last executing test programs: 5.098158693s ago: executing program 1 (id=1615): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x804, 0x0, 0x0, 0x0, 0xfffffffffffeffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1f, 0x800, 0x5, &(0x7f0000000400)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000380), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x5) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) syz_clone(0x8004000, &(0x7f00000004c0)="22eb2333ffb3ae91480e4db99bb3bf1e3f0007861633937c7127be797758e214a9887d2e96673c6e805c95e5c2646db93d959ed2105b9799bd282a8765b1bcba1247a28b326b9867f92519d0b8cc6f860c9841a9123e004e6c0d3ababa5895f2734db7eadf374514cf26731e238f2a6e07e76fe991bbf5d8e00767ab7bf1cc82d83643d3570481509ac125bab75827bf64cb", 0x92, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 3.94136331s ago: executing program 1 (id=1614): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, @perf_config_ext={0xfffffffffffffffc}, 0x101000, 0x7, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40010220) socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c084002200600053582c137153e", 0x23}], 0x1}, 0x0) r1 = socket$kcm(0x2c, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x3, &(0x7f0000000040)=r2, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000800)=':\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x73, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf000000000000ff7f000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf29000000000000550901000000000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000040)=""/212}, 0x25) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1, '\x00', r4, r6, 0x1, 0x0, 0x3}, 0x50) r7 = socket$kcm(0x2, 0x3, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r9, 0x4, 0x1, 0x4, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0xb, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r11, r8, 0x17, 0x28, 0x0, @void, @void, @void, @value=r12, r10}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@cgroup=r2, r3, 0x22, 0x2, r2, @void, @value=r3, @void, @void, r10}, 0x20) sendmsg$inet(r7, &(0x7f0000003a80)={&(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x6f, 0x0, 0x2, [0x10]}]}}}], 0x38}, 0x4008804) sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000640)="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", 0x125}, {&(0x7f0000001440)="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", 0x488}], 0x2}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@ifindex=r4, 0x37, 0x1, 0x3, &(0x7f0000000540)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@map=r2, r2, 0x35, 0x18, 0x0, @void, @value=r2, @void, @void, r13}, 0x20) 3.799729169s ago: executing program 3 (id=1616): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x14, r0, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004", 0x23}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000040)="b9ff03076844268cff9e14f088a847e0ffff00124000632177fbac141416e000030a", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xfc00) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x11, r1}}, @exit], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x6, 0x5, 0x5, 0x0, 0x0, 0x2520d, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0xf, 0x9, 0x8, 0x4, 0x4, 0x323d, 0x0, 0x2, 0x0, 0x8}, r4, 0x1, r0, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 3.387333303s ago: executing program 1 (id=1619): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x14, r0, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004", 0x23}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300006d0033"], 0xfe33) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xfc00) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x11, r1}}, @exit], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x6, 0x5, 0x5, 0x0, 0x0, 0x2520d, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0xf, 0x9, 0x8, 0x4, 0x4, 0x323d, 0x0, 0x2, 0x0, 0x8}, r5, 0x1, r0, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 3.196444174s ago: executing program 3 (id=1621): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x1, @ANYBLOB="a8dd00"/20, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="02000000040000000200"/21], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x31, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x2d, 'rdma'}, {0x2d, 'memory'}]}, 0xe) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305828, &(0x7f0000000040)=0x20000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', r2, @fallback=0x1b, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0600"/20, @ANYBLOB="30d747289c204f1394b80b1f7dde3146596caf4bfe9de5ccc882914ede764fe50b3895b1f31fed4ab655c4797e52ddca3848d8ea1a28ebb61d2ce3b6f8fe5d64e33ba34f84d44ce9d792b2b8c47e22bebc408b5bc9faae3a6de29f449699e4772369a55c5a9734d19d79adbfa9c578176621402fc2e7e9dbc74da6406a14e63d4a7f16c4f3e192f31326d2602a1eacbf852eb3228984c189111d934aae100610b4609a5646a2d3fba63d2c0f1efba3bda98b8bd19c84", @ANYRES32, @ANYRES64=r2, @ANYRES32=r3, @ANYBLOB="6245a3e9492c64c249df3864fbc7c136461bc426cf2209152582c3c9b71aa85c641925"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r9, &(0x7f0000000140), 0x12) 3.018707044s ago: executing program 4 (id=1622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x8, &(0x7f0000000540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x8f54}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0xfffffffc, @loopback={0xfe80000000000000}, 0x4}, 0x80, 0x0}, 0x20008810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.981641057s ago: executing program 0 (id=1623): r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000033bf41f16b876c3a197c6f6141dba1954d88611b7b3c6e69e43eb5a8af6c4269189492526b37d4c772b16f483ef42c070000000000000007f3a39a5267f579bd5f6a1a80b7739a07ec8e52678ef8374c50a376df98a01207095520848a"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x70) r3 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x112c0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r3, r2}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 2.760450949s ago: executing program 4 (id=1625): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000079fbc0000000000062000000000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000012c0)={0x2}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x24000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x7000000, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 2.759314799s ago: executing program 1 (id=1626): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b633"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) 2.58391478s ago: executing program 3 (id=1627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1ff}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000440)=r1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xc0}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x6, 0x0, 0xb27, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000340)="eb2603e208127aaf9292cea8f644bfa4d0c281170576799fd009eb47630d28101561141fdddd1f0548e1e116033095390e1b97d6de4ed906a934d10868deb11657ce445139ec58d83ef1dba59e993c06d3b0b234759a362bfb4ecc4854f886710b0292725f8394c358b0af446d79088b2405944aaa45730b2085326e5b29f9c7f77ae4d4238c1c85624bfbe514b988262eb313083902ae0270719a7b93708717ee6ca0adea8e0f0cb48f77eedd6d5ff5af9fe243cf6654a2561919474a2a26d083f0eb25d060827baca76d48e39d97642cc78695f8ecc9679720addfae89a2156255c9082626de3af9a568857ef9db37da28a8487438", &(0x7f0000000100)=""/113, 0x4}, 0x20) 2.448782037s ago: executing program 2 (id=1628): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f00000003c0)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x14, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xffffffffffffff1c}, 0x70) 2.435094468s ago: executing program 0 (id=1629): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x9, 0x10000000}, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x1e1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) close(r0) perf_event_open(&(0x7f0000000240)={0x8, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x7e674f9da07d633b}, 0x0, 0xa0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x18, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)='g', 0x1}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x1f}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x43451) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f00000003c0)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x14, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xffffffffffffff1c}, 0x70) 2.295969337s ago: executing program 4 (id=1630): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f00000000c0)=""/130}, 0x20) (fail_nth: 3) 2.245477259s ago: executing program 2 (id=1631): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a", 0x23}], 0x1}, 0x400c084) 1.917382769s ago: executing program 1 (id=1632): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x6, 0x12) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x47}, 0x80, 0x0}, 0x0) 1.868509961s ago: executing program 2 (id=1633): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000}, 0x48) r2 = socket$kcm(0x2, 0x3, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x7ff, 0x80000000, 0x9, 0x10, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x3}, 0x50) (async) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f00000000c0), 0x4) (async) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40001) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305829, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r5, 0x10e, 0xf, &(0x7f0000000540), 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) (async) sendmsg$inet(r2, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0xebff, @dev}, 0x10, 0x0}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007d9af8ff00000000b5080000000000007baaf0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001501000076000000bf91000000000000b5020000000000002800000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r9 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r9, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x18, "e5861f51728a09b5fd1458a74a096c4e1e1d5555d1faf1c84a38f9ed0432a7cd2237dc07c732cf2af327cb651c2406b45b92ebfbc9fc5484ac6491e0be73483ca11344707318ae388722097cd903010684d82f750e233cd4a194de81b438bcc046d17c4d0dd23bfb949c213dcfbfdf86c490dfe235de126ededbfc9bca01"}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="8d79ff2c4dc0537d9fa63a484a6afdb61d83b3e97875924d582e0cbc134615a4380af2d0b5db26138a05c29079c21fe1c4741d5dd3b1793151eb", 0x3a}, {&(0x7f0000000180)="a272c447aff76ea4ab15d2a5f4b6acfe04f092d72a27d7fb94ec47f43000c0dd40", 0x21}], 0x2}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.815907554s ago: executing program 4 (id=1634): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x804, 0x0, 0x0, 0x0, 0xfffffffffffeffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1f, 0x800, 0x5, &(0x7f0000000400)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000380), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x5) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002500070002000600", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) syz_clone(0x8004000, &(0x7f00000004c0)="22eb2333ffb3ae91480e4db99bb3bf1e3f0007861633937c7127be797758e214a9887d2e96673c6e805c95e5c2646db93d959ed2105b9799bd282a8765b1bcba1247a28b326b9867f92519d0b8cc6f860c9841a9123e004e6c0d3ababa5895f2734db7eadf374514cf26731e238f2a6e07e76fe991bbf5d8e00767ab7bf1cc82d83643d3570481509ac125bab75827bf64cb", 0x92, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 1.763905967s ago: executing program 0 (id=1635): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.606630517s ago: executing program 2 (id=1636): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a8f27e02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d988c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438a58c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c38680a377f8c26e6e382067f690089f34b13ee0633a171c7918401acd4575f1443815854f775308c083ff4f4046cfca8bca48e6db6b211113c06797722230af92290231a0f02e247cf96876257dac9ff0b8f07ff5916a8ccd3f15b389d34520f074c6f006e0383280bf0b9765c995ef1e696a1da41d9372a1c9d85f1a83b6213b5fb236fbeda8fb90dee70ca3cfc0833741a0e9341ab4dee09669b832840fef5a2bbebd5957503656c445a428efc5711d1c66093b360c63e63e91cb871f8dc43a915ec87be492daec18847de7032d5c97d0296a1fa97d17f"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1a}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r3, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b80)=""/188, 0xbc}], 0x1}, 0x3) r5 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4, 0x1, 0x4, 0x0, 0x0, 0x2, 0x40, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x7, 0x9}, 0x8100, 0x7, 0x5, 0x3, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400}, 0x0, 0xf, r1, 0x8) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f0000000040)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="00000000030000000300"/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x4, 0x0, r6, 0x81, '\x00', r8, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.403441698s ago: executing program 3 (id=1637): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x14, r0, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004", 0x23}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300006d0033"], 0xfe33) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xfc00) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x11, r1}}, @exit], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x6, 0x5, 0x5, 0x0, 0x0, 0x2520d, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0xf, 0x9, 0x8, 0x4, 0x4, 0x323d, 0x0, 0x2, 0x0, 0x8}, r5, 0x1, r0, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 1.402418088s ago: executing program 0 (id=1647): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) 1.324356193s ago: executing program 1 (id=1638): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0xb8}, 0x0) socketpair(0x25, 0x4, 0x1, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.237587988s ago: executing program 2 (id=1639): r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000640), 0x4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x70) r3 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x112c0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r3, r2}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1.111395896s ago: executing program 0 (id=1640): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000079fbc0000000000062000000000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000012c0)={0x2}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x24000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x7000000, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 913.996397ms ago: executing program 2 (id=1641): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e", 0x19}], 0x1}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x78, &(0x7f0000000040), 0x4) close(r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000000800)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfc}, {&(0x7f0000000300)="9cc2bb35b2341c132d041fb56862c9d02be94516181b9d8227c82d68d6c40fb98c1699f83467c75546ecbe854679c4ad638cd1f0deb420a76b6c03b789d6bae8b4bc9cbe76e028e270bb7da52fc29d72f0f56b4e8fd055596fa72e51a1080f7c410e8a22ca8c7a4982d46a8d8ffb8e7ca213a7efc48b1cf84918a5945d094c1fe8200e31e466cb31008bd3aea104a316744a3a910c1e54c67a220531a38a29816b3fc80614134608b0ed34e16ba643e6dfa66dfce5bb2867e9af670931028b16d22c41dfc33d148d7deb4afa271db9762a4632a2fb74a0ad", 0xd8}, {&(0x7f0000000500)="9825409476a6e1038ea4257e85d3c855b70c36a11b711c59ac36d2f84966420710be97fc013f78b8cc4d00523cd8ee9789f9ffc292d13e6337ede45a64269b0c09850ace5504b853db864f7d1f79bd070c71036f9f57fed06d295b285dd5bf74697013394043addcad4d10c8868c7e4294e59b878b832f5808d1dcc823ac317788bbe3d9999bce31c2d71fde41d7cc08d831b76f71dc641db351f24bdf8d1c3d5e647564162dc7ae2f810fd63ed2edd2dc81856082d1e47f2c7fd1a7f3a6b6bf9f74b84bd0519159d1463771a91cd935367120ebdc472e35e2b2c1", 0xdb}], 0x3, &(0x7f0000000600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfa71ddb0}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0xc8}, 0x4004041) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20004011) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wg2\x00', @remote}) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d8000000210081044e810382db44b9040a00000000fe0500002015000600142603600e1209000d00800000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) 851.198691ms ago: executing program 3 (id=1642): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) 715.357479ms ago: executing program 4 (id=1643): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x400c084) 492.328042ms ago: executing program 3 (id=1644): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0xb8}, 0x0) socketpair(0x25, 0x4, 0x1, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 408.123967ms ago: executing program 0 (id=1645): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) (fail_nth: 3) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) 0s ago: executing program 4 (id=1646): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 3) kernel console output (not intermixed with test programs): 04863][ T6124] bpf_prog_alloc+0x1a/0x1e0 [ 451.309504][ T6124] bpf_prog_load+0x7c6/0x1510 [ 451.314238][ T6124] ? map_freeze+0x350/0x350 [ 451.318777][ T6124] ? __might_fault+0xb7/0x110 [ 451.323536][ T6124] ? __might_fault+0xb3/0x110 [ 451.328259][ T6124] ? bpf_lsm_bpf+0x5/0x10 [ 451.332627][ T6124] ? security_bpf+0x7a/0xa0 [ 451.337192][ T6124] __sys_bpf+0x532/0x6f0 [ 451.341487][ T6124] ? bpf_link_show_fdinfo+0x380/0x380 [ 451.346919][ T6124] ? vtime_user_exit+0x2c8/0x3e0 [ 451.351902][ T6124] __x64_sys_bpf+0x78/0x90 [ 451.356355][ T6124] do_syscall_64+0x4c/0xa0 [ 451.360810][ T6124] ? clear_bhb_loop+0x30/0x80 [ 451.365553][ T6124] ? clear_bhb_loop+0x30/0x80 [ 451.370291][ T6124] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 451.376236][ T6124] RIP: 0033:0x7f42b6b2ceb9 [ 451.380688][ T6124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.400322][ T6124] RSP: 002b:00007f42b4d88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 451.408762][ T6124] RAX: ffffffffffffffda RBX: 00007f42b6da7fa0 RCX: 00007f42b6b2ceb9 [ 451.416755][ T6124] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 451.424760][ T6124] RBP: 00007f42b4d88090 R08: 0000000000000000 R09: 0000000000000000 [ 451.432753][ T6124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.440831][ T6124] R13: 00007f42b6da8038 R14: 00007f42b6da7fa0 R15: 00007ffd3d41fc68 [ 451.448837][ T6124] [ 451.576797][ T6140] netlink: 'syz.2.641': attribute type 8 has an invalid length. [ 451.594998][ T6140] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.641'. [ 451.814237][ T6124] Mem-Info: [ 451.817447][ T6124] active_anon:274 inactive_anon:14709 isolated_anon:0 [ 451.817447][ T6124] active_file:23167 inactive_file:38051 isolated_file:0 [ 451.817447][ T6124] unevictable:768 dirty:428 writeback:0 [ 451.817447][ T6124] slab_reclaimable:20231 slab_unreclaimable:93834 [ 451.817447][ T6124] mapped:32512 shmem:10681 pagetables:652 bounce:0 [ 451.817447][ T6124] kernel_misc_reclaimable:0 [ 451.817447][ T6124] free:1364200 free_pcp:11168 free_cma:0 [ 452.365439][ T6124] Node 0 active_anon:1064kB inactive_anon:45928kB active_file:92468kB inactive_file:152204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137548kB dirty:1712kB writeback:0kB shmem:28548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11300kB pagetables:2408kB all_unreclaimable? no [ 452.458551][ T6124] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 452.549065][ T6124] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 452.594078][ T6124] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 452.600080][ T6124] Node 0 DMA32 free:1531852kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1064kB inactive_anon:46028kB active_file:92468kB inactive_file:152204kB unevictable:1536kB writepending:1712kB present:3129332kB managed:2606560kB mlocked:0kB bounce:0kB free_pcp:39504kB local_pcp:19668kB free_cma:0kB [ 452.674319][ T6124] lowmem_reserve[]: 0 0 0 0 0 [ 452.679129][ T6124] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 452.744014][ T6124] lowmem_reserve[]: 0 0 0 0 0 [ 452.754018][ T6124] Node 1 Normal free:3924256kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:3304kB local_pcp:1000kB free_cma:0kB [ 452.823072][ T6124] lowmem_reserve[]: 0 0 0 0 0 [ 452.833372][ T6124] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 452.874056][ T6124] Node 0 DMA32: 2116*4kB (UME) 811*8kB (UM) 1260*16kB (ME) 2195*32kB (UME) 1030*64kB (UME) 462*128kB (UME) 138*256kB (UM) 38*512kB (UME) 14*1024kB (UM) 3*2048kB (UME) 299*4096kB (M) = 1530376kB [ 452.932656][ T6124] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 452.971606][ T6124] Node 1 Normal: 136*4kB (UME) 44*8kB (UE) 32*16kB (UME) 191*32kB (UME) 85*64kB (UME) 23*128kB (UE) 11*256kB (UM) 4*512kB (UE) 0*1024kB 2*2048kB (UM) 952*4096kB (M) = 3924256kB [ 453.010111][ T6124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.030445][ T6124] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 453.054066][ T6124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.081228][ T6124] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 453.111059][ T6124] 72487 total pagecache pages [ 453.121848][ T6124] 0 pages in swap cache [ 453.134339][ T6124] Swap cache stats: add 0, delete 0, find 0/0 [ 453.140750][ T6124] Free swap = 124996kB [ 453.154098][ T6124] Total swap = 124996kB [ 453.165318][ T6124] 2097051 pages RAM [ 453.169290][ T6124] 0 pages HighMem/MovableOnly [ 453.184063][ T6124] 411488 pages reserved [ 453.194296][ T6124] 0 pages cma reserved [ 454.203022][ T6157] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.647'. [ 454.390124][ T6166] netlink: 'syz.1.651': attribute type 25 has an invalid length. [ 454.566140][ T6172] netlink: 'syz.3.654': attribute type 8 has an invalid length. [ 454.629633][ T6172] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.654'. [ 455.759461][ T6200] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.663'. [ 455.852989][ T6203] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.664'. [ 457.284333][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 457.292634][ T4306] Bluetooth: hci2: command 0x0406 tx timeout [ 457.298874][ T4306] Bluetooth: hci3: command 0x0406 tx timeout [ 457.339551][ T4306] Bluetooth: hci1: command 0x0406 tx timeout [ 457.346714][ T6215] netlink: 'syz.2.667': attribute type 8 has an invalid length. [ 457.402896][ T6215] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.667'. [ 457.404278][ T4306] Bluetooth: hci4: command 0x0406 tx timeout [ 457.790049][ T6221] netlink: 'syz.1.670': attribute type 25 has an invalid length. [ 457.862237][ T9] tipc: Subscription rejected, illegal request [ 458.812535][ T6250] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.682'. [ 458.947936][ T6255] netlink: 'syz.4.681': attribute type 8 has an invalid length. [ 459.077226][ T6255] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.681'. [ 460.294946][ T6280] FAULT_INJECTION: forcing a failure. [ 460.294946][ T6280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.458453][ T6280] CPU: 0 PID: 6280 Comm: syz.3.692 Not tainted syzkaller #0 [ 460.465835][ T6280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 460.475937][ T6280] Call Trace: [ 460.479255][ T6280] [ 460.482216][ T6280] dump_stack_lvl+0x188/0x250 [ 460.486938][ T6280] ? show_regs_print_info+0x20/0x20 [ 460.492182][ T6280] ? load_image+0x400/0x400 [ 460.496726][ T6280] ? __lock_acquire+0x7d10/0x7d10 [ 460.501806][ T6280] ? __lock_acquire+0x7d10/0x7d10 [ 460.506974][ T6280] ? perf_trace_lock_acquire+0xed/0x3e0 [ 460.512581][ T6280] should_fail+0x38c/0x4c0 [ 460.517041][ T6280] _copy_from_user+0x2e/0x170 [ 460.521761][ T6280] ____sys_sendmsg+0x30a/0x8f0 [ 460.526586][ T6280] ? __sys_sendmsg_sock+0x30/0x30 [ 460.531658][ T6280] ? import_iovec+0x6f/0xa0 [ 460.536217][ T6280] ___sys_sendmsg+0x236/0x2e0 [ 460.540942][ T6280] ? __sys_sendmsg+0x2a0/0x2a0 [ 460.545796][ T6280] __se_sys_sendmsg+0x1af/0x290 [ 460.550689][ T6280] ? __x64_sys_sendmsg+0x80/0x80 [ 460.555704][ T6280] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 460.561754][ T6280] ? lockdep_hardirqs_on+0x94/0x140 [ 460.567000][ T6280] do_syscall_64+0x4c/0xa0 [ 460.571450][ T6280] ? clear_bhb_loop+0x30/0x80 [ 460.576166][ T6280] ? clear_bhb_loop+0x30/0x80 [ 460.580888][ T6280] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 460.586827][ T6280] RIP: 0033:0x7f06fd16aeb9 [ 460.591291][ T6280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.610936][ T6280] RSP: 002b:00007f06fb3c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.619404][ T6280] RAX: ffffffffffffffda RBX: 00007f06fd3e5fa0 RCX: 00007f06fd16aeb9 [ 460.627421][ T6280] RDX: 0000000004048004 RSI: 0000200000000a40 RDI: 0000000000000003 [ 460.635543][ T6280] RBP: 00007f06fb3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 460.643559][ T6280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.651574][ T6280] R13: 00007f06fd3e6038 R14: 00007f06fd3e5fa0 R15: 00007ffdeeef1ae8 [ 460.659613][ T6280] [ 461.024465][ T6286] FAULT_INJECTION: forcing a failure. [ 461.024465][ T6286] name failslab, interval 1, probability 0, space 0, times 0 [ 461.134281][ T6286] CPU: 1 PID: 6286 Comm: syz.3.694 Not tainted syzkaller #0 [ 461.141662][ T6286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.151774][ T6286] Call Trace: [ 461.155136][ T6286] [ 461.158188][ T6286] dump_stack_lvl+0x188/0x250 [ 461.162916][ T6286] ? show_regs_print_info+0x20/0x20 [ 461.168157][ T6286] ? load_image+0x400/0x400 [ 461.172699][ T6286] ? __might_sleep+0xf0/0xf0 [ 461.177321][ T6286] ? __lock_acquire+0x7d10/0x7d10 [ 461.182388][ T6286] ? netlink_insert+0xe95/0x11f0 [ 461.187377][ T6286] should_fail+0x38c/0x4c0 [ 461.191837][ T6286] should_failslab+0x5/0x20 [ 461.196379][ T6286] slab_pre_alloc_hook+0x51/0xc0 [ 461.201369][ T6286] kmem_cache_alloc_node+0x47/0x2d0 [ 461.206600][ T6286] ? __alloc_skb+0xf4/0x750 [ 461.211190][ T6286] __alloc_skb+0xf4/0x750 [ 461.215560][ T6286] netlink_sendmsg+0x654/0xbe0 [ 461.220376][ T6286] ? netlink_getsockopt+0x570/0x570 [ 461.225610][ T6286] ? aa_sock_msg_perm+0x94/0x150 [ 461.230584][ T6286] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 461.235901][ T6286] ? security_socket_sendmsg+0x7c/0xa0 [ 461.241393][ T6286] ? netlink_getsockopt+0x570/0x570 [ 461.246627][ T6286] ____sys_sendmsg+0x5b7/0x8f0 [ 461.251444][ T6286] ? __sys_sendmsg_sock+0x30/0x30 [ 461.256511][ T6286] ? import_iovec+0x6f/0xa0 [ 461.261057][ T6286] ___sys_sendmsg+0x236/0x2e0 [ 461.265794][ T6286] ? __sys_sendmsg+0x2a0/0x2a0 [ 461.270609][ T6286] ? trace_event_raw_event_lock+0x270/0x270 [ 461.276541][ T6286] ? vfs_write+0x8b2/0xd60 [ 461.281016][ T6286] __se_sys_sendmsg+0x1af/0x290 [ 461.285907][ T6286] ? __x64_sys_sendmsg+0x80/0x80 [ 461.290878][ T6286] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 461.296912][ T6286] ? lockdep_hardirqs_on+0x94/0x140 [ 461.302153][ T6286] do_syscall_64+0x4c/0xa0 [ 461.306607][ T6286] ? clear_bhb_loop+0x30/0x80 [ 461.311312][ T6286] ? clear_bhb_loop+0x30/0x80 [ 461.316022][ T6286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 461.321950][ T6286] RIP: 0033:0x7f06fd16aeb9 [ 461.326398][ T6286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.346036][ T6286] RSP: 002b:00007f06fb3c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.354497][ T6286] RAX: ffffffffffffffda RBX: 00007f06fd3e5fa0 RCX: 00007f06fd16aeb9 [ 461.362503][ T6286] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000003 [ 461.370547][ T6286] RBP: 00007f06fb3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 461.378589][ T6286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.386595][ T6286] R13: 00007f06fd3e6038 R14: 00007f06fd3e5fa0 R15: 00007ffdeeef1ae8 [ 461.394624][ T6286] [ 461.490746][ T6290] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.695'. [ 461.600828][ T6288] netlink: 'syz.0.696': attribute type 25 has an invalid length. [ 461.698434][ T6295] netlink: 'syz.3.698': attribute type 8 has an invalid length. [ 461.734136][ T6295] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.698'. [ 461.855369][ T6297] netlink: 'syz.1.697': attribute type 25 has an invalid length. [ 465.145406][ T6321] netlink: 'syz.0.705': attribute type 4 has an invalid length. [ 465.153132][ T6321] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.705'. [ 465.795594][ T6334] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.712'. [ 465.950968][ T6336] netlink: 'syz.1.713': attribute type 8 has an invalid length. [ 466.033362][ T6336] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.713'. [ 466.075573][ T6340] netlink: 'syz.2.714': attribute type 25 has an invalid length. [ 466.482129][ T6346] netlink: 'syz.3.717': attribute type 2 has an invalid length. [ 466.500630][ T6346] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.717'. [ 467.962186][ T6380] netlink: 'syz.1.729': attribute type 8 has an invalid length. [ 468.038430][ T6383] netlink: 'syz.3.731': attribute type 25 has an invalid length. [ 468.115931][ T6380] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.729'. [ 472.103445][ T6431] netlink: 'syz.0.745': attribute type 8 has an invalid length. [ 472.160417][ T6431] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.745'. [ 472.519006][ T6442] netlink: 'syz.0.748': attribute type 25 has an invalid length. [ 472.879622][ T6450] netlink: 'syz.4.751': attribute type 8 has an invalid length. [ 472.921138][ T6450] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.751'. [ 473.712091][ T6470] netlink: 'syz.4.759': attribute type 8 has an invalid length. [ 473.854247][ T6470] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.759'. [ 476.958965][ T6488] netlink: 'syz.1.765': attribute type 8 has an invalid length. [ 477.004044][ T6488] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.765'. [ 477.267515][ T6492] netlink: 'syz.4.766': attribute type 8 has an invalid length. [ 477.344985][ T6492] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.766'. [ 477.421171][ T6502] netlink: 'syz.3.767': attribute type 25 has an invalid length. [ 478.899223][ T6521] netlink: 'syz.3.773': attribute type 8 has an invalid length. [ 479.070685][ T6521] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.773'. [ 480.926428][ T6569] netlink: 'syz.2.792': attribute type 8 has an invalid length. [ 480.964346][ T6569] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.792'. [ 485.066931][ T6628] netlink: 'syz.1.810': attribute type 8 has an invalid length. [ 485.075196][ T6628] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.810'. [ 492.236903][ T6667] netlink: 'syz.2.828': attribute type 25 has an invalid length. [ 492.333058][ T6668] netlink: 'syz.4.829': attribute type 8 has an invalid length. [ 492.394424][ T6668] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.829'. [ 492.546701][ T6678] netlink: 'syz.1.833': attribute type 8 has an invalid length. [ 492.598071][ T6678] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.833'. [ 492.651997][ T6683] netlink: 'syz.3.834': attribute type 4 has an invalid length. [ 492.688327][ T6683] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.834'. [ 494.186257][ T6716] netlink: 'syz.4.848': attribute type 8 has an invalid length. [ 494.211658][ T6718] netlink: 'syz.1.849': attribute type 4 has an invalid length. [ 494.234296][ T6716] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.848'. [ 494.250615][ T6718] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.849'. [ 494.830848][ T6728] netlink: 'syz.4.852': attribute type 25 has an invalid length. [ 496.228251][ T6761] netlink: 132 bytes leftover after parsing attributes in process `syz.0.865'. [ 496.277227][ T6761] netlink: 'syz.0.865': attribute type 4 has an invalid length. [ 496.552730][ T6767] netlink: 'syz.0.867': attribute type 8 has an invalid length. [ 496.606440][ T6767] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.867'. [ 496.948476][ T6778] netlink: 'syz.0.881': attribute type 8 has an invalid length. [ 497.027995][ T6778] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.881'. [ 497.387752][ T6784] validate_nla: 1 callbacks suppressed [ 497.387774][ T6784] netlink: 'syz.2.873': attribute type 25 has an invalid length. [ 498.471553][ T6803] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.880'. [ 498.995323][ T6817] netlink: 'syz.0.885': attribute type 8 has an invalid length. [ 499.083528][ T6817] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.885'. [ 499.582222][ T6826] netlink: 'syz.4.888': attribute type 25 has an invalid length. [ 501.358842][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.365504][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.405839][ T6848] netlink: 132 bytes leftover after parsing attributes in process `syz.3.896'. [ 501.551893][ T6848] netlink: 'syz.3.896': attribute type 4 has an invalid length. [ 502.067259][ T6861] netlink: 'syz.3.900': attribute type 8 has an invalid length. [ 502.105274][ T6861] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.900'. [ 503.454112][ T6878] netlink: 'syz.2.917': attribute type 25 has an invalid length. [ 504.291270][ T6906] netlink: 'syz.3.915': attribute type 8 has an invalid length. [ 504.355201][ T6906] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.915'. [ 504.556682][ T6909] netlink: 'syz.0.919': attribute type 10 has an invalid length. [ 504.870922][ T6909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.119837][ T6909] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 505.197362][ T6913] netlink: 'syz.3.921': attribute type 25 has an invalid length. [ 505.568576][ T6924] netlink: 'syz.1.923': attribute type 8 has an invalid length. [ 505.624113][ T6924] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.923'. [ 505.918510][ T6934] netlink: 'syz.4.925': attribute type 25 has an invalid length. [ 506.505765][ T6952] netlink: 'syz.0.931': attribute type 8 has an invalid length. [ 506.513502][ T6952] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.931'. [ 507.624997][ T6968] netlink: 'syz.2.937': attribute type 25 has an invalid length. [ 507.964414][ T6974] netlink: 'syz.0.938': attribute type 25 has an invalid length. [ 509.200666][ T6997] netlink: 'syz.0.947': attribute type 25 has an invalid length. [ 509.241497][ T6996] netlink: 'syz.4.946': attribute type 25 has an invalid length. [ 511.590426][ T7033] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.960'. [ 511.739943][ T7037] netlink: 'syz.4.958': attribute type 25 has an invalid length. [ 512.322187][ T7045] netlink: 'syz.3.962': attribute type 10 has an invalid length. [ 512.807029][ T7050] netlink: 'syz.1.963': attribute type 25 has an invalid length. [ 513.380635][ T7061] netlink: 'syz.3.967': attribute type 25 has an invalid length. [ 513.504410][ T7062] netlink: 'syz.4.965': attribute type 25 has an invalid length. [ 514.574738][ T7079] netlink: 'syz.1.972': attribute type 25 has an invalid length. [ 514.638432][ T7081] netlink: 'syz.4.971': attribute type 8 has an invalid length. [ 514.903713][ T7081] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.971'. [ 515.875383][ T7094] netlink: 'syz.2.976': attribute type 25 has an invalid length. [ 516.103913][ T7104] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.977'. [ 516.123623][ T7102] netlink: 'syz.1.988': attribute type 25 has an invalid length. [ 516.597508][ T7114] netlink: 'syz.3.978': attribute type 10 has an invalid length. [ 519.418409][ T7135] netlink: 'syz.3.984': attribute type 25 has an invalid length. [ 519.523561][ T7137] netlink: 'syz.2.986': attribute type 25 has an invalid length. [ 519.752636][ T7148] netlink: 'syz.1.989': attribute type 8 has an invalid length. [ 519.842237][ T7148] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.989'. [ 520.467090][ T7160] netlink: 'syz.1.994': attribute type 10 has an invalid length. [ 520.676965][ T7160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.879786][ T7160] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 522.281405][ T7171] netlink: 132 bytes leftover after parsing attributes in process `syz.0.996'. [ 522.635876][ T7170] netlink: 'syz.4.998': attribute type 10 has an invalid length. [ 522.934748][ T7170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.078052][ T7170] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 523.324039][ T7171] netlink: 'syz.0.996': attribute type 4 has an invalid length. [ 523.883443][ T7193] netlink: 'syz.4.1004': attribute type 25 has an invalid length. [ 524.717125][ T7204] netlink: 'syz.3.1009': attribute type 10 has an invalid length. [ 527.219821][ T7237] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1018'. [ 527.302943][ T7239] netlink: 'syz.2.1018': attribute type 4 has an invalid length. [ 528.742125][ T7254] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1024'. [ 528.861533][ T7254] netlink: 'syz.2.1024': attribute type 4 has an invalid length. [ 528.998338][ T7261] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1025'. [ 529.156068][ T7261] netlink: 'syz.3.1025': attribute type 4 has an invalid length. [ 529.274703][ T7267] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1027'. [ 529.434319][ T7267] netlink: 'syz.2.1027': attribute type 4 has an invalid length. [ 529.695771][ T7272] netlink: 'syz.1.1028': attribute type 25 has an invalid length. [ 529.935968][ T7280] netlink: 'syz.2.1030': attribute type 8 has an invalid length. [ 530.004480][ T7280] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1030'. [ 530.350933][ T7282] netlink: 'syz.3.1031': attribute type 25 has an invalid length. [ 531.854242][ T7307] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1039'. [ 531.988688][ T7308] netlink: 'syz.0.1039': attribute type 4 has an invalid length. [ 532.140530][ T7314] netlink: 'syz.3.1041': attribute type 25 has an invalid length. [ 532.365097][ T7320] netlink: 'syz.2.1043': attribute type 8 has an invalid length. [ 532.411148][ T7320] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1043'. [ 532.523788][ T7323] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1042'. [ 532.680635][ T7325] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1044'. [ 532.733281][ T7330] netlink: 'syz.2.1045': attribute type 4 has an invalid length. [ 532.790266][ T7326] netlink: 'syz.1.1042': attribute type 4 has an invalid length. [ 532.837297][ T7329] netlink: 'syz.0.1044': attribute type 4 has an invalid length. [ 532.866634][ T7328] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1045'. [ 533.516904][ T7339] netlink: 'syz.1.1046': attribute type 25 has an invalid length. [ 533.575942][ T7340] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1051'. [ 533.632630][ T7340] netlink: 'syz.0.1051': attribute type 4 has an invalid length. [ 534.731774][ T7361] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1055'. [ 534.795425][ T7366] netlink: 'syz.1.1056': attribute type 8 has an invalid length. [ 534.806799][ T7367] netlink: 'syz.4.1055': attribute type 4 has an invalid length. [ 534.871462][ T7366] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1056'. [ 534.929156][ T7371] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1058'. [ 534.966185][ T7374] netlink: 'syz.0.1058': attribute type 4 has an invalid length. [ 535.277468][ T7377] netlink: 'syz.0.1059': attribute type 25 has an invalid length. [ 535.677982][ T7385] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1063'. [ 535.871915][ T7388] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1062'. [ 537.399274][ T7420] device geneve0 entered promiscuous mode [ 537.623703][ T7420] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 537.692916][ T7424] validate_nla: 5 callbacks suppressed [ 537.692955][ T7424] netlink: 'syz.4.1078': attribute type 10 has an invalid length. [ 538.178925][ T7428] netlink: 'syz.1.1079': attribute type 25 has an invalid length. [ 538.258417][ T7433] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1081'. [ 538.287262][ T7436] netlink: 'syz.2.1081': attribute type 4 has an invalid length. [ 538.386042][ T7432] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1080'. [ 538.563307][ T7437] netlink: 'syz.0.1080': attribute type 4 has an invalid length. [ 538.893982][ T7447] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1084'. [ 538.952278][ T7447] netlink: 'syz.4.1084': attribute type 4 has an invalid length. [ 539.247172][ T7457] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1088'. [ 539.299875][ T7461] netlink: 'syz.2.1088': attribute type 4 has an invalid length. [ 539.586515][ T7464] netlink: 'syz.0.1100': attribute type 25 has an invalid length. [ 540.589045][ T7481] FAULT_INJECTION: forcing a failure. [ 540.589045][ T7481] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 540.707057][ T7481] CPU: 0 PID: 7481 Comm: syz.0.1093 Not tainted syzkaller #0 [ 540.714511][ T7481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 540.724609][ T7481] Call Trace: [ 540.727927][ T7481] [ 540.730898][ T7481] dump_stack_lvl+0x188/0x250 [ 540.735631][ T7481] ? show_regs_print_info+0x20/0x20 [ 540.740873][ T7481] ? load_image+0x400/0x400 [ 540.745425][ T7481] ? perf_trace_lock_acquire+0xed/0x3e0 [ 540.751143][ T7481] should_fail+0x38c/0x4c0 [ 540.755608][ T7481] prepare_alloc_pages+0x1e4/0x5f0 [ 540.760772][ T7481] __alloc_pages+0x11b/0x480 [ 540.765413][ T7481] ? zone_statistics+0x170/0x170 [ 540.770409][ T7481] ? alloc_pages+0x438/0x550 [ 540.775046][ T7481] new_slab+0xc0/0x4b0 [ 540.779152][ T7481] ___slab_alloc+0x80a/0xdd0 [ 540.783781][ T7481] ? bpf_test_init+0xf8/0x1b0 [ 540.788512][ T7481] __kmalloc+0x1cd/0x330 [ 540.792800][ T7481] ? bpf_test_init+0xf8/0x1b0 [ 540.797512][ T7481] ? __lock_acquire+0x7d10/0x7d10 [ 540.802581][ T7481] bpf_test_init+0xf8/0x1b0 [ 540.807126][ T7481] bpf_prog_test_run_skb+0x181/0x1180 [ 540.812652][ T7481] ? __fget_files+0x40f/0x480 [ 540.817390][ T7481] ? cpu_online+0x60/0x60 [ 540.821768][ T7481] bpf_prog_test_run+0x31e/0x390 [ 540.826745][ T7481] __sys_bpf+0x5a5/0x6f0 [ 540.831019][ T7481] ? bpf_link_show_fdinfo+0x380/0x380 [ 540.836434][ T7481] ? vtime_user_exit+0x2c8/0x3e0 [ 540.841422][ T7481] __x64_sys_bpf+0x78/0x90 [ 540.845880][ T7481] do_syscall_64+0x4c/0xa0 [ 540.850322][ T7481] ? clear_bhb_loop+0x30/0x80 [ 540.855133][ T7481] ? clear_bhb_loop+0x30/0x80 [ 540.859839][ T7481] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 540.865773][ T7481] RIP: 0033:0x7f7c66061eb9 [ 540.870212][ T7481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.889837][ T7481] RSP: 002b:00007f7c642bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 540.898279][ T7481] RAX: ffffffffffffffda RBX: 00007f7c662dcfa0 RCX: 00007f7c66061eb9 [ 540.906277][ T7481] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 540.914264][ T7481] RBP: 00007f7c642bd090 R08: 0000000000000000 R09: 0000000000000000 [ 540.922251][ T7481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.930238][ T7481] R13: 00007f7c662dd038 R14: 00007f7c662dcfa0 R15: 00007ffdd674f2a8 [ 540.938249][ T7481] [ 541.138368][ T7490] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1095'. [ 541.224680][ T7487] netlink: 'syz.1.1096': attribute type 10 has an invalid length. [ 541.298090][ T7490] netlink: 'syz.4.1095': attribute type 4 has an invalid length. [ 541.598514][ T7501] FAULT_INJECTION: forcing a failure. [ 541.598514][ T7501] name failslab, interval 1, probability 0, space 0, times 0 [ 541.686353][ T7501] CPU: 1 PID: 7501 Comm: syz.1.1102 Not tainted syzkaller #0 [ 541.693900][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.704007][ T7501] Call Trace: [ 541.707330][ T7501] [ 541.710301][ T7501] dump_stack_lvl+0x188/0x250 [ 541.715048][ T7501] ? show_regs_print_info+0x20/0x20 [ 541.720305][ T7501] ? load_image+0x400/0x400 [ 541.724866][ T7501] ? __might_sleep+0xf0/0xf0 [ 541.729503][ T7501] ? __lock_acquire+0x7d10/0x7d10 [ 541.734584][ T7501] ? netlink_insert+0xe95/0x11f0 [ 541.739594][ T7501] should_fail+0x38c/0x4c0 [ 541.744078][ T7501] should_failslab+0x5/0x20 [ 541.748619][ T7501] slab_pre_alloc_hook+0x51/0xc0 [ 541.753613][ T7501] kmem_cache_alloc_node+0x47/0x2d0 [ 541.758848][ T7501] ? __alloc_skb+0xf4/0x750 [ 541.763417][ T7501] __alloc_skb+0xf4/0x750 [ 541.767811][ T7501] netlink_sendmsg+0x654/0xbe0 [ 541.772652][ T7501] ? netlink_getsockopt+0x570/0x570 [ 541.777911][ T7501] ? aa_sock_msg_perm+0x94/0x150 [ 541.782913][ T7501] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 541.788252][ T7501] ? security_socket_sendmsg+0x7c/0xa0 [ 541.793772][ T7501] ? netlink_getsockopt+0x570/0x570 [ 541.799015][ T7501] ____sys_sendmsg+0x5b7/0x8f0 [ 541.803855][ T7501] ? __sys_sendmsg_sock+0x30/0x30 [ 541.808999][ T7501] ? import_iovec+0x6f/0xa0 [ 541.813568][ T7501] ___sys_sendmsg+0x236/0x2e0 [ 541.818318][ T7501] ? __sys_sendmsg+0x2a0/0x2a0 [ 541.823170][ T7501] ? trace_event_raw_event_lock+0x270/0x270 [ 541.829131][ T7501] ? vfs_write+0x8b2/0xd60 [ 541.833680][ T7501] __se_sys_sendmsg+0x1af/0x290 [ 541.838606][ T7501] ? __x64_sys_sendmsg+0x80/0x80 [ 541.843589][ T7501] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 541.849654][ T7501] ? lockdep_hardirqs_on+0x94/0x140 [ 541.854923][ T7501] do_syscall_64+0x4c/0xa0 [ 541.859385][ T7501] ? clear_bhb_loop+0x30/0x80 [ 541.864106][ T7501] ? clear_bhb_loop+0x30/0x80 [ 541.868830][ T7501] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 541.874772][ T7501] RIP: 0033:0x7f2ead2b4eb9 [ 541.879348][ T7501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.899009][ T7501] RSP: 002b:00007f2eab510028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.907490][ T7501] RAX: ffffffffffffffda RBX: 00007f2ead52ffa0 RCX: 00007f2ead2b4eb9 [ 541.915545][ T7501] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 541.923565][ T7501] RBP: 00007f2eab510090 R08: 0000000000000000 R09: 0000000000000000 [ 541.931594][ T7501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.939619][ T7501] R13: 00007f2ead530038 R14: 00007f2ead52ffa0 R15: 00007fff23cc9718 [ 541.947690][ T7501] [ 542.109982][ T7509] netlink: 'syz.2.1106': attribute type 25 has an invalid length. [ 542.291439][ T7513] device geneve0 entered promiscuous mode [ 542.401002][ T7513] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 544.080513][ T7540] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1114'. [ 544.148706][ T7542] validate_nla: 1 callbacks suppressed [ 544.148725][ T7542] netlink: 'syz.4.1114': attribute type 4 has an invalid length. [ 545.132913][ T7553] netlink: 'syz.2.1120': attribute type 10 has an invalid length. [ 545.222388][ T7553] device geneve0 entered promiscuous mode [ 545.310188][ T7553] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 545.454727][ T7560] netlink: 'syz.3.1121': attribute type 10 has an invalid length. [ 546.865997][ T7583] netlink: 'syz.1.1128': attribute type 8 has an invalid length. [ 546.873799][ T7583] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1128'. [ 549.575319][ T7607] netlink: 'syz.4.1137': attribute type 10 has an invalid length. [ 549.911977][ T7615] netlink: 'syz.4.1140': attribute type 10 has an invalid length. [ 549.964747][ T7615] device geneve0 entered promiscuous mode [ 550.088303][ T7615] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 550.128462][ T7624] netlink: 'syz.1.1144': attribute type 8 has an invalid length. [ 550.171407][ T7624] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1144'. [ 553.328438][ T7651] can: request_module (can-proto-0) failed. [ 553.895834][ T7657] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1153'. [ 553.927420][ T7658] netlink: 'syz.2.1153': attribute type 4 has an invalid length. [ 554.118387][ T7669] FAULT_INJECTION: forcing a failure. [ 554.118387][ T7669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.137439][ T7669] CPU: 1 PID: 7669 Comm: syz.0.1158 Not tainted syzkaller #0 [ 554.144882][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 554.154974][ T7669] Call Trace: [ 554.158306][ T7669] [ 554.161269][ T7669] dump_stack_lvl+0x188/0x250 [ 554.165993][ T7669] ? show_regs_print_info+0x20/0x20 [ 554.171233][ T7669] ? load_image+0x400/0x400 [ 554.175790][ T7669] ? __lock_acquire+0x7d10/0x7d10 [ 554.180863][ T7669] should_fail+0x38c/0x4c0 [ 554.185331][ T7669] _copy_to_user+0x2e/0x130 [ 554.189873][ T7669] simple_read_from_buffer+0xe3/0x150 [ 554.195296][ T7669] proc_fail_nth_read+0x1a6/0x220 [ 554.200398][ T7669] ? proc_fault_inject_write+0x310/0x310 [ 554.206086][ T7669] ? fsnotify_perm+0x254/0x560 [ 554.210894][ T7669] ? proc_fault_inject_write+0x310/0x310 [ 554.216568][ T7669] vfs_read+0x301/0xd60 [ 554.220770][ T7669] ? kernel_read+0x1e0/0x1e0 [ 554.225406][ T7669] ? __fget_files+0x40f/0x480 [ 554.230128][ T7669] ? mutex_lock_nested+0x17/0x20 [ 554.235104][ T7669] ? __fdget_pos+0x2bf/0x370 [ 554.239725][ T7669] ? ksys_read+0x71/0x260 [ 554.244093][ T7669] ksys_read+0x152/0x260 [ 554.248373][ T7669] ? vfs_write+0xd60/0xd60 [ 554.252820][ T7669] ? lockdep_hardirqs_on+0x94/0x140 [ 554.258058][ T7669] do_syscall_64+0x4c/0xa0 [ 554.262502][ T7669] ? clear_bhb_loop+0x30/0x80 [ 554.267213][ T7669] ? clear_bhb_loop+0x30/0x80 [ 554.271925][ T7669] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 554.277845][ T7669] RIP: 0033:0x7f7c6602278e [ 554.282292][ T7669] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 554.301928][ T7669] RSP: 002b:00007f7c642bcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 554.310377][ T7669] RAX: ffffffffffffffda RBX: 00007f7c642bd6c0 RCX: 00007f7c6602278e [ 554.318381][ T7669] RDX: 000000000000000f RSI: 00007f7c642bd0a0 RDI: 0000000000000006 [ 554.326385][ T7669] RBP: 00007f7c642bd090 R08: 0000000000000000 R09: 0000000000000000 [ 554.334385][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.342385][ T7669] R13: 00007f7c662dd038 R14: 00007f7c662dcfa0 R15: 00007ffdd674f2a8 [ 554.350406][ T7669] [ 554.512304][ T7677] netlink: 'syz.0.1159': attribute type 8 has an invalid length. [ 554.549326][ T7677] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1159'. [ 554.586196][ T7679] netlink: 'syz.4.1161': attribute type 10 has an invalid length. [ 554.892729][ T7682] netlink: 'syz.2.1162': attribute type 10 has an invalid length. [ 555.008927][ T7686] netlink: 'syz.1.1164': attribute type 10 has an invalid length. [ 555.026182][ T7690] FAULT_INJECTION: forcing a failure. [ 555.026182][ T7690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.073173][ T7690] CPU: 0 PID: 7690 Comm: syz.3.1166 Not tainted syzkaller #0 [ 555.080620][ T7690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 555.090718][ T7690] Call Trace: [ 555.094046][ T7690] [ 555.097003][ T7690] dump_stack_lvl+0x188/0x250 [ 555.101723][ T7690] ? show_regs_print_info+0x20/0x20 [ 555.106963][ T7690] ? load_image+0x400/0x400 [ 555.111510][ T7690] ? __lock_acquire+0x7d10/0x7d10 [ 555.116574][ T7690] ? unix_ioctl+0x25d/0x660 [ 555.121113][ T7690] should_fail+0x38c/0x4c0 [ 555.125570][ T7690] _copy_from_user+0x2e/0x170 [ 555.130308][ T7690] sock_do_ioctl+0x18c/0x320 [ 555.134934][ T7690] ? sock_show_fdinfo+0xb0/0xb0 [ 555.139833][ T7690] sock_ioctl+0x4d2/0x710 [ 555.144205][ T7690] ? sock_poll+0x410/0x410 [ 555.148676][ T7690] ? bpf_lsm_file_ioctl+0x5/0x10 [ 555.153647][ T7690] ? security_file_ioctl+0x7c/0xa0 [ 555.158804][ T7690] ? sock_poll+0x410/0x410 [ 555.163254][ T7690] __se_sys_ioctl+0xfa/0x170 [ 555.167871][ T7690] do_syscall_64+0x4c/0xa0 [ 555.172304][ T7690] ? clear_bhb_loop+0x30/0x80 [ 555.176998][ T7690] ? clear_bhb_loop+0x30/0x80 [ 555.181707][ T7690] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 555.187631][ T7690] RIP: 0033:0x7f06fd16aeb9 [ 555.192070][ T7690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.211699][ T7690] RSP: 002b:00007f06fb3c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.220134][ T7690] RAX: ffffffffffffffda RBX: 00007f06fd3e5fa0 RCX: 00007f06fd16aeb9 [ 555.228122][ T7690] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 555.236131][ T7690] RBP: 00007f06fb3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 555.244114][ T7690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.252102][ T7690] R13: 00007f06fd3e6038 R14: 00007f06fd3e5fa0 R15: 00007ffdeeef1ae8 [ 555.260098][ T7690] [ 555.440467][ T7696] netlink: 'syz.1.1169': attribute type 25 has an invalid length. [ 556.451813][ T7719] netlink: 'syz.4.1179': attribute type 10 has an invalid length. [ 556.502356][ T7722] netlink: 'syz.1.1176': attribute type 8 has an invalid length. [ 556.551862][ T7722] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1176'. [ 556.825154][ T7741] FAULT_INJECTION: forcing a failure. [ 556.825154][ T7741] name failslab, interval 1, probability 0, space 0, times 0 [ 556.878343][ T7741] CPU: 0 PID: 7741 Comm: syz.3.1187 Not tainted syzkaller #0 [ 556.885778][ T7741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 556.895870][ T7741] Call Trace: [ 556.899179][ T7741] [ 556.902130][ T7741] dump_stack_lvl+0x188/0x250 [ 556.906864][ T7741] ? show_regs_print_info+0x20/0x20 [ 556.912115][ T7741] ? load_image+0x400/0x400 [ 556.916664][ T7741] ? __might_sleep+0xf0/0xf0 [ 556.921289][ T7741] ? __lock_acquire+0x7d10/0x7d10 [ 556.926374][ T7739] netlink: 'syz.4.1186': attribute type 25 has an invalid length. [ 556.926367][ T7741] should_fail+0x38c/0x4c0 [ 556.926404][ T7741] should_failslab+0x5/0x20 [ 556.943191][ T7741] slab_pre_alloc_hook+0x51/0xc0 [ 556.948173][ T7741] __kmalloc_node+0x6e/0x3b0 [ 556.952811][ T7741] ? memcg_alloc_page_obj_cgroups+0x81/0x120 [ 556.958843][ T7741] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 556.964690][ T7741] slab_post_alloc_hook+0xba/0x380 [ 556.969851][ T7741] kmem_cache_alloc_node+0x12d/0x2d0 [ 556.975340][ T7741] ? __alloc_skb+0xf4/0x750 [ 556.979882][ T7741] __alloc_skb+0xf4/0x750 [ 556.984262][ T7741] alloc_skb_with_frags+0xa7/0x730 [ 556.989421][ T7741] ? trace_event_raw_event_lock+0x270/0x270 [ 556.995365][ T7741] sock_alloc_send_pskb+0x87f/0x9a0 [ 557.000706][ T7741] ? sock_kzfree_s+0x50/0x50 [ 557.005333][ T7741] ? do_raw_spin_lock+0x128/0x2f0 [ 557.010406][ T7741] ? __rwlock_init+0x140/0x140 [ 557.015213][ T7741] ? do_raw_spin_unlock+0x11d/0x230 [ 557.020447][ T7741] unix_dgram_sendmsg+0x5fc/0x18a0 [ 557.025619][ T7741] ? aa_sk_perm+0x7dc/0x910 [ 557.030167][ T7741] ? unix_dgram_poll+0x680/0x680 [ 557.035135][ T7741] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 557.041591][ T7741] ? aa_sock_msg_perm+0x94/0x150 [ 557.046655][ T7741] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 557.052249][ T7741] ? unix_dgram_peer_wake_me+0x430/0x430 [ 557.057921][ T7741] ____sys_sendmsg+0x5b7/0x8f0 [ 557.062737][ T7741] ? __sys_sendmsg_sock+0x30/0x30 [ 557.067813][ T7741] ? import_iovec+0x6f/0xa0 [ 557.072358][ T7741] ___sys_sendmsg+0x236/0x2e0 [ 557.077080][ T7741] ? __sys_sendmsg+0x2a0/0x2a0 [ 557.081911][ T7741] ? trace_event_raw_event_lock+0x270/0x270 [ 557.087855][ T7741] ? vfs_write+0x8b2/0xd60 [ 557.092341][ T7741] __se_sys_sendmsg+0x1af/0x290 [ 557.097237][ T7741] ? __x64_sys_sendmsg+0x80/0x80 [ 557.102215][ T7741] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 557.108259][ T7741] ? lockdep_hardirqs_on+0x94/0x140 [ 557.113501][ T7741] do_syscall_64+0x4c/0xa0 [ 557.117944][ T7741] ? clear_bhb_loop+0x30/0x80 [ 557.122651][ T7741] ? clear_bhb_loop+0x30/0x80 [ 557.127362][ T7741] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 557.133285][ T7741] RIP: 0033:0x7f06fd16aeb9 [ 557.137731][ T7741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.157386][ T7741] RSP: 002b:00007f06fb3c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.165845][ T7741] RAX: ffffffffffffffda RBX: 00007f06fd3e5fa0 RCX: 00007f06fd16aeb9 [ 557.173852][ T7741] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 557.181857][ T7741] RBP: 00007f06fb3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 557.189866][ T7741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.197868][ T7741] R13: 00007f06fd3e6038 R14: 00007f06fd3e5fa0 R15: 00007ffdeeef1ae8 [ 557.205908][ T7741] [ 558.219973][ T7766] netlink: 'syz.3.1194': attribute type 10 has an invalid length. [ 558.471361][ T7769] netlink: 'syz.3.1195': attribute type 8 has an invalid length. [ 558.503334][ T7769] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1195'. [ 558.988631][ T7775] netlink: 'syz.3.1198': attribute type 10 has an invalid length. [ 559.007922][ T7775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.068578][ T7789] FAULT_INJECTION: forcing a failure. [ 559.068578][ T7789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.156092][ T7789] CPU: 1 PID: 7789 Comm: syz.2.1204 Not tainted syzkaller #0 [ 559.163641][ T7789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 559.173746][ T7789] Call Trace: [ 559.177064][ T7789] [ 559.180039][ T7789] dump_stack_lvl+0x188/0x250 [ 559.184789][ T7789] ? show_regs_print_info+0x20/0x20 [ 559.190056][ T7789] ? load_image+0x400/0x400 [ 559.194622][ T7789] ? __lock_acquire+0x7d10/0x7d10 [ 559.199709][ T7789] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 559.205581][ T7789] should_fail+0x38c/0x4c0 [ 559.210071][ T7789] _copy_from_user+0x2e/0x170 [ 559.214806][ T7789] iovec_from_user+0x142/0x370 [ 559.219655][ T7789] __import_iovec+0x70/0x490 [ 559.224336][ T7789] import_iovec+0x6f/0xa0 [ 559.228752][ T7789] ___sys_sendmsg+0x1fd/0x2e0 [ 559.233530][ T7789] ? __sys_sendmsg+0x2a0/0x2a0 [ 559.238387][ T7789] ? trace_event_raw_event_lock+0x270/0x270 [ 559.244327][ T7789] ? vfs_write+0x8b2/0xd60 [ 559.248862][ T7789] __se_sys_sendmsg+0x1af/0x290 [ 559.253792][ T7789] ? __x64_sys_sendmsg+0x80/0x80 [ 559.258782][ T7789] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 559.264846][ T7789] ? lockdep_hardirqs_on+0x94/0x140 [ 559.270113][ T7789] do_syscall_64+0x4c/0xa0 [ 559.274585][ T7789] ? clear_bhb_loop+0x30/0x80 [ 559.279322][ T7789] ? clear_bhb_loop+0x30/0x80 [ 559.284059][ T7789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 559.289992][ T7789] RIP: 0033:0x7f7e524e5eb9 [ 559.294467][ T7789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.314123][ T7789] RSP: 002b:00007f7e50741028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.322609][ T7789] RAX: ffffffffffffffda RBX: 00007f7e52760fa0 RCX: 00007f7e524e5eb9 [ 559.330641][ T7789] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 559.338668][ T7789] RBP: 00007f7e50741090 R08: 0000000000000000 R09: 0000000000000000 [ 559.346819][ T7789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.354881][ T7789] R13: 00007f7e52761038 R14: 00007f7e52760fa0 R15: 00007ffeb4380738 [ 559.363098][ T7789] [ 559.375139][ T7775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.538413][ T7775] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 559.565966][ T7787] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1205'. [ 559.591496][ T7785] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1203'. [ 559.714799][ T7796] validate_nla: 1 callbacks suppressed [ 559.714817][ T7796] netlink: 'syz.1.1203': attribute type 4 has an invalid length. [ 559.939462][ T7800] netlink: 'syz.2.1206': attribute type 10 has an invalid length. [ 559.943266][ T7807] netlink: 'syz.4.1209': attribute type 8 has an invalid length. [ 560.244540][ T7807] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1209'. [ 560.358421][ T7800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.445132][ T7800] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 561.225960][ T7840] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1218'. [ 561.303106][ T7837] netlink: 'syz.3.1219': attribute type 39 has an invalid length. [ 561.417499][ T7836] netlink: 'syz.1.1218': attribute type 4 has an invalid length. [ 561.495816][ T7841] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1219'. [ 561.567565][ T7844] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1221'. [ 561.616634][ T7848] netlink: 'syz.2.1221': attribute type 4 has an invalid length. [ 561.641555][ T7849] netlink: 'syz.4.1223': attribute type 10 has an invalid length. [ 563.000375][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.006825][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.350556][ T7889] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1236'. [ 563.522981][ T7888] netlink: 'syz.0.1236': attribute type 4 has an invalid length. [ 563.952563][ T7896] netlink: 'syz.2.1240': attribute type 10 has an invalid length. [ 564.271848][ T7905] netlink: 'syz.1.1238': attribute type 39 has an invalid length. [ 564.504886][ T7916] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1246'. [ 566.946134][ T7913] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1238'. [ 567.880895][ T7937] netlink: 'syz.2.1252': attribute type 10 has an invalid length. [ 567.904681][ T7936] netlink: 'syz.2.1252': attribute type 10 has an invalid length. [ 568.156746][ T7937] device bond0 entered promiscuous mode [ 568.162831][ T7937] device bond_slave_0 entered promiscuous mode [ 568.178611][ T7937] device bond_slave_1 entered promiscuous mode [ 568.190117][ T7937] device batadv0 entered promiscuous mode [ 568.442915][ T7946] netlink: 'syz.1.1257': attribute type 10 has an invalid length. [ 568.494362][ T7948] netlink: 'syz.4.1256': attribute type 10 has an invalid length. [ 568.663297][ T7956] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1259'. [ 568.729265][ T7960] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1262'. [ 568.744737][ T7956] netlink: 'syz.1.1259': attribute type 4 has an invalid length. [ 568.816212][ T7960] netlink: 'syz.3.1262': attribute type 4 has an invalid length. [ 568.910080][ T7964] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1264'. [ 568.930279][ T7964] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 569.005328][ T7966] netlink: 'syz.3.1265': attribute type 25 has an invalid length. [ 569.790578][ T7981] netlink: 'syz.2.1269': attribute type 39 has an invalid length. [ 570.089456][ T7982] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1269'. [ 570.106336][ T7984] netlink: 'syz.0.1270': attribute type 10 has an invalid length. [ 570.371181][ T7992] netlink: 'syz.4.1274': attribute type 10 has an invalid length. [ 570.412392][ T7995] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1275'. [ 570.569160][ T7997] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1276'. [ 571.391933][ T8020] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1284'. [ 572.353843][ T8031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.486179][ T8031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.460027][ T8031] device batadv_slave_0 entered promiscuous mode [ 575.483285][ T8031] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 575.641820][ T8043] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1291'. [ 575.700682][ T8041] validate_nla: 4 callbacks suppressed [ 575.700717][ T8041] netlink: 'syz.0.1290': attribute type 10 has an invalid length. [ 575.759618][ T8043] netlink: 'syz.4.1291': attribute type 4 has an invalid length. [ 576.019994][ T8056] netlink: 'syz.1.1296': attribute type 25 has an invalid length. [ 576.066112][ T8051] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1292'. [ 576.214584][ T8051] netlink: 'syz.2.1292': attribute type 4 has an invalid length. [ 576.842270][ T8070] netlink: 'syz.2.1299': attribute type 10 has an invalid length. [ 577.203401][ T8073] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1303'. [ 577.255199][ T8073] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 577.348525][ T8078] netlink: 'syz.0.1304': attribute type 10 has an invalid length. [ 577.374279][ T8078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.445539][ T8078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.496350][ T8078] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 577.561301][ T8074] netlink: 'syz.1.1301': attribute type 21 has an invalid length. [ 577.598663][ T8074] netlink: 'syz.1.1301': attribute type 6 has an invalid length. [ 577.658820][ T8074] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1301'. [ 577.718249][ T8076] netlink: 'syz.1.1301': attribute type 10 has an invalid length. [ 577.745701][ T8076] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1301'. [ 577.797699][ T8081] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1305'. [ 577.913432][ T8082] netlink: 'syz.2.1305': attribute type 4 has an invalid length. [ 578.206715][ T8092] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1307'. [ 579.424111][ T8124] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1320'. [ 579.479571][ T8121] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1319'. [ 579.608853][ T8121] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1319'. [ 579.831349][ T8130] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 582.002554][ T8154] validate_nla: 10 callbacks suppressed [ 582.002594][ T8154] netlink: 'syz.3.1330': attribute type 10 has an invalid length. [ 582.074469][ T8161] netlink: 'syz.0.1331': attribute type 10 has an invalid length. [ 582.326769][ T8170] __nla_validate_parse: 2 callbacks suppressed [ 582.326825][ T8170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1334'. [ 582.462024][ T8171] netlink: 'syz.0.1334': attribute type 4 has an invalid length. [ 583.156680][ T8181] netlink: 'syz.2.1337': attribute type 21 has an invalid length. [ 583.281093][ T8181] netlink: 'syz.2.1337': attribute type 6 has an invalid length. [ 583.335322][ T8181] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1337'. [ 583.404832][ T8183] netlink: 'syz.2.1337': attribute type 10 has an invalid length. [ 583.497512][ T8183] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1337'. [ 583.794713][ T8186] netlink: 'syz.4.1338': attribute type 10 has an invalid length. [ 586.457284][ T8186] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.464613][ T8186] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.915804][ T8212] FAULT_INJECTION: forcing a failure. [ 586.915804][ T8212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.048463][ T8212] CPU: 0 PID: 8212 Comm: syz.4.1346 Not tainted syzkaller #0 [ 587.055995][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 587.066085][ T8212] Call Trace: [ 587.069393][ T8212] [ 587.072352][ T8212] dump_stack_lvl+0x188/0x250 [ 587.077083][ T8212] ? show_regs_print_info+0x20/0x20 [ 587.082326][ T8212] ? load_image+0x400/0x400 [ 587.086866][ T8212] ? __lock_acquire+0x7d10/0x7d10 [ 587.091931][ T8212] should_fail+0x38c/0x4c0 [ 587.096379][ T8212] _copy_from_user+0x2e/0x170 [ 587.101103][ T8212] iovec_from_user+0x142/0x370 [ 587.105904][ T8212] __import_iovec+0x70/0x490 [ 587.110543][ T8212] import_iovec+0x6f/0xa0 [ 587.114921][ T8212] ___sys_sendmsg+0x1fd/0x2e0 [ 587.119635][ T8212] ? __sys_sendmsg+0x2a0/0x2a0 [ 587.124434][ T8212] ? ktime_get_real_ts64+0x440/0x440 [ 587.129752][ T8212] __se_sys_sendmsg+0x1af/0x290 [ 587.134629][ T8212] ? __x64_sys_sendmsg+0x80/0x80 [ 587.139582][ T8212] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 587.145591][ T8212] ? lockdep_hardirqs_on+0x94/0x140 [ 587.150816][ T8212] do_syscall_64+0x4c/0xa0 [ 587.155257][ T8212] ? clear_bhb_loop+0x30/0x80 [ 587.159946][ T8212] ? clear_bhb_loop+0x30/0x80 [ 587.164643][ T8212] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 587.170552][ T8212] RIP: 0033:0x7f42b6b2ceb9 [ 587.174980][ T8212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.194608][ T8212] RSP: 002b:00007f42b4d67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 587.203060][ T8212] RAX: ffffffffffffffda RBX: 00007f42b6da8090 RCX: 00007f42b6b2ceb9 [ 587.211128][ T8212] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000c [ 587.219127][ T8212] RBP: 00007f42b4d67090 R08: 0000000000000000 R09: 0000000000000000 [ 587.227119][ T8212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.235103][ T8212] R13: 00007f42b6da8128 R14: 00007f42b6da8090 R15: 00007ffd3d41fc68 [ 587.243110][ T8212] [ 587.322410][ T8218] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1350'. [ 587.357163][ T8211] netlink: 'syz.0.1349': attribute type 10 has an invalid length. [ 587.409529][ T8218] netlink: 'syz.1.1350': attribute type 4 has an invalid length. [ 587.782764][ T8227] netlink: 'syz.2.1354': attribute type 25 has an invalid length. [ 588.224019][ T8241] netlink: 'syz.3.1357': attribute type 21 has an invalid length. [ 588.241660][ T8241] netlink: 'syz.3.1357': attribute type 6 has an invalid length. [ 588.255310][ T8241] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1357'. [ 588.351053][ T8241] netlink: 'syz.3.1357': attribute type 10 has an invalid length. [ 588.376369][ T8241] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1357'. [ 589.890833][ T8263] netlink: 'syz.2.1368': attribute type 10 has an invalid length. [ 591.455168][ T8303] netlink: 'syz.0.1385': attribute type 10 has an invalid length. [ 591.565031][ T8310] FAULT_INJECTION: forcing a failure. [ 591.565031][ T8310] name failslab, interval 1, probability 0, space 0, times 0 [ 591.734030][ T8310] CPU: 0 PID: 8310 Comm: syz.3.1386 Not tainted syzkaller #0 [ 591.741488][ T8310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 591.751576][ T8310] Call Trace: [ 591.754887][ T8310] [ 591.757861][ T8310] dump_stack_lvl+0x188/0x250 [ 591.762579][ T8310] ? show_regs_print_info+0x20/0x20 [ 591.767817][ T8310] ? load_image+0x400/0x400 [ 591.772398][ T8310] ? __might_sleep+0xf0/0xf0 [ 591.777032][ T8310] ? __lock_acquire+0x7d10/0x7d10 [ 591.782099][ T8310] should_fail+0x38c/0x4c0 [ 591.786569][ T8310] should_failslab+0x5/0x20 [ 591.791107][ T8310] slab_pre_alloc_hook+0x51/0xc0 [ 591.796081][ T8310] kmem_cache_alloc_node_trace+0x4a/0x300 [ 591.801835][ T8310] ? __get_vm_area_node+0x119/0x2d0 [ 591.807106][ T8310] __get_vm_area_node+0x119/0x2d0 [ 591.812166][ T8310] __vmalloc_node_range+0xef/0x8b0 [ 591.817308][ T8310] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 591.823082][ T8310] ? end_current_label_crit_section+0x170/0x170 [ 591.829368][ T8310] ? __lock_acquire+0x7d10/0x7d10 [ 591.834437][ T8310] ? perf_trace_lock_acquire+0xed/0x3e0 [ 591.840018][ T8310] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 591.845604][ T8310] __vmalloc+0x76/0x80 [ 591.849705][ T8310] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 591.855291][ T8310] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 591.860702][ T8310] bpf_prog_alloc+0x1a/0x1e0 [ 591.865339][ T8310] bpf_prog_load+0x7c6/0x1510 [ 591.870069][ T8310] ? map_freeze+0x350/0x350 [ 591.874613][ T8310] ? __might_fault+0xb7/0x110 [ 591.879356][ T8310] ? __might_fault+0xb3/0x110 [ 591.884071][ T8310] ? bpf_lsm_bpf+0x5/0x10 [ 591.888461][ T8310] ? security_bpf+0x7a/0xa0 [ 591.893005][ T8310] __sys_bpf+0x532/0x6f0 [ 591.897288][ T8310] ? bpf_link_show_fdinfo+0x380/0x380 [ 591.902719][ T8310] ? vtime_user_exit+0x2c8/0x3e0 [ 591.907709][ T8310] __x64_sys_bpf+0x78/0x90 [ 591.912166][ T8310] do_syscall_64+0x4c/0xa0 [ 591.916616][ T8310] ? clear_bhb_loop+0x30/0x80 [ 591.921335][ T8310] ? clear_bhb_loop+0x30/0x80 [ 591.926061][ T8310] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 591.931988][ T8310] RIP: 0033:0x7f06fd16aeb9 [ 591.936465][ T8310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.956107][ T8310] RSP: 002b:00007f06fb3a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 591.964556][ T8310] RAX: ffffffffffffffda RBX: 00007f06fd3e6090 RCX: 00007f06fd16aeb9 [ 591.972596][ T8310] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000005 [ 591.980625][ T8310] RBP: 00007f06fb3a5090 R08: 0000000000000000 R09: 0000000000000000 [ 591.988664][ T8310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.996687][ T8310] R13: 00007f06fd3e6128 R14: 00007f06fd3e6090 R15: 00007ffdeeef1ae8 [ 592.004721][ T8310] [ 592.190096][ T8310] syz.3.1386: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 592.285130][ T8310] CPU: 0 PID: 8310 Comm: syz.3.1386 Not tainted syzkaller #0 [ 592.292611][ T8310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.302696][ T8310] Call Trace: [ 592.306007][ T8310] [ 592.308974][ T8310] dump_stack_lvl+0x188/0x250 [ 592.313693][ T8310] ? rcu_lock_release+0x5/0x20 [ 592.318491][ T8310] ? show_regs_print_info+0x20/0x20 [ 592.318860][ T8314] FAULT_INJECTION: forcing a failure. [ 592.318860][ T8314] name failslab, interval 1, probability 0, space 0, times 0 [ 592.336309][ T8310] ? load_image+0x400/0x400 [ 592.340868][ T8310] warn_alloc+0x243/0x320 [ 592.345236][ T8310] ? zone_watermark_ok_safe+0x240/0x240 [ 592.345278][ T8310] ? __get_vm_area_node+0x2b5/0x2d0 [ 592.345308][ T8310] __vmalloc_node_range+0x2b1/0x8b0 [ 592.345333][ T8310] ? end_current_label_crit_section+0x170/0x170 [ 592.345358][ T8310] ? __lock_acquire+0x7d10/0x7d10 [ 592.345385][ T8310] ? perf_trace_lock_acquire+0xed/0x3e0 [ 592.345412][ T8310] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 592.345437][ T8310] __vmalloc+0x76/0x80 [ 592.345458][ T8310] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 592.345484][ T8310] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 592.345513][ T8310] bpf_prog_alloc+0x1a/0x1e0 [ 592.345540][ T8310] bpf_prog_load+0x7c6/0x1510 [ 592.345576][ T8310] ? map_freeze+0x350/0x350 [ 592.345600][ T8310] ? __might_fault+0xb7/0x110 [ 592.345638][ T8310] ? __might_fault+0xb3/0x110 [ 592.345661][ T8310] ? bpf_lsm_bpf+0x5/0x10 [ 592.345682][ T8310] ? security_bpf+0x7a/0xa0 [ 592.345706][ T8310] __sys_bpf+0x532/0x6f0 [ 592.345733][ T8310] ? bpf_link_show_fdinfo+0x380/0x380 [ 592.345769][ T8310] ? vtime_user_exit+0x2c8/0x3e0 [ 592.345813][ T8310] __x64_sys_bpf+0x78/0x90 [ 592.345836][ T8310] do_syscall_64+0x4c/0xa0 [ 592.345855][ T8310] ? clear_bhb_loop+0x30/0x80 [ 592.345875][ T8310] ? clear_bhb_loop+0x30/0x80 [ 592.345897][ T8310] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 592.345923][ T8310] RIP: 0033:0x7f06fd16aeb9 [ 592.345942][ T8310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.345959][ T8310] RSP: 002b:00007f06fb3a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 592.502916][ T8310] RAX: ffffffffffffffda RBX: 00007f06fd3e6090 RCX: 00007f06fd16aeb9 [ 592.510929][ T8310] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000005 [ 592.518937][ T8310] RBP: 00007f06fb3a5090 R08: 0000000000000000 R09: 0000000000000000 [ 592.526946][ T8310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.535070][ T8310] R13: 00007f06fd3e6128 R14: 00007f06fd3e6090 R15: 00007ffdeeef1ae8 [ 592.543097][ T8310] [ 592.558658][ T8314] CPU: 1 PID: 8314 Comm: syz.1.1388 Not tainted syzkaller #0 [ 592.566090][ T8314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.576177][ T8314] Call Trace: [ 592.579484][ T8314] [ 592.582446][ T8314] dump_stack_lvl+0x188/0x250 [ 592.587156][ T8314] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 592.593540][ T8314] ? show_regs_print_info+0x20/0x20 [ 592.598802][ T8314] ? dump_stack+0x5/0x20 [ 592.603087][ T8314] should_fail+0x38c/0x4c0 [ 592.607549][ T8314] should_failslab+0x5/0x20 [ 592.612085][ T8314] slab_pre_alloc_hook+0x51/0xc0 [ 592.617196][ T8314] kmem_cache_alloc_trace+0x47/0x2a0 [ 592.622514][ T8314] ? tipc_conn_alloc+0x57/0x4a0 [ 592.627419][ T8314] tipc_conn_alloc+0x57/0x4a0 [ 592.632126][ T8314] tipc_topsrv_kern_subscr+0xf5/0x250 [ 592.637530][ T8314] ? conn_put+0x310/0x310 [ 592.641912][ T8314] tipc_group_create+0x360/0x4f0 [ 592.646886][ T8314] tipc_sk_join+0x24f/0x6a0 [ 592.651425][ T8314] ? lockdep_hardirqs_on+0x94/0x140 [ 592.657028][ T8314] ? __local_bh_enable_ip+0x136/0x1c0 [ 592.662454][ T8314] ? __tipc_sendstream+0x1270/0x1270 [ 592.667794][ T8314] tipc_setsockopt+0x6bf/0x960 [ 592.672601][ T8314] ? tipc_shutdown+0x4d0/0x4d0 [ 592.677404][ T8314] ? aa_sock_opt_perm+0x74/0x100 [ 592.682377][ T8314] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 592.687963][ T8314] ? security_socket_setsockopt+0x7a/0xa0 [ 592.693729][ T8314] ? tipc_shutdown+0x4d0/0x4d0 [ 592.698538][ T8314] __sys_setsockopt+0x2bf/0x3d0 [ 592.703438][ T8314] __x64_sys_setsockopt+0xb1/0xc0 [ 592.708503][ T8314] do_syscall_64+0x4c/0xa0 [ 592.712949][ T8314] ? clear_bhb_loop+0x30/0x80 [ 592.717662][ T8314] ? clear_bhb_loop+0x30/0x80 [ 592.722400][ T8314] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 592.728330][ T8314] RIP: 0033:0x7f2ead2b4eb9 [ 592.732791][ T8314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.752436][ T8314] RSP: 002b:00007f2eab510028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 592.760894][ T8314] RAX: ffffffffffffffda RBX: 00007f2ead52ffa0 RCX: 00007f2ead2b4eb9 [ 592.768914][ T8314] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 592.776923][ T8314] RBP: 00007f2eab510090 R08: 00000000000004bd R09: 0000000000000000 [ 592.784936][ T8314] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 592.793032][ T8314] R13: 00007f2ead530038 R14: 00007f2ead52ffa0 R15: 00007fff23cc9718 [ 592.801066][ T8314] [ 592.854651][ T8310] Mem-Info: [ 592.857920][ T8310] active_anon:275 inactive_anon:15631 isolated_anon:0 [ 592.857920][ T8310] active_file:25865 inactive_file:36209 isolated_file:0 [ 592.857920][ T8310] unevictable:768 dirty:385 writeback:0 [ 592.857920][ T8310] slab_reclaimable:20300 slab_unreclaimable:94576 [ 592.857920][ T8310] mapped:39970 shmem:11602 pagetables:626 bounce:0 [ 592.857920][ T8310] kernel_misc_reclaimable:0 [ 592.857920][ T8310] free:1363940 free_pcp:6551 free_cma:0 [ 593.041457][ T8310] Node 0 active_anon:1068kB inactive_anon:63360kB active_file:103260kB inactive_file:144836kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160796kB dirty:1564kB writeback:0kB shmem:45316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11076kB pagetables:2644kB all_unreclaimable? no [ 593.074704][ T8310] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 593.106027][ T8310] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 593.282080][ T8310] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 593.294621][ T8310] Node 0 DMA32 free:1514800kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1068kB inactive_anon:64660kB active_file:103260kB inactive_file:144836kB unevictable:1536kB writepending:1564kB present:3129332kB managed:2606560kB mlocked:0kB bounce:0kB free_pcp:21996kB local_pcp:8376kB free_cma:0kB [ 593.447799][ T8310] lowmem_reserve[]: 0 0 0 0 0 [ 593.466820][ T8310] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 593.605837][ T8310] lowmem_reserve[]: 0 0 0 0 0 [ 593.638104][ T8310] Node 1 Normal free:3924256kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:3304kB local_pcp:1000kB free_cma:0kB [ 593.736193][ T8310] lowmem_reserve[]: 0 0 0 0 0 [ 593.753558][ T8310] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 593.798617][ T8310] Node 0 DMA32: 798*4kB (UM) 1411*8kB (UM) 1496*16kB (UME) 1204*32kB (UME) 1045*64kB (UME) 680*128kB (UME) 376*256kB (UM) 193*512kB (UME) 111*1024kB (UME) 43*2048kB (UM) 215*4096kB (M) = 1508304kB [ 593.888171][ T8310] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 593.948783][ T8310] Node 1 Normal: 136*4kB (UME) 44*8kB (UE) 32*16kB (UME) 191*32kB (UME) 85*64kB (UME) 23*128kB (UE) 11*256kB (UM) 4*512kB (UE) 0*1024kB 2*2048kB (UM) 952*4096kB (M) = 3924256kB [ 594.040858][ T8310] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 594.094180][ T8341] netlink: 'syz.1.1398': attribute type 10 has an invalid length. [ 594.121097][ T8310] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 594.192402][ T8310] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 594.212827][ T8310] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 594.233660][ T8310] 77484 total pagecache pages [ 594.271061][ T8310] 0 pages in swap cache [ 594.280795][ T8310] Swap cache stats: add 0, delete 0, find 0/0 [ 594.315152][ T8310] Free swap = 124996kB [ 594.319387][ T8310] Total swap = 124996kB [ 594.363341][ T8310] 2097051 pages RAM [ 594.380618][ T8310] 0 pages HighMem/MovableOnly [ 594.401211][ T8310] 411488 pages reserved [ 594.414359][ T8310] 0 pages cma reserved [ 594.598423][ T8349] netlink: 'syz.1.1412': attribute type 10 has an invalid length. [ 594.845326][ T8356] FAULT_INJECTION: forcing a failure. [ 594.845326][ T8356] name failslab, interval 1, probability 0, space 0, times 0 [ 594.915009][ T8356] CPU: 0 PID: 8356 Comm: syz.3.1403 Not tainted syzkaller #0 [ 594.922514][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 594.932615][ T8356] Call Trace: [ 594.936072][ T8356] [ 594.939033][ T8356] dump_stack_lvl+0x188/0x250 [ 594.943941][ T8356] ? show_regs_print_info+0x20/0x20 [ 594.949223][ T8356] ? load_image+0x400/0x400 [ 594.953775][ T8356] ? __might_sleep+0xf0/0xf0 [ 594.958415][ T8356] ? __lock_acquire+0x7d10/0x7d10 [ 594.963482][ T8356] ? netlink_insert+0xe95/0x11f0 [ 594.968475][ T8356] should_fail+0x38c/0x4c0 [ 594.972952][ T8356] should_failslab+0x5/0x20 [ 594.977491][ T8356] slab_pre_alloc_hook+0x51/0xc0 [ 594.982464][ T8356] kmem_cache_alloc_node+0x47/0x2d0 [ 594.987694][ T8356] ? __alloc_skb+0xf4/0x750 [ 594.992246][ T8356] __alloc_skb+0xf4/0x750 [ 594.996618][ T8356] netlink_sendmsg+0x654/0xbe0 [ 595.001467][ T8356] ? netlink_getsockopt+0x570/0x570 [ 595.006708][ T8356] ? aa_sock_msg_perm+0x94/0x150 [ 595.011689][ T8356] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 595.017015][ T8356] ? security_socket_sendmsg+0x7c/0xa0 [ 595.022508][ T8356] ? netlink_getsockopt+0x570/0x570 [ 595.027741][ T8356] ____sys_sendmsg+0x5b7/0x8f0 [ 595.032559][ T8356] ? __sys_sendmsg_sock+0x30/0x30 [ 595.037653][ T8356] ? import_iovec+0x6f/0xa0 [ 595.042200][ T8356] ___sys_sendmsg+0x236/0x2e0 [ 595.046924][ T8356] ? __sys_sendmsg+0x2a0/0x2a0 [ 595.051742][ T8356] ? trace_event_raw_event_lock+0x270/0x270 [ 595.057666][ T8356] ? vfs_write+0x8b2/0xd60 [ 595.062142][ T8356] __se_sys_sendmsg+0x1af/0x290 [ 595.067029][ T8356] ? __x64_sys_sendmsg+0x80/0x80 [ 595.071999][ T8356] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 595.078032][ T8356] ? lockdep_hardirqs_on+0x94/0x140 [ 595.083279][ T8356] do_syscall_64+0x4c/0xa0 [ 595.087730][ T8356] ? clear_bhb_loop+0x30/0x80 [ 595.092448][ T8356] ? clear_bhb_loop+0x30/0x80 [ 595.097182][ T8356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 595.103117][ T8356] RIP: 0033:0x7f06fd16aeb9 [ 595.107565][ T8356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.127215][ T8356] RSP: 002b:00007f06fb3a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.135676][ T8356] RAX: ffffffffffffffda RBX: 00007f06fd3e6090 RCX: 00007f06fd16aeb9 [ 595.135697][ T8356] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 595.135712][ T8356] RBP: 00007f06fb3a5090 R08: 0000000000000000 R09: 0000000000000000 [ 595.135727][ T8356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.135739][ T8356] R13: 00007f06fd3e6128 R14: 00007f06fd3e6090 R15: 00007ffdeeef1ae8 [ 595.135774][ T8356] [ 595.938243][ T8385] FAULT_INJECTION: forcing a failure. [ 595.938243][ T8385] name failslab, interval 1, probability 0, space 0, times 0 [ 596.040783][ T8385] CPU: 0 PID: 8385 Comm: syz.1.1414 Not tainted syzkaller #0 [ 596.048290][ T8385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 596.058405][ T8385] Call Trace: [ 596.061787][ T8385] [ 596.064770][ T8385] dump_stack_lvl+0x188/0x250 [ 596.069531][ T8385] ? show_regs_print_info+0x20/0x20 [ 596.074798][ T8385] ? load_image+0x400/0x400 [ 596.079487][ T8385] ? __might_sleep+0xf0/0xf0 [ 596.084156][ T8385] ? __lock_acquire+0x7d10/0x7d10 [ 596.089295][ T8385] should_fail+0x38c/0x4c0 [ 596.093838][ T8385] should_failslab+0x5/0x20 [ 596.098409][ T8385] slab_pre_alloc_hook+0x51/0xc0 [ 596.103445][ T8385] ? __alloc_file+0x25/0x240 [ 596.108135][ T8385] kmem_cache_alloc+0x3d/0x290 [ 596.112984][ T8385] __alloc_file+0x25/0x240 [ 596.117478][ T8385] alloc_empty_file+0x90/0x180 [ 596.122320][ T8385] path_openat+0x10f/0x2fa0 [ 596.126969][ T8385] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 596.132788][ T8385] ? do_filp_open+0x410/0x410 [ 596.137524][ T8385] ? perf_trace_lock+0x301/0x390 [ 596.142561][ T8385] ? trace_event_raw_event_lock+0x270/0x270 [ 596.148561][ T8385] do_filp_open+0x1e2/0x410 [ 596.153151][ T8385] ? vfs_tmpfile+0x300/0x300 [ 596.157883][ T8385] ? _raw_spin_unlock+0x24/0x40 [ 596.162808][ T8385] ? alloc_fd+0x598/0x630 [ 596.167228][ T8385] do_sys_openat2+0x150/0x4b0 [ 596.171954][ T8385] ? __lock_acquire+0x7d10/0x7d10 [ 596.177068][ T8385] ? do_sys_open+0xe0/0xe0 [ 596.181565][ T8385] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 596.187622][ T8385] ? lock_chain_count+0x20/0x20 [ 596.192581][ T8385] ? vtime_user_exit+0x2c8/0x3e0 [ 596.197601][ T8385] __x64_sys_openat+0x135/0x160 [ 596.202550][ T8385] do_syscall_64+0x4c/0xa0 [ 596.207023][ T8385] ? clear_bhb_loop+0x30/0x80 [ 596.211753][ T8385] ? clear_bhb_loop+0x30/0x80 [ 596.216493][ T8385] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 596.222466][ T8385] RIP: 0033:0x7f2ead2b4eb9 [ 596.226947][ T8385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.246735][ T8385] RSP: 002b:00007f2eab510028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 596.255335][ T8385] RAX: ffffffffffffffda RBX: 00007f2ead52ffa0 RCX: 00007f2ead2b4eb9 [ 596.263366][ T8385] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000004 [ 596.271390][ T8385] RBP: 00007f2eab510090 R08: 0000000000000000 R09: 0000000000000000 [ 596.279456][ T8385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.287502][ T8385] R13: 00007f2ead530038 R14: 00007f2ead52ffa0 R15: 00007fff23cc9718 [ 596.295609][ T8385] [ 597.255685][ T8408] netlink: 'syz.1.1424': attribute type 3 has an invalid length. [ 597.270186][ T8408] netlink: 'syz.1.1424': attribute type 1 has an invalid length. [ 597.278560][ T8408] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1424'. [ 597.296888][ T8407] netlink: 'syz.3.1423': attribute type 27 has an invalid length. [ 597.346111][ T8407] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1423'. [ 597.356418][ T8405] device syzkaller0 entered promiscuous mode [ 597.440396][ T8416] FAULT_INJECTION: forcing a failure. [ 597.440396][ T8416] name failslab, interval 1, probability 0, space 0, times 0 [ 597.469068][ T8416] CPU: 0 PID: 8416 Comm: syz.4.1426 Not tainted syzkaller #0 [ 597.476547][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 597.486642][ T8416] Call Trace: [ 597.489961][ T8416] [ 597.492928][ T8416] dump_stack_lvl+0x188/0x250 [ 597.497644][ T8416] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 597.503837][ T8416] ? show_regs_print_info+0x20/0x20 [ 597.509081][ T8416] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 597.515300][ T8416] should_fail+0x38c/0x4c0 [ 597.519797][ T8416] should_failslab+0x5/0x20 [ 597.524371][ T8416] slab_pre_alloc_hook+0x51/0xc0 [ 597.529527][ T8416] kmem_cache_alloc_node+0x47/0x2d0 [ 597.534936][ T8416] ? __alloc_skb+0xf4/0x750 [ 597.539483][ T8416] __alloc_skb+0xf4/0x750 [ 597.544030][ T8416] netlink_sendmsg+0x654/0xbe0 [ 597.548873][ T8416] ? netlink_getsockopt+0x570/0x570 [ 597.554113][ T8416] ? aa_sock_msg_perm+0x94/0x150 [ 597.559098][ T8416] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 597.564466][ T8416] ? security_socket_sendmsg+0x7c/0xa0 [ 597.569966][ T8416] ? netlink_getsockopt+0x570/0x570 [ 597.575204][ T8416] ____sys_sendmsg+0x5b7/0x8f0 [ 597.580017][ T8416] ? __sys_sendmsg_sock+0x30/0x30 [ 597.585251][ T8416] ? import_iovec+0x6f/0xa0 [ 597.589804][ T8416] ___sys_sendmsg+0x236/0x2e0 [ 597.594533][ T8416] ? __sys_sendmsg+0x2a0/0x2a0 [ 597.599354][ T8416] ? ktime_get_real_ts64+0x440/0x440 [ 597.604697][ T8416] __se_sys_sendmsg+0x1af/0x290 [ 597.609602][ T8416] ? __x64_sys_sendmsg+0x80/0x80 [ 597.614644][ T8416] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 597.620731][ T8416] ? lockdep_hardirqs_on+0x94/0x140 [ 597.625980][ T8416] do_syscall_64+0x4c/0xa0 [ 597.630472][ T8416] ? clear_bhb_loop+0x30/0x80 [ 597.635199][ T8416] ? clear_bhb_loop+0x30/0x80 [ 597.639912][ T8416] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 597.645843][ T8416] RIP: 0033:0x7f42b6b2ceb9 [ 597.650414][ T8416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.670051][ T8416] RSP: 002b:00007f42b4d88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.678513][ T8416] RAX: ffffffffffffffda RBX: 00007f42b6da7fa0 RCX: 00007f42b6b2ceb9 [ 597.686517][ T8416] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 597.694543][ T8416] RBP: 00007f42b4d88090 R08: 0000000000000000 R09: 0000000000000000 [ 597.702555][ T8416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.710559][ T8416] R13: 00007f42b6da8038 R14: 00007f42b6da7fa0 R15: 00007ffd3d41fc68 [ 597.718590][ T8416] [ 598.107420][ T8427] netlink: 'syz.1.1431': attribute type 10 has an invalid length. [ 599.276744][ T8450] netlink: 'syz.3.1450': attribute type 10 has an invalid length. [ 599.367985][ T8460] FAULT_INJECTION: forcing a failure. [ 599.367985][ T8460] name failslab, interval 1, probability 0, space 0, times 0 [ 599.462572][ T8462] FAULT_INJECTION: forcing a failure. [ 599.462572][ T8462] name failslab, interval 1, probability 0, space 0, times 0 [ 599.493123][ T8460] CPU: 0 PID: 8460 Comm: syz.0.1442 Not tainted syzkaller #0 [ 599.500612][ T8460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 599.510741][ T8460] Call Trace: [ 599.514082][ T8460] [ 599.517077][ T8460] dump_stack_lvl+0x188/0x250 [ 599.521872][ T8460] ? show_regs_print_info+0x20/0x20 [ 599.527165][ T8460] ? load_image+0x400/0x400 [ 599.531776][ T8460] ? __might_sleep+0xf0/0xf0 [ 599.536453][ T8460] ? __lock_acquire+0x7d10/0x7d10 [ 599.541554][ T8460] ? __mutex_lock_common+0x465/0x2400 [ 599.547027][ T8460] should_fail+0x38c/0x4c0 [ 599.551555][ T8460] should_failslab+0x5/0x20 [ 599.556129][ T8460] slab_pre_alloc_hook+0x51/0xc0 [ 599.561138][ T8460] ? sched_create_group+0x19/0x80 [ 599.566233][ T8460] kmem_cache_alloc+0x3d/0x290 [ 599.571110][ T8460] sched_create_group+0x19/0x80 [ 599.576058][ T8460] cpu_cgroup_css_alloc+0xa/0x30 [ 599.581066][ T8460] cgroup_apply_control_enable+0x3cc/0xb00 [ 599.587066][ T8460] cgroup_apply_control+0x98/0x720 [ 599.592278][ T8460] ? css_next_child+0x210/0x210 [ 599.597243][ T8460] ? css_next_child+0xb9/0x210 [ 599.602110][ T8460] ? css_next_descendant_pre+0x190/0x260 [ 599.607842][ T8460] ? cgroup_save_control+0x2d9/0x350 [ 599.613244][ T8460] cgroup_subtree_control_write+0xa93/0x1160 [ 599.619681][ T8460] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 599.626439][ T8460] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 599.632542][ T8460] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 599.638616][ T8460] cgroup_file_write+0x2c3/0x660 [ 599.643653][ T8460] ? read_lock_is_recursive+0x10/0x10 [ 599.649146][ T8460] ? cgroup_seqfile_stop+0xd0/0xd0 [ 599.654427][ T8460] ? cgroup_seqfile_stop+0xd0/0xd0 [ 599.659612][ T8460] kernfs_fop_write_iter+0x379/0x4c0 [ 599.665036][ T8460] vfs_write+0x745/0xd60 [ 599.669403][ T8460] ? file_end_write+0x250/0x250 [ 599.674379][ T8460] ? __fget_files+0x40f/0x480 [ 599.679189][ T8460] ? mutex_lock_nested+0x17/0x20 [ 599.684206][ T8460] ? __fdget_pos+0x2bf/0x370 [ 599.688887][ T8460] ? ksys_write+0x71/0x260 [ 599.693493][ T8460] ksys_write+0x152/0x260 [ 599.697936][ T8460] ? __ia32_sys_read+0x80/0x80 [ 599.702806][ T8460] ? lockdep_hardirqs_on+0x94/0x140 [ 599.708126][ T8460] do_syscall_64+0x4c/0xa0 [ 599.712612][ T8460] ? clear_bhb_loop+0x30/0x80 [ 599.717358][ T8460] ? clear_bhb_loop+0x30/0x80 [ 599.722133][ T8460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 599.728114][ T8460] RIP: 0033:0x7f7c66061eb9 [ 599.732611][ T8460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.752299][ T8460] RSP: 002b:00007f7c642bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 599.760800][ T8460] RAX: ffffffffffffffda RBX: 00007f7c662dcfa0 RCX: 00007f7c66061eb9 [ 599.768850][ T8460] RDX: 0000000000000005 RSI: 00002000000003c0 RDI: 0000000000000007 [ 599.776909][ T8460] RBP: 00007f7c642bd090 R08: 0000000000000000 R09: 0000000000000000 [ 599.785068][ T8460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.793116][ T8460] R13: 00007f7c662dd038 R14: 00007f7c662dcfa0 R15: 00007ffdd674f2a8 [ 599.801270][ T8460] [ 599.826326][ T8462] CPU: 0 PID: 8462 Comm: syz.2.1443 Not tainted syzkaller #0 [ 599.833890][ T8462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 599.843988][ T8462] Call Trace: [ 599.847316][ T8462] [ 599.850300][ T8462] dump_stack_lvl+0x188/0x250 [ 599.855042][ T8462] ? show_regs_print_info+0x20/0x20 [ 599.860346][ T8462] ? load_image+0x400/0x400 [ 599.864903][ T8462] ? __might_sleep+0xf0/0xf0 [ 599.869536][ T8462] ? __lock_acquire+0x7d10/0x7d10 [ 599.874592][ T8462] ? netlink_insert+0xe95/0x11f0 [ 599.879584][ T8462] should_fail+0x38c/0x4c0 [ 599.884071][ T8462] should_failslab+0x5/0x20 [ 599.888622][ T8462] slab_pre_alloc_hook+0x51/0xc0 [ 599.893603][ T8462] kmem_cache_alloc_node+0x47/0x2d0 [ 599.898829][ T8462] ? __alloc_skb+0xf4/0x750 [ 599.903387][ T8462] __alloc_skb+0xf4/0x750 [ 599.907776][ T8462] netlink_sendmsg+0x654/0xbe0 [ 599.912605][ T8462] ? netlink_getsockopt+0x570/0x570 [ 599.917846][ T8462] ? aa_sock_msg_perm+0x94/0x150 [ 599.922822][ T8462] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 599.928143][ T8462] ? security_socket_sendmsg+0x7c/0xa0 [ 599.933652][ T8462] ? netlink_getsockopt+0x570/0x570 [ 599.938899][ T8462] ____sys_sendmsg+0x5b7/0x8f0 [ 599.943749][ T8462] ? __sys_sendmsg_sock+0x30/0x30 [ 599.949092][ T8462] ? import_iovec+0x6f/0xa0 [ 599.953655][ T8462] ___sys_sendmsg+0x236/0x2e0 [ 599.958419][ T8462] ? __sys_sendmsg+0x2a0/0x2a0 [ 599.963265][ T8462] ? trace_event_raw_event_lock+0x270/0x270 [ 599.969199][ T8462] ? vfs_write+0x8b2/0xd60 [ 599.973759][ T8462] __se_sys_sendmsg+0x1af/0x290 [ 599.978671][ T8462] ? __x64_sys_sendmsg+0x80/0x80 [ 599.983635][ T8462] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 599.989683][ T8462] ? lockdep_hardirqs_on+0x94/0x140 [ 599.994938][ T8462] do_syscall_64+0x4c/0xa0 [ 599.999397][ T8462] ? clear_bhb_loop+0x30/0x80 [ 600.004109][ T8462] ? clear_bhb_loop+0x30/0x80 [ 600.008837][ T8462] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 600.014761][ T8462] RIP: 0033:0x7f7e524e5eb9 [ 600.019225][ T8462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.038869][ T8462] RSP: 002b:00007f7e50741028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.047328][ T8462] RAX: ffffffffffffffda RBX: 00007f7e52760fa0 RCX: 00007f7e524e5eb9 [ 600.055340][ T8462] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 600.063441][ T8462] RBP: 00007f7e50741090 R08: 0000000000000000 R09: 0000000000000000 [ 600.071443][ T8462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.079453][ T8462] R13: 00007f7e52761038 R14: 00007f7e52760fa0 R15: 00007ffeb4380738 [ 600.087494][ T8462] [ 600.273674][ T8466] netlink: 'syz.3.1444': attribute type 10 has an invalid length. [ 600.863702][ T8486] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1455'. [ 601.237404][ T8503] FAULT_INJECTION: forcing a failure. [ 601.237404][ T8503] name failslab, interval 1, probability 0, space 0, times 0 [ 601.264092][ T8503] CPU: 0 PID: 8503 Comm: syz.1.1470 Not tainted syzkaller #0 [ 601.271622][ T8503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 601.281727][ T8503] Call Trace: [ 601.285057][ T8503] [ 601.288039][ T8503] dump_stack_lvl+0x188/0x250 [ 601.292770][ T8503] ? show_regs_print_info+0x20/0x20 [ 601.294429][ T8505] netlink: 'syz.4.1460': attribute type 10 has an invalid length. [ 601.298026][ T8503] ? load_image+0x400/0x400 [ 601.298064][ T8503] ? __might_sleep+0xf0/0xf0 [ 601.298087][ T8503] ? __lock_acquire+0x7d10/0x7d10 [ 601.298111][ T8503] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 601.298142][ T8503] should_fail+0x38c/0x4c0 [ 601.298173][ T8503] should_failslab+0x5/0x20 [ 601.335127][ T8503] slab_pre_alloc_hook+0x51/0xc0 [ 601.340118][ T8503] kmem_cache_alloc_node+0x47/0x2d0 [ 601.345351][ T8503] ? __alloc_skb+0xf4/0x750 [ 601.349898][ T8503] __alloc_skb+0xf4/0x750 [ 601.354273][ T8503] netlink_sendmsg+0x654/0xbe0 [ 601.359092][ T8503] ? netlink_getsockopt+0x570/0x570 [ 601.364326][ T8503] ? __sanitizer_cov_trace_pc+0x13/0x60 [ 601.369914][ T8503] ? aa_sock_msg_perm+0x94/0x150 [ 601.374890][ T8503] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 601.380217][ T8503] ? security_socket_sendmsg+0x7c/0xa0 [ 601.385721][ T8503] ? netlink_getsockopt+0x570/0x570 [ 601.390944][ T8503] ____sys_sendmsg+0x5b7/0x8f0 [ 601.395735][ T8503] ? __sys_sendmsg_sock+0x30/0x30 [ 601.400787][ T8503] ? import_iovec+0x6f/0xa0 [ 601.405315][ T8503] ___sys_sendmsg+0x236/0x2e0 [ 601.410021][ T8503] ? __sys_sendmsg+0x2a0/0x2a0 [ 601.414813][ T8503] ? ktime_get_real_ts64+0x440/0x440 [ 601.420341][ T8503] __se_sys_sendmsg+0x1af/0x290 [ 601.425215][ T8503] ? __x64_sys_sendmsg+0x80/0x80 [ 601.430174][ T8503] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 601.436186][ T8503] ? lockdep_hardirqs_on+0x94/0x140 [ 601.441399][ T8503] do_syscall_64+0x4c/0xa0 [ 601.445829][ T8503] ? clear_bhb_loop+0x30/0x80 [ 601.450522][ T8503] ? clear_bhb_loop+0x30/0x80 [ 601.455216][ T8503] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 601.461127][ T8503] RIP: 0033:0x7f2ead2b4eb9 [ 601.465559][ T8503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.485187][ T8503] RSP: 002b:00007f2eab510028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.493622][ T8503] RAX: ffffffffffffffda RBX: 00007f2ead52ffa0 RCX: 00007f2ead2b4eb9 [ 601.501805][ T8503] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 601.509791][ T8503] RBP: 00007f2eab510090 R08: 0000000000000000 R09: 0000000000000000 [ 601.517775][ T8503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.525762][ T8503] R13: 00007f2ead530038 R14: 00007f2ead52ffa0 R15: 00007fff23cc9718 [ 601.533759][ T8503] [ 601.621477][ T8508] netlink: 123072 bytes leftover after parsing attributes in process `syz.3.1463'. [ 601.719548][ T8508] netlink: 'syz.3.1463': attribute type 10 has an invalid length. [ 601.937371][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.965035][ T8508] device bridge_slave_1 left promiscuous mode [ 601.983057][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.393775][ T8508] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 602.422074][ T8517] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1463'. [ 603.016401][ T8557] FAULT_INJECTION: forcing a failure. [ 603.016401][ T8557] name failslab, interval 1, probability 0, space 0, times 0 [ 603.051981][ T8557] CPU: 0 PID: 8557 Comm: syz.0.1477 Not tainted syzkaller #0 [ 603.059444][ T8557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 603.069541][ T8557] Call Trace: [ 603.072892][ T8557] [ 603.075867][ T8557] dump_stack_lvl+0x188/0x250 [ 603.081141][ T8557] ? show_regs_print_info+0x20/0x20 [ 603.086373][ T8557] ? load_image+0x400/0x400 [ 603.090910][ T8557] ? __might_sleep+0xf0/0xf0 [ 603.095670][ T8557] ? __lock_acquire+0x7d10/0x7d10 [ 603.100776][ T8557] should_fail+0x38c/0x4c0 [ 603.105219][ T8557] should_failslab+0x5/0x20 [ 603.109737][ T8557] slab_pre_alloc_hook+0x51/0xc0 [ 603.114696][ T8557] ? __alloc_file+0x25/0x240 [ 603.119307][ T8557] kmem_cache_alloc+0x3d/0x290 [ 603.124101][ T8557] __alloc_file+0x25/0x240 [ 603.128546][ T8557] alloc_empty_file+0x90/0x180 [ 603.133333][ T8557] path_openat+0x10f/0x2fa0 [ 603.137876][ T8557] ? perf_trace_lock+0xe4/0x390 [ 603.142751][ T8557] ? __x64_sys_openat+0x135/0x160 [ 603.147797][ T8557] ? do_filp_open+0x410/0x410 [ 603.152496][ T8557] ? perf_trace_lock+0xe4/0x390 [ 603.157372][ T8557] ? trace_event_raw_event_lock+0x270/0x270 [ 603.163290][ T8557] do_filp_open+0x1e2/0x410 [ 603.167819][ T8557] ? vfs_tmpfile+0x300/0x300 [ 603.172443][ T8557] ? _raw_spin_unlock+0x24/0x40 [ 603.177310][ T8557] ? alloc_fd+0x598/0x630 [ 603.181667][ T8557] do_sys_openat2+0x150/0x4b0 [ 603.186360][ T8557] ? __lock_acquire+0x7d10/0x7d10 [ 603.191406][ T8557] ? do_sys_open+0xe0/0xe0 [ 603.195870][ T8557] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 603.201877][ T8557] ? lock_chain_count+0x20/0x20 [ 603.206778][ T8557] ? vtime_user_exit+0x2c8/0x3e0 [ 603.211904][ T8557] __x64_sys_openat+0x135/0x160 [ 603.216802][ T8557] do_syscall_64+0x4c/0xa0 [ 603.221263][ T8557] ? clear_bhb_loop+0x30/0x80 [ 603.226419][ T8557] ? clear_bhb_loop+0x30/0x80 [ 603.231133][ T8557] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 603.237065][ T8557] RIP: 0033:0x7f7c66061eb9 [ 603.241521][ T8557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.261171][ T8557] RSP: 002b:00007f7c6429c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 603.269617][ T8557] RAX: ffffffffffffffda RBX: 00007f7c662dd090 RCX: 00007f7c66061eb9 [ 603.277607][ T8557] RDX: 000000000000275a RSI: 0000200000000280 RDI: 000000000000000b [ 603.285603][ T8557] RBP: 00007f7c6429c090 R08: 0000000000000000 R09: 0000000000000000 [ 603.293621][ T8557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.301613][ T8557] R13: 00007f7c662dd128 R14: 00007f7c662dd090 R15: 00007ffdd674f2a8 [ 603.309619][ T8557] [ 603.492606][ T8570] netlink: 'syz.1.1482': attribute type 10 has an invalid length. [ 603.530661][ T8570] team0: Port device geneve1 added [ 603.556531][ T8569] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1483'. [ 604.253146][ T8569] netlink: 'syz.0.1483': attribute type 4 has an invalid length. [ 604.397227][ T8576] netlink: 'syz.2.1485': attribute type 10 has an invalid length. [ 604.420549][ T8576] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.451497][ T8576] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.497643][ T8576] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.520058][ T8585] FAULT_INJECTION: forcing a failure. [ 604.520058][ T8585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.525079][ T8576] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.558584][ T8585] CPU: 0 PID: 8585 Comm: syz.4.1489 Not tainted syzkaller #0 [ 604.566037][ T8585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 604.576132][ T8585] Call Trace: [ 604.579484][ T8585] [ 604.582450][ T8585] dump_stack_lvl+0x188/0x250 [ 604.587231][ T8585] ? show_regs_print_info+0x20/0x20 [ 604.592466][ T8585] ? load_image+0x400/0x400 [ 604.597076][ T8585] should_fail+0x38c/0x4c0 [ 604.601543][ T8585] _copy_to_user+0x2e/0x130 [ 604.606090][ T8585] simple_read_from_buffer+0xe3/0x150 [ 604.611519][ T8585] proc_fail_nth_read+0x1a6/0x220 [ 604.616677][ T8585] ? proc_fault_inject_write+0x310/0x310 [ 604.622496][ T8585] ? fsnotify_perm+0x254/0x560 [ 604.627312][ T8585] ? proc_fault_inject_write+0x310/0x310 [ 604.633009][ T8585] vfs_read+0x301/0xd60 [ 604.637217][ T8585] ? kernel_read+0x1e0/0x1e0 [ 604.641864][ T8585] ? __fget_files+0x40f/0x480 [ 604.646589][ T8585] ? mutex_lock_nested+0x17/0x20 [ 604.651569][ T8585] ? __fdget_pos+0x2bf/0x370 [ 604.656192][ T8585] ? ksys_read+0x71/0x260 [ 604.660567][ T8585] ksys_read+0x152/0x260 [ 604.664851][ T8585] ? vfs_write+0xd60/0xd60 [ 604.669313][ T8585] ? syscall_enter_from_user_mode+0x2a/0x70 [ 604.675260][ T8585] do_syscall_64+0x4c/0xa0 [ 604.679740][ T8585] ? clear_bhb_loop+0x30/0x80 [ 604.684463][ T8585] ? clear_bhb_loop+0x30/0x80 [ 604.689298][ T8585] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 604.695252][ T8585] RIP: 0033:0x7f42b6aed78e [ 604.699703][ T8585] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 604.719347][ T8585] RSP: 002b:00007f42b4d87fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 604.727807][ T8585] RAX: ffffffffffffffda RBX: 00007f42b4d886c0 RCX: 00007f42b6aed78e [ 604.735823][ T8585] RDX: 000000000000000f RSI: 00007f42b4d880a0 RDI: 0000000000000006 [ 604.743833][ T8585] RBP: 00007f42b4d88090 R08: 0000000000000000 R09: 0000000000000000 [ 604.751837][ T8585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.759847][ T8585] R13: 00007f42b6da8038 R14: 00007f42b6da7fa0 R15: 00007ffd3d41fc68 [ 604.767873][ T8585] [ 604.782128][ T8588] FAULT_INJECTION: forcing a failure. [ 604.782128][ T8588] name failslab, interval 1, probability 0, space 0, times 0 [ 604.799416][ T8588] CPU: 1 PID: 8588 Comm: syz.3.1490 Not tainted syzkaller #0 [ 604.806873][ T8588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 604.816971][ T8588] Call Trace: [ 604.820300][ T8588] [ 604.823268][ T8588] dump_stack_lvl+0x188/0x250 [ 604.827985][ T8588] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 604.834195][ T8588] ? show_regs_print_info+0x20/0x20 [ 604.839442][ T8588] ? load_image+0x400/0x400 [ 604.843999][ T8588] should_fail+0x38c/0x4c0 [ 604.848466][ T8588] should_failslab+0x5/0x20 [ 604.853021][ T8588] slab_pre_alloc_hook+0x51/0xc0 [ 604.858010][ T8588] kmem_cache_alloc_node+0x47/0x2d0 [ 604.863254][ T8588] ? __alloc_skb+0xf4/0x750 [ 604.867809][ T8588] __alloc_skb+0xf4/0x750 [ 604.872193][ T8588] alloc_skb_with_frags+0xa7/0x730 [ 604.877356][ T8588] sock_alloc_send_pskb+0x87f/0x9a0 [ 604.882620][ T8588] ? sock_kzfree_s+0x50/0x50 [ 604.887250][ T8588] ? qrtr_tx_wait+0x720/0x720 [ 604.892011][ T8588] ? __local_bh_enable_ip+0x136/0x1c0 [ 604.897434][ T8588] ? _local_bh_enable+0xa0/0xa0 [ 604.902371][ T8588] ? do_raw_spin_lock+0x8/0x2f0 [ 604.907274][ T8588] qrtr_sendmsg+0x4d6/0x860 [ 604.911817][ T8588] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 604.918018][ T8588] ? qrtr_port_remove+0x450/0x450 [ 604.923089][ T8588] ? qrtr_ioctl+0x3d0/0x3d0 [ 604.927641][ T8588] ? qrtr_ioctl+0x3d0/0x3d0 [ 604.932190][ T8588] ____sys_sendmsg+0x5b7/0x8f0 [ 604.937007][ T8588] ? __sys_sendmsg_sock+0x30/0x30 [ 604.942082][ T8588] ? import_iovec+0x6f/0xa0 [ 604.946633][ T8588] ___sys_sendmsg+0x236/0x2e0 [ 604.951362][ T8588] ? __sys_sendmsg+0x2a0/0x2a0 [ 604.956177][ T8588] ? ktime_get_real_ts64+0x440/0x440 [ 604.961517][ T8588] __se_sys_sendmsg+0x1af/0x290 [ 604.966416][ T8588] ? __x64_sys_sendmsg+0x80/0x80 [ 604.971443][ T8588] ? syscall_enter_from_user_mode+0x2a/0x70 [ 604.977391][ T8588] do_syscall_64+0x4c/0xa0 [ 604.981868][ T8588] ? clear_bhb_loop+0x30/0x80 [ 604.986587][ T8588] ? clear_bhb_loop+0x30/0x80 [ 604.991314][ T8588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 604.997248][ T8588] RIP: 0033:0x7f06fd16aeb9 [ 605.001713][ T8588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.021356][ T8588] RSP: 002b:00007f06fb3c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.029857][ T8588] RAX: ffffffffffffffda RBX: 00007f06fd3e5fa0 RCX: 00007f06fd16aeb9 [ 605.037878][ T8588] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000005 [ 605.045895][ T8588] RBP: 00007f06fb3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 605.053906][ T8588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.061919][ T8588] R13: 00007f06fd3e6038 R14: 00007f06fd3e5fa0 R15: 00007ffdeeef1ae8 [ 605.069989][ T8588] [ 605.161846][ T8582] netlink: 'syz.0.1487': attribute type 10 has an invalid length. [ 605.186773][ T8589] netlink: 'syz.3.1490': attribute type 10 has an invalid length. [ 605.225889][ T8589] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.295227][ T8589] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.323981][ T8589] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.339215][ T8589] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.366344][ T8589] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.400670][ T8589] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.410179][ T8589] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.418991][ T8589] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.437939][ T8589] team0: Port device geneve1 added [ 606.381022][ T8614] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1498'. [ 606.406457][ T8621] netlink: 'syz.3.1498': attribute type 4 has an invalid length. [ 606.627744][ T8635] netlink: 'syz.1.1506': attribute type 22 has an invalid length. [ 606.646954][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1506'. [ 606.746202][ T8643] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1505'. [ 606.885103][ T8634] netlink: 'syz.3.1505': attribute type 4 has an invalid length. [ 607.054043][ T8656] FAULT_INJECTION: forcing a failure. [ 607.054043][ T8656] name failslab, interval 1, probability 0, space 0, times 0 [ 607.104006][ T8656] CPU: 0 PID: 8656 Comm: syz.4.1514 Not tainted syzkaller #0 [ 607.111454][ T8656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 607.121554][ T8656] Call Trace: [ 607.124907][ T8656] [ 607.127875][ T8656] dump_stack_lvl+0x188/0x250 [ 607.132601][ T8656] ? show_regs_print_info+0x20/0x20 [ 607.137841][ T8656] ? load_image+0x400/0x400 [ 607.142418][ T8656] ? __might_sleep+0xf0/0xf0 [ 607.147042][ T8656] ? __lock_acquire+0x7d10/0x7d10 [ 607.152241][ T8656] should_fail+0x38c/0x4c0 [ 607.156723][ T8656] should_failslab+0x5/0x20 [ 607.161274][ T8656] slab_pre_alloc_hook+0x51/0xc0 [ 607.166314][ T8656] kmem_cache_alloc_node_trace+0x4a/0x300 [ 607.172075][ T8656] ? __get_vm_area_node+0x119/0x2d0 [ 607.177331][ T8656] __get_vm_area_node+0x119/0x2d0 [ 607.182407][ T8656] __vmalloc_node_range+0xef/0x8b0 [ 607.187562][ T8656] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 607.193145][ T8656] ? end_current_label_crit_section+0x170/0x170 [ 607.199420][ T8656] ? __lock_acquire+0x7d10/0x7d10 [ 607.204487][ T8656] ? __lock_acquire+0x13bc/0x7d10 [ 607.209568][ T8656] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 607.215152][ T8656] __vmalloc+0x76/0x80 [ 607.219263][ T8656] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 607.224865][ T8656] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 607.230280][ T8656] bpf_prog_alloc+0x1a/0x1e0 [ 607.234916][ T8656] bpf_prog_load+0x7c6/0x1510 [ 607.239661][ T8656] ? map_freeze+0x350/0x350 [ 607.244214][ T8656] ? __might_fault+0xb7/0x110 [ 607.248957][ T8656] ? __might_fault+0xb3/0x110 [ 607.253680][ T8656] ? bpf_lsm_bpf+0x5/0x10 [ 607.258048][ T8656] ? security_bpf+0x7a/0xa0 [ 607.262612][ T8656] __sys_bpf+0x532/0x6f0 [ 607.266924][ T8656] ? bpf_link_show_fdinfo+0x380/0x380 [ 607.272370][ T8656] ? vtime_user_exit+0x2c8/0x3e0 [ 607.277371][ T8656] __x64_sys_bpf+0x78/0x90 [ 607.281860][ T8656] do_syscall_64+0x4c/0xa0 [ 607.286319][ T8656] ? clear_bhb_loop+0x30/0x80 [ 607.291050][ T8656] ? clear_bhb_loop+0x30/0x80 [ 607.295781][ T8656] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 607.301726][ T8656] RIP: 0033:0x7f42b6b2ceb9 [ 607.306196][ T8656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.325848][ T8656] RSP: 002b:00007f42b4d88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 607.334321][ T8656] RAX: ffffffffffffffda RBX: 00007f42b6da7fa0 RCX: 00007f42b6b2ceb9 [ 607.342341][ T8656] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000005 [ 607.350351][ T8656] RBP: 00007f42b4d88090 R08: 0000000000000000 R09: 0000000000000000 [ 607.358369][ T8656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.366380][ T8656] R13: 00007f42b6da8038 R14: 00007f42b6da7fa0 R15: 00007ffd3d41fc68 [ 607.374455][ T8656] [ 607.549234][ T8656] syz.4.1514: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 607.566255][ T8656] CPU: 0 PID: 8656 Comm: syz.4.1514 Not tainted syzkaller #0 [ 607.573669][ T8656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 607.583764][ T8656] Call Trace: [ 607.587115][ T8656] [ 607.590098][ T8656] dump_stack_lvl+0x188/0x250 [ 607.594812][ T8656] ? rcu_lock_release+0x5/0x20 [ 607.599611][ T8656] ? show_regs_print_info+0x20/0x20 [ 607.604853][ T8656] ? load_image+0x400/0x400 [ 607.609409][ T8656] warn_alloc+0x243/0x320 [ 607.613817][ T8656] ? zone_watermark_ok_safe+0x240/0x240 [ 607.619413][ T8656] ? __get_vm_area_node+0x2b5/0x2d0 [ 607.624668][ T8656] __vmalloc_node_range+0x2b1/0x8b0 [ 607.629911][ T8656] ? end_current_label_crit_section+0x170/0x170 [ 607.636199][ T8656] ? __lock_acquire+0x7d10/0x7d10 [ 607.641274][ T8656] ? __lock_acquire+0x13bc/0x7d10 [ 607.646344][ T8656] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 607.651930][ T8656] __vmalloc+0x76/0x80 [ 607.656037][ T8656] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 607.661625][ T8656] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 607.667086][ T8656] bpf_prog_alloc+0x1a/0x1e0 [ 607.671719][ T8656] bpf_prog_load+0x7c6/0x1510 [ 607.676438][ T8656] ? map_freeze+0x350/0x350 [ 607.680979][ T8656] ? __might_fault+0xb7/0x110 [ 607.685712][ T8656] ? __might_fault+0xb3/0x110 [ 607.690495][ T8656] ? bpf_lsm_bpf+0x5/0x10 [ 607.694889][ T8656] ? security_bpf+0x7a/0xa0 [ 607.699442][ T8656] __sys_bpf+0x532/0x6f0 [ 607.703719][ T8656] ? bpf_link_show_fdinfo+0x380/0x380 [ 607.709137][ T8656] ? vtime_user_exit+0x2c8/0x3e0 [ 607.714118][ T8656] __x64_sys_bpf+0x78/0x90 [ 607.718574][ T8656] do_syscall_64+0x4c/0xa0 [ 607.723036][ T8656] ? clear_bhb_loop+0x30/0x80 [ 607.727745][ T8656] ? clear_bhb_loop+0x30/0x80 [ 607.732458][ T8656] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 607.738394][ T8656] RIP: 0033:0x7f42b6b2ceb9 [ 607.742842][ T8656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.762601][ T8656] RSP: 002b:00007f42b4d88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 607.771144][ T8656] RAX: ffffffffffffffda RBX: 00007f42b6da7fa0 RCX: 00007f42b6b2ceb9 [ 607.779224][ T8656] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000005 [ 607.787254][ T8656] RBP: 00007f42b4d88090 R08: 0000000000000000 R09: 0000000000000000 [ 607.795261][ T8656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.803271][ T8656] R13: 00007f42b6da8038 R14: 00007f42b6da7fa0 R15: 00007ffd3d41fc68 [ 607.811341][ T8656] [ 607.832501][ T8656] Mem-Info: [ 607.835881][ T8656] active_anon:273 inactive_anon:5705 isolated_anon:0 [ 607.835881][ T8656] active_file:25920 inactive_file:36200 isolated_file:0 [ 607.835881][ T8656] unevictable:768 dirty:403 writeback:0 [ 607.835881][ T8656] slab_reclaimable:20291 slab_unreclaimable:93252 [ 607.835881][ T8656] mapped:30349 shmem:1629 pagetables:658 bounce:0 [ 607.835881][ T8656] kernel_misc_reclaimable:0 [ 607.835881][ T8656] free:1370246 free_pcp:11487 free_cma:0 [ 607.887998][ T8656] Node 0 active_anon:1060kB inactive_anon:22312kB active_file:103480kB inactive_file:144800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121396kB dirty:1612kB writeback:0kB shmem:4440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11092kB pagetables:2632kB all_unreclaimable? no [ 607.934147][ T8656] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 607.994398][ T8665] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1516'. [ 608.041003][ T8656] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 608.076290][ T8668] netlink: 'syz.2.1516': attribute type 4 has an invalid length. [ 608.091445][ T8673] FAULT_INJECTION: forcing a failure. [ 608.091445][ T8673] name failslab, interval 1, probability 0, space 0, times 0 [ 608.119496][ T8673] CPU: 0 PID: 8673 Comm: syz.3.1520 Not tainted syzkaller #0 [ 608.126949][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 608.137030][ T8673] Call Trace: [ 608.140367][ T8673] [ 608.143316][ T8673] dump_stack_lvl+0x188/0x250 [ 608.148020][ T8673] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 608.154202][ T8673] ? show_regs_print_info+0x20/0x20 [ 608.159425][ T8673] ? load_image+0x400/0x400 [ 608.163963][ T8673] should_fail+0x38c/0x4c0 [ 608.168410][ T8673] should_failslab+0x5/0x20 [ 608.172933][ T8673] slab_pre_alloc_hook+0x51/0xc0 [ 608.177888][ T8673] kmem_cache_alloc_trace+0x47/0x2a0 [ 608.183188][ T8673] ? btf_new_fd+0x1a0/0x910 [ 608.187828][ T8673] btf_new_fd+0x1a0/0x910 [ 608.192207][ T8673] __sys_bpf+0x58c/0x6f0 [ 608.196578][ T8673] ? bpf_link_show_fdinfo+0x380/0x380 [ 608.202013][ T8673] __x64_sys_bpf+0x78/0x90 [ 608.206452][ T8673] do_syscall_64+0x4c/0xa0 [ 608.211029][ T8673] ? clear_bhb_loop+0x30/0x80 [ 608.215744][ T8673] ? clear_bhb_loop+0x30/0x80 [ 608.220485][ T8673] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 608.226405][ T8673] RIP: 0033:0x7f06fd16aeb9 [ 608.230846][ T8673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.250564][ T8673] RSP: 002b:00007f06fb3c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 608.259002][ T8673] RAX: ffffffffffffffda RBX: 00007f06fd3e5fa0 RCX: 00007f06fd16aeb9 [ 608.266990][ T8673] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 608.274976][ T8673] RBP: 00007f06fb3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 608.282968][ T8673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.290949][ T8673] R13: 00007f06fd3e6038 R14: 00007f06fd3e5fa0 R15: 00007ffdeeef1ae8 [ 608.298952][ T8673] [ 608.316590][ T8656] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 608.322436][ T8656] Node 0 DMA32 free:1543216kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1060kB inactive_anon:22112kB active_file:103480kB inactive_file:144800kB unevictable:1536kB writepending:1612kB present:3129332kB managed:2606560kB mlocked:0kB bounce:0kB free_pcp:42504kB local_pcp:21212kB free_cma:0kB [ 608.367450][ T8656] lowmem_reserve[]: 0 0 0 0 0 [ 608.372250][ T8656] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 608.421205][ T8656] lowmem_reserve[]: 0 0 0 0 0 [ 608.431354][ T8656] Node 1 Normal free:3924256kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:3304kB local_pcp:2304kB free_cma:0kB [ 608.467268][ T8656] lowmem_reserve[]: 0 0 0 0 0 [ 608.472362][ T8656] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 608.490979][ T8656] Node 0 DMA32: 2280*4kB (UME) 1661*8kB (UME) 2800*16kB (UME) 1437*32kB (UME) 903*64kB (UME) 644*128kB (UME) 347*256kB (UM) 173*512kB (UME) 93*1024kB (UME) 41*2048kB (UM) 228*4096kB (M) = 1543912kB [ 608.521283][ T8656] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 608.551505][ T8656] Node 1 Normal: 136*4kB (UME) 44*8kB (UE) 32*16kB (UME) 191*32kB (UME) 85*64kB (UME) 23*128kB (UE) 11*256kB (UM) 4*512kB (UE) 0*1024kB 2*2048kB (UM) 952*4096kB (M) = 3924256kB [ 608.574231][ T8656] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 608.598431][ T8656] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 608.664357][ T8656] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 608.713181][ T8656] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 608.752005][ T8656] 63749 total pagecache pages [ 608.778629][ T8656] 0 pages in swap cache [ 608.787651][ T8656] Swap cache stats: add 0, delete 0, find 0/0 [ 608.803269][ T8656] Free swap = 124996kB [ 608.809990][ T8656] Total swap = 124996kB [ 608.822417][ T8656] 2097051 pages RAM [ 608.826476][ T8656] 0 pages HighMem/MovableOnly [ 608.831189][ T8656] 411488 pages reserved [ 608.842503][ T8656] 0 pages cma reserved [ 609.001319][ T8700] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1527'. [ 609.089933][ T8696] netlink: 'syz.1.1527': attribute type 4 has an invalid length. [ 609.424214][ T8715] FAULT_INJECTION: forcing a failure. [ 609.424214][ T8715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.454169][ T8715] CPU: 0 PID: 8715 Comm: syz.4.1535 Not tainted syzkaller #0 [ 609.461618][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 609.472076][ T8715] Call Trace: [ 609.475399][ T8715] [ 609.478368][ T8715] dump_stack_lvl+0x188/0x250 [ 609.483106][ T8715] ? show_regs_print_info+0x20/0x20 [ 609.488369][ T8715] ? load_image+0x400/0x400 [ 609.492938][ T8715] ? __lock_acquire+0x7d10/0x7d10 [ 609.498039][ T8715] should_fail+0x38c/0x4c0 [ 609.502513][ T8715] _copy_to_user+0x2e/0x130 [ 609.507060][ T8715] simple_read_from_buffer+0xe3/0x150 [ 609.512489][ T8715] proc_fail_nth_read+0x1a6/0x220 [ 609.517567][ T8715] ? proc_fault_inject_write+0x310/0x310 [ 609.523253][ T8715] ? fsnotify_perm+0x254/0x560 [ 609.528067][ T8715] ? proc_fault_inject_write+0x310/0x310 [ 609.533766][ T8715] vfs_read+0x301/0xd60 [ 609.537973][ T8715] ? kernel_read+0x1e0/0x1e0 [ 609.542607][ T8715] ? __fget_files+0x40f/0x480 [ 609.547344][ T8715] ? mutex_lock_nested+0x17/0x20 [ 609.552337][ T8715] ? __fdget_pos+0x2bf/0x370 [ 609.556961][ T8715] ? ksys_read+0x71/0x260 [ 609.561339][ T8715] ksys_read+0x152/0x260 [ 609.565632][ T8715] ? vfs_write+0xd60/0xd60 [ 609.570128][ T8715] ? lockdep_hardirqs_on+0x94/0x140 [ 609.575389][ T8715] do_syscall_64+0x4c/0xa0 [ 609.579851][ T8715] ? clear_bhb_loop+0x30/0x80 [ 609.584575][ T8715] ? clear_bhb_loop+0x30/0x80 [ 609.589298][ T8715] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 609.595238][ T8715] RIP: 0033:0x7f42b6aed78e [ 609.599690][ T8715] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 609.619486][ T8715] RSP: 002b:00007f42b4d87fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 609.627947][ T8715] RAX: ffffffffffffffda RBX: 00007f42b4d886c0 RCX: 00007f42b6aed78e [ 609.635957][ T8715] RDX: 000000000000000f RSI: 00007f42b4d880a0 RDI: 0000000000000004 [ 609.643968][ T8715] RBP: 00007f42b4d88090 R08: 0000000000000000 R09: 0000000000000000 [ 609.651978][ T8715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.660071][ T8715] R13: 00007f42b6da8038 R14: 00007f42b6da7fa0 R15: 00007ffd3d41fc68 [ 609.668142][ T8715] [ 609.709512][ T8717] netlink: 123072 bytes leftover after parsing attributes in process `syz.1.1536'. [ 609.841614][ T8718] netlink: 'syz.1.1536': attribute type 10 has an invalid length. [ 612.208666][ T8718] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.277116][ T8718] device bridge_slave_1 left promiscuous mode [ 612.283428][ T8718] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.309493][ T8718] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 612.325789][ T8719] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1536'. [ 612.683525][ T8753] netlink: 'syz.2.1547': attribute type 1 has an invalid length. [ 612.726506][ T8753] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.1547'. [ 612.737320][ T8752] netlink: 'syz.3.1546': attribute type 10 has an invalid length. [ 612.821662][ T8761] FAULT_INJECTION: forcing a failure. [ 612.821662][ T8761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.878056][ T8761] CPU: 0 PID: 8761 Comm: syz.1.1550 Not tainted syzkaller #0 [ 612.885509][ T8761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.895612][ T8761] Call Trace: [ 612.898933][ T8761] [ 612.901901][ T8761] dump_stack_lvl+0x188/0x250 [ 612.906625][ T8761] ? show_regs_print_info+0x20/0x20 [ 612.911867][ T8761] ? load_image+0x400/0x400 [ 612.916420][ T8761] ? __lock_acquire+0x7d10/0x7d10 [ 612.921484][ T8761] ? __alloc_skb+0x473/0x750 [ 612.926128][ T8761] should_fail+0x38c/0x4c0 [ 612.930597][ T8761] _copy_from_iter+0x22e/0x1170 [ 612.935501][ T8761] ? __lock_acquire+0x7d10/0x7d10 [ 612.940578][ T8761] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 612.946002][ T8761] ? __virt_addr_valid+0x3c6/0x470 [ 612.951161][ T8761] ? __phys_addr_symbol+0x2b/0x70 [ 612.956229][ T8761] ? __check_object_size+0x30c/0x410 [ 612.961571][ T8761] skb_copy_datagram_from_iter+0xf2/0x6a0 [ 612.967337][ T8761] ? skb_put+0x117/0x210 [ 612.971632][ T8761] tun_get_user+0xaf9/0x3a70 [ 612.976286][ T8761] ? tun_ring_recv+0xc40/0xc40 [ 612.981106][ T8761] ? rcu_lock_release+0x5/0x20 [ 612.985930][ T8761] ? __lock_acquire+0x7d10/0x7d10 [ 612.991027][ T8761] tun_chr_write_iter+0x112/0x1e0 [ 612.996113][ T8761] vfs_write+0x745/0xd60 [ 613.000411][ T8761] ? file_end_write+0x250/0x250 [ 613.005323][ T8761] ? __fget_files+0x40f/0x480 [ 613.010050][ T8761] ? __fdget_pos+0x1e2/0x370 [ 613.014687][ T8761] ? ksys_write+0x71/0x260 [ 613.019138][ T8761] ksys_write+0x152/0x260 [ 613.023503][ T8761] ? __ia32_sys_read+0x80/0x80 [ 613.028343][ T8761] ? lockdep_hardirqs_on+0x94/0x140 [ 613.033603][ T8761] do_syscall_64+0x4c/0xa0 [ 613.038068][ T8761] ? clear_bhb_loop+0x30/0x80 [ 613.042782][ T8761] ? clear_bhb_loop+0x30/0x80 [ 613.047495][ T8761] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 613.053429][ T8761] RIP: 0033:0x7f2ead2b4eb9 [ 613.057876][ T8761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.077817][ T8761] RSP: 002b:00007f2eab510028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 613.086289][ T8761] RAX: ffffffffffffffda RBX: 00007f2ead52ffa0 RCX: 00007f2ead2b4eb9 [ 613.094359][ T8761] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8 [ 613.102375][ T8761] RBP: 00007f2eab510090 R08: 0000000000000000 R09: 0000000000000000 [ 613.110391][ T8761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.118402][ T8761] R13: 00007f2ead530038 R14: 00007f2ead52ffa0 R15: 00007fff23cc9718 [ 613.126437][ T8761] [ 615.546441][ T8792] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1561'. [ 615.726253][ T8800] FAULT_INJECTION: forcing a failure. [ 615.726253][ T8800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.772248][ T8803] netlink: 'syz.4.1565': attribute type 10 has an invalid length. [ 615.784057][ T8800] CPU: 1 PID: 8800 Comm: syz.1.1566 Not tainted syzkaller #0 [ 615.791678][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 615.801775][ T8800] Call Trace: [ 615.805080][ T8800] [ 615.808038][ T8800] dump_stack_lvl+0x188/0x250 [ 615.812770][ T8800] ? show_regs_print_info+0x20/0x20 [ 615.818031][ T8800] ? load_image+0x400/0x400 [ 615.822587][ T8800] ? __lock_acquire+0x7d10/0x7d10 [ 615.827657][ T8800] ? __alloc_skb+0x473/0x750 [ 615.829835][ T8806] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1567'. [ 615.832283][ T8800] should_fail+0x38c/0x4c0 [ 615.832318][ T8800] _copy_from_iter+0x22e/0x1170 [ 615.850856][ T8800] ? __lock_acquire+0x7d10/0x7d10 [ 615.855940][ T8800] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 615.861361][ T8800] ? __virt_addr_valid+0x3c6/0x470 [ 615.866504][ T8800] ? __phys_addr_symbol+0x2b/0x70 [ 615.871582][ T8800] ? __check_object_size+0x30c/0x410 [ 615.876906][ T8800] skb_copy_datagram_from_iter+0xf2/0x6a0 [ 615.882653][ T8800] ? skb_put+0x117/0x210 [ 615.886914][ T8800] tun_get_user+0xaf9/0x3a70 [ 615.891541][ T8800] ? tun_ring_recv+0xc40/0xc40 [ 615.897023][ T8800] ? rcu_lock_release+0x5/0x20 [ 615.901820][ T8800] ? __lock_acquire+0x7d10/0x7d10 [ 615.906898][ T8800] tun_chr_write_iter+0x112/0x1e0 [ 615.911941][ T8800] vfs_write+0x745/0xd60 [ 615.916201][ T8800] ? file_end_write+0x250/0x250 [ 615.921075][ T8800] ? __fget_files+0x40f/0x480 [ 615.925788][ T8800] ? __fdget_pos+0x1e2/0x370 [ 615.930392][ T8800] ? ksys_write+0x71/0x260 [ 615.934824][ T8800] ksys_write+0x152/0x260 [ 615.939170][ T8800] ? __ia32_sys_read+0x80/0x80 [ 615.943954][ T8800] ? lockdep_hardirqs_on+0x94/0x140 [ 615.949175][ T8800] do_syscall_64+0x4c/0xa0 [ 615.953603][ T8800] ? clear_bhb_loop+0x30/0x80 [ 615.958291][ T8800] ? clear_bhb_loop+0x30/0x80 [ 615.962980][ T8800] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 615.968885][ T8800] RIP: 0033:0x7f2ead2b4eb9 [ 615.973316][ T8800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.992937][ T8800] RSP: 002b:00007f2eab510028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 616.001365][ T8800] RAX: ffffffffffffffda RBX: 00007f2ead52ffa0 RCX: 00007f2ead2b4eb9 [ 616.009352][ T8800] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8 [ 616.017336][ T8800] RBP: 00007f2eab510090 R08: 0000000000000000 R09: 0000000000000000 [ 616.025323][ T8800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.033313][ T8800] R13: 00007f2ead530038 R14: 00007f2ead52ffa0 R15: 00007fff23cc9718 [ 616.041310][ T8800] [ 617.481816][ T8838] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1576'. [ 619.397811][ T8882] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1592'. [ 621.611516][ T8931] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1607'. [ 622.183600][ T8942] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1610'. [ 622.740251][ T8953] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1616'. [ 623.165072][ T8963] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1619'. [ 623.614541][ T8972] netlink: 'syz.0.1623': attribute type 10 has an invalid length. [ 624.011537][ T8987] FAULT_INJECTION: forcing a failure. [ 624.011537][ T8987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.116865][ T8987] CPU: 0 PID: 8987 Comm: syz.4.1630 Not tainted syzkaller #0 [ 624.124312][ T8987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 624.134407][ T8987] Call Trace: [ 624.137731][ T8987] [ 624.140706][ T8987] dump_stack_lvl+0x188/0x250 [ 624.145438][ T8987] ? show_regs_print_info+0x20/0x20 [ 624.150680][ T8987] ? load_image+0x400/0x400 [ 624.155238][ T8987] ? __lock_acquire+0x7d10/0x7d10 [ 624.160314][ T8987] should_fail+0x38c/0x4c0 [ 624.166314][ T8987] _copy_from_user+0x2e/0x170 [ 624.171134][ T8987] vmemdup_user+0xa4/0x170 [ 624.175593][ T8987] map_lookup_elem+0x2a8/0x630 [ 624.180402][ T8987] ? bpf_lsm_bpf+0x5/0x10 [ 624.184783][ T8987] __sys_bpf+0x4c0/0x6f0 [ 624.188374][ T8986] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1627'. [ 624.189070][ T8987] ? bpf_link_show_fdinfo+0x380/0x380 [ 624.189114][ T8987] ? vtime_user_exit+0x2c8/0x3e0 [ 624.189150][ T8987] __x64_sys_bpf+0x78/0x90 [ 624.213140][ T8987] do_syscall_64+0x4c/0xa0 [ 624.217604][ T8987] ? clear_bhb_loop+0x30/0x80 [ 624.222324][ T8987] ? clear_bhb_loop+0x30/0x80 [ 624.227044][ T8987] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 624.232979][ T8987] RIP: 0033:0x7f42b6b2ceb9 [ 624.237429][ T8987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.257073][ T8987] RSP: 002b:00007f42b4d88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 624.265531][ T8987] RAX: ffffffffffffffda RBX: 00007f42b6da7fa0 RCX: 00007f42b6b2ceb9 [ 624.273537][ T8987] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000001 [ 624.276013][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.281545][ T8987] RBP: 00007f42b4d88090 R08: 0000000000000000 R09: 0000000000000000 [ 624.288214][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.295781][ T8987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.295798][ T8987] R13: 00007f42b6da8038 R14: 00007f42b6da7fa0 R15: 00007ffd3d41fc68 [ 624.295834][ T8987] [ 625.044285][ T9012] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1637'. [ 625.154621][ T9017] netlink: 'syz.2.1639': attribute type 10 has an invalid length. [ 625.910678][ T9030] FAULT_INJECTION: forcing a failure. [ 625.910678][ T9030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.011793][ T9030] CPU: 1 PID: 9030 Comm: syz.0.1645 Not tainted syzkaller #0 [ 626.019239][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 626.029328][ T9030] Call Trace: [ 626.032637][ T9030] [ 626.035595][ T9030] dump_stack_lvl+0x188/0x250 [ 626.040348][ T9030] ? show_regs_print_info+0x20/0x20 [ 626.045583][ T9030] ? load_image+0x400/0x400 [ 626.050135][ T9030] ? __lock_acquire+0x7d10/0x7d10 [ 626.055200][ T9030] should_fail+0x38c/0x4c0 [ 626.059659][ T9030] _copy_to_user+0x2e/0x130 [ 626.064194][ T9030] simple_read_from_buffer+0xe3/0x150 [ 626.069606][ T9030] proc_fail_nth_read+0x1a6/0x220 [ 626.074674][ T9030] ? proc_fault_inject_write+0x310/0x310 [ 626.080354][ T9030] ? fsnotify_perm+0x254/0x560 [ 626.085160][ T9030] ? proc_fault_inject_write+0x310/0x310 [ 626.090831][ T9030] vfs_read+0x301/0xd60 [ 626.095054][ T9030] ? kernel_read+0x1e0/0x1e0 [ 626.099689][ T9030] ? __fget_files+0x40f/0x480 [ 626.104404][ T9030] ? mutex_lock_nested+0x17/0x20 [ 626.109377][ T9030] ? __fdget_pos+0x2bf/0x370 [ 626.113993][ T9030] ? ksys_read+0x71/0x260 [ 626.118355][ T9030] ksys_read+0x152/0x260 [ 626.122635][ T9030] ? vfs_write+0xd60/0xd60 [ 626.127084][ T9030] ? lockdep_hardirqs_on+0x94/0x140 [ 626.132577][ T9030] do_syscall_64+0x4c/0xa0 [ 626.137030][ T9030] ? clear_bhb_loop+0x30/0x80 [ 626.141747][ T9030] ? clear_bhb_loop+0x30/0x80 [ 626.146456][ T9030] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 626.152390][ T9030] RIP: 0033:0x7f7c6602278e [ 626.156843][ T9030] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 626.176507][ T9030] RSP: 002b:00007f7c642bcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 626.184951][ T9030] RAX: ffffffffffffffda RBX: 00007f7c642bd6c0 RCX: 00007f7c6602278e [ 626.192942][ T9030] RDX: 000000000000000f RSI: 00007f7c642bd0a0 RDI: 0000000000000008 [ 626.200930][ T9030] RBP: 00007f7c642bd090 R08: 0000000000000000 R09: 0000000000000000 [ 626.209015][ T9030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.217004][ T9030] R13: 00007f7c662dd038 R14: 00007f7c662dcfa0 R15: 00007ffdd674f2a8 [ 626.225025][ T9030] [ 626.300178][ T9030] ------------[ cut here ]------------ [ 626.305947][ T9030] WARNING: CPU: 1 PID: 9030 at kernel/events/core.c:6688 perf_pending_task+0x358/0x470 [ 626.315750][ T9030] Modules linked in: [ 626.319682][ T9030] CPU: 1 PID: 9030 Comm: syz.0.1645 Not tainted syzkaller #0 [ 626.327181][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 626.337398][ T9030] RIP: 0010:perf_pending_task+0x358/0x470 [ 626.343167][ T9030] Code: ff 84 db 75 14 e8 48 4c de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 34 4c de ff e8 c7 a9 65 ff eb e5 e8 28 4c de ff <0f> 0b e9 f3 fe ff ff e8 1c 4c de ff 48 c7 c7 a0 43 3a 8c 4c 89 f6 [ 626.362925][ T9030] RSP: 0018:ffffc900031afd18 EFLAGS: 00010293 [ 626.369483][ T9030] RAX: ffffffff819ad378 RBX: ffff88807bb1cbf0 RCX: ffff888074d7bb80 [ 626.377651][ T9030] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 626.385711][ T9030] RBP: 0000000000000001 R08: ffff888074d7c593 R09: 1ffff1100e9af8b2 [ 626.393724][ T9030] R10: dffffc0000000000 R11: ffffed100e9af8b3 R12: ffff888074d7bb80 [ 626.401790][ T9030] R13: ffff888017bfed58 R14: ffff88807bb1c9c0 R15: 1ffff1100f763938 [ 626.409852][ T9030] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 626.418856][ T9030] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 626.425525][ T9030] CR2: 00007f7c6429bff8 CR3: 000000007914b000 CR4: 00000000003506e0 [ 626.433551][ T9030] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 626.441623][ T9030] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 626.449687][ T9030] Call Trace: [ 626.452997][ T9030] [ 626.456000][ T9030] task_work_run+0x125/0x1a0 [ 626.460643][ T9030] do_exit+0x626/0x20c0 [ 626.464878][ T9030] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 626.470914][ T9030] ? put_task_struct+0x80/0x80 [ 626.475757][ T9030] ? lock_chain_count+0x20/0x20 [ 626.480658][ T9030] ? preempt_schedule_thunk+0x16/0x18 [ 626.486121][ T9030] do_group_exit+0x12e/0x300 [ 626.490765][ T9030] __x64_sys_exit_group+0x3b/0x40 [ 626.495869][ T9030] do_syscall_64+0x4c/0xa0 [ 626.500319][ T9030] ? clear_bhb_loop+0x30/0x80 [ 626.505076][ T9030] ? clear_bhb_loop+0x30/0x80 [ 626.509797][ T9030] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 626.515771][ T9030] RIP: 0033:0x7f7c66061eb9 [ 626.520228][ T9030] Code: Unable to access opcode bytes at RIP 0x7f7c66061e8f. [ 626.527671][ T9030] RSP: 002b:00007f7c642bcf38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 626.536176][ T9030] RAX: ffffffffffffffda RBX: 00007f7c660cfcd0 RCX: 00007f7c66061eb9 [ 626.544219][ T9030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 626.552227][ T9030] RBP: 000000000000000e R08: 0000000000000000 R09: 00007f7c662dd038 [ 626.560296][ T9030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.568341][ T9030] R13: 00007f7c662dd038 R14: 00007f7c662dcfa0 R15: 00007ffdd674f2a8 [ 626.576433][ T9030] [ 626.579496][ T9030] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 626.586795][ T9030] CPU: 1 PID: 9030 Comm: syz.0.1645 Not tainted syzkaller #0 [ 626.594206][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 626.604292][ T9030] Call Trace: [ 626.607615][ T9030] [ 626.610581][ T9030] dump_stack_lvl+0x188/0x250 [ 626.615294][ T9030] ? show_regs_print_info+0x20/0x20 [ 626.620529][ T9030] ? load_image+0x400/0x400 [ 626.625091][ T9030] panic+0x2e5/0x810 [ 626.629025][ T9030] ? bpf_jit_dump+0xd0/0xd0 [ 626.633579][ T9030] ? perf_pending_task+0x358/0x470 [ 626.638726][ T9030] __warn+0x248/0x2b0 [ 626.642746][ T9030] ? perf_pending_task+0x358/0x470 [ 626.647896][ T9030] report_bug+0x1b7/0x2e0 [ 626.652267][ T9030] handle_bug+0x3a/0x70 [ 626.656453][ T9030] exc_invalid_op+0x16/0x40 [ 626.660987][ T9030] asm_exc_invalid_op+0x16/0x20 [ 626.665866][ T9030] RIP: 0010:perf_pending_task+0x358/0x470 [ 626.671623][ T9030] Code: ff 84 db 75 14 e8 48 4c de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 34 4c de ff e8 c7 a9 65 ff eb e5 e8 28 4c de ff <0f> 0b e9 f3 fe ff ff e8 1c 4c de ff 48 c7 c7 a0 43 3a 8c 4c 89 f6 [ 626.691262][ T9030] RSP: 0018:ffffc900031afd18 EFLAGS: 00010293 [ 626.697378][ T9030] RAX: ffffffff819ad378 RBX: ffff88807bb1cbf0 RCX: ffff888074d7bb80 [ 626.705655][ T9030] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 626.713668][ T9030] RBP: 0000000000000001 R08: ffff888074d7c593 R09: 1ffff1100e9af8b2 [ 626.721685][ T9030] R10: dffffc0000000000 R11: ffffed100e9af8b3 R12: ffff888074d7bb80 [ 626.729697][ T9030] R13: ffff888017bfed58 R14: ffff88807bb1c9c0 R15: 1ffff1100f763938 [ 626.737706][ T9030] ? perf_pending_task+0x358/0x470 [ 626.743002][ T9030] ? perf_pending_task+0x358/0x470 [ 626.748148][ T9030] task_work_run+0x125/0x1a0 [ 626.752779][ T9030] do_exit+0x626/0x20c0 [ 626.756972][ T9030] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 626.762997][ T9030] ? put_task_struct+0x80/0x80 [ 626.767806][ T9030] ? lock_chain_count+0x20/0x20 [ 626.772691][ T9030] ? preempt_schedule_thunk+0x16/0x18 [ 626.778103][ T9030] do_group_exit+0x12e/0x300 [ 626.782722][ T9030] __x64_sys_exit_group+0x3b/0x40 [ 626.787768][ T9030] do_syscall_64+0x4c/0xa0 [ 626.792223][ T9030] ? clear_bhb_loop+0x30/0x80 [ 626.796939][ T9030] ? clear_bhb_loop+0x30/0x80 [ 626.801650][ T9030] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 626.807570][ T9030] RIP: 0033:0x7f7c66061eb9 [ 626.812008][ T9030] Code: Unable to access opcode bytes at RIP 0x7f7c66061e8f. [ 626.819383][ T9030] RSP: 002b:00007f7c642bcf38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 626.827809][ T9030] RAX: ffffffffffffffda RBX: 00007f7c660cfcd0 RCX: 00007f7c66061eb9 [ 626.835795][ T9030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 626.843784][ T9030] RBP: 000000000000000e R08: 0000000000000000 R09: 00007f7c662dd038 [ 626.851783][ T9030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.859774][ T9030] R13: 00007f7c662dd038 R14: 00007f7c662dcfa0 R15: 00007ffdd674f2a8 [ 626.867786][ T9030] [ 626.871197][ T9030] Kernel Offset: disabled [ 626.875553][ T9030] Rebooting in 86400 seconds..