last executing test programs: 7.942724181s ago: executing program 0 (id=1340): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 6.618922841s ago: executing program 0 (id=1345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x4, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840)}, 0x0, 0x4, 0x2, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='-cpu'], 0x5) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x17, 0x9, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@generic={0x3, 0x6, 0x2, 0x7ce4, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x2, 0x1, 0x0, r8}, @alu={0x4, 0x0, 0x8, 0x6, 0x4, 0x30, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000880)='syzkaller\x00', 0x0, 0x3b, &(0x7f00000008c0)=""/59, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0x8, 0x8, 0xffff4bef}, 0x10, 0x0, r7, 0x3, 0x0, &(0x7f0000000980)=[{0x0, 0x4, 0x6, 0x3}, {0x3, 0x4, 0x0, 0x5}, {0x1, 0x5, 0xc, 0x2}], 0x10, 0xb5}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000a80)=@o_path={&(0x7f0000000780)='./file0\x00', r10, 0x4000, r1}, 0x18) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc6, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xff7ffff9}, @exit, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) r12 = syz_clone(0x800, &(0x7f0000000640)="e2a1bdb1968bf6129a35c33154a48f18ee7ba06bd7431974ccad6f8bed44bf67598217a2ed0c8cce08f2e03c10a3669b34d602da9fcba87da6be0b7504665a2f36e9a9c805ca9df4a5c3fb55689173e3df1622dc84fab3e3b3c60d47605c59ffc90d4f77c0a45e26498c0a1bec351d27a9871f85a44990f052e9325c7e518a25f70551d0f565ab1d82dee3b59eb75962a230", 0x92, &(0x7f00000003c0), &(0x7f00000001c0), &(0x7f0000000240)="dac9586cf0898e90e17b4c5341961f780ac0415cbb7464eb3408e624f31c7d8596947bc2958c29ac05b8ecf88f") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000480)=r11}, 0x20) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000005c0)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r9], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r13}, &(0x7f0000000580), &(0x7f0000000700)=r14}, 0x20) syz_open_procfs$namespace(r12, &(0x7f0000000280)='ns/time\x00') 6.355856377s ago: executing program 3 (id=1347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x2040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x18) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800007fbaf0620000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 6.254164946s ago: executing program 1 (id=1348): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa06a6, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xe}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x5, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000001580), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0700147ea64e21160af3650ab68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x0, &(0x7f0000000240), 0x0, 0x9f68, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0), &(0x7f0000000400)=[{0x4, 0x4, 0x4, 0x2}, {0x4, 0x2, 0x0, 0x6}, {0x2, 0x3, 0x9, 0xa}, {0x5, 0x4, 0xd, 0x6}, {0x3, 0x3, 0xa}], 0x10, 0x1}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f0000000401a8001600a400014005000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xa000000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) 5.387728532s ago: executing program 3 (id=1350): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) write$cgroup_int(r1, &(0x7f0000000100)=0x1, 0x12) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) socket$kcm(0x2, 0x3, 0x84) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x47, &(0x7f0000000340)=""/71, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0xc, 0x1cc, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb}, 0x94) r4 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0xa1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x82d7) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x40) recvmsg(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socket$kcm(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) 5.056205164s ago: executing program 0 (id=1351): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc2}, 0x0, 0x10003, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x2, 0x73) recvmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x100) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r5, 0x20, &(0x7f00000002c0)={0x0, 0x3c, 0x0, &(0x7f00000000c0)=""/171, 0xab}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_devices(r0, &(0x7f00000003c0)='devices.deny\x00', 0x2, 0x0) 4.943534905s ago: executing program 1 (id=1353): r0 = socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) close(r2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0xa, 0x80, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x90800, 0xca, 0x3ff, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xa}, 0x8}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x40000000001, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x56) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0xfffc, 0x4, @dev, 0xf5}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001a87f01000000dc00000000000000"], 0x18}, 0xfc00) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES64=r7, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r8, &(0x7f00000000c0), &(0x7f0000000380)=""/75}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, r9}, 0x38) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="3eca", @ANYRES8=r3], 0x9a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90235fc6004971100", 0x18}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) 4.439484135s ago: executing program 1 (id=1355): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20880, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000180)}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e120800100002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x2, 0x0, 0x2, 0x0, 0x606bc94f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57bea000000000000000000000000ac1414aa"], 0xfdef) 4.437264725s ago: executing program 2 (id=1356): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00020000010000081100000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x4000000) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000001c0)={'hsr0\x00', @multicast}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r5, r4, 0x4, r4}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000080), 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYBLOB="00000000040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800faffffffffffffff0000000001009500000000000000"], &(0x7f0000002100)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r9, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x40000c1) recvmsg$unix(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{0x0, 0x2}], 0x1}, 0x0) 4.269584951s ago: executing program 3 (id=1357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r2 = socket$kcm(0x25, 0x1, 0x0) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) socket$kcm(0xa, 0x2, 0x88) (async, rerun: 32) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021c080406037c09e8fe55a10a0015400200142603600e122f00160004000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ed50c3e7867a9d3026cd0a23394d78c24cbee5de6ccd40dd6e4edef3d93", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x20000000) (async) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x18, 0x1, 0x25, 0x102}}], 0x18}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) (async) r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='cpu\t&-&&\t') ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) (async) ioctl$TUNSETLINK(r5, 0x400454cd, 0x30a) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x1000}) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) sendmsg$kcm(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)=[{&(0x7f0000005f80)}], 0x1}, 0x4) 3.684150359s ago: executing program 3 (id=1358): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e12090003", 0x27}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0e000091d028ef8020ab0700050005"], 0xfe33) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {&(0x7f00000000c0)="06081833d0062d04944103", 0xb}], 0x2}, 0x0) 3.656878691s ago: executing program 2 (id=1366): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) (async) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 64) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (rerun: 64) r4 = socket$kcm(0x10, 0x3, 0x10) (async) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYRESDEC=r3, @ANYRES32=r2, @ANYRES64=r6, @ANYRES16=r2, @ANYRES16=r0], 0x48) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63ae", 0xb}], 0x1, 0x0, 0x6b}, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f952a3c92b", 0x14}], 0x1}, 0x0) 3.095899087s ago: executing program 2 (id=1359): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000600000000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000140), 0x0}, 0x20) socket$kcm(0x11, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0002000000000000005123ca00040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000001008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r2, 0x58, &(0x7f00000003c0)}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000005000000090000000500001311b000000900000000000000ff0100000200000001000000462d0000100000009aea000009000000040000000400000004000000030000000e000000000800000000306100"], 0x0, 0x65, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r9 = getpid() write$cgroup_pid(r8, &(0x7f0000000880)=r9, 0x12) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r10, @ANYRES32=r10, @ANYBLOB="2f00000010000000040000", @ANYRES32, @ANYBLOB="8fe58b"], 0x20) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x20, 0xc, 0x40, 0x5, 0x0, 0x6d4, 0x20200, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x3, 0x7523}, 0x4200, 0x6, 0x2, 0x6, 0x3, 0x7, 0x3, 0x0, 0x9f1, 0x0, 0x8000000000000001}, r9, 0x5, r6, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r11) sendmsg$kcm(r5, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0xc7, 0x0}, 0x20040010) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0xfe}, 0x80, 0x0}, 0x20000000) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091ef"], 0xfe33) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="040000e6fffffffffff7ff26af9d1a0b073401e2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000400"/28], 0x50) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)=0x141086) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r3, 0x20, &(0x7f0000000340)={&(0x7f0000000240)=""/172, 0xac, 0x0, &(0x7f0000000300)=""/41, 0x29}}, 0x10) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_stop_ret\x00', r1}, 0x18) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r12}, 0x8) 3.086605757s ago: executing program 1 (id=1360): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc04", 0x10}], 0x1}, 0x40000) 3.048821971s ago: executing program 3 (id=1361): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa06a6, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xe}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x5, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000001580), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0700147ea64e21160af3650ab68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x0, &(0x7f0000000240), 0x0, 0x9f68, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0), &(0x7f0000000400)=[{0x4, 0x4, 0x4, 0x2}, {0x4, 0x2, 0x0, 0x6}, {0x2, 0x3, 0x9, 0xa}, {0x5, 0x4, 0xd, 0x6}, {0x3, 0x3, 0xa}], 0x10, 0x1}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f0000000401a8001600a400014005000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xa000000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) 2.815510554s ago: executing program 1 (id=1362): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x1c}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001002"], 0x0, 0x56}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3e3}, 0xffffffffffffff10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x4, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='svc_xprt_enqueue\x00', r0, 0x0, 0x6}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x5, 0x36, 0x0, &(0x7f0000000040)="4919d2132568163ddd14f95c22931df016ba61daefe5dec8c6fe3cf95f882d3dd526939379f8e2af1311e424c6e8b7fe63c6cd8a8c60", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) 2.623849273s ago: executing program 2 (id=1363): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r7}, 0x10) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce980000000000005e080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.55269747s ago: executing program 0 (id=1364): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000900000000000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xabe8, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 516.50613ms ago: executing program 3 (id=1365): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) write$cgroup_int(r1, &(0x7f0000000100)=0x1, 0x12) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) socket$kcm(0x2, 0x3, 0x84) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x47, &(0x7f0000000340)=""/71, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0xc, 0x1cc, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb}, 0x94) r4 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0xa1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00'], 0x82d7) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x40) recvmsg(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socket$kcm(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) 443.950257ms ago: executing program 2 (id=1367): r0 = socket$kcm(0xa, 0xa, 0x106) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x2e, 0x1, 0x8001, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r2, 0xffffffffffffffff, 0x2f, 0x2, 0x0, @void, @value, @void, @void, r1}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/199, 0xc7}], 0x1}, 0x20) 441.332687ms ago: executing program 0 (id=1368): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x601b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8008}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 213.047989ms ago: executing program 1 (id=1369): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20880, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000180)}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e120800100002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x2, 0x0, 0x2, 0x0, 0x606bc94f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57bea000000000000000000000000ac1414aa"], 0xfdef) 197.440501ms ago: executing program 0 (id=1370): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x601b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8008}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 7) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1371): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc04", 0x10}], 0x1}, 0x40000) kernel console output (not intermixed with test programs): f0 [ 160.776816][ T7330] dev_ioctl+0x7e2/0x1170 [ 160.781164][ T7330] sock_do_ioctl+0x226/0x2f0 [ 160.785768][ T7330] ? sock_show_fdinfo+0xb0/0xb0 [ 160.790664][ T7330] sock_ioctl+0x623/0x7a0 [ 160.795040][ T7330] ? sock_poll+0x3d0/0x3d0 [ 160.799490][ T7330] ? bpf_lsm_file_ioctl+0x9/0x10 [ 160.804443][ T7330] ? security_file_ioctl+0x80/0xa0 [ 160.809583][ T7330] ? sock_poll+0x3d0/0x3d0 [ 160.814020][ T7330] __se_sys_ioctl+0xfd/0x170 [ 160.818630][ T7330] do_syscall_64+0x55/0xb0 [ 160.823062][ T7330] ? clear_bhb_loop+0x40/0x90 [ 160.827752][ T7330] ? clear_bhb_loop+0x40/0x90 [ 160.832446][ T7330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.838351][ T7330] RIP: 0033:0x7f29b918eec9 [ 160.842783][ T7330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.862411][ T7330] RSP: 002b:00007f29ba03e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.870841][ T7330] RAX: ffffffffffffffda RBX: 00007f29b93e6180 RCX: 00007f29b918eec9 [ 160.878826][ T7330] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000006 [ 160.886812][ T7330] RBP: 00007f29ba03e090 R08: 0000000000000000 R09: 0000000000000000 [ 160.894802][ T7330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.902783][ T7330] R13: 00007f29b93e6218 R14: 00007f29b93e6180 R15: 00007ffe818dd898 [ 160.910789][ T7330] [ 160.917363][ T7330] syzkaller0: refused to change device tx_queue_len [ 162.291387][ T7354] netlink: 'syz.0.524': attribute type 10 has an invalid length. [ 162.309050][ T7354] netlink: 40 bytes leftover after parsing attributes in process `syz.0.524'. [ 162.500147][ T7357] netlink: 'syz.1.526': attribute type 10 has an invalid length. [ 162.538198][ T7357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.526'. [ 162.548233][ T7357] dummy0: entered promiscuous mode [ 163.300092][ T7379] FAULT_INJECTION: forcing a failure. [ 163.300092][ T7379] name failslab, interval 1, probability 0, space 0, times 0 [ 163.325113][ T7379] CPU: 1 PID: 7379 Comm: syz.1.533 Not tainted syzkaller #0 [ 163.332464][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 163.342561][ T7379] Call Trace: [ 163.345863][ T7379] [ 163.348825][ T7379] dump_stack_lvl+0x16c/0x230 [ 163.353554][ T7379] ? show_regs_print_info+0x20/0x20 [ 163.358810][ T7379] ? load_image+0x3b0/0x3b0 [ 163.363347][ T7379] ? __might_sleep+0xe0/0xe0 [ 163.367970][ T7379] ? __lock_acquire+0x7c80/0x7c80 [ 163.373040][ T7379] should_fail_ex+0x39d/0x4d0 [ 163.377765][ T7379] should_failslab+0x9/0x20 [ 163.382316][ T7379] slab_pre_alloc_hook+0x59/0x310 [ 163.387395][ T7379] ? __lock_acquire+0x7c80/0x7c80 [ 163.392461][ T7379] kmem_cache_alloc_node+0x60/0x330 [ 163.397703][ T7379] ? __alloc_skb+0x108/0x2c0 [ 163.402370][ T7379] __alloc_skb+0x108/0x2c0 [ 163.406838][ T7379] netlink_sendmsg+0x65b/0xbe0 [ 163.411659][ T7379] ? netlink_getsockopt+0x580/0x580 [ 163.416909][ T7379] ? aa_sock_msg_perm+0x94/0x150 [ 163.421908][ T7379] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 163.427213][ T7379] ? security_socket_sendmsg+0x80/0xa0 [ 163.432692][ T7379] ? netlink_getsockopt+0x580/0x580 [ 163.437905][ T7379] ____sys_sendmsg+0x5bf/0x950 [ 163.442700][ T7379] ? __asan_memset+0x22/0x40 [ 163.447308][ T7379] ? __sys_sendmsg_sock+0x30/0x30 [ 163.452361][ T7379] ? __import_iovec+0x5f2/0x860 [ 163.457296][ T7379] ? import_iovec+0x73/0xa0 [ 163.461828][ T7379] ___sys_sendmsg+0x220/0x290 [ 163.466528][ T7379] ? __sys_sendmsg+0x270/0x270 [ 163.471335][ T7379] ? __lock_acquire+0x7c80/0x7c80 [ 163.476399][ T7379] __se_sys_sendmsg+0x1a5/0x270 [ 163.481277][ T7379] ? __x64_sys_sendmsg+0x80/0x80 [ 163.486254][ T7379] ? lockdep_hardirqs_on+0x98/0x150 [ 163.491486][ T7379] do_syscall_64+0x55/0xb0 [ 163.495923][ T7379] ? clear_bhb_loop+0x40/0x90 [ 163.500611][ T7379] ? clear_bhb_loop+0x40/0x90 [ 163.505305][ T7379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.511210][ T7379] RIP: 0033:0x7fe2a7d8eec9 [ 163.515640][ T7379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.535259][ T7379] RSP: 002b:00007fe2a8bf0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.543698][ T7379] RAX: ffffffffffffffda RBX: 00007fe2a7fe5fa0 RCX: 00007fe2a7d8eec9 [ 163.551687][ T7379] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 163.559672][ T7379] RBP: 00007fe2a8bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 163.567656][ T7379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.575645][ T7379] R13: 00007fe2a7fe6038 R14: 00007fe2a7fe5fa0 R15: 00007ffd203b3d58 [ 163.583644][ T7379] [ 164.419690][ T7393] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 164.427628][ T7393] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.540'. [ 165.281060][ T7412] netlink: 'syz.1.547': attribute type 4 has an invalid length. [ 165.291224][ T7412] netlink: 132 bytes leftover after parsing attributes in process `syz.1.547'. [ 165.874547][ T7423] netlink: 'syz.2.550': attribute type 3 has an invalid length. [ 165.905121][ T7423] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.550'. [ 166.981338][ T7443] netlink: 60 bytes leftover after parsing attributes in process `syz.0.559'. [ 167.021378][ T7443] netlink: 60 bytes leftover after parsing attributes in process `syz.0.559'. [ 167.144100][ T7444] netlink: 60 bytes leftover after parsing attributes in process `syz.0.559'. [ 167.197172][ T7444] netlink: 60 bytes leftover after parsing attributes in process `syz.0.559'. [ 168.833828][ T7463] netlink: 'syz.1.563': attribute type 10 has an invalid length. [ 168.933808][ T7463] dummy0: left promiscuous mode [ 169.177297][ T7463] team0: Port device dummy0 added [ 169.216964][ T7464] netlink: 'syz.1.563': attribute type 10 has an invalid length. [ 169.354316][ T7464] team0: Port device dummy0 removed [ 169.377617][ T7464] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 169.387122][ T7474] IPv6: NLM_F_CREATE should be specified when creating new route [ 169.414592][ T7481] netlink: 830 bytes leftover after parsing attributes in process `syz.3.570'. [ 169.440583][ T7490] netlink: 'syz.0.571': attribute type 2 has an invalid length. [ 169.459583][ T7482] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.570'. [ 169.469927][ T7490] netlink: 'syz.0.571': attribute type 3 has an invalid length. [ 169.477642][ T7490] netlink: 132 bytes leftover after parsing attributes in process `syz.0.571'. [ 171.244416][ T7516] bridge_slave_1: left allmulticast mode [ 171.252154][ T7516] bridge_slave_1: left promiscuous mode [ 171.259049][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.314209][ T7516] bridge_slave_0: left allmulticast mode [ 171.331489][ T7516] bridge_slave_0: left promiscuous mode [ 171.352727][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.552468][ T7516] bond0: (slave bridge0): Releasing backup interface [ 171.693982][ T7518] netlink: 'syz.1.581': attribute type 10 has an invalid length. [ 171.872299][ T7528] netlink: 'syz.0.583': attribute type 13 has an invalid length. [ 171.883080][ T7526] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.583'. [ 171.916645][ T7528] macvtap0: entered promiscuous mode [ 171.967815][ T7528] macvtap0: refused to change device tx_queue_len [ 171.989064][ T7526] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.583'. [ 173.895144][ T7579] FAULT_INJECTION: forcing a failure. [ 173.895144][ T7579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.924004][ T7579] CPU: 0 PID: 7579 Comm: syz.1.600 Not tainted syzkaller #0 [ 173.931367][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 173.941464][ T7579] Call Trace: [ 173.944796][ T7579] [ 173.947753][ T7579] dump_stack_lvl+0x16c/0x230 [ 173.952479][ T7579] ? show_regs_print_info+0x20/0x20 [ 173.957723][ T7579] ? load_image+0x3b0/0x3b0 [ 173.962271][ T7579] ? __might_fault+0xaa/0x120 [ 173.966998][ T7579] ? __lock_acquire+0x7c80/0x7c80 [ 173.972082][ T7579] should_fail_ex+0x39d/0x4d0 [ 173.976816][ T7579] _copy_from_iter+0x1d3/0x1290 [ 173.981712][ T7579] ? __virt_addr_valid+0x18c/0x540 [ 173.986876][ T7579] ? __lock_acquire+0x7c80/0x7c80 [ 173.991963][ T7579] ? copyout_mc+0x70/0x70 [ 173.996341][ T7579] ? __virt_addr_valid+0x18c/0x540 [ 174.001518][ T7579] ? __virt_addr_valid+0x18c/0x540 [ 174.006684][ T7579] ? __virt_addr_valid+0x469/0x540 [ 174.011955][ T7579] ? __check_object_size+0x506/0xa30 [ 174.017296][ T7579] kernfs_fop_write_iter+0x1a4/0x520 [ 174.022645][ T7579] vfs_write+0x43b/0x940 [ 174.026943][ T7579] ? file_end_write+0x250/0x250 [ 174.031852][ T7579] ? __fget_files+0x44a/0x4d0 [ 174.036594][ T7579] ? __fdget_pos+0x2a3/0x330 [ 174.041236][ T7579] ? ksys_write+0x75/0x250 [ 174.045712][ T7579] ksys_write+0x147/0x250 [ 174.050097][ T7579] ? __ia32_sys_read+0x90/0x90 [ 174.054917][ T7579] ? lockdep_hardirqs_on+0x98/0x150 [ 174.060174][ T7579] do_syscall_64+0x55/0xb0 [ 174.064639][ T7579] ? clear_bhb_loop+0x40/0x90 [ 174.069364][ T7579] ? clear_bhb_loop+0x40/0x90 [ 174.074093][ T7579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.080032][ T7579] RIP: 0033:0x7fe2a7d8eec9 [ 174.084491][ T7579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.104142][ T7579] RSP: 002b:00007fe2a8bf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 174.112596][ T7579] RAX: ffffffffffffffda RBX: 00007fe2a7fe5fa0 RCX: 00007fe2a7d8eec9 [ 174.120595][ T7579] RDX: 000000000000002f RSI: 0000200000000140 RDI: 0000000000000005 [ 174.128588][ T7579] RBP: 00007fe2a8bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 174.136581][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.144574][ T7579] R13: 00007fe2a7fe6038 R14: 00007fe2a7fe5fa0 R15: 00007ffd203b3d58 [ 174.152582][ T7579] [ 174.220292][ T7582] netlink: 830 bytes leftover after parsing attributes in process `syz.0.601'. [ 174.230200][ T7582] bond_slave_0: entered promiscuous mode [ 174.236357][ T7582] bond_slave_1: entered promiscuous mode [ 174.242252][ T7582] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 174.250606][ T7582] bridge0: entered promiscuous mode [ 174.544813][ T7594] netlink: 'syz.2.604': attribute type 1 has an invalid length. [ 174.552583][ T7594] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.604'. [ 174.838683][ T7602] netlink: 'syz.2.606': attribute type 7 has an invalid length. [ 176.844012][ T7641] FAULT_INJECTION: forcing a failure. [ 176.844012][ T7641] name failslab, interval 1, probability 0, space 0, times 0 [ 176.857582][ T7641] CPU: 0 PID: 7641 Comm: syz.3.620 Not tainted syzkaller #0 [ 176.864925][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 176.875024][ T7641] Call Trace: [ 176.878359][ T7641] [ 176.881332][ T7641] dump_stack_lvl+0x16c/0x230 [ 176.886059][ T7641] ? __sctp_connect+0x5a2/0xd20 [ 176.890958][ T7641] ? sctp_setsockopt+0x6d8/0x11e0 [ 176.896034][ T7641] ? show_regs_print_info+0x20/0x20 [ 176.901278][ T7641] ? load_image+0x3b0/0x3b0 [ 176.905840][ T7641] should_fail_ex+0x39d/0x4d0 [ 176.910580][ T7641] should_failslab+0x9/0x20 [ 176.915131][ T7641] slab_pre_alloc_hook+0x59/0x310 [ 176.920206][ T7641] ? sctp_add_bind_addr+0x8c/0x360 [ 176.925362][ T7641] __kmem_cache_alloc_node+0x53/0x260 [ 176.930796][ T7641] ? sctp_add_bind_addr+0x8c/0x360 [ 176.935951][ T7641] kmalloc_trace+0x2a/0xe0 [ 176.940422][ T7641] sctp_add_bind_addr+0x8c/0x360 [ 176.945425][ T7641] sctp_copy_local_addr_list+0x30c/0x4e0 [ 176.951106][ T7641] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 176.956882][ T7641] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 176.962987][ T7641] ? sctp_v4_is_any+0x35/0x60 [ 176.967693][ T7641] ? sctp_copy_one_addr+0x8c/0x350 [ 176.972850][ T7641] sctp_bind_addr_copy+0x189/0x3c0 [ 176.978005][ T7641] sctp_connect_new_asoc+0x2da/0x690 [ 176.983334][ T7641] ? __sctp_connect+0xd20/0xd20 [ 176.988227][ T7641] ? mark_lock+0x94/0x320 [ 176.992579][ T7641] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 176.998414][ T7641] __sctp_connect+0x5a2/0xd20 [ 177.003142][ T7641] ? sctp_send_asconf+0x170/0x170 [ 177.008291][ T7641] ? __local_bh_enable_ip+0x12e/0x1c0 [ 177.013681][ T7641] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 177.019254][ T7641] ? security_sctp_bind_connect+0x89/0xb0 [ 177.025001][ T7641] sctp_setsockopt_connectx+0x104/0x1a0 [ 177.030587][ T7641] sctp_setsockopt+0x6d8/0x11e0 [ 177.035463][ T7641] ? sock_common_recvmsg+0x1b0/0x1b0 [ 177.040776][ T7641] do_sock_setsockopt+0x175/0x1a0 [ 177.045819][ T7641] ? __fdget+0x180/0x210 [ 177.050084][ T7641] __x64_sys_setsockopt+0x184/0x200 [ 177.055311][ T7641] do_syscall_64+0x55/0xb0 [ 177.059754][ T7641] ? clear_bhb_loop+0x40/0x90 [ 177.064450][ T7641] ? clear_bhb_loop+0x40/0x90 [ 177.069144][ T7641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.075054][ T7641] RIP: 0033:0x7fe332b8eec9 [ 177.079492][ T7641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.099119][ T7641] RSP: 002b:00007fe333aa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 177.107555][ T7641] RAX: ffffffffffffffda RBX: 00007fe332de6090 RCX: 00007fe332b8eec9 [ 177.115563][ T7641] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000008 [ 177.123560][ T7641] RBP: 00007fe333aa7090 R08: 0000000000000020 R09: 0000000000000000 [ 177.131559][ T7641] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.139555][ T7641] R13: 00007fe332de6128 R14: 00007fe332de6090 R15: 00007ffd84a7bfd8 [ 177.147598][ T7641] [ 178.699895][ T7683] FAULT_INJECTION: forcing a failure. [ 178.699895][ T7683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.748253][ T7683] CPU: 1 PID: 7683 Comm: syz.1.633 Not tainted syzkaller #0 [ 178.755611][ T7683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.765693][ T7683] Call Trace: [ 178.769008][ T7683] [ 178.771967][ T7683] dump_stack_lvl+0x16c/0x230 [ 178.776723][ T7683] ? show_regs_print_info+0x20/0x20 [ 178.781962][ T7683] ? load_image+0x3b0/0x3b0 [ 178.786505][ T7683] ? __lock_acquire+0x7c80/0x7c80 [ 178.791562][ T7683] ? snprintf+0xdb/0x120 [ 178.795841][ T7683] should_fail_ex+0x39d/0x4d0 [ 178.800566][ T7683] _copy_to_user+0x2f/0xa0 [ 178.805032][ T7683] simple_read_from_buffer+0xe7/0x150 [ 178.810452][ T7683] proc_fail_nth_read+0x1e3/0x250 [ 178.815516][ T7683] ? proc_fault_inject_write+0x340/0x340 [ 178.821195][ T7683] ? fsnotify_perm+0x271/0x5e0 [ 178.826029][ T7683] ? proc_fault_inject_write+0x340/0x340 [ 178.831697][ T7683] vfs_read+0x27e/0x920 [ 178.835897][ T7683] ? kernel_read+0x1e0/0x1e0 [ 178.840535][ T7683] ? __fget_files+0x28/0x4d0 [ 178.845169][ T7683] ? __fget_files+0x44a/0x4d0 [ 178.849892][ T7683] ? __fdget_pos+0x2a3/0x330 [ 178.854517][ T7683] ? ksys_read+0x75/0x250 [ 178.858887][ T7683] ksys_read+0x147/0x250 [ 178.863179][ T7683] ? vfs_write+0x940/0x940 [ 178.867637][ T7683] ? lockdep_hardirqs_on+0x98/0x150 [ 178.872892][ T7683] do_syscall_64+0x55/0xb0 [ 178.877359][ T7683] ? clear_bhb_loop+0x40/0x90 [ 178.882071][ T7683] ? clear_bhb_loop+0x40/0x90 [ 178.886786][ T7683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.892733][ T7683] RIP: 0033:0x7fe2a7d8d8dc [ 178.897195][ T7683] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 178.916840][ T7683] RSP: 002b:00007fe2a8bf0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.925287][ T7683] RAX: ffffffffffffffda RBX: 00007fe2a7fe5fa0 RCX: 00007fe2a7d8d8dc [ 178.933289][ T7683] RDX: 000000000000000f RSI: 00007fe2a8bf00a0 RDI: 0000000000000005 [ 178.941295][ T7683] RBP: 00007fe2a8bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 178.949294][ T7683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.957295][ T7683] R13: 00007fe2a7fe6038 R14: 00007fe2a7fe5fa0 R15: 00007ffd203b3d58 [ 178.965315][ T7683] [ 179.718936][ T7697] FAULT_INJECTION: forcing a failure. [ 179.718936][ T7697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.739590][ T7697] CPU: 0 PID: 7697 Comm: syz.2.639 Not tainted syzkaller #0 [ 179.746946][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 179.757041][ T7697] Call Trace: [ 179.760354][ T7697] [ 179.763315][ T7697] dump_stack_lvl+0x16c/0x230 [ 179.768044][ T7697] ? show_regs_print_info+0x20/0x20 [ 179.773288][ T7697] ? load_image+0x3b0/0x3b0 [ 179.777833][ T7697] ? __might_fault+0xaa/0x120 [ 179.782561][ T7697] ? __lock_acquire+0x7c80/0x7c80 [ 179.787635][ T7697] should_fail_ex+0x39d/0x4d0 [ 179.792364][ T7697] _copy_from_iter+0x1d3/0x1290 [ 179.797271][ T7697] ? slab_post_alloc_hook+0x8a/0x4d0 [ 179.802605][ T7697] ? __virt_addr_valid+0x18c/0x540 [ 179.807757][ T7697] ? __lock_acquire+0x7c80/0x7c80 [ 179.812816][ T7697] ? rcu_is_watching+0x15/0xb0 [ 179.817630][ T7697] ? copyout_mc+0x70/0x70 [ 179.822006][ T7697] ? __virt_addr_valid+0x18c/0x540 [ 179.827159][ T7697] ? __virt_addr_valid+0x18c/0x540 [ 179.832315][ T7697] ? __virt_addr_valid+0x469/0x540 [ 179.837476][ T7697] ? __check_object_size+0x506/0xa30 [ 179.842817][ T7697] netlink_sendmsg+0x75c/0xbe0 [ 179.847633][ T7697] ? netlink_getsockopt+0x580/0x580 [ 179.852877][ T7697] ? aa_sock_msg_perm+0x94/0x150 [ 179.857859][ T7697] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 179.863202][ T7697] ? security_socket_sendmsg+0x80/0xa0 [ 179.868698][ T7697] ? netlink_getsockopt+0x580/0x580 [ 179.873952][ T7697] ____sys_sendmsg+0x5bf/0x950 [ 179.878769][ T7697] ? __asan_memset+0x22/0x40 [ 179.883400][ T7697] ? __sys_sendmsg_sock+0x30/0x30 [ 179.888463][ T7697] ? __import_iovec+0x5f2/0x860 [ 179.893360][ T7697] ? import_iovec+0x73/0xa0 [ 179.897922][ T7697] ___sys_sendmsg+0x220/0x290 [ 179.902645][ T7697] ? __sys_sendmsg+0x270/0x270 [ 179.907470][ T7697] ? __lock_acquire+0x7c80/0x7c80 [ 179.912558][ T7697] __se_sys_sendmsg+0x1a5/0x270 [ 179.917450][ T7697] ? __x64_sys_sendmsg+0x80/0x80 [ 179.922445][ T7697] ? lockdep_hardirqs_on+0x98/0x150 [ 179.927688][ T7697] do_syscall_64+0x55/0xb0 [ 179.932140][ T7697] ? clear_bhb_loop+0x40/0x90 [ 179.936848][ T7697] ? clear_bhb_loop+0x40/0x90 [ 179.941563][ T7697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.947485][ T7697] RIP: 0033:0x7f701838eec9 [ 179.951939][ T7697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.971585][ T7697] RSP: 002b:00007f701914f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.980039][ T7697] RAX: ffffffffffffffda RBX: 00007f70185e5fa0 RCX: 00007f701838eec9 [ 179.988046][ T7697] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 179.996052][ T7697] RBP: 00007f701914f090 R08: 0000000000000000 R09: 0000000000000000 [ 180.004055][ T7697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.012063][ T7697] R13: 00007f70185e6038 R14: 00007f70185e5fa0 R15: 00007ffecb577c28 [ 180.020091][ T7697] [ 180.082825][ T7699] FAULT_INJECTION: forcing a failure. [ 180.082825][ T7699] name failslab, interval 1, probability 0, space 0, times 0 [ 180.134282][ T7699] CPU: 0 PID: 7699 Comm: syz.3.640 Not tainted syzkaller #0 [ 180.141680][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 180.151809][ T7699] Call Trace: [ 180.155161][ T7699] [ 180.158169][ T7699] dump_stack_lvl+0x16c/0x230 [ 180.162949][ T7699] ? show_regs_print_info+0x20/0x20 [ 180.168238][ T7699] ? load_image+0x3b0/0x3b0 [ 180.172834][ T7699] ? __might_sleep+0xe0/0xe0 [ 180.177518][ T7699] ? __lock_acquire+0x7c80/0x7c80 [ 180.182622][ T7699] ? rcu_is_watching+0x15/0xb0 [ 180.187491][ T7699] should_fail_ex+0x39d/0x4d0 [ 180.192274][ T7699] should_failslab+0x9/0x20 [ 180.196860][ T7699] slab_pre_alloc_hook+0x59/0x310 [ 180.201977][ T7699] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 180.207963][ T7699] __kmem_cache_alloc_node+0x53/0x260 [ 180.213435][ T7699] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 180.219415][ T7699] kmalloc_trace+0x2a/0xe0 [ 180.223929][ T7699] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 180.229773][ T7699] sctp_association_new+0x15d3/0x25c0 [ 180.235294][ T7699] sctp_connect_new_asoc+0x2bf/0x690 [ 180.240692][ T7699] ? __sctp_connect+0xd20/0xd20 [ 180.245634][ T7699] ? __local_bh_enable_ip+0x12e/0x1c0 [ 180.251111][ T7699] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 180.256741][ T7699] ? security_sctp_bind_connect+0x89/0xb0 [ 180.262568][ T7699] sctp_sendmsg+0x155c/0x27e0 [ 180.267385][ T7699] ? sctp_getsockopt+0xb60/0xb60 [ 180.272423][ T7699] ? aa_sk_perm+0x7fc/0x930 [ 180.277032][ T7699] ? aa_af_perm+0x2b0/0x2b0 [ 180.281621][ T7699] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 180.288135][ T7699] ? sock_rps_record_flow+0x19/0x400 [ 180.293496][ T7699] ? inet_send_prepare+0x260/0x260 [ 180.298687][ T7699] ? inet_sendmsg+0xe9/0x2f0 [ 180.303383][ T7699] ? inet_send_prepare+0x260/0x260 [ 180.308571][ T7699] ____sys_sendmsg+0x5bf/0x950 [ 180.313455][ T7699] ? __asan_memset+0x22/0x40 [ 180.318128][ T7699] ? __sys_sendmsg_sock+0x30/0x30 [ 180.323229][ T7699] ? __import_iovec+0x5f2/0x860 [ 180.328201][ T7699] ? import_iovec+0x73/0xa0 [ 180.332809][ T7699] ___sys_sendmsg+0x220/0x290 [ 180.337589][ T7699] ? __sys_sendmsg+0x270/0x270 [ 180.342525][ T7699] ? __lock_acquire+0x7c80/0x7c80 [ 180.347740][ T7699] __se_sys_sendmsg+0x1a5/0x270 [ 180.352689][ T7699] ? __x64_sys_sendmsg+0x80/0x80 [ 180.357790][ T7699] ? lockdep_hardirqs_on+0x98/0x150 [ 180.363102][ T7699] do_syscall_64+0x55/0xb0 [ 180.367601][ T7699] ? clear_bhb_loop+0x40/0x90 [ 180.372346][ T7699] ? clear_bhb_loop+0x40/0x90 [ 180.377107][ T7699] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.383072][ T7699] RIP: 0033:0x7fe332b8eec9 [ 180.387565][ T7699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.407245][ T7699] RSP: 002b:00007fe333ac8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.415744][ T7699] RAX: ffffffffffffffda RBX: 00007fe332de5fa0 RCX: 00007fe332b8eec9 [ 180.423790][ T7699] RDX: 00000000000000c9 RSI: 0000200000002dc0 RDI: 0000000000000005 [ 180.431833][ T7699] RBP: 00007fe333ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 180.439882][ T7699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.447920][ T7699] R13: 00007fe332de6038 R14: 00007fe332de5fa0 R15: 00007ffd84a7bfd8 [ 180.456030][ T7699] [ 181.290118][ T7736] netlink: 'syz.3.652': attribute type 7 has an invalid length. [ 182.390964][ T7752] netlink: 'syz.1.657': attribute type 10 has an invalid length. [ 182.865819][ T7752] bond0: (slave dummy0): Releasing backup interface [ 182.934387][ T7752] team0: Port device dummy0 added [ 185.498158][ T7797] netlink: 'syz.2.668': attribute type 10 has an invalid length. [ 187.235634][ T7816] netlink: 'syz.0.675': attribute type 10 has an invalid length. [ 187.955276][ T7816] team0: Port device geneve1 added [ 188.378910][ T7830] netlink: 'syz.1.680': attribute type 10 has an invalid length. [ 188.420453][ T7830] netlink: 156 bytes leftover after parsing attributes in process `syz.1.680'. [ 189.181552][ T7849] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.687'. [ 189.212136][ T7849] netlink: 'syz.3.687': attribute type 2 has an invalid length. [ 189.369154][ T7853] netlink: 'syz.1.690': attribute type 10 has an invalid length. [ 189.377698][ T7853] netlink: 156 bytes leftover after parsing attributes in process `syz.1.690'. [ 189.713559][ T7866] FAULT_INJECTION: forcing a failure. [ 189.713559][ T7866] name failslab, interval 1, probability 0, space 0, times 0 [ 189.732084][ T7866] CPU: 0 PID: 7866 Comm: syz.1.694 Not tainted syzkaller #0 [ 189.739456][ T7866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 189.749547][ T7866] Call Trace: [ 189.752855][ T7866] [ 189.755818][ T7866] dump_stack_lvl+0x16c/0x230 [ 189.760635][ T7866] ? show_regs_print_info+0x20/0x20 [ 189.765872][ T7866] ? load_image+0x3b0/0x3b0 [ 189.770415][ T7866] ? verify_lock_unused+0x140/0x140 [ 189.775653][ T7866] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 189.781337][ T7866] should_fail_ex+0x39d/0x4d0 [ 189.786078][ T7866] should_failslab+0x9/0x20 [ 189.790630][ T7866] slab_pre_alloc_hook+0x59/0x310 [ 189.795714][ T7866] kmem_cache_alloc+0x5a/0x2e0 [ 189.800525][ T7866] ? skb_clone+0x1eb/0x370 [ 189.805005][ T7866] skb_clone+0x1eb/0x370 [ 189.809307][ T7866] __netlink_deliver_tap+0x41c/0x830 [ 189.814653][ T7866] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.819903][ T7866] netlink_deliver_tap+0x19c/0x1b0 [ 189.825054][ T7866] netlink_unicast+0x72c/0x8d0 [ 189.829854][ T7866] netlink_sendmsg+0x8c1/0xbe0 [ 189.834644][ T7866] ? netlink_getsockopt+0x580/0x580 [ 189.839861][ T7866] ? aa_sock_msg_perm+0x94/0x150 [ 189.844818][ T7866] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 189.850118][ T7866] ? security_socket_sendmsg+0x80/0xa0 [ 189.855589][ T7866] ? netlink_getsockopt+0x580/0x580 [ 189.860810][ T7866] ____sys_sendmsg+0x5bf/0x950 [ 189.865606][ T7866] ? __asan_memset+0x22/0x40 [ 189.870306][ T7866] ? __sys_sendmsg_sock+0x30/0x30 [ 189.875349][ T7866] ? __import_iovec+0x5f2/0x860 [ 189.880235][ T7866] ? import_iovec+0x73/0xa0 [ 189.884853][ T7866] ___sys_sendmsg+0x220/0x290 [ 189.889554][ T7866] ? __sys_sendmsg+0x270/0x270 [ 189.894359][ T7866] ? __lock_acquire+0x7c80/0x7c80 [ 189.899422][ T7866] __se_sys_sendmsg+0x1a5/0x270 [ 189.904297][ T7866] ? __x64_sys_sendmsg+0x80/0x80 [ 189.909263][ T7866] ? lockdep_hardirqs_on+0x98/0x150 [ 189.914493][ T7866] do_syscall_64+0x55/0xb0 [ 189.919008][ T7866] ? clear_bhb_loop+0x40/0x90 [ 189.923692][ T7866] ? clear_bhb_loop+0x40/0x90 [ 189.928383][ T7866] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.934290][ T7866] RIP: 0033:0x7fe2a7d8eec9 [ 189.938718][ T7866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.958336][ T7866] RSP: 002b:00007fe2a8bf0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.966774][ T7866] RAX: ffffffffffffffda RBX: 00007fe2a7fe5fa0 RCX: 00007fe2a7d8eec9 [ 189.974771][ T7866] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000004 [ 189.982775][ T7866] RBP: 00007fe2a8bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 189.990773][ T7866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.998755][ T7866] R13: 00007fe2a7fe6038 R14: 00007fe2a7fe5fa0 R15: 00007ffd203b3d58 [ 190.006748][ T7866] [ 190.010974][ T7866] netlink: 'syz.1.694': attribute type 10 has an invalid length. [ 190.019516][ T7866] netlink: 156 bytes leftover after parsing attributes in process `syz.1.694'. [ 190.556316][ T7889] FAULT_INJECTION: forcing a failure. [ 190.556316][ T7889] name failslab, interval 1, probability 0, space 0, times 0 [ 190.577012][ T7889] CPU: 0 PID: 7889 Comm: syz.1.701 Not tainted syzkaller #0 [ 190.584538][ T7889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 190.594635][ T7889] Call Trace: [ 190.597952][ T7889] [ 190.600907][ T7889] dump_stack_lvl+0x16c/0x230 [ 190.605634][ T7889] ? show_regs_print_info+0x20/0x20 [ 190.610885][ T7889] ? load_image+0x3b0/0x3b0 [ 190.615431][ T7889] ? __lock_acquire+0x7c80/0x7c80 [ 190.620497][ T7889] ? __asan_memset+0x22/0x40 [ 190.625102][ T7889] should_fail_ex+0x39d/0x4d0 [ 190.629803][ T7889] should_failslab+0x9/0x20 [ 190.634322][ T7889] slab_pre_alloc_hook+0x59/0x310 [ 190.639368][ T7889] kmem_cache_alloc+0x5a/0x2e0 [ 190.644142][ T7889] ? security_inode_alloc+0x34/0x110 [ 190.649445][ T7889] security_inode_alloc+0x34/0x110 [ 190.654573][ T7889] inode_init_always+0x8fc/0xc90 [ 190.659526][ T7889] new_inode_pseudo+0x95/0x1d0 [ 190.664305][ T7889] __sock_create+0x12d/0x940 [ 190.668910][ T7889] ? __might_fault+0xaa/0x120 [ 190.673591][ T7889] ? __might_fault+0xc6/0x120 [ 190.678330][ T7889] __sys_socketpair+0x1c1/0x550 [ 190.683205][ T7889] __x64_sys_socketpair+0x9b/0xb0 [ 190.688272][ T7889] do_syscall_64+0x55/0xb0 [ 190.692707][ T7889] ? clear_bhb_loop+0x40/0x90 [ 190.697391][ T7889] ? clear_bhb_loop+0x40/0x90 [ 190.702079][ T7889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.707983][ T7889] RIP: 0033:0x7fe2a7d8eec9 [ 190.712420][ T7889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.732040][ T7889] RSP: 002b:00007fe2a8bf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 190.740463][ T7889] RAX: ffffffffffffffda RBX: 00007fe2a7fe5fa0 RCX: 00007fe2a7d8eec9 [ 190.748445][ T7889] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 190.756423][ T7889] RBP: 00007fe2a8bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 190.764398][ T7889] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000001 [ 190.772376][ T7889] R13: 00007fe2a7fe6038 R14: 00007fe2a7fe5fa0 R15: 00007ffd203b3d58 [ 190.780372][ T7889] [ 190.798444][ T7889] net_ratelimit: 6648 callbacks suppressed [ 190.798458][ T7889] socket: no more sockets [ 191.168990][ T7906] netlink: 'syz.0.707': attribute type 1 has an invalid length. [ 191.176950][ T7903] netlink: 'syz.1.706': attribute type 10 has an invalid length. [ 191.186453][ T7906] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.707'. [ 191.233183][ T7903] team0: Port device dummy0 removed [ 191.254212][ T7903] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 191.444699][ T7910] syz.2.709 uses obsolete (PF_INET,SOCK_PACKET) [ 192.580920][ T7937] netlink: 60 bytes leftover after parsing attributes in process `syz.2.717'. [ 192.618205][ T7937] netlink: 60 bytes leftover after parsing attributes in process `syz.2.717'. [ 192.698164][ T7937] netlink: 60 bytes leftover after parsing attributes in process `syz.2.717'. [ 192.770326][ T7943] netlink: 60 bytes leftover after parsing attributes in process `syz.2.717'. [ 193.454704][ T7952] FAULT_INJECTION: forcing a failure. [ 193.454704][ T7952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.488266][ T7952] CPU: 0 PID: 7952 Comm: syz.0.723 Not tainted syzkaller #0 [ 193.495674][ T7952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 193.505821][ T7952] Call Trace: [ 193.509167][ T7952] [ 193.512168][ T7952] dump_stack_lvl+0x16c/0x230 [ 193.516948][ T7952] ? show_regs_print_info+0x20/0x20 [ 193.522224][ T7952] ? load_image+0x3b0/0x3b0 [ 193.526810][ T7952] ? __might_fault+0xaa/0x120 [ 193.531559][ T7952] ? __lock_acquire+0x7c80/0x7c80 [ 193.536642][ T7952] ? unix_ioctl+0x254/0x660 [ 193.541234][ T7952] should_fail_ex+0x39d/0x4d0 [ 193.546005][ T7952] _copy_from_user+0x2f/0xe0 [ 193.550675][ T7952] sock_do_ioctl+0x17c/0x2f0 [ 193.555347][ T7952] ? sock_show_fdinfo+0xb0/0xb0 [ 193.560364][ T7952] sock_ioctl+0x623/0x7a0 [ 193.564793][ T7952] ? sock_poll+0x3d0/0x3d0 [ 193.569334][ T7952] ? bpf_lsm_file_ioctl+0x9/0x10 [ 193.574343][ T7952] ? security_file_ioctl+0x80/0xa0 [ 193.579621][ T7952] ? sock_poll+0x3d0/0x3d0 [ 193.584124][ T7952] __se_sys_ioctl+0xfd/0x170 [ 193.588808][ T7952] do_syscall_64+0x55/0xb0 [ 193.593296][ T7952] ? clear_bhb_loop+0x40/0x90 [ 193.598040][ T7952] ? clear_bhb_loop+0x40/0x90 [ 193.602825][ T7952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.608788][ T7952] RIP: 0033:0x7f29b918eec9 [ 193.613268][ T7952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.632938][ T7952] RSP: 002b:00007f29ba080038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.641446][ T7952] RAX: ffffffffffffffda RBX: 00007f29b93e5fa0 RCX: 00007f29b918eec9 [ 193.649491][ T7952] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 193.657527][ T7952] RBP: 00007f29ba080090 R08: 0000000000000000 R09: 0000000000000000 [ 193.665569][ T7952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.673601][ T7952] R13: 00007f29b93e6038 R14: 00007f29b93e5fa0 R15: 00007ffe818dd898 [ 193.681705][ T7952] [ 194.515707][ T7970] netlink: 60 bytes leftover after parsing attributes in process `syz.0.730'. [ 194.531552][ T7970] netlink: 60 bytes leftover after parsing attributes in process `syz.0.730'. [ 194.559037][ T7970] netlink: 60 bytes leftover after parsing attributes in process `syz.0.730'. [ 194.584094][ T7970] netlink: 60 bytes leftover after parsing attributes in process `syz.0.730'. [ 194.630503][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.637177][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.700239][ T7972] FAULT_INJECTION: forcing a failure. [ 194.700239][ T7972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.733909][ T7972] CPU: 1 PID: 7972 Comm: syz.2.731 Not tainted syzkaller #0 [ 194.741272][ T7972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 194.751360][ T7972] Call Trace: [ 194.754671][ T7972] [ 194.757634][ T7972] dump_stack_lvl+0x16c/0x230 [ 194.762362][ T7972] ? show_regs_print_info+0x20/0x20 [ 194.767634][ T7972] ? load_image+0x3b0/0x3b0 [ 194.772176][ T7972] ? __lock_acquire+0x7c80/0x7c80 [ 194.777240][ T7972] ? snprintf+0xdb/0x120 [ 194.781537][ T7972] should_fail_ex+0x39d/0x4d0 [ 194.786270][ T7972] _copy_to_user+0x2f/0xa0 [ 194.790724][ T7972] simple_read_from_buffer+0xe7/0x150 [ 194.796159][ T7972] proc_fail_nth_read+0x1e3/0x250 [ 194.801242][ T7972] ? proc_fault_inject_write+0x340/0x340 [ 194.807012][ T7972] ? fsnotify_perm+0x271/0x5e0 [ 194.811810][ T7972] ? proc_fault_inject_write+0x340/0x340 [ 194.817468][ T7972] vfs_read+0x27e/0x920 [ 194.821644][ T7972] ? kernel_read+0x1e0/0x1e0 [ 194.826272][ T7972] ? __fget_files+0x28/0x4d0 [ 194.830890][ T7972] ? __fget_files+0x44a/0x4d0 [ 194.835593][ T7972] ? __fdget_pos+0x2a3/0x330 [ 194.840200][ T7972] ? ksys_read+0x75/0x250 [ 194.844558][ T7972] ksys_read+0x147/0x250 [ 194.848838][ T7972] ? vfs_write+0x940/0x940 [ 194.853291][ T7972] ? lockdep_hardirqs_on+0x98/0x150 [ 194.858527][ T7972] do_syscall_64+0x55/0xb0 [ 194.862969][ T7972] ? clear_bhb_loop+0x40/0x90 [ 194.867657][ T7972] ? clear_bhb_loop+0x40/0x90 [ 194.872371][ T7972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.878282][ T7972] RIP: 0033:0x7f701838d8dc [ 194.882767][ T7972] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 194.902394][ T7972] RSP: 002b:00007f701914f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 194.910829][ T7972] RAX: ffffffffffffffda RBX: 00007f70185e5fa0 RCX: 00007f701838d8dc [ 194.918820][ T7972] RDX: 000000000000000f RSI: 00007f701914f0a0 RDI: 0000000000000006 [ 194.926802][ T7972] RBP: 00007f701914f090 R08: 0000000000000000 R09: 0000000000000000 [ 194.934787][ T7972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.942774][ T7972] R13: 00007f70185e6038 R14: 00007f70185e5fa0 R15: 00007ffecb577c28 [ 194.950790][ T7972] [ 195.296719][ T7980] FAULT_INJECTION: forcing a failure. [ 195.296719][ T7980] name failslab, interval 1, probability 0, space 0, times 0 [ 195.316720][ T7980] CPU: 0 PID: 7980 Comm: syz.3.733 Not tainted syzkaller #0 [ 195.324073][ T7980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 195.334164][ T7980] Call Trace: [ 195.337464][ T7980] [ 195.340418][ T7980] dump_stack_lvl+0x16c/0x230 [ 195.345115][ T7980] ? show_regs_print_info+0x20/0x20 [ 195.350338][ T7980] ? load_image+0x3b0/0x3b0 [ 195.354874][ T7980] should_fail_ex+0x39d/0x4d0 [ 195.359588][ T7980] should_failslab+0x9/0x20 [ 195.364119][ T7980] slab_pre_alloc_hook+0x59/0x310 [ 195.369175][ T7980] kmem_cache_alloc_node+0x60/0x330 [ 195.374395][ T7980] ? __alloc_skb+0x108/0x2c0 [ 195.379012][ T7980] __alloc_skb+0x108/0x2c0 [ 195.383449][ T7980] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 195.388786][ T7980] ? ieee80211_open+0x200/0x200 [ 195.393666][ T7980] rtmsg_ifinfo+0x8c/0x1a0 [ 195.398134][ T7980] __dev_notify_flags+0xf5/0x2e0 [ 195.403110][ T7980] ? __dev_change_flags+0x6a0/0x6a0 [ 195.408338][ T7980] ? __dev_change_flags+0x4bf/0x6a0 [ 195.413599][ T7980] ? dev_get_flags+0x1c0/0x1c0 [ 195.418378][ T7980] ? rcu_is_watching+0x15/0xb0 [ 195.423156][ T7980] ? trace_contention_end+0x39/0xe0 [ 195.428372][ T7980] ? __mutex_lock+0x304/0xcc0 [ 195.433075][ T7980] dev_change_flags+0xe8/0x1a0 [ 195.437866][ T7980] dev_ifsioc+0x6a7/0xe20 [ 195.442216][ T7980] ? dev_ioctl+0x1170/0x1170 [ 195.446821][ T7980] ? dev_load+0x21/0x1f0 [ 195.451092][ T7980] ? dev_load+0x21/0x1f0 [ 195.455372][ T7980] dev_ioctl+0x7e2/0x1170 [ 195.459716][ T7980] sock_do_ioctl+0x226/0x2f0 [ 195.464317][ T7980] ? sock_show_fdinfo+0xb0/0xb0 [ 195.469186][ T7980] sock_ioctl+0x623/0x7a0 [ 195.473535][ T7980] ? sock_poll+0x3d0/0x3d0 [ 195.477989][ T7980] ? bpf_lsm_file_ioctl+0x9/0x10 [ 195.482945][ T7980] ? security_file_ioctl+0x80/0xa0 [ 195.488079][ T7980] ? sock_poll+0x3d0/0x3d0 [ 195.492521][ T7980] __se_sys_ioctl+0xfd/0x170 [ 195.497134][ T7980] do_syscall_64+0x55/0xb0 [ 195.501567][ T7980] ? clear_bhb_loop+0x40/0x90 [ 195.506255][ T7980] ? clear_bhb_loop+0x40/0x90 [ 195.510950][ T7980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.516853][ T7980] RIP: 0033:0x7fe332b8eec9 [ 195.521279][ T7980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.540892][ T7980] RSP: 002b:00007fe333ac8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.549318][ T7980] RAX: ffffffffffffffda RBX: 00007fe332de5fa0 RCX: 00007fe332b8eec9 [ 195.557296][ T7980] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000009 [ 195.565277][ T7980] RBP: 00007fe333ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 195.573260][ T7980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.581241][ T7980] R13: 00007fe332de6038 R14: 00007fe332de5fa0 R15: 00007ffd84a7bfd8 [ 195.589325][ T7980] [ 195.741832][ T7983] netlink: 60 bytes leftover after parsing attributes in process `syz.0.735'. [ 195.792163][ T7983] netlink: 60 bytes leftover after parsing attributes in process `syz.0.735'. [ 195.842501][ T7984] netlink: 60 bytes leftover after parsing attributes in process `syz.0.735'. [ 195.862588][ T7983] netlink: 60 bytes leftover after parsing attributes in process `syz.0.735'. [ 195.909711][ T7993] netlink: 'syz.3.738': attribute type 1 has an invalid length. [ 195.917667][ T7993] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.738'. [ 196.355129][ T8008] FAULT_INJECTION: forcing a failure. [ 196.355129][ T8008] name failslab, interval 1, probability 0, space 0, times 0 [ 196.380015][ T8008] CPU: 1 PID: 8008 Comm: syz.0.742 Not tainted syzkaller #0 [ 196.387367][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 196.397452][ T8008] Call Trace: [ 196.400771][ T8008] [ 196.403728][ T8008] dump_stack_lvl+0x16c/0x230 [ 196.408467][ T8008] ? show_regs_print_info+0x20/0x20 [ 196.413701][ T8008] ? load_image+0x3b0/0x3b0 [ 196.418245][ T8008] ? __might_sleep+0xe0/0xe0 [ 196.422868][ T8008] ? __lock_acquire+0x7c80/0x7c80 [ 196.427935][ T8008] should_fail_ex+0x39d/0x4d0 [ 196.432658][ T8008] should_failslab+0x9/0x20 [ 196.437203][ T8008] slab_pre_alloc_hook+0x59/0x310 [ 196.442273][ T8008] ? __lock_acquire+0x7c80/0x7c80 [ 196.447344][ T8008] kmem_cache_alloc_node+0x60/0x330 [ 196.452594][ T8008] ? __alloc_skb+0x108/0x2c0 [ 196.457234][ T8008] __alloc_skb+0x108/0x2c0 [ 196.461696][ T8008] netlink_sendmsg+0x65b/0xbe0 [ 196.466569][ T8008] ? netlink_getsockopt+0x580/0x580 [ 196.471815][ T8008] ? aa_sock_msg_perm+0x94/0x150 [ 196.476794][ T8008] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 196.482116][ T8008] ? security_socket_sendmsg+0x80/0xa0 [ 196.487613][ T8008] ? netlink_getsockopt+0x580/0x580 [ 196.492854][ T8008] ____sys_sendmsg+0x5bf/0x950 [ 196.497667][ T8008] ? __asan_memset+0x22/0x40 [ 196.502292][ T8008] ? __sys_sendmsg_sock+0x30/0x30 [ 196.507353][ T8008] ? __import_iovec+0x5f2/0x860 [ 196.512251][ T8008] ? import_iovec+0x73/0xa0 [ 196.516812][ T8008] ___sys_sendmsg+0x220/0x290 [ 196.521533][ T8008] ? __sys_sendmsg+0x270/0x270 [ 196.526359][ T8008] ? __lock_acquire+0x7c80/0x7c80 [ 196.531440][ T8008] __se_sys_sendmsg+0x1a5/0x270 [ 196.536347][ T8008] ? __x64_sys_sendmsg+0x80/0x80 [ 196.541347][ T8008] ? lockdep_hardirqs_on+0x98/0x150 [ 196.546604][ T8008] do_syscall_64+0x55/0xb0 [ 196.551054][ T8008] ? clear_bhb_loop+0x40/0x90 [ 196.555767][ T8008] ? clear_bhb_loop+0x40/0x90 [ 196.560480][ T8008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.566397][ T8008] RIP: 0033:0x7f29b918eec9 [ 196.570874][ T8008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.590516][ T8008] RSP: 002b:00007f29ba080038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.598968][ T8008] RAX: ffffffffffffffda RBX: 00007f29b93e5fa0 RCX: 00007f29b918eec9 [ 196.606974][ T8008] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000002b [ 196.614975][ T8008] RBP: 00007f29ba080090 R08: 0000000000000000 R09: 0000000000000000 [ 196.622983][ T8008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.630983][ T8008] R13: 00007f29b93e6038 R14: 00007f29b93e5fa0 R15: 00007ffe818dd898 [ 196.639002][ T8008] [ 197.337031][ T8030] FAULT_INJECTION: forcing a failure. [ 197.337031][ T8030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.392238][ T8030] CPU: 1 PID: 8030 Comm: syz.0.748 Not tainted syzkaller #0 [ 197.399613][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 197.409707][ T8030] Call Trace: [ 197.413017][ T8030] [ 197.415976][ T8030] dump_stack_lvl+0x16c/0x230 [ 197.420705][ T8030] ? show_regs_print_info+0x20/0x20 [ 197.425970][ T8030] ? load_image+0x3b0/0x3b0 [ 197.430509][ T8030] ? __might_fault+0xaa/0x120 [ 197.435225][ T8030] ? __lock_acquire+0x7c80/0x7c80 [ 197.440297][ T8030] should_fail_ex+0x39d/0x4d0 [ 197.445027][ T8030] _copy_from_iter+0x1d3/0x1290 [ 197.449922][ T8030] ? __phys_addr+0xba/0x170 [ 197.454468][ T8030] ? __virt_addr_valid+0x18c/0x540 [ 197.459644][ T8030] ? __lock_acquire+0x7c80/0x7c80 [ 197.464708][ T8030] ? pskb_expand_head+0x185/0x1230 [ 197.469868][ T8030] ? copyout_mc+0x70/0x70 [ 197.474238][ T8030] ? __virt_addr_valid+0x18c/0x540 [ 197.479392][ T8030] ? __virt_addr_valid+0x18c/0x540 [ 197.481978][ T8024] syzkaller0: entered promiscuous mode [ 197.484519][ T8030] ? __virt_addr_valid+0x469/0x540 [ 197.495140][ T8030] ? __check_object_size+0x506/0xa30 [ 197.500476][ T8030] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 197.506339][ T8030] tun_get_user+0x1583/0x3bf0 [ 197.511089][ T8030] ? aa_file_perm+0x120/0xec0 [ 197.515809][ T8030] ? aa_file_perm+0x3e8/0xec0 [ 197.520644][ T8030] ? rcu_read_unlock+0xa0/0xa0 [ 197.525477][ T8030] ? tun_get+0x1c/0x2e0 [ 197.529678][ T8030] ? __lock_acquire+0x7c80/0x7c80 [ 197.534748][ T8030] ? tun_get+0x1c/0x2e0 [ 197.538956][ T8030] tun_chr_write_iter+0x119/0x200 [ 197.544028][ T8030] vfs_write+0x43b/0x940 [ 197.548325][ T8030] ? file_end_write+0x250/0x250 [ 197.553226][ T8030] ? __fget_files+0x44a/0x4d0 [ 197.557961][ T8030] ? __fdget_pos+0x1d8/0x330 [ 197.562585][ T8030] ? ksys_write+0x75/0x250 [ 197.567047][ T8030] ksys_write+0x147/0x250 [ 197.571416][ T8030] ? __ia32_sys_read+0x90/0x90 [ 197.576224][ T8030] ? lockdep_hardirqs_on+0x98/0x150 [ 197.581511][ T8030] do_syscall_64+0x55/0xb0 [ 197.585963][ T8030] ? clear_bhb_loop+0x40/0x90 [ 197.590674][ T8030] ? clear_bhb_loop+0x40/0x90 [ 197.595384][ T8030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.601304][ T8030] RIP: 0033:0x7f29b918eec9 [ 197.605748][ T8030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.625399][ T8030] RSP: 002b:00007f29ba05f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.625746][ T8035] syzkaller0: entered promiscuous mode [ 197.633831][ T8030] RAX: ffffffffffffffda RBX: 00007f29b93e6090 RCX: 00007f29b918eec9 [ 197.633850][ T8030] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000003 [ 197.633864][ T8030] RBP: 00007f29ba05f090 R08: 0000000000000000 R09: 0000000000000000 [ 197.633876][ T8030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.633888][ T8030] R13: 00007f29b93e6128 R14: 00007f29b93e6090 R15: 00007ffe818dd898 [ 197.633921][ T8030] [ 197.685290][ T8033] FAULT_INJECTION: forcing a failure. [ 197.685290][ T8033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.707520][ T8033] CPU: 1 PID: 8033 Comm: syz.2.751 Not tainted syzkaller #0 [ 197.714903][ T8033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 197.725003][ T8033] Call Trace: [ 197.728318][ T8033] [ 197.731284][ T8033] dump_stack_lvl+0x16c/0x230 [ 197.736003][ T8033] ? show_regs_print_info+0x20/0x20 [ 197.741248][ T8033] ? load_image+0x3b0/0x3b0 [ 197.745789][ T8033] ? __lock_acquire+0x7c80/0x7c80 [ 197.750855][ T8033] ? snprintf+0xdb/0x120 [ 197.755137][ T8033] should_fail_ex+0x39d/0x4d0 [ 197.759885][ T8033] _copy_to_user+0x2f/0xa0 [ 197.764339][ T8033] simple_read_from_buffer+0xe7/0x150 [ 197.769743][ T8033] proc_fail_nth_read+0x1e3/0x250 [ 197.774793][ T8033] ? proc_fault_inject_write+0x340/0x340 [ 197.780450][ T8033] ? fsnotify_perm+0x271/0x5e0 [ 197.785234][ T8033] ? proc_fault_inject_write+0x340/0x340 [ 197.790902][ T8033] vfs_read+0x27e/0x920 [ 197.795087][ T8033] ? kernel_read+0x1e0/0x1e0 [ 197.799700][ T8033] ? __fget_files+0x28/0x4d0 [ 197.804309][ T8033] ? __fget_files+0x44a/0x4d0 [ 197.809018][ T8033] ? __fdget_pos+0x2a3/0x330 [ 197.813620][ T8033] ? ksys_read+0x75/0x250 [ 197.817967][ T8033] ksys_read+0x147/0x250 [ 197.822236][ T8033] ? vfs_write+0x940/0x940 [ 197.826671][ T8033] ? lockdep_hardirqs_on+0x98/0x150 [ 197.831899][ T8033] do_syscall_64+0x55/0xb0 [ 197.836323][ T8033] ? clear_bhb_loop+0x40/0x90 [ 197.841008][ T8033] ? clear_bhb_loop+0x40/0x90 [ 197.845696][ T8033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.851600][ T8033] RIP: 0033:0x7f701838d8dc [ 197.856033][ T8033] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 197.875828][ T8033] RSP: 002b:00007f701914f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.884253][ T8033] RAX: ffffffffffffffda RBX: 00007f70185e5fa0 RCX: 00007f701838d8dc [ 197.892233][ T8033] RDX: 000000000000000f RSI: 00007f701914f0a0 RDI: 0000000000000003 [ 197.900211][ T8033] RBP: 00007f701914f090 R08: 0000000000000000 R09: 0000000000000000 [ 197.908205][ T8033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.916182][ T8033] R13: 00007f70185e6038 R14: 00007f70185e5fa0 R15: 00007ffecb577c28 [ 197.924178][ T8033] [ 201.672737][ T8080] FAULT_INJECTION: forcing a failure. [ 201.672737][ T8080] name failslab, interval 1, probability 0, space 0, times 0 [ 201.686138][ T8080] CPU: 1 PID: 8080 Comm: syz.2.764 Not tainted syzkaller #0 [ 201.693468][ T8080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 201.703641][ T8080] Call Trace: [ 201.706951][ T8080] [ 201.709904][ T8080] dump_stack_lvl+0x16c/0x230 [ 201.714628][ T8080] ? show_regs_print_info+0x20/0x20 [ 201.719863][ T8080] ? load_image+0x3b0/0x3b0 [ 201.724402][ T8080] ? __might_sleep+0xe0/0xe0 [ 201.729030][ T8080] ? __lock_acquire+0x7c80/0x7c80 [ 201.734103][ T8080] should_fail_ex+0x39d/0x4d0 [ 201.738821][ T8080] should_failslab+0x9/0x20 [ 201.743362][ T8080] slab_pre_alloc_hook+0x59/0x310 [ 201.748439][ T8080] kmem_cache_alloc_node+0x60/0x330 [ 201.753675][ T8080] ? __alloc_skb+0x108/0x2c0 [ 201.758310][ T8080] __alloc_skb+0x108/0x2c0 [ 201.762764][ T8080] alloc_skb_with_frags+0xca/0x7c0 [ 201.767922][ T8080] ? verify_lock_unused+0x140/0x140 [ 201.773160][ T8080] ? verify_lock_unused+0x140/0x140 [ 201.778511][ T8080] sock_alloc_send_pskb+0x857/0x990 [ 201.783768][ T8080] ? sock_kzfree_s+0x50/0x50 [ 201.788394][ T8080] ? do_raw_spin_lock+0x121/0x2c0 [ 201.793461][ T8080] ? __rwlock_init+0x150/0x150 [ 201.798267][ T8080] ? do_raw_spin_unlock+0x121/0x230 [ 201.803523][ T8080] unix_dgram_sendmsg+0x5a1/0x1720 [ 201.808688][ T8080] ? verify_lock_unused+0x140/0x140 [ 201.814015][ T8080] ? aa_sk_perm+0x7fc/0x930 [ 201.818563][ T8080] ? unix_dgram_poll+0x670/0x670 [ 201.823531][ T8080] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 201.829993][ T8080] ? aa_sock_msg_perm+0x94/0x150 [ 201.834968][ T8080] ? unix_seqpacket_sendmsg+0x10c/0x1e0 [ 201.840547][ T8080] ? unix_dgram_peer_wake_me+0x430/0x430 [ 201.846217][ T8080] ____sys_sendmsg+0x5bf/0x950 [ 201.851119][ T8080] ? __asan_memset+0x22/0x40 [ 201.855744][ T8080] ? __sys_sendmsg_sock+0x30/0x30 [ 201.860809][ T8080] ? __import_iovec+0x3fa/0x860 [ 201.865712][ T8080] ? import_iovec+0x73/0xa0 [ 201.870279][ T8080] ___sys_sendmsg+0x220/0x290 [ 201.875023][ T8080] ? __sys_sendmsg+0x270/0x270 [ 201.879860][ T8080] ? __lock_acquire+0x7c80/0x7c80 [ 201.884952][ T8080] __se_sys_sendmsg+0x1a5/0x270 [ 201.889844][ T8080] ? perf_trace_preemptirq_template+0x281/0x340 [ 201.896127][ T8080] ? __x64_sys_sendmsg+0x80/0x80 [ 201.901124][ T8080] ? lockdep_hardirqs_on+0x98/0x150 [ 201.906370][ T8080] do_syscall_64+0x55/0xb0 [ 201.910820][ T8080] ? clear_bhb_loop+0x40/0x90 [ 201.915523][ T8080] ? clear_bhb_loop+0x40/0x90 [ 201.920234][ T8080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.926161][ T8080] RIP: 0033:0x7f701838eec9 [ 201.930617][ T8080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.950253][ T8080] RSP: 002b:00007f701914f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.958797][ T8080] RAX: ffffffffffffffda RBX: 00007f70185e5fa0 RCX: 00007f701838eec9 [ 201.966797][ T8080] RDX: 0000000020000000 RSI: 0000200000001940 RDI: 0000000000000005 [ 201.974801][ T8080] RBP: 00007f701914f090 R08: 0000000000000000 R09: 0000000000000000 [ 201.982806][ T8080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.990810][ T8080] R13: 00007f70185e6038 R14: 00007f70185e5fa0 R15: 00007ffecb577c28 [ 201.998870][ T8080] [ 202.710860][ T8104] FAULT_INJECTION: forcing a failure. [ 202.710860][ T8104] name failslab, interval 1, probability 0, space 0, times 0 [ 202.748372][ T8104] CPU: 1 PID: 8104 Comm: syz.0.770 Not tainted syzkaller #0 [ 202.755735][ T8104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 202.765845][ T8104] Call Trace: [ 202.769162][ T8104] [ 202.772129][ T8104] dump_stack_lvl+0x16c/0x230 [ 202.776856][ T8104] ? show_regs_print_info+0x20/0x20 [ 202.782094][ T8104] ? load_image+0x3b0/0x3b0 [ 202.786636][ T8104] ? __might_sleep+0xe0/0xe0 [ 202.791266][ T8104] ? __lock_acquire+0x7c80/0x7c80 [ 202.796324][ T8104] ? mark_lock+0x94/0x320 [ 202.800693][ T8104] should_fail_ex+0x39d/0x4d0 [ 202.805402][ T8104] should_failslab+0x9/0x20 [ 202.809934][ T8104] slab_pre_alloc_hook+0x59/0x310 [ 202.814981][ T8104] ? __get_vm_area_node+0x125/0x370 [ 202.820208][ T8104] __kmem_cache_alloc_node+0x53/0x260 [ 202.825607][ T8104] ? __get_vm_area_node+0x125/0x370 [ 202.830827][ T8104] kmalloc_node_trace+0x26/0xe0 [ 202.835704][ T8104] __get_vm_area_node+0x125/0x370 [ 202.840756][ T8104] __vmalloc_node_range+0x36e/0x1320 [ 202.846067][ T8104] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 202.851630][ T8104] ? mark_lock+0x94/0x320 [ 202.855979][ T8104] ? __lock_acquire+0x1334/0x7c80 [ 202.861023][ T8104] ? verify_lock_unused+0x140/0x140 [ 202.866245][ T8104] ? free_vm_area+0x50/0x50 [ 202.870763][ T8104] ? end_current_label_crit_section+0x170/0x170 [ 202.877026][ T8104] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 202.882593][ T8104] __vmalloc+0x7a/0x90 [ 202.886674][ T8104] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 202.892320][ T8104] bpf_prog_alloc_no_stats+0x47/0x440 [ 202.897705][ T8104] ? bpf_prog_alloc+0x2b/0x1b0 [ 202.902485][ T8104] bpf_prog_alloc+0x3d/0x1b0 [ 202.907097][ T8104] bpf_prog_load+0x6b8/0x16d0 [ 202.911796][ T8104] ? map_freeze+0x420/0x420 [ 202.916319][ T8104] ? __might_fault+0xaa/0x120 [ 202.921010][ T8104] ? __lock_acquire+0x7c80/0x7c80 [ 202.926045][ T8104] ? file_end_write+0x159/0x250 [ 202.930914][ T8104] ? __might_fault+0xaa/0x120 [ 202.935602][ T8104] ? __might_fault+0xc6/0x120 [ 202.940284][ T8104] ? __might_fault+0xaa/0x120 [ 202.944971][ T8104] ? bpf_lsm_bpf+0x9/0x10 [ 202.949315][ T8104] ? security_bpf+0x7e/0xa0 [ 202.953833][ T8104] __sys_bpf+0x55a/0x800 [ 202.958094][ T8104] ? bpf_link_show_fdinfo+0x350/0x350 [ 202.963485][ T8104] ? lock_chain_count+0x20/0x20 [ 202.968360][ T8104] __x64_sys_bpf+0x7c/0x90 [ 202.972789][ T8104] do_syscall_64+0x55/0xb0 [ 202.977219][ T8104] ? clear_bhb_loop+0x40/0x90 [ 202.981907][ T8104] ? clear_bhb_loop+0x40/0x90 [ 202.986601][ T8104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.992509][ T8104] RIP: 0033:0x7f29b918eec9 [ 202.996939][ T8104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.016561][ T8104] RSP: 002b:00007f29ba080038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.025013][ T8104] RAX: ffffffffffffffda RBX: 00007f29b93e5fa0 RCX: 00007f29b918eec9 [ 203.032996][ T8104] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 203.040978][ T8104] RBP: 00007f29ba080090 R08: 0000000000000000 R09: 0000000000000000 [ 203.048974][ T8104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.056964][ T8104] R13: 00007f29b93e6038 R14: 00007f29b93e5fa0 R15: 00007ffe818dd898 [ 203.064980][ T8104] [ 203.075359][ T8104] syz.0.770: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 203.097062][ T8104] CPU: 0 PID: 8104 Comm: syz.0.770 Not tainted syzkaller #0 [ 203.104411][ T8104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 203.114501][ T8104] Call Trace: [ 203.117804][ T8104] [ 203.120762][ T8104] dump_stack_lvl+0x16c/0x230 [ 203.125491][ T8104] ? show_regs_print_info+0x20/0x20 [ 203.130730][ T8104] ? load_image+0x3b0/0x3b0 [ 203.135263][ T8104] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 203.141713][ T8104] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 203.148260][ T8104] warn_alloc+0x210/0x300 [ 203.152656][ T8104] ? zone_watermark_ok_safe+0x230/0x230 [ 203.158260][ T8104] ? __get_vm_area_node+0x356/0x370 [ 203.163515][ T8104] __vmalloc_node_range+0x393/0x1320 [ 203.168841][ T8104] ? mark_lock+0x94/0x320 [ 203.173206][ T8104] ? __lock_acquire+0x1334/0x7c80 [ 203.178250][ T8104] ? verify_lock_unused+0x140/0x140 [ 203.183484][ T8104] ? free_vm_area+0x50/0x50 [ 203.188013][ T8104] ? end_current_label_crit_section+0x170/0x170 [ 203.194297][ T8104] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 203.199858][ T8104] __vmalloc+0x7a/0x90 [ 203.203945][ T8104] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 203.209512][ T8104] bpf_prog_alloc_no_stats+0x47/0x440 [ 203.214916][ T8104] ? bpf_prog_alloc+0x2b/0x1b0 [ 203.219695][ T8104] bpf_prog_alloc+0x3d/0x1b0 [ 203.224298][ T8104] bpf_prog_load+0x6b8/0x16d0 [ 203.228997][ T8104] ? map_freeze+0x420/0x420 [ 203.233516][ T8104] ? __might_fault+0xaa/0x120 [ 203.238203][ T8104] ? __lock_acquire+0x7c80/0x7c80 [ 203.243236][ T8104] ? file_end_write+0x159/0x250 [ 203.248106][ T8104] ? __might_fault+0xaa/0x120 [ 203.252803][ T8104] ? __might_fault+0xc6/0x120 [ 203.257486][ T8104] ? __might_fault+0xaa/0x120 [ 203.262177][ T8104] ? bpf_lsm_bpf+0x9/0x10 [ 203.266522][ T8104] ? security_bpf+0x7e/0xa0 [ 203.271037][ T8104] __sys_bpf+0x55a/0x800 [ 203.275292][ T8104] ? bpf_link_show_fdinfo+0x350/0x350 [ 203.280683][ T8104] ? lock_chain_count+0x20/0x20 [ 203.285552][ T8104] __x64_sys_bpf+0x7c/0x90 [ 203.289984][ T8104] do_syscall_64+0x55/0xb0 [ 203.294441][ T8104] ? clear_bhb_loop+0x40/0x90 [ 203.299130][ T8104] ? clear_bhb_loop+0x40/0x90 [ 203.303823][ T8104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.309726][ T8104] RIP: 0033:0x7f29b918eec9 [ 203.314153][ T8104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.333778][ T8104] RSP: 002b:00007f29ba080038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.342294][ T8104] RAX: ffffffffffffffda RBX: 00007f29b93e5fa0 RCX: 00007f29b918eec9 [ 203.350346][ T8104] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 203.358326][ T8104] RBP: 00007f29ba080090 R08: 0000000000000000 R09: 0000000000000000 [ 203.366393][ T8104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.374384][ T8104] R13: 00007f29b93e6038 R14: 00007f29b93e5fa0 R15: 00007ffe818dd898 [ 203.382379][ T8104] [ 203.438630][ T8104] Mem-Info: [ 203.442142][ T8104] active_anon:6965 inactive_anon:0 isolated_anon:0 [ 203.442142][ T8104] active_file:1708 inactive_file:39918 isolated_file:0 [ 203.442142][ T8104] unevictable:768 dirty:260 writeback:0 [ 203.442142][ T8104] slab_reclaimable:9855 slab_unreclaimable:91461 [ 203.442142][ T8104] mapped:26650 shmem:1361 pagetables:592 [ 203.442142][ T8104] sec_pagetables:0 bounce:0 [ 203.442142][ T8104] kernel_misc_reclaimable:0 [ 203.442142][ T8104] free:1363894 free_pcp:10109 free_cma:0 [ 203.495489][ T8104] Node 0 active_anon:27960kB inactive_anon:0kB active_file:6832kB inactive_file:159468kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106600kB dirty:1036kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11552kB pagetables:2368kB sec_pagetables:0kB all_unreclaimable? no [ 203.528828][ T8104] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 203.560378][ T8104] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.595870][ T8104] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 203.606957][ T8104] Node 0 DMA32 free:1539384kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:27916kB inactive_anon:0kB active_file:6832kB inactive_file:158148kB unevictable:1536kB writepending:1036kB present:3129332kB managed:2589604kB mlocked:0kB bounce:0kB free_pcp:23036kB local_pcp:20736kB free_cma:0kB [ 203.642466][ T8104] lowmem_reserve[]: 0 0 1 1 1 [ 203.647270][ T8104] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.674715][ T8104] lowmem_reserve[]: 0 0 0 0 0 [ 203.679677][ T8104] Node 1 Normal free:3900572kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17248kB local_pcp:9408kB free_cma:0kB [ 203.709384][ T8104] lowmem_reserve[]: 0 0 0 0 0 [ 203.714151][ T8104] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 203.733862][ T8104] Node 0 DMA32: 1238*4kB (UM) 652*8kB (UME) 546*16kB (UME) 349*32kB (UME) 39*64kB (UME) 8*128kB (UM) 2*256kB (ME) 0*512kB 2*1024kB (UE) 4*2048kB (ME) 365*4096kB (UM) = 1539384kB [ 203.762564][ T8104] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 203.776811][ T8104] Node 1 Normal: 207*4kB (UME) 44*8kB (UME) 40*16kB (UME) 94*32kB (UME) 37*64kB (UME) 3*128kB (UE) 1*256kB (U) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3900572kB [ 203.801226][ T8104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.816594][ T8104] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.829476][ T8104] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.843463][ T8104] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.855507][ T8104] 42987 total pagecache pages [ 203.868788][ T8104] 0 pages in swap cache [ 203.873259][ T8104] Free swap = 124996kB [ 203.883774][ T8104] Total swap = 124996kB [ 203.888204][ T8104] 2097051 pages RAM [ 203.892041][ T8104] 0 pages HighMem/MovableOnly [ 203.896740][ T8104] 416136 pages reserved [ 203.902183][ T8104] 0 pages cma reserved [ 204.116814][ T8121] syzkaller0: entered promiscuous mode [ 204.909648][ T8138] FAULT_INJECTION: forcing a failure. [ 204.909648][ T8138] name failslab, interval 1, probability 0, space 0, times 0 [ 204.948496][ T8138] CPU: 0 PID: 8138 Comm: syz.1.780 Not tainted syzkaller #0 [ 204.955863][ T8138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 204.965957][ T8138] Call Trace: [ 204.969284][ T8138] [ 204.972249][ T8138] dump_stack_lvl+0x16c/0x230 [ 204.976973][ T8138] ? show_regs_print_info+0x20/0x20 [ 204.982218][ T8138] ? load_image+0x3b0/0x3b0 [ 204.986773][ T8138] ? __might_sleep+0xe0/0xe0 [ 204.991405][ T8138] ? __lock_acquire+0x7c80/0x7c80 [ 204.996451][ T8138] should_fail_ex+0x39d/0x4d0 [ 205.001155][ T8138] should_failslab+0x9/0x20 [ 205.005730][ T8138] slab_pre_alloc_hook+0x59/0x310 [ 205.010790][ T8138] ? kernfs_fop_write_iter+0x159/0x520 [ 205.016281][ T8138] ? kernfs_fop_write_iter+0x159/0x520 [ 205.021770][ T8138] __kmem_cache_alloc_node+0x53/0x260 [ 205.027177][ T8138] ? kernfs_fop_write_iter+0x159/0x520 [ 205.032666][ T8138] __kmalloc+0xa4/0x240 [ 205.036860][ T8138] kernfs_fop_write_iter+0x159/0x520 [ 205.042183][ T8138] vfs_write+0x43b/0x940 [ 205.046462][ T8138] ? file_end_write+0x250/0x250 [ 205.051339][ T8138] ? __fget_files+0x44a/0x4d0 [ 205.056039][ T8138] ? __fdget_pos+0x2a3/0x330 [ 205.060644][ T8138] ? ksys_write+0x75/0x250 [ 205.065079][ T8138] ksys_write+0x147/0x250 [ 205.069516][ T8138] ? __ia32_sys_read+0x90/0x90 [ 205.074303][ T8138] ? lockdep_hardirqs_on+0x98/0x150 [ 205.079529][ T8138] do_syscall_64+0x55/0xb0 [ 205.083966][ T8138] ? clear_bhb_loop+0x40/0x90 [ 205.088656][ T8138] ? clear_bhb_loop+0x40/0x90 [ 205.093349][ T8138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.099252][ T8138] RIP: 0033:0x7fe2a7d8eec9 [ 205.103674][ T8138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.123328][ T8138] RSP: 002b:00007fe2a8bf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 205.131774][ T8138] RAX: ffffffffffffffda RBX: 00007fe2a7fe5fa0 RCX: 00007fe2a7d8eec9 [ 205.139757][ T8138] RDX: 000000000000006a RSI: 00002000000000c0 RDI: 0000000000000004 [ 205.147755][ T8138] RBP: 00007fe2a8bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 205.155742][ T8138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.163732][ T8138] R13: 00007fe2a7fe6038 R14: 00007fe2a7fe5fa0 R15: 00007ffd203b3d58 [ 205.171732][ T8138] [ 206.555857][ T8153] FAULT_INJECTION: forcing a failure. [ 206.555857][ T8153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.570133][ T8153] CPU: 0 PID: 8153 Comm: syz.2.784 Not tainted syzkaller #0 [ 206.577486][ T8153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 206.587555][ T8153] Call Trace: [ 206.590849][ T8153] [ 206.593825][ T8153] dump_stack_lvl+0x16c/0x230 [ 206.598533][ T8153] ? show_regs_print_info+0x20/0x20 [ 206.603767][ T8153] ? load_image+0x3b0/0x3b0 [ 206.608294][ T8153] ? __might_fault+0xaa/0x120 [ 206.612984][ T8153] ? __lock_acquire+0x7c80/0x7c80 [ 206.618030][ T8153] should_fail_ex+0x39d/0x4d0 [ 206.622734][ T8153] _copy_to_user+0x2f/0xa0 [ 206.627173][ T8153] bpf_prog_test_run_raw_tp+0x4bc/0x640 [ 206.632744][ T8153] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 206.638232][ T8153] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 206.643711][ T8153] bpf_prog_test_run+0x321/0x390 [ 206.648682][ T8153] __sys_bpf+0x440/0x800 [ 206.652950][ T8153] ? bpf_link_show_fdinfo+0x350/0x350 [ 206.658346][ T8153] ? lock_chain_count+0x20/0x20 [ 206.663218][ T8153] __x64_sys_bpf+0x7c/0x90 [ 206.667651][ T8153] do_syscall_64+0x55/0xb0 [ 206.672083][ T8153] ? clear_bhb_loop+0x40/0x90 [ 206.676769][ T8153] ? clear_bhb_loop+0x40/0x90 [ 206.681478][ T8153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.687381][ T8153] RIP: 0033:0x7f701838eec9 [ 206.691807][ T8153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.711421][ T8153] RSP: 002b:00007f701914f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.719876][ T8153] RAX: ffffffffffffffda RBX: 00007f70185e5fa0 RCX: 00007f701838eec9 [ 206.727943][ T8153] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 206.735924][ T8153] RBP: 00007f701914f090 R08: 0000000000000000 R09: 0000000000000000 [ 206.743902][ T8153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.751883][ T8153] R13: 00007f70185e6038 R14: 00007f70185e5fa0 R15: 00007ffecb577c28 [ 206.759878][ T8153] [ 206.923444][ T8158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.785'. [ 206.937142][ T8158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.785'. [ 206.952978][ T8158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.785'. [ 207.747712][ T8181] FAULT_INJECTION: forcing a failure. [ 207.747712][ T8181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.834839][ T8181] CPU: 1 PID: 8181 Comm: syz.1.793 Not tainted syzkaller #0 [ 207.842391][ T8181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.852487][ T8181] Call Trace: [ 207.855807][ T8181] [ 207.858767][ T8181] dump_stack_lvl+0x16c/0x230 [ 207.863496][ T8181] ? show_regs_print_info+0x20/0x20 [ 207.868751][ T8181] ? load_image+0x3b0/0x3b0 [ 207.873296][ T8181] ? __lock_acquire+0x7c80/0x7c80 [ 207.878386][ T8181] should_fail_ex+0x39d/0x4d0 [ 207.883116][ T8181] _copy_from_user+0x2f/0xe0 [ 207.887836][ T8181] __copy_msghdr+0x3bb/0x580 [ 207.892480][ T8181] ___sys_sendmsg+0x1a6/0x290 [ 207.897215][ T8181] ? __sys_sendmsg+0x270/0x270 [ 207.902132][ T8181] ? __lock_acquire+0x7c80/0x7c80 [ 207.907226][ T8181] __se_sys_sendmsg+0x1a5/0x270 [ 207.912203][ T8181] ? perf_trace_preemptirq_template+0x281/0x340 [ 207.918495][ T8181] ? __x64_sys_sendmsg+0x80/0x80 [ 207.923505][ T8181] ? lockdep_hardirqs_on+0x98/0x150 [ 207.928763][ T8181] do_syscall_64+0x55/0xb0 [ 207.933221][ T8181] ? clear_bhb_loop+0x40/0x90 [ 207.937934][ T8181] ? clear_bhb_loop+0x40/0x90 [ 207.942647][ T8181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.948578][ T8181] RIP: 0033:0x7fe2a7d8eec9 [ 207.953048][ T8181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.972700][ T8181] RSP: 002b:00007fe2a8bf0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.981161][ T8181] RAX: ffffffffffffffda RBX: 00007fe2a7fe5fa0 RCX: 00007fe2a7d8eec9 [ 207.989185][ T8181] RDX: 0000000020000800 RSI: 0000200000000200 RDI: 0000000000000003 [ 207.997201][ T8181] RBP: 00007fe2a8bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 208.005182][ T8181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.013178][ T8181] R13: 00007fe2a7fe6038 R14: 00007fe2a7fe5fa0 R15: 00007ffd203b3d58 [ 208.021183][ T8181] [ 208.238696][ T8193] FAULT_INJECTION: forcing a failure. [ 208.238696][ T8193] name failslab, interval 1, probability 0, space 0, times 0 [ 208.323044][ T8193] CPU: 1 PID: 8193 Comm: syz.1.797 Not tainted syzkaller #0 [ 208.330409][ T8193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 208.340511][ T8193] Call Trace: [ 208.343820][ T8193] [ 208.346781][ T8193] dump_stack_lvl+0x16c/0x230 [ 208.351503][ T8193] ? show_regs_print_info+0x20/0x20 [ 208.356746][ T8193] ? load_image+0x3b0/0x3b0 [ 208.361288][ T8193] ? __might_sleep+0xe0/0xe0 [ 208.365911][ T8193] ? __lock_acquire+0x7c80/0x7c80 [ 208.370962][ T8193] ? __lock_acquire+0x1260/0x7c80 [ 208.376022][ T8193] should_fail_ex+0x39d/0x4d0 [ 208.380743][ T8193] should_failslab+0x9/0x20 [ 208.385279][ T8193] slab_pre_alloc_hook+0x59/0x310 [ 208.390325][ T8193] ? mark_lock+0x94/0x320 [ 208.394671][ T8193] ? sock_kmalloc+0x96/0xf0 [ 208.399194][ T8193] ? sock_kmalloc+0x96/0xf0 [ 208.403712][ T8193] __kmem_cache_alloc_node+0x53/0x260 [ 208.409127][ T8193] ? sock_kmalloc+0x96/0xf0 [ 208.413652][ T8193] __kmalloc+0xa4/0x240 [ 208.417834][ T8193] sock_kmalloc+0x96/0xf0 [ 208.422183][ T8193] ____sys_sendmsg+0x1b8/0x950 [ 208.426974][ T8193] ? __asan_memset+0x22/0x40 [ 208.431584][ T8193] ? __sys_sendmsg_sock+0x30/0x30 [ 208.436627][ T8193] ? __import_iovec+0x3fa/0x860 [ 208.441512][ T8193] ? import_iovec+0x73/0xa0 [ 208.446045][ T8193] ___sys_sendmsg+0x220/0x290 [ 208.450747][ T8193] ? __sys_sendmsg+0x270/0x270 [ 208.455576][ T8193] ? __lock_acquire+0x7c80/0x7c80 [ 208.460648][ T8193] __se_sys_sendmsg+0x1a5/0x270 [ 208.465530][ T8193] ? __x64_sys_sendmsg+0x80/0x80 [ 208.470525][ T8193] ? lockdep_hardirqs_on+0x98/0x150 [ 208.475754][ T8193] do_syscall_64+0x55/0xb0 [ 208.480189][ T8193] ? clear_bhb_loop+0x40/0x90 [ 208.484890][ T8193] ? clear_bhb_loop+0x40/0x90 [ 208.489578][ T8193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.495481][ T8193] RIP: 0033:0x7fe2a7d8eec9 [ 208.499907][ T8193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.519530][ T8193] RSP: 002b:00007fe2a8bf0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.527961][ T8193] RAX: ffffffffffffffda RBX: 00007fe2a7fe5fa0 RCX: 00007fe2a7d8eec9 [ 208.535950][ T8193] RDX: 0000000000000000 RSI: 0000200000002780 RDI: 0000000000000003 [ 208.543934][ T8193] RBP: 00007fe2a8bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 208.551926][ T8193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.559900][ T8193] R13: 00007fe2a7fe6038 R14: 00007fe2a7fe5fa0 R15: 00007ffd203b3d58 [ 208.567988][ T8193] [ 208.909511][ T8207] mac80211_hwsim hwsim3 O3ãc¤±: renamed from wlan1 (while UP) [ 210.001288][ T8227] FAULT_INJECTION: forcing a failure. [ 210.001288][ T8227] name failslab, interval 1, probability 0, space 0, times 0 [ 210.048403][ T8227] CPU: 0 PID: 8227 Comm: syz.3.808 Not tainted syzkaller #0 [ 210.055760][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 210.065856][ T8227] Call Trace: [ 210.069169][ T8227] [ 210.072134][ T8227] dump_stack_lvl+0x16c/0x230 [ 210.076863][ T8227] ? show_regs_print_info+0x20/0x20 [ 210.082105][ T8227] ? load_image+0x3b0/0x3b0 [ 210.086651][ T8227] ? __might_sleep+0xe0/0xe0 [ 210.091275][ T8227] ? __lock_acquire+0x7c80/0x7c80 [ 210.096340][ T8227] ? mark_lock+0x94/0x320 [ 210.100712][ T8227] should_fail_ex+0x39d/0x4d0 [ 210.105524][ T8227] should_failslab+0x9/0x20 [ 210.110071][ T8227] slab_pre_alloc_hook+0x59/0x310 [ 210.115137][ T8227] ? __get_vm_area_node+0x125/0x370 [ 210.120385][ T8227] __kmem_cache_alloc_node+0x53/0x260 [ 210.125799][ T8227] ? __get_vm_area_node+0x125/0x370 [ 210.131036][ T8227] kmalloc_node_trace+0x26/0xe0 [ 210.135905][ T8227] __get_vm_area_node+0x125/0x370 [ 210.140954][ T8227] __vmalloc_node_range+0x36e/0x1320 [ 210.146259][ T8227] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 210.151827][ T8227] ? mark_lock+0x94/0x320 [ 210.156181][ T8227] ? __lock_acquire+0x1334/0x7c80 [ 210.161274][ T8227] ? verify_lock_unused+0x140/0x140 [ 210.166507][ T8227] ? free_vm_area+0x50/0x50 [ 210.171120][ T8227] ? end_current_label_crit_section+0x170/0x170 [ 210.177381][ T8227] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 210.182941][ T8227] __vmalloc+0x7a/0x90 [ 210.187043][ T8227] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 210.192636][ T8227] bpf_prog_alloc_no_stats+0x47/0x440 [ 210.198035][ T8227] ? bpf_prog_alloc+0x2b/0x1b0 [ 210.202829][ T8227] bpf_prog_alloc+0x3d/0x1b0 [ 210.207445][ T8227] bpf_prog_load+0x6b8/0x16d0 [ 210.212146][ T8227] ? map_freeze+0x420/0x420 [ 210.216666][ T8227] ? __might_fault+0xaa/0x120 [ 210.221355][ T8227] ? __lock_acquire+0x7c80/0x7c80 [ 210.226396][ T8227] ? file_end_write+0x159/0x250 [ 210.231266][ T8227] ? __might_fault+0xaa/0x120 [ 210.235966][ T8227] ? __might_fault+0xc6/0x120 [ 210.240648][ T8227] ? __might_fault+0xaa/0x120 [ 210.245334][ T8227] ? bpf_lsm_bpf+0x9/0x10 [ 210.249693][ T8227] ? security_bpf+0x7e/0xa0 [ 210.254223][ T8227] __sys_bpf+0x55a/0x800 [ 210.258490][ T8227] ? bpf_link_show_fdinfo+0x350/0x350 [ 210.263911][ T8227] ? lock_chain_count+0x20/0x20 [ 210.268785][ T8227] __x64_sys_bpf+0x7c/0x90 [ 210.273212][ T8227] do_syscall_64+0x55/0xb0 [ 210.277664][ T8227] ? clear_bhb_loop+0x40/0x90 [ 210.282370][ T8227] ? clear_bhb_loop+0x40/0x90 [ 210.287080][ T8227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.292995][ T8227] RIP: 0033:0x7fe332b8eec9 [ 210.297428][ T8227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.317051][ T8227] RSP: 002b:00007fe333ac8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.325497][ T8227] RAX: ffffffffffffffda RBX: 00007fe332de5fa0 RCX: 00007fe332b8eec9 [ 210.333569][ T8227] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 210.341554][ T8227] RBP: 00007fe333ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 210.349538][ T8227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.357523][ T8227] R13: 00007fe332de6038 R14: 00007fe332de5fa0 R15: 00007ffd84a7bfd8 [ 210.365526][ T8227] [ 210.511302][ T8233] syz.0.811[8233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.511667][ T8233] syz.0.811[8233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.395427][ T8251] FAULT_INJECTION: forcing a failure. [ 211.395427][ T8251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.460089][ T8251] CPU: 0 PID: 8251 Comm: syz.2.819 Not tainted syzkaller #0 [ 211.467649][ T8251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 211.477860][ T8251] Call Trace: [ 211.481222][ T8251] [ 211.484223][ T8251] dump_stack_lvl+0x16c/0x230 [ 211.488989][ T8251] ? show_regs_print_info+0x20/0x20 [ 211.494286][ T8251] ? load_image+0x3b0/0x3b0 [ 211.498956][ T8251] ? __might_fault+0xaa/0x120 [ 211.503712][ T8251] ? __lock_acquire+0x7c80/0x7c80 [ 211.508817][ T8251] should_fail_ex+0x39d/0x4d0 [ 211.513591][ T8251] _copy_from_user+0x2f/0xe0 [ 211.518257][ T8251] ___sys_sendmsg+0x159/0x290 [ 211.523021][ T8251] ? __sys_sendmsg+0x270/0x270 [ 211.527923][ T8251] ? __lock_acquire+0x7c80/0x7c80 [ 211.533103][ T8251] __se_sys_sendmsg+0x1a5/0x270 [ 211.538037][ T8251] ? perf_trace_preemptirq_template+0x281/0x340 [ 211.544360][ T8251] ? __x64_sys_sendmsg+0x80/0x80 [ 211.549430][ T8251] ? lockdep_hardirqs_on+0x98/0x150 [ 211.554715][ T8251] do_syscall_64+0x55/0xb0 [ 211.559204][ T8251] ? clear_bhb_loop+0x40/0x90 [ 211.563957][ T8251] ? clear_bhb_loop+0x40/0x90 [ 211.568724][ T8251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.574676][ T8251] RIP: 0033:0x7f701838eec9 [ 211.579196][ T8251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.598868][ T8251] RSP: 002b:00007f701914f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.607367][ T8251] RAX: ffffffffffffffda RBX: 00007f70185e5fa0 RCX: 00007f701838eec9 [ 211.615406][ T8251] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 211.623448][ T8251] RBP: 00007f701914f090 R08: 0000000000000000 R09: 0000000000000000 [ 211.631476][ T8251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.639503][ T8251] R13: 00007f70185e6038 R14: 00007f70185e5fa0 R15: 00007ffecb577c28 [ 211.647583][ T8251] [ 211.906046][ T5103] Bluetooth: hci0: command 0x0406 tx timeout [ 211.912291][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 211.918550][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 211.924709][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 212.775331][ T8281] FAULT_INJECTION: forcing a failure. [ 212.775331][ T8281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.805695][ T8281] CPU: 0 PID: 8281 Comm: syz.1.827 Not tainted syzkaller #0 [ 212.813151][ T8281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.823336][ T8281] Call Trace: [ 212.826662][ T8281] [ 212.829640][ T8281] dump_stack_lvl+0x16c/0x230 [ 212.834384][ T8281] ? show_regs_print_info+0x20/0x20 [ 212.839631][ T8281] ? load_image+0x3b0/0x3b0 [ 212.844193][ T8281] ? __lock_acquire+0x7c80/0x7c80 [ 212.849270][ T8281] should_fail_ex+0x39d/0x4d0 [ 212.853994][ T8281] _copy_from_user+0x2f/0xe0 [ 212.858641][ T8281] __copy_msghdr+0x3bb/0x580 [ 212.863295][ T8281] ___sys_sendmsg+0x1a6/0x290 [ 212.868025][ T8281] ? __sys_sendmsg+0x270/0x270 [ 212.873036][ T8281] ? __lock_acquire+0x7c80/0x7c80 [ 212.878135][ T8281] __se_sys_sendmsg+0x1a5/0x270 [ 212.883039][ T8281] ? __x64_sys_sendmsg+0x80/0x80 [ 212.888043][ T8281] ? lockdep_hardirqs_on+0x98/0x150 [ 212.893306][ T8281] do_syscall_64+0x55/0xb0 [ 212.897744][ T8281] ? clear_bhb_loop+0x40/0x90 [ 212.902438][ T8281] ? clear_bhb_loop+0x40/0x90 [ 212.907130][ T8281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.913032][ T8281] RIP: 0033:0x7fe2a7d8eec9 [ 212.917456][ T8281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.937099][ T8281] RSP: 002b:00007fe2a8bf0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.945545][ T8281] RAX: ffffffffffffffda RBX: 00007fe2a7fe5fa0 RCX: 00007fe2a7d8eec9 [ 212.953540][ T8281] RDX: 0000000020000800 RSI: 0000200000000200 RDI: 0000000000000003 [ 212.961521][ T8281] RBP: 00007fe2a8bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 212.969522][ T8281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.977520][ T8281] R13: 00007fe2a7fe6038 R14: 00007fe2a7fe5fa0 R15: 00007ffd203b3d58 [ 212.985547][ T8281] [ 213.126265][ T8292] netlink: 'syz.0.830': attribute type 9 has an invalid length. [ 213.135196][ T8292] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.830'. [ 213.237717][ T8295] netlink: 'syz.0.830': attribute type 9 has an invalid length. [ 213.276100][ T8295] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.830'. [ 215.029396][ T8339] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.845'. [ 217.455039][ T8392] netlink: 'syz.0.860': attribute type 10 has an invalid length. [ 217.900260][ T8392] team0: Port device dummy0 added [ 220.198647][ T8437] netlink: 'syz.2.875': attribute type 10 has an invalid length. [ 220.506746][ T8437] team0: Port device dummy0 added [ 221.273914][ T8453] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.879'. [ 222.694951][ T8485] bridge_slave_1: left allmulticast mode [ 222.712604][ T8485] bridge_slave_1: left promiscuous mode [ 222.721008][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.747063][ T8485] bridge_slave_0: left allmulticast mode [ 222.761488][ T8485] bridge_slave_0: left promiscuous mode [ 222.795479][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.973884][ T8485] bond0: (slave bridge0): Releasing backup interface [ 224.740881][ T8505] netlink: 'syz.3.894': attribute type 10 has an invalid length. [ 225.097337][ T8505] bond0: (slave dummy0): Releasing backup interface [ 225.477734][ T8505] team0: Port device dummy0 added [ 226.498169][ T8531] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.899'. [ 226.635423][ T8536] bridge_slave_1: left allmulticast mode [ 226.644146][ T8536] bridge_slave_1: left promiscuous mode [ 226.650437][ T8536] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.661119][ T8536] bridge_slave_0: left allmulticast mode [ 226.669609][ T8536] bridge_slave_0: left promiscuous mode [ 226.675475][ T8536] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.722809][ T8536] bond0: (slave bridge0): Releasing backup interface [ 230.134261][ T8607] FAULT_INJECTION: forcing a failure. [ 230.134261][ T8607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.178465][ T8607] CPU: 1 PID: 8607 Comm: syz.2.929 Not tainted syzkaller #0 [ 230.185837][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 230.195930][ T8607] Call Trace: [ 230.199244][ T8607] [ 230.202201][ T8607] dump_stack_lvl+0x16c/0x230 [ 230.206922][ T8607] ? show_regs_print_info+0x20/0x20 [ 230.212154][ T8607] ? load_image+0x3b0/0x3b0 [ 230.216690][ T8607] ? __might_fault+0xaa/0x120 [ 230.221400][ T8607] ? __lock_acquire+0x7c80/0x7c80 [ 230.226466][ T8607] should_fail_ex+0x39d/0x4d0 [ 230.231187][ T8607] _copy_from_iter+0x1d3/0x1290 [ 230.236066][ T8607] ? slab_post_alloc_hook+0x8a/0x4d0 [ 230.241392][ T8607] ? __virt_addr_valid+0x18c/0x540 [ 230.246576][ T8607] ? __lock_acquire+0x7c80/0x7c80 [ 230.251637][ T8607] ? rcu_is_watching+0x15/0xb0 [ 230.256450][ T8607] ? copyout_mc+0x70/0x70 [ 230.260828][ T8607] ? __virt_addr_valid+0x18c/0x540 [ 230.265977][ T8607] ? __virt_addr_valid+0x18c/0x540 [ 230.271120][ T8607] ? __virt_addr_valid+0x469/0x540 [ 230.276256][ T8607] ? __check_object_size+0x506/0xa30 [ 230.281612][ T8607] netlink_sendmsg+0x75c/0xbe0 [ 230.286414][ T8607] ? netlink_getsockopt+0x580/0x580 [ 230.291647][ T8607] ? aa_sock_msg_perm+0x94/0x150 [ 230.296710][ T8607] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 230.302017][ T8607] ? security_socket_sendmsg+0x80/0xa0 [ 230.307492][ T8607] ? netlink_getsockopt+0x580/0x580 [ 230.312706][ T8607] ____sys_sendmsg+0x5bf/0x950 [ 230.317497][ T8607] ? __asan_memset+0x22/0x40 [ 230.322106][ T8607] ? __sys_sendmsg_sock+0x30/0x30 [ 230.327153][ T8607] ? __import_iovec+0x5f2/0x860 [ 230.332027][ T8607] ? import_iovec+0x73/0xa0 [ 230.336568][ T8607] ___sys_sendmsg+0x220/0x290 [ 230.341269][ T8607] ? __sys_sendmsg+0x270/0x270 [ 230.346067][ T8607] ? __lock_acquire+0x7c80/0x7c80 [ 230.351213][ T8607] __se_sys_sendmsg+0x1a5/0x270 [ 230.356096][ T8607] ? __x64_sys_sendmsg+0x80/0x80 [ 230.361082][ T8607] ? lockdep_hardirqs_on+0x98/0x150 [ 230.366299][ T8607] do_syscall_64+0x55/0xb0 [ 230.370726][ T8607] ? clear_bhb_loop+0x40/0x90 [ 230.375411][ T8607] ? clear_bhb_loop+0x40/0x90 [ 230.380098][ T8607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.385999][ T8607] RIP: 0033:0x7f701838eec9 [ 230.390426][ T8607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.410064][ T8607] RSP: 002b:00007f701914f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.418496][ T8607] RAX: ffffffffffffffda RBX: 00007f70185e5fa0 RCX: 00007f701838eec9 [ 230.426481][ T8607] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 230.434460][ T8607] RBP: 00007f701914f090 R08: 0000000000000000 R09: 0000000000000000 [ 230.442444][ T8607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.450424][ T8607] R13: 00007f70185e6038 R14: 00007f70185e5fa0 R15: 00007ffecb577c28 [ 230.458424][ T8607] [ 230.733325][ T8612] netlink: 'syz.3.930': attribute type 10 has an invalid length. [ 231.261260][ T8617] netlink: 'syz.3.930': attribute type 10 has an invalid length. [ 231.336687][ T8617] team0: Port device dummy0 removed [ 231.400767][ T8617] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 232.087364][ T8640] netlink: 132 bytes leftover after parsing attributes in process `syz.1.941'. [ 232.215837][ T8640] netlink: 164 bytes leftover after parsing attributes in process `syz.1.941'. [ 232.818666][ T8657] netlink: 'syz.2.945': attribute type 10 has an invalid length. [ 233.117711][ T8662] netlink: 'syz.2.945': attribute type 10 has an invalid length. [ 233.420835][ T8662] team0: Port device dummy0 removed [ 233.436111][ T8662] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 233.612828][ T8677] FAULT_INJECTION: forcing a failure. [ 233.612828][ T8677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.629630][ T8677] CPU: 1 PID: 8677 Comm: syz.2.954 Not tainted syzkaller #0 [ 233.636954][ T8677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.647045][ T8677] Call Trace: [ 233.650346][ T8677] [ 233.653290][ T8677] dump_stack_lvl+0x16c/0x230 [ 233.658001][ T8677] ? show_regs_print_info+0x20/0x20 [ 233.663215][ T8677] ? load_image+0x3b0/0x3b0 [ 233.667744][ T8677] ? __lock_acquire+0x7c80/0x7c80 [ 233.672780][ T8677] should_fail_ex+0x39d/0x4d0 [ 233.677474][ T8677] strncpy_from_user+0x36/0x2e0 [ 233.682341][ T8677] bpf_raw_tp_link_attach+0x1cf/0x560 [ 233.687733][ T8677] ? bpf_insn_prepare_dump+0x840/0x840 [ 233.693222][ T8677] bpf_raw_tracepoint_open+0x197/0x210 [ 233.698710][ T8677] __sys_bpf+0x364/0x800 [ 233.702960][ T8677] ? bpf_link_show_fdinfo+0x350/0x350 [ 233.708346][ T8677] ? lock_chain_count+0x20/0x20 [ 233.713212][ T8677] __x64_sys_bpf+0x7c/0x90 [ 233.717640][ T8677] do_syscall_64+0x55/0xb0 [ 233.722070][ T8677] ? clear_bhb_loop+0x40/0x90 [ 233.726758][ T8677] ? clear_bhb_loop+0x40/0x90 [ 233.731447][ T8677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.737348][ T8677] RIP: 0033:0x7f701838eec9 [ 233.741775][ T8677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.761407][ T8677] RSP: 002b:00007f701914f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.769834][ T8677] RAX: ffffffffffffffda RBX: 00007f70185e5fa0 RCX: 00007f701838eec9 [ 233.777810][ T8677] RDX: 0000000000000018 RSI: 0000200000000080 RDI: 0000000000000011 [ 233.785802][ T8677] RBP: 00007f701914f090 R08: 0000000000000000 R09: 0000000000000000 [ 233.793785][ T8677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.801763][ T8677] R13: 00007f70185e6038 R14: 00007f70185e5fa0 R15: 00007ffecb577c28 [ 233.809766][ T8677] [ 234.275887][ T8696] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.960'. [ 234.418164][ T8697] netlink: 'syz.2.962': attribute type 10 has an invalid length. [ 234.433006][ T8697] bond0: (slave bond_slave_0): Releasing backup interface [ 236.108717][ T8735] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.977'. [ 236.266827][ T8741] netlink: 'syz.0.979': attribute type 9 has an invalid length. [ 236.291861][ T8741] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.979'. [ 236.476460][ T8743] netlink: 'syz.0.979': attribute type 9 has an invalid length. [ 236.484760][ T8743] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.979'. [ 237.447715][ T8760] netlink: 60 bytes leftover after parsing attributes in process `syz.2.986'. [ 237.478594][ T8760] netlink: 60 bytes leftover after parsing attributes in process `syz.2.986'. [ 237.584602][ T8767] netlink: 60 bytes leftover after parsing attributes in process `syz.2.986'. [ 237.608746][ T8767] netlink: 60 bytes leftover after parsing attributes in process `syz.2.986'. [ 238.306483][ T8780] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.993'. [ 238.437735][ T8783] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.995'. [ 239.862789][ T8813] bridge_slave_1: left allmulticast mode [ 239.877243][ T8813] bridge_slave_1: left promiscuous mode [ 239.905558][ T8819] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1005'. [ 239.915199][ T8813] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.926886][ T8813] bridge_slave_0: left allmulticast mode [ 239.939375][ T8813] bridge_slave_0: left promiscuous mode [ 239.945744][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.024757][ T8813] bond0: (slave bridge0): Releasing backup interface [ 240.161272][ T8819] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1005'. [ 240.198615][ T8821] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1005'. [ 240.250627][ T8822] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1005'. [ 241.106687][ T8832] netlink: 'syz.1.1009': attribute type 12 has an invalid length. [ 243.481881][ T8878] netlink: 'syz.0.1024': attribute type 12 has an invalid length. [ 243.505892][ T8878] __nla_validate_parse: 2 callbacks suppressed [ 243.505908][ T8878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1024'. [ 243.563613][ T8879] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1025'. [ 246.125012][ T8918] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1037'. [ 246.144428][ T8918] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1037'. [ 246.225965][ T8927] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1037'. [ 246.237014][ T8927] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1037'. [ 247.146930][ T8937] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1043'. [ 247.156880][ T8933] netlink: 'syz.3.1042': attribute type 12 has an invalid length. [ 247.236691][ T8933] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1042'. [ 248.671388][ T8955] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1055'. [ 248.707447][ T8956] netlink: 'syz.3.1046': attribute type 10 has an invalid length. [ 248.741762][ T8956] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 252.177165][ T9003] netlink: 'syz.2.1061': attribute type 10 has an invalid length. [ 252.214395][ T9003] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 253.140321][ T9023] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1071'. [ 255.351382][ T9060] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1082'. [ 255.463469][ T9061] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1083'. [ 255.498228][ T9061] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.1083'. [ 255.829327][ T9077] FAULT_INJECTION: forcing a failure. [ 255.829327][ T9077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.859378][ T9077] CPU: 1 PID: 9077 Comm: syz.0.1088 Not tainted syzkaller #0 [ 255.866862][ T9077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.876989][ T9077] Call Trace: [ 255.880328][ T9077] [ 255.883319][ T9077] dump_stack_lvl+0x16c/0x230 [ 255.888084][ T9077] ? show_regs_print_info+0x20/0x20 [ 255.893355][ T9077] ? load_image+0x3b0/0x3b0 [ 255.897962][ T9077] ? __lock_acquire+0x7c80/0x7c80 [ 255.903060][ T9077] ? snprintf+0xdb/0x120 [ 255.907381][ T9077] should_fail_ex+0x39d/0x4d0 [ 255.912152][ T9077] _copy_to_user+0x2f/0xa0 [ 255.916653][ T9077] simple_read_from_buffer+0xe7/0x150 [ 255.922130][ T9077] proc_fail_nth_read+0x1e3/0x250 [ 255.927232][ T9077] ? proc_fault_inject_write+0x340/0x340 [ 255.932958][ T9077] ? fsnotify_perm+0x271/0x5e0 [ 255.937808][ T9077] ? proc_fault_inject_write+0x340/0x340 [ 255.943514][ T9077] vfs_read+0x27e/0x920 [ 255.947764][ T9077] ? kernel_read+0x1e0/0x1e0 [ 255.952451][ T9077] ? __fget_files+0x28/0x4d0 [ 255.957118][ T9077] ? __fget_files+0x44a/0x4d0 [ 255.961909][ T9077] ? __fdget_pos+0x2a3/0x330 [ 255.966571][ T9077] ? ksys_read+0x75/0x250 [ 255.970996][ T9077] ksys_read+0x147/0x250 [ 255.975412][ T9077] ? vfs_write+0x940/0x940 [ 255.979915][ T9077] ? lockdep_hardirqs_on+0x98/0x150 [ 255.985204][ T9077] do_syscall_64+0x55/0xb0 [ 255.989690][ T9077] ? clear_bhb_loop+0x40/0x90 [ 255.994428][ T9077] ? clear_bhb_loop+0x40/0x90 [ 255.999197][ T9077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.005143][ T9077] RIP: 0033:0x7f29b918d8dc [ 256.009634][ T9077] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 256.029330][ T9077] RSP: 002b:00007f29ba080030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 256.037829][ T9077] RAX: ffffffffffffffda RBX: 00007f29b93e5fa0 RCX: 00007f29b918d8dc [ 256.045870][ T9077] RDX: 000000000000000f RSI: 00007f29ba0800a0 RDI: 0000000000000007 [ 256.053903][ T9077] RBP: 00007f29ba080090 R08: 0000000000000000 R09: 0000000000000000 [ 256.061932][ T9077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.069965][ T9077] R13: 00007f29b93e6038 R14: 00007f29b93e5fa0 R15: 00007ffe818dd898 [ 256.078062][ T9077] [ 256.087379][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.112729][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.093262][ T9096] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1095'. [ 257.653211][ T9105] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1096'. [ 258.663305][ T9128] netlink: 'syz.3.1102': attribute type 10 has an invalid length. [ 260.482310][ T9166] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1111'. [ 260.884007][ T9173] netlink: 'syz.2.1115': attribute type 10 has an invalid length. [ 260.964718][ T9173] team0: Port device geneve1 added [ 261.343633][ T9181] FAULT_INJECTION: forcing a failure. [ 261.343633][ T9181] name failslab, interval 1, probability 0, space 0, times 0 [ 261.388355][ T9181] CPU: 0 PID: 9181 Comm: syz.3.1118 Not tainted syzkaller #0 [ 261.395800][ T9181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 261.405901][ T9181] Call Trace: [ 261.409217][ T9181] [ 261.412173][ T9181] dump_stack_lvl+0x16c/0x230 [ 261.416903][ T9181] ? show_regs_print_info+0x20/0x20 [ 261.422143][ T9181] ? load_image+0x3b0/0x3b0 [ 261.426696][ T9181] ? __might_sleep+0xe0/0xe0 [ 261.431325][ T9181] ? __lock_acquire+0x7c80/0x7c80 [ 261.436393][ T9181] ? rcu_is_watching+0x15/0xb0 [ 261.441191][ T9181] should_fail_ex+0x39d/0x4d0 [ 261.445914][ T9181] should_failslab+0x9/0x20 [ 261.450458][ T9181] slab_pre_alloc_hook+0x59/0x310 [ 261.455522][ T9181] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 261.461460][ T9181] __kmem_cache_alloc_node+0x53/0x260 [ 261.466859][ T9181] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 261.472784][ T9181] kmalloc_trace+0x2a/0xe0 [ 261.477222][ T9181] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 261.482983][ T9181] sctp_association_new+0x15d3/0x25c0 [ 261.488402][ T9181] sctp_connect_new_asoc+0x2bf/0x690 [ 261.493731][ T9181] ? __sctp_connect+0xd20/0xd20 [ 261.498600][ T9181] ? security_sctp_bind_connect+0x4a/0xb0 [ 261.504329][ T9181] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 261.509913][ T9181] ? security_sctp_bind_connect+0x89/0xb0 [ 261.515648][ T9181] sctp_sendmsg+0x155c/0x27e0 [ 261.520351][ T9181] ? sctp_getsockopt+0xb60/0xb60 [ 261.525307][ T9181] ? aa_sk_perm+0x7fc/0x930 [ 261.529828][ T9181] ? aa_af_perm+0x2b0/0x2b0 [ 261.534347][ T9181] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 261.540788][ T9181] ? sock_rps_record_flow+0x19/0x400 [ 261.546087][ T9181] ? inet_send_prepare+0x260/0x260 [ 261.551207][ T9181] ? inet_sendmsg+0xe9/0x2f0 [ 261.555814][ T9181] ? inet_send_prepare+0x260/0x260 [ 261.560943][ T9181] ____sys_sendmsg+0x5bf/0x950 [ 261.565734][ T9181] ? __sys_sendmsg_sock+0x30/0x30 [ 261.570776][ T9181] ? __import_iovec+0x5f2/0x860 [ 261.575653][ T9181] ? import_iovec+0x73/0xa0 [ 261.580178][ T9181] ___sys_sendmsg+0x220/0x290 [ 261.584890][ T9181] ? __sys_sendmsg+0x270/0x270 [ 261.589686][ T9181] ? __lock_acquire+0x7c80/0x7c80 [ 261.594743][ T9181] __se_sys_sendmsg+0x1a5/0x270 [ 261.599615][ T9181] ? perf_trace_preemptirq_template+0x281/0x340 [ 261.605879][ T9181] ? __x64_sys_sendmsg+0x80/0x80 [ 261.610856][ T9181] ? lockdep_hardirqs_on+0x98/0x150 [ 261.616081][ T9181] do_syscall_64+0x55/0xb0 [ 261.620513][ T9181] ? clear_bhb_loop+0x40/0x90 [ 261.625204][ T9181] ? clear_bhb_loop+0x40/0x90 [ 261.629900][ T9181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.635892][ T9181] RIP: 0033:0x7fe332b8eec9 [ 261.640324][ T9181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.659945][ T9181] RSP: 002b:00007fe333ac8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.668377][ T9181] RAX: ffffffffffffffda RBX: 00007fe332de5fa0 RCX: 00007fe332b8eec9 [ 261.676378][ T9181] RDX: 0000000000000041 RSI: 0000200000000440 RDI: 000000000000000b [ 261.684364][ T9181] RBP: 00007fe333ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 261.692346][ T9181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.700328][ T9181] R13: 00007fe332de6038 R14: 00007fe332de5fa0 R15: 00007ffd84a7bfd8 [ 261.708330][ T9181] [ 263.243054][ T9200] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1120'. [ 263.857415][ T9219] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1128'. [ 264.230709][ T9230] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1133'. [ 264.285239][ T9230] openvswitch: netlink: Key type 29 is not supported [ 264.433440][ T9239] netlink: 'syz.1.1138': attribute type 21 has an invalid length. [ 264.442824][ T9239] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1138'. [ 265.689280][ T9278] FAULT_INJECTION: forcing a failure. [ 265.689280][ T9278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.762143][ T9278] CPU: 0 PID: 9278 Comm: syz.2.1152 Not tainted syzkaller #0 [ 265.769593][ T9278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 265.779661][ T9278] Call Trace: [ 265.782954][ T9278] [ 265.785895][ T9278] dump_stack_lvl+0x16c/0x230 [ 265.790595][ T9278] ? show_regs_print_info+0x20/0x20 [ 265.795817][ T9278] ? load_image+0x3b0/0x3b0 [ 265.800338][ T9278] ? __might_fault+0xaa/0x120 [ 265.805024][ T9278] ? __lock_acquire+0x7c80/0x7c80 [ 265.810064][ T9278] should_fail_ex+0x39d/0x4d0 [ 265.814765][ T9278] _copy_from_user+0x2f/0xe0 [ 265.819384][ T9278] ___sys_sendmsg+0x159/0x290 [ 265.824081][ T9278] ? __sys_sendmsg+0x270/0x270 [ 265.828886][ T9278] ? __lock_acquire+0x7c80/0x7c80 [ 265.833954][ T9278] __se_sys_sendmsg+0x1a5/0x270 [ 265.838828][ T9278] ? __x64_sys_sendmsg+0x80/0x80 [ 265.843795][ T9278] ? lockdep_hardirqs_on+0x98/0x150 [ 265.849029][ T9278] do_syscall_64+0x55/0xb0 [ 265.853457][ T9278] ? clear_bhb_loop+0x40/0x90 [ 265.858152][ T9278] ? clear_bhb_loop+0x40/0x90 [ 265.862852][ T9278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.868769][ T9278] RIP: 0033:0x7f701838eec9 [ 265.873196][ T9278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.892815][ T9278] RSP: 002b:00007f701914f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.901242][ T9278] RAX: ffffffffffffffda RBX: 00007f70185e5fa0 RCX: 00007f701838eec9 [ 265.909223][ T9278] RDX: e07e872424dfefca RSI: 0000200000000240 RDI: 0000000000000005 [ 265.917201][ T9278] RBP: 00007f701914f090 R08: 0000000000000000 R09: 0000000000000000 [ 265.925210][ T9278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.933192][ T9278] R13: 00007f70185e6038 R14: 00007f70185e5fa0 R15: 00007ffecb577c28 [ 265.941196][ T9278] [ 266.060843][ T9281] netlink: 'syz.1.1153': attribute type 10 has an invalid length. [ 266.069642][ T9281] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1153'. [ 266.088791][ T9281] vcan0: entered promiscuous mode [ 266.094391][ T9281] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 267.588978][ T9308] netlink: 'syz.1.1162': attribute type 21 has an invalid length. [ 267.629917][ T9308] netlink: 'syz.1.1162': attribute type 1 has an invalid length. [ 269.028576][ T9349] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1175'. [ 269.816836][ T9357] €Â: renamed from lo [ 270.276542][ T9377] ªªªªªª—ùËtuvÒ«: renamed from lo [ 270.289303][ T9377] FAULT_INJECTION: forcing a failure. [ 270.289303][ T9377] name failslab, interval 1, probability 0, space 0, times 0 [ 270.315969][ T9377] CPU: 1 PID: 9377 Comm: syz.3.1184 Not tainted syzkaller #0 [ 270.323451][ T9377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 270.333577][ T9377] Call Trace: [ 270.336908][ T9377] [ 270.339900][ T9377] dump_stack_lvl+0x16c/0x230 [ 270.344680][ T9377] ? show_regs_print_info+0x20/0x20 [ 270.349971][ T9377] ? load_image+0x3b0/0x3b0 [ 270.354559][ T9377] ? __might_sleep+0xe0/0xe0 [ 270.359417][ T9377] ? __lock_acquire+0x7c80/0x7c80 [ 270.364536][ T9377] should_fail_ex+0x39d/0x4d0 [ 270.369300][ T9377] should_failslab+0x9/0x20 [ 270.373895][ T9377] slab_pre_alloc_hook+0x59/0x310 [ 270.379011][ T9377] ? kernfs_rename_ns+0x3b1/0x810 [ 270.384103][ T9377] ? kernfs_rename_ns+0x3b1/0x810 [ 270.389189][ T9377] __kmem_cache_alloc_node+0x53/0x260 [ 270.394651][ T9377] ? kernfs_rename_ns+0x3b1/0x810 [ 270.399745][ T9377] __kmalloc_node_track_caller+0xa2/0x230 [ 270.405534][ T9377] kstrdup+0x3b/0x80 [ 270.409478][ T9377] kernfs_rename_ns+0x3b1/0x810 [ 270.414395][ T9377] sysfs_rename_dir_ns+0x6d/0x90 [ 270.419400][ T9377] kobject_rename+0x3aa/0x500 [ 270.424131][ T9377] ? kobject_init_and_add+0x190/0x190 [ 270.429578][ T9377] ? sysfs_rename_link_ns+0x17f/0x1b0 [ 270.435023][ T9377] device_rename+0x15d/0x1e0 [ 270.439680][ T9377] dev_change_name+0x2ee/0x8a0 [ 270.444526][ T9377] ? dev_alloc_name+0x1c0/0x1c0 [ 270.449677][ T9377] ? trace_contention_end+0x39/0xe0 [ 270.454918][ T9377] ? __mutex_lock+0x304/0xcc0 [ 270.459638][ T9377] ? end_current_label_crit_section+0x170/0x170 [ 270.465948][ T9377] dev_ifsioc+0x8c7/0xe20 [ 270.470332][ T9377] ? dev_ioctl+0x1170/0x1170 [ 270.474958][ T9377] ? bpf_lsm_capable+0x9/0x10 [ 270.479678][ T9377] ? security_capable+0x89/0xb0 [ 270.484595][ T9377] dev_ioctl+0x705/0x1170 [ 270.488979][ T9377] sock_do_ioctl+0x226/0x2f0 [ 270.493650][ T9377] ? sock_show_fdinfo+0xb0/0xb0 [ 270.498585][ T9377] sock_ioctl+0x623/0x7a0 [ 270.502974][ T9377] ? sock_poll+0x3d0/0x3d0 [ 270.507463][ T9377] ? bpf_lsm_file_ioctl+0x9/0x10 [ 270.512431][ T9377] ? security_file_ioctl+0x80/0xa0 [ 270.517586][ T9377] ? sock_poll+0x3d0/0x3d0 [ 270.522061][ T9377] __se_sys_ioctl+0xfd/0x170 [ 270.526705][ T9377] do_syscall_64+0x55/0xb0 [ 270.531152][ T9377] ? clear_bhb_loop+0x40/0x90 [ 270.535858][ T9377] ? clear_bhb_loop+0x40/0x90 [ 270.540585][ T9377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.546505][ T9377] RIP: 0033:0x7fe332b8eec9 [ 270.550954][ T9377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.570596][ T9377] RSP: 002b:00007fe333ac8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.579061][ T9377] RAX: ffffffffffffffda RBX: 00007fe332de5fa0 RCX: 00007fe332b8eec9 [ 270.587067][ T9377] RDX: 0000200000000480 RSI: 0000000000008923 RDI: 0000000000000004 [ 270.595072][ T9377] RBP: 00007fe333ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 270.603090][ T9377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.611088][ T9377] R13: 00007fe332de6038 R14: 00007fe332de5fa0 R15: 00007ffd84a7bfd8 [ 270.619145][ T9377] [ 270.814357][ T9379] netlink: 'syz.0.1185': attribute type 7 has an invalid length. [ 270.840023][ T9378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.847552][ T9378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.870258][ T9378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.879569][ T9378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.121953][ T9408] netlink: 'syz.3.1194': attribute type 33 has an invalid length. [ 272.156049][ T9404] syzkaller0: entered promiscuous mode [ 272.162493][ T9405] netlink: 'syz.3.1194': attribute type 33 has an invalid length. [ 272.175299][ T9404] syzkaller0: entered allmulticast mode [ 272.386126][ T9415] netlink: 'syz.0.1197': attribute type 21 has an invalid length. [ 272.394819][ T9415] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 272.402879][ T9415] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1197'. [ 272.566072][ T9420] netlink: 'syz.1.1207': attribute type 29 has an invalid length. [ 272.585454][ T9420] netlink: 'syz.1.1207': attribute type 3 has an invalid length. [ 272.594445][ T9420] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1207'. [ 274.732509][ T9414] netlink: 'syz.0.1197': attribute type 21 has an invalid length. [ 274.740626][ T9414] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 274.748530][ T9414] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1197'. [ 274.757782][ T9418] netlink: 'syz.2.1199': attribute type 21 has an invalid length. [ 275.094194][ T9442] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1206'. [ 276.398522][ T9460] validate_nla: 1 callbacks suppressed [ 276.398546][ T9460] netlink: 'syz.3.1214': attribute type 21 has an invalid length. [ 276.428719][ T9460] netlink: 'syz.3.1214': attribute type 1 has an invalid length. [ 276.834866][ T9485] FAULT_INJECTION: forcing a failure. [ 276.834866][ T9485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.848536][ T9485] CPU: 1 PID: 9485 Comm: syz.2.1220 Not tainted syzkaller #0 [ 276.855973][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 276.866069][ T9485] Call Trace: [ 276.869364][ T9485] [ 276.872306][ T9485] dump_stack_lvl+0x16c/0x230 [ 276.877005][ T9485] ? show_regs_print_info+0x20/0x20 [ 276.882225][ T9485] ? load_image+0x3b0/0x3b0 [ 276.886749][ T9485] ? __lock_acquire+0x7c80/0x7c80 [ 276.891787][ T9485] ? snprintf+0xdb/0x120 [ 276.896044][ T9485] should_fail_ex+0x39d/0x4d0 [ 276.900758][ T9485] _copy_to_user+0x2f/0xa0 [ 276.905186][ T9485] simple_read_from_buffer+0xe7/0x150 [ 276.910584][ T9485] proc_fail_nth_read+0x1e3/0x250 [ 276.915650][ T9485] ? proc_fault_inject_write+0x340/0x340 [ 276.921323][ T9485] ? fsnotify_perm+0x271/0x5e0 [ 276.926108][ T9485] ? proc_fault_inject_write+0x340/0x340 [ 276.931752][ T9485] vfs_read+0x27e/0x920 [ 276.935934][ T9485] ? kernel_read+0x1e0/0x1e0 [ 276.940547][ T9485] ? __fget_files+0x28/0x4d0 [ 276.945158][ T9485] ? __fget_files+0x44a/0x4d0 [ 276.949866][ T9485] ? __fdget_pos+0x2a3/0x330 [ 276.954471][ T9485] ? ksys_read+0x75/0x250 [ 276.958825][ T9485] ksys_read+0x147/0x250 [ 276.963091][ T9485] ? vfs_write+0x940/0x940 [ 276.967523][ T9485] ? lockdep_hardirqs_on+0x98/0x150 [ 276.972748][ T9485] do_syscall_64+0x55/0xb0 [ 276.977177][ T9485] ? clear_bhb_loop+0x40/0x90 [ 276.981866][ T9485] ? clear_bhb_loop+0x40/0x90 [ 276.986560][ T9485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.992464][ T9485] RIP: 0033:0x7f701838d8dc [ 276.996906][ T9485] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 277.016539][ T9485] RSP: 002b:00007f701914f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 277.024976][ T9485] RAX: ffffffffffffffda RBX: 00007f70185e5fa0 RCX: 00007f701838d8dc [ 277.032972][ T9485] RDX: 000000000000000f RSI: 00007f701914f0a0 RDI: 0000000000000005 [ 277.040956][ T9485] RBP: 00007f701914f090 R08: 0000000000000000 R09: 0000000000000000 [ 277.048934][ T9485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.056931][ T9485] R13: 00007f70185e6038 R14: 00007f70185e5fa0 R15: 00007ffecb577c28 [ 277.064959][ T9485] [ 277.421080][ T9498] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1228'. [ 278.124086][ T9517] netlink: 'syz.0.1231': attribute type 21 has an invalid length. [ 278.168357][ T9517] netlink: 'syz.0.1231': attribute type 1 has an invalid length. [ 278.171074][ T9522] netlink: set zone limit has 8 unknown bytes [ 278.626344][ T9534] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.1246'. [ 278.990308][ T9547] netlink: 'syz.1.1242': attribute type 39 has an invalid length. [ 279.205196][ T9553] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1245'. [ 279.244244][ T9553] netlink: 'syz.3.1245': attribute type 16 has an invalid length. [ 279.261003][ T9553] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1245'. [ 279.749396][ T9563] FAULT_INJECTION: forcing a failure. [ 279.749396][ T9563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.777470][ T9563] CPU: 1 PID: 9563 Comm: syz.1.1248 Not tainted syzkaller #0 [ 279.784915][ T9563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 279.795009][ T9563] Call Trace: [ 279.798317][ T9563] [ 279.801280][ T9563] dump_stack_lvl+0x16c/0x230 [ 279.806000][ T9563] ? show_regs_print_info+0x20/0x20 [ 279.811237][ T9563] ? load_image+0x3b0/0x3b0 [ 279.815782][ T9563] ? __lock_acquire+0x7c80/0x7c80 [ 279.820852][ T9563] ? __local_bh_enable_ip+0x12e/0x1c0 [ 279.826267][ T9563] should_fail_ex+0x39d/0x4d0 [ 279.830998][ T9563] _copy_from_user+0x2f/0xe0 [ 279.835669][ T9563] copy_from_sockptr+0x69/0x80 [ 279.840514][ T9563] do_ipv6_setsockopt+0xd37/0x3c30 [ 279.845691][ T9563] ? sk_dst_reset+0xa0/0xa0 [ 279.850258][ T9563] ? perf_trace_lock_acquire+0x19c/0x3e0 [ 279.855948][ T9563] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 279.862628][ T9563] ? trace_call_bpf+0xc3/0x690 [ 279.867454][ T9563] ? __lock_acquire+0x7c80/0x7c80 [ 279.872533][ T9563] ? mark_lock+0x94/0x320 [ 279.876938][ T9563] ? __lock_acquire+0x1260/0x7c80 [ 279.882031][ T9563] ? aa_label_sk_perm+0x3ec/0x500 [ 279.887106][ T9563] ? aa_sk_perm+0x930/0x930 [ 279.891680][ T9563] ? __might_sleep+0xe0/0xe0 [ 279.896339][ T9563] ipv6_setsockopt+0x59/0x190 [ 279.901072][ T9563] dccp_setsockopt+0x160/0x830 [ 279.905878][ T9563] ? aa_af_perm+0x2b0/0x2b0 [ 279.910430][ T9563] ? dccp_ioctl+0x200/0x200 [ 279.914973][ T9563] ? __fget_files+0x28/0x4d0 [ 279.919615][ T9563] ? aa_sock_opt_perm+0x74/0x100 [ 279.924610][ T9563] ? sock_common_setsockopt+0x36/0xc0 [ 279.930036][ T9563] ? sock_common_recvmsg+0x1b0/0x1b0 [ 279.935366][ T9563] do_sock_setsockopt+0x175/0x1a0 [ 279.940438][ T9563] ? __fdget+0x180/0x210 [ 279.944730][ T9563] __x64_sys_setsockopt+0x184/0x200 [ 279.950004][ T9563] do_syscall_64+0x55/0xb0 [ 279.954483][ T9563] ? clear_bhb_loop+0x40/0x90 [ 279.959205][ T9563] ? clear_bhb_loop+0x40/0x90 [ 279.963936][ T9563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.969867][ T9563] RIP: 0033:0x7fe2a7d8eec9 [ 279.974316][ T9563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.993964][ T9563] RSP: 002b:00007fe2a8bf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 280.002436][ T9563] RAX: ffffffffffffffda RBX: 00007fe2a7fe5fa0 RCX: 00007fe2a7d8eec9 [ 280.010444][ T9563] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004 [ 280.018454][ T9563] RBP: 00007fe2a8bf0090 R08: 0000000000000120 R09: 0000000000000000 [ 280.026489][ T9563] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 280.034501][ T9563] R13: 00007fe2a7fe6038 R14: 00007fe2a7fe5fa0 R15: 00007ffd203b3d58 [ 280.042533][ T9563] [ 280.268487][ T9574] netlink: 'syz.0.1250': attribute type 21 has an invalid length. [ 280.276538][ T9574] netlink: 'syz.0.1250': attribute type 1 has an invalid length. [ 280.454477][ T9584] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1254'. [ 280.503204][ T9584] bridge_slave_0: entered allmulticast mode [ 281.269981][ T9605] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1263'. [ 281.272988][ T9607] netlink: 'syz.1.1264': attribute type 21 has an invalid length. [ 281.287663][ T9607] netlink: 'syz.1.1264': attribute type 1 has an invalid length. [ 281.297603][ T9605] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1263'. [ 281.594554][ T9609] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1263'. [ 281.725354][ T9611] veth1_macvtap: left promiscuous mode [ 281.731053][ T9611] macsec0: entered promiscuous mode [ 281.736290][ T9611] macsec0: entered allmulticast mode [ 281.751276][ T9613] netlink: 'syz.1.1265': attribute type 10 has an invalid length. [ 281.768502][ T9613] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1265'. [ 281.777851][ T9613] team0: entered promiscuous mode [ 281.784732][ T9613] team_slave_0: entered promiscuous mode [ 281.791620][ T9613] team_slave_1: entered promiscuous mode [ 281.797425][ T9613] geneve1: entered promiscuous mode [ 281.803539][ T9613] team0: entered allmulticast mode [ 281.809616][ T9613] team_slave_0: entered allmulticast mode [ 281.815571][ T9613] team_slave_1: entered allmulticast mode [ 281.822400][ T9613] geneve1: entered allmulticast mode [ 281.842752][ T9613] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 281.860686][ T9614] netlink: 'syz.2.1266': attribute type 10 has an invalid length. [ 281.893946][ T9614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.927826][ T9614] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 282.885615][ T9636] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1274'. [ 282.895025][ T9637] netlink: 'syz.2.1273': attribute type 21 has an invalid length. [ 282.903306][ T9637] netlink: 'syz.2.1273': attribute type 1 has an invalid length. [ 283.040376][ T9641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.110393][ T9648] netlink: 'syz.3.1278': attribute type 11 has an invalid length. [ 283.333035][ T9657] FAULT_INJECTION: forcing a failure. [ 283.333035][ T9657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.399603][ T9657] CPU: 0 PID: 9657 Comm: syz.0.1280 Not tainted syzkaller #0 [ 283.407044][ T9657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 283.417127][ T9657] Call Trace: [ 283.420428][ T9657] [ 283.423384][ T9657] dump_stack_lvl+0x16c/0x230 [ 283.428103][ T9657] ? show_regs_print_info+0x20/0x20 [ 283.433335][ T9657] ? load_image+0x3b0/0x3b0 [ 283.437878][ T9657] ? __lock_acquire+0x7c80/0x7c80 [ 283.442952][ T9657] should_fail_ex+0x39d/0x4d0 [ 283.447680][ T9657] _copy_from_user+0x2f/0xe0 [ 283.452328][ T9657] __copy_msghdr+0x3bb/0x580 [ 283.457073][ T9657] ___sys_sendmsg+0x1a6/0x290 [ 283.461794][ T9657] ? __sys_sendmsg+0x270/0x270 [ 283.466629][ T9657] ? __lock_acquire+0x7c80/0x7c80 [ 283.471724][ T9657] __se_sys_sendmsg+0x1a5/0x270 [ 283.476617][ T9657] ? perf_trace_preemptirq_template+0x281/0x340 [ 283.482905][ T9657] ? __x64_sys_sendmsg+0x80/0x80 [ 283.487906][ T9657] ? lockdep_hardirqs_on+0x98/0x150 [ 283.493151][ T9657] do_syscall_64+0x55/0xb0 [ 283.497607][ T9657] ? clear_bhb_loop+0x40/0x90 [ 283.502315][ T9657] ? clear_bhb_loop+0x40/0x90 [ 283.507022][ T9657] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.512943][ T9657] RIP: 0033:0x7f29b918eec9 [ 283.517394][ T9657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.537040][ T9657] RSP: 002b:00007f29ba080038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.545514][ T9657] RAX: ffffffffffffffda RBX: 00007f29b93e5fa0 RCX: 00007f29b918eec9 [ 283.553520][ T9657] RDX: 0000000020000800 RSI: 0000200000000200 RDI: 0000000000000003 [ 283.561530][ T9657] RBP: 00007f29ba080090 R08: 0000000000000000 R09: 0000000000000000 [ 283.569539][ T9657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.577546][ T9657] R13: 00007f29b93e6038 R14: 00007f29b93e5fa0 R15: 00007ffe818dd898 [ 283.585661][ T9657] [ 284.467156][ T9679] netlink: 'syz.2.1287': attribute type 21 has an invalid length. [ 284.492667][ T9679] netlink: 'syz.2.1287': attribute type 1 has an invalid length. [ 285.067319][ T9694] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1293'. [ 285.765621][ T9707] netlink: 'syz.1.1298': attribute type 21 has an invalid length. [ 285.778364][ T9707] netlink: 'syz.1.1298': attribute type 1 has an invalid length. [ 287.406860][ T9726] netlink: 'syz.0.1303': attribute type 10 has an invalid length. [ 287.450574][ T9726] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1303'. [ 287.514495][ T9726] team0: entered promiscuous mode [ 287.530884][ T9726] team_slave_0: entered promiscuous mode [ 287.550591][ T9726] team_slave_1: entered promiscuous mode [ 287.573552][ T9726] geneve1: entered promiscuous mode [ 287.608455][ T9726] dummy0: entered promiscuous mode [ 287.650289][ T9726] team0: entered allmulticast mode [ 287.655523][ T9726] team_slave_0: entered allmulticast mode [ 287.728245][ T9726] team_slave_1: entered allmulticast mode [ 287.734091][ T9726] geneve1: entered allmulticast mode [ 287.810102][ T9726] dummy0: entered allmulticast mode [ 287.821544][ T9726] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 289.329922][ T9743] netlink: 'syz.2.1309': attribute type 21 has an invalid length. [ 289.355531][ T9743] netlink: 'syz.2.1309': attribute type 1 has an invalid length. [ 291.286835][ T9749] FAULT_INJECTION: forcing a failure. [ 291.286835][ T9749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.380853][ T9749] CPU: 0 PID: 9749 Comm: syz.1.1311 Not tainted syzkaller #0 [ 291.388344][ T9749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 291.398474][ T9749] Call Trace: [ 291.401808][ T9749] [ 291.404812][ T9749] dump_stack_lvl+0x16c/0x230 [ 291.409579][ T9749] ? show_regs_print_info+0x20/0x20 [ 291.414858][ T9749] ? load_image+0x3b0/0x3b0 [ 291.419440][ T9749] ? __might_fault+0xaa/0x120 [ 291.424193][ T9749] ? __lock_acquire+0x7c80/0x7c80 [ 291.429313][ T9749] should_fail_ex+0x39d/0x4d0 [ 291.434088][ T9749] _copy_from_user+0x2f/0xe0 [ 291.438755][ T9749] __sys_bpf+0x1e9/0x800 [ 291.443078][ T9749] ? bpf_link_show_fdinfo+0x350/0x350 [ 291.448589][ T9749] ? lock_chain_count+0x20/0x20 [ 291.453660][ T9749] __x64_sys_bpf+0x7c/0x90 [ 291.458156][ T9749] do_syscall_64+0x55/0xb0 [ 291.462663][ T9749] ? clear_bhb_loop+0x40/0x90 [ 291.467420][ T9749] ? clear_bhb_loop+0x40/0x90 [ 291.472172][ T9749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.478130][ T9749] RIP: 0033:0x7fe2a7d8eec9 [ 291.482624][ T9749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.502479][ T9749] RSP: 002b:00007fe2a8bf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 291.510997][ T9749] RAX: ffffffffffffffda RBX: 00007fe2a7fe5fa0 RCX: 00007fe2a7d8eec9 [ 291.519052][ T9749] RDX: 0000000000000050 RSI: 0000200000000700 RDI: 0000000000000000 [ 291.527095][ T9749] RBP: 00007fe2a8bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 291.535129][ T9749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.543164][ T9749] R13: 00007fe2a7fe6038 R14: 00007fe2a7fe5fa0 R15: 00007ffd203b3d58 [ 291.551264][ T9749] [ 292.665907][ T9764] veth1_macvtap: left promiscuous mode [ 292.691221][ T9764] macsec0: entered promiscuous mode [ 292.707257][ T9764] macsec0: entered allmulticast mode [ 292.781378][ T9768] netlink: 'syz.2.1316': attribute type 10 has an invalid length. [ 292.819785][ T9768] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1316'. [ 292.860801][ T9768] team0: entered promiscuous mode [ 292.873134][ T9768] team_slave_0: entered promiscuous mode [ 292.899502][ T9768] team_slave_1: entered promiscuous mode [ 292.909431][ T9768] geneve1: entered promiscuous mode [ 292.925484][ T9768] team0: entered allmulticast mode [ 292.931636][ T9768] team_slave_0: entered allmulticast mode [ 292.939551][ T9768] team_slave_1: entered allmulticast mode [ 292.950058][ T9768] geneve1: entered allmulticast mode [ 292.956760][ T9768] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 293.041886][ T9764] netlink: 'syz.3.1317': attribute type 10 has an invalid length. [ 293.076919][ T9764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.133478][ T9764] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 293.228351][ T9773] netlink: 'syz.0.1318': attribute type 3 has an invalid length. [ 293.278277][ T9773] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1318'. [ 294.557819][ T9790] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1326'. [ 297.023983][ T9815] veth1_macvtap: left promiscuous mode [ 297.040009][ T9815] macsec0: entered promiscuous mode [ 297.050180][ T9815] macsec0: entered allmulticast mode [ 297.113023][ T9811] netlink: 'syz.2.1334': attribute type 21 has an invalid length. [ 297.148581][ T9811] netlink: 'syz.2.1334': attribute type 1 has an invalid length. [ 297.253643][ T9820] netlink: 'syz.1.1333': attribute type 10 has an invalid length. [ 297.296284][ T9820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.419939][ T9820] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 297.612628][ T9820] bond0: entered promiscuous mode [ 297.617791][ T9820] bond_slave_0: entered promiscuous mode [ 297.644848][ T9820] bond_slave_1: entered promiscuous mode [ 297.668929][ T9820] dummy0: entered promiscuous mode [ 297.688507][ T9820] batadv0: entered promiscuous mode [ 299.746277][ T9850] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1346'. [ 299.809111][ T9847] netlink: 'syz.0.1345': attribute type 10 has an invalid length. [ 300.047362][ T9855] netlink: 'syz.0.1345': attribute type 10 has an invalid length. [ 300.065401][ T9855] dummy0: left promiscuous mode [ 300.088873][ T9855] dummy0: left allmulticast mode [ 300.144311][ T9855] team0: Port device dummy0 removed [ 300.242736][ T9855] dummy0: entered promiscuous mode [ 300.283670][ T9855] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 300.432111][ T9853] netlink: 'syz.1.1348': attribute type 21 has an invalid length. [ 300.458612][ T9853] netlink: 'syz.1.1348': attribute type 1 has an invalid length. [ 301.219932][ T5803] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 301.569335][ T9875] hsr0: entered promiscuous mode [ 301.574374][ T9875] hsr0: entered allmulticast mode [ 301.612954][ T9875] hsr_slave_0: entered allmulticast mode [ 301.648091][ T9875] hsr_slave_1: entered allmulticast mode [ 302.555176][ T9890] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1358'. [ 303.162673][ T9901] netlink: 'syz.3.1361': attribute type 21 has an invalid length. [ 303.200736][ T9901] netlink: 'syz.3.1361': attribute type 1 has an invalid length. [ 304.959697][ T9909] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1364'. [ 305.780009][ T9924] FAULT_INJECTION: forcing a failure. [ 305.780009][ T9924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.781131][ T9924] [ 305.781137][ T9924] ====================================================== [ 305.781143][ T9924] WARNING: possible circular locking dependency detected [ 305.781163][ T9924] syzkaller #0 Not tainted [ 305.781172][ T9924] ------------------------------------------------------ [ 305.781177][ T9924] syz.0.1370/9924 is trying to acquire lock: [ 305.781186][ T9924] ffffffff8cd24160 (console_owner){-...}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 305.781237][ T9924] [ 305.781237][ T9924] but task is already holding lock: [ 305.781241][ T9924] ffff8880b8f3c218 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 305.781287][ T9924] [ 305.781287][ T9924] which lock already depends on the new lock. [ 305.781287][ T9924] [ 305.781293][ T9924] [ 305.781293][ T9924] the existing dependency chain (in reverse order) is: [ 305.781298][ T9924] [ 305.781298][ T9924] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 305.781320][ T9924] _raw_spin_lock_nested+0x32/0x50 [ 305.781339][ T9924] raw_spin_rq_lock_nested+0x2a/0x140 [ 305.781363][ T9924] task_fork_fair+0x62/0x1f0 [ 305.781378][ T9924] sched_cgroup_fork+0x333/0x3c0 [ 305.781392][ T9924] copy_process+0x21e4/0x3d70 [ 305.781409][ T9924] kernel_clone+0x21b/0x840 [ 305.781425][ T9924] user_mode_thread+0xde/0x130 [ 305.781443][ T9924] rest_init+0x27/0x300 [ 305.781459][ T9924] arch_call_rest_init+0xe/0x10 [ 305.781479][ T9924] start_kernel+0x459/0x4e0 [ 305.781497][ T9924] x86_64_start_reservations+0x2a/0x30 [ 305.781514][ T9924] copy_bootdata+0x0/0xe0 [ 305.781529][ T9924] secondary_startup_64_no_verify+0x179/0x17b [ 305.781555][ T9924] [ 305.781555][ T9924] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 305.781576][ T9924] _raw_spin_lock_irqsave+0xa8/0xf0 [ 305.781592][ T9924] try_to_wake_up+0x60/0x1140 [ 305.781617][ T9924] kick_pool+0x320/0x420 [ 305.781631][ T9924] create_worker+0x5c0/0x7b0 [ 305.781648][ T9924] workqueue_init+0x306/0x670 [ 305.781662][ T9924] kernel_init_freeable+0x3a0/0x570 [ 305.781682][ T9924] kernel_init+0x1d/0x1c0 [ 305.781697][ T9924] ret_from_fork+0x48/0x80 [ 305.781717][ T9924] ret_from_fork_asm+0x11/0x20 [ 305.781740][ T9924] [ 305.781740][ T9924] -> #3 (&pool->lock){-.-.}-{2:2}: [ 305.781762][ T9924] _raw_spin_lock+0x2e/0x40 [ 305.781777][ T9924] __queue_work+0x69f/0x1020 [ 305.781792][ T9924] queue_work_on+0x121/0x1e0 [ 305.781806][ T9924] rpm_suspend+0x10bc/0x1a90 [ 305.781823][ T9924] __pm_runtime_idle+0x12f/0x1a0 [ 305.781839][ T9924] __device_attach+0x33f/0x400 [ 305.781856][ T9924] bus_probe_device+0x180/0x260 [ 305.781870][ T9924] device_add+0x85b/0xc20 [ 305.781893][ T9924] serial_base_port_add+0x2f2/0x420 [ 305.781909][ T9924] serial_core_register_port+0x36d/0x2320 [ 305.781936][ T9924] serial8250_register_8250_port+0x15ec/0x1f10 [ 305.781956][ T9924] serial_pnp_probe+0x549/0x730 [ 305.781974][ T9924] pnp_device_probe+0x305/0x4b0 [ 305.781993][ T9924] really_probe+0x25b/0xb40 [ 305.782011][ T9924] __driver_probe_device+0x18c/0x330 [ 305.782029][ T9924] driver_probe_device+0x4f/0x420 [ 305.782049][ T9924] __driver_attach+0x44e/0x6f0 [ 305.782067][ T9924] bus_for_each_dev+0x22d/0x2a0 [ 305.782082][ T9924] bus_add_driver+0x340/0x640 [ 305.782107][ T9924] driver_register+0x23a/0x310 [ 305.782127][ T9924] serial8250_init+0x9a/0x170 [ 305.782144][ T9924] do_one_initcall+0x1fd/0x750 [ 305.782167][ T9924] do_initcall_level+0x137/0x1f0 [ 305.782186][ T9924] do_initcalls+0x69/0xd0 [ 305.782205][ T9924] kernel_init_freeable+0x3d2/0x570 [ 305.782226][ T9924] kernel_init+0x1d/0x1c0 [ 305.782242][ T9924] ret_from_fork+0x48/0x80 [ 305.782261][ T9924] ret_from_fork_asm+0x11/0x20 [ 305.782285][ T9924] [ 305.782285][ T9924] -> #2 (&dev->power.lock){-.-.}-{2:2}: [ 305.782309][ T9924] _raw_spin_lock_irqsave+0xa8/0xf0 [ 305.782326][ T9924] __pm_runtime_resume+0x10f/0x170 [ 305.782342][ T9924] __uart_start+0x171/0x3e0 [ 305.782368][ T9924] uart_write+0x449/0x5d0 [ 305.782394][ T9924] n_tty_write+0xd27/0x11d0 [ 305.782417][ T9924] file_tty_write+0x54b/0x980 [ 305.782436][ T9924] vfs_write+0x43b/0x940 [ 305.782457][ T9924] ksys_write+0x147/0x250 [ 305.782477][ T9924] do_syscall_64+0x55/0xb0 [ 305.782498][ T9924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.782516][ T9924] [ 305.782516][ T9924] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 305.782538][ T9924] _raw_spin_lock_irqsave+0xa8/0xf0 [ 305.782554][ T9924] serial8250_console_write+0x16d/0x17a0 [ 305.782577][ T9924] console_flush_all+0x6cd/0xd00 [ 305.782597][ T9924] console_unlock+0xae/0x340 [ 305.782615][ T9924] vprintk_emit+0x477/0x600 [ 305.782634][ T9924] _printk+0xd0/0x110 [ 305.782649][ T9924] register_console+0x91b/0xe60 [ 305.782669][ T9924] univ8250_console_init+0x45/0x50 [ 305.782686][ T9924] console_init+0x17b/0x5e0 [ 305.782704][ T9924] start_kernel+0x2c0/0x4e0 [ 305.782722][ T9924] x86_64_start_reservations+0x2a/0x30 [ 305.782739][ T9924] copy_bootdata+0x0/0xe0 [ 305.782754][ T9924] secondary_startup_64_no_verify+0x179/0x17b [ 305.782777][ T9924] [ 305.782777][ T9924] -> #0 (console_owner){-...}-{0:0}: [ 305.782799][ T9924] __lock_acquire+0x2ddb/0x7c80 [ 305.782816][ T9924] lock_acquire+0x197/0x410 [ 305.782833][ T9924] console_flush_all+0x693/0xd00 [ 305.782852][ T9924] console_unlock+0xae/0x340 [ 305.782871][ T9924] vprintk_emit+0x477/0x600 [ 305.782888][ T9924] _printk+0xd0/0x110 [ 305.782903][ T9924] should_fail_ex+0x37e/0x4d0 [ 305.782925][ T9924] strncpy_from_user+0x36/0x2e0 [ 305.782939][ T9924] strncpy_from_user_nofault+0x71/0x140 [ 305.782962][ T9924] bpf_bprintf_prepare+0xb9b/0x1400 [ 305.782983][ T9924] bpf_trace_printk+0xdc/0x190 [ 305.783009][ T9924] bpf_prog_7c77c7e0f6645ad8+0x3d/0x3f [ 305.783025][ T9924] bpf_trace_run2+0x1d1/0x3c0 [ 305.783042][ T9924] __bpf_trace_contention_begin+0xdd/0x130 [ 305.783069][ T9924] trace_contention_begin+0xe9/0x110 [ 305.783097][ T9924] __pv_queued_spin_lock_slowpath+0xe0/0x9d0 [ 305.783117][ T9924] do_raw_spin_lock+0x24e/0x2c0 [ 305.783138][ T9924] raw_spin_rq_lock_nested+0x2a/0x140 [ 305.783161][ T9924] __schedule+0x2dd/0x44d0 [ 305.783183][ T9924] preempt_schedule_common+0x82/0xc0 [ 305.783204][ T9924] preempt_schedule+0xab/0xc0 [ 305.783226][ T9924] preempt_schedule_thunk+0x1a/0x30 [ 305.783250][ T9924] __local_bh_enable_ip+0x13f/0x1c0 [ 305.783266][ T9924] bpf_test_run+0x3c5/0x810 [ 305.783292][ T9924] bpf_prog_test_run_skb+0xa67/0x11c0 [ 305.783319][ T9924] bpf_prog_test_run+0x321/0x390 [ 305.783337][ T9924] __sys_bpf+0x440/0x800 [ 305.783353][ T9924] __x64_sys_bpf+0x7c/0x90 [ 305.783367][ T9924] do_syscall_64+0x55/0xb0 [ 305.783387][ T9924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.783404][ T9924] [ 305.783404][ T9924] other info that might help us debug this: [ 305.783404][ T9924] [ 305.783410][ T9924] Chain exists of: [ 305.783410][ T9924] console_owner --> &p->pi_lock --> &rq->__lock [ 305.783410][ T9924] [ 305.783436][ T9924] Possible unsafe locking scenario: [ 305.783436][ T9924] [ 305.783441][ T9924] CPU0 CPU1 [ 305.783445][ T9924] ---- ---- [ 305.783450][ T9924] lock(&rq->__lock); [ 305.783460][ T9924] lock(&p->pi_lock); [ 305.783471][ T9924] lock(&rq->__lock); [ 305.783482][ T9924] lock(console_owner); [ 305.783492][ T9924] [ 305.783492][ T9924] *** DEADLOCK *** [ 305.783492][ T9924] [ 305.783497][ T9924] 5 locks held by syz.0.1370/9924: [ 305.783507][ T9924] #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: bpf_test_timer_enter+0x1a/0x140 [ 305.783547][ T9924] #1: ffff8880b8f3c218 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 305.783595][ T9924] #2: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0xde/0x3c0 [ 305.783634][ T9924] #3: ffffffff8cd24240 (console_lock){+.+.}-{0:0}, at: _printk+0xd0/0x110 [ 305.783672][ T9924] #4: ffffffff8cc0ba50 (console_srcu){....}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 305.783717][ T9924] [ 305.783717][ T9924] stack backtrace: [ 305.783722][ T9924] CPU: 1 PID: 9924 Comm: syz.0.1370 Not tainted syzkaller #0 [ 305.783744][ T9924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.783763][ T9924] Call Trace: [ 305.783770][ T9924] [ 305.783777][ T9924] dump_stack_lvl+0x16c/0x230 [ 305.783803][ T9924] ? load_image+0x3b0/0x3b0 [ 305.783822][ T9924] ? show_regs_print_info+0x20/0x20 [ 305.783850][ T9924] ? print_circular_bug+0x12b/0x1a0 [ 305.783874][ T9924] check_noncircular+0x2bd/0x3c0 [ 305.783899][ T9924] ? print_deadlock_bug+0x5d0/0x5d0 [ 305.783920][ T9924] ? lockdep_lock+0xe0/0x220 [ 305.783945][ T9924] __lock_acquire+0x2ddb/0x7c80 [ 305.783979][ T9924] ? verify_lock_unused+0x140/0x140 [ 305.784014][ T9924] lock_acquire+0x197/0x410 [ 305.784034][ T9924] ? console_flush_all+0x10f/0xd00 [ 305.784061][ T9924] ? __lock_acquire+0x7c80/0x7c80 [ 305.784080][ T9924] ? do_raw_spin_lock+0x121/0x2c0 [ 305.784111][ T9924] ? read_lock_is_recursive+0x20/0x20 [ 305.784133][ T9924] ? __rwlock_init+0x150/0x150 [ 305.784156][ T9924] ? do_raw_spin_unlock+0x121/0x230 [ 305.784181][ T9924] console_flush_all+0x693/0xd00 [ 305.784202][ T9924] ? console_flush_all+0x10f/0xd00 [ 305.784226][ T9924] ? console_flush_all+0x10f/0xd00 [ 305.784254][ T9924] ? is_console_locked+0x20/0x20 [ 305.784282][ T9924] console_unlock+0xae/0x340 [ 305.784305][ T9924] ? other_cpu_in_panic+0xf0/0xf0 [ 305.784331][ T9924] ? ktime_get+0x7f/0x280 [ 305.784355][ T9924] vprintk_emit+0x477/0x600 [ 305.784378][ T9924] ? printk_sprint+0x460/0x460 [ 305.784401][ T9924] ? perf_event_update_userpage+0x34/0x6d0 [ 305.784421][ T9924] ? __lock_acquire+0x7c80/0x7c80 [ 305.784447][ T9924] _printk+0xd0/0x110 [ 305.784464][ T9924] ? perf_event_update_userpage+0x34/0x6d0 [ 305.784486][ T9924] ? load_image+0x3b0/0x3b0 [ 305.784504][ T9924] ? mark_lock+0x94/0x320 [ 305.784525][ T9924] ? __lock_acquire+0x1260/0x7c80 [ 305.784547][ T9924] should_fail_ex+0x37e/0x4d0 [ 305.784574][ T9924] strncpy_from_user+0x36/0x2e0 [ 305.784594][ T9924] strncpy_from_user_nofault+0x71/0x140 [ 305.784621][ T9924] bpf_bprintf_prepare+0xb9b/0x1400 [ 305.784643][ T9924] ? verify_lock_unused+0x140/0x140 [ 305.784669][ T9924] ? bpf_bprintf_cleanup+0xc0/0xc0 [ 305.784695][ T9924] ? bpf_trace_printk+0xc2/0x190 [ 305.784727][ T9924] bpf_trace_printk+0xdc/0x190 [ 305.784757][ T9924] ? bpf_probe_write_user+0xe0/0xe0 [ 305.784792][ T9924] ? mark_lock+0x94/0x320 [ 305.784815][ T9924] bpf_prog_7c77c7e0f6645ad8+0x3d/0x3f [ 305.784835][ T9924] bpf_trace_run2+0x1d1/0x3c0 [ 305.784853][ T9924] ? bpf_trace_run2+0xde/0x3c0 [ 305.784871][ T9924] ? bpf_trace_run1+0x3b0/0x3b0 [ 305.784891][ T9924] ? __bpf_trace_contention_begin+0xce/0x130 [ 305.784924][ T9924] __bpf_trace_contention_begin+0xdd/0x130 [ 305.784953][ T9924] ? __bpf_trace_lock+0x140/0x140 [ 305.784980][ T9924] ? verify_lock_unused+0x140/0x140 [ 305.785001][ T9924] ? perf_trace_preemptirq_template+0xa4/0x340 [ 305.785029][ T9924] ? irqentry_enter+0x3b/0x50 [ 305.785062][ T9924] trace_contention_begin+0xe9/0x110 [ 305.785094][ T9924] __pv_queued_spin_lock_slowpath+0xe0/0x9d0 [ 305.785121][ T9924] ? __pv_queued_spin_unlock_slowpath+0x2a0/0x2a0 [ 305.785148][ T9924] do_raw_spin_lock+0x24e/0x2c0 [ 305.785172][ T9924] ? __schedule+0x2c5/0x44d0 [ 305.785197][ T9924] ? __rwlock_init+0x150/0x150 [ 305.785226][ T9924] raw_spin_rq_lock_nested+0x2a/0x140 [ 305.785256][ T9924] __schedule+0x2dd/0x44d0 [ 305.785278][ T9924] ? irqentry_enter+0x3b/0x50 [ 305.785307][ T9924] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 305.785330][ T9924] ? perf_trace_preemptirq_template+0xa4/0x340 [ 305.785357][ T9924] ? preempt_schedule_irq+0xd4/0x140 [ 305.785383][ T9924] ? trace_event_raw_event_preemptirq_template+0x1e0/0x1e0 [ 305.785411][ T9924] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 305.785433][ T9924] ? asan.module_dtor+0x20/0x20 [ 305.785462][ T9924] ? trace_irq_disable+0x37/0xe0 [ 305.785490][ T9924] ? lock_chain_count+0x20/0x20 [ 305.785508][ T9924] ? preempt_schedule+0xab/0xc0 [ 305.785544][ T9924] ? bpf_test_run+0x15c/0x810 [ 305.785573][ T9924] preempt_schedule_common+0x82/0xc0 [ 305.785598][ T9924] preempt_schedule+0xab/0xc0 [ 305.785623][ T9924] ? schedule_preempt_disabled+0x20/0x20 [ 305.785648][ T9924] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 305.785670][ T9924] ? bpf_test_run+0x15c/0x810 [ 305.785699][ T9924] preempt_schedule_thunk+0x1a/0x30 [ 305.785731][ T9924] __local_bh_enable_ip+0x13f/0x1c0 [ 305.785749][ T9924] ? _local_bh_enable+0xa0/0xa0 [ 305.785765][ T9924] ? bpf_snprintf+0x15b/0x1a0 [ 305.785790][ T9924] ? bpf_test_run+0x15c/0x810 [ 305.785835][ T9924] bpf_test_run+0x3c5/0x810 [ 305.785872][ T9924] ? bpf_test_run+0x15c/0x810 [ 305.785903][ T9924] ? convert___skb_to_skb+0x590/0x590 [ 305.785936][ T9924] ? eth_get_headlen+0x200/0x200 [ 305.785965][ T9924] ? slab_build_skb+0x25f/0x3f0 [ 305.785991][ T9924] ? convert___skb_to_skb+0x3d/0x590 [ 305.786023][ T9924] bpf_prog_test_run_skb+0xa67/0x11c0 [ 305.786063][ T9924] ? cpu_online+0x60/0x60 [ 305.786098][ T9924] bpf_prog_test_run+0x321/0x390 [ 305.786120][ T9924] __sys_bpf+0x440/0x800 [ 305.786140][ T9924] ? bpf_link_show_fdinfo+0x350/0x350 [ 305.786169][ T9924] ? lock_chain_count+0x20/0x20 [ 305.786194][ T9924] __x64_sys_bpf+0x7c/0x90 [ 305.786213][ T9924] do_syscall_64+0x55/0xb0 [ 305.786235][ T9924] ? clear_bhb_loop+0x40/0x90 [ 305.786254][ T9924] ? clear_bhb_loop+0x40/0x90 [ 305.786274][ T9924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.786293][ T9924] RIP: 0033:0x7f29b918eec9 [ 305.786309][ T9924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.786326][ T9924] RSP: 002b:00007f29ba080038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.786346][ T9924] RAX: ffffffffffffffda RBX: 00007f29b93e5fa0 RCX: 00007f29b918eec9 [ 305.786360][ T9924] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 305.786372][ T9924] RBP: 00007f29ba080090 R08: 0000000000000000 R09: 0000000000000000 [ 305.786383][ T9924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.786394][ T9924] R13: 00007f29b93e6038 R14: 00007f29b93e5fa0 R15: 00007ffe818dd898 [ 305.786416][ T9924] [ 307.198137][ T9924] CPU: 1 PID: 9924 Comm: syz.0.1370 Not tainted syzkaller #0 [ 307.205527][ T9924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 307.215591][ T9924] Call Trace: [ 307.218885][ T9924] [ 307.221831][ T9924] dump_stack_lvl+0x16c/0x230 [ 307.226529][ T9924] ? perf_event_update_userpage+0x34/0x6d0 [ 307.232352][ T9924] ? show_regs_print_info+0x20/0x20 [ 307.237586][ T9924] ? load_image+0x3b0/0x3b0 [ 307.242101][ T9924] ? mark_lock+0x94/0x320 [ 307.246448][ T9924] ? __lock_acquire+0x1260/0x7c80 [ 307.251491][ T9924] should_fail_ex+0x39d/0x4d0 [ 307.256185][ T9924] strncpy_from_user+0x36/0x2e0 [ 307.261047][ T9924] strncpy_from_user_nofault+0x71/0x140 [ 307.266626][ T9924] bpf_bprintf_prepare+0xb9b/0x1400 [ 307.271833][ T9924] ? verify_lock_unused+0x140/0x140 [ 307.277045][ T9924] ? bpf_bprintf_cleanup+0xc0/0xc0 [ 307.282189][ T9924] ? bpf_trace_printk+0xc2/0x190 [ 307.287144][ T9924] bpf_trace_printk+0xdc/0x190 [ 307.291947][ T9924] ? bpf_probe_write_user+0xe0/0xe0 [ 307.297166][ T9924] ? mark_lock+0x94/0x320 [ 307.301504][ T9924] bpf_prog_7c77c7e0f6645ad8+0x3d/0x3f [ 307.306971][ T9924] bpf_trace_run2+0x1d1/0x3c0 [ 307.311654][ T9924] ? bpf_trace_run2+0xde/0x3c0 [ 307.316420][ T9924] ? bpf_trace_run1+0x3b0/0x3b0 [ 307.321276][ T9924] ? __bpf_trace_contention_begin+0xce/0x130 [ 307.327272][ T9924] __bpf_trace_contention_begin+0xdd/0x130 [ 307.333095][ T9924] ? __bpf_trace_lock+0x140/0x140 [ 307.338133][ T9924] ? verify_lock_unused+0x140/0x140 [ 307.343359][ T9924] ? perf_trace_preemptirq_template+0xa4/0x340 [ 307.349532][ T9924] ? irqentry_enter+0x3b/0x50 [ 307.354228][ T9924] trace_contention_begin+0xe9/0x110 [ 307.359527][ T9924] __pv_queued_spin_lock_slowpath+0xe0/0x9d0 [ 307.365534][ T9924] ? __pv_queued_spin_unlock_slowpath+0x2a0/0x2a0 [ 307.371977][ T9924] do_raw_spin_lock+0x24e/0x2c0 [ 307.376837][ T9924] ? __schedule+0x2c5/0x44d0 [ 307.381440][ T9924] ? __rwlock_init+0x150/0x150 [ 307.386221][ T9924] raw_spin_rq_lock_nested+0x2a/0x140 [ 307.391610][ T9924] __schedule+0x2dd/0x44d0 [ 307.396041][ T9924] ? irqentry_enter+0x3b/0x50 [ 307.400737][ T9924] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 307.406733][ T9924] ? perf_trace_preemptirq_template+0xa4/0x340 [ 307.412902][ T9924] ? preempt_schedule_irq+0xd4/0x140 [ 307.418209][ T9924] ? trace_event_raw_event_preemptirq_template+0x1e0/0x1e0 [ 307.425418][ T9924] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 307.431405][ T9924] ? asan.module_dtor+0x20/0x20 [ 307.436270][ T9924] ? trace_irq_disable+0x37/0xe0 [ 307.441226][ T9924] ? lock_chain_count+0x20/0x20 [ 307.446087][ T9924] ? preempt_schedule+0xab/0xc0 [ 307.450947][ T9924] ? bpf_test_run+0x15c/0x810 [ 307.455646][ T9924] preempt_schedule_common+0x82/0xc0 [ 307.460946][ T9924] preempt_schedule+0xab/0xc0 [ 307.465633][ T9924] ? schedule_preempt_disabled+0x20/0x20 [ 307.471309][ T9924] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 307.477476][ T9924] ? bpf_test_run+0x15c/0x810 [ 307.482180][ T9924] preempt_schedule_thunk+0x1a/0x30 [ 307.487399][ T9924] __local_bh_enable_ip+0x13f/0x1c0 [ 307.492610][ T9924] ? _local_bh_enable+0xa0/0xa0 [ 307.497470][ T9924] ? bpf_snprintf+0x15b/0x1a0 [ 307.502160][ T9924] ? bpf_test_run+0x15c/0x810 [ 307.506857][ T9924] bpf_test_run+0x3c5/0x810 [ 307.511386][ T9924] ? bpf_test_run+0x15c/0x810 [ 307.516082][ T9924] ? convert___skb_to_skb+0x590/0x590 [ 307.521474][ T9924] ? eth_get_headlen+0x200/0x200 [ 307.526427][ T9924] ? slab_build_skb+0x25f/0x3f0 [ 307.531292][ T9924] ? convert___skb_to_skb+0x3d/0x590 [ 307.536594][ T9924] bpf_prog_test_run_skb+0xa67/0x11c0 [ 307.541991][ T9924] ? cpu_online+0x60/0x60 [ 307.546337][ T9924] bpf_prog_test_run+0x321/0x390 [ 307.551286][ T9924] __sys_bpf+0x440/0x800 [ 307.555543][ T9924] ? bpf_link_show_fdinfo+0x350/0x350 [ 307.560951][ T9924] ? lock_chain_count+0x20/0x20 [ 307.565816][ T9924] __x64_sys_bpf+0x7c/0x90 [ 307.570237][ T9924] do_syscall_64+0x55/0xb0 [ 307.574665][ T9924] ? clear_bhb_loop+0x40/0x90 [ 307.579355][ T9924] ? clear_bhb_loop+0x40/0x90 [ 307.584037][ T9924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.589939][ T9924] RIP: 0033:0x7f29b918eec9 [ 307.594360][ T9924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.613976][ T9924] RSP: 002b:00007f29ba080038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 307.622408][ T9924] RAX: ffffffffffffffda RBX: 00007f29b93e5fa0 RCX: 00007f29b918eec9 [ 307.630384][ T9924] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 307.638368][ T9924] RBP: 00007f29ba080090 R08: 0000000000000000 R09: 0000000000000000 [ 307.646356][ T9924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.654348][ T9924] R13: 00007f29b93e6038 R14: 00007f29b93e5fa0 R15: 00007ffe818dd898 [ 307.662339][ T9924]