last executing test programs: 55.444830141s ago: executing program 0 (id=65): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x0, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", 0x0, 0x1, 0x0, 0x13}, 0x50) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x4, &(0x7f0000000040)=r3, 0x4) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a1f848100000005e0c0000000000000e001c001400000002800000121f", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) 54.074474097s ago: executing program 0 (id=68): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000400000001000003"], &(0x7f0000000580)=""/151, 0x35, 0x97, 0x1, 0xd7d}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e4"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) 53.983138649s ago: executing program 0 (id=72): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x87, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) (fail_nth: 2) 53.375986855s ago: executing program 0 (id=75): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x87, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[@ANYRES64], 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0xffffffffffffffff, 0x8, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x3, &(0x7f00000008c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x46, 0x15}}, 0x0, 0x4}, 0x94) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000000) close(r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000001000084020000000a000000030000000a0000000000000000000001050000002000000000000000"], 0x0, 0x58}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 52.658242203s ago: executing program 0 (id=82): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x80fe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000001c0)={'veth0_to_team\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000007c0)="d80000004a0081064e007c05e8fe55a10a000404018b2d5ed48e9a4002020a600e41b0000900ac00060311000000160015000a87572a6ea28959b561c1d67f6f94007125cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370ed7dbe56192bb940450a721eabe30259703920723f9000000008a", 0xd2}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc603406034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000300)=r10) write$cgroup_devices(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 50.612747706s ago: executing program 0 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0xe38, 0x5, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="61128c000000000061137c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fbf52ee4507000002000000250600000ee60000bf250000000000001f010000000000006507040002000000070700004c0000001f75000000000000bf540000000000000704000004000bffbd350100000000009500000000000000050000000000000095000000000000001f1bd1fe4b3af9c97925711095cc1a3a25b9418ffdc4a1da470a14e4391c3fb600100000a4911fe82664d775cdb9dfc83fa32db39b636c1866b526ffff00005172a74e9afe751664f580a6c5bccf1ef6583e0c1cd1f7fe416b5d6902e7db826e6dffda3aabdc5b5ce08ca4ee6035f1b7dc6b3b4672f7c22efa6d633473cd548789f8ab5a654106888aff6f3eb7e962160dac2c68c044584bb50e9c0952bab14c2c65176c7e40faaea21457d5f2d6f40c4d3390a1e14561cbf0a6ccd15f45c52753e24c6488b23ec9a3261c7706cecfc37b25b382c76631983e053efde84f80c5483d26bfaa66bf477cca77d399c76469551913f98a26fa0363ebb7f861a3d53d4dd6d91f7dcefb0748cd20346878bc0759851cd32ba781d6e62e8eee022be7fb6fff27871a5a7a723e5e330f454f0c568fbfc9b901bd6cc3af8355e5ecf3f74a472c7861beeeba7d5d25208a2e1d4c0b8e4f82ce05ffe1c69aaea312bbb3656c873b26161dccd130823e87d0b411e6fdb2cc4def13ecdf4217b647803c9dbaba0cd1036081842b7fc3a30759c24058ad22001bc2817d4604bc2d49bf41894e61356ddf6d394a397c67321a0dd4ac4082ee583de98e8a89535050054d40a4dbd809d0ce9c444286b5d5a51d933d35714d8ca7fb49b5329107825926fd5caaf4ddd1e81e616fc56e47d30e51cd558d630f665a88da23e96c45a0a4ccd554a92628336eb43de1022d60e5ffe41b6bef61ea28c5ea09a832f9f84b10aa4b6350930b11865184fce06bb8bf64b578e8477d3440526aa2055daa7945db10e7c2cf517d954fc2db6cdee34cff68b43fef6205f2cf390e1bc4ee8ee0b5f204bf14c30a54196863eb6c707de3b344a6f84b47be3012b55d41da4c0bc43af548ee4b98c8599008d140e106138c6469cbc3857beddafd53fd1ba63b4786d5efec1942049aae281112e43477f0bf74ce9f2acc9bc6dd58a434eb41ad1a5cd4f753c32f2a40ff3c0c25a6f7833acfee9fc332eca2a41a97e832240b574a6413334f8b1ce08f6b560569355cac2d81191aaa6f3849433ed3f4617a04e22917c889f878486657fc6c001d90dc4e3d609f0ee78305143c60140a2396e959d8430fdcd7ccfaa0b0ba1dcb130f25714a191dbe2efeab57746e44a4344eaaf95c70d7043145f560b2e633f546a8c6b1aca8fa92ddd95b5aeade2ca2bb39a19e9250ae15e3a083914ec19605f13b7f1dedb7d26a9713f920d9b83b038863f066ef0e0cef0b63927773078a6c9187881b96c14bcfb475a6cb07fc2e434ecd4c58b8dd7e8282d966d7d184dc1513c4fa2e161c26742d7c7a5afcb85291c9393206729cc9aa027814b03cbb598c5bd01fd63478d10e9a6c94a211be56e5b8bd4d6777eafa4fa777695b941bb65be7651828c9c7f6b68cd7e1b62f4d6a3b5cacbb7d340d76"], &(0x7f0000000100)='GPL\x00'}, 0x5d) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000000000000000000402375227007832757a303da6216340307000000440c0771ac14141d0000740b19230000fa81f9fbb68688cd88fe4ae3e65f2bb0f9e1103c7d6b10632b1e0d68e8a4aa26e88e5ac50b70e446088a1a2c0796373678a118ad1c7c7c941a08414bdcc6c4e2"], 0x20}, 0x200040c4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000001f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c07000000000000009555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a59a08077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aac263dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d85fa4373d5b569ac3353cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2ff070000cfb030dd4ac0fe54db67510d3e9a5d36b900000074000000000000000000000000006e96ba8f5e7e89bef4226173e20ebb17b924e9e6d0ee163713b2bd56f58dec64df91417beaac4061e6216774e048276e110d25fe936b2cf31dc573b98bd037bceeae7feb600897c8364af49ce59027a6ee5d7c6e12c0f45c0f376d9da065ca0499e209655d2420fcfa10fccf2cbe7b60161cc6cbd874c928689acd9d4e00cefacc88"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0xb, &(0x7f0000000000), 0xe) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(r5, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x8054) close(r5) close(r2) 34.830151742s ago: executing program 32 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0xe38, 0x5, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x5d) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000000000000000000402375227007832757a303da6216340307000000440c0771ac14141d0000740b19230000fa81f9fbb68688cd88fe4ae3e65f2bb0f9e1103c7d6b10632b1e0d68e8a4aa26e88e5ac50b70e446088a1a2c0796373678a118ad1c7c7c941a08414bdcc6c4e2"], 0x20}, 0x200040c4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0xb, &(0x7f0000000000), 0xe) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(r5, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x8054) close(r5) close(r2) 7.684299932s ago: executing program 3 (id=266): socket$kcm(0x2, 0x2, 0x88) r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x46, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x9, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)='0', 0x1}], 0x1}, 0x45) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) r8 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x67699ee7, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[{0x0, 0x0, 0x2, 0x1}, {0x5}], 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) 7.449338727s ago: executing program 3 (id=268): socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000ff03000000000000000000000000000000080000000000"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000016000000ff01000003"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0xd, 0x0, 0x4, 0x200}, 0x0, 0x4, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000402}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) r5 = socket$kcm(0xa, 0x6, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x10d, 0xb, &(0x7f0000000000)=r6, 0x4) r7 = socket$kcm(0xa, 0x6, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'ip6erspan0\x00', @multicast}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r7, 0x0, 0x0) 7.146166646s ago: executing program 3 (id=270): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f00}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 3) 3.823070291s ago: executing program 4 (id=290): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x0, 0x7, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)={0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x4004004) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='T'], 0x88}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0100000000", @ANYRES32], 0xfffffffffffffe13) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="120000000a0100000800000002"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 3.660130175s ago: executing program 3 (id=291): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x46, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x9, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)='0', 0x1}], 0x1}, 0x45) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) r9 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x67699ee7, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[{0x0, 0x0, 0x2, 0x1}, {0x5}], 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) 3.519544309s ago: executing program 4 (id=294): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, 0x0, &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.168787168s ago: executing program 5 (id=295): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 3) 3.159135308s ago: executing program 4 (id=296): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3d5829cd, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}, 0x3, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x48804) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffffb, 0x3fff8000}, 0xb182, 0x8c, 0x9, 0x7, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff0000f003fb00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1], 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x41000, 0x11}, 0x94) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x2, 0x0, 0x0, 0x81, 0x6a10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84000009, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x16150, 0x8, 0x0, 0x3, 0x0, 0xffff0000, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.620850882s ago: executing program 3 (id=298): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a0}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.376214578s ago: executing program 1 (id=299): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2686, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x5, 0x30}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000300), &(0x7f00000003c0)}, 0x20) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x42000, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000005000000008000000100000000000000", @ANYRES32, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f00000002c0)=r7, 0x4) socket$kcm(0x2, 0x5, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r8, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000240)="b9ff030768441a8cb89e14f00800e075702b1c1d23f4347dfde4a10fa01ebdf22117", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002f000b12d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000500)="dd6b000000", 0x5}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}}}], 0x20}, 0x4004) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="22ea6742d4ff1f7700000000fbff91ffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x5411, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r11 = socket$kcm(0x10, 0x2, 0x0) r12 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r12, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000011008188042f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x4044) 2.33289623s ago: executing program 5 (id=300): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x0, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", 0x0, 0x1, 0x0, 0x13}, 0x50) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x4, &(0x7f0000000040)=r3, 0x4) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a1f848100000005e0c0000000000000e001c001400000002800000121f", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc3", 0x2b}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 2.171089134s ago: executing program 3 (id=302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x4}, 0x18) r2 = gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7}, r2, 0xffffffffffffffff, r4, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x1010000, 0x71, 0x10, 0x6d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000001300)=r9, 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x8, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) recvmsg(r7, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x42) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback, 0xffffffffffffffff, 0xc, 0x2014, 0x0, @value, @void, @void, @void, r11}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r10, @ANYBLOB="2100000010000000", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r10, @ANYBLOB="d82a5595770b4e85a3840854d9e599f05770483782d22a12cf5abdc7f30d52186da9b1f3f25a13de0d1ea4b0b8e1f7ad412c5def0603108787396bed53172238bdc6bdf16ff9ebc837cdfeaeb1bf77711e7690b00cc67309ad524cb21bd1be298db40897f8705a36143c4ede77d086f9ccb05a21e891d5c15528b1f1cea781c4be438fe49243d21213c6eb9bd4eaf51122eaa1f91897a81a3fea7ad6adc51330f9bf2d3ccb7ebeec03955db0a1521b39521653ed", @ANYRES64=r11], 0x20) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000380)='syzkaller\x00', 0x4, 0x20, &(0x7f00000003c0)=""/32, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000000480)=[{0x3, 0x1, 0x10, 0x3}, {0x1, 0x4, 0x5}, {0x4, 0x1, 0x4, 0x2}, {0x2, 0x2, 0xc, 0xa}, {0x4, 0x5, 0x1, 0xb}, {0x3, 0x5, 0xa}, {0x0, 0x5, 0x6, 0x1}, {0x1, 0x1, 0x4, 0x3}, {0x0, 0x3, 0xe, 0x6}], 0x10, 0xfffff801}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback=r0, r1, 0x9, 0x0, 0x0, @void, @value=r12, @void, @void, r11}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000600ff0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="1c000000210081044e81f782db44b9040200000001806c0100001500", 0x1c}], 0x1}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.068763946s ago: executing program 4 (id=303): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb27f, 0x829b0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe11b, 0x0, @perf_config_ext={0xc3, 0x9}, 0xc486d19d431ce5be, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe9}, 0x0, 0xd, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, r0, 0x0, 0x4, &(0x7f0000000340)=',{.\x00'}, 0x30) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0x93}]}) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x28, 0x4}, 0x80, 0x0}, 0x24044051) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xffffffffffffffff) recvmsg$kcm(r1, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.946351669s ago: executing program 2 (id=304): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r1, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) sendmsg$sock(r0, &(0x7f0000000600)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)='A', 0x1}], 0x1, &(0x7f0000000340)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="090000000400000009000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="8500000019000000040000000800000195"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x23, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000000c0)=r4, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000940)={r4, r4}) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="13000000320081964e821382db44", 0xe}], 0x1}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000060000001800000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00002100000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000005ffde00000000000000000b00000000030000000100000f0200000004000000000000000200000025ff000000000000000f02000000b8b300005f6100"], &(0x7f0000000540)=""/145, 0x5d, 0x91, 0x1}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000080), 0x619, r2}, 0x38) 1.92615801s ago: executing program 5 (id=305): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r0) 1.623355698s ago: executing program 1 (id=306): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, 0x0, &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.602000428s ago: executing program 5 (id=307): perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0x93}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1.356496895s ago: executing program 1 (id=308): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x46, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x9, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)='0', 0x1}], 0x1}, 0x45) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) r9 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x67699ee7, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[{0x0, 0x0, 0x2, 0x1}, {0x5}], 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) 1.251452127s ago: executing program 2 (id=309): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r0) 1.043192923s ago: executing program 2 (id=310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'tunl0\x00', @random="2000230c1100"}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18) socket$kcm(0xa, 0x5, 0x0) (async) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000180)=@can={0x1d, r5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="bb", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000000000008400f6ff070000003d3152a6773eb7d092000000000000002000000000000000840000000800000076"], 0x40, 0x4000}, 0x20004000) (async) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000180)=@can={0x1d, r5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="bb", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000000000008400f6ff070000003d3152a6773eb7d092000000000000002000000000000000840000000800000076"], 0x40, 0x4000}, 0x20004000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000bc0)={r3, &(0x7f0000000a80), &(0x7f0000000ac0)=""/247}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @float={0xd, 0x0, 0x0, 0x10, 0x8}, @float={0x5, 0x0, 0x0, 0x10, 0x8}, @fwd={0x10}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x2e]}}, &(0x7f00000003c0)=""/108, 0x57, 0x6c, 0x1, 0x9}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1c, 0xc, &(0x7f0000000500)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @generic={0x4, 0xf, 0x7, 0x100, 0x7}, @jmp={0x5, 0x0, 0x1, 0x9, 0x5, 0xfffffffffffffff0, 0xffffffffffffffff}], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x62, &(0x7f00000005c0)=""/98, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x2, 0x3, 0xfffffff8, 0xc16}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000680)=[0xffffffffffffffff], &(0x7f00000006c0)=[{0x4, 0x5, 0xd, 0xb}, {0x3, 0x4, 0x0, 0xc}], 0x10, 0x8000}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x4000, r1}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x4008, r0}, 0x18) (async) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfe5d, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x18d}}}, &(0x7f0000000280)='syzkaller\x00', 0x40, 0x47, &(0x7f00000002c0)=""/71, 0x41000, 0x0, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000480)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x6, 0x8, 0xffff70e9}, 0x10, 0x926c, r7, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, r8, r9, 0xffffffffffffffff, r10, r11], 0x0, 0x10, 0x1ff}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfe5d, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x18d}}}, &(0x7f0000000280)='syzkaller\x00', 0x40, 0x47, &(0x7f00000002c0)=""/71, 0x41000, 0x0, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000480)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x6, 0x8, 0xffff70e9}, 0x10, 0x926c, r7, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, r8, r9, 0xffffffffffffffff, r10, r11], 0x0, 0x10, 0x1ff}, 0x94) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d81050423141100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8001500030001400200000901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e9703000000", 0xd8}], 0x1}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1, 0x20}, {0x4d}, {0x6}]}) 1.000858754s ago: executing program 5 (id=311): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x3, 0x6}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x8) close(r2) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r3, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030020000b12d25a80648c2594f90124fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc5c082c00db5bffffffffff000000060300000023fff500000000000000000000ac"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0x12, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000d6f1251a000000000100000085200000010000000302060006000000180000000500000000000000010000003d27f4ffffffffff185b400000000000000000000001000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000014b70300000600000085000000060000009500000000000000479dc2e644ef2ca7c4a2606be696f58f3d974c7a5ba733f93c8f0f9d589db89a010eabfa230220b2dcfe9aedde0f1458e77bb748a4eeaefc18aa616e21fb74b22abb4bb6a42f4882469bd41e5b"], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @lsm=0x2b, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x1, 0x5, 0xf}, 0x10, 0x0, r3, 0x1, &(0x7f0000000380)=[r3, r3], &(0x7f0000000440)=[{0x0, 0x5, 0x1, 0xa}], 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r3, 0x8) 980.860365ms ago: executing program 4 (id=312): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000540)='cpuset.cpus\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x1, 0x106) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x80000001}}]}, {0x0, [0x61]}}, 0x0, 0x4f}, 0x28) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000004000000000009500351ad44169"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r2) sendmsg$inet(r2, &(0x7f0000001a00)={&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}, 0x8011) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x20, 0x0, 0x0, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002a000b11d25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x35}, 0x0) r4 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xfffffebfffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a867e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c27578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="312c310a96"], 0x31) 870.347637ms ago: executing program 1 (id=313): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000440), 0x3d) close(r0) socket$kcm(0xa, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000440), 0x3d) (async) close(r0) (async) 720.738581ms ago: executing program 2 (id=314): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x1010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x7, 0x0, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x7, 0x9, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8901, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) 636.480893ms ago: executing program 2 (id=315): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x0, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", 0x0, 0x1, 0x0, 0x13}, 0x50) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x4, &(0x7f0000000040)=r3, 0x4) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a1f848100000005e0c0000000000000e001c001400000002800000121f", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942", 0x32}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 539.279446ms ago: executing program 1 (id=316): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x8000}, 0x0, 0x6, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1000000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0xa010, 0x0, 0x0, 0x1, 0x8, 0x40000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2000c884) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001000000280000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r1, &(0x7f0000000300), 0x0}, 0x20) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x401, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r4, 0x29, 0x15, &(0x7f00000000c0), 0xb9) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2200, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002280)={&(0x7f0000000040)="776d577b15fa9a637d68bbd9e9902cca3b7ebe4712b9ba16159c672d1cfb8b778b2fd31da548056904acb2a0d75d681224758e6201b694a8f167ab5a2de6", &(0x7f0000000a40)=""/4096, &(0x7f0000001a40)="eaeb02d58df8207b953be2171f5f96b268028d106d245d3a15395aa72c535287753bdef56a631062277f2aaf690fff1663856e66665679e7ed4398965b6d426dcf4cf0eaecfe2b22ae8e06251022e0ce1845b58274f874ca42c3ced983dfaad6104fe11bf5b28ab7ec77c701f624bbd0fb9c3d9aa62d29b9f0ec711c", &(0x7f0000002180)="027ed01f6c8ae76547f5bd6777421104f346c168ae007dec754329011b0013c944ef629bd63123085bf0f3537a27c02441df1bb371400aeb7494615c6960b571aa849e076e6cd6a896e3bd25584703acb137119f0a59bc393f910f2920f85530961e9e44692b07f9d45d93ac289a60663d771c8f19ecd70c7f716e9c451777db28989469512d7ba9d91008758e1e42e6b8daaf1a008ea119665e8116368c24814407c1c69d13d0feab7995b2d3d6b60f4b9460f9cc9588f98453a7c7ea7dd4e24cb61b1c", 0x8, 0x1}, 0x38) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000200)=r0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000001000000000000000000", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYBLOB="003a00000000000000000000000000000000001400000000000000001bd4b5758ed94ef5fd2ee342b7c11956389a8dc8e2940c2c88b18505b1d638776911fe119fe2dd"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)=r6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x3, &(0x7f0000001b80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) 224.537294ms ago: executing program 4 (id=317): r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110805, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x6, 0x7fe2, 0x1}, 0x96) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80d1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r5 = socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0xff, 0x3, 0x8, 0x6, 0x0, 0x88, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x1}, 0x800, 0x7fffffffffffffff, 0x200, 0x9, 0x80, 0x0, 0x7, 0x0, 0x6}) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4018, r2}, 0x18) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90424fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 85.098777ms ago: executing program 5 (id=318): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 29.384309ms ago: executing program 1 (id=319): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x1010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x7, 0x0, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x7, 0x9, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) (fail_nth: 3) 0s ago: executing program 2 (id=320): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x23, 0x5, 0x0) (fail_nth: 3) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r0) kernel console output (not intermixed with test programs): 9820][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.296392][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.331150][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.353743][ T703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.367770][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.386659][ T703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.414109][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.424765][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.484370][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.501287][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.595439][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.630974][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.631479][ C1] hrtimer: interrupt took 90486 ns [ 77.655838][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.814927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.966469][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.980665][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.018403][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.107659][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 78.120781][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 78.161176][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 78.192396][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 78.222955][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 78.477251][ T4300] IPv6: …: Disabled Multicast RS [ 78.846293][ T4315] FAULT_INJECTION: forcing a failure. [ 78.846293][ T4315] name failslab, interval 1, probability 0, space 0, times 1 [ 78.859362][ T4315] CPU: 1 PID: 4315 Comm: syz.1.12 Not tainted syzkaller #0 [ 78.866608][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.877076][ T4315] Call Trace: [ 78.880391][ T4315] [ 78.883415][ T4315] dump_stack_lvl+0x188/0x250 [ 78.888152][ T4315] ? show_regs_print_info+0x20/0x20 [ 78.893831][ T4315] ? load_image+0x410/0x410 [ 78.898503][ T4315] ? __might_sleep+0xf0/0xf0 [ 78.903132][ T4315] ? __lock_acquire+0x7b50/0x7b50 [ 78.908194][ T4315] ? mark_lock+0x94/0x320 [ 78.912554][ T4315] ? verify_lock_unused+0x140/0x140 [ 78.917789][ T4315] should_fail+0x383/0x4b0 [ 78.922248][ T4315] should_failslab+0x5/0x20 [ 78.926785][ T4315] slab_pre_alloc_hook+0x51/0xc0 [ 78.931762][ T4315] __kmalloc+0x6b/0x340 [ 78.935952][ T4315] ? bpf_test_init+0xf8/0x1b0 [ 78.940670][ T4315] bpf_test_init+0xf8/0x1b0 [ 78.945209][ T4315] bpf_prog_test_run_xdp+0x1ca/0x910 [ 78.950657][ T4315] ? dev_put+0x70/0x70 [ 78.954772][ T4315] ? dev_put+0x70/0x70 [ 78.958870][ T4315] bpf_prog_test_run+0x31c/0x390 [ 78.963956][ T4315] __sys_bpf+0x5a5/0x6f0 [ 78.968274][ T4315] ? bpf_link_show_fdinfo+0x380/0x380 [ 78.973686][ T4315] ? rcu_nmi_exit+0x6f/0xf0 [ 78.978228][ T4315] __x64_sys_bpf+0x78/0x90 [ 78.982683][ T4315] do_syscall_64+0x4c/0xa0 [ 78.987293][ T4315] ? clear_bhb_loop+0x30/0x80 [ 78.991992][ T4315] ? clear_bhb_loop+0x30/0x80 [ 78.996688][ T4315] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.002617][ T4315] RIP: 0033:0x7f83863d40d9 [ 79.007049][ T4315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.026767][ T4315] RSP: 002b:00007f838462c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.035235][ T4315] RAX: ffffffffffffffda RBX: 00007f838665bfa0 RCX: 00007f83863d40d9 [ 79.043238][ T4315] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 79.051410][ T4315] RBP: 00007f838462c090 R08: 0000000000000000 R09: 0000000000000000 [ 79.059399][ T4315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.067730][ T4315] R13: 00007f838665c038 R14: 00007f838665bfa0 R15: 00007ffdfe232268 [ 79.075739][ T4315] [ 79.242608][ T4321] netlink: 'syz.1.13': attribute type 29 has an invalid length. [ 79.298985][ T4321] netlink: 'syz.1.13': attribute type 29 has an invalid length. [ 79.384945][ T4322] netlink: 'syz.1.13': attribute type 29 has an invalid length. [ 79.395537][ T4327] FAULT_INJECTION: forcing a failure. [ 79.395537][ T4327] name failslab, interval 1, probability 0, space 0, times 0 [ 79.443324][ T4327] CPU: 0 PID: 4327 Comm: syz.2.16 Not tainted syzkaller #0 [ 79.450604][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.460722][ T4327] Call Trace: [ 79.464047][ T4327] [ 79.467032][ T4327] dump_stack_lvl+0x188/0x250 [ 79.471811][ T4327] ? show_regs_print_info+0x20/0x20 [ 79.477072][ T4327] ? load_image+0x410/0x410 [ 79.481655][ T4327] ? __might_sleep+0xf0/0xf0 [ 79.486319][ T4327] ? __lock_acquire+0x7b50/0x7b50 [ 79.491421][ T4327] should_fail+0x383/0x4b0 [ 79.495920][ T4327] should_failslab+0x5/0x20 [ 79.500485][ T4327] slab_pre_alloc_hook+0x51/0xc0 [ 79.505485][ T4327] kmem_cache_alloc_trace+0x47/0x290 [ 79.510935][ T4327] ? dev_map_alloc+0x62/0x520 [ 79.515710][ T4327] dev_map_alloc+0x62/0x520 [ 79.520307][ T4327] map_create+0x481/0x2330 [ 79.524806][ T4327] ? bpf_lsm_bpf+0x5/0x10 [ 79.529221][ T4327] __sys_bpf+0x30a/0x6f0 [ 79.533541][ T4327] ? bpf_link_show_fdinfo+0x380/0x380 [ 79.539090][ T4327] __x64_sys_bpf+0x78/0x90 [ 79.543587][ T4327] do_syscall_64+0x4c/0xa0 [ 79.548071][ T4327] ? clear_bhb_loop+0x30/0x80 [ 79.552828][ T4327] ? clear_bhb_loop+0x30/0x80 [ 79.557588][ T4327] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.563539][ T4327] RIP: 0033:0x7f1c016c00d9 [ 79.568028][ T4327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.587692][ T4327] RSP: 002b:00007f1bff918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.596341][ T4327] RAX: ffffffffffffffda RBX: 00007f1c01947fa0 RCX: 00007f1c016c00d9 [ 79.604381][ T4327] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 79.612402][ T4327] RBP: 00007f1bff918090 R08: 0000000000000000 R09: 0000000000000000 [ 79.620437][ T4327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.628642][ T4327] R13: 00007f1c01948038 R14: 00007f1c01947fa0 R15: 00007fffea602498 [ 79.636768][ T4327] [ 80.590318][ T4330] netlink: 144 bytes leftover after parsing attributes in process `syz.3.17'. [ 80.842424][ T4330] netlink: 'syz.3.17': attribute type 3 has an invalid length. [ 80.906096][ T4330] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.17'. [ 80.927684][ T4346] Zero length message leads to an empty skb [ 80.992937][ T4346] netlink: 'syz.3.17': attribute type 2 has an invalid length. [ 81.543011][ T4368] FAULT_INJECTION: forcing a failure. [ 81.543011][ T4368] name failslab, interval 1, probability 0, space 0, times 0 [ 81.626364][ T4368] CPU: 1 PID: 4368 Comm: syz.1.27 Not tainted syzkaller #0 [ 81.633631][ T4368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.643716][ T4368] Call Trace: [ 81.647067][ T4368] [ 81.650029][ T4368] dump_stack_lvl+0x188/0x250 [ 81.654747][ T4368] ? show_regs_print_info+0x20/0x20 [ 81.660075][ T4368] ? load_image+0x410/0x410 [ 81.664621][ T4368] ? __might_sleep+0xf0/0xf0 [ 81.669417][ T4368] ? __lock_acquire+0x7b50/0x7b50 [ 81.674477][ T4368] ? __lock_acquire+0x13dc/0x7b50 [ 81.679552][ T4368] should_fail+0x383/0x4b0 [ 81.684019][ T4368] should_failslab+0x5/0x20 [ 81.688560][ T4368] slab_pre_alloc_hook+0x51/0xc0 [ 81.693547][ T4368] kmem_cache_alloc_node+0x47/0x2c0 [ 81.698784][ T4368] ? __alloc_skb+0xf4/0x750 [ 81.703340][ T4368] __alloc_skb+0xf4/0x750 [ 81.707751][ T4368] alloc_skb_with_frags+0xa7/0x720 [ 81.712918][ T4368] sock_alloc_send_pskb+0x87f/0x9a0 [ 81.718166][ T4368] ? sock_kzfree_s+0x50/0x50 [ 81.722785][ T4368] ? do_raw_spin_lock+0x128/0x2f0 [ 81.727851][ T4368] ? __rwlock_init+0x140/0x140 [ 81.732654][ T4368] ? do_raw_spin_unlock+0x11d/0x230 [ 81.737896][ T4368] unix_dgram_sendmsg+0x6f8/0x19c0 [ 81.743062][ T4368] ? aa_sk_perm+0x7dc/0x910 [ 81.747611][ T4368] ? aa_af_perm+0x340/0x340 [ 81.752188][ T4368] ? unix_dgram_poll+0x680/0x680 [ 81.757167][ T4368] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 81.763631][ T4368] ? apparmor_socket_sendmsg+0x88/0x230 [ 81.769246][ T4368] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 81.774577][ T4368] ? security_socket_sendmsg+0x7c/0xa0 [ 81.780073][ T4368] ? unix_dgram_poll+0x680/0x680 [ 81.785048][ T4368] ____sys_sendmsg+0x5be/0x8f0 [ 81.789858][ T4368] ? __sys_sendmsg_sock+0x30/0x30 [ 81.794939][ T4368] ? import_iovec+0x6f/0xa0 [ 81.799491][ T4368] ___sys_sendmsg+0x236/0x2e0 [ 81.804243][ T4368] ? __sys_sendmsg+0x290/0x290 [ 81.809088][ T4368] __se_sys_sendmsg+0x1b7/0x2a0 [ 81.813985][ T4368] ? __x64_sys_sendmsg+0x80/0x80 [ 81.818969][ T4368] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 81.825047][ T4368] ? lockdep_hardirqs_on+0x94/0x140 [ 81.830291][ T4368] do_syscall_64+0x4c/0xa0 [ 81.834770][ T4368] ? clear_bhb_loop+0x30/0x80 [ 81.839481][ T4368] ? clear_bhb_loop+0x30/0x80 [ 81.844200][ T4368] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.850134][ T4368] RIP: 0033:0x7f83863d40d9 [ 81.854585][ T4368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.874231][ T4368] RSP: 002b:00007f838462c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.882691][ T4368] RAX: ffffffffffffffda RBX: 00007f838665bfa0 RCX: 00007f83863d40d9 [ 81.890702][ T4368] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 81.898707][ T4368] RBP: 00007f838462c090 R08: 0000000000000000 R09: 0000000000000000 [ 81.906737][ T4368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.915042][ T4368] R13: 00007f838665c038 R14: 00007f838665bfa0 R15: 00007ffdfe232268 [ 81.923078][ T4368] [ 82.626628][ T4390] FAULT_INJECTION: forcing a failure. [ 82.626628][ T4390] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.705308][ T4390] CPU: 1 PID: 4390 Comm: syz.2.33 Not tainted syzkaller #0 [ 82.712578][ T4390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.722674][ T4390] Call Trace: [ 82.726080][ T4390] [ 82.729049][ T4390] dump_stack_lvl+0x188/0x250 [ 82.733902][ T4390] ? show_regs_print_info+0x20/0x20 [ 82.739143][ T4390] ? load_image+0x410/0x410 [ 82.743889][ T4390] ? __lock_acquire+0x7b50/0x7b50 [ 82.748988][ T4390] should_fail+0x383/0x4b0 [ 82.753507][ T4390] _copy_from_user+0x2e/0x170 [ 82.758230][ T4390] __copy_msghdr_from_user+0x48a/0x630 [ 82.763924][ T4390] ? verify_lock_unused+0x140/0x140 [ 82.769600][ T4390] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 82.775027][ T4390] ? perf_tp_event+0xa7e/0xbe0 [ 82.780059][ T4390] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 82.785957][ T4390] ___sys_sendmsg+0x19a/0x2e0 [ 82.790808][ T4390] ? __sys_sendmsg+0x290/0x290 [ 82.795650][ T4390] __se_sys_sendmsg+0x1b7/0x2a0 [ 82.800636][ T4390] ? __x64_sys_sendmsg+0x80/0x80 [ 82.805723][ T4390] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 82.811753][ T4390] ? lockdep_hardirqs_on+0x94/0x140 [ 82.817033][ T4390] do_syscall_64+0x4c/0xa0 [ 82.821528][ T4390] ? clear_bhb_loop+0x30/0x80 [ 82.826253][ T4390] ? clear_bhb_loop+0x30/0x80 [ 82.830973][ T4390] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.837091][ T4390] RIP: 0033:0x7f1c016c00d9 [ 82.841548][ T4390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.861189][ T4390] RSP: 002b:00007f1bff8f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.869647][ T4390] RAX: ffffffffffffffda RBX: 00007f1c01948090 RCX: 00007f1c016c00d9 [ 82.877844][ T4390] RDX: 00000000000004dc RSI: 0000200000007940 RDI: 0000000000000008 [ 82.885850][ T4390] RBP: 00007f1bff8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.893946][ T4390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.901951][ T4390] R13: 00007f1c01948128 R14: 00007f1c01948090 R15: 00007fffea602498 [ 82.909985][ T4390] [ 84.404968][ T4427] FAULT_INJECTION: forcing a failure. [ 84.404968][ T4427] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 84.509886][ T4427] CPU: 0 PID: 4427 Comm: syz.2.44 Not tainted syzkaller #0 [ 84.517158][ T4427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.527346][ T4427] Call Trace: [ 84.530697][ T4427] [ 84.533668][ T4427] dump_stack_lvl+0x188/0x250 [ 84.538402][ T4427] ? show_regs_print_info+0x20/0x20 [ 84.543659][ T4427] ? load_image+0x410/0x410 [ 84.548251][ T4427] ? __lock_acquire+0x7b50/0x7b50 [ 84.553327][ T4427] ? slab_post_alloc_hook+0x4c/0x380 [ 84.558749][ T4427] ? __alloc_skb+0xf4/0x750 [ 84.563292][ T4427] ? alloc_skb_with_frags+0xa7/0x720 [ 84.568608][ T4427] ? sock_alloc_send_pskb+0x87f/0x9a0 [ 84.574039][ T4427] should_fail+0x383/0x4b0 [ 84.578490][ T4427] prepare_alloc_pages+0x1e3/0x5b0 [ 84.583655][ T4427] __alloc_pages+0x11b/0x480 [ 84.588287][ T4427] ? zone_statistics+0x170/0x170 [ 84.593260][ T4427] kmalloc_large_node+0x7d/0x1a0 [ 84.598313][ T4427] __kmalloc_node_track_caller+0x219/0x3a0 [ 84.604313][ T4427] ? alloc_skb_with_frags+0xa7/0x720 [ 84.609630][ T4427] ? __alloc_skb+0xf4/0x750 [ 84.614163][ T4427] ? alloc_skb_with_frags+0xa7/0x720 [ 84.619475][ T4427] __alloc_skb+0x22c/0x750 [ 84.623916][ T4427] alloc_skb_with_frags+0xa7/0x720 [ 84.629185][ T4427] ? mark_lock+0x94/0x320 [ 84.633645][ T4427] sock_alloc_send_pskb+0x87f/0x9a0 [ 84.638899][ T4427] ? sock_kzfree_s+0x50/0x50 [ 84.643632][ T4427] tun_get_user+0x8f7/0x3b60 [ 84.648273][ T4427] ? tun_ring_recv+0xc90/0xc90 [ 84.653506][ T4427] ? rcu_lock_release+0x5/0x20 [ 84.658312][ T4427] ? __lock_acquire+0x7b50/0x7b50 [ 84.663390][ T4427] tun_chr_write_iter+0x112/0x1e0 [ 84.668725][ T4427] vfs_write+0x748/0xd70 [ 84.673194][ T4427] ? file_end_write+0x250/0x250 [ 84.678269][ T4427] ? __fget_files+0x402/0x470 [ 84.682989][ T4427] ? __fdget_pos+0x1e2/0x370 [ 84.687800][ T4427] ? ksys_write+0x70/0x260 [ 84.692370][ T4427] ksys_write+0x153/0x260 [ 84.696834][ T4427] ? __ia32_sys_read+0x80/0x80 [ 84.701708][ T4427] ? lockdep_hardirqs_on+0x94/0x140 [ 84.706977][ T4427] do_syscall_64+0x4c/0xa0 [ 84.711418][ T4427] ? clear_bhb_loop+0x30/0x80 [ 84.716110][ T4427] ? clear_bhb_loop+0x30/0x80 [ 84.720924][ T4427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.726838][ T4427] RIP: 0033:0x7f1c016c00d9 [ 84.731268][ T4427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.750912][ T4427] RSP: 002b:00007f1bff918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.759347][ T4427] RAX: ffffffffffffffda RBX: 00007f1c01947fa0 RCX: 00007f1c016c00d9 [ 84.767344][ T4427] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 84.775418][ T4427] RBP: 00007f1bff918090 R08: 0000000000000000 R09: 0000000000000000 [ 84.783407][ T4427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.791431][ T4427] R13: 00007f1c01948038 R14: 00007f1c01947fa0 R15: 00007fffea602498 [ 84.799444][ T4427] [ 85.935685][ T4442] FAULT_INJECTION: forcing a failure. [ 85.935685][ T4442] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 86.030562][ T4442] CPU: 0 PID: 4442 Comm: syz.1.49 Not tainted syzkaller #0 [ 86.037844][ T4442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.047938][ T4442] Call Trace: [ 86.051294][ T4442] [ 86.054253][ T4442] dump_stack_lvl+0x188/0x250 [ 86.059053][ T4442] ? show_regs_print_info+0x20/0x20 [ 86.064298][ T4442] ? load_image+0x410/0x410 [ 86.068847][ T4442] ? __lock_acquire+0x7b50/0x7b50 [ 86.073906][ T4442] ? slab_post_alloc_hook+0x4c/0x380 [ 86.079236][ T4442] ? __alloc_skb+0xf4/0x750 [ 86.083781][ T4442] ? alloc_skb_with_frags+0xa7/0x720 [ 86.089116][ T4442] ? sock_alloc_send_pskb+0x87f/0x9a0 [ 86.094580][ T4442] should_fail+0x383/0x4b0 [ 86.099043][ T4442] prepare_alloc_pages+0x1e3/0x5b0 [ 86.104202][ T4442] __alloc_pages+0x11b/0x480 [ 86.108838][ T4442] ? zone_statistics+0x170/0x170 [ 86.113843][ T4442] kmalloc_large_node+0x7d/0x1a0 [ 86.118965][ T4442] __kmalloc_node_track_caller+0x219/0x3a0 [ 86.124825][ T4442] ? alloc_skb_with_frags+0xa7/0x720 [ 86.130174][ T4442] ? __alloc_skb+0xf4/0x750 [ 86.134711][ T4442] ? alloc_skb_with_frags+0xa7/0x720 [ 86.140030][ T4442] __alloc_skb+0x22c/0x750 [ 86.144484][ T4442] alloc_skb_with_frags+0xa7/0x720 [ 86.149738][ T4442] ? mark_lock+0x94/0x320 [ 86.154116][ T4442] sock_alloc_send_pskb+0x87f/0x9a0 [ 86.159358][ T4442] ? sock_kzfree_s+0x50/0x50 [ 86.164001][ T4442] tun_get_user+0x8f7/0x3b60 [ 86.168679][ T4442] ? tun_ring_recv+0xc90/0xc90 [ 86.173580][ T4442] ? rcu_lock_release+0x5/0x20 [ 86.178378][ T4442] ? __lock_acquire+0x7b50/0x7b50 [ 86.183478][ T4442] tun_chr_write_iter+0x112/0x1e0 [ 86.188546][ T4442] vfs_write+0x748/0xd70 [ 86.192926][ T4442] ? file_end_write+0x250/0x250 [ 86.197826][ T4442] ? __fget_files+0x402/0x470 [ 86.202777][ T4442] ? __fdget_pos+0x1e2/0x370 [ 86.207411][ T4442] ? ksys_write+0x70/0x260 [ 86.211878][ T4442] ksys_write+0x153/0x260 [ 86.216264][ T4442] ? __ia32_sys_read+0x80/0x80 [ 86.221119][ T4442] ? lockdep_hardirqs_on+0x94/0x140 [ 86.226377][ T4442] do_syscall_64+0x4c/0xa0 [ 86.230859][ T4442] ? clear_bhb_loop+0x30/0x80 [ 86.235582][ T4442] ? clear_bhb_loop+0x30/0x80 [ 86.240305][ T4442] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.246242][ T4442] RIP: 0033:0x7f83863d40d9 [ 86.250722][ T4442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.270461][ T4442] RSP: 002b:00007f838462c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.280464][ T4442] RAX: ffffffffffffffda RBX: 00007f838665bfa0 RCX: 00007f83863d40d9 [ 86.288509][ T4442] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 86.296714][ T4442] RBP: 00007f838462c090 R08: 0000000000000000 R09: 0000000000000000 [ 86.304731][ T4442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.312835][ T4442] R13: 00007f838665c038 R14: 00007f838665bfa0 R15: 00007ffdfe232268 [ 86.321404][ T4442] [ 86.392379][ T4447] device lo entered promiscuous mode [ 87.401978][ T4464] FAULT_INJECTION: forcing a failure. [ 87.401978][ T4464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.445389][ T4464] CPU: 1 PID: 4464 Comm: syz.4.60 Not tainted syzkaller #0 [ 87.452685][ T4464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.462879][ T4464] Call Trace: [ 87.466211][ T4464] [ 87.469177][ T4464] dump_stack_lvl+0x188/0x250 [ 87.473910][ T4464] ? show_regs_print_info+0x20/0x20 [ 87.479155][ T4464] ? load_image+0x410/0x410 [ 87.483738][ T4464] ? __lock_acquire+0x7b50/0x7b50 [ 87.488808][ T4464] should_fail+0x383/0x4b0 [ 87.493440][ T4464] _copy_from_user+0x2e/0x170 [ 87.498160][ T4464] iovec_from_user+0x142/0x370 [ 87.503089][ T4464] __import_iovec+0x70/0x490 [ 87.507948][ T4464] import_iovec+0x6f/0xa0 [ 87.512332][ T4464] ___sys_sendmsg+0x1fd/0x2e0 [ 87.513998][ T4467] netlink: 'syz.3.59': attribute type 1 has an invalid length. [ 87.517065][ T4464] ? __sys_sendmsg+0x290/0x290 [ 87.517104][ T4464] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 87.517150][ T4464] __se_sys_sendmsg+0x1b7/0x2a0 [ 87.517173][ T4464] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 87.517202][ T4464] ? __x64_sys_sendmsg+0x80/0x80 [ 87.517237][ T4464] ? __x64_sys_sendmsg+0x6f/0x80 [ 87.517266][ T4464] do_syscall_64+0x4c/0xa0 [ 87.517287][ T4464] ? clear_bhb_loop+0x30/0x80 [ 87.517309][ T4464] ? clear_bhb_loop+0x30/0x80 [ 87.517333][ T4464] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.517358][ T4464] RIP: 0033:0x7f7ca0ec20d9 [ 87.517380][ T4464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.517399][ T4464] RSP: 002b:00007f7c9f11a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.609591][ T4464] RAX: ffffffffffffffda RBX: 00007f7ca1149fa0 RCX: 00007f7ca0ec20d9 [ 87.617607][ T4464] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 87.625603][ T4464] RBP: 00007f7c9f11a090 R08: 0000000000000000 R09: 0000000000000000 [ 87.633829][ T4464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.641957][ T4464] R13: 00007f7ca114a038 R14: 00007f7ca1149fa0 R15: 00007ffdd343c408 [ 87.649989][ T4464] [ 87.664927][ T4467] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.59'. [ 87.923676][ T4476] netlink: 'syz.0.63': attribute type 4 has an invalid length. [ 87.956189][ T4476] netlink: 'syz.0.63': attribute type 3 has an invalid length. [ 87.996491][ T4477] netlink: 'syz.3.61': attribute type 10 has an invalid length. [ 88.007217][ T4476] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.63'. [ 88.097662][ T4477] device hsr0 entered promiscuous mode [ 88.434351][ T4489] FAULT_INJECTION: forcing a failure. [ 88.434351][ T4489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.511676][ T4487] netlink: 'syz.4.67': attribute type 3 has an invalid length. [ 88.575382][ T4487] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.67'. [ 88.642607][ T4489] CPU: 1 PID: 4489 Comm: syz.2.66 Not tainted syzkaller #0 [ 88.649877][ T4489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.659974][ T4489] Call Trace: [ 88.663314][ T4489] [ 88.666280][ T4489] dump_stack_lvl+0x188/0x250 [ 88.671005][ T4489] ? show_regs_print_info+0x20/0x20 [ 88.676335][ T4489] ? load_image+0x410/0x410 [ 88.680871][ T4489] ? __lock_acquire+0x7b50/0x7b50 [ 88.686016][ T4489] ? mark_lock+0x94/0x320 [ 88.690376][ T4489] should_fail+0x383/0x4b0 [ 88.694820][ T4489] copy_page_from_iter+0x33a/0x760 [ 88.700057][ T4489] ? lockdep_hardirqs_on+0x94/0x140 [ 88.705295][ T4489] pipe_write+0x994/0x1b40 [ 88.710028][ T4489] ? pipe_write+0x190/0x1b40 [ 88.714765][ T4489] ? pipe_read+0x12d0/0x12d0 [ 88.719492][ T4489] ? end_current_label_crit_section+0x14b/0x170 [ 88.725847][ T4489] ? memset+0x1e/0x40 [ 88.729886][ T4489] ? iov_iter_init+0xb4/0x170 [ 88.734602][ T4489] vfs_write+0x748/0xd70 [ 88.739042][ T4489] ? file_end_write+0x250/0x250 [ 88.743941][ T4489] ? __fget_files+0x402/0x470 [ 88.748655][ T4489] ? __fdget_pos+0x1e2/0x370 [ 88.753271][ T4489] ? ksys_write+0x70/0x260 [ 88.757711][ T4489] ksys_write+0x153/0x260 [ 88.762066][ T4489] ? __ia32_sys_read+0x80/0x80 [ 88.766950][ T4489] ? lockdep_hardirqs_on+0x94/0x140 [ 88.772348][ T4489] do_syscall_64+0x4c/0xa0 [ 88.776817][ T4489] ? clear_bhb_loop+0x30/0x80 [ 88.781516][ T4489] ? clear_bhb_loop+0x30/0x80 [ 88.786247][ T4489] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.792165][ T4489] RIP: 0033:0x7f1c016c00d9 [ 88.796611][ T4489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.816254][ T4489] RSP: 002b:00007f1bff918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.824775][ T4489] RAX: ffffffffffffffda RBX: 00007f1c01947fa0 RCX: 00007f1c016c00d9 [ 88.832882][ T4489] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000000 [ 88.840881][ T4489] RBP: 00007f1bff918090 R08: 0000000000000000 R09: 0000000000000000 [ 88.848873][ T4489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.856929][ T4489] R13: 00007f1c01948038 R14: 00007f1c01947fa0 R15: 00007fffea602498 [ 88.864964][ T4489] [ 88.930748][ T4477] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 88.980259][ T4477] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 89.042380][ T4477] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 89.116230][ T4477] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 89.865035][ T4503] FAULT_INJECTION: forcing a failure. [ 89.865035][ T4503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.883693][ T4503] CPU: 1 PID: 4503 Comm: syz.0.72 Not tainted syzkaller #0 [ 89.890955][ T4503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.901071][ T4503] Call Trace: [ 89.904385][ T4503] [ 89.907345][ T4503] dump_stack_lvl+0x188/0x250 [ 89.912065][ T4503] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 89.918434][ T4503] ? show_regs_print_info+0x20/0x20 [ 89.923687][ T4503] ? load_image+0x410/0x410 [ 89.928333][ T4503] should_fail+0x383/0x4b0 [ 89.932825][ T4503] _copy_from_user+0x2e/0x170 [ 89.937552][ T4503] iovec_from_user+0x142/0x370 [ 89.942360][ T4503] __import_iovec+0x70/0x490 [ 89.947005][ T4503] import_iovec+0x6f/0xa0 [ 89.951371][ T4503] ___sys_sendmsg+0x1fd/0x2e0 [ 89.956092][ T4503] ? __sys_sendmsg+0x290/0x290 [ 89.960941][ T4503] ? rcu_nmi_exit+0x6f/0xf0 [ 89.965527][ T4503] __se_sys_sendmsg+0x1b7/0x2a0 [ 89.970420][ T4503] ? __x64_sys_sendmsg+0x80/0x80 [ 89.975458][ T4503] ? syscall_enter_from_user_mode+0x2a/0x70 [ 89.981984][ T4503] do_syscall_64+0x4c/0xa0 [ 89.986432][ T4503] ? clear_bhb_loop+0x30/0x80 [ 89.991180][ T4503] ? clear_bhb_loop+0x30/0x80 [ 89.995983][ T4503] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.001912][ T4503] RIP: 0033:0x7f5e5f7480d9 [ 90.006371][ T4503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.026017][ T4503] RSP: 002b:00007f5e5d9a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.034485][ T4503] RAX: ffffffffffffffda RBX: 00007f5e5f9cffa0 RCX: 00007f5e5f7480d9 [ 90.042532][ T4503] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 90.050548][ T4503] RBP: 00007f5e5d9a0090 R08: 0000000000000000 R09: 0000000000000000 [ 90.058731][ T4503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.066741][ T4503] R13: 00007f5e5f9d0038 R14: 00007f5e5f9cffa0 R15: 00007ffc2a43ec28 [ 90.074766][ T4503] [ 90.822584][ T4535] device syzkaller0 entered promiscuous mode [ 90.982390][ T4538] device bridge_slave_1 left promiscuous mode [ 91.004640][ T4538] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.350787][ T4546] netlink: 'syz.0.82': attribute type 3 has an invalid length. [ 91.369145][ T4546] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 91.407576][ T4538] device bridge_slave_0 left promiscuous mode [ 91.429168][ T4546] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.82'. [ 91.442472][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.778230][ T4548] netlink: 'syz.3.83': attribute type 10 has an invalid length. [ 91.806045][ T4548] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 91.838748][ T4548] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 91.888781][ T4548] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 91.922927][ T4548] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 91.940560][ T1108] cfg80211: failed to load regulatory.db [ 92.259848][ T4546] device syzkaller0 entered promiscuous mode [ 92.427922][ T4565] FAULT_INJECTION: forcing a failure. [ 92.427922][ T4565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.493162][ T4565] CPU: 0 PID: 4565 Comm: syz.4.86 Not tainted syzkaller #0 [ 92.500476][ T4565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.510958][ T4565] Call Trace: [ 92.514398][ T4565] [ 92.517422][ T4565] dump_stack_lvl+0x188/0x250 [ 92.522210][ T4565] ? show_regs_print_info+0x20/0x20 [ 92.527668][ T4565] ? load_image+0x410/0x410 [ 92.533073][ T4565] ? __lock_acquire+0x7b50/0x7b50 [ 92.538608][ T4565] should_fail+0x383/0x4b0 [ 92.543140][ T4565] _copy_from_user+0x2e/0x170 [ 92.548222][ T4565] iovec_from_user+0x142/0x370 [ 92.553342][ T4565] __import_iovec+0x70/0x490 [ 92.558066][ T4565] import_iovec+0x6f/0xa0 [ 92.562676][ T4565] ___sys_sendmsg+0x1fd/0x2e0 [ 92.567470][ T4565] ? __sys_sendmsg+0x290/0x290 [ 92.572485][ T4565] __se_sys_sendmsg+0x1b7/0x2a0 [ 92.577548][ T4565] ? __x64_sys_sendmsg+0x80/0x80 [ 92.582567][ T4565] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 92.589096][ T4565] ? lockdep_hardirqs_on+0x94/0x140 [ 92.594670][ T4565] do_syscall_64+0x4c/0xa0 [ 92.599151][ T4565] ? clear_bhb_loop+0x30/0x80 [ 92.603901][ T4565] ? clear_bhb_loop+0x30/0x80 [ 92.608642][ T4565] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.614591][ T4565] RIP: 0033:0x7f7ca0ec20d9 [ 92.619062][ T4565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.638969][ T4565] RSP: 002b:00007f7c9f0f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.648175][ T4565] RAX: ffffffffffffffda RBX: 00007f7ca114a090 RCX: 00007f7ca0ec20d9 [ 92.656298][ T4565] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 92.664332][ T4565] RBP: 00007f7c9f0f9090 R08: 0000000000000000 R09: 0000000000000000 [ 92.672529][ T4565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.680705][ T4565] R13: 00007f7ca114a128 R14: 00007f7ca114a090 R15: 00007ffdd343c408 [ 92.689079][ T4565] [ 93.194469][ T4577] FAULT_INJECTION: forcing a failure. [ 93.194469][ T4577] name failslab, interval 1, probability 0, space 0, times 0 [ 93.274168][ T4577] CPU: 1 PID: 4577 Comm: syz.4.91 Not tainted syzkaller #0 [ 93.281463][ T4577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.291551][ T4577] Call Trace: [ 93.294953][ T4577] [ 93.297916][ T4577] dump_stack_lvl+0x188/0x250 [ 93.302836][ T4577] ? show_regs_print_info+0x20/0x20 [ 93.308171][ T4577] ? load_image+0x410/0x410 [ 93.312721][ T4577] ? __might_sleep+0xf0/0xf0 [ 93.317388][ T4577] ? __lock_acquire+0x7b50/0x7b50 [ 93.322981][ T4577] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 93.329036][ T4577] should_fail+0x383/0x4b0 [ 93.333506][ T4577] should_failslab+0x5/0x20 [ 93.338139][ T4577] slab_pre_alloc_hook+0x51/0xc0 [ 93.343202][ T4577] __kmalloc+0x6b/0x340 [ 93.347381][ T4577] ? bpf_test_init+0xf8/0x1b0 [ 93.352521][ T4577] bpf_test_init+0xf8/0x1b0 [ 93.357305][ T4577] bpf_prog_test_run_skb+0x181/0x1190 [ 93.362709][ T4577] ? __fget_files+0x402/0x470 [ 93.367517][ T4577] ? cpu_online+0x60/0x60 [ 93.371925][ T4577] bpf_prog_test_run+0x31c/0x390 [ 93.376884][ T4577] __sys_bpf+0x5a5/0x6f0 [ 93.381184][ T4577] ? bpf_link_show_fdinfo+0x380/0x380 [ 93.386594][ T4577] __x64_sys_bpf+0x78/0x90 [ 93.391029][ T4577] do_syscall_64+0x4c/0xa0 [ 93.395468][ T4577] ? clear_bhb_loop+0x30/0x80 [ 93.400158][ T4577] ? clear_bhb_loop+0x30/0x80 [ 93.405054][ T4577] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.411486][ T4577] RIP: 0033:0x7f7ca0ec20d9 [ 93.415918][ T4577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.435822][ T4577] RSP: 002b:00007f7c9f11a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.444283][ T4577] RAX: ffffffffffffffda RBX: 00007f7ca1149fa0 RCX: 00007f7ca0ec20d9 [ 93.452276][ T4577] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 93.460307][ T4577] RBP: 00007f7c9f11a090 R08: 0000000000000000 R09: 0000000000000000 [ 93.468481][ T4577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.476484][ T4577] R13: 00007f7ca114a038 R14: 00007f7ca1149fa0 R15: 00007ffdd343c408 [ 93.484549][ T4577] [ 94.071173][ T4591] FAULT_INJECTION: forcing a failure. [ 94.071173][ T4591] name failslab, interval 1, probability 0, space 0, times 0 [ 94.130402][ T4591] CPU: 1 PID: 4591 Comm: syz.1.95 Not tainted syzkaller #0 [ 94.138027][ T4591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.148222][ T4591] Call Trace: [ 94.151541][ T4591] [ 94.154509][ T4591] dump_stack_lvl+0x188/0x250 [ 94.159259][ T4591] ? show_regs_print_info+0x20/0x20 [ 94.164504][ T4591] ? load_image+0x410/0x410 [ 94.169050][ T4591] ? __might_sleep+0xf0/0xf0 [ 94.173788][ T4591] ? __lock_acquire+0x7b50/0x7b50 [ 94.178861][ T4591] should_fail+0x383/0x4b0 [ 94.183508][ T4591] should_failslab+0x5/0x20 [ 94.188055][ T4591] slab_pre_alloc_hook+0x51/0xc0 [ 94.193064][ T4591] __kmalloc+0x6b/0x340 [ 94.197347][ T4591] ? bpf_test_init+0xf8/0x1b0 [ 94.202056][ T4591] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 94.208085][ T4591] bpf_test_init+0xf8/0x1b0 [ 94.212636][ T4591] bpf_prog_test_run_skb+0x181/0x1190 [ 94.218212][ T4591] ? lockdep_hardirqs_on+0x94/0x140 [ 94.223467][ T4591] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 94.229848][ T4591] ? cpu_online+0x60/0x60 [ 94.234223][ T4591] ? cpu_online+0x60/0x60 [ 94.238586][ T4591] bpf_prog_test_run+0x31c/0x390 [ 94.243676][ T4591] __sys_bpf+0x5a5/0x6f0 [ 94.247972][ T4591] ? bpf_link_show_fdinfo+0x380/0x380 [ 94.253430][ T4591] __x64_sys_bpf+0x78/0x90 [ 94.257933][ T4591] do_syscall_64+0x4c/0xa0 [ 94.262410][ T4591] ? clear_bhb_loop+0x30/0x80 [ 94.267209][ T4591] ? clear_bhb_loop+0x30/0x80 [ 94.271921][ T4591] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.277955][ T4591] RIP: 0033:0x7f83863d40d9 [ 94.282404][ T4591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.302378][ T4591] RSP: 002b:00007f838462c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.310954][ T4591] RAX: ffffffffffffffda RBX: 00007f838665bfa0 RCX: 00007f83863d40d9 [ 94.318977][ T4591] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 94.327172][ T4591] RBP: 00007f838462c090 R08: 0000000000000000 R09: 0000000000000000 [ 94.335198][ T4591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.343234][ T4591] R13: 00007f838665c038 R14: 00007f838665bfa0 R15: 00007ffdfe232268 [ 94.351422][ T4591] [ 96.346677][ T4593] netlink: 'syz.3.96': attribute type 4 has an invalid length. [ 96.354299][ T4593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96'. [ 96.528015][ T4596] FAULT_INJECTION: forcing a failure. [ 96.528015][ T4596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.677237][ T4596] CPU: 1 PID: 4596 Comm: syz.1.98 Not tainted syzkaller #0 [ 96.684604][ T4596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.695048][ T4596] Call Trace: [ 96.698384][ T4596] [ 96.701387][ T4596] dump_stack_lvl+0x188/0x250 [ 96.706103][ T4596] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 96.713320][ T4596] ? show_regs_print_info+0x20/0x20 [ 96.719002][ T4596] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 96.725245][ T4596] should_fail+0x383/0x4b0 [ 96.729747][ T4596] _copy_from_user+0x2e/0x170 [ 96.734486][ T4596] iovec_from_user+0x142/0x370 [ 96.739511][ T4596] __import_iovec+0x70/0x490 [ 96.744332][ T4596] import_iovec+0x6f/0xa0 [ 96.748798][ T4596] ___sys_sendmsg+0x1fd/0x2e0 [ 96.753711][ T4596] ? __sys_sendmsg+0x290/0x290 [ 96.758652][ T4596] __se_sys_sendmsg+0x1b7/0x2a0 [ 96.764520][ T4596] ? __x64_sys_sendmsg+0x80/0x80 [ 96.769509][ T4596] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.775682][ T4596] ? lockdep_hardirqs_on+0x94/0x140 [ 96.780959][ T4596] do_syscall_64+0x4c/0xa0 [ 96.785878][ T4596] ? clear_bhb_loop+0x30/0x80 [ 96.791216][ T4596] ? clear_bhb_loop+0x30/0x80 [ 96.796017][ T4596] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.802212][ T4596] RIP: 0033:0x7f83863d40d9 [ 96.806682][ T4596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.826416][ T4596] RSP: 002b:00007f838462c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.834880][ T4596] RAX: ffffffffffffffda RBX: 00007f838665bfa0 RCX: 00007f83863d40d9 [ 96.842984][ T4596] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 96.851064][ T4596] RBP: 00007f838462c090 R08: 0000000000000000 R09: 0000000000000000 [ 96.859075][ T4596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.867081][ T4596] R13: 00007f838665c038 R14: 00007f838665bfa0 R15: 00007ffdfe232268 [ 96.875104][ T4596] [ 97.066803][ T4610] netlink: 'syz.1.101': attribute type 10 has an invalid length. [ 97.133964][ T4610] device hsr0 entered promiscuous mode [ 97.392092][ T4610] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 97.421828][ T4610] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 97.493197][ T4610] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 97.515785][ T4610] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 97.647074][ T4610] syz.1.101 (4610) used greatest stack depth: 19936 bytes left [ 97.947955][ T4627] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.108'. [ 98.236876][ T4630] netlink: 128 bytes leftover after parsing attributes in process `syz.4.107'. [ 98.400665][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 98.572965][ T4630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.735368][ T4633] netlink: 'syz.4.107': attribute type 10 has an invalid length. [ 100.979725][ T4633] team0: Device wg1 is of different type [ 101.279583][ T4641] netlink: 'syz.2.111': attribute type 21 has an invalid length. [ 101.315492][ T4641] netlink: 'syz.2.111': attribute type 19 has an invalid length. [ 101.383609][ T4641] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.111'. [ 101.423247][ T4649] netlink: 'syz.3.113': attribute type 3 has an invalid length. [ 101.458838][ T4647] netlink: 15119 bytes leftover after parsing attributes in process `syz.2.111'. [ 101.470007][ T4649] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.113'. [ 101.531235][ T4648] IPv6: NLM_F_CREATE should be specified when creating new route [ 101.594178][ T4648] netlink: 1 bytes leftover after parsing attributes in process `syz.1.114'. [ 101.827495][ T4656] netlink: 'syz.2.115': attribute type 3 has an invalid length. [ 101.855038][ T4656] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.115'. [ 102.754252][ T4673] FAULT_INJECTION: forcing a failure. [ 102.754252][ T4673] name failslab, interval 1, probability 0, space 0, times 0 [ 102.812840][ T4673] CPU: 1 PID: 4673 Comm: syz.4.120 Not tainted syzkaller #0 [ 102.820259][ T4673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.830399][ T4673] Call Trace: [ 102.833721][ T4673] [ 102.836691][ T4673] dump_stack_lvl+0x188/0x250 [ 102.841623][ T4673] ? show_regs_print_info+0x20/0x20 [ 102.847227][ T4673] ? load_image+0x410/0x410 [ 102.851791][ T4673] ? __might_sleep+0xf0/0xf0 [ 102.856521][ T4673] ? __lock_acquire+0x7b50/0x7b50 [ 102.861594][ T4673] ? lockdep_hardirqs_on+0x94/0x140 [ 102.866842][ T4673] should_fail+0x383/0x4b0 [ 102.871309][ T4673] should_failslab+0x5/0x20 [ 102.875859][ T4673] slab_pre_alloc_hook+0x51/0xc0 [ 102.880838][ T4673] __kmalloc+0x6b/0x340 [ 102.885041][ T4673] ? bpf_test_init+0xf8/0x1b0 [ 102.889764][ T4673] bpf_test_init+0xf8/0x1b0 [ 102.894344][ T4673] bpf_prog_test_run_skb+0x181/0x1190 [ 102.899763][ T4673] ? __fget_files+0x402/0x470 [ 102.904577][ T4673] ? cpu_online+0x60/0x60 [ 102.909007][ T4673] bpf_prog_test_run+0x31c/0x390 [ 102.913983][ T4673] __sys_bpf+0x5a5/0x6f0 [ 102.918261][ T4673] ? bpf_link_show_fdinfo+0x380/0x380 [ 102.923694][ T4673] __x64_sys_bpf+0x78/0x90 [ 102.928191][ T4673] do_syscall_64+0x4c/0xa0 [ 102.932684][ T4673] ? clear_bhb_loop+0x30/0x80 [ 102.937399][ T4673] ? clear_bhb_loop+0x30/0x80 [ 102.942124][ T4673] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.948063][ T4673] RIP: 0033:0x7f7ca0ec20d9 [ 102.952521][ T4673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.972253][ T4673] RSP: 002b:00007f7c9f11a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.980740][ T4673] RAX: ffffffffffffffda RBX: 00007f7ca1149fa0 RCX: 00007f7ca0ec20d9 [ 102.988758][ T4673] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 102.996766][ T4673] RBP: 00007f7c9f11a090 R08: 0000000000000000 R09: 0000000000000000 [ 103.004795][ T4673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.012806][ T4673] R13: 00007f7ca114a038 R14: 00007f7ca1149fa0 R15: 00007ffdd343c408 [ 103.020833][ T4673] [ 103.676060][ T4695] FAULT_INJECTION: forcing a failure. [ 103.676060][ T4695] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 103.739926][ T4695] CPU: 0 PID: 4695 Comm: syz.1.127 Not tainted syzkaller #0 [ 103.747308][ T4695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.757411][ T4695] Call Trace: [ 103.760731][ T4695] [ 103.763705][ T4695] dump_stack_lvl+0x188/0x250 [ 103.768531][ T4695] ? show_regs_print_info+0x20/0x20 [ 103.773783][ T4695] ? load_image+0x410/0x410 [ 103.778345][ T4695] ? __lock_acquire+0x7b50/0x7b50 [ 103.783607][ T4695] ? slab_post_alloc_hook+0x4c/0x380 [ 103.789127][ T4695] ? __alloc_skb+0xf4/0x750 [ 103.793771][ T4695] ? alloc_skb_with_frags+0xa7/0x720 [ 103.799202][ T4695] ? sock_alloc_send_pskb+0x87f/0x9a0 [ 103.804641][ T4695] should_fail+0x383/0x4b0 [ 103.809123][ T4695] prepare_alloc_pages+0x1e3/0x5b0 [ 103.814496][ T4695] __alloc_pages+0x11b/0x480 [ 103.819585][ T4695] ? zone_statistics+0x170/0x170 [ 103.824614][ T4695] kmalloc_large_node+0x7d/0x1a0 [ 103.829622][ T4695] __kmalloc_node_track_caller+0x219/0x3a0 [ 103.835569][ T4695] ? alloc_skb_with_frags+0xa7/0x720 [ 103.841172][ T4695] ? __alloc_skb+0xf4/0x750 [ 103.845722][ T4695] ? alloc_skb_with_frags+0xa7/0x720 [ 103.851150][ T4695] __alloc_skb+0x22c/0x750 [ 103.855622][ T4695] alloc_skb_with_frags+0xa7/0x720 [ 103.860808][ T4695] sock_alloc_send_pskb+0x87f/0x9a0 [ 103.866094][ T4695] ? sock_kzfree_s+0x50/0x50 [ 103.870762][ T4695] tun_get_user+0x8f7/0x3b60 [ 103.875837][ T4695] ? perf_trace_lock+0x301/0x390 [ 103.880946][ T4695] ? trace_event_raw_event_lock+0x250/0x250 [ 103.887036][ T4695] ? tun_ring_recv+0xc90/0xc90 [ 103.892262][ T4695] ? rcu_lock_release+0x5/0x20 [ 103.897093][ T4695] ? __lock_acquire+0x7b50/0x7b50 [ 103.902194][ T4695] ? trace_event_raw_event_lock+0x250/0x250 [ 103.908174][ T4695] tun_chr_write_iter+0x112/0x1e0 [ 103.913250][ T4695] vfs_write+0x748/0xd70 [ 103.917555][ T4695] ? file_end_write+0x250/0x250 [ 103.922470][ T4695] ? __fget_files+0x402/0x470 [ 103.927203][ T4695] ? __fdget_pos+0x1e2/0x370 [ 103.931833][ T4695] ? ksys_write+0x70/0x260 [ 103.936298][ T4695] ksys_write+0x153/0x260 [ 103.940675][ T4695] ? __ia32_sys_read+0x80/0x80 [ 103.945523][ T4695] ? lockdep_hardirqs_on+0x94/0x140 [ 103.950872][ T4695] do_syscall_64+0x4c/0xa0 [ 103.955419][ T4695] ? clear_bhb_loop+0x30/0x80 [ 103.960228][ T4695] ? clear_bhb_loop+0x30/0x80 [ 103.964952][ T4695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.970883][ T4695] RIP: 0033:0x7f83863d40d9 [ 103.975341][ T4695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.995079][ T4695] RSP: 002b:00007f838462c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.003548][ T4695] RAX: ffffffffffffffda RBX: 00007f838665bfa0 RCX: 00007f83863d40d9 [ 104.011657][ T4695] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 00000000000000c8 [ 104.019690][ T4695] RBP: 00007f838462c090 R08: 0000000000000000 R09: 0000000000000000 [ 104.027700][ T4695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.035747][ T4695] R13: 00007f838665c038 R14: 00007f838665bfa0 R15: 00007ffdfe232268 [ 104.043795][ T4695] [ 107.089127][ T4730] FAULT_INJECTION: forcing a failure. [ 107.089127][ T4730] name failslab, interval 1, probability 0, space 0, times 0 [ 107.112623][ T4730] CPU: 1 PID: 4730 Comm: syz.1.137 Not tainted syzkaller #0 [ 107.119980][ T4730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.130078][ T4730] Call Trace: [ 107.133407][ T4730] [ 107.136364][ T4730] dump_stack_lvl+0x188/0x250 [ 107.141099][ T4730] ? show_regs_print_info+0x20/0x20 [ 107.146347][ T4730] ? load_image+0x410/0x410 [ 107.151024][ T4730] ? __might_sleep+0xf0/0xf0 [ 107.155649][ T4730] ? __lock_acquire+0x7b50/0x7b50 [ 107.160744][ T4730] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 107.166769][ T4730] should_fail+0x383/0x4b0 [ 107.171236][ T4730] should_failslab+0x5/0x20 [ 107.175784][ T4730] slab_pre_alloc_hook+0x51/0xc0 [ 107.180773][ T4730] __kmalloc+0x6b/0x340 [ 107.185053][ T4730] ? bpf_test_init+0xf8/0x1b0 [ 107.189775][ T4730] bpf_test_init+0xf8/0x1b0 [ 107.194321][ T4730] bpf_prog_test_run_skb+0x181/0x1190 [ 107.199752][ T4730] ? __fget_files+0x402/0x470 [ 107.204474][ T4730] ? cpu_online+0x60/0x60 [ 107.208839][ T4730] bpf_prog_test_run+0x31c/0x390 [ 107.213825][ T4730] __sys_bpf+0x5a5/0x6f0 [ 107.218109][ T4730] ? bpf_link_show_fdinfo+0x380/0x380 [ 107.223568][ T4730] __x64_sys_bpf+0x78/0x90 [ 107.228464][ T4730] do_syscall_64+0x4c/0xa0 [ 107.232948][ T4730] ? clear_bhb_loop+0x30/0x80 [ 107.237660][ T4730] ? clear_bhb_loop+0x30/0x80 [ 107.242405][ T4730] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.248332][ T4730] RIP: 0033:0x7f83863d40d9 [ 107.252784][ T4730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.272510][ T4730] RSP: 002b:00007f838462c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.281052][ T4730] RAX: ffffffffffffffda RBX: 00007f838665bfa0 RCX: 00007f83863d40d9 [ 107.289067][ T4730] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 107.297161][ T4730] RBP: 00007f838462c090 R08: 0000000000000000 R09: 0000000000000000 [ 107.305176][ T4730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.313192][ T4730] R13: 00007f838665c038 R14: 00007f838665bfa0 R15: 00007ffdfe232268 [ 107.321244][ T4730] [ 109.687747][ T4745] FAULT_INJECTION: forcing a failure. [ 109.687747][ T4745] name failslab, interval 1, probability 0, space 0, times 0 [ 109.781332][ T4745] CPU: 1 PID: 4745 Comm: syz.1.142 Not tainted syzkaller #0 [ 109.788790][ T4745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.798897][ T4745] Call Trace: [ 109.802219][ T4745] [ 109.805194][ T4745] dump_stack_lvl+0x188/0x250 [ 109.809926][ T4745] ? show_regs_print_info+0x20/0x20 [ 109.815193][ T4745] ? load_image+0x410/0x410 [ 109.819760][ T4745] ? __might_sleep+0xf0/0xf0 [ 109.824396][ T4745] ? __lock_acquire+0x7b50/0x7b50 [ 109.829473][ T4745] should_fail+0x383/0x4b0 [ 109.833951][ T4745] should_failslab+0x5/0x20 [ 109.838509][ T4745] slab_pre_alloc_hook+0x51/0xc0 [ 109.843489][ T4745] kmem_cache_alloc_node+0x47/0x2c0 [ 109.848722][ T4745] ? __alloc_skb+0xf4/0x750 [ 109.853271][ T4745] __alloc_skb+0xf4/0x750 [ 109.857635][ T4745] alloc_skb_with_frags+0xa7/0x720 [ 109.862802][ T4745] ? mark_lock+0x94/0x320 [ 109.867161][ T4745] sock_alloc_send_pskb+0x87f/0x9a0 [ 109.872412][ T4745] ? sock_kzfree_s+0x50/0x50 [ 109.877042][ T4745] tun_get_user+0x8f7/0x3b60 [ 109.881676][ T4745] ? tun_ring_recv+0xc90/0xc90 [ 109.886474][ T4745] ? rcu_lock_release+0x5/0x20 [ 109.891295][ T4745] ? __lock_acquire+0x7b50/0x7b50 [ 109.896373][ T4745] tun_chr_write_iter+0x112/0x1e0 [ 109.901432][ T4745] vfs_write+0x748/0xd70 [ 109.905709][ T4745] ? file_end_write+0x250/0x250 [ 109.910591][ T4745] ? __fget_files+0x402/0x470 [ 109.915300][ T4745] ? __fdget_pos+0x1e2/0x370 [ 109.919954][ T4745] ? ksys_write+0x70/0x260 [ 109.924396][ T4745] ksys_write+0x153/0x260 [ 109.928756][ T4745] ? __ia32_sys_read+0x80/0x80 [ 109.933555][ T4745] ? lockdep_hardirqs_on+0x94/0x140 [ 109.938805][ T4745] do_syscall_64+0x4c/0xa0 [ 109.943250][ T4745] ? clear_bhb_loop+0x30/0x80 [ 109.947959][ T4745] ? clear_bhb_loop+0x30/0x80 [ 109.952666][ T4745] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.958585][ T4745] RIP: 0033:0x7f83863d40d9 [ 109.963028][ T4745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.982917][ T4745] RSP: 002b:00007f838462c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.991531][ T4745] RAX: ffffffffffffffda RBX: 00007f838665bfa0 RCX: 00007f83863d40d9 [ 109.999690][ T4745] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 110.007687][ T4745] RBP: 00007f838462c090 R08: 0000000000000000 R09: 0000000000000000 [ 110.015766][ T4745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.023763][ T4745] R13: 00007f838665c038 R14: 00007f838665bfa0 R15: 00007ffdfe232268 [ 110.031872][ T4745] [ 110.248747][ T4736] chnl_net:caif_netlink_parms(): no params data found [ 110.825391][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.849733][ T4778] FAULT_INJECTION: forcing a failure. [ 110.849733][ T4778] name failslab, interval 1, probability 0, space 0, times 0 [ 110.863317][ T4778] CPU: 0 PID: 4778 Comm: syz.4.148 Not tainted syzkaller #0 [ 110.870652][ T4778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.880752][ T4778] Call Trace: [ 110.884067][ T4778] [ 110.885971][ T4736] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.887065][ T4778] dump_stack_lvl+0x188/0x250 [ 110.898805][ T4778] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 110.905047][ T4778] ? show_regs_print_info+0x20/0x20 [ 110.910295][ T4778] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 110.916517][ T4778] ? audit_tree_destroy_watch+0x20/0x20 [ 110.922112][ T4778] should_fail+0x383/0x4b0 [ 110.926584][ T4778] should_failslab+0x5/0x20 [ 110.931212][ T4778] slab_pre_alloc_hook+0x51/0xc0 [ 110.936197][ T4778] __kmalloc+0x6b/0x340 [ 110.940418][ T4778] ? bpf_test_init+0xf8/0x1b0 [ 110.945140][ T4778] bpf_test_init+0xf8/0x1b0 [ 110.949688][ T4778] bpf_prog_test_run_skb+0x181/0x1190 [ 110.955110][ T4778] ? __fget_files+0x402/0x470 [ 110.956219][ T4736] device bridge_slave_0 entered promiscuous mode [ 110.959939][ T4778] ? cpu_online+0x60/0x60 [ 110.970648][ T4778] bpf_prog_test_run+0x31c/0x390 [ 110.975635][ T4778] __sys_bpf+0x5a5/0x6f0 [ 110.979953][ T4778] ? bpf_link_show_fdinfo+0x380/0x380 [ 110.985389][ T4778] __x64_sys_bpf+0x78/0x90 [ 110.989840][ T4778] do_syscall_64+0x4c/0xa0 [ 110.994385][ T4778] ? clear_bhb_loop+0x30/0x80 [ 110.999293][ T4778] ? clear_bhb_loop+0x30/0x80 [ 111.004001][ T4778] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.009929][ T4778] RIP: 0033:0x7f7ca0ec20d9 [ 111.014374][ T4778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.034016][ T4778] RSP: 002b:00007f7c9f11a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 111.042500][ T4778] RAX: ffffffffffffffda RBX: 00007f7ca1149fa0 RCX: 00007f7ca0ec20d9 [ 111.050517][ T4778] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 111.058514][ T4778] RBP: 00007f7c9f11a090 R08: 0000000000000000 R09: 0000000000000000 [ 111.066543][ T4778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.074544][ T4778] R13: 00007f7ca114a038 R14: 00007f7ca1149fa0 R15: 00007ffdd343c408 [ 111.082560][ T4778] [ 111.107656][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 111.147398][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.154971][ T4736] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.163423][ T4736] device bridge_slave_1 entered promiscuous mode [ 111.237681][ T4736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.281741][ T4781] netlink: 'syz.3.150': attribute type 27 has an invalid length. [ 111.320677][ T4781] netlink: 'syz.3.150': attribute type 25 has an invalid length. [ 111.361183][ T4736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.412286][ T4736] team0: Port device team_slave_0 added [ 111.457271][ T4736] team0: Port device team_slave_1 added [ 113.145019][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 114.558087][ T4791] netlink: 'syz.3.154': attribute type 21 has an invalid length. [ 114.585260][ T4791] netlink: 128 bytes leftover after parsing attributes in process `syz.3.154'. [ 114.594388][ T4791] netlink: 3 bytes leftover after parsing attributes in process `syz.3.154'. [ 114.637066][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.644075][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.775092][ T4736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.806079][ T4798] FAULT_INJECTION: forcing a failure. [ 114.806079][ T4798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.825061][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.838788][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.867552][ T4798] CPU: 1 PID: 4798 Comm: syz.3.156 Not tainted syzkaller #0 [ 114.874904][ T4798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.885016][ T4798] Call Trace: [ 114.888338][ T4798] [ 114.891311][ T4798] dump_stack_lvl+0x188/0x250 [ 114.896088][ T4798] ? show_regs_print_info+0x20/0x20 [ 114.901480][ T4798] ? load_image+0x410/0x410 [ 114.906061][ T4798] ? __lock_acquire+0x7b50/0x7b50 [ 114.911181][ T4798] should_fail+0x383/0x4b0 [ 114.915767][ T4798] _copy_from_user+0x2e/0x170 [ 114.920596][ T4798] iovec_from_user+0x142/0x370 [ 114.925425][ T4798] __import_iovec+0x70/0x490 [ 114.930093][ T4798] import_iovec+0x6f/0xa0 [ 114.934488][ T4798] ___sys_sendmsg+0x1fd/0x2e0 [ 114.939248][ T4798] ? __sys_sendmsg+0x290/0x290 [ 114.944099][ T4798] ? trace_event_raw_event_lock+0x250/0x250 [ 114.950226][ T4798] __se_sys_sendmsg+0x1b7/0x2a0 [ 114.955134][ T4798] ? __x64_sys_sendmsg+0x80/0x80 [ 114.960112][ T4798] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 114.966183][ T4798] ? lockdep_hardirqs_on+0x94/0x140 [ 114.970627][ T4736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.971531][ T4798] do_syscall_64+0x4c/0xa0 [ 114.986473][ T4798] ? clear_bhb_loop+0x30/0x80 [ 114.991215][ T4798] ? clear_bhb_loop+0x30/0x80 [ 114.995958][ T4798] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.001908][ T4798] RIP: 0033:0x7f6de8a6e0d9 [ 115.006458][ T4798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.026203][ T4798] RSP: 002b:00007f6de6cc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.034701][ T4798] RAX: ffffffffffffffda RBX: 00007f6de8cf5fa0 RCX: 00007f6de8a6e0d9 [ 115.042735][ T4798] RDX: 0000000024044084 RSI: 0000200000000040 RDI: 0000000000000004 [ 115.050853][ T4798] RBP: 00007f6de6cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 115.058881][ T4798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.066904][ T4798] R13: 00007f6de8cf6038 R14: 00007f6de8cf5fa0 R15: 00007ffe39ce6658 [ 115.074973][ T4798] [ 115.224868][ T1108] Bluetooth: hci5: command 0x040f tx timeout [ 115.289024][ T4736] device hsr_slave_0 entered promiscuous mode [ 115.374197][ T4736] device hsr_slave_1 entered promiscuous mode [ 115.429770][ T4736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.441703][ T4736] Cannot create hsr debugfs directory [ 115.643252][ T4812] device syzkaller0 entered promiscuous mode [ 115.679122][ T4815] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 115.693483][ T4814] device syzkaller0 entered promiscuous mode [ 115.849226][ T4820] FAULT_INJECTION: forcing a failure. [ 115.849226][ T4820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.896396][ T4820] CPU: 0 PID: 4820 Comm: syz.1.164 Not tainted syzkaller #0 [ 115.903780][ T4820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.913874][ T4820] Call Trace: [ 115.917186][ T4820] [ 115.920146][ T4820] dump_stack_lvl+0x188/0x250 [ 115.924873][ T4820] ? show_regs_print_info+0x20/0x20 [ 115.930143][ T4820] ? load_image+0x410/0x410 [ 115.934692][ T4820] ? __lock_acquire+0x7b50/0x7b50 [ 115.939759][ T4820] ? mark_lock+0x94/0x320 [ 115.944133][ T4820] should_fail+0x383/0x4b0 [ 115.948592][ T4820] _copy_from_iter+0x234/0x1160 [ 115.953497][ T4820] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 115.958934][ T4820] tun_get_user+0x1f6/0x3b60 [ 115.963578][ T4820] ? trace_event_raw_event_lock+0x250/0x250 [ 115.969546][ T4820] ? tun_ring_recv+0xc90/0xc90 [ 115.974495][ T4820] ? rcu_lock_release+0x5/0x20 [ 115.979315][ T4820] ? __lock_acquire+0x7b50/0x7b50 [ 115.984383][ T4820] ? trace_event_raw_event_lock+0x250/0x250 [ 115.990346][ T4820] tun_chr_write_iter+0x112/0x1e0 [ 115.995412][ T4820] vfs_write+0x748/0xd70 [ 115.999797][ T4820] ? file_end_write+0x250/0x250 [ 116.004697][ T4820] ? __fget_files+0x402/0x470 [ 116.009464][ T4820] ? __fdget_pos+0x1e2/0x370 [ 116.014088][ T4820] ? ksys_write+0x70/0x260 [ 116.018544][ T4820] ksys_write+0x153/0x260 [ 116.022916][ T4820] ? __ia32_sys_read+0x80/0x80 [ 116.027858][ T4820] ? lockdep_hardirqs_on+0x94/0x140 [ 116.033251][ T4820] do_syscall_64+0x4c/0xa0 [ 116.038052][ T4820] ? clear_bhb_loop+0x30/0x80 [ 116.042762][ T4820] ? clear_bhb_loop+0x30/0x80 [ 116.047595][ T4820] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.053555][ T4820] RIP: 0033:0x7f83863d40d9 [ 116.058013][ T4820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.077659][ T4820] RSP: 002b:00007f838462c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.086372][ T4820] RAX: ffffffffffffffda RBX: 00007f838665bfa0 RCX: 00007f83863d40d9 [ 116.094358][ T4820] RDX: 000000000000ffdd RSI: 0000200000000100 RDI: 0000000000000003 [ 116.102346][ T4820] RBP: 00007f838462c090 R08: 0000000000000000 R09: 0000000000000000 [ 116.110425][ T4820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.118444][ T4820] R13: 00007f838665c038 R14: 00007f838665bfa0 R15: 00007ffdfe232268 [ 116.126493][ T4820] [ 116.161579][ T4825] netlink: 'syz.2.165': attribute type 21 has an invalid length. [ 116.171674][ T4825] netlink: 128 bytes leftover after parsing attributes in process `syz.2.165'. [ 116.191569][ T4825] netlink: 3 bytes leftover after parsing attributes in process `syz.2.165'. [ 116.205256][ T4823] device syzkaller0 entered promiscuous mode [ 116.286519][ T4270] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.393859][ T4837] FAULT_INJECTION: forcing a failure. [ 116.393859][ T4837] name failslab, interval 1, probability 0, space 0, times 0 [ 116.420339][ T4837] CPU: 0 PID: 4837 Comm: syz.4.169 Not tainted syzkaller #0 [ 116.427790][ T4837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.438034][ T4837] Call Trace: [ 116.441449][ T4837] [ 116.444455][ T4837] dump_stack_lvl+0x188/0x250 [ 116.449631][ T4837] ? show_regs_print_info+0x20/0x20 [ 116.455534][ T4837] ? load_image+0x410/0x410 [ 116.460710][ T4837] ? __lock_acquire+0x7b50/0x7b50 [ 116.466241][ T4837] should_fail+0x383/0x4b0 [ 116.470720][ T4837] should_failslab+0x5/0x20 [ 116.475407][ T4837] slab_pre_alloc_hook+0x51/0xc0 [ 116.480693][ T4837] kmem_cache_alloc_trace+0x47/0x290 [ 116.486764][ T4837] ? htab_map_alloc+0x9a/0x1670 [ 116.491670][ T4837] htab_map_alloc+0x9a/0x1670 [ 116.496395][ T4837] ? apparmor_capable+0x12c/0x190 [ 116.501531][ T4837] ? bpf_lsm_capable+0x5/0x10 [ 116.506279][ T4837] ? security_capable+0x85/0xb0 [ 116.511286][ T4837] ? capable+0x84/0xe0 [ 116.515573][ T4837] ? htab_map_alloc_check+0x3e0/0x4d0 [ 116.520994][ T4837] map_create+0x481/0x2330 [ 116.525455][ T4837] ? bpf_lsm_bpf+0x5/0x10 [ 116.530098][ T4837] __sys_bpf+0x30a/0x6f0 [ 116.534381][ T4837] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 116.541135][ T4837] ? bpf_link_show_fdinfo+0x380/0x380 [ 116.546552][ T4837] ? rcu_nmi_exit+0x6f/0xf0 [ 116.551156][ T4837] __x64_sys_bpf+0x78/0x90 [ 116.555626][ T4837] do_syscall_64+0x4c/0xa0 [ 116.560084][ T4837] ? clear_bhb_loop+0x30/0x80 [ 116.564841][ T4837] ? clear_bhb_loop+0x30/0x80 [ 116.569678][ T4837] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.575712][ T4837] RIP: 0033:0x7f7ca0ec20d9 [ 116.580174][ T4837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.599829][ T4837] RSP: 002b:00007f7c9f11a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.608299][ T4837] RAX: ffffffffffffffda RBX: 00007f7ca1149fa0 RCX: 00007f7ca0ec20d9 [ 116.616324][ T4837] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 0020000000000000 [ 116.624377][ T4837] RBP: 00007f7c9f11a090 R08: 0000000000000000 R09: 0000000000000000 [ 116.632402][ T4837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.640423][ T4837] R13: 00007f7ca114a038 R14: 00007f7ca1149fa0 R15: 00007ffdd343c408 [ 116.648720][ T4837] [ 116.667795][ T4270] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.735086][ T4270] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.813154][ T4270] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.322963][ T4231] Bluetooth: hci5: command 0x0419 tx timeout [ 117.587029][ T4736] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.628575][ T4736] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.697473][ T4866] netlink: 40 bytes leftover after parsing attributes in process `syz.4.176'. [ 117.715379][ T4736] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.755744][ T4736] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.807277][ T4869] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.177'. [ 117.867802][ T4865] netlink: 'syz.2.177': attribute type 11 has an invalid length. [ 117.901566][ T4865] netlink: 140 bytes leftover after parsing attributes in process `syz.2.177'. [ 118.234083][ T4875] netlink: 40 bytes leftover after parsing attributes in process `syz.3.179'. [ 119.825236][ T4736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.076012][ T4736] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.137237][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.156187][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.614263][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.645861][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.665691][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.672824][ T4244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.415449][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.423991][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.488694][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.516578][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.523779][ T4244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.699726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.741236][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.793405][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.803481][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.834383][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.885292][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.894302][ T4930] FAULT_INJECTION: forcing a failure. [ 121.894302][ T4930] name failslab, interval 1, probability 0, space 0, times 0 [ 121.952323][ T4930] CPU: 1 PID: 4930 Comm: syz.2.190 Not tainted syzkaller #0 [ 121.959695][ T4930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.969906][ T4930] Call Trace: [ 121.973226][ T4930] [ 121.976201][ T4930] dump_stack_lvl+0x188/0x250 [ 121.981054][ T4930] ? show_regs_print_info+0x20/0x20 [ 121.986393][ T4930] ? load_image+0x410/0x410 [ 121.990952][ T4930] ? __might_sleep+0xf0/0xf0 [ 121.995618][ T4930] ? __lock_acquire+0x7b50/0x7b50 [ 122.000722][ T4930] should_fail+0x383/0x4b0 [ 122.005297][ T4930] should_failslab+0x5/0x20 [ 122.009841][ T4930] slab_pre_alloc_hook+0x51/0xc0 [ 122.014831][ T4930] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 122.020594][ T4930] ? __get_vm_area_node+0x119/0x2d0 [ 122.025849][ T4930] __get_vm_area_node+0x119/0x2d0 [ 122.030940][ T4930] __vmalloc_node_range+0xef/0x8b0 [ 122.036114][ T4930] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 122.041710][ T4930] ? end_current_label_crit_section+0x170/0x170 [ 122.048000][ T4930] ? __lock_acquire+0x7b50/0x7b50 [ 122.053077][ T4930] ? perf_trace_lock_acquire+0xed/0x3f0 [ 122.058677][ T4930] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 122.064272][ T4930] __vmalloc+0x76/0x80 [ 122.068400][ T4930] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 122.074113][ T4930] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 122.079538][ T4930] bpf_prog_alloc+0x1a/0x1e0 [ 122.084183][ T4930] bpf_prog_load+0x7d1/0x14e0 [ 122.088921][ T4930] ? map_freeze+0x360/0x360 [ 122.093476][ T4930] ? __might_fault+0xb7/0x110 [ 122.098206][ T4930] ? __might_fault+0xb3/0x110 [ 122.102928][ T4930] ? bpf_lsm_bpf+0x5/0x10 [ 122.107300][ T4930] ? security_bpf+0x7a/0xa0 [ 122.112218][ T4930] __sys_bpf+0x532/0x6f0 [ 122.116524][ T4930] ? bpf_link_show_fdinfo+0x380/0x380 [ 122.122023][ T4930] __x64_sys_bpf+0x78/0x90 [ 122.126798][ T4930] do_syscall_64+0x4c/0xa0 [ 122.131531][ T4930] ? clear_bhb_loop+0x30/0x80 [ 122.136273][ T4930] ? clear_bhb_loop+0x30/0x80 [ 122.141024][ T4930] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.146967][ T4930] RIP: 0033:0x7f1c016c00d9 [ 122.151433][ T4930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.171086][ T4930] RSP: 002b:00007f1bff918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.179639][ T4930] RAX: ffffffffffffffda RBX: 00007f1c01947fa0 RCX: 00007f1c016c00d9 [ 122.187707][ T4930] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 122.195742][ T4930] RBP: 00007f1bff918090 R08: 0000000000000000 R09: 0000000000000000 [ 122.203858][ T4930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.212060][ T4930] R13: 00007f1c01948038 R14: 00007f1c01947fa0 R15: 00007fffea602498 [ 122.220103][ T4930] [ 122.248086][ T4930] syz.2.190: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 122.254055][ T4932] netlink: 76 bytes leftover after parsing attributes in process `syz.1.189'. [ 122.275390][ T4930] CPU: 1 PID: 4930 Comm: syz.2.190 Not tainted syzkaller #0 [ 122.283010][ T4930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.293116][ T4930] Call Trace: [ 122.296473][ T4930] [ 122.299452][ T4930] dump_stack_lvl+0x188/0x250 [ 122.304177][ T4930] ? rcu_lock_release+0x5/0x20 [ 122.308981][ T4930] ? show_regs_print_info+0x20/0x20 [ 122.314234][ T4930] ? load_image+0x410/0x410 [ 122.318879][ T4930] ? __rcu_read_unlock+0x78/0xd0 [ 122.324046][ T4930] warn_alloc+0x245/0x320 [ 122.328449][ T4930] ? zone_watermark_ok_safe+0x250/0x250 [ 122.334060][ T4930] ? __get_vm_area_node+0x2b5/0x2d0 [ 122.339320][ T4930] __vmalloc_node_range+0x2b1/0x8b0 [ 122.344572][ T4930] ? end_current_label_crit_section+0x170/0x170 [ 122.351001][ T4930] ? __lock_acquire+0x7b50/0x7b50 [ 122.356098][ T4930] ? perf_trace_lock_acquire+0xed/0x3f0 [ 122.361721][ T4930] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 122.367416][ T4930] __vmalloc+0x76/0x80 [ 122.371539][ T4930] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 122.377222][ T4930] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 122.382654][ T4930] bpf_prog_alloc+0x1a/0x1e0 [ 122.387297][ T4930] bpf_prog_load+0x7d1/0x14e0 [ 122.392046][ T4930] ? map_freeze+0x360/0x360 [ 122.396605][ T4930] ? __might_fault+0xb7/0x110 [ 122.400462][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.401347][ T4930] ? __might_fault+0xb3/0x110 [ 122.413250][ T4930] ? bpf_lsm_bpf+0x5/0x10 [ 122.417633][ T4930] ? security_bpf+0x7a/0xa0 [ 122.422195][ T4930] __sys_bpf+0x532/0x6f0 [ 122.426487][ T4930] ? bpf_link_show_fdinfo+0x380/0x380 [ 122.428327][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.431930][ T4930] __x64_sys_bpf+0x78/0x90 [ 122.431963][ T4930] do_syscall_64+0x4c/0xa0 [ 122.448754][ T4930] ? clear_bhb_loop+0x30/0x80 [ 122.453792][ T4930] ? clear_bhb_loop+0x30/0x80 [ 122.458520][ T4930] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.464453][ T4930] RIP: 0033:0x7f1c016c00d9 [ 122.468906][ T4930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.489255][ T4930] RSP: 002b:00007f1bff918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.497820][ T4930] RAX: ffffffffffffffda RBX: 00007f1c01947fa0 RCX: 00007f1c016c00d9 [ 122.505839][ T4930] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 122.514043][ T4930] RBP: 00007f1bff918090 R08: 0000000000000000 R09: 0000000000000000 [ 122.518081][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.522440][ T4930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.538448][ T4930] R13: 00007f1c01948038 R14: 00007f1c01947fa0 R15: 00007fffea602498 [ 122.546482][ T4930] [ 122.658301][ T4930] Mem-Info: [ 122.671976][ T4930] active_anon:271 inactive_anon:8625 isolated_anon:0 [ 122.671976][ T4930] active_file:14995 inactive_file:38171 isolated_file:0 [ 122.671976][ T4930] unevictable:768 dirty:346 writeback:0 [ 122.671976][ T4930] slab_reclaimable:20071 slab_unreclaimable:95806 [ 122.671976][ T4930] mapped:29534 shmem:1638 pagetables:585 bounce:0 [ 122.671976][ T4930] kernel_misc_reclaimable:0 [ 122.671976][ T4930] free:1375106 free_pcp:11799 free_cma:0 [ 122.719619][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.745669][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.771178][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.780338][ T4930] Node 0 active_anon:1052kB inactive_anon:33888kB active_file:59776kB inactive_file:152684kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118136kB dirty:1384kB writeback:0kB shmem:4472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10332kB pagetables:2340kB all_unreclaimable? no [ 122.823068][ T4930] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 122.871607][ T4942] FAULT_INJECTION: forcing a failure. [ 122.871607][ T4942] name failslab, interval 1, probability 0, space 0, times 0 [ 122.907030][ T4942] CPU: 1 PID: 4942 Comm: syz.3.194 Not tainted syzkaller #0 [ 122.914399][ T4942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.924499][ T4942] Call Trace: [ 122.927822][ T4942] [ 122.930811][ T4942] dump_stack_lvl+0x188/0x250 [ 122.935642][ T4942] ? show_regs_print_info+0x20/0x20 [ 122.941335][ T4942] ? load_image+0x410/0x410 [ 122.945896][ T4942] ? __might_sleep+0xf0/0xf0 [ 122.950541][ T4942] ? __lock_acquire+0x7b50/0x7b50 [ 122.955623][ T4942] should_fail+0x383/0x4b0 [ 122.960107][ T4942] should_failslab+0x5/0x20 [ 122.964668][ T4942] slab_pre_alloc_hook+0x51/0xc0 [ 122.969654][ T4942] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 122.975420][ T4942] ? __get_vm_area_node+0x119/0x2d0 [ 122.980759][ T4942] __get_vm_area_node+0x119/0x2d0 [ 122.986020][ T4942] __vmalloc_node_range+0xef/0x8b0 [ 122.991195][ T4942] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 122.996803][ T4942] ? end_current_label_crit_section+0x170/0x170 [ 123.003102][ T4942] ? __lock_acquire+0x7b50/0x7b50 [ 123.008185][ T4942] ? __lock_acquire+0x13dc/0x7b50 [ 123.013269][ T4942] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 123.018907][ T4942] __vmalloc+0x76/0x80 [ 123.023039][ T4942] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 123.028718][ T4942] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 123.034184][ T4942] bpf_prog_alloc+0x1a/0x1e0 [ 123.038838][ T4942] bpf_prog_load+0x7d1/0x14e0 [ 123.043724][ T4942] ? map_freeze+0x360/0x360 [ 123.048281][ T4942] ? __might_fault+0xb7/0x110 [ 123.053020][ T4942] ? __might_fault+0xb3/0x110 [ 123.057757][ T4942] ? bpf_lsm_bpf+0x5/0x10 [ 123.062136][ T4942] ? security_bpf+0x7a/0xa0 [ 123.066690][ T4942] __sys_bpf+0x532/0x6f0 [ 123.070983][ T4942] ? bpf_link_show_fdinfo+0x380/0x380 [ 123.076512][ T4942] __x64_sys_bpf+0x78/0x90 [ 123.080990][ T4942] do_syscall_64+0x4c/0xa0 [ 123.085556][ T4942] ? clear_bhb_loop+0x30/0x80 [ 123.090285][ T4942] ? clear_bhb_loop+0x30/0x80 [ 123.095023][ T4942] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.100977][ T4942] RIP: 0033:0x7f6de8a6e0d9 [ 123.105437][ T4942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.125085][ T4942] RSP: 002b:00007f6de6cc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.133588][ T4942] RAX: ffffffffffffffda RBX: 00007f6de8cf5fa0 RCX: 00007f6de8a6e0d9 [ 123.141716][ T4942] RDX: 0000000000000054 RSI: 00002000000008c0 RDI: 0000000000000005 [ 123.149724][ T4942] RBP: 00007f6de6cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 123.157746][ T4942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.165800][ T4942] R13: 00007f6de8cf6038 R14: 00007f6de8cf5fa0 R15: 00007ffe39ce6658 [ 123.173815][ T4942] [ 123.187404][ T4930] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 123.324936][ T4930] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 123.330792][ T4930] Node 0 DMA32 free:1569352kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1060kB inactive_anon:34312kB active_file:59792kB inactive_file:152668kB unevictable:1536kB writepending:1388kB present:3129332kB managed:2606516kB mlocked:0kB bounce:0kB free_pcp:40848kB local_pcp:20560kB free_cma:0kB [ 123.434737][ T4930] lowmem_reserve[]: 0 0 0 0 0 [ 123.439551][ T4930] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 123.649652][ T4930] lowmem_reserve[]: 0 0 0 0 0 [ 123.654457][ T4930] Node 1 Normal free:3916300kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:6936kB local_pcp:6776kB free_cma:0kB [ 123.779749][ T4930] lowmem_reserve[]: 0 0 0 0 0 [ 123.784565][ T4930] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 123.894645][ T4270] device hsr_slave_0 left promiscuous mode [ 123.904966][ T4930] Node 0 DMA32: 358*4kB (UME) 901*8kB (UME) 686*16kB (UME) 1716*32kB (UME) 948*64kB (UME) 294*128kB (UME) 112*256kB (UME) 37*512kB (UME) 16*1024kB (UME) 4*2048kB (ME) 323*4096kB (M) = 1568032kB [ 123.977036][ T4270] device hsr_slave_1 left promiscuous mode [ 124.017053][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.032516][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.044965][ T4930] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 124.061195][ T4930] Node 1 Normal: 109*4kB (UME) 27*8kB (UME) 22*16kB (UME) 138*32kB (UME) 62*64kB (UME) 20*128kB (UME) 6*256kB (U) 3*512kB (UE) 0*1024kB 3*2048kB (UME) 951*4096kB (M) = 3916460kB [ 124.099900][ T4930] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.110092][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.122594][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.147290][ T4930] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 124.161065][ T4270] device bridge_slave_1 left promiscuous mode [ 124.170952][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.180454][ T4930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.194045][ T4930] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 124.207019][ T4270] device bridge_slave_0 left promiscuous mode [ 124.220153][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.229164][ T4930] 54804 total pagecache pages [ 124.233912][ T4930] 0 pages in swap cache [ 124.270753][ T4930] Swap cache stats: add 0, delete 0, find 0/0 [ 124.285527][ T4930] Free swap = 124996kB [ 124.291308][ T4930] Total swap = 124996kB [ 124.303700][ T4930] 2097051 pages RAM [ 124.308492][ T4270] device veth1_macvtap left promiscuous mode [ 124.314108][ T4930] 0 pages HighMem/MovableOnly [ 124.322039][ T4930] 411499 pages reserved [ 124.330261][ T4270] device veth0_macvtap left promiscuous mode [ 124.340261][ T4930] 0 pages cma reserved [ 124.353194][ T4270] device veth1_vlan left promiscuous mode [ 124.374457][ T4270] device veth0_vlan left promiscuous mode [ 124.849367][ T4270] team0 (unregistering): Port device team_slave_1 removed [ 124.868149][ T4270] team0 (unregistering): Port device team_slave_0 removed [ 124.883678][ T4270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.908915][ T4270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.013037][ T4270] bond0 (unregistering): Released all slaves [ 125.166990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.185632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.261653][ T4736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.419354][ T5002] syz.2.203 uses obsolete (PF_INET,SOCK_PACKET) [ 126.061866][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.071850][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.151227][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.173504][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.191830][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.212846][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.238710][ T5032] netlink: 830 bytes leftover after parsing attributes in process `syz.2.211'. [ 126.266956][ T4736] device veth0_vlan entered promiscuous mode [ 126.279639][ T5035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.211'. [ 126.331876][ T4736] device veth1_vlan entered promiscuous mode [ 126.468041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.487746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.550855][ T4736] device veth0_macvtap entered promiscuous mode [ 126.659948][ T4736] device veth1_macvtap entered promiscuous mode [ 126.932668][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.976037][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.004861][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.033999][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.054730][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.075465][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.098223][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.127026][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.160716][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.204302][ T5051] netlink: 48 bytes leftover after parsing attributes in process `syz.1.215'. [ 127.248443][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.275891][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.304649][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.331389][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.384430][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.417104][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.437907][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.469751][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.500465][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.521823][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.542234][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.582459][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.604647][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.619817][ T5061] netlink: 'syz.2.217': attribute type 4 has an invalid length. [ 127.648535][ T5060] netlink: 'syz.2.217': attribute type 10 has an invalid length. [ 127.651273][ T5061] netlink: 'syz.2.217': attribute type 1 has an invalid length. [ 127.702666][ T5061] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.217'. [ 127.756809][ T5060] team0: Device veth1_vlan failed to register rx_handler [ 127.797693][ T5063] FAULT_INJECTION: forcing a failure. [ 127.797693][ T5063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.850625][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.869144][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.896804][ T5063] CPU: 0 PID: 5063 Comm: syz.1.218 Not tainted syzkaller #0 [ 127.904177][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.914646][ T5063] Call Trace: [ 127.918145][ T5063] [ 127.921160][ T5063] dump_stack_lvl+0x188/0x250 [ 127.925934][ T5063] ? show_regs_print_info+0x20/0x20 [ 127.931318][ T5063] ? load_image+0x410/0x410 [ 127.936529][ T5063] ? __lock_acquire+0x7b50/0x7b50 [ 127.941602][ T5063] should_fail+0x383/0x4b0 [ 127.946060][ T5063] _copy_from_user+0x2e/0x170 [ 127.950782][ T5063] __copy_msghdr_from_user+0xc9/0x630 [ 127.956221][ T5063] ? verify_lock_unused+0x140/0x140 [ 127.961490][ T5063] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 127.967318][ T5063] ? perf_tp_event+0xa7e/0xbe0 [ 127.972337][ T5063] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 127.978317][ T5063] ___sys_sendmsg+0x19a/0x2e0 [ 127.983050][ T5063] ? __sys_sendmsg+0x290/0x290 [ 127.987896][ T5063] __se_sys_sendmsg+0x1b7/0x2a0 [ 127.992787][ T5063] ? __x64_sys_sendmsg+0x80/0x80 [ 127.997771][ T5063] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 128.003838][ T5063] ? lockdep_hardirqs_on+0x94/0x140 [ 128.009179][ T5063] do_syscall_64+0x4c/0xa0 [ 128.013636][ T5063] ? clear_bhb_loop+0x30/0x80 [ 128.018527][ T5063] ? clear_bhb_loop+0x30/0x80 [ 128.023246][ T5063] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.029183][ T5063] RIP: 0033:0x7f83863d40d9 [ 128.033633][ T5063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.053709][ T5063] RSP: 002b:00007f838462c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.062177][ T5063] RAX: ffffffffffffffda RBX: 00007f838665bfa0 RCX: 00007f83863d40d9 [ 128.070307][ T5063] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 128.078497][ T5063] RBP: 00007f838462c090 R08: 0000000000000000 R09: 0000000000000000 [ 128.086685][ T5063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.094704][ T5063] R13: 00007f838665c038 R14: 00007f838665bfa0 R15: 00007ffdfe232268 [ 128.102734][ T5063] [ 128.131906][ T4736] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.165753][ T4736] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.194941][ T4736] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.212782][ T4736] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.454771][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.462927][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.507741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.603364][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.654973][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.662695][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 128.705340][ T5077] netlink: 'syz.1.223': attribute type 27 has an invalid length. [ 128.750481][ T5077] netlink: 'syz.1.223': attribute type 4 has an invalid length. [ 128.767907][ T5080] FAULT_INJECTION: forcing a failure. [ 128.767907][ T5080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.808527][ T5083] FAULT_INJECTION: forcing a failure. [ 128.808527][ T5083] name failslab, interval 1, probability 0, space 0, times 0 [ 128.825840][ T5080] CPU: 1 PID: 5080 Comm: syz.2.224 Not tainted syzkaller #0 [ 128.833281][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.843545][ T5080] Call Trace: [ 128.846855][ T5080] [ 128.849811][ T5080] dump_stack_lvl+0x188/0x250 [ 128.854549][ T5080] ? show_regs_print_info+0x20/0x20 [ 128.859787][ T5080] ? load_image+0x410/0x410 [ 128.864369][ T5080] ? __lock_acquire+0x7b50/0x7b50 [ 128.869430][ T5080] should_fail+0x383/0x4b0 [ 128.873917][ T5080] _copy_from_user+0x2e/0x170 [ 128.878646][ T5080] bpf_test_init+0x136/0x1b0 [ 128.883284][ T5080] bpf_prog_test_run_skb+0x181/0x1190 [ 128.888725][ T5080] ? __fget_files+0x402/0x470 [ 128.893457][ T5080] ? cpu_online+0x60/0x60 [ 128.897850][ T5080] bpf_prog_test_run+0x31c/0x390 [ 128.902841][ T5080] __sys_bpf+0x5a5/0x6f0 [ 128.907121][ T5080] ? bpf_link_show_fdinfo+0x380/0x380 [ 128.912552][ T5080] __x64_sys_bpf+0x78/0x90 [ 128.917094][ T5080] do_syscall_64+0x4c/0xa0 [ 128.921631][ T5080] ? clear_bhb_loop+0x30/0x80 [ 128.926345][ T5080] ? clear_bhb_loop+0x30/0x80 [ 128.931098][ T5080] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.937202][ T5080] RIP: 0033:0x7f1c016c00d9 [ 128.941758][ T5080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.961416][ T5080] RSP: 002b:00007f1bff918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.969874][ T5080] RAX: ffffffffffffffda RBX: 00007f1c01947fa0 RCX: 00007f1c016c00d9 [ 128.977883][ T5080] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 128.985987][ T5080] RBP: 00007f1bff918090 R08: 0000000000000000 R09: 0000000000000000 [ 128.994197][ T5080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.002204][ T5080] R13: 00007f1c01948038 R14: 00007f1c01947fa0 R15: 00007fffea602498 [ 129.010237][ T5080] [ 129.021743][ T5083] CPU: 1 PID: 5083 Comm: syz.4.225 Not tainted syzkaller #0 [ 129.029096][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.039226][ T5083] Call Trace: [ 129.042537][ T5083] [ 129.045506][ T5083] dump_stack_lvl+0x188/0x250 [ 129.050263][ T5083] ? show_regs_print_info+0x20/0x20 [ 129.055672][ T5083] ? load_image+0x410/0x410 [ 129.060226][ T5083] ? __might_sleep+0xf0/0xf0 [ 129.064870][ T5083] ? __lock_acquire+0x7b50/0x7b50 [ 129.069946][ T5083] should_fail+0x383/0x4b0 [ 129.074626][ T5083] should_failslab+0x5/0x20 [ 129.079161][ T5083] slab_pre_alloc_hook+0x51/0xc0 [ 129.084147][ T5083] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 129.089915][ T5083] ? __get_vm_area_node+0x119/0x2d0 [ 129.095196][ T5083] __get_vm_area_node+0x119/0x2d0 [ 129.100448][ T5083] __vmalloc_node_range+0xef/0x8b0 [ 129.105621][ T5083] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 129.111346][ T5083] ? end_current_label_crit_section+0x170/0x170 [ 129.117760][ T5083] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 129.124054][ T5083] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 129.130835][ T5083] __vmalloc+0x76/0x80 [ 129.135215][ T5083] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 129.140828][ T5083] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 129.146373][ T5083] bpf_prog_alloc+0x1a/0x1e0 [ 129.151114][ T5083] bpf_prog_load+0x7d1/0x14e0 [ 129.155861][ T5083] ? map_freeze+0x360/0x360 [ 129.160860][ T5083] ? __might_fault+0xb7/0x110 [ 129.165609][ T5083] ? ktime_get+0x7b/0x270 [ 129.170027][ T5083] ? __might_fault+0xb3/0x110 [ 129.174852][ T5083] ? bpf_lsm_bpf+0x5/0x10 [ 129.179299][ T5083] ? security_bpf+0x7a/0xa0 [ 129.183872][ T5083] __sys_bpf+0x532/0x6f0 [ 129.188172][ T5083] ? bpf_link_show_fdinfo+0x380/0x380 [ 129.193629][ T5083] __x64_sys_bpf+0x78/0x90 [ 129.198162][ T5083] do_syscall_64+0x4c/0xa0 [ 129.202629][ T5083] ? clear_bhb_loop+0x30/0x80 [ 129.207362][ T5083] ? clear_bhb_loop+0x30/0x80 [ 129.207417][ T5077] netlink: 152 bytes leftover after parsing attributes in process `syz.1.223'. [ 129.212108][ T5083] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.212140][ T5083] RIP: 0033:0x7f7ca0ec20d9 [ 129.212164][ T5083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.251338][ T5083] RSP: 002b:00007f7c9f11a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.259904][ T5083] RAX: ffffffffffffffda RBX: 00007f7ca1149fa0 RCX: 00007f7ca0ec20d9 [ 129.267923][ T5083] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 129.275947][ T5083] RBP: 00007f7c9f11a090 R08: 0000000000000000 R09: 0000000000000000 [ 129.283965][ T5083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.292019][ T5083] R13: 00007f7ca114a038 R14: 00007f7ca1149fa0 R15: 00007ffdd343c408 [ 129.300092][ T5083] [ 130.099694][ T5111] FAULT_INJECTION: forcing a failure. [ 130.099694][ T5111] name failslab, interval 1, probability 0, space 0, times 0 [ 130.146113][ T5111] CPU: 0 PID: 5111 Comm: syz.2.231 Not tainted syzkaller #0 [ 130.153471][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.163587][ T5111] Call Trace: [ 130.166904][ T5111] [ 130.169868][ T5111] dump_stack_lvl+0x188/0x250 [ 130.174606][ T5111] ? show_regs_print_info+0x20/0x20 [ 130.179873][ T5111] ? lockdep_hardirqs_on+0x94/0x140 [ 130.185120][ T5111] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 130.191334][ T5111] should_fail+0x383/0x4b0 [ 130.195839][ T5111] should_failslab+0x5/0x20 [ 130.200381][ T5111] slab_pre_alloc_hook+0x51/0xc0 [ 130.205453][ T5111] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 130.211320][ T5111] ? __get_vm_area_node+0x119/0x2d0 [ 130.216571][ T5111] __get_vm_area_node+0x119/0x2d0 [ 130.221641][ T5111] __vmalloc_node_range+0xef/0x8b0 [ 130.226828][ T5111] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 130.232437][ T5111] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 130.238822][ T5111] ? lockdep_hardirqs_on+0x94/0x140 [ 130.244066][ T5111] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 130.249651][ T5111] __vmalloc+0x76/0x80 [ 130.253772][ T5111] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 130.259469][ T5111] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 130.264904][ T5111] bpf_prog_alloc+0x1a/0x1e0 [ 130.269558][ T5111] bpf_prog_load+0x7d1/0x14e0 [ 130.274511][ T5111] ? map_freeze+0x360/0x360 [ 130.279080][ T5111] ? __sys_bpf+0x2e0/0x6f0 [ 130.283537][ T5111] ? __sanitizer_cov_trace_switch+0x61/0xe0 [ 130.289478][ T5111] __sys_bpf+0x532/0x6f0 [ 130.293769][ T5111] ? bpf_link_show_fdinfo+0x380/0x380 [ 130.299190][ T5111] ? rcu_nmi_exit+0x6f/0xf0 [ 130.303760][ T5111] __x64_sys_bpf+0x78/0x90 [ 130.308228][ T5111] do_syscall_64+0x4c/0xa0 [ 130.312700][ T5111] ? clear_bhb_loop+0x30/0x80 [ 130.317418][ T5111] ? clear_bhb_loop+0x30/0x80 [ 130.322261][ T5111] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.328197][ T5111] RIP: 0033:0x7f1c016c00d9 [ 130.332657][ T5111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.352307][ T5111] RSP: 002b:00007f1bff918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.360771][ T5111] RAX: ffffffffffffffda RBX: 00007f1c01947fa0 RCX: 00007f1c016c00d9 [ 130.368797][ T5111] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 130.376822][ T5111] RBP: 00007f1bff918090 R08: 0000000000000000 R09: 0000000000000000 [ 130.385012][ T5111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.393109][ T5111] R13: 00007f1c01948038 R14: 00007f1c01947fa0 R15: 00007fffea602498 [ 130.401153][ T5111] [ 131.181387][ T5140] FAULT_INJECTION: forcing a failure. [ 131.181387][ T5140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.267129][ T5140] CPU: 1 PID: 5140 Comm: syz.4.238 Not tainted syzkaller #0 [ 131.274509][ T5140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.284628][ T5140] Call Trace: [ 131.287964][ T5140] [ 131.290952][ T5140] dump_stack_lvl+0x188/0x250 [ 131.295727][ T5140] ? show_regs_print_info+0x20/0x20 [ 131.300999][ T5140] ? load_image+0x410/0x410 [ 131.305704][ T5140] ? __lock_acquire+0x7b50/0x7b50 [ 131.310804][ T5140] ? __lock_acquire+0x7b50/0x7b50 [ 131.315920][ T5140] should_fail+0x383/0x4b0 [ 131.320442][ T5140] _copy_from_user+0x2e/0x170 [ 131.325298][ T5140] __tun_chr_ioctl+0x1385/0x1f30 [ 131.330354][ T5140] ? tun_flow_create+0x310/0x310 [ 131.335536][ T5140] ? bpf_lsm_file_ioctl+0x5/0x10 [ 131.340540][ T5140] ? security_file_ioctl+0x7c/0xa0 [ 131.345722][ T5140] ? tun_chr_poll+0x620/0x620 [ 131.350470][ T5140] __se_sys_ioctl+0xfa/0x170 [ 131.355139][ T5140] do_syscall_64+0x4c/0xa0 [ 131.359613][ T5140] ? clear_bhb_loop+0x30/0x80 [ 131.364367][ T5140] ? clear_bhb_loop+0x30/0x80 [ 131.369166][ T5140] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.375135][ T5140] RIP: 0033:0x7f7ca0ec20d9 [ 131.379609][ T5140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.399279][ T5140] RSP: 002b:00007f7c9f11a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.407795][ T5140] RAX: ffffffffffffffda RBX: 00007f7ca1149fa0 RCX: 00007f7ca0ec20d9 [ 131.415932][ T5140] RDX: 0000200000000300 RSI: 00000000401054d5 RDI: 0000000000000003 [ 131.423968][ T5140] RBP: 00007f7c9f11a090 R08: 0000000000000000 R09: 0000000000000000 [ 131.432000][ T5140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.440031][ T5140] R13: 00007f7ca114a038 R14: 00007f7ca1149fa0 R15: 00007ffdd343c408 [ 131.448136][ T5140] [ 132.392996][ T5167] FAULT_INJECTION: forcing a failure. [ 132.392996][ T5167] name failslab, interval 1, probability 0, space 0, times 0 [ 132.406019][ T5167] CPU: 1 PID: 5167 Comm: syz.2.243 Not tainted syzkaller #0 [ 132.413454][ T5167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.423673][ T5167] Call Trace: [ 132.426988][ T5167] [ 132.429951][ T5167] dump_stack_lvl+0x188/0x250 [ 132.434863][ T5167] ? show_regs_print_info+0x20/0x20 [ 132.440136][ T5167] ? load_image+0x410/0x410 [ 132.444691][ T5167] ? mark_lock+0x94/0x320 [ 132.449079][ T5167] ? __lock_acquire+0x13dc/0x7b50 [ 132.454165][ T5167] should_fail+0x383/0x4b0 [ 132.458641][ T5167] should_failslab+0x5/0x20 [ 132.463203][ T5167] slab_pre_alloc_hook+0x51/0xc0 [ 132.468196][ T5167] ? radix_tree_node_alloc+0x7e/0x3a0 [ 132.473617][ T5167] kmem_cache_alloc+0x3d/0x280 [ 132.478430][ T5167] radix_tree_node_alloc+0x7e/0x3a0 [ 132.483735][ T5167] idr_get_free+0x28b/0xa10 [ 132.488683][ T5167] idr_alloc_cyclic+0x286/0x610 [ 132.493826][ T5167] ? idr_alloc+0x2e0/0x2e0 [ 132.498307][ T5167] ? do_raw_spin_lock+0x128/0x2f0 [ 132.503578][ T5167] ? __radix_tree_preload+0x3cf/0x450 [ 132.509015][ T5167] ? bpf_map_alloc_id+0x2e/0x180 [ 132.514018][ T5167] bpf_map_alloc_id+0x4d/0x180 [ 132.518936][ T5167] map_create+0x19db/0x2330 [ 132.523592][ T5167] ? bpf_lsm_bpf+0x5/0x10 [ 132.527994][ T5167] __sys_bpf+0x30a/0x6f0 [ 132.532320][ T5167] ? bpf_link_show_fdinfo+0x380/0x380 [ 132.537771][ T5167] __x64_sys_bpf+0x78/0x90 [ 132.542577][ T5167] do_syscall_64+0x4c/0xa0 [ 132.547135][ T5167] ? clear_bhb_loop+0x30/0x80 [ 132.552064][ T5167] ? clear_bhb_loop+0x30/0x80 [ 132.556836][ T5167] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.562786][ T5167] RIP: 0033:0x7f1c016c00d9 [ 132.567344][ T5167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.588041][ T5167] RSP: 002b:00007f1bff8f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.596523][ T5167] RAX: ffffffffffffffda RBX: 00007f1c01948090 RCX: 00007f1c016c00d9 [ 132.604546][ T5167] RDX: 0000000000000048 RSI: 0000200000000240 RDI: 0000000000000000 [ 132.612574][ T5167] RBP: 00007f1bff8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 132.620698][ T5167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.628954][ T5167] R13: 00007f1c01948128 R14: 00007f1c01948090 R15: 00007fffea602498 [ 132.637005][ T5167] [ 132.984484][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.990999][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.074495][ T5187] FAULT_INJECTION: forcing a failure. [ 133.074495][ T5187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.098745][ T5187] CPU: 0 PID: 5187 Comm: syz.3.249 Not tainted syzkaller #0 [ 133.106097][ T5187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.116190][ T5187] Call Trace: [ 133.119505][ T5187] [ 133.122494][ T5187] dump_stack_lvl+0x188/0x250 [ 133.127317][ T5187] ? show_regs_print_info+0x20/0x20 [ 133.132879][ T5187] ? load_image+0x410/0x410 [ 133.137614][ T5187] ? __lock_acquire+0x7b50/0x7b50 [ 133.142722][ T5187] should_fail+0x383/0x4b0 [ 133.147328][ T5187] _copy_from_user+0x2e/0x170 [ 133.152048][ T5187] __tun_chr_ioctl+0x222/0x1f30 [ 133.156946][ T5187] ? tun_flow_create+0x310/0x310 [ 133.161936][ T5187] ? bpf_lsm_file_ioctl+0x5/0x10 [ 133.166948][ T5187] ? security_file_ioctl+0x7c/0xa0 [ 133.172136][ T5187] ? tun_chr_poll+0x620/0x620 [ 133.176851][ T5187] __se_sys_ioctl+0xfa/0x170 [ 133.181487][ T5187] do_syscall_64+0x4c/0xa0 [ 133.185942][ T5187] ? clear_bhb_loop+0x30/0x80 [ 133.190882][ T5187] ? clear_bhb_loop+0x30/0x80 [ 133.195687][ T5187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.201618][ T5187] RIP: 0033:0x7f6de8a6e0d9 [ 133.206064][ T5187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.225710][ T5187] RSP: 002b:00007f6de6cc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.234155][ T5187] RAX: ffffffffffffffda RBX: 00007f6de8cf5fa0 RCX: 00007f6de8a6e0d9 [ 133.242254][ T5187] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000003 [ 133.250443][ T5187] RBP: 00007f6de6cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 133.258558][ T5187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.266551][ T5187] R13: 00007f6de8cf6038 R14: 00007f6de8cf5fa0 R15: 00007ffe39ce6658 [ 133.274850][ T5187] [ 133.312960][ T5191] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.250'. [ 133.331140][ T5191] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 133.473278][ T5199] netlink: 'syz.2.252': attribute type 4 has an invalid length. [ 133.498077][ T5199] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.252'. [ 133.521027][ T5202] netlink: 56 bytes leftover after parsing attributes in process `syz.2.252'. [ 135.452154][ T5244] FAULT_INJECTION: forcing a failure. [ 135.452154][ T5244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.509621][ T5244] CPU: 0 PID: 5244 Comm: syz.2.262 Not tainted syzkaller #0 [ 135.517257][ T5244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.527459][ T5244] Call Trace: [ 135.530779][ T5244] [ 135.533745][ T5244] dump_stack_lvl+0x188/0x250 [ 135.538473][ T5244] ? show_regs_print_info+0x20/0x20 [ 135.543819][ T5244] ? load_image+0x410/0x410 [ 135.548459][ T5244] ? __lock_acquire+0x7b50/0x7b50 [ 135.553554][ T5244] should_fail+0x383/0x4b0 [ 135.558018][ T5244] _copy_from_user+0x2e/0x170 [ 135.562861][ T5244] __copy_msghdr_from_user+0xc9/0x630 [ 135.568283][ T5244] ? verify_lock_unused+0x140/0x140 [ 135.573548][ T5244] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 135.578931][ T5244] ___sys_sendmsg+0x19a/0x2e0 [ 135.583841][ T5244] ? __sys_sendmsg+0x290/0x290 [ 135.588693][ T5244] __se_sys_sendmsg+0x1b7/0x2a0 [ 135.593690][ T5244] ? __x64_sys_sendmsg+0x80/0x80 [ 135.598664][ T5244] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 135.604696][ T5244] ? lockdep_hardirqs_on+0x94/0x140 [ 135.609936][ T5244] do_syscall_64+0x4c/0xa0 [ 135.614387][ T5244] ? clear_bhb_loop+0x30/0x80 [ 135.619130][ T5244] ? clear_bhb_loop+0x30/0x80 [ 135.623845][ T5244] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.629776][ T5244] RIP: 0033:0x7f1c016c00d9 [ 135.634222][ T5244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.653857][ T5244] RSP: 002b:00007f1bff918028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.662305][ T5244] RAX: ffffffffffffffda RBX: 00007f1c01947fa0 RCX: 00007f1c016c00d9 [ 135.670309][ T5244] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 135.678404][ T5244] RBP: 00007f1bff918090 R08: 0000000000000000 R09: 0000000000000000 [ 135.686418][ T5244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.694595][ T5244] R13: 00007f1c01948038 R14: 00007f1c01947fa0 R15: 00007fffea602498 [ 135.702900][ T5244] [ 136.630144][ T5272] FAULT_INJECTION: forcing a failure. [ 136.630144][ T5272] name failslab, interval 1, probability 0, space 0, times 0 [ 136.655804][ T5272] CPU: 1 PID: 5272 Comm: syz.3.270 Not tainted syzkaller #0 [ 136.663168][ T5272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.673283][ T5272] Call Trace: [ 136.676601][ T5272] [ 136.679582][ T5272] dump_stack_lvl+0x188/0x250 [ 136.684322][ T5272] ? show_regs_print_info+0x20/0x20 [ 136.689600][ T5272] ? load_image+0x410/0x410 [ 136.694162][ T5272] ? __might_sleep+0xf0/0xf0 [ 136.698834][ T5272] ? __lock_acquire+0x7b50/0x7b50 [ 136.703976][ T5272] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 136.709835][ T5272] should_fail+0x383/0x4b0 [ 136.714307][ T5272] should_failslab+0x5/0x20 [ 136.718854][ T5272] slab_pre_alloc_hook+0x51/0xc0 [ 136.723838][ T5272] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 136.729596][ T5272] ? __get_vm_area_node+0x119/0x2d0 [ 136.734838][ T5272] ? lock_chain_count+0x20/0x20 [ 136.739811][ T5272] __get_vm_area_node+0x119/0x2d0 [ 136.744886][ T5272] __vmalloc_node_range+0xef/0x8b0 [ 136.750126][ T5272] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 136.755726][ T5272] ? end_current_label_crit_section+0x170/0x170 [ 136.762108][ T5272] ? apparmor_capable+0x50/0x190 [ 136.767105][ T5272] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 136.772693][ T5272] __vmalloc+0x76/0x80 [ 136.776834][ T5272] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 136.782453][ T5272] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 136.787882][ T5272] bpf_prog_alloc+0x1a/0x1e0 [ 136.792699][ T5272] bpf_prog_load+0x7d1/0x14e0 [ 136.797528][ T5272] ? map_freeze+0x360/0x360 [ 136.802077][ T5272] ? __might_fault+0xb7/0x110 [ 136.806828][ T5272] ? __might_fault+0xb3/0x110 [ 136.811589][ T5272] ? bpf_lsm_bpf+0x5/0x10 [ 136.815968][ T5272] ? security_bpf+0x7a/0xa0 [ 136.820517][ T5272] __sys_bpf+0x532/0x6f0 [ 136.824806][ T5272] ? bpf_link_show_fdinfo+0x380/0x380 [ 136.830424][ T5272] __x64_sys_bpf+0x78/0x90 [ 136.834983][ T5272] do_syscall_64+0x4c/0xa0 [ 136.839446][ T5272] ? clear_bhb_loop+0x30/0x80 [ 136.844384][ T5272] ? clear_bhb_loop+0x30/0x80 [ 136.849114][ T5272] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.855046][ T5272] RIP: 0033:0x7f6de8a6e0d9 [ 136.859540][ T5272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.879380][ T5272] RSP: 002b:00007f6de6cc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.887962][ T5272] RAX: ffffffffffffffda RBX: 00007f6de8cf5fa0 RCX: 00007f6de8a6e0d9 [ 136.895993][ T5272] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 136.905172][ T5272] RBP: 00007f6de6cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 136.913347][ T5272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.921621][ T5272] R13: 00007f6de8cf6038 R14: 00007f6de8cf5fa0 R15: 00007ffe39ce6658 [ 136.929659][ T5272] [ 137.171339][ T5272] warn_alloc: 3 callbacks suppressed [ 137.171371][ T5272] syz.3.270: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 137.245017][ T5272] CPU: 1 PID: 5272 Comm: syz.3.270 Not tainted syzkaller #0 [ 137.252424][ T5272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.262607][ T5272] Call Trace: [ 137.265923][ T5272] [ 137.268909][ T5272] dump_stack_lvl+0x188/0x250 [ 137.273637][ T5272] ? rcu_lock_release+0x5/0x20 [ 137.279020][ T5272] ? show_regs_print_info+0x20/0x20 [ 137.284267][ T5272] ? load_image+0x410/0x410 [ 137.288859][ T5272] warn_alloc+0x245/0x320 [ 137.293289][ T5272] ? zone_watermark_ok_safe+0x250/0x250 [ 137.298904][ T5272] ? __get_vm_area_node+0x2b5/0x2d0 [ 137.304444][ T5272] __vmalloc_node_range+0x2b1/0x8b0 [ 137.309714][ T5272] ? end_current_label_crit_section+0x170/0x170 [ 137.316104][ T5272] ? apparmor_capable+0x50/0x190 [ 137.321093][ T5272] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 137.326789][ T5272] __vmalloc+0x76/0x80 [ 137.330910][ T5272] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 137.336514][ T5272] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 137.341944][ T5272] bpf_prog_alloc+0x1a/0x1e0 [ 137.346626][ T5272] bpf_prog_load+0x7d1/0x14e0 [ 137.351492][ T5272] ? map_freeze+0x360/0x360 [ 137.356142][ T5272] ? __might_fault+0xb7/0x110 [ 137.360888][ T5272] ? __might_fault+0xb3/0x110 [ 137.365606][ T5272] ? bpf_lsm_bpf+0x5/0x10 [ 137.369987][ T5272] ? security_bpf+0x7a/0xa0 [ 137.374552][ T5272] __sys_bpf+0x532/0x6f0 [ 137.378840][ T5272] ? bpf_link_show_fdinfo+0x380/0x380 [ 137.384452][ T5272] __x64_sys_bpf+0x78/0x90 [ 137.389205][ T5272] do_syscall_64+0x4c/0xa0 [ 137.393670][ T5272] ? clear_bhb_loop+0x30/0x80 [ 137.398393][ T5272] ? clear_bhb_loop+0x30/0x80 [ 137.403228][ T5272] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.409164][ T5272] RIP: 0033:0x7f6de8a6e0d9 [ 137.413618][ T5272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.433645][ T5272] RSP: 002b:00007f6de6cc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.442201][ T5272] RAX: ffffffffffffffda RBX: 00007f6de8cf5fa0 RCX: 00007f6de8a6e0d9 [ 137.450219][ T5272] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 137.458299][ T5272] RBP: 00007f6de6cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 137.466384][ T5272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.474381][ T5272] R13: 00007f6de8cf6038 R14: 00007f6de8cf5fa0 R15: 00007ffe39ce6658 [ 137.482438][ T5272] [ 137.935356][ T5272] Mem-Info: [ 137.942442][ T5272] active_anon:282 inactive_anon:8960 isolated_anon:0 [ 137.942442][ T5272] active_file:15053 inactive_file:38208 isolated_file:0 [ 137.942442][ T5272] unevictable:768 dirty:155 writeback:0 [ 137.942442][ T5272] slab_reclaimable:20270 slab_unreclaimable:95065 [ 137.942442][ T5272] mapped:29767 shmem:1645 pagetables:679 bounce:0 [ 137.942442][ T5272] kernel_misc_reclaimable:0 [ 137.942442][ T5272] free:1375610 free_pcp:11211 free_cma:0 [ 138.035724][ T5272] Node 0 active_anon:1100kB inactive_anon:35568kB active_file:60040kB inactive_file:152800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119100kB dirty:620kB writeback:0kB shmem:4500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10540kB pagetables:2748kB all_unreclaimable? no [ 138.076526][ T5272] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 138.189792][ T5272] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 138.319952][ T5311] syz.2.282[5311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.320063][ T5311] syz.2.282[5311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.361231][ T5272] lowmem_reserve[]: [ 138.391999][ T5314] FAULT_INJECTION: forcing a failure. [ 138.391999][ T5314] name failslab, interval 1, probability 0, space 0, times 0 [ 138.429696][ T5272] 0 2539 2540 2540 2540 [ 138.452137][ T5272] Node 0 DMA32 free:1570536kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1100kB inactive_anon:35168kB active_file:60040kB inactive_file:152800kB unevictable:1536kB writepending:620kB present:3129332kB managed:2606516kB mlocked:0kB bounce:0kB free_pcp:39108kB local_pcp:17456kB free_cma:0kB [ 138.519173][ T5314] CPU: 0 PID: 5314 Comm: syz.5.283 Not tainted syzkaller #0 [ 138.526537][ T5314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.536634][ T5314] Call Trace: [ 138.539945][ T5314] [ 138.542934][ T5314] dump_stack_lvl+0x188/0x250 [ 138.547658][ T5314] ? show_regs_print_info+0x20/0x20 [ 138.553013][ T5314] ? load_image+0x410/0x410 [ 138.557553][ T5314] ? __lock_acquire+0x7b50/0x7b50 [ 138.562625][ T5314] should_fail+0x383/0x4b0 [ 138.567082][ T5314] should_failslab+0x5/0x20 [ 138.571720][ T5314] slab_pre_alloc_hook+0x51/0xc0 [ 138.576807][ T5314] ? cpuset_write_resmask+0x15c/0x13c0 [ 138.582303][ T5314] __kmalloc_track_caller+0x69/0x330 [ 138.587619][ T5314] ? cpuset_write_resmask+0x15c/0x13c0 [ 138.593111][ T5314] kmemdup+0x22/0x50 [ 138.597120][ T5314] cpuset_write_resmask+0x15c/0x13c0 [ 138.602489][ T5314] ? cpuset_common_seq_show+0x230/0x230 [ 138.608332][ T5314] cgroup_file_write+0x2c4/0x670 [ 138.613311][ T5314] ? read_lock_is_recursive+0x10/0x10 [ 138.618738][ T5314] ? cgroup_seqfile_stop+0xd0/0xd0 [ 138.624033][ T5314] ? cgroup_seqfile_stop+0xd0/0xd0 [ 138.629561][ T5314] kernfs_fop_write_iter+0x3a8/0x500 [ 138.634900][ T5314] vfs_write+0x748/0xd70 [ 138.639269][ T5314] ? file_end_write+0x250/0x250 [ 138.644253][ T5314] ? mutex_lock_nested+0x17/0x20 [ 138.649223][ T5314] ? __fdget_pos+0x2bf/0x370 [ 138.653850][ T5314] ? ksys_write+0x70/0x260 [ 138.658308][ T5314] ksys_write+0x153/0x260 [ 138.662669][ T5314] ? __ia32_sys_read+0x80/0x80 [ 138.667468][ T5314] ? lockdep_hardirqs_on+0x94/0x140 [ 138.672709][ T5314] do_syscall_64+0x4c/0xa0 [ 138.677159][ T5314] ? clear_bhb_loop+0x30/0x80 [ 138.681975][ T5314] ? clear_bhb_loop+0x30/0x80 [ 138.686983][ T5314] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.692924][ T5314] RIP: 0033:0x7f5982c030d9 [ 138.697380][ T5314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.717394][ T5314] RSP: 002b:00007f5980e5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.726043][ T5314] RAX: ffffffffffffffda RBX: 00007f5982e8afa0 RCX: 00007f5982c030d9 [ 138.734040][ T5314] RDX: 0000000000000031 RSI: 00002000000000c0 RDI: 0000000000000004 [ 138.742028][ T5314] RBP: 00007f5980e5b090 R08: 0000000000000000 R09: 0000000000000000 [ 138.750029][ T5314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.758022][ T5314] R13: 00007f5982e8b038 R14: 00007f5982e8afa0 R15: 00007ffe12ffb338 [ 138.766554][ T5314] [ 138.877627][ T5272] lowmem_reserve[]: 0 0 0 0 0 [ 138.882699][ T5272] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 138.955137][ T5321] FAULT_INJECTION: forcing a failure. [ 138.955137][ T5321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.979063][ T5272] lowmem_reserve[]: 0 0 0 0 0 [ 138.983878][ T5272] Node 1 Normal free:3916492kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:6776kB local_pcp:0kB free_cma:0kB [ 139.021169][ T5321] CPU: 0 PID: 5321 Comm: syz.2.285 Not tainted syzkaller #0 [ 139.028523][ T5321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.038618][ T5321] Call Trace: [ 139.041939][ T5321] [ 139.044912][ T5321] dump_stack_lvl+0x188/0x250 [ 139.049649][ T5321] ? show_regs_print_info+0x20/0x20 [ 139.055189][ T5321] ? load_image+0x410/0x410 [ 139.059740][ T5321] ? __lock_acquire+0x7b50/0x7b50 [ 139.064998][ T5321] ? __lock_acquire+0x7b50/0x7b50 [ 139.070073][ T5321] should_fail+0x383/0x4b0 [ 139.074539][ T5321] _copy_from_user+0x2e/0x170 [ 139.079269][ T5321] __tun_chr_ioctl+0x1385/0x1f30 [ 139.084359][ T5321] ? tun_flow_create+0x310/0x310 [ 139.089509][ T5321] ? bpf_lsm_file_ioctl+0x5/0x10 [ 139.094499][ T5321] ? security_file_ioctl+0x7c/0xa0 [ 139.099766][ T5321] ? tun_chr_poll+0x620/0x620 [ 139.104501][ T5321] __se_sys_ioctl+0xfa/0x170 [ 139.109149][ T5321] do_syscall_64+0x4c/0xa0 [ 139.113605][ T5321] ? clear_bhb_loop+0x30/0x80 [ 139.118419][ T5321] ? clear_bhb_loop+0x30/0x80 [ 139.123204][ T5321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.129510][ T5321] RIP: 0033:0x7f1c016c00d9 [ 139.134238][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.154610][ T5321] RSP: 002b:00007f1bff8f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.163083][ T5321] RAX: ffffffffffffffda RBX: 00007f1c01948090 RCX: 00007f1c016c00d9 [ 139.171102][ T5321] RDX: 0000200000000040 RSI: 00000000401054d5 RDI: 0000000000000003 [ 139.179111][ T5321] RBP: 00007f1bff8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.187120][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.195408][ T5321] R13: 00007f1c01948128 R14: 00007f1c01948090 R15: 00007fffea602498 [ 139.203447][ T5321] [ 139.245734][ T5272] lowmem_reserve[]: 0 0 0 0 0 [ 139.254843][ T5272] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 139.281513][ T5272] Node 0 DMA32: 363*4kB (UME) 690*8kB (ME) 714*16kB (UME) 1434*32kB (UME) 992*64kB (UME) 331*128kB (UME) 118*256kB (UME) 42*512kB (UME) 17*1024kB (UME) 4*2048kB (ME) 323*4096kB (M) = 1570460kB [ 139.324339][ T5272] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 139.339694][ T5272] Node 1 Normal: 109*4kB (UME) 27*8kB (UME) 22*16kB (UME) 139*32kB (UME) 62*64kB (UME) 20*128kB (UME) 6*256kB (U) 3*512kB (UE) 0*1024kB 3*2048kB (UME) 951*4096kB (M) = 3916492kB [ 139.398948][ T5272] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 139.473397][ T5272] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 139.564795][ T5272] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 139.612061][ T5272] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 139.642501][ T5272] 54905 total pagecache pages [ 139.656765][ T5272] 0 pages in swap cache [ 139.661192][ T5272] Swap cache stats: add 0, delete 0, find 0/0 [ 139.699292][ T5272] Free swap = 124996kB [ 139.720232][ T5272] Total swap = 124996kB [ 139.738381][ T5272] 2097051 pages RAM [ 139.762683][ T5272] 0 pages HighMem/MovableOnly [ 139.813448][ T5272] 411499 pages reserved [ 139.830889][ T5344] FAULT_INJECTION: forcing a failure. [ 139.830889][ T5344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.844091][ T5272] 0 pages cma reserved [ 140.030249][ T5344] CPU: 0 PID: 5344 Comm: syz.5.289 Not tainted syzkaller #0 [ 140.037619][ T5344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.047708][ T5344] Call Trace: [ 140.051021][ T5344] [ 140.054067][ T5344] dump_stack_lvl+0x188/0x250 [ 140.058790][ T5344] ? show_regs_print_info+0x20/0x20 [ 140.064035][ T5344] ? load_image+0x410/0x410 [ 140.068598][ T5344] ? __lock_acquire+0x7b50/0x7b50 [ 140.073677][ T5344] should_fail+0x383/0x4b0 [ 140.078145][ T5344] _copy_from_user+0x2e/0x170 [ 140.082870][ T5344] bpf_test_init+0x136/0x1b0 [ 140.087549][ T5344] bpf_prog_test_run_skb+0x181/0x1190 [ 140.092975][ T5344] ? __fget_files+0x402/0x470 [ 140.097806][ T5344] ? cpu_online+0x60/0x60 [ 140.102235][ T5344] bpf_prog_test_run+0x31c/0x390 [ 140.107235][ T5344] __sys_bpf+0x5a5/0x6f0 [ 140.111522][ T5344] ? bpf_link_show_fdinfo+0x380/0x380 [ 140.117109][ T5344] ? rcu_nmi_exit+0x6f/0xf0 [ 140.122139][ T5344] __x64_sys_bpf+0x78/0x90 [ 140.126874][ T5344] do_syscall_64+0x4c/0xa0 [ 140.131329][ T5344] ? clear_bhb_loop+0x30/0x80 [ 140.136046][ T5344] ? clear_bhb_loop+0x30/0x80 [ 140.141022][ T5344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.146953][ T5344] RIP: 0033:0x7f5982c030d9 [ 140.151971][ T5344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.171623][ T5344] RSP: 002b:00007f5980e5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.180088][ T5344] RAX: ffffffffffffffda RBX: 00007f5982e8afa0 RCX: 00007f5982c030d9 [ 140.188113][ T5344] RDX: 0000000000000050 RSI: 0000200000001200 RDI: 000000000000000a [ 140.196126][ T5344] RBP: 00007f5980e5b090 R08: 0000000000000000 R09: 0000000000000000 [ 140.204124][ T5344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.212118][ T5344] R13: 00007f5982e8b038 R14: 00007f5982e8afa0 R15: 00007ffe12ffb338 [ 140.220133][ T5344] [ 140.298167][ T5358] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.293'. [ 140.518602][ T5364] FAULT_INJECTION: forcing a failure. [ 140.518602][ T5364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.580293][ T5364] CPU: 1 PID: 5364 Comm: syz.5.295 Not tainted syzkaller #0 [ 140.587875][ T5364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.598340][ T5364] Call Trace: [ 140.601671][ T5364] [ 140.604652][ T5364] dump_stack_lvl+0x188/0x250 [ 140.609399][ T5364] ? show_regs_print_info+0x20/0x20 [ 140.614691][ T5364] ? load_image+0x410/0x410 [ 140.619350][ T5364] ? __lock_acquire+0x7b50/0x7b50 [ 140.624439][ T5364] should_fail+0x383/0x4b0 [ 140.629011][ T5364] _copy_to_user+0x2e/0x130 [ 140.633577][ T5364] simple_read_from_buffer+0xe3/0x150 [ 140.639539][ T5364] proc_fail_nth_read+0x1a6/0x220 [ 140.644647][ T5364] ? proc_fault_inject_write+0x310/0x310 [ 140.650354][ T5364] ? fsnotify_perm+0x254/0x560 [ 140.655159][ T5364] ? proc_fault_inject_write+0x310/0x310 [ 140.660835][ T5364] vfs_read+0x2ff/0xd50 [ 140.665036][ T5364] ? __lock_acquire+0x7b50/0x7b50 [ 140.670108][ T5364] ? kernel_read+0x1e0/0x1e0 [ 140.674749][ T5364] ? mutex_lock_nested+0x17/0x20 [ 140.679815][ T5364] ? __fdget_pos+0x2bf/0x370 [ 140.684432][ T5364] ? ksys_read+0x70/0x260 [ 140.688805][ T5364] ksys_read+0x153/0x260 [ 140.693098][ T5364] ? vfs_write+0xd70/0xd70 [ 140.697558][ T5364] ? lockdep_hardirqs_on+0x94/0x140 [ 140.702804][ T5364] do_syscall_64+0x4c/0xa0 [ 140.707358][ T5364] ? clear_bhb_loop+0x30/0x80 [ 140.712076][ T5364] ? clear_bhb_loop+0x30/0x80 [ 140.716791][ T5364] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.722725][ T5364] RIP: 0033:0x7f5982bc390e [ 140.727185][ T5364] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 140.746826][ T5364] RSP: 002b:00007f5980e5afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.755280][ T5364] RAX: ffffffffffffffda RBX: 00007f5980e5b6c0 RCX: 00007f5982bc390e [ 140.763284][ T5364] RDX: 000000000000000f RSI: 00007f5980e5b0a0 RDI: 0000000000000005 [ 140.771306][ T5364] RBP: 00007f5980e5b090 R08: 0000000000000000 R09: 0000000000000000 [ 140.779322][ T5364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.787345][ T5364] R13: 00007f5982e8b038 R14: 00007f5982e8afa0 R15: 00007ffe12ffb338 [ 140.795379][ T5364] [ 141.306454][ T5380] netlink: 'syz.1.299': attribute type 27 has an invalid length. [ 141.520550][ T5380] bond0: (slave bond_slave_0): Releasing backup interface [ 142.660542][ T5421] netlink: 'syz.5.311': attribute type 1 has an invalid length. [ 142.685801][ T5421] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.311'. [ 143.630616][ C1] [ 143.630626][ C1] ================================ [ 143.630631][ C1] WARNING: inconsistent lock state [ 143.630650][ C1] syzkaller #0 Not tainted [ 143.630660][ C1] -------------------------------- [ 143.630665][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 143.630673][ C1] syz.4.317/5446 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 143.630693][ C1] ffff888073bba420 (&htab->lockdep_key){....}-{2:2}, at: htab_map_delete_elem+0x1b0/0x520 [ 143.630743][ C1] {INITIAL USE} state was registered at: [ 143.630750][ C1] lock_acquire+0x19e/0x400 [ 143.630771][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 143.630789][ C1] htab_map_delete_elem+0x1b0/0x520 [ 143.630804][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0xb8c [ 143.630822][ C1] bpf_overflow_handler+0x1c2/0x4a0 [ 143.630842][ C1] __perf_event_overflow+0x35f/0x550 [ 143.630859][ C1] perf_bp_event+0x276/0x320 [ 143.630875][ C1] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 143.630894][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 143.630912][ C1] notify_die+0x141/0x1a0 [ 143.630928][ C1] notify_debug+0x20/0x30 [ 143.630948][ C1] noist_exc_debug+0x73/0x120 [ 143.630964][ C1] asm_exc_debug+0x2f/0x40 [ 143.630980][ C1] irq event stamp: 1562 [ 143.630986][ C1] hardirqs last enabled at (1561): [] seqcount_lockdep_reader_access+0x106/0x190 [ 143.631010][ C1] hardirqs last disabled at (1562): [] exc_debug+0x6e/0x130 [ 143.631031][ C1] softirqs last enabled at (1324): [] netlink_insert+0xe90/0x11f0 [ 143.631057][ C1] softirqs last disabled at (1322): [] release_sock+0x2b/0x1b0 [ 143.631082][ C1] [ 143.631082][ C1] other info that might help us debug this: [ 143.631087][ C1] Possible unsafe locking scenario: [ 143.631087][ C1] [ 143.631091][ C1] CPU0 [ 143.631094][ C1] ---- [ 143.631098][ C1] lock(&htab->lockdep_key); [ 143.631109][ C1] [ 143.631113][ C1] lock(&htab->lockdep_key); [ 143.631124][ C1] [ 143.631124][ C1] *** DEADLOCK *** [ 143.631124][ C1] [ 143.631128][ C1] no locks held by syz.4.317/5446. [ 143.631135][ C1] [ 143.631135][ C1] stack backtrace: [ 143.631140][ C1] CPU: 1 PID: 5446 Comm: syz.4.317 Not tainted syzkaller #0 [ 143.631158][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.631168][ C1] Call Trace: [ 143.631174][ C1] <#DB> [ 143.631182][ C1] dump_stack_lvl+0x188/0x250 [ 143.631211][ C1] ? show_regs_print_info+0x20/0x20 [ 143.631245][ C1] ? print_usage_bug+0x42a/0x690 [ 143.631265][ C1] ? verify_lock_unused+0x15/0x140 [ 143.631297][ C1] lock_acquire+0x2c3/0x400 [ 143.631327][ C1] ? htab_map_delete_elem+0x1b0/0x520 [ 143.631349][ C1] ? read_lock_is_recursive+0x10/0x10 [ 143.631373][ C1] ? look_up_lock_class+0x71/0x110 [ 143.631397][ C1] ? verify_lock_unused+0x15/0x140 [ 143.631429][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 143.631447][ C1] ? htab_map_delete_elem+0x1b0/0x520 [ 143.631465][ C1] ? _raw_spin_lock+0x40/0x40 [ 143.631489][ C1] ? htab_map_hash+0x329/0x6d0 [ 143.631520][ C1] htab_map_delete_elem+0x1b0/0x520 [ 143.631553][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0xb8c [ 143.631573][ C1] bpf_overflow_handler+0x1c2/0x4a0 [ 143.631605][ C1] ? perf_event_switch_output+0x730/0x730 [ 143.631642][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 143.631668][ C1] __perf_event_overflow+0x35f/0x550 [ 143.631698][ C1] perf_bp_event+0x276/0x320 [ 143.631727][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 143.631793][ C1] ? rcu_lock_acquire+0x9/0x30 [ 143.631816][ C1] ? read_lock_is_recursive+0x10/0x10 [ 143.631852][ C1] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 143.631880][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 143.631911][ C1] notify_die+0x141/0x1a0 [ 143.631935][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 143.631968][ C1] ? exc_debug+0x6e/0x130 [ 143.631987][ C1] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 143.632016][ C1] notify_debug+0x20/0x30 [ 143.632036][ C1] exc_debug+0xcf/0x130 [ 143.632060][ C1] asm_exc_debug+0x1a/0x40 [ 143.632077][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 143.632109][ C1] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 143.632126][ C1] RSP: 0018:ffffc900023f77f8 EFLAGS: 00050206 [ 143.632141][ C1] RAX: ffffffff83e66701 RBX: 0000000000033fe0 RCX: 0000000000033ce0 [ 143.632155][ C1] RDX: 0000000000033fe0 RSI: 0000200000000340 RDI: ffffc90003451300 [ 143.632169][ C1] RBP: ffffc900023f7950 R08: ffffc90003484fdf R09: 1ffff920006909fb [ 143.632183][ C1] R10: dffffc0000000000 R11: fffff520006909fc R12: ffffc90003451000 [ 143.632197][ C1] R13: 0000000000033fff R14: 0000200000000040 R15: 0000000000000000 [ 143.632221][ C1] ? _copy_from_iter+0x2d1/0x1160 [ 143.632251][ C1] [ 143.632256][ C1] [ 143.632261][ C1] _copy_from_iter+0x322/0x1160 [ 143.632300][ C1] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 143.632317][ C1] ? __build_skb+0x26/0x2e0 [ 143.632337][ C1] ? rcu_is_watching+0x11/0xa0 [ 143.632355][ C1] ? __build_skb+0x26/0x2e0 [ 143.632373][ C1] ? kmem_cache_alloc+0x189/0x280 [ 143.632392][ C1] ? __virt_addr_valid+0xbd/0x470 [ 143.632413][ C1] ? __phys_addr_symbol+0x2b/0x70 [ 143.632431][ C1] ? __check_object_size+0x30c/0x410 [ 143.632458][ C1] netlink_sendmsg+0x758/0xbe0 [ 143.632494][ C1] ? netlink_getsockopt+0x570/0x570 [ 143.632520][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 143.632544][ C1] ? apparmor_socket_sendmsg+0x88/0x230 [ 143.632566][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 143.632585][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 143.632605][ C1] ? netlink_getsockopt+0x570/0x570 [ 143.632632][ C1] ____sys_sendmsg+0x5be/0x8f0 [ 143.632666][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 143.632702][ C1] ? import_iovec+0x6f/0xa0 [ 143.632728][ C1] ___sys_sendmsg+0x236/0x2e0 [ 143.632763][ C1] ? __sys_sendmsg+0x290/0x290 [ 143.632803][ C1] ? trace_event_raw_event_lock+0x250/0x250 [ 143.632864][ C1] __se_sys_sendmsg+0x1b7/0x2a0 [ 143.632889][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 143.632908][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 143.632951][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 143.632984][ C1] do_syscall_64+0x4c/0xa0 [ 143.633000][ C1] ? clear_bhb_loop+0x30/0x80 [ 143.633017][ C1] ? clear_bhb_loop+0x30/0x80 [ 143.633040][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.633059][ C1] RIP: 0033:0x7f7ca0ec20d9 [ 143.633076][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.633091][ C1] RSP: 002b:00007f7c9f11a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.633109][ C1] RAX: ffffffffffffffda RBX: 00007f7ca1149fa0 RCX: 00007f7ca0ec20d9 [ 143.633123][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 143.633135][ C1] RBP: 00007f7ca0f59024 R08: 0000000000000000 R09: 0000000000000000 [ 143.633147][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.633157][ C1] R13: 00007f7ca114a038 R14: 00007f7ca1149fa0 R15: 00007ffdd343c408 [ 143.633195][ C1] [ 143.838214][ T5446] netlink: 'syz.4.317': attribute type 9 has an invalid length. [ 144.145231][ T5451] FAULT_INJECTION: forcing a failure. [ 144.145231][ T5451] name failslab, interval 1, probability 0, space 0, times 0 [ 144.251261][ T5455] FAULT_INJECTION: forcing a failure. [ 144.251261][ T5455] name failslab, interval 1, probability 0, space 0, times 0 [ 144.268279][ T5446] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.317'. [ 144.271802][ T5455] CPU: 0 PID: 5455 Comm: syz.1.319 Not tainted syzkaller #0 [ 144.271827][ T5455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.271842][ T5455] Call Trace: [ 144.420922][ T5455] [ 144.423881][ T5455] dump_stack_lvl+0x188/0x250 [ 144.428608][ T5455] ? show_regs_print_info+0x20/0x20 [ 144.433917][ T5455] ? load_image+0x410/0x410 [ 144.438450][ T5455] ? rcu_read_lock_held+0x6/0x40 [ 144.443415][ T5455] ? rcu_is_watching+0x11/0xa0 [ 144.448221][ T5455] should_fail+0x383/0x4b0 [ 144.452685][ T5455] should_failslab+0x5/0x20 [ 144.457207][ T5455] slab_pre_alloc_hook+0x51/0xc0 [ 144.462255][ T5455] ? dst_alloc+0x101/0x160 [ 144.466795][ T5455] kmem_cache_alloc+0x3d/0x280 [ 144.471605][ T5455] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 144.477436][ T5455] dst_alloc+0x101/0x160 [ 144.481709][ T5455] ip6_pol_route+0x911/0x12d0 [ 144.487670][ T5455] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 144.493621][ T5455] fib6_rule_lookup+0x222/0x5e0 [ 144.498520][ T5455] ? ip6_route_output_flags_noref+0x390/0x390 [ 144.504629][ T5455] ? fib6_lookup+0x2d0/0x2d0 [ 144.509251][ T5455] ? read_lock_is_recursive+0x10/0x10 [ 144.514765][ T5455] ? __ipv6_addr_type+0x162/0x2e0 [ 144.519813][ T5455] ? ip6_route_output_flags_noref+0x230/0x390 [ 144.525944][ T5455] ip6_route_output_flags+0xbf/0x300 [ 144.531277][ T5455] ip6_dst_lookup_tail+0x1ac/0x1340 [ 144.536508][ T5455] ? perf_tp_event+0xa7e/0xbe0 [ 144.541302][ T5455] ? ip6_dst_lookup+0x60/0x60 [ 144.546096][ T5455] ? __lock_acquire+0x7b50/0x7b50 [ 144.551153][ T5455] ? sk_dst_check+0x2e4/0x430 [ 144.555877][ T5455] ip6_sk_dst_lookup_flow+0x712/0x9b0 [ 144.561285][ T5455] udpv6_sendmsg+0x19ba/0x2520 [ 144.566083][ T5455] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 144.570959][ T5455] ? udp_v6_early_demux+0xe10/0xe10 [ 144.576201][ T5455] ? rcu_nmi_exit+0x6f/0xf0 [ 144.580734][ T5455] ? rcu_is_watching+0x11/0xa0 [ 144.585516][ T5455] ? lock_chain_count+0x20/0x20 [ 144.590393][ T5455] ? lock_release+0xb5/0x8a0 [ 144.595114][ T5455] ? __local_bh_enable_ip+0x136/0x1c0 [ 144.600513][ T5455] ? __local_bh_enable_ip+0x136/0x1c0 [ 144.605925][ T5455] ? inet_send_prepare+0x1aa/0x250 [ 144.611065][ T5455] ? __local_bh_enable_ip+0x136/0x1c0 [ 144.616451][ T5455] ? _local_bh_enable+0xa0/0xa0 [ 144.621333][ T5455] ? do_raw_spin_unlock+0x11d/0x230 [ 144.626559][ T5455] ? inet_send_prepare+0x1aa/0x250 [ 144.631698][ T5455] ? inet_send_prepare+0x1aa/0x250 [ 144.636837][ T5455] ? inet6_sendmsg+0x5b/0xd0 [ 144.641449][ T5455] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 144.646677][ T5455] ____sys_sendmsg+0x5be/0x8f0 [ 144.651476][ T5455] ? __sys_sendmsg_sock+0x30/0x30 [ 144.656637][ T5455] ? import_iovec+0x6f/0xa0 [ 144.661176][ T5455] ___sys_sendmsg+0x236/0x2e0 [ 144.666062][ T5455] ? __sys_sendmsg+0x290/0x290 [ 144.670893][ T5455] __se_sys_sendmsg+0x1b7/0x2a0 [ 144.675772][ T5455] ? __x64_sys_sendmsg+0x80/0x80 [ 144.680744][ T5455] ? syscall_enter_from_user_mode+0x21/0x70 [ 144.686685][ T5455] ? syscall_enter_from_user_mode+0x21/0x70 [ 144.692607][ T5455] do_syscall_64+0x4c/0xa0 [ 144.697046][ T5455] ? clear_bhb_loop+0x30/0x80 [ 144.701770][ T5455] ? clear_bhb_loop+0x30/0x80 [ 144.706508][ T5455] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.712507][ T5455] RIP: 0033:0x7f83863d40d9 [ 144.716944][ T5455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.736598][ T5455] RSP: 002b:00007f838462c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.745036][ T5455] RAX: ffffffffffffffda RBX: 00007f838665bfa0 RCX: 00007f83863d40d9 [ 144.753029][ T5455] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000003 [ 144.761032][ T5455] RBP: 00007f838462c090 R08: 0000000000000000 R09: 0000000000000000 [ 144.769041][ T5455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.777030][ T5455] R13: 00007f838665c038 R14: 00007f838665bfa0 R15: 00007ffdfe232268 [ 144.785212][ T5455] [ 144.845707][ T5451] CPU: 0 PID: 5451 Comm: syz.2.320 Not tainted syzkaller #0 [ 144.853067][ T5451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.863240][ T5451] Call Trace: [ 144.866719][ T5451] [ 144.869764][ T5451] dump_stack_lvl+0x188/0x250 [ 144.874888][ T5451] ? show_regs_print_info+0x20/0x20 [ 144.880137][ T5451] ? load_image+0x410/0x410 [ 144.884710][ T5451] ? perf_trace_lock+0xe4/0x390 [ 144.889819][ T5451] ? __might_sleep+0xf0/0xf0 [ 144.894465][ T5451] ? __lock_acquire+0x7b50/0x7b50 [ 144.899629][ T5451] should_fail+0x383/0x4b0 [ 144.904091][ T5451] should_failslab+0x5/0x20 [ 144.908907][ T5451] slab_pre_alloc_hook+0x51/0xc0 [ 144.913905][ T5451] ? sk_prot_alloc+0x57/0x210 [ 144.918626][ T5451] kmem_cache_alloc+0x3d/0x280 [ 144.923453][ T5451] sk_prot_alloc+0x57/0x210 [ 144.927997][ T5451] ? sk_alloc+0x1d/0x310 [ 144.932453][ T5451] sk_alloc+0x2f/0x310 [ 144.936563][ T5451] pn_socket_create+0xf1/0x510 [ 144.941378][ T5451] __sock_create+0x473/0x910 [ 144.946011][ T5451] __sys_socket+0xe2/0x170 [ 144.950468][ T5451] __x64_sys_socket+0x76/0x80 [ 144.955221][ T5451] do_syscall_64+0x4c/0xa0 [ 144.959791][ T5451] ? clear_bhb_loop+0x30/0x80 [ 144.964507][ T5451] ? clear_bhb_loop+0x30/0x80 [ 144.969249][ T5451] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.975183][ T5451] RIP: 0033:0x7f1c016c00d9 [ 144.979636][ T5451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.999399][ T5451] RSP: 002b:00007f1bff918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 145.007938][ T5451] RAX: ffffffffffffffda RBX: 00007f1c01947fa0 RCX: 00007f1c016c00d9 [ 145.016012][ T5451] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000023 [ 145.024319][ T5451] RBP: 00007f1bff918090 R08: 0000000000000000 R09: 0000000000000000 [ 145.032314][ T5451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.040403][ T5451] R13: 00007f1c01948038 R14: 00007f1c01947fa0 R15: 00007fffea602498 [ 145.048412][ T5451]