707] netlink: 'syz.2.141': attribute type 29 has an invalid length. [ 74.288830][ T4704] netlink: 'syz.2.141': attribute type 4 has an invalid length. [ 74.863577][ T4740] netlink: 'syz.2.155': attribute type 21 has an invalid length. [ 74.903233][ T4740] __nla_validate_parse: 2 callbacks suppressed [ 74.903268][ T4740] netlink: 132 bytes leftover after parsing attributes in process `syz.2.155'. [ 75.234325][ T4751] netlink: 'syz.0.159': attribute type 1 has an invalid length. [ 75.243678][ T4751] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.159'. [ 75.291297][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 75.912903][ T4783] netlink: 'syz.1.171': attribute type 39 has an invalid length. [ 75.986986][ T4790] netlink: 'syz.3.174': attribute type 1 has an invalid length. [ 76.064279][ T4790] netlink: 199572 bytes leftover after parsing attributes in process `syz.3.174'. [ 76.084361][ T4794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.175'. [ 76.625377][ T4823] netlink: 'syz.1.188': attribute type 19 has an invalid length. [ 76.655130][ T4823] netlink: 156 bytes leftover after parsing attributes in process `syz.1.188'. [ 76.692060][ T4826] device bridge_slave_1 left promiscuous mode [ 76.725491][ T4826] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.789459][ T4826] device bridge_slave_0 left promiscuous mode [ 76.807547][ T4826] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.096560][ T4838] netlink: 152 bytes leftover after parsing attributes in process `syz.3.194'. [ 77.109972][ T4838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.447156][ T4857] FAULT_INJECTION: forcing a failure. [ 77.447156][ T4857] name failslab, interval 1, probability 0, space 0, times 0 [ 77.494967][ T4857] CPU: 0 PID: 4857 Comm: syz.0.202 Not tainted syzkaller #0 [ 77.502314][ T4857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 77.512388][ T4857] Call Trace: [ 77.515680][ T4857] [ 77.518708][ T4857] dump_stack_lvl+0x188/0x250 [ 77.523490][ T4857] ? show_regs_print_info+0x20/0x20 [ 77.528828][ T4857] ? load_image+0x400/0x400 [ 77.533352][ T4857] ? __might_sleep+0xf0/0xf0 [ 77.537956][ T4857] ? __lock_acquire+0x7d10/0x7d10 [ 77.542992][ T4857] ? mark_lock+0x94/0x320 [ 77.547336][ T4857] should_fail+0x38c/0x4c0 [ 77.551770][ T4857] should_failslab+0x5/0x20 [ 77.556278][ T4857] slab_pre_alloc_hook+0x51/0xc0 [ 77.561225][ T4857] __kmalloc+0x6b/0x330 [ 77.565390][ T4857] ? tomoyo_realpath_from_path+0x118/0x610 [ 77.571319][ T4857] tomoyo_realpath_from_path+0x118/0x610 [ 77.576978][ T4857] tomoyo_path_number_perm+0x242/0x660 [ 77.582451][ T4857] ? verify_lock_unused+0x140/0x140 [ 77.586757][ T4864] netlink: 132 bytes leftover after parsing attributes in process `syz.2.205'. [ 77.587667][ T4857] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 77.587700][ T4857] ? ksys_write+0x1c6/0x260 [ 77.587768][ T4857] security_file_ioctl+0x6c/0xa0 [ 77.611551][ T4857] __se_sys_ioctl+0x48/0x170 [ 77.616155][ T4857] do_syscall_64+0x4c/0xa0 [ 77.620580][ T4857] ? clear_bhb_loop+0x30/0x80 [ 77.625269][ T4857] ? clear_bhb_loop+0x30/0x80 [ 77.629946][ T4857] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.635844][ T4857] RIP: 0033:0x7f4f70552dd9 [ 77.640357][ T4857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.659966][ T4857] RSP: 002b:00007f4f6e7ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.668394][ T4857] RAX: ffffffffffffffda RBX: 00007f4f707cbfa0 RCX: 00007f4f70552dd9 [ 77.676381][ T4857] RDX: 0000200000000080 RSI: 00000000000089fb RDI: 0000000000000004 [ 77.684349][ T4857] RBP: 00007f4f6e7ac090 R08: 0000000000000000 R09: 0000000000000000 [ 77.692318][ T4857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.700283][ T4857] R13: 00007f4f707cc038 R14: 00007f4f707cbfa0 R15: 00007ffc27f49928 [ 77.708266][ T4857] [ 77.815867][ T4867] netlink: 209700 bytes leftover after parsing attributes in process `syz.1.206'. [ 77.840699][ T4857] ERROR: Out of memory at tomoyo_realpath_from_path. [ 78.052060][ T4881] netlink: 120 bytes leftover after parsing attributes in process `syz.2.211'. [ 78.091437][ T4881] netlink: 9 bytes leftover after parsing attributes in process `syz.2.211'. [ 78.412848][ T4903] bond0: (slave geneve0): Error: Slave device does not support XDP [ 78.938013][ T4933] validate_nla: 8 callbacks suppressed [ 78.938028][ T4933] netlink: 'syz.2.235': attribute type 2 has an invalid length. [ 78.951186][ T4935] netlink: 'syz.1.236': attribute type 21 has an invalid length. [ 79.045117][ T4933] netlink: 'syz.2.235': attribute type 11 has an invalid length. [ 79.235305][ T4945] netlink: 'syz.0.241': attribute type 10 has an invalid length. [ 79.302357][ T4945] device veth0_macvtap left promiscuous mode [ 79.333050][ T4958] FAULT_INJECTION: forcing a failure. [ 79.333050][ T4958] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 79.381605][ T4958] CPU: 1 PID: 4958 Comm: syz.3.244 Not tainted syzkaller #0 [ 79.388950][ T4958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 79.399037][ T4958] Call Trace: [ 79.402340][ T4958] [ 79.405292][ T4958] dump_stack_lvl+0x188/0x250 [ 79.410002][ T4958] ? show_regs_print_info+0x20/0x20 [ 79.415228][ T4958] ? load_image+0x400/0x400 [ 79.419771][ T4958] ? __lock_acquire+0x7d10/0x7d10 [ 79.424838][ T4958] should_fail+0x38c/0x4c0 [ 79.429291][ T4958] _copy_to_user+0x2e/0x130 [ 79.433831][ T4958] simple_read_from_buffer+0xe3/0x150 [ 79.439239][ T4958] proc_fail_nth_read+0x1a6/0x220 [ 79.444345][ T4958] ? proc_fault_inject_write+0x310/0x310 [ 79.450155][ T4958] ? fsnotify_perm+0x254/0x560 [ 79.454947][ T4958] ? proc_fault_inject_write+0x310/0x310 [ 79.460607][ T4958] vfs_read+0x301/0xd60 [ 79.464817][ T4958] ? kernel_read+0x1e0/0x1e0 [ 79.469599][ T4958] ? __fget_files+0x40f/0x480 [ 79.474328][ T4958] ? mutex_lock_nested+0x17/0x20 [ 79.479299][ T4958] ? __fdget_pos+0x2bf/0x370 [ 79.483908][ T4958] ? ksys_read+0x71/0x260 [ 79.488272][ T4958] ksys_read+0x152/0x260 [ 79.492551][ T4958] ? vfs_write+0xd60/0xd60 [ 79.497005][ T4958] ? lockdep_hardirqs_on+0x94/0x140 [ 79.502245][ T4958] do_syscall_64+0x4c/0xa0 [ 79.506688][ T4958] ? clear_bhb_loop+0x30/0x80 [ 79.511385][ T4958] ? clear_bhb_loop+0x30/0x80 [ 79.516087][ T4958] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.521998][ T4958] RIP: 0033:0x7fb080d5760e [ 79.526433][ T4958] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 79.546059][ T4958] RSP: 002b:00007fb07efeffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.554507][ T4958] RAX: ffffffffffffffda RBX: 00007fb07eff06c0 RCX: 00007fb080d5760e [ 79.562493][ T4958] RDX: 000000000000000f RSI: 00007fb07eff00a0 RDI: 0000000000000007 [ 79.570470][ T4958] RBP: 00007fb07eff0090 R08: 0000000000000000 R09: 0000000000000000 [ 79.578437][ T4958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.586413][ T4958] R13: 00007fb081010038 R14: 00007fb08100ffa0 R15: 00007fffbf709408 [ 79.594427][ T4958] [ 80.047702][ T4977] netlink: 'syz.4.250': attribute type 21 has an invalid length. [ 80.090240][ T4977] __nla_validate_parse: 3 callbacks suppressed [ 80.090275][ T4977] netlink: 132 bytes leftover after parsing attributes in process `syz.4.250'. [ 80.494225][ T4995] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.582126][ T5004] device bridge_slave_1 left promiscuous mode [ 80.613120][ T5004] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.671262][ T5004] device bridge_slave_0 left promiscuous mode [ 80.688603][ T5004] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.951918][ T5026] netlink: 'syz.4.268': attribute type 21 has an invalid length. [ 80.992405][ T5026] netlink: 132 bytes leftover after parsing attributes in process `syz.4.268'. [ 81.571707][ T5057] netlink: 'syz.4.274': attribute type 3 has an invalid length. [ 81.703506][ T5057] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.274'. [ 82.542761][ T5046] netlink: 'syz.4.274': attribute type 3 has an invalid length. [ 82.564891][ T5046] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.274'. [ 82.654389][ T5051] device syzkaller0 entered promiscuous mode [ 82.770794][ T5083] netlink: 'syz.1.285': attribute type 21 has an invalid length. [ 82.815474][ T5083] netlink: 132 bytes leftover after parsing attributes in process `syz.1.285'. [ 84.690425][ T5105] netlink: 'syz.0.295': attribute type 21 has an invalid length. [ 84.710394][ T5105] netlink: 132 bytes leftover after parsing attributes in process `syz.0.295'. [ 84.764714][ T5109] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.296'. [ 85.005614][ T5121] netlink: 'syz.1.300': attribute type 3 has an invalid length. [ 85.024943][ T5121] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.300'. [ 85.452465][ T5124] device syzkaller0 entered promiscuous mode [ 85.519024][ T5137] netlink: 'syz.4.308': attribute type 15 has an invalid length. [ 85.540743][ T5137] netlink: 'syz.4.308': attribute type 7 has an invalid length. [ 85.686737][ T5148] FAULT_INJECTION: forcing a failure. [ 85.686737][ T5148] name failslab, interval 1, probability 0, space 0, times 0 [ 85.725503][ T5148] CPU: 0 PID: 5148 Comm: syz.1.311 Not tainted syzkaller #0 [ 85.732851][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 85.743005][ T5148] Call Trace: [ 85.746295][ T5148] [ 85.749239][ T5148] dump_stack_lvl+0x188/0x250 [ 85.753922][ T5148] ? show_regs_print_info+0x20/0x20 [ 85.759121][ T5148] ? load_image+0x400/0x400 [ 85.763622][ T5148] ? __might_sleep+0xf0/0xf0 [ 85.768212][ T5148] ? __lock_acquire+0x7d10/0x7d10 [ 85.773248][ T5148] should_fail+0x38c/0x4c0 [ 85.777661][ T5148] should_failslab+0x5/0x20 [ 85.782151][ T5148] slab_pre_alloc_hook+0x51/0xc0 [ 85.787079][ T5148] kmem_cache_alloc_node+0x47/0x2d0 [ 85.792263][ T5148] ? __alloc_skb+0xf4/0x750 [ 85.796759][ T5148] __alloc_skb+0xf4/0x750 [ 85.801086][ T5148] alloc_skb_with_frags+0xa7/0x730 [ 85.806192][ T5148] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 85.812074][ T5148] sock_alloc_send_pskb+0x87f/0x9a0 [ 85.817260][ T5148] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 85.823240][ T5148] ? sock_kzfree_s+0x50/0x50 [ 85.827812][ T5148] ? __local_bh_enable_ip+0x136/0x1c0 [ 85.833168][ T5148] ? _local_bh_enable+0xa0/0xa0 [ 85.838013][ T5148] rawv6_send_hdrinc+0x302/0x1690 [ 85.843033][ T5148] ? rawv6_probe_proto_opt+0x300/0x300 [ 85.848475][ T5148] ? txopt_get+0x303/0x3c0 [ 85.852883][ T5148] ? fl6_sock_lookup+0xc0/0xc0 [ 85.857642][ T5148] rawv6_sendmsg+0x11b1/0x1700 [ 85.862401][ T5148] ? compat_rawv6_ioctl+0x60/0x60 [ 85.867428][ T5148] ? aa_af_perm+0x340/0x340 [ 85.871913][ T5148] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 85.878318][ T5148] ? sock_rps_record_flow+0x17/0x3b0 [ 85.883594][ T5148] ? inet_sendmsg+0x78/0x2f0 [ 85.888167][ T5148] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 85.893447][ T5148] ? security_socket_sendmsg+0x7c/0xa0 [ 85.898896][ T5148] ? inet_send_prepare+0x260/0x260 [ 85.904000][ T5148] ____sys_sendmsg+0x5b7/0x8f0 [ 85.908759][ T5148] ? __sys_sendmsg_sock+0x30/0x30 [ 85.913772][ T5148] ? import_iovec+0x6f/0xa0 [ 85.918262][ T5148] ___sys_sendmsg+0x236/0x2e0 [ 85.922932][ T5148] ? __sys_sendmsg+0x2a0/0x2a0 [ 85.927712][ T5148] __se_sys_sendmsg+0x1af/0x290 [ 85.932552][ T5148] ? __x64_sys_sendmsg+0x80/0x80 [ 85.937483][ T5148] ? syscall_enter_from_user_mode+0x2a/0x70 [ 85.943368][ T5148] do_syscall_64+0x4c/0xa0 [ 85.947767][ T5148] ? clear_bhb_loop+0x30/0x80 [ 85.952428][ T5148] ? clear_bhb_loop+0x30/0x80 [ 85.957091][ T5148] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.962970][ T5148] RIP: 0033:0x7f7ee0db5dd9 [ 85.967372][ T5148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.986960][ T5148] RSP: 002b:00007f7edf00f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.995363][ T5148] RAX: ffffffffffffffda RBX: 00007f7ee102efa0 RCX: 00007f7ee0db5dd9 [ 86.003319][ T5148] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 86.011286][ T5148] RBP: 00007f7edf00f090 R08: 0000000000000000 R09: 0000000000000000 [ 86.019257][ T5148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.027218][ T5148] R13: 00007f7ee102f038 R14: 00007f7ee102efa0 R15: 00007fff511aa238 [ 86.035189][ T5148] [ 86.447236][ T5174] netlink: 'syz.0.322': attribute type 21 has an invalid length. [ 86.465084][ T5174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.322'. [ 86.635605][ T5184] team0: Port device team_slave_0 removed [ 86.653170][ T5184] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 87.500239][ T5191] device syzkaller0 entered promiscuous mode [ 87.574585][ T5206] delete_channel: no stack [ 87.592594][ T5195] netlink: 'syz.1.331': attribute type 21 has an invalid length. [ 89.306533][ T5249] device sit0 entered promiscuous mode [ 90.309569][ T5257] device syzkaller0 entered promiscuous mode [ 90.839528][ T5290] netlink: 'syz.0.368': attribute type 9 has an invalid length. [ 90.865096][ T5292] netlink: 'syz.2.366': attribute type 3 has an invalid length. [ 90.873956][ T5290] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.368'. [ 90.940082][ T5292] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.366'. [ 91.290046][ T5298] device sit0 entered promiscuous mode [ 91.807309][ T5311] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 92.199928][ T5330] netlink: 'syz.4.383': attribute type 7 has an invalid length. [ 92.255263][ T5330] netlink: 'syz.4.383': attribute type 1 has an invalid length. [ 92.292756][ T5330] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.383'. [ 92.477373][ T5334] netlink: 132 bytes leftover after parsing attributes in process `syz.2.382'. [ 92.617174][ T5348] netlink: 'syz.3.386': attribute type 3 has an invalid length. [ 92.716908][ T5348] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.386'. [ 92.929797][ T5335] delete_channel: no stack [ 93.251680][ T5371] netlink: 180 bytes leftover after parsing attributes in process `syz.2.394'. [ 93.603183][ T5369] netlink: 'syz.4.395': attribute type 3 has an invalid length. [ 93.616698][ T5369] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.395'. [ 93.936893][ T5391] netlink: 132 bytes leftover after parsing attributes in process `syz.1.399'. [ 94.839465][ T5398] netlink: 'syz.3.402': attribute type 7 has an invalid length. [ 94.985184][ T5398] netlink: 'syz.3.402': attribute type 1 has an invalid length. [ 95.074542][ T5398] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.402'. [ 96.597704][ T5411] netlink: 198364 bytes leftover after parsing attributes in process `syz.1.407'. [ 97.178901][ T5448] netlink: 'syz.4.417': attribute type 21 has an invalid length. [ 97.208101][ T5448] netlink: 156 bytes leftover after parsing attributes in process `syz.4.417'. [ 97.414042][ T5459] netlink: 'syz.2.420': attribute type 7 has an invalid length. [ 97.506226][ T5459] netlink: 'syz.2.420': attribute type 1 has an invalid length. [ 97.514562][ T5459] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.420'. [ 97.621314][ T5461] netlink: 'syz.1.421': attribute type 4 has an invalid length. [ 97.688374][ T5462] netlink: 132 bytes leftover after parsing attributes in process `syz.0.418'. [ 97.782941][ T5467] netlink: 'syz.3.422': attribute type 21 has an invalid length. [ 97.815354][ T5467] netlink: 132 bytes leftover after parsing attributes in process `syz.3.422'. [ 98.275422][ T5485] netlink: 'syz.4.427': attribute type 10 has an invalid length. [ 98.381080][ T5485] team0: Cannot enslave team device to itself [ 98.700741][ T5504] netlink: 144 bytes leftover after parsing attributes in process `syz.0.433'. [ 99.023015][ T5512] netlink: 'syz.3.435': attribute type 7 has an invalid length. [ 99.167361][ T5512] netlink: 'syz.3.435': attribute type 1 has an invalid length. [ 99.347176][ T5512] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.435'. [ 99.511264][ T5526] netlink: 'syz.1.440': attribute type 21 has an invalid length. [ 99.523820][ T5526] netlink: 132 bytes leftover after parsing attributes in process `syz.1.440'. [ 99.743169][ T5539] netlink: 'syz.1.444': attribute type 1 has an invalid length. [ 99.781601][ T5539] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.444'. [ 100.966635][ T5581] netlink: 132 bytes leftover after parsing attributes in process `syz.2.456'. [ 101.026207][ T5575] netlink: 172 bytes leftover after parsing attributes in process `syz.3.465'. [ 101.178619][ T5589] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.462'. [ 101.198528][ T5575] erspan0: refused to change device tx_queue_len [ 102.345739][ T5618] FAULT_INJECTION: forcing a failure. [ 102.345739][ T5618] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 102.386253][ T5618] CPU: 1 PID: 5618 Comm: syz.1.472 Not tainted syzkaller #0 [ 102.393588][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 102.403655][ T5618] Call Trace: [ 102.406949][ T5618] [ 102.409889][ T5618] dump_stack_lvl+0x188/0x250 [ 102.414579][ T5618] ? show_regs_print_info+0x20/0x20 [ 102.419789][ T5618] ? load_image+0x400/0x400 [ 102.424356][ T5618] ? perf_trace_lock_acquire+0xed/0x3e0 [ 102.429937][ T5618] should_fail+0x38c/0x4c0 [ 102.434377][ T5618] prepare_alloc_pages+0x1e4/0x5f0 [ 102.439507][ T5618] __alloc_pages+0x11b/0x480 [ 102.444124][ T5618] ? zone_statistics+0x170/0x170 [ 102.449091][ T5618] ? alloc_pages+0x438/0x550 [ 102.453700][ T5618] new_slab+0xc0/0x4b0 [ 102.457783][ T5618] ___slab_alloc+0x80a/0xdd0 [ 102.462387][ T5618] ? skb_clone+0x1bd/0x350 [ 102.466819][ T5618] ? skb_clone+0x1bd/0x350 [ 102.471237][ T5618] kmem_cache_alloc+0x195/0x290 [ 102.476095][ T5618] skb_clone+0x1bd/0x350 [ 102.480354][ T5618] __netlink_deliver_tap+0x3cd/0x7c0 [ 102.485669][ T5618] netlink_deliver_tap+0x16c/0x180 [ 102.490785][ T5618] netlink_sendskb+0x64/0x130 [ 102.495468][ T5618] netlink_ack+0x87d/0xb50 [ 102.499901][ T5618] ? netlink_dump+0xcf0/0xcf0 [ 102.504587][ T5618] ? __skb_clone+0x480/0x790 [ 102.509209][ T5618] netlink_rcv_skb+0x27a/0x440 [ 102.513986][ T5618] ? rtnetlink_bind+0x80/0x80 [ 102.518674][ T5618] ? netlink_ack+0xb50/0xb50 [ 102.523284][ T5618] netlink_unicast+0x774/0x920 [ 102.528062][ T5618] netlink_sendmsg+0x8ba/0xbe0 [ 102.532838][ T5618] ? netlink_getsockopt+0x570/0x570 [ 102.538049][ T5618] ? aa_sock_msg_perm+0x94/0x150 [ 102.542994][ T5618] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 102.548281][ T5618] ? security_socket_sendmsg+0x7c/0xa0 [ 102.553747][ T5618] ? netlink_getsockopt+0x570/0x570 [ 102.558947][ T5618] ____sys_sendmsg+0x5b7/0x8f0 [ 102.563731][ T5618] ? __sys_sendmsg_sock+0x30/0x30 [ 102.568767][ T5618] ? import_iovec+0x6f/0xa0 [ 102.573283][ T5618] ___sys_sendmsg+0x236/0x2e0 [ 102.577976][ T5618] ? __sys_sendmsg+0x2a0/0x2a0 [ 102.582763][ T5618] ? vfs_write+0x8b2/0xd60 [ 102.587213][ T5618] __se_sys_sendmsg+0x1af/0x290 [ 102.592074][ T5618] ? __x64_sys_sendmsg+0x80/0x80 [ 102.597017][ T5618] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 102.603031][ T5618] ? lockdep_hardirqs_on+0x94/0x140 [ 102.608247][ T5618] do_syscall_64+0x4c/0xa0 [ 102.612673][ T5618] ? clear_bhb_loop+0x30/0x80 [ 102.617346][ T5618] ? clear_bhb_loop+0x30/0x80 [ 102.622038][ T5618] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.628110][ T5618] RIP: 0033:0x7f7ee0db5dd9 [ 102.632529][ T5618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.652140][ T5618] RSP: 002b:00007f7edefee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.660569][ T5618] RAX: ffffffffffffffda RBX: 00007f7ee102f090 RCX: 00007f7ee0db5dd9 [ 102.668549][ T5618] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 102.676528][ T5618] RBP: 00007f7edefee090 R08: 0000000000000000 R09: 0000000000000000 [ 102.684512][ T5618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.692493][ T5618] R13: 00007f7ee102f128 R14: 00007f7ee102f090 R15: 00007fff511aa238 [ 102.700499][ T5618] [ 103.581741][ T5640] validate_nla: 5 callbacks suppressed [ 103.581758][ T5640] netlink: 'syz.0.479': attribute type 7 has an invalid length. [ 103.746604][ T5640] netlink: 'syz.0.479': attribute type 1 has an invalid length. [ 103.874893][ T5640] __nla_validate_parse: 4 callbacks suppressed [ 103.874907][ T5640] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.479'. [ 104.041570][ T5663] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.486'. [ 104.134265][ T5664] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.488'. [ 104.175043][ T5663] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 104.466123][ T5675] netlink: 180 bytes leftover after parsing attributes in process `syz.3.489'. [ 105.085829][ T5688] netlink: 'syz.2.496': attribute type 1 has an invalid length. [ 105.093522][ T5688] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.496'. [ 105.143269][ T5683] netlink: 'syz.1.494': attribute type 21 has an invalid length. [ 105.178200][ T5683] netlink: 132 bytes leftover after parsing attributes in process `syz.1.494'. [ 105.457244][ T5701] netlink: 'syz.0.501': attribute type 7 has an invalid length. [ 105.530281][ T5701] netlink: 'syz.0.501': attribute type 1 has an invalid length. [ 105.576880][ T5703] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 105.724881][ T5701] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.501'. [ 108.781870][ T5725] netlink: 'syz.2.509': attribute type 21 has an invalid length. [ 108.835267][ T5725] netlink: 132 bytes leftover after parsing attributes in process `syz.2.509'. [ 109.446093][ T5741] netlink: 763 bytes leftover after parsing attributes in process `syz.2.514'. [ 109.501570][ T5747] netlink: 763 bytes leftover after parsing attributes in process `syz.2.514'. [ 109.840994][ T5754] netlink: 'syz.4.518': attribute type 21 has an invalid length. [ 109.876540][ T5754] netlink: 132 bytes leftover after parsing attributes in process `syz.4.518'. [ 110.038149][ T5761] netlink: 'syz.3.521': attribute type 21 has an invalid length. [ 110.063142][ T5761] netlink: 132 bytes leftover after parsing attributes in process `syz.3.521'. [ 110.180878][ T5764] netlink: 'syz.4.522': attribute type 7 has an invalid length. [ 110.207783][ T5764] netlink: 'syz.4.522': attribute type 1 has an invalid length. [ 110.254956][ T5764] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.522'. [ 110.345933][ T5766] netlink: 'syz.3.523': attribute type 10 has an invalid length. [ 110.407234][ T5766] device hsr_slave_0 left promiscuous mode [ 110.435312][ T5766] device hsr_slave_1 left promiscuous mode [ 110.929837][ T5786] netlink: 209612 bytes leftover after parsing attributes in process `syz.3.530'. [ 111.022409][ T5793] netlink: 'syz.1.532': attribute type 21 has an invalid length. [ 111.077491][ T5793] netlink: 132 bytes leftover after parsing attributes in process `syz.1.532'. [ 111.150707][ T5786] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 111.673463][ T5822] netlink: 'syz.4.543': attribute type 7 has an invalid length. [ 111.691185][ T5822] netlink: 'syz.4.543': attribute type 1 has an invalid length. [ 111.720963][ T5822] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.543'. [ 111.757867][ T5827] netlink: 'syz.2.545': attribute type 21 has an invalid length. [ 111.782096][ T5827] netlink: 132 bytes leftover after parsing attributes in process `syz.2.545'. [ 112.071968][ T5845] netlink: 132 bytes leftover after parsing attributes in process `syz.0.549'. [ 112.337129][ T5851] openvswitch: netlink: Message has 20476 unknown bytes. [ 113.156516][ T5894] FAULT_INJECTION: forcing a failure. [ 113.156516][ T5894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.207601][ T5894] CPU: 1 PID: 5894 Comm: syz.0.569 Not tainted syzkaller #0 [ 113.214940][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.225007][ T5894] Call Trace: [ 113.228296][ T5894] [ 113.231230][ T5894] dump_stack_lvl+0x188/0x250 [ 113.235916][ T5894] ? show_regs_print_info+0x20/0x20 [ 113.241128][ T5894] ? load_image+0x400/0x400 [ 113.245649][ T5894] ? __lock_acquire+0x7d10/0x7d10 [ 113.250688][ T5894] should_fail+0x38c/0x4c0 [ 113.255115][ T5894] _copy_to_user+0x2e/0x130 [ 113.259625][ T5894] simple_read_from_buffer+0xe3/0x150 [ 113.265011][ T5894] proc_fail_nth_read+0x1a6/0x220 [ 113.270043][ T5894] ? proc_fault_inject_write+0x310/0x310 [ 113.275687][ T5894] ? fsnotify_perm+0x254/0x560 [ 113.280456][ T5894] ? proc_fault_inject_write+0x310/0x310 [ 113.286100][ T5894] vfs_read+0x301/0xd60 [ 113.290266][ T5894] ? kernel_read+0x1e0/0x1e0 [ 113.294874][ T5894] ? __fget_files+0x40f/0x480 [ 113.299561][ T5894] ? mutex_lock_nested+0x17/0x20 [ 113.304588][ T5894] ? __fdget_pos+0x2bf/0x370 [ 113.309179][ T5894] ? ksys_read+0x71/0x260 [ 113.313513][ T5894] ksys_read+0x152/0x260 [ 113.317760][ T5894] ? vfs_write+0xd60/0xd60 [ 113.322190][ T5894] ? lockdep_hardirqs_on+0x94/0x140 [ 113.327413][ T5894] do_syscall_64+0x4c/0xa0 [ 113.331838][ T5894] ? clear_bhb_loop+0x30/0x80 [ 113.336520][ T5894] ? clear_bhb_loop+0x30/0x80 [ 113.341219][ T5894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.347128][ T5894] RIP: 0033:0x7f4f7051360e [ 113.351668][ T5894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.371435][ T5894] RSP: 002b:00007f4f6e7abfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.379864][ T5894] RAX: ffffffffffffffda RBX: 00007f4f6e7ac6c0 RCX: 00007f4f7051360e [ 113.387849][ T5894] RDX: 000000000000000f RSI: 00007f4f6e7ac0a0 RDI: 0000000000000007 [ 113.395831][ T5894] RBP: 00007f4f6e7ac090 R08: 0000000000000000 R09: 0000000000000000 [ 113.403813][ T5894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.411791][ T5894] R13: 00007f4f707cc038 R14: 00007f4f707cbfa0 R15: 00007ffc27f49928 [ 113.419787][ T5894] [ 113.966819][ T5920] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 114.193762][ T5926] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 114.469115][ T5933] validate_nla: 9 callbacks suppressed [ 114.469159][ T5933] netlink: 'syz.3.584': attribute type 7 has an invalid length. [ 114.538542][ T5933] netlink: 'syz.3.584': attribute type 1 has an invalid length. [ 114.600789][ T5933] __nla_validate_parse: 7 callbacks suppressed [ 114.600806][ T5933] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.584'. [ 115.071064][ T5952] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.586'. [ 115.096542][ T5952] netlink: zone id is out of range [ 115.109225][ T5952] netlink: zone id is out of range [ 115.124140][ T5952] netlink: zone id is out of range [ 115.134228][ T5952] netlink: zone id is out of range [ 115.140263][ T5952] netlink: zone id is out of range [ 115.146321][ T5952] netlink: zone id is out of range [ 115.152624][ T5952] netlink: zone id is out of range [ 115.170031][ T5952] netlink: zone id is out of range [ 115.225393][ T5953] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.586'. [ 115.655839][ T5962] netlink: 'syz.3.593': attribute type 7 has an invalid length. [ 115.705640][ T5962] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 115.730940][ T5962] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.593'. [ 116.259398][ T5989] netlink: 'syz.1.603': attribute type 7 has an invalid length. [ 116.270042][ T5989] netlink: 'syz.1.603': attribute type 1 has an invalid length. [ 116.295055][ T5989] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.603'. [ 116.522362][ T5999] FAULT_INJECTION: forcing a failure. [ 116.522362][ T5999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.593546][ T5999] CPU: 1 PID: 5999 Comm: syz.0.606 Not tainted syzkaller #0 [ 116.600874][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.610984][ T5999] Call Trace: [ 116.614274][ T5999] [ 116.617215][ T5999] dump_stack_lvl+0x188/0x250 [ 116.621929][ T5999] ? show_regs_print_info+0x20/0x20 [ 116.627143][ T5999] ? load_image+0x400/0x400 [ 116.631671][ T5999] ? __lock_acquire+0x7d10/0x7d10 [ 116.637058][ T5999] ? bpf_test_run+0x78e/0x800 [ 116.641766][ T5999] should_fail+0x38c/0x4c0 [ 116.646208][ T5999] _copy_to_user+0x2e/0x130 [ 116.650724][ T5999] bpf_test_finish+0x1b7/0x2f0 [ 116.655512][ T5999] ? convert_skb_to___skb+0x360/0x360 [ 116.660890][ T5999] ? _copy_from_user+0x111/0x170 [ 116.665834][ T5999] ? bpf_test_init+0x171/0x1b0 [ 116.670595][ T5999] ? xdp_convert_buff_to_md+0x154/0x1e0 [ 116.676140][ T5999] bpf_prog_test_run_xdp+0x62b/0x920 [ 116.681424][ T5999] ? dev_put+0x70/0x70 [ 116.685492][ T5999] ? dev_put+0x70/0x70 [ 116.689550][ T5999] bpf_prog_test_run+0x31e/0x390 [ 116.694486][ T5999] __sys_bpf+0x5a5/0x6f0 [ 116.698727][ T5999] ? bpf_link_show_fdinfo+0x380/0x380 [ 116.704109][ T5999] ? vtime_user_exit+0x2c8/0x3e0 [ 116.709043][ T5999] __x64_sys_bpf+0x78/0x90 [ 116.713448][ T5999] do_syscall_64+0x4c/0xa0 [ 116.717854][ T5999] ? clear_bhb_loop+0x30/0x80 [ 116.722517][ T5999] ? clear_bhb_loop+0x30/0x80 [ 116.727184][ T5999] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.733064][ T5999] RIP: 0033:0x7f4f70552dd9 [ 116.737469][ T5999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.757076][ T5999] RSP: 002b:00007f4f6e7ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.765486][ T5999] RAX: ffffffffffffffda RBX: 00007f4f707cbfa0 RCX: 00007f4f70552dd9 [ 116.773449][ T5999] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 116.781407][ T5999] RBP: 00007f4f6e7ac090 R08: 0000000000000000 R09: 0000000000000000 [ 116.789363][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.797327][ T5999] R13: 00007f4f707cc038 R14: 00007f4f707cbfa0 R15: 00007ffc27f49928 [ 116.805300][ T5999] [ 117.013726][ T6020] netlink: 'syz.2.612': attribute type 4 has an invalid length. [ 117.081901][ T6020] netlink: 152 bytes leftover after parsing attributes in process `syz.2.612'. [ 117.183515][ T6032] netlink: 'syz.0.616': attribute type 9 has an invalid length. [ 117.192608][ T6032] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.616'. [ 117.312434][ T6039] netlink: 'syz.2.618': attribute type 7 has an invalid length. [ 117.336152][ T6039] netlink: 'syz.2.618': attribute type 1 has an invalid length. [ 117.358530][ T6039] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.618'. [ 117.522595][ T6053] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.626'. [ 117.774297][ T6041] device syzkaller0 entered promiscuous mode [ 118.358803][ T6085] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.636'. [ 119.560160][ T6163] validate_nla: 6 callbacks suppressed [ 119.560177][ T6163] netlink: 'syz.2.665': attribute type 7 has an invalid length. [ 119.584507][ T6163] netlink: 'syz.2.665': attribute type 1 has an invalid length. [ 119.913425][ T6153] device syzkaller0 entered promiscuous mode [ 120.017353][ T6179] netlink: 'syz.1.668': attribute type 2 has an invalid length. [ 120.141543][ T6179] netlink: 'syz.1.668': attribute type 1 has an invalid length. [ 120.146558][ T6159] device syzkaller0 entered promiscuous mode [ 120.378478][ T6183] FAULT_INJECTION: forcing a failure. [ 120.378478][ T6183] name failslab, interval 1, probability 0, space 0, times 0 [ 120.415078][ T6183] CPU: 0 PID: 6183 Comm: syz.1.669 Not tainted syzkaller #0 [ 120.422415][ T6183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.432479][ T6183] Call Trace: [ 120.435774][ T6183] [ 120.438711][ T6183] dump_stack_lvl+0x188/0x250 [ 120.443851][ T6183] ? show_regs_print_info+0x20/0x20 [ 120.449064][ T6183] ? load_image+0x400/0x400 [ 120.453642][ T6183] ? __might_sleep+0xf0/0xf0 [ 120.458257][ T6183] ? __lock_acquire+0x7d10/0x7d10 [ 120.463300][ T6183] should_fail+0x38c/0x4c0 [ 120.467722][ T6183] should_failslab+0x5/0x20 [ 120.472222][ T6183] slab_pre_alloc_hook+0x51/0xc0 [ 120.477152][ T6183] __kmalloc_node_track_caller+0x68/0x3a0 [ 120.482884][ T6183] ? netlink_sendmsg+0x654/0xbe0 [ 120.487824][ T6183] ? kmem_cache_alloc_node+0x162/0x2d0 [ 120.493289][ T6183] ? __alloc_skb+0xf4/0x750 [ 120.497899][ T6183] ? netlink_sendmsg+0x654/0xbe0 [ 120.502952][ T6183] __alloc_skb+0x22c/0x750 [ 120.507376][ T6183] netlink_sendmsg+0x654/0xbe0 [ 120.512130][ T6183] ? netlink_getsockopt+0x570/0x570 [ 120.517313][ T6183] ? aa_sock_msg_perm+0x94/0x150 [ 120.522233][ T6183] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 120.527503][ T6183] ? security_socket_sendmsg+0x7c/0xa0 [ 120.532965][ T6183] ? netlink_getsockopt+0x570/0x570 [ 120.538150][ T6183] ____sys_sendmsg+0x5b7/0x8f0 [ 120.542902][ T6183] ? __sys_sendmsg_sock+0x30/0x30 [ 120.547917][ T6183] ? import_iovec+0x6f/0xa0 [ 120.552422][ T6183] ___sys_sendmsg+0x236/0x2e0 [ 120.557086][ T6183] ? __sys_sendmsg+0x2a0/0x2a0 [ 120.561852][ T6183] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 120.567577][ T6183] __se_sys_sendmsg+0x1af/0x290 [ 120.572410][ T6183] ? __x64_sys_sendmsg+0x80/0x80 [ 120.577346][ T6183] ? syscall_enter_from_user_mode+0x2a/0x70 [ 120.583249][ T6183] do_syscall_64+0x4c/0xa0 [ 120.587650][ T6183] ? clear_bhb_loop+0x30/0x80 [ 120.592310][ T6183] ? clear_bhb_loop+0x30/0x80 [ 120.596971][ T6183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.602848][ T6183] RIP: 0033:0x7f7ee0db5dd9 [ 120.607248][ T6183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.626842][ T6183] RSP: 002b:00007f7edf00f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.635264][ T6183] RAX: ffffffffffffffda RBX: 00007f7ee102efa0 RCX: 00007f7ee0db5dd9 [ 120.643221][ T6183] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 120.651180][ T6183] RBP: 00007f7edf00f090 R08: 0000000000000000 R09: 0000000000000000 [ 120.659138][ T6183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.667096][ T6183] R13: 00007f7ee102f038 R14: 00007f7ee102efa0 R15: 00007fff511aa238 [ 120.675069][ T6183] [ 120.889238][ T6194] __nla_validate_parse: 4 callbacks suppressed [ 120.889273][ T6194] netlink: 182 bytes leftover after parsing attributes in process `syz.4.675'. [ 121.287390][ T6214] netlink: 'syz.4.685': attribute type 7 has an invalid length. [ 121.329970][ T6214] netlink: 'syz.4.685': attribute type 1 has an invalid length. [ 121.361742][ T6214] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.685'. [ 121.422024][ T6208] device syzkaller0 entered promiscuous mode [ 121.639300][ T6230] device syzkaller0 entered promiscuous mode [ 121.651409][ T6232] netlink: 'syz.0.689': attribute type 15 has an invalid length. [ 121.662229][ T6232] netlink: 'syz.0.689': attribute type 7 has an invalid length. [ 121.854934][ T6244] netlink: 'syz.0.692': attribute type 29 has an invalid length. [ 121.911409][ T6239] netlink: 'syz.0.692': attribute type 10 has an invalid length. [ 121.980063][ T6248] netlink: 132 bytes leftover after parsing attributes in process `syz.4.694'. [ 122.068988][ T6251] FAULT_INJECTION: forcing a failure. [ 122.068988][ T6251] name failslab, interval 1, probability 0, space 0, times 0 [ 122.091239][ T6251] CPU: 1 PID: 6251 Comm: syz.2.695 Not tainted syzkaller #0 [ 122.098584][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 122.108655][ T6251] Call Trace: [ 122.111947][ T6251] [ 122.114881][ T6251] dump_stack_lvl+0x188/0x250 [ 122.119570][ T6251] ? show_regs_print_info+0x20/0x20 [ 122.124777][ T6251] ? load_image+0x400/0x400 [ 122.129290][ T6251] ? __might_sleep+0xf0/0xf0 [ 122.133890][ T6251] ? __lock_acquire+0x7d10/0x7d10 [ 122.138935][ T6251] should_fail+0x38c/0x4c0 [ 122.143372][ T6251] should_failslab+0x5/0x20 [ 122.147887][ T6251] slab_pre_alloc_hook+0x51/0xc0 [ 122.152841][ T6251] kmem_cache_alloc_node+0x47/0x2d0 [ 122.158052][ T6251] ? __alloc_skb+0xf4/0x750 [ 122.162573][ T6251] __alloc_skb+0xf4/0x750 [ 122.166926][ T6251] alloc_skb_with_frags+0xa7/0x730 [ 122.172061][ T6237] device syzkaller0 entered promiscuous mode [ 122.172060][ T6251] ? rcu_nmi_exit+0x6f/0xf0 [ 122.178055][ T6251] sock_alloc_send_pskb+0x87f/0x9a0 [ 122.178100][ T6251] ? sock_kzfree_s+0x50/0x50 [ 122.178115][ T6251] ? __local_bh_enable_ip+0x136/0x1c0 [ 122.178132][ T6251] ? _local_bh_enable+0xa0/0xa0 [ 122.178158][ T6251] rawv6_send_hdrinc+0x302/0x1690 [ 122.178191][ T6251] ? rawv6_probe_proto_opt+0x300/0x300 [ 122.178210][ T6251] ? txopt_get+0x303/0x3c0 [ 122.178226][ T6251] ? fl6_sock_lookup+0xc0/0xc0 [ 122.178252][ T6251] rawv6_sendmsg+0x11b1/0x1700 [ 122.178282][ T6251] ? compat_rawv6_ioctl+0x60/0x60 [ 122.178321][ T6251] ? aa_af_perm+0x340/0x340 [ 122.178337][ T6251] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 122.178360][ T6251] ? sock_rps_record_flow+0x17/0x3b0 [ 122.248357][ T6251] ? inet_sendmsg+0x78/0x2f0 [ 122.252967][ T6251] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 122.258274][ T6251] ? security_socket_sendmsg+0x7c/0xa0 [ 122.263754][ T6251] ? inet_send_prepare+0x260/0x260 [ 122.268891][ T6251] ____sys_sendmsg+0x5b7/0x8f0 [ 122.273691][ T6251] ? __sys_sendmsg_sock+0x30/0x30 [ 122.278800][ T6251] ? import_iovec+0x6f/0xa0 [ 122.283334][ T6251] ___sys_sendmsg+0x236/0x2e0 [ 122.288038][ T6251] ? __sys_sendmsg+0x2a0/0x2a0 [ 122.292835][ T6251] ? vfs_write+0x8b2/0xd60 [ 122.297294][ T6251] __se_sys_sendmsg+0x1af/0x290 [ 122.302163][ T6251] ? __x64_sys_sendmsg+0x80/0x80 [ 122.307113][ T6251] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 122.313124][ T6251] ? lockdep_hardirqs_on+0x94/0x140 [ 122.318339][ T6251] do_syscall_64+0x4c/0xa0 [ 122.322766][ T6251] ? clear_bhb_loop+0x30/0x80 [ 122.327456][ T6251] ? clear_bhb_loop+0x30/0x80 [ 122.332146][ T6251] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.338046][ T6251] RIP: 0033:0x7f95ff5d1dd9 [ 122.342478][ T6251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.362096][ T6251] RSP: 002b:00007f95fd82b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.370531][ T6251] RAX: ffffffffffffffda RBX: 00007f95ff84afa0 RCX: 00007f95ff5d1dd9 [ 122.378609][ T6251] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 122.386610][ T6251] RBP: 00007f95fd82b090 R08: 0000000000000000 R09: 0000000000000000 [ 122.394605][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.402600][ T6251] R13: 00007f95ff84b038 R14: 00007f95ff84afa0 R15: 00007fff2a45e3d8 [ 122.410617][ T6251] [ 122.771370][ T6266] tap0: tun_chr_ioctl cmd 1074025675 [ 122.791561][ T6266] tap0: persist disabled [ 122.893977][ T6277] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.704'. [ 123.064430][ T6270] device syzkaller0 entered promiscuous mode [ 123.117211][ T6266] tap0: tun_chr_ioctl cmd 1074025675 [ 123.122603][ T6266] tap0: persist enabled [ 123.142970][ T6275] tap0: tun_chr_ioctl cmd 35092 [ 123.191632][ T6288] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 124.558738][ T6334] device syzkaller0 entered promiscuous mode [ 125.793009][ T6371] netlink: 132 bytes leftover after parsing attributes in process `syz.2.739'. [ 126.308185][ T6394] netlink: 156 bytes leftover after parsing attributes in process `syz.2.749'. [ 126.332090][ T6394] net_ratelimit: 194 callbacks suppressed [ 126.332104][ T6394] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 126.618733][ T6402] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.751'. [ 126.964146][ T6389] device syzkaller0 entered promiscuous mode [ 127.361948][ T6418] validate_nla: 4 callbacks suppressed [ 127.361962][ T6418] netlink: 'syz.3.758': attribute type 21 has an invalid length. [ 127.405029][ T6418] netlink: 'syz.3.758': attribute type 6 has an invalid length. [ 127.422999][ T6418] netlink: 132 bytes leftover after parsing attributes in process `syz.3.758'. [ 127.460466][ T6426] netlink: 'syz.4.760': attribute type 7 has an invalid length. [ 127.470321][ T6427] FAULT_INJECTION: forcing a failure. [ 127.470321][ T6427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.571939][ T6427] CPU: 1 PID: 6427 Comm: syz.0.761 Not tainted syzkaller #0 [ 127.579280][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.589343][ T6427] Call Trace: [ 127.592626][ T6427] [ 127.595554][ T6427] dump_stack_lvl+0x188/0x250 [ 127.600227][ T6427] ? show_regs_print_info+0x20/0x20 [ 127.605413][ T6427] ? load_image+0x400/0x400 [ 127.609910][ T6427] ? __lock_acquire+0x7d10/0x7d10 [ 127.614932][ T6427] should_fail+0x38c/0x4c0 [ 127.619345][ T6427] _copy_to_user+0x2e/0x130 [ 127.623838][ T6427] simple_read_from_buffer+0xe3/0x150 [ 127.629203][ T6427] proc_fail_nth_read+0x1a6/0x220 [ 127.634218][ T6427] ? proc_fault_inject_write+0x310/0x310 [ 127.639843][ T6427] ? fsnotify_perm+0x254/0x560 [ 127.644604][ T6427] ? proc_fault_inject_write+0x310/0x310 [ 127.650248][ T6427] vfs_read+0x301/0xd60 [ 127.654417][ T6427] ? kernel_read+0x1e0/0x1e0 [ 127.659001][ T6427] ? __fget_files+0x40f/0x480 [ 127.663671][ T6427] ? mutex_lock_nested+0x17/0x20 [ 127.668593][ T6427] ? __fdget_pos+0x2bf/0x370 [ 127.673169][ T6427] ? ksys_read+0x71/0x260 [ 127.677482][ T6427] ksys_read+0x152/0x260 [ 127.681713][ T6427] ? vfs_write+0xd60/0xd60 [ 127.686117][ T6427] ? lockdep_hardirqs_on+0x94/0x140 [ 127.691321][ T6427] do_syscall_64+0x4c/0xa0 [ 127.695740][ T6427] ? clear_bhb_loop+0x30/0x80 [ 127.700421][ T6427] ? clear_bhb_loop+0x30/0x80 [ 127.705193][ T6427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.711083][ T6427] RIP: 0033:0x7f4f7051360e [ 127.715488][ T6427] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 127.735087][ T6427] RSP: 002b:00007f4f6e7abfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.743505][ T6427] RAX: ffffffffffffffda RBX: 00007f4f6e7ac6c0 RCX: 00007f4f7051360e [ 127.751463][ T6427] RDX: 000000000000000f RSI: 00007f4f6e7ac0a0 RDI: 0000000000000004 [ 127.759420][ T6427] RBP: 00007f4f6e7ac090 R08: 0000000000000000 R09: 0000000000000000 [ 127.767375][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.775331][ T6427] R13: 00007f4f707cc038 R14: 00007f4f707cbfa0 R15: 00007ffc27f49928 [ 127.783302][ T6427] [ 128.206696][ T6459] netlink: 148 bytes leftover after parsing attributes in process `syz.1.773'. [ 128.378739][ T6466] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.775'. [ 128.400844][ T6468] Dead loop on virtual device ip6_vti0, fix it urgently! [ 129.001818][ T6490] netlink: 'syz.1.785': attribute type 3 has an invalid length. [ 129.054967][ T6490] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.785'. [ 129.347740][ T6502] netlink: 'syz.4.787': attribute type 10 has an invalid length. [ 129.987245][ T6531] netlink: 763 bytes leftover after parsing attributes in process `syz.3.798'. [ 130.348882][ T6545] netlink: 'syz.2.803': attribute type 10 has an invalid length. [ 130.447445][ T6551] netlink: 60 bytes leftover after parsing attributes in process `syz.4.806'. [ 130.464881][ T6551] netlink: 60 bytes leftover after parsing attributes in process `syz.4.806'. [ 130.540535][ T6555] netlink: 60 bytes leftover after parsing attributes in process `syz.4.806'. [ 130.868600][ T6570] netlink: 'syz.2.815': attribute type 7 has an invalid length. [ 130.893581][ T6570] netlink: 'syz.2.815': attribute type 1 has an invalid length. [ 130.972459][ T6566] netlink: 'syz.4.813': attribute type 10 has an invalid length. [ 131.643269][ T6566] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 131.788452][ T6590] netlink: 'syz.0.819': attribute type 10 has an invalid length. [ 131.948715][ T6599] FAULT_INJECTION: forcing a failure. [ 131.948715][ T6599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.965397][ T6593] device geneve0 entered promiscuous mode [ 131.990413][ T6599] CPU: 0 PID: 6599 Comm: syz.0.821 Not tainted syzkaller #0 [ 131.997750][ T6599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 132.007820][ T6599] Call Trace: [ 132.011112][ T6599] [ 132.014058][ T6599] dump_stack_lvl+0x188/0x250 [ 132.018757][ T6599] ? show_regs_print_info+0x20/0x20 [ 132.023973][ T6599] ? load_image+0x400/0x400 [ 132.028503][ T6599] ? __lock_acquire+0x7d10/0x7d10 [ 132.033629][ T6599] ? perf_trace_lock_acquire+0xed/0x3e0 [ 132.039197][ T6599] should_fail+0x38c/0x4c0 [ 132.043636][ T6599] _copy_from_user+0x2e/0x170 [ 132.048328][ T6599] __copy_msghdr_from_user+0xc9/0x630 [ 132.053713][ T6599] ? verify_lock_unused+0x140/0x140 [ 132.058930][ T6599] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 132.064240][ T6599] ___sys_sendmsg+0x19a/0x2e0 [ 132.068936][ T6599] ? __sys_sendmsg+0x2a0/0x2a0 [ 132.073725][ T6599] ? vfs_write+0x8b2/0xd60 [ 132.078190][ T6599] __se_sys_sendmsg+0x1af/0x290 [ 132.083058][ T6599] ? __x64_sys_sendmsg+0x80/0x80 [ 132.087995][ T6599] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 132.093991][ T6599] ? lockdep_hardirqs_on+0x94/0x140 [ 132.099197][ T6599] do_syscall_64+0x4c/0xa0 [ 132.103610][ T6599] ? clear_bhb_loop+0x30/0x80 [ 132.108276][ T6599] ? clear_bhb_loop+0x30/0x80 [ 132.112942][ T6599] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.118828][ T6599] RIP: 0033:0x7f4f70552dd9 [ 132.123235][ T6599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.142824][ T6599] RSP: 002b:00007f4f6e7ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.151225][ T6599] RAX: ffffffffffffffda RBX: 00007f4f707cbfa0 RCX: 00007f4f70552dd9 [ 132.159186][ T6599] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 132.167144][ T6599] RBP: 00007f4f6e7ac090 R08: 0000000000000000 R09: 0000000000000000 [ 132.175100][ T6599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.183057][ T6599] R13: 00007f4f707cc038 R14: 00007f4f707cbfa0 R15: 00007ffc27f49928 [ 132.191027][ T6599] [ 132.418443][ T6614] __nla_validate_parse: 3 callbacks suppressed [ 132.418457][ T6614] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.829'. [ 132.471587][ T6616] netlink: 40 bytes leftover after parsing attributes in process `syz.0.830'. [ 132.639125][ T6621] validate_nla: 1 callbacks suppressed [ 132.639144][ T6621] netlink: 'syz.1.833': attribute type 13 has an invalid length. [ 132.668789][ T6621] netlink: 160 bytes leftover after parsing attributes in process `syz.1.833'. [ 132.690390][ T6623] netlink: 'syz.3.834': attribute type 7 has an invalid length. [ 132.741079][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.747508][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.778299][ T6623] netlink: 'syz.3.834': attribute type 1 has an invalid length. [ 132.810794][ T6621] erspan0: refused to change device tx_queue_len [ 132.820787][ T6623] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.834'. [ 132.835432][ T6621] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 133.092864][ T6636] netlink: 132 bytes leftover after parsing attributes in process `syz.1.837'. [ 133.222246][ T6641] netlink: 'syz.0.840': attribute type 21 has an invalid length. [ 134.122686][ T6681] netlink: 'syz.1.853': attribute type 7 has an invalid length. [ 134.130503][ T6681] netlink: 'syz.1.853': attribute type 1 has an invalid length. [ 134.138981][ T6681] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.853'. [ 134.775389][ T6698] netlink: 56 bytes leftover after parsing attributes in process `syz.0.855'. [ 135.422155][ T6738] netlink: 'syz.2.871': attribute type 13 has an invalid length. [ 135.493799][ T6738] netlink: 160 bytes leftover after parsing attributes in process `syz.2.871'. [ 135.640068][ T6738] erspan0: refused to change device tx_queue_len [ 135.654087][ T6738] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 135.694257][ T6748] netlink: 132 bytes leftover after parsing attributes in process `syz.0.873'. [ 135.836443][ T6755] netlink: 'syz.3.877': attribute type 7 has an invalid length. [ 135.865258][ T6755] netlink: 'syz.3.877': attribute type 1 has an invalid length. [ 135.872937][ T6755] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.877'. [ 136.038986][ T6766] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 136.214441][ T6776] FAULT_INJECTION: forcing a failure. [ 136.214441][ T6776] name failslab, interval 1, probability 0, space 0, times 0 [ 136.245039][ T6776] CPU: 0 PID: 6776 Comm: syz.0.882 Not tainted syzkaller #0 [ 136.252375][ T6776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 136.262443][ T6776] Call Trace: [ 136.265734][ T6776] [ 136.268673][ T6776] dump_stack_lvl+0x188/0x250 [ 136.273367][ T6776] ? show_regs_print_info+0x20/0x20 [ 136.278576][ T6776] ? load_image+0x400/0x400 [ 136.283096][ T6776] ? __might_sleep+0xf0/0xf0 [ 136.287690][ T6776] ? __lock_acquire+0x7d10/0x7d10 [ 136.292724][ T6776] should_fail+0x38c/0x4c0 [ 136.297152][ T6776] should_failslab+0x5/0x20 [ 136.301655][ T6776] slab_pre_alloc_hook+0x51/0xc0 [ 136.306595][ T6776] kmem_cache_alloc_trace+0x47/0x2a0 [ 136.311884][ T6776] ? sctp_association_new+0x86/0x24a0 [ 136.317276][ T6776] sctp_association_new+0x86/0x24a0 [ 136.322504][ T6776] ? sctp_do_bind+0x6bd/0x990 [ 136.327200][ T6776] ? __ipv6_addr_type+0x108/0x2f0 [ 136.332242][ T6776] sctp_connect_new_asoc+0x2da/0x6a0 [ 136.337553][ T6776] ? __sctp_connect+0xd80/0xd80 [ 136.342403][ T6776] ? __local_bh_enable_ip+0x136/0x1c0 [ 136.347872][ T6776] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 136.353423][ T6776] ? security_sctp_bind_connect+0x85/0xb0 [ 136.359157][ T6776] sctp_sendmsg+0x158d/0x2900 [ 136.363867][ T6776] ? aa_sk_perm+0x7dc/0x910 [ 136.368373][ T6776] ? sctp_getsockopt+0x8a0/0x8a0 [ 136.373320][ T6776] ? aa_af_perm+0x340/0x340 [ 136.377829][ T6776] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 136.384250][ T6776] ? sock_rps_record_flow+0x17/0x3b0 [ 136.389539][ T6776] ? inet_sendmsg+0xe5/0x2f0 [ 136.394134][ T6776] ? inet_send_prepare+0x260/0x260 [ 136.399250][ T6776] ____sys_sendmsg+0x5b7/0x8f0 [ 136.404034][ T6776] ? __sys_sendmsg_sock+0x30/0x30 [ 136.409075][ T6776] ? import_iovec+0x6f/0xa0 [ 136.413589][ T6776] ___sys_sendmsg+0x236/0x2e0 [ 136.418281][ T6776] ? __sys_sendmsg+0x2a0/0x2a0 [ 136.423079][ T6776] ? vfs_write+0x8b2/0xd60 [ 136.427611][ T6776] __se_sys_sendmsg+0x1af/0x290 [ 136.432508][ T6776] ? __x64_sys_sendmsg+0x80/0x80 [ 136.437465][ T6776] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 136.443534][ T6776] ? lockdep_hardirqs_on+0x94/0x140 [ 136.448749][ T6776] do_syscall_64+0x4c/0xa0 [ 136.453177][ T6776] ? clear_bhb_loop+0x30/0x80 [ 136.457862][ T6776] ? clear_bhb_loop+0x30/0x80 [ 136.462548][ T6776] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.468460][ T6776] RIP: 0033:0x7f4f70552dd9 [ 136.472884][ T6776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.492499][ T6776] RSP: 002b:00007f4f6e7ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.500930][ T6776] RAX: ffffffffffffffda RBX: 00007f4f707cbfa0 RCX: 00007f4f70552dd9 [ 136.509017][ T6776] RDX: 0000000000004804 RSI: 00002000000001c0 RDI: 0000000000000003 [ 136.516995][ T6776] RBP: 00007f4f6e7ac090 R08: 0000000000000000 R09: 0000000000000000 [ 136.524976][ T6776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.532953][ T6776] R13: 00007f4f707cc038 R14: 00007f4f707cbfa0 R15: 00007ffc27f49928 [ 136.540949][ T6776] [ 137.164392][ T6800] erspan0: refused to change device tx_queue_len [ 137.178690][ T6800] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 138.288002][ T6861] __nla_validate_parse: 3 callbacks suppressed [ 138.288018][ T6861] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.915'. [ 138.365153][ T6858] device bridge_slave_1 left promiscuous mode [ 138.371772][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.433712][ T6858] device bridge_slave_0 left promiscuous mode [ 138.475315][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.497511][ T6873] validate_nla: 6 callbacks suppressed [ 138.497526][ T6873] netlink: 'syz.2.919': attribute type 7 has an invalid length. [ 138.553410][ T6873] netlink: 'syz.2.919': attribute type 1 has an invalid length. [ 138.615886][ T6878] FAULT_INJECTION: forcing a failure. [ 138.615886][ T6878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.633834][ T6873] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.919'. [ 138.685150][ T6878] CPU: 1 PID: 6878 Comm: syz.4.920 Not tainted syzkaller #0 [ 138.692481][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.702551][ T6878] Call Trace: [ 138.705840][ T6878] [ 138.708779][ T6878] dump_stack_lvl+0x188/0x250 [ 138.713475][ T6878] ? show_regs_print_info+0x20/0x20 [ 138.718686][ T6878] ? load_image+0x400/0x400 [ 138.723204][ T6878] ? __lock_acquire+0x7d10/0x7d10 [ 138.728254][ T6878] should_fail+0x38c/0x4c0 [ 138.732691][ T6878] _copy_from_user+0x2e/0x170 [ 138.737386][ T6878] get_user_ifreq+0x67/0x170 [ 138.741989][ T6878] sock_ioctl+0x637/0x710 [ 138.746337][ T6878] ? sock_poll+0x410/0x410 [ 138.750772][ T6878] ? bpf_lsm_file_ioctl+0x5/0x10 [ 138.755720][ T6878] ? security_file_ioctl+0x7c/0xa0 [ 138.760844][ T6878] ? sock_poll+0x410/0x410 [ 138.765272][ T6878] __se_sys_ioctl+0xfa/0x170 [ 138.769872][ T6878] do_syscall_64+0x4c/0xa0 [ 138.774299][ T6878] ? clear_bhb_loop+0x30/0x80 [ 138.778979][ T6878] ? clear_bhb_loop+0x30/0x80 [ 138.783660][ T6878] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.789553][ T6878] RIP: 0033:0x7fa5061dcdd9 [ 138.793971][ T6878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.813610][ T6878] RSP: 002b:00007fa504436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.822037][ T6878] RAX: ffffffffffffffda RBX: 00007fa506455fa0 RCX: 00007fa5061dcdd9 [ 138.830015][ T6878] RDX: 0000200000000080 RSI: 00000000000089fb RDI: 0000000000000004 [ 138.837987][ T6878] RBP: 00007fa504436090 R08: 0000000000000000 R09: 0000000000000000 [ 138.845961][ T6878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.853932][ T6878] R13: 00007fa506456038 R14: 00007fa506455fa0 R15: 00007ffeb4efa438 [ 138.861918][ T6878] [ 139.259664][ T6898] netlink: 'syz.3.926': attribute type 10 has an invalid length. [ 140.122889][ T6927] netlink: 'syz.3.938': attribute type 7 has an invalid length. [ 140.209283][ T6927] netlink: 'syz.3.938': attribute type 1 has an invalid length. [ 140.249070][ T6936] netlink: 'syz.1.941': attribute type 21 has an invalid length. [ 140.297277][ T6927] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.938'. [ 140.367641][ T6938] netlink: 'syz.4.940': attribute type 10 has an invalid length. [ 140.431213][ T6944] netlink: 'syz.0.942': attribute type 21 has an invalid length. [ 140.479067][ T6944] netlink: 120 bytes leftover after parsing attributes in process `syz.0.942'. [ 140.514070][ T6944] netlink: 9 bytes leftover after parsing attributes in process `syz.0.942'. [ 142.698958][ T7030] netlink: 'syz.3.975': attribute type 1 has an invalid length. [ 142.708266][ T7030] netlink: 'syz.3.975': attribute type 3 has an invalid length. [ 142.730974][ T7030] netlink: 132 bytes leftover after parsing attributes in process `syz.3.975'. [ 143.131413][ T7048] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.304211][ T7048] bond0: (slave team0): Enslaving as an active interface with an up link [ 144.843878][ T7100] validate_nla: 1 callbacks suppressed [ 144.843894][ T7100] netlink: 'syz.4.1000': attribute type 4 has an invalid length. [ 144.904909][ T7100] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1000'. [ 145.075027][ T7100] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 146.186923][ T7162] netlink: 'syz.3.1025': attribute type 4 has an invalid length. [ 146.233679][ T7162] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1025'. [ 146.451598][ T7175] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1030'. [ 146.535226][ T7175] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.1030'. [ 146.648468][ T7190] netlink: 'syz.4.1039': attribute type 10 has an invalid length. [ 146.788974][ T7199] netlink: 'syz.1.1038': attribute type 9 has an invalid length. [ 146.839417][ T7199] netlink: 205996 bytes leftover after parsing attributes in process `syz.1.1038'. [ 146.941433][ T7190] team0: Device wg1 is of different type [ 147.272942][ T7212] FAULT_INJECTION: forcing a failure. [ 147.272942][ T7212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.359735][ T7212] CPU: 1 PID: 7212 Comm: syz.0.1045 Not tainted syzkaller #0 [ 147.367170][ T7212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.377235][ T7212] Call Trace: [ 147.380525][ T7212] [ 147.383456][ T7212] dump_stack_lvl+0x188/0x250 [ 147.388146][ T7212] ? show_regs_print_info+0x20/0x20 [ 147.393361][ T7212] ? load_image+0x400/0x400 [ 147.397885][ T7212] ? __lock_acquire+0x7d10/0x7d10 [ 147.402926][ T7212] should_fail+0x38c/0x4c0 [ 147.407367][ T7212] _copy_from_iter+0x22e/0x1170 [ 147.412234][ T7212] ? __lock_acquire+0x7d10/0x7d10 [ 147.417275][ T7212] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 147.422674][ T7212] ? __virt_addr_valid+0x3c6/0x470 [ 147.427796][ T7212] ? __phys_addr_symbol+0x2b/0x70 [ 147.432831][ T7212] ? __check_object_size+0x30c/0x410 [ 147.438134][ T7212] netlink_sendmsg+0x758/0xbe0 [ 147.442919][ T7212] ? netlink_getsockopt+0x570/0x570 [ 147.448140][ T7212] ? aa_sock_msg_perm+0x94/0x150 [ 147.453090][ T7212] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 147.458384][ T7212] ? security_socket_sendmsg+0x7c/0xa0 [ 147.463855][ T7212] ? netlink_getsockopt+0x570/0x570 [ 147.469062][ T7212] ____sys_sendmsg+0x5b7/0x8f0 [ 147.473846][ T7212] ? __sys_sendmsg_sock+0x30/0x30 [ 147.478885][ T7212] ? import_iovec+0x6f/0xa0 [ 147.483403][ T7212] ___sys_sendmsg+0x236/0x2e0 [ 147.488096][ T7212] ? __sys_sendmsg+0x2a0/0x2a0 [ 147.492902][ T7212] __se_sys_sendmsg+0x1af/0x290 [ 147.497771][ T7212] ? __x64_sys_sendmsg+0x80/0x80 [ 147.502724][ T7212] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 147.508732][ T7212] ? lockdep_hardirqs_on+0x94/0x140 [ 147.513946][ T7212] do_syscall_64+0x4c/0xa0 [ 147.518376][ T7212] ? clear_bhb_loop+0x30/0x80 [ 147.523074][ T7212] ? clear_bhb_loop+0x30/0x80 [ 147.527765][ T7212] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.533662][ T7212] RIP: 0033:0x7f4f70552dd9 [ 147.538080][ T7212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.557689][ T7212] RSP: 002b:00007f4f6e7ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.566114][ T7212] RAX: ffffffffffffffda RBX: 00007f4f707cbfa0 RCX: 00007f4f70552dd9 [ 147.574091][ T7212] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 147.582058][ T7212] RBP: 00007f4f6e7ac090 R08: 0000000000000000 R09: 0000000000000000 [ 147.590015][ T7212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.597973][ T7212] R13: 00007f4f707cc038 R14: 00007f4f707cbfa0 R15: 00007ffc27f49928 [ 147.605942][ T7212] [ 147.726674][ T7224] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1049'. [ 147.774906][ T7224] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 148.992506][ T7298] FAULT_INJECTION: forcing a failure. [ 148.992506][ T7298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.080632][ T7298] CPU: 0 PID: 7298 Comm: syz.4.1081 Not tainted syzkaller #0 [ 149.088051][ T7298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 149.095107][ T7300] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1082'. [ 149.098115][ T7298] Call Trace: [ 149.098125][ T7298] [ 149.098132][ T7298] dump_stack_lvl+0x188/0x250 [ 149.098158][ T7298] ? show_regs_print_info+0x20/0x20 [ 149.098176][ T7298] ? load_image+0x400/0x400 [ 149.127906][ T7298] ? alloc_skb_with_frags+0x5a8/0x730 [ 149.133295][ T7298] ? __lock_acquire+0x7d10/0x7d10 [ 149.138339][ T7298] should_fail+0x38c/0x4c0 [ 149.142776][ T7298] _copy_from_iter+0x22e/0x1170 [ 149.147637][ T7298] ? __lock_acquire+0x7d10/0x7d10 [ 149.152677][ T7298] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 149.158160][ T7298] ? __local_bh_enable_ip+0x136/0x1c0 [ 149.163550][ T7298] ? __virt_addr_valid+0x3c6/0x470 [ 149.168667][ T7298] ? __phys_addr_symbol+0x2b/0x70 [ 149.173706][ T7298] ? __check_object_size+0x30c/0x410 [ 149.179002][ T7298] rawv6_send_hdrinc+0x7c7/0x1690 [ 149.184033][ T7298] ? rawv6_probe_proto_opt+0x300/0x300 [ 149.189480][ T7298] ? xfrm_lookup_route+0xf8/0x1a0 [ 149.194492][ T7298] ? __sanitizer_cov_trace_pc+0x13/0x60 [ 149.200025][ T7298] rawv6_sendmsg+0x11b1/0x1700 [ 149.204782][ T7298] ? compat_rawv6_ioctl+0x60/0x60 [ 149.209795][ T7298] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 149.215769][ T7298] ? lock_chain_count+0x20/0x20 [ 149.220617][ T7298] ? lockdep_hardirqs_on+0x94/0x140 [ 149.225804][ T7298] ? compat_rawv6_ioctl+0x60/0x60 [ 149.230811][ T7298] ? inet_send_prepare+0x260/0x260 [ 149.235904][ T7298] ____sys_sendmsg+0x5b7/0x8f0 [ 149.240663][ T7298] ? __sys_sendmsg_sock+0x30/0x30 [ 149.245675][ T7298] ? import_iovec+0x6f/0xa0 [ 149.250168][ T7298] ___sys_sendmsg+0x236/0x2e0 [ 149.254843][ T7298] ? __sys_sendmsg+0x2a0/0x2a0 [ 149.259602][ T7298] ? ktime_get_real_ts64+0x440/0x440 [ 149.264886][ T7298] __se_sys_sendmsg+0x1af/0x290 [ 149.269724][ T7298] ? __x64_sys_sendmsg+0x80/0x80 [ 149.274652][ T7298] ? syscall_enter_from_user_mode+0x2a/0x70 [ 149.280531][ T7298] do_syscall_64+0x4c/0xa0 [ 149.284933][ T7298] ? clear_bhb_loop+0x30/0x80 [ 149.289597][ T7298] ? clear_bhb_loop+0x30/0x80 [ 149.294256][ T7298] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.300135][ T7298] RIP: 0033:0x7fa5061dcdd9 [ 149.304545][ T7298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.324132][ T7298] RSP: 002b:00007fa504436028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.332534][ T7298] RAX: ffffffffffffffda RBX: 00007fa506455fa0 RCX: 00007fa5061dcdd9 [ 149.340493][ T7298] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 149.348451][ T7298] RBP: 00007fa504436090 R08: 0000000000000000 R09: 0000000000000000 [ 149.356405][ T7298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.364363][ T7298] R13: 00007fa506456038 R14: 00007fa506455fa0 R15: 00007ffeb4efa438 [ 149.372332][ T7298] [ 150.493016][ T7351] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 150.903548][ T7377] netlink: 'syz.1.1110': attribute type 3 has an invalid length. [ 150.963324][ T7377] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1110'. [ 150.974523][ T7379] netlink: 'syz.1.1110': attribute type 3 has an invalid length. [ 150.983647][ T7379] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1110'. [ 152.123934][ T7419] netlink: 'syz.1.1124': attribute type 11 has an invalid length. [ 152.147060][ T7416] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1125'. [ 152.291139][ T7427] netlink: 'syz.3.1129': attribute type 7 has an invalid length. [ 152.330114][ T7427] netlink: 'syz.3.1129': attribute type 1 has an invalid length. [ 152.394219][ T7427] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1129'. [ 152.733870][ T9] wlan1: Trigger new scan to find an IBSS to join [ 155.312858][ T7463] netlink: 'syz.4.1142': attribute type 3 has an invalid length. [ 155.455303][ T7463] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1142'. [ 155.875085][ T7476] netlink: 'syz.2.1147': attribute type 5 has an invalid length. [ 156.171430][ T7488] netlink: 'syz.2.1151': attribute type 7 has an invalid length. [ 156.204368][ T7488] netlink: 'syz.2.1151': attribute type 1 has an invalid length. [ 156.228142][ T7488] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1151'. [ 156.989333][ T7525] netlink: 'syz.0.1175': attribute type 7 has an invalid length. [ 157.031637][ T7525] netlink: 'syz.0.1175': attribute type 1 has an invalid length. [ 157.084958][ T7525] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1175'. [ 157.714009][ T7541] netlink: 'syz.3.1168': attribute type 3 has an invalid length. [ 157.745291][ T7547] netlink: 134736 bytes leftover after parsing attributes in process `syz.2.1170'. [ 157.765892][ T7541] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1168'. [ 157.908181][ T7559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.915852][ T7559] IPv6: NLM_F_CREATE should be set when creating new route [ 157.923112][ T7559] IPv6: NLM_F_CREATE should be set when creating new route [ 157.930411][ T7559] IPv6: NLM_F_CREATE should be set when creating new route [ 158.521169][ T7571] netlink: 'syz.4.1180': attribute type 10 has an invalid length. [ 158.644197][ T7584] netlink: 'syz.0.1183': attribute type 29 has an invalid length. [ 158.703732][ T7584] netlink: 'syz.0.1183': attribute type 29 has an invalid length. [ 158.784047][ T7588] IPv6: pim6reg1: Disabled Multicast RS [ 158.799261][ T7591] netlink: 'syz.4.1186': attribute type 7 has an invalid length. [ 158.807960][ T5067] wlan1: Trigger new scan to find an IBSS to join [ 158.830529][ T7589] netlink: 'syz.0.1183': attribute type 29 has an invalid length. [ 158.863178][ T7591] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1186'. [ 158.936068][ T7598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1187'. [ 159.020707][ T7598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1187'. [ 159.161137][ T7600] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1187'. [ 159.209207][ T7598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1187'. [ 159.737366][ T6832] wlan1: Creating new IBSS network, BSSID e2:de:42:43:bd:b8 [ 159.833162][ T7646] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1200'. [ 161.408071][ T7716] validate_nla: 9 callbacks suppressed [ 161.408087][ T7716] netlink: 'syz.0.1226': attribute type 7 has an invalid length. [ 161.495529][ T7716] netlink: 'syz.0.1226': attribute type 1 has an invalid length. [ 161.503293][ T7716] __nla_validate_parse: 3 callbacks suppressed [ 161.503306][ T7716] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1226'. [ 162.104155][ T7737] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1231'. [ 162.795498][ T7761] netlink: 'syz.2.1243': attribute type 2 has an invalid length. [ 162.868633][ T7761] netlink: 157860 bytes leftover after parsing attributes in process `syz.2.1243'. [ 163.216631][ T7776] netlink: 'syz.4.1247': attribute type 7 has an invalid length. [ 163.260914][ T7776] netlink: 'syz.4.1247': attribute type 1 has an invalid length. [ 163.324001][ T7776] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1247'. [ 163.921580][ T7806] device bridge_slave_1 left promiscuous mode [ 163.958191][ T7806] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.142481][ T7806] device bridge_slave_0 left promiscuous mode [ 164.249616][ T7806] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.767092][ T7814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1258'. [ 164.794533][ T7814] device team0 entered promiscuous mode [ 164.804352][ T7814] device team_slave_1 entered promiscuous mode [ 164.823086][ T7814] device macvlan0 entered promiscuous mode [ 165.167787][ T7829] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1265'. [ 165.259535][ T7839] netlink: 'syz.2.1267': attribute type 3 has an invalid length. [ 165.286121][ T7829] netlink: 'syz.4.1265': attribute type 29 has an invalid length. [ 165.325069][ T7839] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1267'. [ 165.390601][ T7841] netlink: 'syz.4.1265': attribute type 4 has an invalid length. [ 165.412370][ T7829] netlink: 'syz.4.1265': attribute type 29 has an invalid length. [ 165.505029][ T7841] netlink: 206236 bytes leftover after parsing attributes in process `syz.4.1265'. [ 165.509393][ T7837] netlink: 'syz.4.1265': attribute type 29 has an invalid length. [ 167.209937][ T7880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.217307][ T7880] IPv6: NLM_F_CREATE should be set when creating new route [ 167.388665][ T7884] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1283'. [ 167.469084][ T7884] netlink: 'syz.0.1283': attribute type 29 has an invalid length. [ 167.523976][ T7884] netlink: 'syz.0.1283': attribute type 29 has an invalid length. [ 167.563643][ T7891] netlink: 'syz.0.1283': attribute type 29 has an invalid length. [ 167.628890][ T7884] netlink: 'syz.0.1283': attribute type 4 has an invalid length. [ 167.682939][ T7884] netlink: 154920 bytes leftover after parsing attributes in process `syz.0.1283'. [ 167.955448][ T7904] FAULT_INJECTION: forcing a failure. [ 167.955448][ T7904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.018345][ T7904] CPU: 1 PID: 7904 Comm: syz.0.1289 Not tainted syzkaller #0 [ 168.025776][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.035845][ T7904] Call Trace: [ 168.039132][ T7904] [ 168.042068][ T7904] dump_stack_lvl+0x188/0x250 [ 168.046763][ T7904] ? show_regs_print_info+0x20/0x20 [ 168.051969][ T7904] ? load_image+0x400/0x400 [ 168.056494][ T7904] ? __lock_acquire+0x7d10/0x7d10 [ 168.061535][ T7904] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.067623][ T7904] should_fail+0x38c/0x4c0 [ 168.072064][ T7904] _copy_from_user+0x2e/0x170 [ 168.076759][ T7904] bond_do_ioctl+0x1bc/0x920 [ 168.081367][ T7904] ? bond_eth_ioctl+0x240/0x240 [ 168.086257][ T7904] bond_siocdevprivate+0x15b/0x350 [ 168.091388][ T7904] ? bond_do_ioctl+0x920/0x920 [ 168.096171][ T7904] ? full_name_hash+0x8e/0xe0 [ 168.100872][ T7904] dev_ifsioc+0xa30/0xd50 [ 168.105214][ T7904] ? dev_ioctl+0xe30/0xe30 [ 168.109645][ T7904] ? full_name_hash+0x8e/0xe0 [ 168.114340][ T7904] dev_ioctl+0x5df/0xe30 [ 168.118589][ T7904] ? get_user_ifreq+0xc7/0x170 [ 168.123364][ T7904] sock_ioctl+0x691/0x710 [ 168.127705][ T7904] ? sock_poll+0x410/0x410 [ 168.132144][ T7904] ? bpf_lsm_file_ioctl+0x5/0x10 [ 168.137094][ T7904] ? security_file_ioctl+0x7c/0xa0 [ 168.142214][ T7904] ? sock_poll+0x410/0x410 [ 168.146643][ T7904] __se_sys_ioctl+0xfa/0x170 [ 168.151245][ T7904] do_syscall_64+0x4c/0xa0 [ 168.155668][ T7904] ? clear_bhb_loop+0x30/0x80 [ 168.160346][ T7904] ? clear_bhb_loop+0x30/0x80 [ 168.165027][ T7904] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.170926][ T7904] RIP: 0033:0x7f4f70552dd9 [ 168.175344][ T7904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.194954][ T7904] RSP: 002b:00007f4f6e7ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.203385][ T7904] RAX: ffffffffffffffda RBX: 00007f4f707cbfa0 RCX: 00007f4f70552dd9 [ 168.211363][ T7904] RDX: 0000200000000080 RSI: 00000000000089fb RDI: 0000000000000004 [ 168.219336][ T7904] RBP: 00007f4f6e7ac090 R08: 0000000000000000 R09: 0000000000000000 [ 168.227303][ T7904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.235268][ T7904] R13: 00007f4f707cc038 R14: 00007f4f707cbfa0 R15: 00007ffc27f49928 [ 168.243256][ T7904] [ 169.372558][ T7936] netlink: 'syz.2.1300': attribute type 10 has an invalid length. [ 169.568332][ T7936] device hsr_slave_0 left promiscuous mode [ 169.676951][ T7936] device hsr_slave_1 left promiscuous mode [ 170.232478][ T7949] netlink: 209596 bytes leftover after parsing attributes in process `syz.1.1304'. [ 170.297192][ T7949] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 170.371528][ T7949] CPU: 1 PID: 7949 Comm: syz.1.1304 Not tainted syzkaller #0 [ 170.378971][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.389045][ T7949] Call Trace: [ 170.392340][ T7949] [ 170.395292][ T7949] dump_stack_lvl+0x188/0x250 [ 170.399988][ T7949] ? show_regs_print_info+0x20/0x20 [ 170.405200][ T7949] ? load_image+0x400/0x400 [ 170.409734][ T7949] sysfs_warn_dup+0x8a/0xa0 [ 170.414260][ T7949] sysfs_do_create_link_sd+0xc0/0x110 [ 170.419646][ T7949] device_add+0x7ed/0xfb0 [ 170.423985][ T7949] wiphy_register+0x1e81/0x2c30 [ 170.428846][ T7949] ? cfg80211_event_work+0x40/0x40 [ 170.433955][ T7949] ? minstrel_ht_alloc+0x808/0x980 [ 170.439064][ T7949] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 170.445127][ T7949] ieee80211_register_hw+0x2aa1/0x3af0 [ 170.450593][ T7949] ? ieee80211_tasklet_handler+0x20/0x20 [ 170.456223][ T7949] ? rcu_is_watching+0x11/0xa0 [ 170.460978][ T7949] ? memset+0x1e/0x40 [ 170.464956][ T7949] ? hrtimer_init+0x10c/0x220 [ 170.469648][ T7949] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 170.475395][ T7949] hwsim_new_radio_nl+0xa6f/0xc40 [ 170.480438][ T7949] genl_rcv_msg+0xcea/0xf90 [ 170.484951][ T7949] ? genl_bind+0x380/0x380 [ 170.489364][ T7949] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 170.494552][ T7949] ? verify_lock_unused+0x140/0x140 [ 170.499754][ T7949] ? kmalloc_large_node+0xf2/0x190 [ 170.504855][ T7949] ? dev_queue_xmit+0x20/0x20 [ 170.509519][ T7949] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 170.516049][ T7949] netlink_rcv_skb+0x1f5/0x440 [ 170.520807][ T7949] ? genl_bind+0x380/0x380 [ 170.525213][ T7949] ? netlink_ack+0xb50/0xb50 [ 170.529800][ T7949] ? __lock_acquire+0x7d10/0x7d10 [ 170.534830][ T7949] ? down_read+0x1aa/0x2e0 [ 170.539245][ T7949] genl_rcv+0x24/0x40 [ 170.543351][ T7949] netlink_unicast+0x774/0x920 [ 170.548135][ T7949] netlink_sendmsg+0x8ba/0xbe0 [ 170.552907][ T7949] ? netlink_getsockopt+0x570/0x570 [ 170.558106][ T7949] ? aa_sock_msg_perm+0x94/0x150 [ 170.563043][ T7949] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 170.568324][ T7949] ? security_socket_sendmsg+0x7c/0xa0 [ 170.573778][ T7949] ? netlink_getsockopt+0x570/0x570 [ 170.578970][ T7949] ____sys_sendmsg+0x5b7/0x8f0 [ 170.583736][ T7949] ? __sys_sendmsg_sock+0x30/0x30 [ 170.588758][ T7949] ? import_iovec+0x6f/0xa0 [ 170.593265][ T7949] ___sys_sendmsg+0x236/0x2e0 [ 170.597941][ T7949] ? __sys_sendmsg+0x2a0/0x2a0 [ 170.602707][ T7949] ? percpu_counter_add_batch+0x13b/0x160 [ 170.608440][ T7949] __se_sys_sendmsg+0x1af/0x290 [ 170.613288][ T7949] ? __x64_sys_sendmsg+0x80/0x80 [ 170.618215][ T7949] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 170.624214][ T7949] ? lockdep_hardirqs_on+0x94/0x140 [ 170.629407][ T7949] do_syscall_64+0x4c/0xa0 [ 170.633819][ T7949] ? clear_bhb_loop+0x30/0x80 [ 170.638483][ T7949] ? clear_bhb_loop+0x30/0x80 [ 170.643150][ T7949] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.649030][ T7949] RIP: 0033:0x7f7ee0db5dd9 [ 170.653439][ T7949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.673036][ T7949] RSP: 002b:00007f7edf00f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.681444][ T7949] RAX: ffffffffffffffda RBX: 00007f7ee102efa0 RCX: 00007f7ee0db5dd9 [ 170.689409][ T7949] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 170.697370][ T7949] RBP: 00007f7ee0e4bd69 R08: 0000000000000000 R09: 0000000000000000 [ 170.705326][ T7949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.713369][ T7949] R13: 00007f7ee102f038 R14: 00007f7ee102efa0 R15: 00007fff511aa238 [ 170.721354][ T7949] [ 171.277850][ T7973] netlink: 'syz.4.1312': attribute type 7 has an invalid length. [ 171.365542][ T7973] netlink: 'syz.4.1312': attribute type 1 has an invalid length. [ 171.373956][ T7973] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1312'. [ 171.941555][ T7988] bond0: (slave geneve0): Error: Slave device does not support XDP [ 172.008240][ T7983] netlink: 'syz.1.1314': attribute type 10 has an invalid length. [ 172.268545][ T7996] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.1317'. [ 172.323987][ T7996] openvswitch: netlink: Message has 20476 unknown bytes. [ 172.444690][ T7994] netlink: 'syz.0.1316': attribute type 2 has an invalid length. [ 172.480618][ T7994] netlink: 157860 bytes leftover after parsing attributes in process `syz.0.1316'. [ 172.850162][ T8006] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1321'. [ 172.953194][ T8015] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1321'. [ 175.271432][ T8068] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1342'. [ 175.723962][ T8085] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.1357'. [ 175.765267][ T2304] Bluetooth: hci0: command 0x0406 tx timeout [ 175.772061][ T2304] Bluetooth: hci2: command 0x0406 tx timeout [ 175.788342][ T2304] Bluetooth: hci3: command 0x0406 tx timeout [ 175.827588][ T2304] Bluetooth: hci4: command 0x0406 tx timeout [ 175.835079][ T2304] Bluetooth: hci1: command 0x0406 tx timeout [ 176.702158][ T8107] netlink: 'syz.4.1356': attribute type 7 has an invalid length. [ 176.711481][ T8109] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1358'. [ 176.761104][ T8107] netlink: 'syz.4.1356': attribute type 1 has an invalid length. [ 176.816263][ T8107] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1356'. [ 178.345903][ T8161] netlink: 'syz.0.1377': attribute type 7 has an invalid length. [ 178.397093][ T8164] FAULT_INJECTION: forcing a failure. [ 178.397093][ T8164] name failslab, interval 1, probability 0, space 0, times 0 [ 178.415597][ T8161] netlink: 'syz.0.1377': attribute type 1 has an invalid length. [ 178.489186][ T8161] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1377'. [ 178.609041][ T8164] CPU: 1 PID: 8164 Comm: syz.2.1375 Not tainted syzkaller #0 [ 178.616478][ T8164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.626565][ T8164] Call Trace: [ 178.629858][ T8164] [ 178.632801][ T8164] dump_stack_lvl+0x188/0x250 [ 178.637509][ T8164] ? show_regs_print_info+0x20/0x20 [ 178.642747][ T8164] ? load_image+0x400/0x400 [ 178.647288][ T8164] ? __might_sleep+0xf0/0xf0 [ 178.651897][ T8164] ? __lock_acquire+0x7d10/0x7d10 [ 178.656942][ T8164] ? mark_lock+0x94/0x320 [ 178.661303][ T8164] should_fail+0x38c/0x4c0 [ 178.665757][ T8164] should_failslab+0x5/0x20 [ 178.670291][ T8164] slab_pre_alloc_hook+0x51/0xc0 [ 178.675253][ T8164] __kmalloc+0x6b/0x330 [ 178.679420][ T8164] ? tomoyo_realpath_from_path+0x118/0x610 [ 178.685254][ T8164] tomoyo_realpath_from_path+0x118/0x610 [ 178.690939][ T8164] tomoyo_path_number_perm+0x242/0x660 [ 178.696423][ T8164] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 178.703039][ T8164] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 178.708624][ T8164] security_file_ioctl+0x6c/0xa0 [ 178.713592][ T8164] __se_sys_ioctl+0x48/0x170 [ 178.718204][ T8164] do_syscall_64+0x4c/0xa0 [ 178.722632][ T8164] ? clear_bhb_loop+0x30/0x80 [ 178.727317][ T8164] ? clear_bhb_loop+0x30/0x80 [ 178.732012][ T8164] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.737919][ T8164] RIP: 0033:0x7f95ff5d1dd9 [ 178.742349][ T8164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.761966][ T8164] RSP: 002b:00007f95fd82b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.770402][ T8164] RAX: ffffffffffffffda RBX: 00007f95ff84afa0 RCX: 00007f95ff5d1dd9 [ 178.778387][ T8164] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000004 [ 178.786375][ T8164] RBP: 00007f95fd82b090 R08: 0000000000000000 R09: 0000000000000000 [ 178.794357][ T8164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.802341][ T8164] R13: 00007f95ff84b038 R14: 00007f95ff84afa0 R15: 00007fff2a45e3d8 [ 178.810365][ T8164] [ 179.031920][ T8164] ERROR: Out of memory at tomoyo_realpath_from_path. [ 179.686980][ T8187] netlink: 'syz.3.1386': attribute type 10 has an invalid length. [ 180.105589][ T8207] netlink: 'syz.4.1395': attribute type 7 has an invalid length. [ 180.135664][ T8207] netlink: 'syz.4.1395': attribute type 1 has an invalid length. [ 180.175777][ T8207] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1395'. [ 180.780160][ T8228] netlink: 'syz.1.1402': attribute type 4 has an invalid length. [ 180.798034][ T8227] netlink: 'syz.3.1403': attribute type 2 has an invalid length. [ 180.821942][ T8228] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1402'. [ 180.844953][ T8227] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1403'. [ 181.259733][ T8247] netlink: 'syz.1.1409': attribute type 9 has an invalid length. [ 181.295810][ T8247] netlink: 205996 bytes leftover after parsing attributes in process `syz.1.1409'. [ 181.543914][ T8255] FAULT_INJECTION: forcing a failure. [ 181.543914][ T8255] name failslab, interval 1, probability 0, space 0, times 0 [ 181.615462][ T8255] CPU: 0 PID: 8255 Comm: syz.0.1412 Not tainted syzkaller #0 [ 181.622891][ T8255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 181.632973][ T8255] Call Trace: [ 181.636272][ T8255] [ 181.639210][ T8255] dump_stack_lvl+0x188/0x250 [ 181.643922][ T8255] ? show_regs_print_info+0x20/0x20 [ 181.649142][ T8255] ? load_image+0x400/0x400 [ 181.653665][ T8255] ? perf_trace_lock_acquire+0xed/0x3e0 [ 181.659248][ T8255] should_fail+0x38c/0x4c0 [ 181.663688][ T8255] should_failslab+0x5/0x20 [ 181.668224][ T8255] slab_pre_alloc_hook+0x51/0xc0 [ 181.673183][ T8255] ? skb_clone+0x1bd/0x350 [ 181.677622][ T8255] kmem_cache_alloc+0x3d/0x290 [ 181.682404][ T8255] skb_clone+0x1bd/0x350 [ 181.686668][ T8255] __netlink_deliver_tap+0x3cd/0x7c0 [ 181.691983][ T8255] netlink_deliver_tap+0x16c/0x180 [ 181.697101][ T8255] netlink_unicast+0x74f/0x920 [ 181.701881][ T8255] netlink_sendmsg+0x8ba/0xbe0 [ 181.706662][ T8255] ? netlink_getsockopt+0x570/0x570 [ 181.711878][ T8255] ? aa_sock_msg_perm+0x94/0x150 [ 181.716926][ T8255] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 181.722226][ T8255] ? security_socket_sendmsg+0x7c/0xa0 [ 181.727704][ T8255] ? netlink_getsockopt+0x570/0x570 [ 181.732918][ T8255] ____sys_sendmsg+0x5b7/0x8f0 [ 181.737719][ T8255] ? __sys_sendmsg_sock+0x30/0x30 [ 181.742770][ T8255] ? import_iovec+0x6f/0xa0 [ 181.747298][ T8255] ___sys_sendmsg+0x236/0x2e0 [ 181.751996][ T8255] ? __sys_sendmsg+0x2a0/0x2a0 [ 181.756822][ T8255] __se_sys_sendmsg+0x1af/0x290 [ 181.761693][ T8255] ? __x64_sys_sendmsg+0x80/0x80 [ 181.766649][ T8255] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 181.772657][ T8255] ? lockdep_hardirqs_on+0x94/0x140 [ 181.777857][ T8255] do_syscall_64+0x4c/0xa0 [ 181.782265][ T8255] ? clear_bhb_loop+0x30/0x80 [ 181.786928][ T8255] ? clear_bhb_loop+0x30/0x80 [ 181.791590][ T8255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.797471][ T8255] RIP: 0033:0x7f4f70552dd9 [ 181.801877][ T8255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.821470][ T8255] RSP: 002b:00007f4f6e7ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.829879][ T8255] RAX: ffffffffffffffda RBX: 00007f4f707cbfa0 RCX: 00007f4f70552dd9 [ 181.837841][ T8255] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 181.845801][ T8255] RBP: 00007f4f6e7ac090 R08: 0000000000000000 R09: 0000000000000000 [ 181.853757][ T8255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.861717][ T8255] R13: 00007f4f707cc038 R14: 00007f4f707cbfa0 R15: 00007ffc27f49928 [ 181.869777][ T8255] [ 182.007754][ T8265] netlink: 'syz.3.1415': attribute type 7 has an invalid length. [ 182.058585][ T8265] netlink: 'syz.3.1415': attribute type 1 has an invalid length. [ 182.134788][ T8265] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1415'. [ 182.688473][ T8285] netlink: 'syz.4.1421': attribute type 1 has an invalid length. [ 182.709373][ T8280] netlink: 'syz.0.1420': attribute type 10 has an invalid length. [ 182.729981][ T8285] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1421'. [ 182.756667][ T8280] team0: Port device veth0_to_hsr added [ 183.327620][ T8299] netlink: 'syz.0.1426': attribute type 10 has an invalid length. [ 183.346079][ T8302] netlink: 'syz.0.1426': attribute type 11 has an invalid length. [ 183.359063][ T8299] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1426'. [ 183.405056][ T8302] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1426'. [ 183.533398][ T8309] FAULT_INJECTION: forcing a failure. [ 183.533398][ T8309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.576946][ T8309] CPU: 1 PID: 8309 Comm: syz.4.1430 Not tainted syzkaller #0 [ 183.584385][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.594448][ T8309] Call Trace: [ 183.597740][ T8309] [ 183.600676][ T8309] dump_stack_lvl+0x188/0x250 [ 183.605371][ T8309] ? show_regs_print_info+0x20/0x20 [ 183.610576][ T8309] ? load_image+0x400/0x400 [ 183.615084][ T8309] ? alloc_skb_with_frags+0x5a8/0x730 [ 183.620460][ T8309] ? __lock_acquire+0x7d10/0x7d10 [ 183.625501][ T8309] should_fail+0x38c/0x4c0 [ 183.629929][ T8309] _copy_from_iter+0x22e/0x1170 [ 183.634796][ T8309] ? __lock_acquire+0x7d10/0x7d10 [ 183.639841][ T8309] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 183.645227][ T8309] ? __virt_addr_valid+0x3c6/0x470 [ 183.650357][ T8309] ? __phys_addr_symbol+0x2b/0x70 [ 183.655384][ T8309] ? __check_object_size+0x30c/0x410 [ 183.660675][ T8309] rawv6_send_hdrinc+0x7c7/0x1690 [ 183.665719][ T8309] ? rawv6_probe_proto_opt+0x300/0x300 [ 183.671236][ T8309] rawv6_sendmsg+0x11b1/0x1700 [ 183.676028][ T8309] ? compat_rawv6_ioctl+0x60/0x60 [ 183.681198][ T8309] ? aa_af_perm+0x340/0x340 [ 183.685707][ T8309] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 183.692271][ T8309] ? sock_rps_record_flow+0x17/0x3b0 [ 183.697766][ T8309] ? inet_sendmsg+0x78/0x2f0 [ 183.702383][ T8309] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 183.707780][ T8309] ? security_socket_sendmsg+0x7c/0xa0 [ 183.713259][ T8309] ? inet_send_prepare+0x260/0x260 [ 183.718397][ T8309] ____sys_sendmsg+0x5b7/0x8f0 [ 183.723185][ T8309] ? __sys_sendmsg_sock+0x30/0x30 [ 183.728338][ T8309] ? import_iovec+0x6f/0xa0 [ 183.732863][ T8309] ___sys_sendmsg+0x236/0x2e0 [ 183.737671][ T8309] ? __sys_sendmsg+0x2a0/0x2a0 [ 183.742465][ T8309] ? ktime_get_real_ts64+0x440/0x440 [ 183.747891][ T8309] __se_sys_sendmsg+0x1af/0x290 [ 183.752764][ T8309] ? __x64_sys_sendmsg+0x80/0x80 [ 183.757717][ T8309] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 183.763727][ T8309] ? lockdep_hardirqs_on+0x94/0x140 [ 183.768947][ T8309] do_syscall_64+0x4c/0xa0 [ 183.773379][ T8309] ? clear_bhb_loop+0x30/0x80 [ 183.778076][ T8309] ? clear_bhb_loop+0x30/0x80 [ 183.782763][ T8309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.788664][ T8309] RIP: 0033:0x7fa5061dcdd9 [ 183.793090][ T8309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.812703][ T8309] RSP: 002b:00007fa504436028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.821127][ T8309] RAX: ffffffffffffffda RBX: 00007fa506455fa0 RCX: 00007fa5061dcdd9 [ 183.829225][ T8309] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 183.837203][ T8309] RBP: 00007fa504436090 R08: 0000000000000000 R09: 0000000000000000 [ 183.845288][ T8309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.853271][ T8309] R13: 00007fa506456038 R14: 00007fa506455fa0 R15: 00007ffeb4efa438 [ 183.861271][ T8309] [ 186.472985][ T8331] netlink: 'syz.2.1439': attribute type 7 has an invalid length. [ 186.509316][ T8330] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 186.546588][ T8331] netlink: 'syz.2.1439': attribute type 1 has an invalid length. [ 186.569156][ T8337] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 186.584192][ T8331] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1439'. [ 186.818693][ T8346] netlink: 'syz.1.1443': attribute type 10 has an invalid length. [ 187.646943][ T8368] FAULT_INJECTION: forcing a failure. [ 187.646943][ T8368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.741864][ T8368] CPU: 0 PID: 8368 Comm: syz.0.1451 Not tainted syzkaller #0 [ 187.749281][ T8368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 187.759338][ T8368] Call Trace: [ 187.762628][ T8368] [ 187.765555][ T8368] dump_stack_lvl+0x188/0x250 [ 187.770228][ T8368] ? show_regs_print_info+0x20/0x20 [ 187.775414][ T8368] ? load_image+0x400/0x400 [ 187.779903][ T8368] ? __lock_acquire+0x7d10/0x7d10 [ 187.784916][ T8368] ? vfs_write+0x8b2/0xd60 [ 187.789320][ T8368] should_fail+0x38c/0x4c0 [ 187.793734][ T8368] _copy_from_user+0x2e/0x170 [ 187.798401][ T8368] __sys_bpf+0x26d/0x6f0 [ 187.802632][ T8368] ? bpf_link_show_fdinfo+0x380/0x380 [ 187.807996][ T8368] ? perf_trace_preemptirq_template+0x2bc/0x360 [ 187.814226][ T8368] ? vtime_user_exit+0x2c8/0x3e0 [ 187.819153][ T8368] __x64_sys_bpf+0x78/0x90 [ 187.823556][ T8368] do_syscall_64+0x4c/0xa0 [ 187.827958][ T8368] ? clear_bhb_loop+0x30/0x80 [ 187.832620][ T8368] ? clear_bhb_loop+0x30/0x80 [ 187.837285][ T8368] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.843177][ T8368] RIP: 0033:0x7f4f70552dd9 [ 187.847601][ T8368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.867231][ T8368] RSP: 002b:00007f4f6e78b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 187.875639][ T8368] RAX: ffffffffffffffda RBX: 00007f4f707cc090 RCX: 00007f4f70552dd9 [ 187.883601][ T8368] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 187.891557][ T8368] RBP: 00007f4f6e78b090 R08: 0000000000000000 R09: 0000000000000000 [ 187.899514][ T8368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.907471][ T8368] R13: 00007f4f707cc128 R14: 00007f4f707cc090 R15: 00007ffc27f49928 [ 187.915437][ T8368] [ 188.093861][ T8376] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 189.800724][ T6832] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 190.285336][ T8391] netlink: 'syz.4.1460': attribute type 7 has an invalid length. [ 190.293125][ T8391] netlink: 'syz.4.1460': attribute type 1 has an invalid length. [ 190.424270][ T8391] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1460'. [ 190.821191][ T8404] netlink: 'syz.3.1464': attribute type 21 has an invalid length. [ 190.833903][ T8404] netlink: 'syz.3.1464': attribute type 7 has an invalid length. [ 190.943921][ T8412] netlink: 'syz.2.1466': attribute type 21 has an invalid length. [ 191.593765][ T8441] netlink: 'syz.4.1477': attribute type 4 has an invalid length. [ 191.653046][ T8441] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1477'. [ 191.663296][ T8441] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 191.679825][ T8443] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1478'. [ 191.747458][ T8449] netlink: 'syz.1.1480': attribute type 7 has an invalid length. [ 191.780718][ T8451] netlink: 'syz.3.1481': attribute type 28 has an invalid length. [ 191.790384][ T8449] netlink: 'syz.1.1480': attribute type 1 has an invalid length. [ 191.808709][ T8451] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1481'. [ 191.822756][ T8449] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1480'. [ 191.855539][ T8452] netlink: 'syz.3.1481': attribute type 28 has an invalid length. [ 191.872342][ T8452] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1481'. [ 191.922443][ T8451] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1481'. [ 191.965913][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1481'. [ 192.148670][ T8472] FAULT_INJECTION: forcing a failure. [ 192.148670][ T8472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.230603][ T8472] CPU: 0 PID: 8472 Comm: syz.3.1488 Not tainted syzkaller #0 [ 192.238025][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.248088][ T8472] Call Trace: [ 192.251379][ T8472] [ 192.254314][ T8472] dump_stack_lvl+0x188/0x250 [ 192.259007][ T8472] ? show_regs_print_info+0x20/0x20 [ 192.264226][ T8472] ? load_image+0x400/0x400 [ 192.268753][ T8472] ? __lock_acquire+0x7d10/0x7d10 [ 192.273807][ T8472] should_fail+0x38c/0x4c0 [ 192.278241][ T8472] _copy_from_user+0x2e/0x170 [ 192.282927][ T8472] __copy_msghdr_from_user+0xc9/0x630 [ 192.288308][ T8472] ? verify_lock_unused+0x140/0x140 [ 192.293518][ T8472] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 192.298806][ T8472] ? perf_tp_event+0xa92/0xbf0 [ 192.303588][ T8472] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 192.309591][ T8472] ___sys_sendmsg+0x19a/0x2e0 [ 192.314284][ T8472] ? __sys_sendmsg+0x2a0/0x2a0 [ 192.319084][ T8472] __se_sys_sendmsg+0x1af/0x290 [ 192.323936][ T8472] ? __x64_sys_sendmsg+0x80/0x80 [ 192.328867][ T8472] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 192.334865][ T8472] ? lockdep_hardirqs_on+0x94/0x140 [ 192.340071][ T8472] do_syscall_64+0x4c/0xa0 [ 192.344483][ T8472] ? clear_bhb_loop+0x30/0x80 [ 192.349154][ T8472] ? clear_bhb_loop+0x30/0x80 [ 192.353830][ T8472] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.359725][ T8472] RIP: 0033:0x7fb080d96dd9 [ 192.364136][ T8472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.383739][ T8472] RSP: 002b:00007fb07eff0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.392151][ T8472] RAX: ffffffffffffffda RBX: 00007fb08100ffa0 RCX: 00007fb080d96dd9 [ 192.400114][ T8472] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 192.408078][ T8472] RBP: 00007fb07eff0090 R08: 0000000000000000 R09: 0000000000000000 [ 192.416046][ T8472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.424009][ T8472] R13: 00007fb081010038 R14: 00007fb08100ffa0 R15: 00007fffbf709408 [ 192.431986][ T8472] [ 192.670550][ T8489] netlink: 209816 bytes leftover after parsing attributes in process `syz.2.1494'. [ 193.213400][ T8503] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.1500'. [ 193.305230][ T8493] delete_channel: no stack [ 193.443585][ T8515] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1503'. [ 193.931999][ T8525] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 193.973891][ T8525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.166935][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.173301][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.503483][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 195.600148][ T8584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.733311][ T8597] validate_nla: 5 callbacks suppressed [ 195.733328][ T8597] netlink: 'syz.4.1528': attribute type 10 has an invalid length. [ 195.966437][ T8609] netlink: 'syz.3.1533': attribute type 10 has an invalid length. [ 196.032815][ T8609] device geneve0 entered promiscuous mode [ 196.334875][ T8624] netlink: 'syz.3.1538': attribute type 7 has an invalid length. [ 196.355564][ T8624] netlink: 'syz.3.1538': attribute type 1 has an invalid length. [ 196.835908][ T8654] FAULT_INJECTION: forcing a failure. [ 196.835908][ T8654] name failslab, interval 1, probability 0, space 0, times 0 [ 196.897283][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 196.912211][ T8654] CPU: 1 PID: 8654 Comm: syz.3.1549 Not tainted syzkaller #0 [ 196.919624][ T8654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.929687][ T8654] Call Trace: [ 196.932971][ T8654] [ 196.935909][ T8654] dump_stack_lvl+0x188/0x250 [ 196.940592][ T8654] ? show_regs_print_info+0x20/0x20 [ 196.945788][ T8654] ? load_image+0x400/0x400 [ 196.950300][ T8654] ? __might_sleep+0xf0/0xf0 [ 196.954902][ T8654] ? __lock_acquire+0x7d10/0x7d10 [ 196.959933][ T8654] ? netlink_insert+0xe95/0x11f0 [ 196.964905][ T8654] should_fail+0x38c/0x4c0 [ 196.969337][ T8654] should_failslab+0x5/0x20 [ 196.973902][ T8654] slab_pre_alloc_hook+0x51/0xc0 [ 196.978868][ T8654] kmem_cache_alloc_node+0x47/0x2d0 [ 196.984076][ T8654] ? __alloc_skb+0xf4/0x750 [ 196.988595][ T8654] __alloc_skb+0xf4/0x750 [ 196.992943][ T8654] netlink_sendmsg+0x654/0xbe0 [ 196.997720][ T8654] ? netlink_getsockopt+0x570/0x570 [ 197.002944][ T8654] ? aa_sock_msg_perm+0x94/0x150 [ 197.007900][ T8654] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 197.013207][ T8654] ? security_socket_sendmsg+0x7c/0xa0 [ 197.018684][ T8654] ? netlink_getsockopt+0x570/0x570 [ 197.023889][ T8654] ____sys_sendmsg+0x5b7/0x8f0 [ 197.028673][ T8654] ? __sys_sendmsg_sock+0x30/0x30 [ 197.033728][ T8654] ? import_iovec+0x6f/0xa0 [ 197.038244][ T8654] ___sys_sendmsg+0x236/0x2e0 [ 197.042941][ T8654] ? __sys_sendmsg+0x2a0/0x2a0 [ 197.047724][ T8654] ? vfs_write+0x8b2/0xd60 [ 197.052168][ T8654] __se_sys_sendmsg+0x1af/0x290 [ 197.057027][ T8654] ? __x64_sys_sendmsg+0x80/0x80 [ 197.061974][ T8654] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 197.067977][ T8654] ? lockdep_hardirqs_on+0x94/0x140 [ 197.073189][ T8654] do_syscall_64+0x4c/0xa0 [ 197.077607][ T8654] ? clear_bhb_loop+0x30/0x80 [ 197.082288][ T8654] ? clear_bhb_loop+0x30/0x80 [ 197.086977][ T8654] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.092888][ T8654] RIP: 0033:0x7fb080d96dd9 [ 197.097309][ T8654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.116923][ T8654] RSP: 002b:00007fb07eff0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.125348][ T8654] RAX: ffffffffffffffda RBX: 00007fb08100ffa0 RCX: 00007fb080d96dd9 [ 197.133330][ T8654] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 197.141310][ T8654] RBP: 00007fb07eff0090 R08: 0000000000000000 R09: 0000000000000000 [ 197.149290][ T8654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.157267][ T8654] R13: 00007fb081010038 R14: 00007fb08100ffa0 R15: 00007fffbf709408 [ 197.165264][ T8654] [ 197.201073][ T8651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.273931][ T8667] __nla_validate_parse: 4 callbacks suppressed [ 197.273946][ T8667] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1553'. [ 197.322142][ T8668] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1552'. [ 197.954351][ T8690] netlink: 'syz.0.1561': attribute type 7 has an invalid length. [ 197.962820][ T8690] netlink: 'syz.0.1561': attribute type 1 has an invalid length. [ 197.974143][ T8690] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1561'. [ 199.138264][ T8726] device sit0 left promiscuous mode [ 200.064363][ T8754] [ 200.101409][ T8754] ============================= [ 200.117287][ T8752] device syzkaller0 entered promiscuous mode [ 200.131050][ T8754] WARNING: suspicious RCU usage [ 200.153783][ T8754] syzkaller #0 Not tainted [ 200.191331][ T8754] ----------------------------- [ 200.231438][ T8754] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 200.297526][ T8754] [ 200.297526][ T8754] other info that might help us debug this: [ 200.297526][ T8754] [ 200.389030][ T8754] [ 200.389030][ T8754] rcu_scheduler_active = 2, debug_locks = 1 [ 200.491140][ T8754] 1 lock held by syz.0.1581/8754: [ 200.534817][ T8754] #0: ffffffff8c31eca0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 200.559696][ T8754] [ 200.559696][ T8754] stack backtrace: [ 200.593758][ T8754] CPU: 0 PID: 8754 Comm: syz.0.1581 Not tainted syzkaller #0 [ 200.601187][ T8754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 200.611260][ T8754] Call Trace: [ 200.614550][ T8754] [ 200.617481][ T8754] dump_stack_lvl+0x188/0x250 [ 200.622179][ T8754] ? load_image+0x400/0x400 [ 200.626695][ T8754] ? show_regs_print_info+0x20/0x20 [ 200.631901][ T8754] ? print_tainted+0x148/0x170 [ 200.636688][ T8754] ? lockdep_rcu_suspicious+0x110/0x180 [ 200.642246][ T8754] get_callchain_entry+0x2a5/0x3b0 [ 200.647375][ T8754] get_perf_callchain+0xab/0x460 [ 200.652329][ T8754] ? put_callchain_entry+0xb0/0xb0 [ 200.657461][ T8754] ? mark_lock+0x94/0x320 [ 200.661807][ T8754] ? verify_lock_unused+0x140/0x140 [ 200.667009][ T8754] ? __lock_acquire+0x13bc/0x7d10 [ 200.672053][ T8754] __bpf_get_stack+0x2db/0x530 [ 200.676836][ T8754] ? stack_map_get_build_id_offset+0x860/0x860 [ 200.683003][ T8754] ? __cant_sleep+0x220/0x220 [ 200.687687][ T8754] ? bpf_prog_d43750871481577d+0x3d/0x710 [ 200.693499][ T8754] bpf_get_stack_raw_tp+0x189/0x1c0 [ 200.698708][ T8754] bpf_prog_d43750871481577d+0x3d/0x710 [ 200.704318][ T8754] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 200.709716][ T8754] bpf_prog_test_run_syscall+0x35a/0x4f0 [ 200.715372][ T8754] ? sock_gen_cookie+0x60/0x60 [ 200.720152][ T8754] ? sock_gen_cookie+0x60/0x60 [ 200.724924][ T8754] bpf_prog_test_run+0x31e/0x390 [ 200.729876][ T8754] __sys_bpf+0x5a5/0x6f0 [ 200.734131][ T8754] ? bpf_link_show_fdinfo+0x380/0x380 [ 200.739526][ T8754] ? vtime_user_exit+0x2c8/0x3e0 [ 200.744478][ T8754] __x64_sys_bpf+0x78/0x90 [ 200.748908][ T8754] do_syscall_64+0x4c/0xa0 [ 200.753333][ T8754] ? clear_bhb_loop+0x30/0x80 [ 200.758013][ T8754] ? clear_bhb_loop+0x30/0x80 [ 200.762693][ T8754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.768591][ T8754] RIP: 0033:0x7f4f70552dd9 [ 200.773015][ T8754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.792624][ T8754] RSP: 002b:00007f4f6e7ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 200.801055][ T8754] RAX: ffffffffffffffda RBX: 00007f4f707cbfa0 RCX: 00007f4f70552dd9 [ 200.809038][ T8754] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 200.817013][ T8754] RBP: 00007f4f705e8d69 R08: 0000000000000000 R09: 0000000000000000 [ 200.824988][ T8754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.832960][ T8754] R13: 00007f4f707cc038 R14: 00007f4f707cbfa0 R15: 00007ffc27f49928 [ 200.840957][ T8754] [ 200.849382][ T8754] [ 200.851903][ T8754] ============================= [ 200.865963][ T8754] WARNING: suspicious RCU usage [ 200.879820][ T8754] syzkaller #0 Not tainted [ 200.884396][ T8754] ----------------------------- [ 200.889928][ T8754] include/linux/perf_event.h:1274 suspicious rcu_dereference_check() usage! [ 200.904522][ T8754] [ 200.904522][ T8754] other info that might help us debug this: [ 200.904522][ T8754] [ 200.920899][ T8754] [ 200.920899][ T8754] rcu_scheduler_active = 2, debug_locks = 1 [ 200.939692][ T8754] 1 lock held by syz.0.1581/8754: [ 200.952533][ T8754] #0: ffffffff8c31eca0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 200.968712][ T8754] [ 200.968712][ T8754] stack backtrace: [ 200.979291][ T8754] CPU: 0 PID: 8754 Comm: syz.0.1581 Not tainted syzkaller #0 [ 200.986713][ T8754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 200.996796][ T8754] Call Trace: [ 201.000090][ T8754] [ 201.003053][ T8754] dump_stack_lvl+0x188/0x250 [ 201.007746][ T8754] ? load_image+0x400/0x400 [ 201.012353][ T8754] ? show_regs_print_info+0x20/0x20 [ 201.017575][ T8754] ? lockdep_rcu_suspicious+0x110/0x180 [ 201.023127][ T8754] perf_callchain_kernel+0x5f1/0x720 [ 201.028434][ T8754] ? load_image+0x400/0x400 [ 201.032954][ T8754] ? show_regs_print_info+0x20/0x20 [ 201.038162][ T8754] ? print_tainted+0x148/0x170 [ 201.042943][ T8754] ? arch_perf_update_userpage+0x3c0/0x3c0 [ 201.048777][ T8754] ? get_callchain_entry+0x181/0x3b0 [ 201.054076][ T8754] get_perf_callchain+0x356/0x460 [ 201.059117][ T8754] ? put_callchain_entry+0xb0/0xb0 [ 201.064244][ T8754] ? mark_lock+0x94/0x320 [ 201.068581][ T8754] ? verify_lock_unused+0x140/0x140 [ 201.073796][ T8754] ? __lock_acquire+0x13bc/0x7d10 [ 201.078839][ T8754] __bpf_get_stack+0x2db/0x530 [ 201.083649][ T8754] ? stack_map_get_build_id_offset+0x860/0x860 [ 201.089827][ T8754] ? __cant_sleep+0x220/0x220 [ 201.094556][ T8754] ? bpf_prog_d43750871481577d+0x3d/0x710 [ 201.100286][ T8754] bpf_get_stack_raw_tp+0x189/0x1c0 [ 201.105497][ T8754] bpf_prog_d43750871481577d+0x3d/0x710 [ 201.111058][ T8754] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 201.116459][ T8754] bpf_prog_test_run_syscall+0x35a/0x4f0 [ 201.122110][ T8754] ? sock_gen_cookie+0x60/0x60 [ 201.126891][ T8754] ? sock_gen_cookie+0x60/0x60 [ 201.131749][ T8754] bpf_prog_test_run+0x31e/0x390 [ 201.136818][ T8754] __sys_bpf+0x5a5/0x6f0 [ 201.141077][ T8754] ? bpf_link_show_fdinfo+0x380/0x380 [ 201.146478][ T8754] ? vtime_user_exit+0x2c8/0x3e0 [ 201.151432][ T8754] __x64_sys_bpf+0x78/0x90 [ 201.155885][ T8754] do_syscall_64+0x4c/0xa0 [ 201.160308][ T8754] ? clear_bhb_loop+0x30/0x80 [ 201.165029][ T8754] ? clear_bhb_loop+0x30/0x80 [ 201.169720][ T8754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.175623][ T8754] RIP: 0033:0x7f4f70552dd9 [ 201.180048][ T8754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.199666][ T8754] RSP: 002b:00007f4f6e7ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.208098][ T8754] RAX: ffffffffffffffda RBX: 00007f4f707cbfa0 RCX: 00007f4f70552dd9 [ 201.216091][ T8754] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 201.224079][ T8754] RBP: 00007f4f705e8d69 R08: 0000000000000000 R09: 0000000000000000 [ 201.232063][ T8754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.240054][ T8754] R13: 00007f4f707cc038 R14: 00007f4f707cbfa0 R15: 00007ffc27f49928 [ 201.248061][ T8754]