last executing test programs: 1m42.161619366s ago: executing program 2 (id=903): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x400c010) 1m41.80584069s ago: executing program 2 (id=905): socket$kcm(0x2, 0x3, 0x84) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 1m40.883736611s ago: executing program 2 (id=914): r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = getpid() r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="29000000250005000000b6eb1405000000a48cdfb11301b3550000", 0x1b}, {0x0}], 0x2}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000340)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)=""/168, 0xa8}, {&(0x7f0000000040)=""/23, 0x17}, {&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000400)=""/46, 0x2e}], 0x4, &(0x7f0000000680)=""/111, 0x6f}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0xfffffffffffffffd, &(0x7f00000001c0), &(0x7f0000000340), 0x80000001}, 0x38) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x2, 0x11, @local, 0x20}, 0x80, 0x0}, 0x40844) 1m39.771942468s ago: executing program 2 (id=935): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) 1m39.608989996s ago: executing program 2 (id=928): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000054000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2efd000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e0f000010004ad72de680ec59acbc0413a1f848110000515baf281b6fc8baab25b9e2d7005e1406028000cb0b0e", 0x2e}], 0x1}, 0x8000) r1 = socket$kcm(0x10, 0x6, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/254, 0xfe}, {&(0x7f0000000a00)=""/216, 0xd8}, {&(0x7f0000003980)=""/4059, 0xfdb}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f0000000b00)=""/200, 0xc8}, {&(0x7f0000001100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f0000000c00)=""/189, 0xbd}, {&(0x7f0000000140)=""/99, 0x63}], 0xb}, 0x40012100) 1m36.617211595s ago: executing program 2 (id=948): socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x2, 0x5, 0x84) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m36.50122689s ago: executing program 32 (id=948): socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x2, 0x5, 0x84) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.548053344s ago: executing program 3 (id=2174): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e0000003600f7ffffff80698c6394090124fc602f6e354016000180008e9279ed91d47825d7563c5ddbeceb16e7", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x40000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x40bcae6f9b2db5a1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="f9ffffffffffffffdcd5632e", @ANYRES8], 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) sendmsg$inet(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="5c00000012006bab9a3fe3d96e17aa0a046b876c1d0048007ea60864160af36504001a003800eb0ea3fa01de8eb006000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000000000017a7016306569fa5dad17a91", 0x63}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002d00)=""/4050, 0xfd2}, {&(0x7f0000000140)=""/201, 0xc9}, {&(0x7f00000006c0)=""/150, 0x96}, {&(0x7f0000003dc0)=""/207, 0xcf}, {&(0x7f0000001c00)=""/184, 0xb8}, {&(0x7f0000001cc0)=""/88, 0x4b}, {&(0x7f0000001b40)=""/142, 0xc8}, {&(0x7f0000001500)=""/92, 0x5c}], 0x8}, 0x20) close(r2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r7, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x800, 0x7e806f3bc2cab2f0}, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x2) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, 0x0, 0x10) 3.432166412s ago: executing program 3 (id=2186): r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x101000, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x3, 0x6, 0x1, 0x9, 0x0, 0xaa49, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000040)}, 0x1808, 0x0, 0x3, 0x9, 0x6, 0x8, 0x9, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0x2, r0, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c2c4, 0x2, 0x2, 0x9, 0x1, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d800000031f011000081f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x53}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000000c0)={0x2, 0x0, [0x0, 0x0]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000811f0300000000000004001400380013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b408000000000000731c96045a823e83110b00000000008510000002000000b7000000000000009500c2000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000}, 0x94) 3.315991347s ago: executing program 1 (id=2190): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="168e43acc18169514039c5bcdb7a", 0x0, 0xc699, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x100000, 0x0, 0x2010, 0xffffffffffffffff, 0xfda, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x21) 3.276080889s ago: executing program 3 (id=2191): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x131, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x80000000, 0x5, 0xf}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x2e, 0x61, 0x2e]}}, 0x0, 0x1d}, 0x28) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02e5ff0004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300080c5) setsockopt$sock_attach_bpf(r4, 0x1, 0x9, &(0x7f0000000040), 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 3.109048766s ago: executing program 1 (id=2192): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x400000, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000001c0), 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000100), 0x120) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x31, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003100000001010000000000000e000a000f000000028002002d1fb664", 0x30}], 0x1}, 0x0) 2.09098728s ago: executing program 3 (id=2195): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x42, 0x0, 0x100000, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) (async) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async, rerun: 32) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syz_tun\x00', @random="e931099234f0"}) (async, rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) (async, rerun: 32) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async, rerun: 32) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r5) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90224fc600d00020004000100ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (rerun: 32) 2.09044291s ago: executing program 0 (id=2196): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e0000003600f7ffffff80698c6394090124fc602f6e354016000180008e9279ed91d47825d7563c5ddbeceb16e7", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x40000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x40bcae6f9b2db5a1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="f9ffffffffffffffdcd5632e", @ANYRES8], 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) sendmsg$inet(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="5c00000012006bab9a3fe3d96e17aa0a046b876c1d0048007ea60864160af36504001a003800eb0ea3fa01de8eb006000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000000000017a7016306569fa5dad17a91", 0x63}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002d00)=""/4050, 0xfd2}, {&(0x7f0000000140)=""/201, 0xc9}, {&(0x7f00000006c0)=""/150, 0x96}, {&(0x7f0000003dc0)=""/207, 0xcf}, {&(0x7f0000001c00)=""/184, 0xb8}, {&(0x7f0000001cc0)=""/88, 0x4b}, {&(0x7f0000001b40)=""/142, 0xc8}, {&(0x7f0000001500)=""/92, 0x5c}], 0x8}, 0x20) close(r2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r7, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x800, 0x7e806f3bc2cab2f0}, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x2) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, 0x0, 0x10) 2.09013493s ago: executing program 1 (id=2197): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x4a21, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700", 0x2c}], 0x1}, 0x0) 1.966946375s ago: executing program 1 (id=2199): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d0802010000001c7e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x700) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x157}, [@ldst={0x1, 0x3, 0x4, 0x2, 0xb, 0x6, 0x8}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x8, 0x2, 0xb, 0x10, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x1, &(0x7f0000000200)=""/1, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xd, 0xffffff6b, 0x57}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000380)=[0x1, 0x1], &(0x7f00000003c0)=[{0x2, 0x1, 0x9, 0x9}, {0x3, 0x1, 0x7, 0x5}, {0x5, 0x2, 0xa, 0xb}, {0x5, 0x3, 0x4, 0xb}, {0x0, 0x5, 0x6}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r1, 0x11, 0x0, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r7}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@ifindex=r5, r3, 0x36, 0x1020, 0x0, @void, @void, @void, @value=r7, r4}, 0x20) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f907000000", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x408e0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r10}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0x14, 0x0, &(0x7f0000000540)="3d25ab555b19c4cbd0017085080040fee5a990ec", 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'rlimit'}, {0x2b, 'net_cls'}, {0x3b, 'perf_event'}, {0x2b, 'pids'}, {0x2b, 'perf_event'}, {0x2b, 'freezer'}]}, 0x38) 1.840846521s ago: executing program 3 (id=2200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x4, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0xfffffffd}, {}, {0x3}, {0x6}]}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='percpu_alloc_percpu_fail\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r3, 0x24e}, 0x38) 1.839840561s ago: executing program 0 (id=2201): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x6, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x3}, @enum64={0xa, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x8, 0x4, 0x4}]}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x4}, @struct={0x1, 0x6, 0x0, 0x4, 0x0, 0x8000, [{0x8, 0x5, 0x6}, {0x0, 0x5}, {0x9, 0x5, 0x9}, {0x3, 0x4, 0xf}, {0x2, 0x2, 0x285}, {0xb, 0x2, 0xa}]}]}, {0x0, [0x30, 0x61, 0x5f, 0x0]}}, &(0x7f0000000a80)=""/34, 0xa2, 0x22, 0x0, 0x8}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000060000008000000042"], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600040001400600", 0x3a}], 0x1}, 0x48400) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x619, r6}, 0x38) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='cpuacct.stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xb, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@printk]}, &(0x7f00000007c0)='syzkaller\x00', 0x6, 0xbb, &(0x7f0000000ec0)=""/187, 0x40f00, 0x40, '\x00', r4, @xdp, r5, 0x8, &(0x7f0000000b00)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x5, &(0x7f0000000b80)=[r6, r8], &(0x7f0000000bc0)=[{0x4, 0x1, 0x8, 0xb}, {0x5, 0x5, 0x1, 0x6}, {0x4, 0x5, 0x2, 0x5}, {0x4, 0x5, 0xd}, {0x5, 0x2, 0x10, 0xc}], 0x10, 0xfffffffe}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1700000000100000100000000200000040000000", @ANYRES32=r9, @ANYBLOB="a2349d1509180375b19bc80004000000000000373c01c1bb15bbe0000000006a23eb55d1c4a13db9af626197f7e4a68c0cc7146c79980dcb0ea8b9c488cfb4c6f0516be9f984fdb7cc7609756c5dd9df03c737e60dc044c9e9d70741a349135d497b83ab9b2d96063713b97770993386e94101d6dd05f4995f84abca567a696410ef2b5d69402e82a067d175020728606ef7ac537706530d0a50c7b444c6e8624af259b71247d3f0df0d6406b770c7984957b70a1a34d36244a568768e15cf1f1298f487b52eaccc165eaa76fa413fa834fd03c2118409e76cd327c5f91b261f687a3970df5b0273eeecb10154c4b8f2fa7ad97588", @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="00000000040000000300"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r9}, 0x10) close(r2) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000004000000000000000a00000018000000042000000000000001800000181100000110398eacc99ff64f6e7e7b4cd8526401a8a5f51a0396b3050c6f9abad76406f3a122102bbdab0ab534b8f44431705331ce", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xb, 0x80000000, 0x8000}, 0x10, 0x17a75, r1, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x2, 0x5, 0x8, 0x9}, {0x4, 0x1, 0x9, 0xa}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x1, 0xe, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], 0x0}, 0x40) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000700), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@cgroup, r1, 0x30, 0x200d, r10, @value=r12, @void, @void, @void, r11}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006000000036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e970100"/216, 0xd8}, {&(0x7f0000000800)="7eb7f3d3d9309591f27fb75da857b90b659bff2c2348690189bbd082e5a50b4f5835711e400d44819b550088e6d3c85e", 0x30}], 0x2}, 0x0) 1.798821422s ago: executing program 4 (id=2202): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="168e43acc18169514039c5bcdb7a", 0x0, 0xc699, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x100000, 0x0, 0x2010, 0xffffffffffffffff, 0xfda, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x21) 1.584555972s ago: executing program 1 (id=2204): r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = getpid() r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="29000000250005000000b6eb1405000000a48cdfb11301b355000000", 0x1c}, {0x0}], 0x2}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000340)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)=""/168, 0xa8}, {&(0x7f0000000040)=""/23, 0x17}, {&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000400)=""/46, 0x2e}], 0x4, &(0x7f0000000680)=""/111, 0x6f}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0xfffffffffffffffd, &(0x7f00000001c0), &(0x7f0000000340), 0x80000001}, 0x38) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x2, 0x11, @local, 0x20}, 0x80, 0x0}, 0x40844) 1.583833702s ago: executing program 4 (id=2205): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8", 0x0, 0x0, 0x0, 0xfffffffe}, 0x38) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x1000000000000000, 0x2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) 1.518894405s ago: executing program 3 (id=2206): r0 = socket$kcm(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000027c0)=""/4047, 0xfcf}, {&(0x7f00000037c0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/244, 0xf4}, {&(0x7f0000000c80)=""/28, 0x1c}, {&(0x7f00000012c0)=""/148, 0x94}], 0x5}, 0x40000100) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000800), &(0x7f00000007c0), 0xfffffffb, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x10000, r3, 0x0, 0x11000000}, 0x38) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046bf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe8600000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="eabcd46b347499a5860f05aff512e011dfdb5168147165d26f80f49c4d42ab4573293728cf32c7c995a43919f2b584385574460a8c6dbb83a07ba03ab72aaffc55aeed293a53f095811ce3aa4e542e02cf57889e70c91137c3fa25bed6387f6fdb9fa7d27ed5fa5a1758721dee7fe5e70853a099654bc4c37e", 0x79}], 0x1}, 0x4040811) 1.482816796s ago: executing program 4 (id=2207): r0 = syz_clone(0x8000000, &(0x7f00000006c0)="40b5d6909c71b06c2ec33554984d3bac3f65c38411e1a8c0efe0b052b825f08eec8fe615c3cab4f7736324b7519df6ba7483addf0ae804a7fd7594f06447a80fb5865ab801d607bf255402b0f33696ae857e9aab9c1d2b9ecfcb31f38852d1f0f3a3cbf9b387f484d149f2c75b889be380b8b792216001382c38c0d02ee8ad4c75876ed32ae69e8995f07ff7e2f00ff1e3fe54211df8a5965865308ddfe058be4d4edb47657df5f002c3b0224b9b65795babb20678354180356e86642ed4be52249168", 0xc3, &(0x7f0000000280), &(0x7f0000000580), &(0x7f00000007c0)="dbf027a554be27811057b35596af727d17bf5366f304cc49fc4c52a00d67cd0f6342c92284f3212d91a688b3d55d732387615afdafc34ff392a93952e19e77753d2b0523ed8defb4b4e515a1d90246681ccad331219466a773cc76d35dd224213b1d59523578bdf23dc149c6ddd5807ce589b1dd7c27dde24b8350225a69b28c5607113e74ebf17f570f2cfe907b46807abef96a657c23057905d25602f3ca35f04d6279cc2ac19287d08c7329110b52032bd7ee792185d1f86f3b7f26b091f49aac177db7121e88f7e5466909212f") perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x18}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e000000070000000200000002000000a8000000", @ANYRES32=r2, @ANYBLOB="000000e300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000200000001000000040000000000000000000000000000008639acaafb3d7e7ef2ab532df47a1d84ba94db3cd10ab3e19409e3462a24ebdfb2b2544ad2f7df6b618250e040f49d1362284843c8e5ea15f09315dfa4154539ed43fad6d48dc2a7bb61d4604f7a40ad59eddc2b657c39128bd6d614bb376138644139ae443546557db5b200c68fce62e5de0815b9090c00000000b7329e1e8098976d37da9f1efb41114ca68dfe5d74b2e95d62b73bd7fae58c5700d122cf918a2999ac76d1a3d3bf848a81a3a4c2d8cc9ee2da6b1c0cc3addda159b485dbc8772ed1a2cbc216"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff8500003ec4a0000400000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) socketpair(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200), 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r7, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r4, r6, 0x0, r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611484000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d81500010000e0000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r9}, 0x8) 1.459277717s ago: executing program 5 (id=2208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) (fail_nth: 8) 1.38479954s ago: executing program 0 (id=2209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000180), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mem_connect\x00', r0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r1], 0x48) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x23, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=ANY=[@ANYBLOB="8500005731ffffff0700000000f8c813f31c0000"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, r6, 0x2, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90224fc602f00000008000300feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = openat$cgroup_ro(r8, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r10, 0x80082407, &(0x7f0000000040)) r11 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(r11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$sock(r11, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0xc010) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x1}) 1.017917716s ago: executing program 5 (id=2210): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x4a21, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1", 0x2d}], 0x1}, 0x0) 927.73822ms ago: executing program 0 (id=2211): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e0000003600f7ffffff80698c6394090124fc602f6e354016000180008e9279ed91d47825d7563c5ddbeceb16e7", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x40000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x40bcae6f9b2db5a1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="f9ffffffffffffffdcd5632e", @ANYRES8], 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) sendmsg$inet(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="5c00000012006bab9a3fe3d96e17aa0a046b876c1d0048007ea60864160af36504001a003800eb0ea3fa01de8eb006000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000000000017a7016306569fa5dad17a91", 0x63}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002d00)=""/4050, 0xfd2}, {&(0x7f0000000140)=""/201, 0xc9}, {&(0x7f00000006c0)=""/150, 0x96}, {&(0x7f0000003dc0)=""/207, 0xcf}, {&(0x7f0000001c00)=""/184, 0xb8}, {&(0x7f0000001cc0)=""/88, 0x4b}, {&(0x7f0000001b40)=""/142, 0xc8}, {&(0x7f0000001500)=""/92, 0x5c}], 0x8}, 0x20) close(r2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r7, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x800, 0x7e806f3bc2cab2f0}, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x2) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, 0x0, 0x10) 880.770883ms ago: executing program 5 (id=2212): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000800000000", @ANYBLOB="0000ffffffffddffdcfffffffffd5f3d"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000880)=[{}, {}], 0x10, 0x10, &(0x7f0000000800), &(0x7f0000000480), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6065e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48", 0x3e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r3, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r4, &(0x7f0000000240)="16e36f528feb27a7f02224110feb73d8e776ab5f72e39b7b8003846b8ebfbe9286131ed0bfef40ce976e2c85ca7c11dd123d3fd744221bc9b852b5af3435779cccecf804c0f8e2a820a9720088b419947fdb03128656e82d631e9f69e1df86f82cc69b6c707cfb42575508065a6c5ec4e1a54718b967cd77e416ff4da1964ceb878e2d47fde1bf37b28412146ad5f15ecac3cd34160f7808dfbd76b9ec6f9d119e173dc9dde3602ab3e1bb088cafde2df82df54531c422bcaa077a54541216f0223843efaee019d0f8ae270303f9fd61c5404024", &(0x7f0000000180)=""/113}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd", 0x0, 0x8, 0x60000000, 0x0, 0xb8, 0x0, &(0x7f0000001480)="4897c83221eaf2a1e004939a588334365946b30542c90d4b6a001302e3961b65948f27dfe63c397ad4f8c323f2c85f966e53e3b5fab7d04ffdb9ca016ac822f4802b95633d31c9add07d8b71b5706eef77ae0eec6aa6e29376294338947b4aa9a45451a2177acda8bbfe3ffd8a81c548873220f03cec32084fa408f4952653be935ccef6480e1f4deea3c0fa4ec243adfe2605608d8b91969027cdb3162987c59f5cb8e9c1173d00efe8972ae1b270978d7e4e5cdbf55f2f"}, 0x50) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8931, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd4, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x66, &(0x7f0000000780)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xbb, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) mkdir(0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, 0x0, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000201159f978487aa37311359037713242d1697746b59a4afce1f50d2e08482ba38dd59037861d509187199f95d697d075", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xf, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x30}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) syz_clone(0x10000, &(0x7f00000002c0)="ef9f07a76e7ce6b2d609bb87da461d937a2ab0d967a6e82a2ceda1add7af57276b8530d5f128c30d549788592069c12cb593871a0ec6d4bd44c4d02a11a7620dd101fd1b7b938fec4c5eaa9de8a111754282050041672b05167a3785c4942ce0dd3c", 0x62, &(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000500)="0deb8f1e3652d3a798a6f8082b9c3d4cce65bb066c283f67e79765517c8882f63d5c86c5bf28a1194ab0370f6b1fbbd1d505e7ca198ed7a9a21a9b9f348b9152ecd9e70339c04e0523c2") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080)) r10 = socket$kcm(0x11, 0x200000000000003, 0x300) recvmsg(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20) recvmsg$kcm(r10, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r11 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r11, 0x6, 0x15, &(0x7f0000000500), 0x4) sendmsg$inet(r2, &(0x7f0000000980)={&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)="c635c7292bb9fd071ed368e6225951063a466c6ed1b4f52ef37c3cb2be323b2fc495c3913ee3de", 0x27}, {&(0x7f0000000100)="2f4037c975508e1bcd086d8d59469094e0f80708b4947adfc58e796de87427653afb5a2e01851c4579bad0ffd811aa0edbdb7bb41209f44ea1e5afeba3f99f0dd8f5864d2068849567bf39adee7eebcee5de8d678c2554e5cab426f760172c8a5a2a9d5bb42aab3b8d0c3f2ff24b40c98ac7638c303c9b6c7dc2a1ae9866eec1940ee6fad968ca1919dfbfdd8b36c39afc84339af0d3bb6fe4a436ed", 0x9c}, {&(0x7f00000001c0)="5255b6e3fba6d70cc49ff2d90b9930663a15cdc82cd33ce1aef4456814ac8498bdb9be78879c471a40d13f40cba0f53af061a4dc6773d3b787c71cae46516acdaa7b1b94f7f6c09469b33b48684828a30992b71e6adbe9114636e9e139cd63cd17c59b15d5cf0f07f185f746903303fc7fb2fa48fab4e303e3e419f202", 0x7d}, {&(0x7f0000000240)="c5fddc96e3b94eef1179e06c8f986fa687dfe68a64874db573eda65ef9e44cb83804cc406e006399dd2ca10ff94d97b9e7726b92db2738c367cd05cc01323fea22a5054e091761563b010b179cd5d00ea3864fb95f564a5e603f0c", 0x5b}, {&(0x7f00000002c0)="1539f4afe366e26e171917e0343171187c9532828f674eb30c0240191aff5ed5196f5f752623774ef277ac79356a3f34bbb3f8abb48dbbdece3ef460e2926d690720ae8c5d27fc65a96765fb0ff7409993ba878df42538b88c9cc434805f791d5529829d8db4763c75d3ae121f", 0x6d}, {&(0x7f0000000a40)="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", 0x1000}], 0x6, &(0x7f0000001b40)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x25, [@multicast2]}, @ssrr={0x89, 0x1b, 0x98, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @remote, @empty, @local]}, @timestamp_prespec={0x44, 0x24, 0x95, 0x3, 0x5, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x3}]}, @lsrr={0x83, 0x13, 0x45, [@multicast1, @remote, @rand_addr=0x64010100, @rand_addr=0x64010101]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x18}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @multicast2}}}], 0xc8}, 0x20000001) 0s ago: executing program 4 (id=2221): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000f60000ab4d000000000000000000000000000c36c411760618", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000080)}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) kernel console output (not intermixed with test programs): 02/2025 [ 187.522043][ T7799] Call Trace: [ 187.525331][ T7799] [ 187.528267][ T7799] dump_stack_lvl+0x168/0x230 [ 187.532957][ T7799] ? show_regs_print_info+0x20/0x20 [ 187.538161][ T7799] ? load_image+0x3b0/0x3b0 [ 187.542685][ T7799] ? __lock_acquire+0x7c60/0x7c60 [ 187.547725][ T7799] should_fail+0x38c/0x4c0 [ 187.552149][ T7799] should_failslab+0x5/0x20 [ 187.556653][ T7799] slab_pre_alloc_hook+0x51/0xc0 [ 187.561592][ T7799] __kmalloc+0x6b/0x330 [ 187.565748][ T7799] ? sk_prot_alloc+0xe7/0x210 [ 187.570433][ T7799] sk_prot_alloc+0xe7/0x210 [ 187.574939][ T7799] ? sk_alloc+0x1d/0x310 [ 187.579190][ T7799] sk_alloc+0x2f/0x310 [ 187.583259][ T7799] bpf_prog_test_run_skb+0x240/0x1180 [ 187.588636][ T7799] ? __fget_files+0x40f/0x480 [ 187.593322][ T7799] ? cpu_online+0x60/0x60 [ 187.597651][ T7799] bpf_prog_test_run+0x31e/0x390 [ 187.602688][ T7799] __sys_bpf+0x535/0x670 [ 187.606937][ T7799] ? bpf_link_show_fdinfo+0x340/0x340 [ 187.612325][ T7799] ? vtime_user_exit+0x2dc/0x400 [ 187.617273][ T7799] __x64_sys_bpf+0x78/0x90 [ 187.621693][ T7799] do_syscall_64+0x4c/0xa0 [ 187.626115][ T7799] ? clear_bhb_loop+0x30/0x80 [ 187.631161][ T7799] ? clear_bhb_loop+0x30/0x80 [ 187.635863][ T7799] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.641765][ T7799] RIP: 0033:0x7fca2af82749 [ 187.646194][ T7799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.665806][ T7799] RSP: 002b:00007fca291e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 187.674238][ T7799] RAX: ffffffffffffffda RBX: 00007fca2b1d8fa0 RCX: 00007fca2af82749 [ 187.682222][ T7799] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 187.690192][ T7799] RBP: 00007fca291e9090 R08: 0000000000000000 R09: 0000000000000000 [ 187.698153][ T7799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.706129][ T7799] R13: 00007fca2b1d9038 R14: 00007fca2b1d8fa0 R15: 00007ffc2350fca8 [ 187.714109][ T7799] [ 187.838506][ T7803] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1219'. [ 187.992211][ T7819] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1224'. [ 188.046672][ T7819] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 188.371335][ T7803] device syzkaller0 entered promiscuous mode [ 188.506502][ T7817] netlink: 'syz.5.1222': attribute type 10 has an invalid length. [ 188.527290][ T7819] netlink: 'syz.4.1224': attribute type 10 has an invalid length. [ 188.881473][ T7839] netlink: 'syz.0.1231': attribute type 39 has an invalid length. [ 189.185127][ T7858] __nla_validate_parse: 1 callbacks suppressed [ 189.185144][ T7858] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1236'. [ 189.287328][ T7854] netlink: 'syz.5.1232': attribute type 10 has an invalid length. [ 189.557689][ T7854] team0: Device veth1_vlan failed to register rx_handler [ 189.922144][ T7878] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1244'. [ 189.936223][ T7874] validate_nla: 1 callbacks suppressed [ 189.936268][ T7874] netlink: 'syz.3.1243': attribute type 10 has an invalid length. [ 189.980441][ T7878] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 190.296848][ T7878] netlink: 'syz.4.1244': attribute type 10 has an invalid length. [ 190.305857][ T7873] mac80211_hwsim hwsim8 O3ãc¤±: renamed from wlan1 [ 190.671664][ T7892] netlink: 'syz.3.1249': attribute type 1 has an invalid length. [ 190.681030][ T7892] FAULT_INJECTION: forcing a failure. [ 190.681030][ T7892] name failslab, interval 1, probability 0, space 0, times 0 [ 190.693693][ T7892] CPU: 1 PID: 7892 Comm: syz.3.1249 Not tainted syzkaller #0 [ 190.701073][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 190.711138][ T7892] Call Trace: [ 190.714438][ T7892] [ 190.717375][ T7892] dump_stack_lvl+0x168/0x230 [ 190.722157][ T7892] ? show_regs_print_info+0x20/0x20 [ 190.727367][ T7892] ? load_image+0x3b0/0x3b0 [ 190.731885][ T7892] ? preempt_schedule+0xa7/0xb0 [ 190.736755][ T7892] ? mark_lock+0x94/0x320 [ 190.741103][ T7892] should_fail+0x38c/0x4c0 [ 190.745542][ T7892] should_failslab+0x5/0x20 [ 190.750056][ T7892] slab_pre_alloc_hook+0x51/0xc0 [ 190.755011][ T7892] __kmalloc+0x6b/0x330 [ 190.759173][ T7892] ? switchdev_deferred_enqueue+0x2a/0x210 [ 190.765000][ T7892] ? switchdev_deferred_enqueue+0x210/0x210 [ 190.770912][ T7892] switchdev_deferred_enqueue+0x2a/0x210 [ 190.776574][ T7892] switchdev_port_attr_set+0xf3/0x250 [ 190.781966][ T7892] ? switchdev_deferred_process+0x280/0x280 [ 190.787890][ T7892] ? __nla_validate_parse+0x1dd5/0x2750 [ 190.793459][ T7892] ? memset+0x1e/0x40 [ 190.797461][ T7892] br_set_state+0x1c1/0x530 [ 190.801986][ T7892] ? nbp_switchdev_allowed_egress+0x1d0/0x1d0 [ 190.808179][ T7892] ? rcu_lock_release+0x20/0x20 [ 190.813056][ T7892] ? __local_bh_disable_ip+0xfb/0x190 [ 190.818444][ T7892] ? do_raw_spin_lock+0x11d/0x280 [ 190.823480][ T7892] ? br_port_flags_change+0x17c/0x1f0 [ 190.828870][ T7892] br_setport+0xda4/0x1070 [ 190.833324][ T7892] br_setlink+0x51c/0x800 [ 190.837672][ T7892] ? br_vlan_info+0x450/0x450 [ 190.842390][ T7892] ? mutex_lock_io_nested+0x60/0x60 [ 190.847607][ T7892] ? mutex_is_locked+0xe/0x40 [ 190.852298][ T7892] rtnl_bridge_setlink+0x4ba/0x720 [ 190.857462][ T7892] ? rtnl_bridge_dellink+0x680/0x680 [ 190.862767][ T7892] rtnetlink_rcv_msg+0x7ff/0xe90 [ 190.867726][ T7892] ? rtnetlink_bind+0x80/0x80 [ 190.872423][ T7892] ? __local_bh_enable_ip+0x12a/0x1b0 [ 190.877805][ T7892] ? lockdep_hardirqs_on+0x94/0x140 [ 190.883018][ T7892] ? __local_bh_enable_ip+0x12a/0x1b0 [ 190.888399][ T7892] ? _local_bh_enable+0xa0/0xa0 [ 190.893267][ T7892] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 190.898486][ T7892] ? dev_queue_xmit+0x20/0x20 [ 190.903176][ T7892] ? memcpy+0x3c/0x60 [ 190.907174][ T7892] ? __copy_skb_header+0x417/0x5a0 [ 190.912317][ T7892] ? __skb_clone+0x480/0x790 [ 190.916924][ T7892] netlink_rcv_skb+0x1e0/0x430 [ 190.921694][ T7892] ? rtnetlink_bind+0x80/0x80 [ 190.926380][ T7892] ? netlink_ack+0xb60/0xb60 [ 190.930990][ T7892] netlink_unicast+0x774/0x920 [ 190.935775][ T7892] netlink_sendmsg+0x8ab/0xbc0 [ 190.940556][ T7892] ? netlink_getsockopt+0x560/0x560 [ 190.945768][ T7892] ? aa_sock_msg_perm+0x94/0x150 [ 190.950731][ T7892] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 190.956022][ T7892] ? security_socket_sendmsg+0x7c/0xa0 [ 190.961607][ T7892] ? netlink_getsockopt+0x560/0x560 [ 190.966817][ T7892] ____sys_sendmsg+0x5a2/0x8c0 [ 190.971597][ T7892] ? memset+0x1e/0x40 [ 190.975591][ T7892] ? __sys_sendmsg_sock+0x30/0x30 [ 190.980632][ T7892] ? import_iovec+0x6f/0xa0 [ 190.985157][ T7892] ___sys_sendmsg+0x1f0/0x260 [ 190.989872][ T7892] ? __sys_sendmsg+0x250/0x250 [ 190.994661][ T7892] ? vfs_write+0x84d/0xd00 [ 190.999106][ T7892] ? __fdget+0x18b/0x210 [ 191.003352][ T7892] __se_sys_sendmsg+0x190/0x250 [ 191.008211][ T7892] ? __x64_sys_sendmsg+0x80/0x80 [ 191.013154][ T7892] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 191.019157][ T7892] ? lockdep_hardirqs_on+0x94/0x140 [ 191.024459][ T7892] do_syscall_64+0x4c/0xa0 [ 191.028882][ T7892] ? clear_bhb_loop+0x30/0x80 [ 191.033566][ T7892] ? clear_bhb_loop+0x30/0x80 [ 191.038257][ T7892] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.044161][ T7892] RIP: 0033:0x7f7957c49749 [ 191.048599][ T7892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.068402][ T7892] RSP: 002b:00007f7955eb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.076832][ T7892] RAX: ffffffffffffffda RBX: 00007f7957e9ffa0 RCX: 00007f7957c49749 [ 191.084819][ T7892] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 191.092802][ T7892] RBP: 00007f7955eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 191.100794][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.108775][ T7892] R13: 00007f7957ea0038 R14: 00007f7957e9ffa0 R15: 00007ffc14009cf8 [ 191.117036][ T7892] [ 191.120123][ T7892] bridge0: error setting offload STP state on port 1(bridge_slave_0) [ 191.350602][ T7908] netlink: 'syz.0.1255': attribute type 27 has an invalid length. [ 191.384969][ T7911] netlink: 'syz.5.1256': attribute type 1 has an invalid length. [ 191.447356][ T7911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.534177][ T7918] IPv6: pim6reg1: Disabled Multicast RS [ 191.989066][ T7940] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1264'. [ 192.149868][ T7944] netlink: 'syz.5.1268': attribute type 10 has an invalid length. [ 192.239447][ T7945] netlink: 'syz.4.1263': attribute type 10 has an invalid length. [ 192.303432][ T7946] netlink: 194404 bytes leftover after parsing attributes in process `syz.0.1267'. [ 192.356354][ T7946] netlink: 'syz.0.1267': attribute type 1 has an invalid length. [ 192.378980][ T7946] netlink: 'syz.0.1267': attribute type 2 has an invalid length. [ 192.984558][ T7945] team0: Device veth1_vlan failed to register rx_handler [ 193.099668][ T7955] netlink: 'syz.0.1270': attribute type 10 has an invalid length. [ 193.118697][ T7955] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 193.141756][ T7955] batman_adv: batadv0: Removing interface: netdevsim0 [ 194.231573][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.238360][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.511406][ T8014] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1293'. [ 195.424758][ T8007] validate_nla: 4 callbacks suppressed [ 195.424776][ T8007] netlink: 'syz.1.1291': attribute type 6 has an invalid length. [ 195.452665][ T8005] netlink: 'syz.5.1289': attribute type 10 has an invalid length. [ 195.839199][ T8031] netlink: 'syz.0.1302': attribute type 10 has an invalid length. [ 196.012196][ T8031] device hsr_slave_0 left promiscuous mode [ 196.037612][ T8031] device hsr_slave_1 left promiscuous mode [ 196.171068][ T8033] netlink: 'syz.3.1296': attribute type 10 has an invalid length. [ 196.279110][ T8033] team0: Device veth1_vlan failed to register rx_handler [ 196.392881][ T8045] netlink: 'syz.4.1306': attribute type 10 has an invalid length. [ 196.509937][ T8050] netlink: 'syz.0.1307': attribute type 10 has an invalid length. [ 196.554991][ T8053] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1308'. [ 196.819703][ T8060] netlink: 'syz.5.1310': attribute type 10 has an invalid length. [ 197.017673][ T8069] FAULT_INJECTION: forcing a failure. [ 197.017673][ T8069] name failslab, interval 1, probability 0, space 0, times 0 [ 197.041673][ T8066] netlink: 'syz.1.1313': attribute type 17 has an invalid length. [ 197.057506][ T8066] netlink: 'syz.1.1313': attribute type 16 has an invalid length. [ 197.075797][ T8066] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1313'. [ 197.076660][ T8069] CPU: 1 PID: 8069 Comm: syz.5.1314 Not tainted syzkaller #0 [ 197.092349][ T8069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.102511][ T8069] Call Trace: [ 197.105815][ T8069] [ 197.108761][ T8069] dump_stack_lvl+0x168/0x230 [ 197.113485][ T8069] ? show_regs_print_info+0x20/0x20 [ 197.118709][ T8069] ? load_image+0x3b0/0x3b0 [ 197.123255][ T8069] ? __might_sleep+0xf0/0xf0 [ 197.127882][ T8069] ? __lock_acquire+0x7c60/0x7c60 [ 197.132956][ T8069] should_fail+0x38c/0x4c0 [ 197.137450][ T8069] should_failslab+0x5/0x20 [ 197.141972][ T8069] slab_pre_alloc_hook+0x51/0xc0 [ 197.146922][ T8069] ? __alloc_file+0x25/0x240 [ 197.151507][ T8069] kmem_cache_alloc+0x3d/0x290 [ 197.156267][ T8069] __alloc_file+0x25/0x240 [ 197.160676][ T8069] alloc_empty_file+0x90/0x180 [ 197.165427][ T8069] alloc_file+0x5b/0x4f0 [ 197.169661][ T8069] ? do_raw_spin_unlock+0x11d/0x230 [ 197.174856][ T8069] alloc_file_pseudo+0x17a/0x1f0 [ 197.179795][ T8069] ? alloc_empty_file_noaccount+0x80/0x80 [ 197.185506][ T8069] ? __lock_acquire+0x7c60/0x7c60 [ 197.190520][ T8069] ? __local_bh_enable_ip+0x12a/0x1b0 [ 197.195880][ T8069] ? _local_bh_enable+0xa0/0xa0 [ 197.200724][ T8069] anon_inode_getfile+0xc1/0x1a0 [ 197.205652][ T8069] bpf_link_prime+0x125/0x270 [ 197.210317][ T8069] bpf_raw_tracepoint_open+0x4bc/0x780 [ 197.215802][ T8069] ? bpf_obj_get_info_by_fd+0x2a80/0x2a80 [ 197.221525][ T8069] ? __might_fault+0xb3/0x110 [ 197.226193][ T8069] ? bpf_lsm_bpf+0x5/0x10 [ 197.230512][ T8069] ? security_bpf+0x7a/0xa0 [ 197.235008][ T8069] __sys_bpf+0x48b/0x670 [ 197.239245][ T8069] ? bpf_link_show_fdinfo+0x340/0x340 [ 197.244728][ T8069] ? rcu_nmi_exit+0x6f/0xf0 [ 197.249249][ T8069] ? vtime_user_exit+0x2dc/0x400 [ 197.254195][ T8069] __x64_sys_bpf+0x78/0x90 [ 197.258615][ T8069] do_syscall_64+0x4c/0xa0 [ 197.263021][ T8069] ? clear_bhb_loop+0x30/0x80 [ 197.267686][ T8069] ? clear_bhb_loop+0x30/0x80 [ 197.272349][ T8069] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.278227][ T8069] RIP: 0033:0x7fca2af82749 [ 197.282639][ T8069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.302230][ T8069] RSP: 002b:00007fca291e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 197.310631][ T8069] RAX: ffffffffffffffda RBX: 00007fca2b1d8fa0 RCX: 00007fca2af82749 [ 197.318593][ T8069] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000011 [ 197.326552][ T8069] RBP: 00007fca291e9090 R08: 0000000000000000 R09: 0000000000000000 [ 197.334507][ T8069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.342510][ T8069] R13: 00007fca2b1d9038 R14: 00007fca2b1d8fa0 R15: 00007ffc2350fca8 [ 197.350493][ T8069] [ 197.425163][ T8074] netlink: 'syz.3.1317': attribute type 6 has an invalid length. [ 197.437977][ T8074] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1317'. [ 197.553325][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 197.759390][ T8097] FAULT_INJECTION: forcing a failure. [ 197.759390][ T8097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.786653][ T8097] CPU: 1 PID: 8097 Comm: syz.1.1322 Not tainted syzkaller #0 [ 197.794070][ T8097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.804145][ T8097] Call Trace: [ 197.807435][ T8097] [ 197.810395][ T8097] dump_stack_lvl+0x168/0x230 [ 197.815093][ T8097] ? show_regs_print_info+0x20/0x20 [ 197.820303][ T8097] ? load_image+0x3b0/0x3b0 [ 197.824826][ T8097] ? __lock_acquire+0x7c60/0x7c60 [ 197.829876][ T8097] should_fail+0x38c/0x4c0 [ 197.834327][ T8097] _copy_from_user+0x2e/0x170 [ 197.839018][ T8097] bpf_test_init+0x136/0x1b0 [ 197.843620][ T8097] bpf_prog_test_run_skb+0x181/0x1180 [ 197.849004][ T8097] ? lockdep_hardirqs_on+0x94/0x140 [ 197.854215][ T8097] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 197.860391][ T8097] ? cpu_online+0x60/0x60 [ 197.861243][ T8100] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1325'. [ 197.864728][ T8097] bpf_prog_test_run+0x31e/0x390 [ 197.864757][ T8097] __sys_bpf+0x535/0x670 [ 197.864776][ T8097] ? bpf_link_show_fdinfo+0x340/0x340 [ 197.888475][ T8097] __x64_sys_bpf+0x78/0x90 [ 197.892902][ T8097] do_syscall_64+0x4c/0xa0 [ 197.897317][ T8097] ? clear_bhb_loop+0x30/0x80 [ 197.902000][ T8097] ? clear_bhb_loop+0x30/0x80 [ 197.906685][ T8097] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.912592][ T8097] RIP: 0033:0x7f2aadc4d749 [ 197.917020][ T8097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.936815][ T8097] RSP: 002b:00007f2aabe93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 197.945244][ T8097] RAX: ffffffffffffffda RBX: 00007f2aadea4090 RCX: 00007f2aadc4d749 [ 197.953224][ T8097] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 197.961209][ T8097] RBP: 00007f2aabe93090 R08: 0000000000000000 R09: 0000000000000000 [ 197.969181][ T8097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.977146][ T8097] R13: 00007f2aadea4128 R14: 00007f2aadea4090 R15: 00007fffe2c78aa8 [ 197.985118][ T8097] [ 198.041825][ T8106] netlink: 194404 bytes leftover after parsing attributes in process `syz.4.1326'. [ 198.399336][ T8133] FAULT_INJECTION: forcing a failure. [ 198.399336][ T8133] name failslab, interval 1, probability 0, space 0, times 0 [ 198.536857][ T8133] CPU: 0 PID: 8133 Comm: syz.3.1337 Not tainted syzkaller #0 [ 198.544278][ T8133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 198.554340][ T8133] Call Trace: [ 198.557627][ T8133] [ 198.560566][ T8133] dump_stack_lvl+0x168/0x230 [ 198.565259][ T8133] ? show_regs_print_info+0x20/0x20 [ 198.570466][ T8133] ? load_image+0x3b0/0x3b0 [ 198.574983][ T8133] ? __might_sleep+0xf0/0xf0 [ 198.579577][ T8133] ? __lock_acquire+0x7c60/0x7c60 [ 198.584610][ T8133] should_fail+0x38c/0x4c0 [ 198.589038][ T8133] should_failslab+0x5/0x20 [ 198.593543][ T8133] slab_pre_alloc_hook+0x51/0xc0 [ 198.598494][ T8133] __kmalloc_node+0x6e/0x3b0 [ 198.603089][ T8133] ? kvmalloc_node+0x84/0x130 [ 198.607772][ T8133] kvmalloc_node+0x84/0x130 [ 198.612277][ T8133] alloc_netdev_mqs+0x618/0xc40 [ 198.617142][ T8133] tun_set_iff+0x533/0xda0 [ 198.621566][ T8133] __tun_chr_ioctl+0x722/0x1e70 [ 198.626422][ T8133] ? tun_flow_create+0x310/0x310 [ 198.631372][ T8133] ? bpf_lsm_file_ioctl+0x5/0x10 [ 198.636308][ T8133] ? security_file_ioctl+0x7c/0xa0 [ 198.641421][ T8133] ? tun_chr_poll+0x620/0x620 [ 198.646097][ T8133] __se_sys_ioctl+0xfa/0x170 [ 198.650687][ T8133] do_syscall_64+0x4c/0xa0 [ 198.655097][ T8133] ? clear_bhb_loop+0x30/0x80 [ 198.659766][ T8133] ? clear_bhb_loop+0x30/0x80 [ 198.664443][ T8133] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.670344][ T8133] RIP: 0033:0x7f7957c49749 [ 198.674762][ T8133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.694375][ T8133] RSP: 002b:00007f7955eb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.702805][ T8133] RAX: ffffffffffffffda RBX: 00007f7957e9ffa0 RCX: 00007f7957c49749 [ 198.710789][ T8133] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000005 [ 198.718766][ T8133] RBP: 00007f7955eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 198.726743][ T8133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.734714][ T8133] R13: 00007f7957ea0038 R14: 00007f7957e9ffa0 R15: 00007ffc14009cf8 [ 198.742706][ T8133] [ 198.982133][ T8143] netlink: 194724 bytes leftover after parsing attributes in process `syz.3.1340'. [ 200.163089][ T8166] FAULT_INJECTION: forcing a failure. [ 200.163089][ T8166] name failslab, interval 1, probability 0, space 0, times 0 [ 200.196513][ T8171] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1352'. [ 200.261384][ T8166] CPU: 1 PID: 8166 Comm: syz.5.1350 Not tainted syzkaller #0 [ 200.268808][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 200.278881][ T8166] Call Trace: [ 200.282167][ T8166] [ 200.285099][ T8166] dump_stack_lvl+0x168/0x230 [ 200.289788][ T8166] ? show_regs_print_info+0x20/0x20 [ 200.294997][ T8166] ? load_image+0x3b0/0x3b0 [ 200.299512][ T8166] ? __might_sleep+0xf0/0xf0 [ 200.304110][ T8166] ? __lock_acquire+0x7c60/0x7c60 [ 200.309143][ T8166] should_fail+0x38c/0x4c0 [ 200.313569][ T8166] should_failslab+0x5/0x20 [ 200.318070][ T8166] slab_pre_alloc_hook+0x51/0xc0 [ 200.323002][ T8166] kmem_cache_alloc_node+0x47/0x2d0 [ 200.328189][ T8166] ? __alloc_skb+0xf4/0x750 [ 200.332675][ T8166] ? mark_lock+0x94/0x320 [ 200.336988][ T8166] __alloc_skb+0xf4/0x750 [ 200.341304][ T8166] alloc_skb_with_frags+0xa7/0x730 [ 200.346395][ T8166] ? __lock_acquire+0x12d9/0x7c60 [ 200.351404][ T8166] ? register_lock_class+0xb1/0x880 [ 200.356588][ T8166] sock_alloc_send_pskb+0x853/0x980 [ 200.361782][ T8166] ? sock_kzfree_s+0x50/0x50 [ 200.366367][ T8166] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 200.372334][ T8166] __ip6_append_data+0x257b/0x3810 [ 200.377459][ T8166] ? ip6_setup_cork+0x11e0/0x11e0 [ 200.382486][ T8166] ? ip6_setup_cork+0xc63/0x11e0 [ 200.387410][ T8166] ip6_append_data+0x1d4/0x310 [ 200.392158][ T8166] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 200.396995][ T8166] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 200.401832][ T8166] l2tp_ip6_sendmsg+0x1294/0x1770 [ 200.406853][ T8166] ? __might_sleep+0xf0/0xf0 [ 200.411436][ T8166] ? l2tp_ip6_destroy_sock+0x50/0x50 [ 200.416724][ T8166] ? aa_af_perm+0x2b0/0x2b0 [ 200.421213][ T8166] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 200.427615][ T8166] ? sock_rps_record_flow+0x17/0x3b0 [ 200.432883][ T8166] ? inet_send_prepare+0x260/0x260 [ 200.437977][ T8166] ? inet_sendmsg+0x78/0x2f0 [ 200.442562][ T8166] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 200.447855][ T8166] ? security_socket_sendmsg+0x7c/0xa0 [ 200.453321][ T8166] ? inet_send_prepare+0x260/0x260 [ 200.458425][ T8166] ____sys_sendmsg+0x5a2/0x8c0 [ 200.463196][ T8166] ? __sys_sendmsg_sock+0x30/0x30 [ 200.468214][ T8166] ? import_iovec+0x6f/0xa0 [ 200.472706][ T8166] ___sys_sendmsg+0x1f0/0x260 [ 200.477376][ T8166] ? __sys_sendmsg+0x250/0x250 [ 200.482162][ T8166] ? vfs_write+0x84d/0xd00 [ 200.486574][ T8166] ? __fdget+0x18b/0x210 [ 200.490802][ T8166] __se_sys_sendmsg+0x190/0x250 [ 200.495641][ T8166] ? __x64_sys_sendmsg+0x80/0x80 [ 200.500560][ T8166] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 200.506534][ T8166] ? lockdep_hardirqs_on+0x94/0x140 [ 200.511723][ T8166] do_syscall_64+0x4c/0xa0 [ 200.516123][ T8166] ? clear_bhb_loop+0x30/0x80 [ 200.520781][ T8166] ? clear_bhb_loop+0x30/0x80 [ 200.525444][ T8166] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.531322][ T8166] RIP: 0033:0x7fca2af82749 [ 200.535721][ T8166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.555311][ T8166] RSP: 002b:00007fca291e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.563712][ T8166] RAX: ffffffffffffffda RBX: 00007fca2b1d8fa0 RCX: 00007fca2af82749 [ 200.571779][ T8166] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 200.579747][ T8166] RBP: 00007fca291e9090 R08: 0000000000000000 R09: 0000000000000000 [ 200.587716][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.595684][ T8166] R13: 00007fca2b1d9038 R14: 00007fca2b1d8fa0 R15: 00007ffc2350fca8 [ 200.603662][ T8166] [ 200.681383][ T8179] netlink: 194404 bytes leftover after parsing attributes in process `syz.1.1354'. [ 200.691311][ T8175] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1355'. [ 200.707623][ T8179] validate_nla: 3 callbacks suppressed [ 200.707656][ T8179] netlink: 'syz.1.1354': attribute type 1 has an invalid length. [ 200.756964][ T8179] netlink: 'syz.1.1354': attribute type 2 has an invalid length. [ 201.299596][ T8212] FAULT_INJECTION: forcing a failure. [ 201.299596][ T8212] name failslab, interval 1, probability 0, space 0, times 0 [ 201.314216][ T8212] CPU: 0 PID: 8212 Comm: syz.3.1364 Not tainted syzkaller #0 [ 201.321604][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.324676][ T8213] FAULT_INJECTION: forcing a failure. [ 201.324676][ T8213] name failslab, interval 1, probability 0, space 0, times 0 [ 201.331659][ T8212] Call Trace: [ 201.331669][ T8212] [ 201.331676][ T8212] dump_stack_lvl+0x168/0x230 [ 201.331704][ T8212] ? show_regs_print_info+0x20/0x20 [ 201.360358][ T8212] ? load_image+0x3b0/0x3b0 [ 201.364882][ T8212] ? __might_sleep+0xf0/0xf0 [ 201.369486][ T8212] ? __lock_acquire+0x7c60/0x7c60 [ 201.374521][ T8212] should_fail+0x38c/0x4c0 [ 201.378948][ T8212] should_failslab+0x5/0x20 [ 201.383455][ T8212] slab_pre_alloc_hook+0x51/0xc0 [ 201.388393][ T8212] kmem_cache_alloc_node+0x47/0x2d0 [ 201.393590][ T8212] ? __alloc_skb+0xf4/0x750 [ 201.398093][ T8212] ? __netlink_dump_start+0x11f/0x700 [ 201.403473][ T8212] __alloc_skb+0xf4/0x750 [ 201.407808][ T8212] netlink_dump+0x1d3/0xcd0 [ 201.412318][ T8212] ? mutex_lock_io_nested+0x60/0x60 [ 201.417519][ T8212] ? netlink_lookup+0x1d0/0x1d0 [ 201.422380][ T8212] __netlink_dump_start+0x523/0x700 [ 201.427589][ T8212] rtnetlink_rcv_msg+0xb2b/0xe90 [ 201.432535][ T8212] ? neigh_get+0xca0/0xca0 [ 201.436949][ T8212] ? rtnetlink_bind+0x80/0x80 [ 201.441628][ T8212] ? __local_bh_enable_ip+0x12a/0x1b0 [ 201.446993][ T8212] ? lockdep_hardirqs_on+0x94/0x140 [ 201.452190][ T8212] ? __local_bh_enable_ip+0x12a/0x1b0 [ 201.457561][ T8212] ? _local_bh_enable+0xa0/0xa0 [ 201.462428][ T8212] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 201.467656][ T8212] ? perf_trace_lock+0xdf/0x370 [ 201.472520][ T8212] ? memcpy+0x3c/0x60 [ 201.476515][ T8212] ? neigh_get+0xca0/0xca0 [ 201.480947][ T8212] ? __skb_clone+0x480/0x790 [ 201.485546][ T8212] netlink_rcv_skb+0x1e0/0x430 [ 201.490309][ T8212] ? rtnetlink_bind+0x80/0x80 [ 201.494986][ T8212] ? netlink_ack+0xb60/0xb60 [ 201.499591][ T8212] netlink_unicast+0x774/0x920 [ 201.504361][ T8212] netlink_sendmsg+0x8ab/0xbc0 [ 201.509126][ T8212] ? netlink_getsockopt+0x560/0x560 [ 201.514331][ T8212] ? aa_sock_msg_perm+0x94/0x150 [ 201.519269][ T8212] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 201.524552][ T8212] ? security_socket_sendmsg+0x7c/0xa0 [ 201.530004][ T8212] ? netlink_getsockopt+0x560/0x560 [ 201.535197][ T8212] ____sys_sendmsg+0x5a2/0x8c0 [ 201.539964][ T8212] ? memset+0x1e/0x40 [ 201.543940][ T8212] ? __sys_sendmsg_sock+0x30/0x30 [ 201.548972][ T8212] ? import_iovec+0x6f/0xa0 [ 201.553474][ T8212] ___sys_sendmsg+0x1f0/0x260 [ 201.558168][ T8212] ? __sys_sendmsg+0x250/0x250 [ 201.562959][ T8212] ? trace_event_raw_event_lock+0x250/0x250 [ 201.568848][ T8212] ? vfs_write+0x84d/0xd00 [ 201.573280][ T8212] ? __fdget+0x18b/0x210 [ 201.577524][ T8212] __se_sys_sendmsg+0x190/0x250 [ 201.582378][ T8212] ? __x64_sys_sendmsg+0x80/0x80 [ 201.587310][ T8212] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 201.593297][ T8212] ? lockdep_hardirqs_on+0x94/0x140 [ 201.598493][ T8212] do_syscall_64+0x4c/0xa0 [ 201.602902][ T8212] ? clear_bhb_loop+0x30/0x80 [ 201.607572][ T8212] ? clear_bhb_loop+0x30/0x80 [ 201.612248][ T8212] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.618137][ T8212] RIP: 0033:0x7f7957c49749 [ 201.622548][ T8212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.642148][ T8212] RSP: 002b:00007f7955eb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.650562][ T8212] RAX: ffffffffffffffda RBX: 00007f7957e9ffa0 RCX: 00007f7957c49749 [ 201.658529][ T8212] RDX: 0000000004000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 201.666509][ T8212] RBP: 00007f7955eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 201.674476][ T8212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.682443][ T8212] R13: 00007f7957ea0038 R14: 00007f7957e9ffa0 R15: 00007ffc14009cf8 [ 201.690426][ T8212] [ 201.707309][ T8213] CPU: 0 PID: 8213 Comm: syz.1.1363 Not tainted syzkaller #0 [ 201.714726][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.724813][ T8213] Call Trace: [ 201.728098][ T8213] [ 201.731030][ T8213] dump_stack_lvl+0x168/0x230 [ 201.735717][ T8213] ? show_regs_print_info+0x20/0x20 [ 201.740936][ T8213] ? load_image+0x3b0/0x3b0 [ 201.745450][ T8213] ? __might_sleep+0xf0/0xf0 [ 201.750050][ T8213] ? __lock_acquire+0x7c60/0x7c60 [ 201.755082][ T8213] should_fail+0x38c/0x4c0 [ 201.759514][ T8213] should_failslab+0x5/0x20 [ 201.764016][ T8213] slab_pre_alloc_hook+0x51/0xc0 [ 201.768960][ T8213] __kmalloc_node_track_caller+0x68/0x3a0 [ 201.774678][ T8213] ? netlink_sendmsg+0x645/0xbc0 [ 201.779608][ T8213] ? kmem_cache_alloc_node+0x162/0x2d0 [ 201.785065][ T8213] ? __alloc_skb+0xf4/0x750 [ 201.789567][ T8213] ? netlink_sendmsg+0x645/0xbc0 [ 201.794510][ T8213] __alloc_skb+0x22c/0x750 [ 201.798934][ T8213] netlink_sendmsg+0x645/0xbc0 [ 201.803794][ T8213] ? netlink_getsockopt+0x560/0x560 [ 201.808995][ T8213] ? aa_sock_msg_perm+0x94/0x150 [ 201.813948][ T8213] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 201.819244][ T8213] ? security_socket_sendmsg+0x7c/0xa0 [ 201.824711][ T8213] ? netlink_getsockopt+0x560/0x560 [ 201.829915][ T8213] ____sys_sendmsg+0x5a2/0x8c0 [ 201.834688][ T8213] ? memset+0x1e/0x40 [ 201.838671][ T8213] ? __sys_sendmsg_sock+0x30/0x30 [ 201.843703][ T8213] ? import_iovec+0x6f/0xa0 [ 201.848211][ T8213] ___sys_sendmsg+0x1f0/0x260 [ 201.852902][ T8213] ? __sys_sendmsg+0x250/0x250 [ 201.857676][ T8213] ? trace_event_raw_event_lock+0x250/0x250 [ 201.863564][ T8213] ? vfs_write+0x84d/0xd00 [ 201.867992][ T8213] ? __fdget+0x18b/0x210 [ 201.872237][ T8213] __se_sys_sendmsg+0x190/0x250 [ 201.877175][ T8213] ? __x64_sys_sendmsg+0x80/0x80 [ 201.882113][ T8213] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 201.888107][ T8213] ? lockdep_hardirqs_on+0x94/0x140 [ 201.893306][ T8213] do_syscall_64+0x4c/0xa0 [ 201.897719][ T8213] ? clear_bhb_loop+0x30/0x80 [ 201.902391][ T8213] ? clear_bhb_loop+0x30/0x80 [ 201.907245][ T8213] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.913138][ T8213] RIP: 0033:0x7f2aadc4d749 [ 201.917601][ T8213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.937210][ T8213] RSP: 002b:00007f2aabeb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.945652][ T8213] RAX: ffffffffffffffda RBX: 00007f2aadea3fa0 RCX: 00007f2aadc4d749 [ 201.953616][ T8213] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 201.961588][ T8213] RBP: 00007f2aabeb4090 R08: 0000000000000000 R09: 0000000000000000 [ 201.969554][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.977522][ T8213] R13: 00007f2aadea4038 R14: 00007f2aadea3fa0 R15: 00007fffe2c78aa8 [ 201.985504][ T8213] [ 202.281705][ T8224] netlink: 'syz.3.1371': attribute type 10 has an invalid length. [ 202.632575][ T8241] netlink: 'syz.3.1378': attribute type 10 has an invalid length. [ 202.679622][ T8241] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1378'. [ 202.687057][ T8245] netlink: 'syz.4.1380': attribute type 29 has an invalid length. [ 202.730472][ T8245] netlink: 'syz.4.1380': attribute type 29 has an invalid length. [ 202.753934][ T8249] netlink: 'syz.4.1380': attribute type 29 has an invalid length. [ 202.946665][ T8261] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1386'. [ 202.990818][ T8263] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1387'. [ 203.698417][ T8298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.905304][ T8307] netlink: 'syz.1.1414': attribute type 10 has an invalid length. [ 204.709477][ T8341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.725739][ T8348] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1421'. [ 204.775369][ T8348] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 204.805864][ T8351] netlink: 'syz.5.1421': attribute type 10 has an invalid length. [ 205.602080][ T8371] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1426'. [ 205.621818][ T8371] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 205.647181][ T8373] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1425'. [ 205.661223][ T8368] netlink: 'syz.0.1427': attribute type 3 has an invalid length. [ 205.676594][ T8373] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 205.702419][ T8373] FAULT_INJECTION: forcing a failure. [ 205.702419][ T8373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.716135][ T8368] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1427'. [ 205.777654][ T8373] CPU: 0 PID: 8373 Comm: syz.1.1425 Not tainted syzkaller #0 [ 205.785075][ T8373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 205.795136][ T8373] Call Trace: [ 205.798422][ T8373] [ 205.801353][ T8373] dump_stack_lvl+0x168/0x230 [ 205.806042][ T8373] ? show_regs_print_info+0x20/0x20 [ 205.811247][ T8373] ? load_image+0x3b0/0x3b0 [ 205.815764][ T8373] ? __lock_acquire+0x7c60/0x7c60 [ 205.820797][ T8373] ? perf_trace_lock_acquire+0xe3/0x3c0 [ 205.826459][ T8373] should_fail+0x38c/0x4c0 [ 205.830891][ T8373] _copy_from_user+0x2e/0x170 [ 205.833146][ T8376] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.1427'. [ 205.835666][ T8373] __copy_msghdr_from_user+0xaf/0x5e0 [ 205.835693][ T8373] ? verify_lock_unused+0x140/0x140 [ 205.855414][ T8373] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 205.860729][ T8373] ___sys_sendmsg+0x156/0x260 [ 205.865428][ T8373] ? __sys_sendmsg+0x250/0x250 [ 205.870211][ T8373] ? vfs_write+0x84d/0xd00 [ 205.874744][ T8373] ? __fdget+0x18b/0x210 [ 205.878995][ T8373] __se_sys_sendmsg+0x190/0x250 [ 205.883863][ T8373] ? __x64_sys_sendmsg+0x80/0x80 [ 205.888804][ T8373] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 205.894813][ T8373] ? lockdep_hardirqs_on+0x94/0x140 [ 205.900032][ T8373] do_syscall_64+0x4c/0xa0 [ 205.904455][ T8373] ? clear_bhb_loop+0x30/0x80 [ 205.909131][ T8373] ? clear_bhb_loop+0x30/0x80 [ 205.913817][ T8373] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.919722][ T8373] RIP: 0033:0x7f2aadc4d749 [ 205.924146][ T8373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.943775][ T8373] RSP: 002b:00007f2aabe93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.952214][ T8373] RAX: ffffffffffffffda RBX: 00007f2aadea4090 RCX: 00007f2aadc4d749 [ 205.960200][ T8373] RDX: 0000000000040844 RSI: 00002000000000c0 RDI: 0000000000000003 [ 205.968182][ T8373] RBP: 00007f2aabe93090 R08: 0000000000000000 R09: 0000000000000000 [ 205.976166][ T8373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.984151][ T8373] R13: 00007f2aadea4128 R14: 00007f2aadea4090 R15: 00007fffe2c78aa8 [ 205.992152][ T8373] [ 206.002820][ T8383] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.1430'. [ 206.065244][ T8383] openvswitch: netlink: Message has 20476 unknown bytes. [ 206.554968][ T8397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.673596][ T8406] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1436'. [ 206.713911][ T8406] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 206.747149][ T8411] netlink: 'syz.1.1436': attribute type 10 has an invalid length. [ 206.833422][ T8420] netlink: 'syz.4.1443': attribute type 10 has an invalid length. [ 207.105528][ T8430] netlink: 'syz.0.1447': attribute type 4 has an invalid length. [ 207.123337][ T8430] netlink: 'syz.0.1447': attribute type 8 has an invalid length. [ 207.131235][ T8430] netlink: 197324 bytes leftover after parsing attributes in process `syz.0.1447'. [ 207.396277][ T8441] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 207.403466][ T8441] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 207.933748][ T8471] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1463'. [ 208.027295][ T8474] netlink: 'syz.5.1465': attribute type 21 has an invalid length. [ 208.099726][ T8479] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1467'. [ 208.116485][ T8479] openvswitch: netlink: Flow actions attr not present in new flow. [ 208.139618][ T8479] netlink: 'syz.4.1467': attribute type 1 has an invalid length. [ 208.157606][ T8479] netlink: 'syz.4.1467': attribute type 4 has an invalid length. [ 208.174434][ T8479] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1467'. [ 208.341427][ T8487] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 208.407803][ T8489] netlink: 'syz.4.1468': attribute type 10 has an invalid length. [ 208.868727][ T8510] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 209.319201][ T8494] FAULT_INJECTION: forcing a failure. [ 209.319201][ T8494] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 209.332544][ T8494] CPU: 0 PID: 8494 Comm: syz.3.1472 Not tainted syzkaller #0 [ 209.339926][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 209.349986][ T8494] Call Trace: [ 209.353266][ T8494] [ 209.356201][ T8494] dump_stack_lvl+0x168/0x230 [ 209.360887][ T8494] ? verify_lock_unused+0x140/0x140 [ 209.366089][ T8494] ? show_regs_print_info+0x20/0x20 [ 209.371301][ T8494] ? load_image+0x3b0/0x3b0 [ 209.375827][ T8494] ? mark_lock+0x94/0x320 [ 209.380168][ T8494] should_fail+0x38c/0x4c0 [ 209.384592][ T8494] prepare_alloc_pages+0x1e4/0x5f0 [ 209.389716][ T8494] __alloc_pages+0x10e/0x470 [ 209.394313][ T8494] ? zone_statistics+0x170/0x170 [ 209.399258][ T8494] ? rcu_lock_acquire+0x30/0x30 [ 209.404120][ T8494] ? alloc_pages+0x438/0x550 [ 209.408714][ T8494] __get_free_pages+0x8/0x30 [ 209.413304][ T8494] __tlb_remove_page_size+0x1f2/0x3f0 [ 209.418688][ T8494] unmap_page_range+0x10b8/0x2520 [ 209.423703][ T8494] ? uprobe_munmap+0x165/0x3f0 [ 209.428451][ T8494] unmap_vmas+0x11b/0x230 [ 209.432766][ T8494] ? uprobe_clear_state+0x4f/0x460 [ 209.437850][ T8494] ? unmap_page_range+0x2520/0x2520 [ 209.443022][ T8494] ? __mutex_lock_common+0x431/0x2390 [ 209.448382][ T8494] ? exit_mm_release+0x16/0x30 [ 209.453122][ T8494] ? memset+0x1e/0x40 [ 209.457261][ T8494] exit_mmap+0x38f/0x5f0 [ 209.461491][ T8494] ? vm_brk+0x20/0x20 [ 209.465462][ T8494] ? uprobe_clear_state+0x2f6/0x460 [ 209.470638][ T8494] ? mm_update_next_owner+0x522/0x640 [ 209.475994][ T8494] __mmput+0x115/0x3b0 [ 209.480041][ T8494] exit_mm+0x567/0x6c0 [ 209.484086][ T8494] ? xacct_add_tsk+0x4b0/0x4b0 [ 209.488832][ T8494] ? do_exit+0x20a0/0x20a0 [ 209.493227][ T8494] ? taskstats_exit+0x439/0xab0 [ 209.498053][ T8494] ? tty_audit_exit+0x14e/0x1f0 [ 209.502881][ T8494] do_exit+0x5a1/0x20a0 [ 209.507019][ T8494] ? put_task_struct+0x80/0x80 [ 209.511768][ T8494] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 209.517731][ T8494] ? lock_chain_count+0x20/0x20 [ 209.522579][ T8494] ? _raw_spin_lock_irq+0xab/0xe0 [ 209.527598][ T8494] do_group_exit+0x12e/0x300 [ 209.532317][ T8494] ? lockdep_hardirqs_on+0x94/0x140 [ 209.537521][ T8494] get_signal+0x6ca/0x12c0 [ 209.541946][ T8494] arch_do_signal_or_restart+0xc1/0x1300 [ 209.547564][ T8494] ? bpf_prog_put+0x253/0x260 [ 209.552241][ T8494] ? bpf_prog_free_id+0x190/0x190 [ 209.557272][ T8494] ? bpf_test_timer_leave+0x150/0x150 [ 209.562643][ T8494] ? get_sigframe_size+0x10/0x10 [ 209.567567][ T8494] ? __sys_bpf+0x535/0x670 [ 209.571978][ T8494] ? exit_to_user_mode_loop+0x3b/0x130 [ 209.577420][ T8494] exit_to_user_mode_loop+0x9e/0x130 [ 209.582693][ T8494] exit_to_user_mode_prepare+0xee/0x180 [ 209.588363][ T8494] syscall_exit_to_user_mode+0x16/0x40 [ 209.593822][ T8494] do_syscall_64+0x58/0xa0 [ 209.598323][ T8494] ? clear_bhb_loop+0x30/0x80 [ 209.602980][ T8494] ? clear_bhb_loop+0x30/0x80 [ 209.607635][ T8494] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.613505][ T8494] RIP: 0033:0x7f7957c49749 [ 209.617982][ T8494] Code: Unable to access opcode bytes at RIP 0x7f7957c4971f. [ 209.625324][ T8494] RSP: 002b:00007f7955eb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.633727][ T8494] RAX: fffffffffffffffc RBX: 00007f7957e9ffa0 RCX: 00007f7957c49749 [ 209.641687][ T8494] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 209.649669][ T8494] RBP: 00007f7955eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 209.657620][ T8494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.665725][ T8494] R13: 00007f7957ea0038 R14: 00007f7957e9ffa0 R15: 00007ffc14009cf8 [ 209.673699][ T8494] [ 209.905635][ T8540] netlink: 'syz.3.1492': attribute type 16 has an invalid length. [ 210.314654][ T8556] netlink: 'syz.5.1497': attribute type 4 has an invalid length. [ 210.661684][ T8577] __nla_validate_parse: 9 callbacks suppressed [ 210.661717][ T8577] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1504'. [ 210.872361][ T8584] delete_channel: no stack [ 210.902469][ T8584] delete_channel: no stack [ 211.136523][ T8597] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1512'. [ 211.255167][ T1287] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 211.400132][ T8610] FAULT_INJECTION: forcing a failure. [ 211.400132][ T8610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.423540][ T8610] CPU: 0 PID: 8610 Comm: syz.4.1516 Not tainted syzkaller #0 [ 211.430957][ T8610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 211.441004][ T8610] Call Trace: [ 211.444361][ T8610] [ 211.447281][ T8610] dump_stack_lvl+0x168/0x230 [ 211.451949][ T8610] ? show_regs_print_info+0x20/0x20 [ 211.457139][ T8610] ? load_image+0x3b0/0x3b0 [ 211.461632][ T8610] ? __lock_acquire+0x7c60/0x7c60 [ 211.466646][ T8610] should_fail+0x38c/0x4c0 [ 211.471055][ T8610] _copy_from_iter+0x22a/0x1150 [ 211.475898][ T8610] ? __lock_acquire+0x7c60/0x7c60 [ 211.480911][ T8610] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 211.486271][ T8610] ? __virt_addr_valid+0x3c6/0x470 [ 211.491365][ T8610] ? __phys_addr+0xb6/0x170 [ 211.495849][ T8610] ? __phys_addr_symbol+0x2b/0x70 [ 211.500860][ T8610] ? __check_object_size+0x30c/0x410 [ 211.506130][ T8610] netlink_sendmsg+0x749/0xbc0 [ 211.510883][ T8610] ? netlink_getsockopt+0x560/0x560 [ 211.516495][ T8610] ? aa_sock_msg_perm+0x94/0x150 [ 211.521413][ T8610] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 211.526686][ T8610] ? security_socket_sendmsg+0x7c/0xa0 [ 211.532129][ T8610] ? netlink_getsockopt+0x560/0x560 [ 211.537309][ T8610] ____sys_sendmsg+0x5a2/0x8c0 [ 211.542066][ T8610] ? memset+0x1e/0x40 [ 211.546045][ T8610] ? __sys_sendmsg_sock+0x30/0x30 [ 211.551071][ T8610] ? import_iovec+0x6f/0xa0 [ 211.555562][ T8610] ___sys_sendmsg+0x1f0/0x260 [ 211.560232][ T8610] ? __sys_sendmsg+0x250/0x250 [ 211.564986][ T8610] ? vfs_write+0x84d/0xd00 [ 211.569398][ T8610] ? __fdget+0x18b/0x210 [ 211.573627][ T8610] __se_sys_sendmsg+0x190/0x250 [ 211.578479][ T8610] ? __x64_sys_sendmsg+0x80/0x80 [ 211.583427][ T8610] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 211.589418][ T8610] ? lockdep_hardirqs_on+0x94/0x140 [ 211.594609][ T8610] do_syscall_64+0x4c/0xa0 [ 211.599006][ T8610] ? clear_bhb_loop+0x30/0x80 [ 211.603667][ T8610] ? clear_bhb_loop+0x30/0x80 [ 211.608336][ T8610] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 211.614215][ T8610] RIP: 0033:0x7fec3be41749 [ 211.618628][ T8610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.638314][ T8610] RSP: 002b:00007fec3a0a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.646727][ T8610] RAX: ffffffffffffffda RBX: 00007fec3c097fa0 RCX: 00007fec3be41749 [ 211.654775][ T8610] RDX: ff0f000020000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 211.662732][ T8610] RBP: 00007fec3a0a8090 R08: 0000000000000000 R09: 0000000000000000 [ 211.670706][ T8610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.678659][ T8610] R13: 00007fec3c098038 R14: 00007fec3c097fa0 R15: 00007ffcd7cee858 [ 211.686637][ T8610] [ 211.874454][ T8619] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1521'. [ 212.063775][ T8635] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1526'. [ 212.094018][ T8635] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 212.108487][ T8635] validate_nla: 2 callbacks suppressed [ 212.108503][ T8635] netlink: 'syz.5.1526': attribute type 10 has an invalid length. [ 212.172161][ T8640] netlink: 'syz.0.1528': attribute type 4 has an invalid length. [ 212.200322][ T8640] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1528'. [ 212.201289][ T8638] device syzkaller0 entered promiscuous mode [ 212.233218][ T8642] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1530'. [ 212.236074][ T8647] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1531'. [ 212.302352][ T8653] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1531'. [ 212.332932][ T8647] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 212.419186][ T8644] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1531'. [ 212.436276][ T8653] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 212.465778][ T8655] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1532'. [ 212.640512][ T8665] netlink: zone id is out of range [ 212.664118][ T8665] netlink: set zone limit has 8 unknown bytes [ 212.708476][ T8665] netlink: 'syz.4.1537': attribute type 9 has an invalid length. [ 213.513122][ T8664] FAULT_INJECTION: forcing a failure. [ 213.513122][ T8664] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 213.526661][ T8664] CPU: 1 PID: 8664 Comm: syz.3.1536 Not tainted syzkaller #0 [ 213.534055][ T8664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 213.544226][ T8664] Call Trace: [ 213.547516][ T8664] [ 213.550452][ T8664] dump_stack_lvl+0x168/0x230 [ 213.555140][ T8664] ? verify_lock_unused+0x140/0x140 [ 213.560350][ T8664] ? show_regs_print_info+0x20/0x20 [ 213.565680][ T8664] ? load_image+0x3b0/0x3b0 [ 213.570207][ T8664] ? perf_trace_lock+0xdf/0x370 [ 213.575079][ T8664] ? mark_lock+0x94/0x320 [ 213.579430][ T8664] should_fail+0x38c/0x4c0 [ 213.583866][ T8664] prepare_alloc_pages+0x1e4/0x5f0 [ 213.589000][ T8664] __alloc_pages+0x10e/0x470 [ 213.593602][ T8664] ? zone_statistics+0x170/0x170 [ 213.598560][ T8664] ? rcu_lock_acquire+0x30/0x30 [ 213.603424][ T8664] ? alloc_pages+0x438/0x550 [ 213.608024][ T8664] __get_free_pages+0x8/0x30 [ 213.612621][ T8664] __tlb_remove_page_size+0x1f2/0x3f0 [ 213.618020][ T8664] unmap_page_range+0x10b8/0x2520 [ 213.623074][ T8664] ? uprobe_munmap+0x165/0x3f0 [ 213.627952][ T8664] unmap_vmas+0x11b/0x230 [ 213.632292][ T8664] ? uprobe_clear_state+0x4f/0x460 [ 213.637413][ T8664] ? unmap_page_range+0x2520/0x2520 [ 213.642878][ T8664] ? __mutex_lock_common+0x431/0x2390 [ 213.648270][ T8664] ? memset+0x1e/0x40 [ 213.652271][ T8664] exit_mmap+0x38f/0x5f0 [ 213.656527][ T8664] ? vm_brk+0x20/0x20 [ 213.660545][ T8664] ? uprobe_clear_state+0x2f6/0x460 [ 213.665753][ T8664] ? mm_update_next_owner+0x522/0x640 [ 213.671149][ T8664] __mmput+0x115/0x3b0 [ 213.675235][ T8664] exit_mm+0x567/0x6c0 [ 213.679317][ T8664] ? xacct_add_tsk+0x4b0/0x4b0 [ 213.684102][ T8664] ? do_exit+0x20a0/0x20a0 [ 213.688546][ T8664] ? taskstats_exit+0x439/0xab0 [ 213.693415][ T8664] ? tty_audit_exit+0x14e/0x1f0 [ 213.698278][ T8664] do_exit+0x5a1/0x20a0 [ 213.702447][ T8664] ? put_task_struct+0x80/0x80 [ 213.707223][ T8664] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 213.713218][ T8664] ? lock_chain_count+0x20/0x20 [ 213.718088][ T8664] ? _raw_spin_lock_irq+0xab/0xe0 [ 213.723130][ T8664] do_group_exit+0x12e/0x300 [ 213.727730][ T8664] ? lockdep_hardirqs_on+0x94/0x140 [ 213.732937][ T8664] get_signal+0x6ca/0x12c0 [ 213.737365][ T8664] arch_do_signal_or_restart+0xc1/0x1300 [ 213.743004][ T8664] ? bpf_prog_put+0x253/0x260 [ 213.747679][ T8664] ? bpf_prog_free_id+0x190/0x190 [ 213.752706][ T8664] ? bpf_test_timer_leave+0x150/0x150 [ 213.758080][ T8664] ? get_sigframe_size+0x10/0x10 [ 213.763020][ T8664] ? __sys_bpf+0x535/0x670 [ 213.767462][ T8664] ? exit_to_user_mode_loop+0x3b/0x130 [ 213.772950][ T8664] exit_to_user_mode_loop+0x9e/0x130 [ 213.778247][ T8664] exit_to_user_mode_prepare+0xee/0x180 [ 213.783801][ T8664] syscall_exit_to_user_mode+0x16/0x40 [ 213.789261][ T8664] do_syscall_64+0x58/0xa0 [ 213.793676][ T8664] ? clear_bhb_loop+0x30/0x80 [ 213.798350][ T8664] ? clear_bhb_loop+0x30/0x80 [ 213.803025][ T8664] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.808912][ T8664] RIP: 0033:0x7f7957c49749 [ 213.813322][ T8664] Code: Unable to access opcode bytes at RIP 0x7f7957c4971f. [ 213.820681][ T8664] RSP: 002b:00007f7955eb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.829097][ T8664] RAX: fffffffffffffffc RBX: 00007f7957e9ffa0 RCX: 00007f7957c49749 [ 213.837067][ T8664] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 213.845035][ T8664] RBP: 00007f7955eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 213.853001][ T8664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.860968][ T8664] R13: 00007f7957ea0038 R14: 00007f7957e9ffa0 R15: 00007ffc14009cf8 [ 213.868952][ T8664] [ 214.359422][ T8716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.421324][ T8725] netlink: 'syz.0.1560': attribute type 7 has an invalid length. [ 214.635775][ T8737] netlink: 'syz.0.1565': attribute type 16 has an invalid length. [ 214.649682][ T8737] netlink: 'syz.0.1565': attribute type 3 has an invalid length. [ 214.691868][ T8741] netlink: 'syz.1.1567': attribute type 29 has an invalid length. [ 214.712400][ T8743] netlink: 'syz.4.1568': attribute type 10 has an invalid length. [ 214.725860][ T8741] netlink: 'syz.1.1567': attribute type 29 has an invalid length. [ 214.749746][ T8745] FAULT_INJECTION: forcing a failure. [ 214.749746][ T8745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.769769][ T8745] CPU: 0 PID: 8745 Comm: syz.1.1567 Not tainted syzkaller #0 [ 214.777181][ T8745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 214.787241][ T8745] Call Trace: [ 214.790506][ T8745] [ 214.793421][ T8745] dump_stack_lvl+0x168/0x230 [ 214.798092][ T8745] ? show_regs_print_info+0x20/0x20 [ 214.803276][ T8745] ? load_image+0x3b0/0x3b0 [ 214.807772][ T8745] ? __lock_acquire+0x7c60/0x7c60 [ 214.812786][ T8745] should_fail+0x38c/0x4c0 [ 214.817195][ T8745] _copy_to_iter+0x22a/0x1160 [ 214.821860][ T8745] ? __lock_acquire+0x7c60/0x7c60 [ 214.826871][ T8745] ? iov_iter_init+0x170/0x170 [ 214.831618][ T8745] ? __virt_addr_valid+0x3c6/0x470 [ 214.836804][ T8745] ? __phys_addr+0xb6/0x170 [ 214.841290][ T8745] ? __phys_addr_symbol+0x2b/0x70 [ 214.846298][ T8745] ? __check_object_size+0x30c/0x410 [ 214.851573][ T8745] __skb_datagram_iter+0xde/0x740 [ 214.856593][ T8745] ? skb_copy_datagram_iter+0x1f0/0x1f0 [ 214.862218][ T8745] skb_copy_datagram_iter+0xad/0x1f0 [ 214.867491][ T8745] netlink_recvmsg+0x2bb/0xdb0 [ 214.872239][ T8745] ? trace_event_raw_event_lock+0x250/0x250 [ 214.878120][ T8745] ? netlink_sendmsg+0xbc0/0xbc0 [ 214.883039][ T8745] ? aa_sk_perm+0x7b4/0x8f0 [ 214.887526][ T8745] ? aa_af_perm+0x2b0/0x2b0 [ 214.892015][ T8745] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 214.897285][ T8745] ? security_socket_recvmsg+0x85/0xb0 [ 214.902726][ T8745] ? netlink_sendmsg+0xbc0/0xbc0 [ 214.907646][ T8745] ____sys_recvmsg+0x291/0x580 [ 214.912482][ T8745] ? __might_fault+0xb3/0x110 [ 214.917150][ T8745] ? __sys_recvmsg_sock+0x40/0x40 [ 214.922183][ T8745] ? import_iovec+0x6f/0xa0 [ 214.926672][ T8745] ___sys_recvmsg+0x1af/0x4f0 [ 214.931340][ T8745] ? __sys_recvmsg+0x250/0x250 [ 214.936092][ T8745] ? trace_event_raw_event_lock+0x250/0x250 [ 214.941985][ T8745] ? __fdget+0x18b/0x210 [ 214.946212][ T8745] __x64_sys_recvmsg+0x1dd/0x2a0 [ 214.951138][ T8745] ? ___sys_recvmsg+0x4f0/0x4f0 [ 214.955976][ T8745] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 214.962037][ T8745] ? lockdep_hardirqs_on+0x94/0x140 [ 214.967223][ T8745] do_syscall_64+0x4c/0xa0 [ 214.971708][ T8745] ? clear_bhb_loop+0x30/0x80 [ 214.976366][ T8745] ? clear_bhb_loop+0x30/0x80 [ 214.981025][ T8745] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.986902][ T8745] RIP: 0033:0x7f2aadc4d749 [ 214.991302][ T8745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.010978][ T8745] RSP: 002b:00007f2aabe93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 215.019376][ T8745] RAX: ffffffffffffffda RBX: 00007f2aadea4090 RCX: 00007f2aadc4d749 [ 215.027333][ T8745] RDX: 0000000040012100 RSI: 0000200000000040 RDI: 0000000000000003 [ 215.035288][ T8745] RBP: 00007f2aabe93090 R08: 0000000000000000 R09: 0000000000000000 [ 215.043242][ T8745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.051195][ T8745] R13: 00007f2aadea4128 R14: 00007f2aadea4090 R15: 00007fffe2c78aa8 [ 215.059166][ T8745] [ 215.073170][ T8745] netlink: 'syz.1.1567': attribute type 29 has an invalid length. [ 215.299022][ T8761] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 215.308540][ T8755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.673484][ T8776] __nla_validate_parse: 10 callbacks suppressed [ 215.673530][ T8776] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1579'. [ 216.163146][ T8795] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1587'. [ 216.316546][ T8805] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1590'. [ 216.537683][ T8812] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1592'. [ 216.614441][ T8816] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1595'. [ 216.638574][ T8817] FAULT_INJECTION: forcing a failure. [ 216.638574][ T8817] name failslab, interval 1, probability 0, space 0, times 0 [ 216.698504][ T8816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.716250][ T8817] CPU: 1 PID: 8817 Comm: syz.3.1592 Not tainted syzkaller #0 [ 216.723760][ T8817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.733830][ T8817] Call Trace: [ 216.737120][ T8817] [ 216.740061][ T8817] dump_stack_lvl+0x168/0x230 [ 216.744802][ T8817] ? show_regs_print_info+0x20/0x20 [ 216.750016][ T8817] ? load_image+0x3b0/0x3b0 [ 216.754546][ T8817] ? __might_sleep+0xf0/0xf0 [ 216.759151][ T8817] ? __lock_acquire+0x7c60/0x7c60 [ 216.764192][ T8817] ? netlink_insert+0xe7c/0x11d0 [ 216.769151][ T8817] should_fail+0x38c/0x4c0 [ 216.773588][ T8817] should_failslab+0x5/0x20 [ 216.778106][ T8817] slab_pre_alloc_hook+0x51/0xc0 [ 216.783063][ T8817] kmem_cache_alloc_node+0x47/0x2d0 [ 216.788280][ T8817] ? __alloc_skb+0xf4/0x750 [ 216.792802][ T8817] __alloc_skb+0xf4/0x750 [ 216.797149][ T8817] netlink_sendmsg+0x645/0xbc0 [ 216.801931][ T8817] ? netlink_getsockopt+0x560/0x560 [ 216.807144][ T8817] ? aa_sock_msg_perm+0x94/0x150 [ 216.812100][ T8817] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 216.817395][ T8817] ? security_socket_sendmsg+0x7c/0xa0 [ 216.822864][ T8817] ? netlink_getsockopt+0x560/0x560 [ 216.828100][ T8817] ____sys_sendmsg+0x5a2/0x8c0 [ 216.832998][ T8817] ? memset+0x1e/0x40 [ 216.836994][ T8817] ? __sys_sendmsg_sock+0x30/0x30 [ 216.842039][ T8817] ? import_iovec+0x6f/0xa0 [ 216.846565][ T8817] ___sys_sendmsg+0x1f0/0x260 [ 216.851262][ T8817] ? __sys_sendmsg+0x250/0x250 [ 216.856048][ T8817] ? trace_event_raw_event_lock+0x250/0x250 [ 216.861955][ T8817] ? vfs_write+0x84d/0xd00 [ 216.866402][ T8817] ? __fdget+0x18b/0x210 [ 216.870657][ T8817] __se_sys_sendmsg+0x190/0x250 [ 216.875522][ T8817] ? __x64_sys_sendmsg+0x80/0x80 [ 216.880467][ T8817] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 216.886472][ T8817] ? lockdep_hardirqs_on+0x94/0x140 [ 216.891681][ T8817] do_syscall_64+0x4c/0xa0 [ 216.896106][ T8817] ? clear_bhb_loop+0x30/0x80 [ 216.900788][ T8817] ? clear_bhb_loop+0x30/0x80 [ 216.905481][ T8817] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.911380][ T8817] RIP: 0033:0x7f7957c49749 [ 216.915805][ T8817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.935505][ T8817] RSP: 002b:00007f7955e8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.943938][ T8817] RAX: ffffffffffffffda RBX: 00007f7957ea0090 RCX: 00007f7957c49749 [ 216.951930][ T8817] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 216.959914][ T8817] RBP: 00007f7955e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 216.967900][ T8817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.975886][ T8817] R13: 00007f7957ea0128 R14: 00007f7957ea0090 R15: 00007ffc14009cf8 [ 216.983900][ T8817] [ 217.058340][ T8823] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1597'. [ 217.281167][ T8831] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1600'. [ 217.314233][ T8831] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 217.337731][ T8831] validate_nla: 4 callbacks suppressed [ 217.337748][ T8831] netlink: 'syz.5.1600': attribute type 10 has an invalid length. [ 217.587215][ T8851] netlink: 'syz.3.1607': attribute type 29 has an invalid length. [ 217.622775][ T8853] netlink: 'syz.4.1606': attribute type 29 has an invalid length. [ 217.638040][ T8851] netlink: 'syz.3.1607': attribute type 29 has an invalid length. [ 217.644631][ T8854] FAULT_INJECTION: forcing a failure. [ 217.644631][ T8854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.701609][ T8853] netlink: 'syz.4.1606': attribute type 29 has an invalid length. [ 217.721093][ T8854] CPU: 1 PID: 8854 Comm: syz.3.1607 Not tainted syzkaller #0 [ 217.726156][ T8855] netlink: 'syz.4.1606': attribute type 29 has an invalid length. [ 217.728505][ T8854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 217.728519][ T8854] Call Trace: [ 217.728525][ T8854] [ 217.728533][ T8854] dump_stack_lvl+0x168/0x230 [ 217.728564][ T8854] ? show_regs_print_info+0x20/0x20 [ 217.728583][ T8854] ? load_image+0x3b0/0x3b0 [ 217.728604][ T8854] ? __lock_acquire+0x7c60/0x7c60 [ 217.728631][ T8854] should_fail+0x38c/0x4c0 [ 217.728657][ T8854] _copy_from_user+0x2e/0x170 [ 217.728677][ T8854] iovec_from_user+0x142/0x370 [ 217.728702][ T8854] __import_iovec+0x70/0x490 [ 217.728732][ T8854] import_iovec+0x6f/0xa0 [ 217.728756][ T8854] ___sys_recvmsg+0x420/0x4f0 [ 217.728782][ T8854] ? __sys_recvmsg+0x250/0x250 [ 217.804548][ T8854] ? trace_event_raw_event_lock+0x250/0x250 [ 217.810486][ T8854] ? __fdget+0x18b/0x210 [ 217.814745][ T8854] __x64_sys_recvmsg+0x1dd/0x2a0 [ 217.819789][ T8854] ? ___sys_recvmsg+0x4f0/0x4f0 [ 217.824652][ T8854] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 217.830667][ T8854] ? lockdep_hardirqs_on+0x94/0x140 [ 217.835912][ T8854] do_syscall_64+0x4c/0xa0 [ 217.840342][ T8854] ? clear_bhb_loop+0x30/0x80 [ 217.845025][ T8854] ? clear_bhb_loop+0x30/0x80 [ 217.849713][ T8854] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.855623][ T8854] RIP: 0033:0x7f7957c49749 [ 217.860051][ T8854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.879667][ T8854] RSP: 002b:00007f7955e8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 217.888097][ T8854] RAX: ffffffffffffffda RBX: 00007f7957ea0090 RCX: 00007f7957c49749 [ 217.896084][ T8854] RDX: 0000000040012100 RSI: 0000200000000040 RDI: 0000000000000003 [ 217.904059][ T8854] RBP: 00007f7955e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 217.912036][ T8854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.920013][ T8854] R13: 00007f7957ea0128 R14: 00007f7957ea0090 R15: 00007ffc14009cf8 [ 217.928016][ T8854] [ 218.252200][ T8861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.696114][ T8881] À: port 1(vlan0) entered blocking state [ 218.707248][ T8881] À: port 1(vlan0) entered disabled state [ 218.719616][ T8881] device vlan0 entered promiscuous mode [ 219.228636][ T8908] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1626'. [ 220.081322][ T8932] À: port 1(vlan0) entered blocking state [ 220.090844][ T8932] À: port 1(vlan0) entered disabled state [ 220.108700][ T8932] device vlan0 entered promiscuous mode [ 221.136469][ T8984] netlink: 'syz.0.1652': attribute type 9 has an invalid length. [ 221.164892][ T8984] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1652'. [ 221.509713][ T9000] FAULT_INJECTION: forcing a failure. [ 221.509713][ T9000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.564961][ T9000] CPU: 1 PID: 9000 Comm: syz.3.1658 Not tainted syzkaller #0 [ 221.572375][ T9000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 221.582449][ T9000] Call Trace: [ 221.585770][ T9000] [ 221.588703][ T9000] dump_stack_lvl+0x168/0x230 [ 221.593400][ T9000] ? show_regs_print_info+0x20/0x20 [ 221.598604][ T9000] ? load_image+0x3b0/0x3b0 [ 221.603118][ T9000] ? __lock_acquire+0x7c60/0x7c60 [ 221.608139][ T9000] should_fail+0x38c/0x4c0 [ 221.612572][ T9000] _copy_from_user+0x2e/0x170 [ 221.617247][ T9000] __copy_msghdr_from_user+0xaf/0x5e0 [ 221.622609][ T9000] ? verify_lock_unused+0x140/0x140 [ 221.627799][ T9000] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 221.633073][ T9000] ? trace_event_raw_event_lock+0x250/0x250 [ 221.638953][ T9000] ___sys_sendmsg+0x156/0x260 [ 221.643623][ T9000] ? __sys_sendmsg+0x250/0x250 [ 221.648380][ T9000] ? trace_event_raw_event_lock+0x250/0x250 [ 221.654255][ T9000] ? vfs_write+0x84d/0xd00 [ 221.658669][ T9000] ? __fdget+0x18b/0x210 [ 221.662898][ T9000] __se_sys_sendmsg+0x190/0x250 [ 221.667738][ T9000] ? __x64_sys_sendmsg+0x80/0x80 [ 221.672657][ T9000] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 221.678634][ T9000] ? lockdep_hardirqs_on+0x94/0x140 [ 221.683819][ T9000] do_syscall_64+0x4c/0xa0 [ 221.688215][ T9000] ? clear_bhb_loop+0x30/0x80 [ 221.692872][ T9000] ? clear_bhb_loop+0x30/0x80 [ 221.697530][ T9000] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.703405][ T9000] RIP: 0033:0x7f7957c49749 [ 221.707805][ T9000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.727408][ T9000] RSP: 002b:00007f7955eb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.735807][ T9000] RAX: ffffffffffffffda RBX: 00007f7957e9ffa0 RCX: 00007f7957c49749 [ 221.743761][ T9000] RDX: 000000000000001c RSI: 0000200000007940 RDI: 0000000000000004 [ 221.751720][ T9000] RBP: 00007f7955eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 221.759689][ T9000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.767648][ T9000] R13: 00007f7957ea0038 R14: 00007f7957e9ffa0 R15: 00007ffc14009cf8 [ 221.775615][ T9000] [ 221.827449][ T9008] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1659'. [ 221.844519][ T9008] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 221.868086][ T9014] netlink: 'syz.0.1659': attribute type 10 has an invalid length. [ 222.306194][ T9027] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1668'. [ 222.656260][ T9042] netlink: 'syz.1.1675': attribute type 13 has an invalid length. [ 222.677202][ T9042] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.1675'. [ 222.736337][ T9053] FAULT_INJECTION: forcing a failure. [ 222.736337][ T9053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.801305][ T9053] CPU: 1 PID: 9053 Comm: syz.0.1678 Not tainted syzkaller #0 [ 222.808727][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 222.818786][ T9053] Call Trace: [ 222.822069][ T9053] [ 222.824991][ T9053] dump_stack_lvl+0x168/0x230 [ 222.829684][ T9053] ? show_regs_print_info+0x20/0x20 [ 222.834990][ T9053] ? load_image+0x3b0/0x3b0 [ 222.839520][ T9053] ? __lock_acquire+0x7c60/0x7c60 [ 222.844560][ T9053] should_fail+0x38c/0x4c0 [ 222.848985][ T9053] _copy_from_user+0x2e/0x170 [ 222.853706][ T9053] __copy_msghdr_from_user+0xaf/0x5e0 [ 222.859092][ T9053] ? verify_lock_unused+0x140/0x140 [ 222.864306][ T9053] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 222.869614][ T9053] ? trace_event_raw_event_lock+0x250/0x250 [ 222.875527][ T9053] ___sys_sendmsg+0x156/0x260 [ 222.880226][ T9053] ? __sys_sendmsg+0x250/0x250 [ 222.885030][ T9053] ? __fdget+0x18b/0x210 [ 222.889277][ T9053] __se_sys_sendmsg+0x190/0x250 [ 222.894139][ T9053] ? __x64_sys_sendmsg+0x80/0x80 [ 222.899080][ T9053] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 222.905076][ T9053] ? lockdep_hardirqs_on+0x94/0x140 [ 222.910283][ T9053] do_syscall_64+0x4c/0xa0 [ 222.914701][ T9053] ? clear_bhb_loop+0x30/0x80 [ 222.919371][ T9053] ? clear_bhb_loop+0x30/0x80 [ 222.924052][ T9053] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 222.929943][ T9053] RIP: 0033:0x7f4adac40749 [ 222.934358][ T9053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.953962][ T9053] RSP: 002b:00007f4ad8ea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.962381][ T9053] RAX: ffffffffffffffda RBX: 00007f4adae96fa0 RCX: 00007f4adac40749 [ 222.970357][ T9053] RDX: 00000000200000c0 RSI: 0000200000000000 RDI: 0000000000000007 [ 222.978324][ T9053] RBP: 00007f4ad8ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 222.986278][ T9053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.994232][ T9053] R13: 00007f4adae97038 R14: 00007f4adae96fa0 R15: 00007fff0dc5fe78 [ 223.002198][ T9053] [ 223.087509][ T9064] netlink: 'syz.1.1681': attribute type 10 has an invalid length. [ 223.224404][ T9071] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1682'. [ 223.273757][ T9073] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1684'. [ 223.293871][ T9071] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 223.294068][ T9079] netlink: 'syz.0.1682': attribute type 10 has an invalid length. [ 223.685042][ T9059] delete_channel: no stack [ 223.756237][ T9093] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1691'. [ 225.126840][ T9096] netlink: 'syz.3.1692': attribute type 10 has an invalid length. [ 225.137423][ T9096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1692'. [ 225.237579][ T9099] netlink: 'syz.4.1695': attribute type 1 has an invalid length. [ 225.266797][ T9099] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1695'. [ 225.301327][ T9099] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1695'. [ 225.316471][ T9105] netlink: 'syz.3.1696': attribute type 10 has an invalid length. [ 226.079872][ T9133] netlink: 'syz.1.1705': attribute type 8 has an invalid length. [ 226.104535][ T9134] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 226.122368][ T9134] netlink: 'syz.3.1704': attribute type 10 has an invalid length. [ 226.180975][ T9138] netlink: 'syz.4.1706': attribute type 29 has an invalid length. [ 226.243738][ T9138] netlink: 'syz.4.1706': attribute type 29 has an invalid length. [ 226.453898][ T9143] __nla_validate_parse: 2 callbacks suppressed [ 226.453932][ T9143] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1710'. [ 227.081250][ T9182] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1727'. [ 227.410086][ T9208] FAULT_INJECTION: forcing a failure. [ 227.410086][ T9208] name failslab, interval 1, probability 0, space 0, times 0 [ 227.429411][ T9206] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1736'. [ 227.477352][ T9208] CPU: 0 PID: 9208 Comm: syz.5.1732 Not tainted syzkaller #0 [ 227.484773][ T9208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 227.494830][ T9208] Call Trace: [ 227.498171][ T9208] [ 227.501108][ T9208] dump_stack_lvl+0x168/0x230 [ 227.505797][ T9208] ? show_regs_print_info+0x20/0x20 [ 227.511023][ T9208] ? load_image+0x3b0/0x3b0 [ 227.515538][ T9208] ? __lock_acquire+0x7c60/0x7c60 [ 227.517996][ T9206] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1736'. [ 227.520573][ T9208] ? __lock_acquire+0x7c60/0x7c60 [ 227.534950][ T9208] should_fail+0x38c/0x4c0 [ 227.539385][ T9208] should_failslab+0x5/0x20 [ 227.543901][ T9208] slab_pre_alloc_hook+0x51/0xc0 [ 227.548847][ T9208] __kmalloc+0x6b/0x330 [ 227.553005][ T9208] ? bpf_prog_test_run_sk_lookup+0x4fb/0xb40 [ 227.558999][ T9208] ? bpf_ctx_init+0x16d/0x1a0 [ 227.563687][ T9208] bpf_prog_test_run_sk_lookup+0x4fb/0xb40 [ 227.569528][ T9208] ? bpf_test_timer_leave+0x150/0x150 [ 227.574928][ T9208] ? bpf_test_timer_leave+0x150/0x150 [ 227.580487][ T9208] bpf_prog_test_run+0x31e/0x390 [ 227.585447][ T9208] __sys_bpf+0x535/0x670 [ 227.585871][ T9206] netlink: del zone limit has 8 unknown bytes [ 227.589700][ T9208] ? bpf_link_show_fdinfo+0x340/0x340 [ 227.589723][ T9208] ? rcu_nmi_exit+0x6f/0xf0 [ 227.589751][ T9208] ? vtime_user_exit+0x2dc/0x400 [ 227.589775][ T9208] __x64_sys_bpf+0x78/0x90 [ 227.589793][ T9208] do_syscall_64+0x4c/0xa0 [ 227.589807][ T9208] ? clear_bhb_loop+0x30/0x80 [ 227.589822][ T9208] ? clear_bhb_loop+0x30/0x80 [ 227.589838][ T9208] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 227.589855][ T9208] RIP: 0033:0x7fca2af82749 [ 227.589872][ T9208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.589887][ T9208] RSP: 002b:00007fca291c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.589908][ T9208] RAX: ffffffffffffffda RBX: 00007fca2b1d9090 RCX: 00007fca2af82749 [ 227.589921][ T9208] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 227.589932][ T9208] RBP: 00007fca291c8090 R08: 0000000000000000 R09: 0000000000000000 [ 227.589942][ T9208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.589953][ T9208] R13: 00007fca2b1d9128 R14: 00007fca2b1d9090 R15: 00007ffc2350fca8 [ 227.589977][ T9208] [ 227.865867][ T9218] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1740'. [ 228.034011][ T9223] device wlan0 entered promiscuous mode [ 228.057005][ T9223] validate_nla: 7 callbacks suppressed [ 228.057022][ T9223] netlink: 'syz.4.1742': attribute type 9 has an invalid length. [ 228.143686][ T9223] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1742'. [ 229.338343][ T9269] netlink: 'syz.0.1758': attribute type 6 has an invalid length. [ 230.122069][ T9274] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1761'. [ 230.162592][ T9274] netlink: 'syz.0.1761': attribute type 12 has an invalid length. [ 230.191783][ T9274] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1761'. [ 230.234110][ T9285] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1764'. [ 230.545188][ T9304] netlink: 'syz.0.1770': attribute type 21 has an invalid length. [ 230.586429][ T9304] netlink: 'syz.0.1770': attribute type 1 has an invalid length. [ 231.275544][ T9345] FAULT_INJECTION: forcing a failure. [ 231.275544][ T9345] name failslab, interval 1, probability 0, space 0, times 0 [ 231.329631][ T9349] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.1783'. [ 231.336503][ T9345] CPU: 1 PID: 9345 Comm: syz.0.1785 Not tainted syzkaller #0 [ 231.346145][ T9345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.356211][ T9345] Call Trace: [ 231.359499][ T9345] [ 231.362428][ T9345] dump_stack_lvl+0x168/0x230 [ 231.367115][ T9345] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 231.373279][ T9345] ? show_regs_print_info+0x20/0x20 [ 231.378499][ T9345] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 231.384692][ T9345] should_fail+0x38c/0x4c0 [ 231.389153][ T9345] should_failslab+0x5/0x20 [ 231.393659][ T9345] slab_pre_alloc_hook+0x51/0xc0 [ 231.398601][ T9345] ? nf_ct_ext_add+0x42e/0x660 [ 231.403388][ T9345] __kmalloc_track_caller+0x69/0x330 [ 231.408682][ T9345] ? nf_ct_ext_add+0x42e/0x660 [ 231.413458][ T9345] krealloc+0x5a/0xf0 [ 231.417555][ T9345] nf_ct_ext_add+0x42e/0x660 [ 231.422171][ T9345] init_conntrack+0x751/0x14b0 [ 231.426946][ T9345] ? __nf_conntrack_find_get+0x54c/0x620 [ 231.432604][ T9345] ? early_drop+0x810/0x810 [ 231.437128][ T9345] ? nf_conntrack_find_get+0x600/0x600 [ 231.442595][ T9345] ? __siphash_unaligned+0x25c/0x3a0 [ 231.447904][ T9345] nf_conntrack_in+0xce9/0x16f0 [ 231.452796][ T9345] ? nf_ct_pernet+0x240/0x240 [ 231.457513][ T9345] ? ip6t_alloc_initial_table+0x640/0x640 [ 231.463256][ T9345] ? lockdep_hardirqs_on+0x94/0x140 [ 231.468473][ T9345] ? ipv6_defrag+0x2d2/0x3a0 [ 231.473085][ T9345] ? ipv6_conntrack_in+0x20/0x20 [ 231.478037][ T9345] nf_hook_slow+0xb9/0x200 [ 231.482766][ T9345] nf_hook+0x1f2/0x350 [ 231.486855][ T9345] ? ip6_make_skb+0x4c0/0x4c0 [ 231.491539][ T9345] ? rcu_read_unlock+0xa0/0xa0 [ 231.496321][ T9345] ip6_xmit+0xf7e/0x1670 [ 231.500569][ T9345] ? rcu_read_unlock+0xa0/0xa0 [ 231.505353][ T9345] ? ip6_autoflowlabel+0xd0/0xd0 [ 231.510313][ T9345] ? inet6_csk_route_socket+0x5ee/0xe50 [ 231.515869][ T9345] ? read_lock_is_recursive+0x10/0x10 [ 231.521353][ T9345] inet6_csk_xmit+0x444/0x6d0 [ 231.526037][ T9345] ? ip6_default_advmss+0x237/0x2a0 [ 231.531237][ T9345] ? inet6_csk_addr2sockaddr+0x1d0/0x1d0 [ 231.536882][ T9345] ? tcp_v6_send_check+0x195/0x410 [ 231.542023][ T9345] __tcp_transmit_skb+0x1ced/0x31c0 [ 231.547504][ T9345] ? __tcp_send_ack+0x5d0/0x5d0 [ 231.552659][ T9345] ? tcp_fastopen_cookie_check+0x269/0x3c0 [ 231.558476][ T9345] tcp_connect+0x2d6e/0x4970 [ 231.563120][ T9345] tcp_v6_connect+0x1136/0x1920 [ 231.568108][ T9345] ? tcp_v6_pre_connect+0xf0/0xf0 [ 231.573240][ T9345] ? perf_trace_preemptirq_template+0x2d0/0x380 [ 231.579497][ T9345] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 231.584872][ T9345] ? tcp_sendmsg_locked+0x3097/0x3590 [ 231.590247][ T9345] ? tcp_sendmsg+0x2b/0x40 [ 231.594666][ T9345] ? ____sys_sendmsg+0x5a2/0x8c0 [ 231.599601][ T9345] ? ___sys_sendmsg+0x1f0/0x260 [ 231.604454][ T9345] ? do_syscall_64+0x4c/0xa0 [ 231.609044][ T9345] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.615130][ T9345] __inet_stream_connect+0x293/0xdf0 [ 231.620438][ T9345] ? inet_dgram_connect+0x360/0x360 [ 231.625671][ T9345] tcp_sendmsg_fastopen+0x38f/0x600 [ 231.630963][ T9345] tcp_sendmsg_locked+0x3097/0x3590 [ 231.636161][ T9345] ? aa_sk_perm+0x8f0/0x8f0 [ 231.640672][ T9345] ? perf_trace_preemptirq_template+0x2d0/0x380 [ 231.646937][ T9345] ? mark_lock+0x94/0x320 [ 231.651381][ T9345] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 231.657424][ T9345] ? lock_chain_count+0x20/0x20 [ 231.662302][ T9345] ? tcp_free_fastopen_req+0x70/0x70 [ 231.667596][ T9345] ? lock_sock_nested+0x68/0x100 [ 231.672540][ T9345] ? inet6_compat_ioctl+0x380/0x380 [ 231.677739][ T9345] ? inet6_compat_ioctl+0x380/0x380 [ 231.682947][ T9345] tcp_sendmsg+0x2b/0x40 [ 231.687196][ T9345] ____sys_sendmsg+0x5a2/0x8c0 [ 231.691972][ T9345] ? memset+0x1e/0x40 [ 231.695958][ T9345] ? __sys_sendmsg_sock+0x30/0x30 [ 231.700991][ T9345] ? import_iovec+0x6f/0xa0 [ 231.705498][ T9345] ___sys_sendmsg+0x1f0/0x260 [ 231.710182][ T9345] ? __sys_sendmsg+0x250/0x250 [ 231.714973][ T9345] ? ktime_get_real_ts64+0x420/0x420 [ 231.720279][ T9345] ? __fdget+0x18b/0x210 [ 231.724518][ T9345] __se_sys_sendmsg+0x190/0x250 [ 231.729367][ T9345] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 231.735520][ T9345] ? __x64_sys_sendmsg+0x80/0x80 [ 231.740472][ T9345] ? syscall_enter_from_user_mode+0x2a/0x70 [ 231.746367][ T9345] do_syscall_64+0x4c/0xa0 [ 231.750876][ T9345] ? clear_bhb_loop+0x30/0x80 [ 231.755548][ T9345] ? clear_bhb_loop+0x30/0x80 [ 231.760226][ T9345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.766116][ T9345] RIP: 0033:0x7f4adac40749 [ 231.770798][ T9345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.790409][ T9345] RSP: 002b:00007f4ad8ea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.798829][ T9345] RAX: ffffffffffffffda RBX: 00007f4adae96fa0 RCX: 00007f4adac40749 [ 231.806801][ T9345] RDX: 00000000240440d1 RSI: 0000200000000000 RDI: 0000000000000005 [ 231.814767][ T9345] RBP: 00007f4ad8ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 231.822732][ T9345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.830756][ T9345] R13: 00007f4adae97038 R14: 00007f4adae96fa0 R15: 00007fff0dc5fe78 [ 231.838743][ T9345] [ 232.153383][ T9364] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1791'. [ 232.415865][ T9372] netlink: 'syz.1.1793': attribute type 1 has an invalid length. [ 232.434225][ T9374] device syzkaller0 entered promiscuous mode [ 232.436883][ T9372] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1793'. [ 232.765806][ T9385] netlink: 'syz.0.1796': attribute type 39 has an invalid length. [ 232.859682][ T9389] device syzkaller0 entered promiscuous mode [ 232.882791][ T9398] netlink: 'syz.0.1800': attribute type 6 has an invalid length. [ 233.126932][ T9407] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1804'. [ 233.294571][ T9423] device wlan0 entered promiscuous mode [ 233.912554][ T9445] netlink: 'syz.5.1818': attribute type 2 has an invalid length. [ 233.933016][ T9445] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1818'. [ 235.311680][ T9414] delete_channel: no stack [ 237.082285][ T9492] netlink: 'syz.3.1835': attribute type 21 has an invalid length. [ 237.108902][ T9492] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.130739][ T9492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.139077][ T9492] IPv6: NLM_F_CREATE should be set when creating new route [ 237.146845][ T9492] IPv6: NLM_F_CREATE should be set when creating new route [ 237.154332][ T9492] IPv6: NLM_F_CREATE should be set when creating new route [ 237.208716][ T9496] cgroup: fork rejected by pids controller in /syz5 [ 237.295042][ T9492] netlink: 'syz.3.1835': attribute type 10 has an invalid length. [ 237.551819][ T9492] device wlan1 entered promiscuous mode [ 237.611481][ T9492] team0: Port device wlan1 added [ 237.631463][ T9605] netlink: 'syz.4.1841': attribute type 11 has an invalid length. [ 238.094553][ T9628] netlink: 'syz.0.1849': attribute type 10 has an invalid length. [ 238.138729][ T9628] batman_adv: batadv0: Adding interface: netdevsim0 [ 238.177367][ T9628] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.220352][ T9631] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1851'. [ 238.575954][ T9628] batman_adv: batadv0: Interface activated: netdevsim0 [ 238.787832][ T9646] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1855'. [ 238.811805][ T9646] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 238.844065][ T9646] netlink: 'syz.3.1855': attribute type 10 has an invalid length. [ 238.995459][ T9644] chnl_net:caif_netlink_parms(): no params data found [ 239.090677][ T9644] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.097953][ T9644] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.105812][ T9644] device bridge_slave_0 entered promiscuous mode [ 239.114956][ T9644] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.122498][ T9644] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.132212][ T9644] device bridge_slave_1 entered promiscuous mode [ 239.173216][ T9667] netlink: 'syz.0.1864': attribute type 10 has an invalid length. [ 239.205441][ T9644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.219013][ T9644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.276249][ T9677] netlink: 'syz.0.1866': attribute type 41 has an invalid length. [ 239.290614][ T9644] team0: Port device team_slave_0 added [ 239.319000][ T9644] team0: Port device team_slave_1 added [ 239.375990][ T9644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.394694][ T9644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.422339][ T9644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.434806][ T9644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.442157][ T9644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.478931][ T9692] FAULT_INJECTION: forcing a failure. [ 239.478931][ T9692] name failslab, interval 1, probability 0, space 0, times 0 [ 239.492678][ T9644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.506314][ T9692] CPU: 0 PID: 9692 Comm: syz.0.1871 Not tainted syzkaller #0 [ 239.513728][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 239.523776][ T9692] Call Trace: [ 239.527049][ T9692] [ 239.529979][ T9692] dump_stack_lvl+0x168/0x230 [ 239.534673][ T9692] ? show_regs_print_info+0x20/0x20 [ 239.539868][ T9692] ? load_image+0x3b0/0x3b0 [ 239.544375][ T9692] ? __lock_acquire+0x7c60/0x7c60 [ 239.549436][ T9692] should_fail+0x38c/0x4c0 [ 239.553853][ T9692] should_failslab+0x5/0x20 [ 239.558350][ T9692] slab_pre_alloc_hook+0x51/0xc0 [ 239.563286][ T9692] __kmalloc_node_track_caller+0x68/0x3a0 [ 239.568992][ T9692] ? sctp_packet_transmit+0x2f3/0x2920 [ 239.574434][ T9692] ? kmem_cache_alloc_node+0x162/0x2d0 [ 239.579874][ T9692] ? __alloc_skb+0xf4/0x750 [ 239.584371][ T9692] ? sctp_packet_transmit+0x2f3/0x2920 [ 239.589905][ T9692] __alloc_skb+0x22c/0x750 [ 239.594309][ T9692] sctp_packet_transmit+0x2f3/0x2920 [ 239.599581][ T9692] ? __sctp_packet_append_chunk+0x913/0xd00 [ 239.605468][ T9692] ? sctp_packet_append_chunk+0x9ae/0xfd0 [ 239.611196][ T9692] sctp_packet_singleton+0x230/0x330 [ 239.616482][ T9692] ? sctp_outq_select_transport+0x570/0x570 [ 239.622369][ T9692] ? sctp_outq_select_transport+0x45d/0x570 [ 239.628256][ T9692] ? sctp_transport_burst_limited+0x193/0x280 [ 239.634316][ T9692] sctp_outq_flush+0x48f/0x30d0 [ 239.639162][ T9692] ? rcu_is_watching+0x11/0xa0 [ 239.643909][ T9692] ? enqueue_timer+0x225/0x520 [ 239.648657][ T9692] ? sctp_outq_tail+0x8a0/0x8a0 [ 239.653498][ T9692] ? sctp_outq_tail+0x600/0x8a0 [ 239.658416][ T9692] ? sctp_outq_uncork+0x49/0xa0 [ 239.663252][ T9692] sctp_do_sm+0x4e61/0x5500 [ 239.667751][ T9692] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 239.673636][ T9692] ? sctp_stream_init_ext+0x53/0x160 [ 239.678908][ T9692] ? ____sys_sendmsg+0x5a2/0x8c0 [ 239.683831][ T9692] ? ___sys_sendmsg+0x1f0/0x260 [ 239.688688][ T9692] ? __sk_mem_raise_allocated+0x70d/0x1190 [ 239.694485][ T9692] sctp_primitive_ASSOCIATE+0x91/0xc0 [ 239.699842][ T9692] sctp_sendmsg_to_asoc+0x1499/0x1d90 [ 239.705207][ T9692] ? sctp_assoc_add_peer+0xe2c/0x15a0 [ 239.710575][ T9692] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 239.716367][ T9692] ? __sctp_connect+0xd20/0xd20 [ 239.721204][ T9692] ? __local_bh_enable_ip+0x12a/0x1b0 [ 239.726560][ T9692] ? _local_bh_enable+0xa0/0xa0 [ 239.731399][ T9692] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 239.736928][ T9692] ? security_sctp_bind_connect+0x85/0xb0 [ 239.742636][ T9692] sctp_sendmsg+0x19ae/0x2950 [ 239.747313][ T9692] ? aa_sk_perm+0x7b4/0x8f0 [ 239.751808][ T9692] ? sctp_getsockopt+0x8a0/0x8a0 [ 239.756743][ T9692] ? aa_af_perm+0x2b0/0x2b0 [ 239.761230][ T9692] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 239.767636][ T9692] ? sock_rps_record_flow+0x17/0x3b0 [ 239.772906][ T9692] ? inet_send_prepare+0x260/0x260 [ 239.778000][ T9692] ? inet_sendmsg+0x78/0x2f0 [ 239.782574][ T9692] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 239.787840][ T9692] ? security_socket_sendmsg+0x7c/0xa0 [ 239.793291][ T9692] ? inet_send_prepare+0x260/0x260 [ 239.798388][ T9692] ____sys_sendmsg+0x5a2/0x8c0 [ 239.803140][ T9692] ? memset+0x1e/0x40 [ 239.807107][ T9692] ? __sys_sendmsg_sock+0x30/0x30 [ 239.812123][ T9692] ? import_iovec+0x6f/0xa0 [ 239.816614][ T9692] ___sys_sendmsg+0x1f0/0x260 [ 239.821288][ T9692] ? __sys_sendmsg+0x250/0x250 [ 239.826046][ T9692] ? trace_event_raw_event_lock+0x250/0x250 [ 239.831924][ T9692] ? vfs_write+0x84d/0xd00 [ 239.836347][ T9692] ? __fdget+0x18b/0x210 [ 239.840581][ T9692] __se_sys_sendmsg+0x190/0x250 [ 239.845420][ T9692] ? __x64_sys_sendmsg+0x80/0x80 [ 239.850339][ T9692] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 239.856319][ T9692] ? lockdep_hardirqs_on+0x94/0x140 [ 239.861506][ T9692] do_syscall_64+0x4c/0xa0 [ 239.865906][ T9692] ? clear_bhb_loop+0x30/0x80 [ 239.870566][ T9692] ? clear_bhb_loop+0x30/0x80 [ 239.875228][ T9692] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 239.881105][ T9692] RIP: 0033:0x7f4adac40749 [ 239.885508][ T9692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.905098][ T9692] RSP: 002b:00007f4ad8ea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.913585][ T9692] RAX: ffffffffffffffda RBX: 00007f4adae96fa0 RCX: 00007f4adac40749 [ 239.921628][ T9692] RDX: 00000000000080d1 RSI: 0000200000000300 RDI: 0000000000000003 [ 239.929583][ T9692] RBP: 00007f4ad8ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 239.937632][ T9692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.945584][ T9692] R13: 00007f4adae97038 R14: 00007f4adae96fa0 R15: 00007fff0dc5fe78 [ 239.953553][ T9692] [ 239.968608][ T144] wlan1: Trigger new scan to find an IBSS to join [ 239.970976][ T9694] netlink: 'syz.1.1872': attribute type 29 has an invalid length. [ 240.003440][ T9694] netlink: 'syz.1.1872': attribute type 29 has an invalid length. [ 240.042685][ T9694] netlink: 'syz.1.1872': attribute type 29 has an invalid length. [ 240.076044][ T9644] device hsr_slave_0 entered promiscuous mode [ 240.105288][ T9644] device hsr_slave_1 entered promiscuous mode [ 240.138029][ T9644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.145699][ T9644] Cannot create hsr debugfs directory [ 240.251920][ T9706] netlink: 'syz.3.1877': attribute type 10 has an invalid length. [ 240.361283][ T1159] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.492754][ T1159] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.564367][ T1159] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.649415][ T1159] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 240.675742][ T1159] batman_adv: batadv0: Removing interface: netdevsim0 [ 240.697074][ T1159] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.709217][ T9740] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1888'. [ 240.748552][ T9740] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 240.770574][ T9744] netlink: 'syz.3.1888': attribute type 10 has an invalid length. [ 240.786831][ T4744] Bluetooth: hci4: command 0x0409 tx timeout [ 240.881110][ T9746] netlink: 'syz.4.1892': attribute type 10 has an invalid length. [ 240.914937][ T9748] netlink: 'syz.0.1893': attribute type 2 has an invalid length. [ 240.966157][ T9644] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.979875][ T9748] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1893'. [ 241.109076][ T9644] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.243428][ T9644] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.320530][ T9644] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 241.372504][ T9644] batman_adv: batadv0: Removing interface: netdevsim0 [ 241.391771][ T9644] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.416020][ T9774] netlink: 399 bytes leftover after parsing attributes in process `syz.4.1904'. [ 241.653241][ T9644] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 241.680882][ T9781] netlink: 'syz.4.1906': attribute type 10 has an invalid length. [ 241.697505][ T9644] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 241.724555][ T9644] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 241.766242][ T9644] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 241.772698][ T9788] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1909'. [ 241.928179][ T9799] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1912'. [ 241.955552][ T9803] -: renamed from syzkaller0 [ 242.052596][ T9809] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1915'. [ 242.076099][ T9644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.084362][ T9809] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 242.123881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.147678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.169771][ T9644] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.255612][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.275370][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.301603][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.308766][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.324154][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.361955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.400132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.409345][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.416412][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.492516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.515271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.571743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.583106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.593719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.605934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.615605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.625122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.635124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.653061][ T1159] device vlan0 left promiscuous mode [ 242.661655][ T1159] À: port 1(vlan0) entered disabled state [ 242.687232][ T1159] device hsr_slave_0 left promiscuous mode [ 242.703933][ T1159] device hsr_slave_1 left promiscuous mode [ 242.714691][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.722467][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.731334][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.740547][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.748901][ T1159] device team0 left promiscuous mode [ 242.754483][ T1159] device team_slave_0 left promiscuous mode [ 242.761625][ T1159] device team_slave_1 left promiscuous mode [ 242.768972][ T1159] bridge0: port 3(team0) entered disabled state [ 242.777746][ T1159] device bridge_slave_1 left promiscuous mode [ 242.784287][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.794723][ T1159] device bridge_slave_0 left promiscuous mode [ 242.801714][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.831116][ T1159] device veth1_vlan left promiscuous mode [ 242.855353][ T1159] device veth0_vlan left promiscuous mode [ 242.861343][ T4851] Bluetooth: hci4: command 0x041b tx timeout [ 243.180748][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 243.195801][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 243.221604][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.344596][ T1159] bond0 (unregistering): Released all slaves [ 243.411434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.421130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.435981][ T9644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.640919][ T9844] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.1928'. [ 243.750266][ T9858] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1931'. [ 243.780937][ T9858] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 243.845435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.857243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.891007][ T9644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.271766][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.298215][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.336679][ T9893] validate_nla: 6 callbacks suppressed [ 244.357289][ T9893] netlink: 'syz.0.1941': attribute type 3 has an invalid length. [ 244.365353][ T9893] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1941'. [ 244.376136][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.391437][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.416414][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.441117][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.495783][ T9644] device veth0_vlan entered promiscuous mode [ 244.550919][ T9644] device veth1_vlan entered promiscuous mode [ 244.657907][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.683749][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.724255][ T9644] device veth0_macvtap entered promiscuous mode [ 244.752213][ T9644] device veth1_macvtap entered promiscuous mode [ 244.777467][ T4273] wlan1: Trigger new scan to find an IBSS to join [ 244.798849][ T9644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.850153][ T9644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.887688][ T9644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.918807][ T9644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.936901][ T4849] Bluetooth: hci4: command 0x040f tx timeout [ 244.963364][ T9644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.995737][ T9644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.026368][ T9644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.064651][ T9644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.087982][ T9644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.126802][ T9644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.166682][ T9644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.186367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.204905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.225461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.237590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.261254][ T9644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.313910][ T9644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.339082][ T9644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.363015][ T9644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.374869][ T9644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.392617][ T9644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.402874][ T9644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.414376][ T9644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.436037][ T9644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.455011][ T9644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.476665][ T9910] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1950'. [ 245.476922][ T9644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.481730][ T9644] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.514218][ T9644] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.532820][ T9644] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.545238][ T9644] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.588583][ T9916] netlink: 'syz.3.1951': attribute type 10 has an invalid length. [ 245.608932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.623631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.787255][ T4273] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 245.803341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 245.876091][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.934013][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.942293][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.956836][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.982071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.994357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 246.192699][ T9955] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1962'. [ 246.225112][ T9954] netlink: 'syz.4.1964': attribute type 10 has an invalid length. [ 246.246797][ T9962] netlink: 'syz.1.1962': attribute type 10 has an invalid length. [ 246.267829][ T9955] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 246.571951][ T9974] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.1972'. [ 246.954168][ T9988] netlink: 'syz.3.1979': attribute type 10 has an invalid length. [ 247.023008][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 247.209631][T10006] netlink: 'syz.3.1986': attribute type 9 has an invalid length. [ 247.233146][T10006] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1986'. [ 247.275921][T10013] netlink: 'syz.3.1986': attribute type 21 has an invalid length. [ 247.375458][T10019] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1991'. [ 247.412880][T10019] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 247.434146][T10019] netlink: 'syz.1.1991': attribute type 10 has an invalid length. [ 248.734203][T10056] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2006'. [ 249.021387][T10076] FAULT_INJECTION: forcing a failure. [ 249.021387][T10076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.069094][T10076] CPU: 1 PID: 10076 Comm: syz.1.2015 Not tainted syzkaller #0 [ 249.076607][T10076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.086682][T10076] Call Trace: [ 249.089980][T10076] [ 249.092925][T10076] dump_stack_lvl+0x168/0x230 [ 249.097617][T10076] ? show_regs_print_info+0x20/0x20 [ 249.102844][T10076] ? load_image+0x3b0/0x3b0 [ 249.107357][T10076] ? __lock_acquire+0x7c60/0x7c60 [ 249.112389][T10076] should_fail+0x38c/0x4c0 [ 249.116900][T10076] _copy_from_iter+0x22a/0x1150 [ 249.121763][T10076] ? __lock_acquire+0x7c60/0x7c60 [ 249.126795][T10076] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 249.132177][T10076] ? __virt_addr_valid+0x3c6/0x470 [ 249.137284][T10076] ? __phys_addr+0xb6/0x170 [ 249.141779][T10076] ? __phys_addr_symbol+0x2b/0x70 [ 249.146797][T10076] ? __check_object_size+0x30c/0x410 [ 249.152084][T10076] netlink_sendmsg+0x749/0xbc0 [ 249.156862][T10076] ? netlink_getsockopt+0x560/0x560 [ 249.162070][T10076] ? aa_sock_msg_perm+0x94/0x150 [ 249.167011][T10076] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 249.172309][T10076] ? security_socket_sendmsg+0x7c/0xa0 [ 249.177765][T10076] ? netlink_getsockopt+0x560/0x560 [ 249.182966][T10076] ____sys_sendmsg+0x5a2/0x8c0 [ 249.187741][T10076] ? memset+0x1e/0x40 [ 249.191725][T10076] ? __sys_sendmsg_sock+0x30/0x30 [ 249.196767][T10076] ? import_iovec+0x6f/0xa0 [ 249.201280][T10076] ___sys_sendmsg+0x1f0/0x260 [ 249.205966][T10076] ? __sys_sendmsg+0x250/0x250 [ 249.210744][T10076] ? vfs_write+0x84d/0xd00 [ 249.215180][T10076] ? __fdget+0x18b/0x210 [ 249.219423][T10076] __se_sys_sendmsg+0x190/0x250 [ 249.224285][T10076] ? __x64_sys_sendmsg+0x80/0x80 [ 249.229220][T10076] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 249.235219][T10076] ? lockdep_hardirqs_on+0x94/0x140 [ 249.240425][T10076] do_syscall_64+0x4c/0xa0 [ 249.244836][T10076] ? clear_bhb_loop+0x30/0x80 [ 249.249508][T10076] ? clear_bhb_loop+0x30/0x80 [ 249.254197][T10076] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 249.260088][T10076] RIP: 0033:0x7f2aadc4d749 [ 249.264503][T10076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.284253][T10076] RSP: 002b:00007f2aabeb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.292679][T10076] RAX: ffffffffffffffda RBX: 00007f2aadea3fa0 RCX: 00007f2aadc4d749 [ 249.300651][T10076] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 249.308617][T10076] RBP: 00007f2aabeb4090 R08: 0000000000000000 R09: 0000000000000000 [ 249.316580][T10076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.324549][T10076] R13: 00007f2aadea4038 R14: 00007f2aadea3fa0 R15: 00007fffe2c78aa8 [ 249.332533][T10076] [ 249.586080][T10095] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2018'. [ 249.603680][T10095] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 249.623118][T10095] netlink: 'syz.1.2018': attribute type 10 has an invalid length. [ 249.851513][T10118] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2031'. [ 249.861942][T10118] openvswitch: netlink: Flow actions attr not present in new flow. [ 249.954674][T10120] device lo entered promiscuous mode [ 249.984246][T10120] netlink: 'syz.3.2032': attribute type 10 has an invalid length. [ 250.190464][T10144] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2042'. [ 250.199976][T10144] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2042'. [ 250.211698][T10145] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2042'. [ 250.224196][T10146] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2042'. [ 250.274520][T10148] netlink: 'syz.3.2043': attribute type 10 has an invalid length. [ 250.291609][T10148] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2043'. [ 253.385716][T10159] device sit0 entered promiscuous mode [ 253.808930][T10190] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2058'. [ 253.825570][T10190] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 253.835207][T10190] netlink: 'syz.3.2058': attribute type 10 has an invalid length. [ 253.922037][T10194] bridge0: port 3(veth1_to_bond) entered blocking state [ 253.932254][T10194] bridge0: port 3(veth1_to_bond) entered disabled state [ 253.958815][T10194] device veth1_to_bond entered promiscuous mode [ 253.983991][T10194] bridge0: port 3(veth1_to_bond) entered blocking state [ 253.991482][T10194] bridge0: port 3(veth1_to_bond) entered forwarding state [ 254.029628][T10197] netlink: 'syz.5.2059': attribute type 10 has an invalid length. [ 254.040439][T10197] device veth0_macvtap left promiscuous mode [ 254.062029][T10197] batman_adv: batadv0: Adding interface: macvtap0 [ 254.068719][T10197] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.095335][T10197] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 254.108985][T10196] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2060'. [ 254.125325][T10196] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2060'. [ 254.135892][T10196] openvswitch: netlink: Tunnel attr 9327 out of range max 16 [ 254.194797][T10200] -1: renamed from syzkaller0 [ 254.347007][T10204] device syzkaller0 entered promiscuous mode [ 254.425035][T10214] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2064'. [ 254.435049][T10208] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2064'. [ 254.502164][T10221] FAULT_INJECTION: forcing a failure. [ 254.502164][T10221] name failslab, interval 1, probability 0, space 0, times 0 [ 254.515123][T10221] CPU: 1 PID: 10221 Comm: syz.1.2069 Not tainted syzkaller #0 [ 254.522611][T10221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 254.532763][T10221] Call Trace: [ 254.536082][T10221] [ 254.539023][T10221] dump_stack_lvl+0x168/0x230 [ 254.543717][T10221] ? show_regs_print_info+0x20/0x20 [ 254.549024][T10221] ? load_image+0x3b0/0x3b0 [ 254.553542][T10221] ? __might_sleep+0xf0/0xf0 [ 254.558159][T10221] ? __lock_acquire+0x7c60/0x7c60 [ 254.563207][T10221] should_fail+0x38c/0x4c0 [ 254.567627][T10221] should_failslab+0x5/0x20 [ 254.572125][T10221] slab_pre_alloc_hook+0x51/0xc0 [ 254.577060][T10221] kmem_cache_alloc_trace+0x47/0x2a0 [ 254.582327][T10221] ? apparmor_sk_alloc_security+0x74/0x100 [ 254.588125][T10221] apparmor_sk_alloc_security+0x74/0x100 [ 254.593745][T10221] security_sk_alloc+0x6a/0xa0 [ 254.598497][T10221] sk_prot_alloc+0x101/0x210 [ 254.603093][T10221] ? sk_alloc+0x1d/0x310 [ 254.607320][T10221] sk_alloc+0x2f/0x310 [ 254.611380][T10221] bpf_prog_test_run_skb+0x240/0x1180 [ 254.616744][T10221] ? __fget_files+0x40f/0x480 [ 254.621421][T10221] ? cpu_online+0x60/0x60 [ 254.625752][T10221] bpf_prog_test_run+0x31e/0x390 [ 254.630692][T10221] __sys_bpf+0x535/0x670 [ 254.634921][T10221] ? bpf_link_show_fdinfo+0x340/0x340 [ 254.640285][T10221] ? vtime_user_exit+0x2dc/0x400 [ 254.645232][T10221] __x64_sys_bpf+0x78/0x90 [ 254.649642][T10221] do_syscall_64+0x4c/0xa0 [ 254.654045][T10221] ? clear_bhb_loop+0x30/0x80 [ 254.658704][T10221] ? clear_bhb_loop+0x30/0x80 [ 254.663370][T10221] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.669346][T10221] RIP: 0033:0x7f2aadc4d749 [ 254.673798][T10221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.693390][T10221] RSP: 002b:00007f2aabeb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 254.701791][T10221] RAX: ffffffffffffffda RBX: 00007f2aadea3fa0 RCX: 00007f2aadc4d749 [ 254.709751][T10221] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 254.717710][T10221] RBP: 00007f2aabeb4090 R08: 0000000000000000 R09: 0000000000000000 [ 254.725670][T10221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.733627][T10221] R13: 00007f2aadea4038 R14: 00007f2aadea3fa0 R15: 00007fffe2c78aa8 [ 254.741605][T10221] [ 254.861081][T10229] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2073'. [ 254.932765][T10229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.985047][T10229] bond0 (unregistering): Released all slaves [ 255.188809][T10250] netlink: 'syz.3.2077': attribute type 39 has an invalid length. [ 255.431341][T10271] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2083'. [ 255.534011][T10271] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 255.626362][T10280] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2089'. [ 255.660380][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.666767][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.031602][T10304] FAULT_INJECTION: forcing a failure. [ 256.031602][T10304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.048948][T10304] CPU: 1 PID: 10304 Comm: syz.5.2100 Not tainted syzkaller #0 [ 256.049410][T10298] netlink: 'syz.0.2098': attribute type 39 has an invalid length. [ 256.056438][T10304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.056450][T10304] Call Trace: [ 256.056456][T10304] [ 256.056463][T10304] dump_stack_lvl+0x168/0x230 [ 256.056492][T10304] ? show_regs_print_info+0x20/0x20 [ 256.056511][T10304] ? load_image+0x3b0/0x3b0 [ 256.056533][T10304] ? __lock_acquire+0x7c60/0x7c60 [ 256.056560][T10304] should_fail+0x38c/0x4c0 [ 256.104283][T10304] _copy_from_user+0x2e/0x170 [ 256.108975][T10304] __copy_msghdr_from_user+0xaf/0x5e0 [ 256.114488][T10304] ? verify_lock_unused+0x140/0x140 [ 256.119696][T10304] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 256.124997][T10304] ? trace_event_raw_event_lock+0x250/0x250 [ 256.130902][T10304] ___sys_sendmsg+0x156/0x260 [ 256.135573][T10304] ? __sys_sendmsg+0x250/0x250 [ 256.140323][T10304] ? trace_event_raw_event_lock+0x250/0x250 [ 256.146204][T10304] ? vfs_write+0x84d/0xd00 [ 256.150629][T10304] ? __fdget+0x18b/0x210 [ 256.154872][T10304] __se_sys_sendmsg+0x190/0x250 [ 256.159725][T10304] ? __x64_sys_sendmsg+0x80/0x80 [ 256.164669][T10304] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 256.170660][T10304] ? lockdep_hardirqs_on+0x94/0x140 [ 256.175846][T10304] do_syscall_64+0x4c/0xa0 [ 256.180249][T10304] ? clear_bhb_loop+0x30/0x80 [ 256.184909][T10304] ? clear_bhb_loop+0x30/0x80 [ 256.189570][T10304] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.195450][T10304] RIP: 0033:0x7fde0957c749 [ 256.199873][T10304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.219467][T10304] RSP: 002b:00007fde077e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.227879][T10304] RAX: ffffffffffffffda RBX: 00007fde097d2fa0 RCX: 00007fde0957c749 [ 256.235841][T10304] RDX: 0000000020004080 RSI: 0000200000000040 RDI: 0000000000000003 [ 256.243819][T10304] RBP: 00007fde077e3090 R08: 0000000000000000 R09: 0000000000000000 [ 256.251792][T10304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.259751][T10304] R13: 00007fde097d3038 R14: 00007fde097d2fa0 R15: 00007ffc8a654b98 [ 256.267736][T10304] [ 256.429541][T10313] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2103'. [ 256.439150][T10313] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 256.449427][T10313] netlink: 'syz.5.2103': attribute type 10 has an invalid length. [ 256.458733][T10313] bond0: (slave bond_slave_0): Releasing backup interface [ 257.047818][T10350] netlink: 'syz.0.2121': attribute type 39 has an invalid length. [ 257.064389][T10352] netlink: 'syz.1.2122': attribute type 1 has an invalid length. [ 257.073538][T10352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.089294][T10352] FAULT_INJECTION: forcing a failure. [ 257.089294][T10352] name failslab, interval 1, probability 0, space 0, times 0 [ 257.107034][T10352] CPU: 0 PID: 10352 Comm: syz.1.2122 Not tainted syzkaller #0 [ 257.114515][T10352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 257.124558][T10352] Call Trace: [ 257.127829][T10352] [ 257.130749][T10352] dump_stack_lvl+0x168/0x230 [ 257.135424][T10352] ? show_regs_print_info+0x20/0x20 [ 257.140608][T10352] ? load_image+0x3b0/0x3b0 [ 257.145160][T10352] ? __lock_acquire+0x7c60/0x7c60 [ 257.150175][T10352] ? __local_bh_enable_ip+0xcb/0x1b0 [ 257.155448][T10352] ? preempt_schedule+0xa7/0xb0 [ 257.160292][T10352] ? br_setlink+0x6a6/0x800 [ 257.164787][T10352] should_fail+0x38c/0x4c0 [ 257.169197][T10352] should_failslab+0x5/0x20 [ 257.173685][T10352] slab_pre_alloc_hook+0x51/0xc0 [ 257.178636][T10352] kmem_cache_alloc_node+0x47/0x2d0 [ 257.183818][T10352] ? __alloc_skb+0xf4/0x750 [ 257.188313][T10352] __alloc_skb+0xf4/0x750 [ 257.192622][T10352] ? _local_bh_enable+0xa0/0xa0 [ 257.197459][T10352] br_info_notify+0x101/0x240 [ 257.202131][T10352] br_setlink+0x341/0x800 [ 257.206454][T10352] ? __lock_acquire+0x7c60/0x7c60 [ 257.211465][T10352] ? br_vlan_info+0x450/0x450 [ 257.216153][T10352] ? mutex_lock_io_nested+0x60/0x60 [ 257.221343][T10352] ? mutex_is_locked+0xe/0x40 [ 257.226011][T10352] rtnl_bridge_setlink+0x4ba/0x720 [ 257.231110][T10352] ? rtnl_bridge_dellink+0x680/0x680 [ 257.236383][T10352] rtnetlink_rcv_msg+0x7ff/0xe90 [ 257.241335][T10352] ? rtnetlink_bind+0x80/0x80 [ 257.246003][T10352] ? __local_bh_enable_ip+0x12a/0x1b0 [ 257.251362][T10352] ? lockdep_hardirqs_on+0x94/0x140 [ 257.256547][T10352] ? __local_bh_enable_ip+0x12a/0x1b0 [ 257.261905][T10352] ? _local_bh_enable+0xa0/0xa0 [ 257.266750][T10352] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 257.272096][T10352] ? perf_trace_lock+0xdf/0x370 [ 257.276950][T10352] ? memcpy+0x3c/0x60 [ 257.280929][T10352] ? trace_event_raw_event_lock+0x250/0x250 [ 257.286814][T10352] ? __skb_clone+0x480/0x790 [ 257.291421][T10352] netlink_rcv_skb+0x1e0/0x430 [ 257.296173][T10352] ? rtnetlink_bind+0x80/0x80 [ 257.300835][T10352] ? netlink_ack+0xb60/0xb60 [ 257.305416][T10352] netlink_unicast+0x774/0x920 [ 257.310171][T10352] netlink_sendmsg+0x8ab/0xbc0 [ 257.315017][T10352] ? netlink_getsockopt+0x560/0x560 [ 257.320202][T10352] ? aa_sock_msg_perm+0x94/0x150 [ 257.325137][T10352] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 257.330406][T10352] ? security_socket_sendmsg+0x7c/0xa0 [ 257.335849][T10352] ? netlink_getsockopt+0x560/0x560 [ 257.341033][T10352] ____sys_sendmsg+0x5a2/0x8c0 [ 257.345789][T10352] ? memset+0x1e/0x40 [ 257.349755][T10352] ? __sys_sendmsg_sock+0x30/0x30 [ 257.354773][T10352] ? import_iovec+0x6f/0xa0 [ 257.359263][T10352] ___sys_sendmsg+0x1f0/0x260 [ 257.363930][T10352] ? __sys_sendmsg+0x250/0x250 [ 257.368712][T10352] ? trace_event_raw_event_lock+0x250/0x250 [ 257.374617][T10352] ? vfs_write+0x84d/0xd00 [ 257.379050][T10352] ? __fdget+0x18b/0x210 [ 257.383288][T10352] __se_sys_sendmsg+0x190/0x250 [ 257.388137][T10352] ? __x64_sys_sendmsg+0x80/0x80 [ 257.393067][T10352] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 257.399048][T10352] ? lockdep_hardirqs_on+0x94/0x140 [ 257.404236][T10352] do_syscall_64+0x4c/0xa0 [ 257.408633][T10352] ? clear_bhb_loop+0x30/0x80 [ 257.413294][T10352] ? clear_bhb_loop+0x30/0x80 [ 257.417963][T10352] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 257.423838][T10352] RIP: 0033:0x7f2aadc4d749 [ 257.428240][T10352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.447835][T10352] RSP: 002b:00007f2aabeb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.456239][T10352] RAX: ffffffffffffffda RBX: 00007f2aadea3fa0 RCX: 00007f2aadc4d749 [ 257.464212][T10352] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 257.472183][T10352] RBP: 00007f2aabeb4090 R08: 0000000000000000 R09: 0000000000000000 [ 257.480145][T10352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.488102][T10352] R13: 00007f2aadea4038 R14: 00007f2aadea3fa0 R15: 00007fffe2c78aa8 [ 257.496077][T10352] [ 257.649681][T10364] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2128'. [ 257.915659][T10388] netlink: 'syz.4.2135': attribute type 9 has an invalid length. [ 258.048310][T10393] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 258.086545][T10393] netlink: 'syz.0.2137': attribute type 10 has an invalid length. [ 258.345598][T10406] netlink: 'syz.4.2143': attribute type 10 has an invalid length. [ 258.424913][T10410] netlink: 'syz.4.2145': attribute type 10 has an invalid length. [ 258.505113][T10412] netlink: 'syz.4.2146': attribute type 3 has an invalid length. [ 259.263594][T10447] __nla_validate_parse: 10 callbacks suppressed [ 259.263698][T10447] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2163'. [ 259.483418][T10466] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2168'. [ 259.533429][T10466] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 260.572197][T10492] validate_nla: 6 callbacks suppressed [ 260.572216][T10492] netlink: 'syz.0.2180': attribute type 6 has an invalid length. [ 260.636760][T10497] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2182'. [ 260.654050][T10495] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2181'. [ 260.775738][T10507] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2186'. [ 260.865105][T10519] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2188'. [ 260.868203][T10517] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2189'. [ 260.903026][T10519] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 260.932859][T10522] netlink: 'syz.5.2188': attribute type 10 has an invalid length. [ 261.027151][T10524] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2191'. [ 261.232017][T10516] netlink: 'syz.4.2185': attribute type 10 has an invalid length. [ 261.886084][T10516] batman_adv: batadv0: Removing interface: macvtap0 [ 261.980973][T10535] netlink: 'syz.5.2194': attribute type 29 has an invalid length. [ 262.015014][T10530] netlink: 'syz.1.2192': attribute type 10 has an invalid length. [ 262.041774][T10535] netlink: 'syz.5.2194': attribute type 29 has an invalid length. [ 262.092847][T10536] netlink: 'syz.5.2194': attribute type 29 has an invalid length. [ 262.230069][T10549] netlink: 'syz.1.2199': attribute type 12 has an invalid length. [ 262.248193][T10549] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2199'. [ 262.289797][T10548] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2198'. [ 262.535559][T10557] netlink: 'syz.0.2201': attribute type 1 has an invalid length. [ 262.617972][T10566] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 262.671381][T10567] netlink: 'syz.1.2204': attribute type 10 has an invalid length. [ 262.740033][T10574] FAULT_INJECTION: forcing a failure. [ 262.740033][T10574] name failslab, interval 1, probability 0, space 0, times 0 [ 262.824278][T10574] CPU: 0 PID: 10574 Comm: syz.5.2208 Not tainted syzkaller #0 [ 262.831808][T10574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.841885][T10574] Call Trace: [ 262.845189][T10574] [ 262.848151][T10574] dump_stack_lvl+0x168/0x230 [ 262.852863][T10574] ? show_regs_print_info+0x20/0x20 [ 262.858091][T10574] ? load_image+0x3b0/0x3b0 [ 262.862666][T10574] ? __might_sleep+0xf0/0xf0 [ 262.867275][T10574] ? __lock_acquire+0x7c60/0x7c60 [ 262.872334][T10574] should_fail+0x38c/0x4c0 [ 262.876788][T10574] should_failslab+0x5/0x20 [ 262.881298][T10574] slab_pre_alloc_hook+0x51/0xc0 [ 262.886251][T10574] ? security_file_alloc+0x30/0x110 [ 262.891468][T10574] kmem_cache_alloc+0x3d/0x290 [ 262.896336][T10574] ? rcu_is_watching+0x11/0xa0 [ 262.901121][T10574] security_file_alloc+0x30/0x110 [ 262.906168][T10574] __alloc_file+0xc2/0x240 [ 262.910636][T10574] alloc_empty_file+0x90/0x180 [ 262.915585][T10574] alloc_file+0x5b/0x4f0 [ 262.919904][T10574] ? do_raw_spin_unlock+0x11d/0x230 [ 262.925129][T10574] alloc_file_pseudo+0x17a/0x1f0 [ 262.930096][T10574] ? alloc_empty_file_noaccount+0x80/0x80 [ 262.935839][T10574] ? __lock_acquire+0x7c60/0x7c60 [ 262.940878][T10574] ? __local_bh_enable_ip+0x12a/0x1b0 [ 262.946271][T10574] ? _local_bh_enable+0xa0/0xa0 [ 262.951147][T10574] anon_inode_getfile+0xc1/0x1a0 [ 262.956110][T10574] bpf_link_prime+0x125/0x270 [ 262.960810][T10574] bpf_raw_tracepoint_open+0x4bc/0x780 [ 262.966283][T10574] ? ksys_write+0x1c7/0x250 [ 262.970810][T10574] ? bpf_obj_get_info_by_fd+0x2a80/0x2a80 [ 262.976576][T10574] ? __might_fault+0xb3/0x110 [ 262.981278][T10574] ? bpf_lsm_bpf+0x5/0x10 [ 262.985621][T10574] ? security_bpf+0x7a/0xa0 [ 262.990140][T10574] __sys_bpf+0x48b/0x670 [ 262.994404][T10574] ? bpf_link_show_fdinfo+0x340/0x340 [ 262.999875][T10574] ? rcu_nmi_exit+0x6f/0xf0 [ 263.004434][T10574] ? vtime_user_exit+0x2dc/0x400 [ 263.009403][T10574] __x64_sys_bpf+0x78/0x90 [ 263.013836][T10574] do_syscall_64+0x4c/0xa0 [ 263.018347][T10574] ? clear_bhb_loop+0x30/0x80 [ 263.023031][T10574] ? clear_bhb_loop+0x30/0x80 [ 263.027720][T10574] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.033655][T10574] RIP: 0033:0x7fde0957c749 [ 263.038085][T10574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.057703][T10574] RSP: 002b:00007fde077e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 263.066138][T10574] RAX: ffffffffffffffda RBX: 00007fde097d2fa0 RCX: 00007fde0957c749 [ 263.074118][T10574] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000011 [ 263.082095][T10574] RBP: 00007fde077e3090 R08: 0000000000000000 R09: 0000000000000000 [ 263.090091][T10574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.098070][T10574] R13: 00007fde097d3038 R14: 00007fde097d2fa0 R15: 00007ffc8a654b98 [ 263.106092][T10574] [ 263.583960][T10593] FAULT_INJECTION: forcing a failure. [ 263.583960][T10593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.640333][T10593] CPU: 1 PID: 10593 Comm: syz.5.2215 Not tainted syzkaller #0 [ 263.647854][T10593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.658014][T10593] Call Trace: [ 263.661305][T10593] [ 263.664241][T10593] dump_stack_lvl+0x168/0x230 [ 263.669032][T10593] ? show_regs_print_info+0x20/0x20 [ 263.674342][T10593] ? load_image+0x3b0/0x3b0 [ 263.678878][T10593] ? __lock_acquire+0x7c60/0x7c60 [ 263.683953][T10593] should_fail+0x38c/0x4c0 [ 263.688406][T10593] _copy_to_user+0x2e/0x130 [ 263.693014][T10593] simple_read_from_buffer+0xe3/0x150 [ 263.698417][T10593] proc_fail_nth_read+0x19a/0x210 [ 263.703466][T10593] ? proc_fault_inject_write+0x2f0/0x2f0 [ 263.709154][T10593] ? fsnotify_perm+0x254/0x560 [ 263.714020][T10593] ? proc_fault_inject_write+0x2f0/0x2f0 [ 263.719652][T10593] vfs_read+0x2f6/0xcf0 [ 263.723814][T10593] ? kernel_read+0x1e0/0x1e0 [ 263.728411][T10593] ? __fget_files+0x40f/0x480 [ 263.733091][T10593] ? mutex_lock_nested+0x17/0x20 [ 263.738020][T10593] ? __fdget_pos+0x2bf/0x370 [ 263.742599][T10593] ? ksys_read+0x71/0x250 [ 263.746934][T10593] ksys_read+0x14d/0x250 [ 263.751194][T10593] ? vfs_write+0xd00/0xd00 [ 263.755661][T10593] ? lockdep_hardirqs_on+0x94/0x140 [ 263.760872][T10593] do_syscall_64+0x4c/0xa0 [ 263.765290][T10593] ? clear_bhb_loop+0x30/0x80 [ 263.769962][T10593] ? clear_bhb_loop+0x30/0x80 [ 263.774724][T10593] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.780625][T10593] RIP: 0033:0x7fde0957b15c [ 263.785034][T10593] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 263.804627][T10593] RSP: 002b:00007fde077e3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.813050][T10593] RAX: ffffffffffffffda RBX: 00007fde097d2fa0 RCX: 00007fde0957b15c [ 263.821011][T10593] RDX: 000000000000000f RSI: 00007fde077e30a0 RDI: 0000000000000004 [ 263.828968][T10593] RBP: 00007fde077e3090 R08: 0000000000000000 R09: 0000000000000000 [ 263.836929][T10593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.844887][T10593] R13: 00007fde097d3038 R14: 00007fde097d2fa0 R15: 00007ffc8a654b98 [ 263.852875][T10593] [ 264.294079][T10606] __nla_validate_parse: 9 callbacks suppressed [ 264.294155][T10606] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2221'. [ 264.310479][T10608] FAULT_INJECTION: forcing a failure. [ 264.310479][T10608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.311673][T10608] [ 264.311678][T10608] ====================================================== [ 264.311684][T10608] WARNING: possible circular locking dependency detected [ 264.311703][T10608] syzkaller #0 Not tainted [ 264.311711][T10608] ------------------------------------------------------ [ 264.311715][T10608] syz.5.2219/10608 is trying to acquire lock: [ 264.311723][T10608] ffffffff8c1111c0 (console_owner){-.-.}-{0:0}, at: console_trylock_spinning+0x150/0x350 [ 264.311768][T10608] [ 264.311768][T10608] but task is already holding lock: [ 264.311772][T10608] ffff8880b913a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 264.311811][T10608] [ 264.311811][T10608] which lock already depends on the new lock. [ 264.311811][T10608] [ 264.311816][T10608] [ 264.311816][T10608] the existing dependency chain (in reverse order) is: [ 264.311820][T10608] [ 264.311820][T10608] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 264.311838][T10608] _raw_spin_lock_nested+0x2e/0x40 [ 264.311853][T10608] raw_spin_rq_lock_nested+0x26/0x140 [ 264.311867][T10608] task_fork_fair+0x5c/0x350 [ 264.311879][T10608] sched_cgroup_fork+0x2c6/0x320 [ 264.311893][T10608] copy_process+0x22d1/0x3e00 [ 264.311907][T10608] kernel_clone+0x219/0x930 [ 264.311919][T10608] kernel_thread+0xc8/0x120 [ 264.311931][T10608] rest_init+0x21/0x330 [ 264.311945][T10608] start_kernel+0x486/0x530 [ 264.311959][T10608] secondary_startup_64_no_verify+0xb1/0xbb [ 264.311975][T10608] [ 264.311975][T10608] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 264.311993][T10608] _raw_spin_lock_irqsave+0xa4/0xf0 [ 264.312005][T10608] try_to_wake_up+0x5c/0x1050 [ 264.312018][T10608] __wake_up_common+0x2a4/0x4e0 [ 264.312033][T10608] __wake_up+0x108/0x180 [ 264.312047][T10608] tty_port_default_wakeup+0xa5/0xf0 [ 264.312063][T10608] serial8250_tx_chars+0x629/0x830 [ 264.312078][T10608] serial8250_handle_irq+0x519/0x610 [ 264.312092][T10608] serial8250_default_handle_irq+0xb4/0x1a0 [ 264.312108][T10608] serial8250_interrupt+0x9b/0x1c0 [ 264.312121][T10608] __handle_irq_event_percpu+0x291/0x9b0 [ 264.312137][T10608] handle_irq_event+0xa5/0x220 [ 264.312149][T10608] handle_edge_irq+0x243/0xb20 [ 264.312164][T10608] __common_interrupt+0xd7/0x1e0 [ 264.312177][T10608] common_interrupt+0xb0/0xd0 [ 264.312189][T10608] asm_common_interrupt+0x22/0x40 [ 264.312202][T10608] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 264.312215][T10608] __wake_up_sync_key+0x11b/0x180 [ 264.312230][T10608] sock_def_readable+0x136/0x250 [ 264.312243][T10608] unix_dgram_sendmsg+0x11ed/0x1890 [ 264.312258][T10608] sock_write_iter+0x29c/0x380 [ 264.312273][T10608] do_iter_readv_writev+0x497/0x600 [ 264.312287][T10608] do_iter_write+0x205/0x7b0 [ 264.312299][T10608] do_writev+0x254/0x410 [ 264.312311][T10608] do_syscall_64+0x4c/0xa0 [ 264.312324][T10608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.312338][T10608] [ 264.312338][T10608] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 264.312356][T10608] _raw_spin_lock_irqsave+0xa4/0xf0 [ 264.312369][T10608] __wake_up+0xed/0x180 [ 264.312382][T10608] tty_port_default_wakeup+0xa5/0xf0 [ 264.312396][T10608] serial8250_tx_chars+0x629/0x830 [ 264.312409][T10608] serial8250_handle_irq+0x519/0x610 [ 264.312424][T10608] serial8250_default_handle_irq+0xb4/0x1a0 [ 264.312439][T10608] serial8250_interrupt+0x9b/0x1c0 [ 264.312453][T10608] __handle_irq_event_percpu+0x291/0x9b0 [ 264.312467][T10608] handle_irq_event+0xa5/0x220 [ 264.312480][T10608] handle_edge_irq+0x243/0xb20 [ 264.312494][T10608] __common_interrupt+0xd7/0x1e0 [ 264.312506][T10608] common_interrupt+0xb0/0xd0 [ 264.312519][T10608] asm_common_interrupt+0x22/0x40 [ 264.312532][T10608] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 264.312545][T10608] uart_write+0x62f/0x880 [ 264.312557][T10608] n_tty_write+0xd21/0x1210 [ 264.312569][T10608] file_tty_write+0x557/0x910 [ 264.312583][T10608] vfs_write+0x712/0xd00 [ 264.312594][T10608] ksys_write+0x14d/0x250 [ 264.312605][T10608] do_syscall_64+0x4c/0xa0 [ 264.312617][T10608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.312631][T10608] [ 264.312631][T10608] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 264.312650][T10608] _raw_spin_lock_irqsave+0xa4/0xf0 [ 264.312662][T10608] serial8250_console_write+0x170/0xf80 [ 264.312677][T10608] console_unlock+0xc86/0x1200 [ 264.312689][T10608] vprintk_emit+0xc0/0x150 [ 264.312703][T10608] _printk+0xcc/0x110 [ 264.312716][T10608] register_console+0x682/0x960 [ 264.312728][T10608] univ8250_console_init+0x41/0x50 [ 264.312742][T10608] console_init+0x177/0x5d0 [ 264.312754][T10608] start_kernel+0x2f9/0x530 [ 264.312767][T10608] secondary_startup_64_no_verify+0xb1/0xbb [ 264.312781][T10608] [ 264.312781][T10608] -> #0 (console_owner){-.-.}-{0:0}: [ 264.312803][T10608] __lock_acquire+0x2c33/0x7c60 [ 264.312818][T10608] lock_acquire+0x197/0x3f0 [ 264.312832][T10608] console_trylock_spinning+0x170/0x350 [ 264.312848][T10608] vprintk_emit+0xa7/0x150 [ 264.312863][T10608] _printk+0xcc/0x110 [ 264.312876][T10608] should_fail+0x36d/0x4c0 [ 264.312890][T10608] strncpy_from_user+0x32/0x360 [ 264.312903][T10608] strncpy_from_user_nofault+0x6d/0x140 [ 264.312918][T10608] bpf_probe_read_compat_str+0xdd/0x170 [ 264.312934][T10608] bpf_prog_d777b8437d649bea+0x5c/0x3f8 [ 264.312948][T10608] bpf_trace_run2+0x242/0x2d0 [ 264.312959][T10608] trace_tlb_flush+0xe6/0x110 [ 264.312972][T10608] switch_mm_irqs_off+0x6e3/0x9a0 [ 264.312984][T10608] __schedule+0x1024/0x4390 [ 264.312997][T10608] preempt_schedule_irq+0xb1/0x150 [ 264.313011][T10608] irqentry_exit+0x63/0x70 [ 264.313025][T10608] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 264.313039][T10608] lock_acquire+0x1f2/0x3f0 [ 264.313053][T10608] fs_reclaim_acquire+0x91/0x100 [ 264.313067][T10608] slab_pre_alloc_hook+0x20/0xc0 [ 264.313081][T10608] __kmalloc+0x6b/0x330 [ 264.313091][T10608] sk_prot_alloc+0xe7/0x210 [ 264.313103][T10608] sk_alloc+0x2f/0x310 [ 264.313114][T10608] bpf_prog_test_run_skb+0x240/0x1180 [ 264.313128][T10608] bpf_prog_test_run+0x31e/0x390 [ 264.313143][T10608] __sys_bpf+0x535/0x670 [ 264.313156][T10608] __x64_sys_bpf+0x78/0x90 [ 264.313168][T10608] do_syscall_64+0x4c/0xa0 [ 264.313181][T10608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.313194][T10608] [ 264.313194][T10608] other info that might help us debug this: [ 264.313194][T10608] [ 264.313198][T10608] Chain exists of: [ 264.313198][T10608] console_owner --> &p->pi_lock --> &rq->__lock [ 264.313198][T10608] [ 264.313223][T10608] Possible unsafe locking scenario: [ 264.313223][T10608] [ 264.313226][T10608] CPU0 CPU1 [ 264.313230][T10608] ---- ---- [ 264.313234][T10608] lock(&rq->__lock); [ 264.313242][T10608] lock(&p->pi_lock); [ 264.313251][T10608] lock(&rq->__lock); [ 264.313260][T10608] lock(console_owner); [ 264.313268][T10608] [ 264.313268][T10608] *** DEADLOCK *** [ 264.313268][T10608] [ 264.313271][T10608] 4 locks held by syz.5.2219/10608: [ 264.313279][T10608] #0: ffffffff8c1dc720 (fs_reclaim){+.+.}-{0:0}, at: slab_pre_alloc_hook+0x20/0xc0 [ 264.313312][T10608] #1: ffffffff8c1ece60 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: fs_reclaim_acquire+0x71/0x100 [ 264.313348][T10608] #2: ffff8880b913a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 264.313381][T10608] #3: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 264.313413][T10608] [ 264.313413][T10608] stack backtrace: [ 264.313418][T10608] CPU: 1 PID: 10608 Comm: syz.5.2219 Not tainted syzkaller #0 [ 264.313433][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 264.313441][T10608] Call Trace: [ 264.313446][T10608] [ 264.313452][T10608] dump_stack_lvl+0x168/0x230 [ 264.313487][T10608] ? load_image+0x3b0/0x3b0 [ 264.313504][T10608] ? show_regs_print_info+0x20/0x20 [ 264.313531][T10608] ? print_circular_bug+0x12b/0x1a0 [ 264.313549][T10608] check_noncircular+0x274/0x310 [ 264.313566][T10608] ? add_chain_block+0x940/0x940 [ 264.313579][T10608] ? lockdep_lock+0xdc/0x1e0 [ 264.313601][T10608] ? add_lock_to_list+0x18d/0x280 [ 264.313624][T10608] ? mark_lock+0x94/0x320 [ 264.313643][T10608] __lock_acquire+0x2c33/0x7c60 [ 264.313682][T10608] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 264.313701][T10608] ? verify_lock_unused+0x140/0x140 [ 264.313718][T10608] ? perf_trace_lock_acquire+0x329/0x3c0 [ 264.313743][T10608] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 264.313762][T10608] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 264.313777][T10608] ? _raw_spin_unlock+0x40/0x40 [ 264.313811][T10608] lock_acquire+0x197/0x3f0 [ 264.313826][T10608] ? console_trylock_spinning+0x150/0x350 [ 264.313846][T10608] ? console_trylock_spinning+0x150/0x350 [ 264.313867][T10608] ? __lock_acquire+0x7c60/0x7c60 [ 264.313882][T10608] ? do_raw_spin_lock+0x11d/0x280 [ 264.313897][T10608] ? read_lock_is_recursive+0x10/0x10 [ 264.313915][T10608] ? __rwlock_init+0x140/0x140 [ 264.313934][T10608] ? do_raw_spin_unlock+0x11d/0x230 [ 264.313953][T10608] console_trylock_spinning+0x170/0x350 [ 264.313968][T10608] ? console_trylock_spinning+0x150/0x350 [ 264.313986][T10608] ? vprintk_emit+0x150/0x150 [ 264.314013][T10608] ? trace_event_buffer_commit+0x25f/0x7a0 [ 264.314035][T10608] vprintk_emit+0xa7/0x150 [ 264.314056][T10608] _printk+0xcc/0x110 [ 264.314071][T10608] ? __traceiter_bpf_trace_printk+0xb0/0xb0 [ 264.314092][T10608] ? load_image+0x3b0/0x3b0 [ 264.314121][T10608] should_fail+0x36d/0x4c0 [ 264.314147][T10608] strncpy_from_user+0x32/0x360 [ 264.314160][T10608] ? read_lock_is_recursive+0x10/0x10 [ 264.314181][T10608] strncpy_from_user_nofault+0x6d/0x140 [ 264.314199][T10608] bpf_probe_read_compat_str+0xdd/0x170 [ 264.314218][T10608] bpf_prog_d777b8437d649bea+0x5c/0x3f8 [ 264.314232][T10608] bpf_trace_run2+0x242/0x2d0 [ 264.314248][T10608] ? bpf_trace_run1+0x2d0/0x2d0 [ 264.314267][T10608] ? __perf_event_task_sched_out+0xa6a/0xdb0 [ 264.314284][T10608] trace_tlb_flush+0xe6/0x110 [ 264.314300][T10608] switch_mm_irqs_off+0x6e3/0x9a0 [ 264.314319][T10608] ? switch_mm+0x120/0x120 [ 264.314331][T10608] ? psi_task_switch+0x495/0x810 [ 264.314355][T10608] __schedule+0x1024/0x4390 [ 264.314370][T10608] ? ___might_sleep+0x600/0x600 [ 264.314391][T10608] ? mark_lock+0x94/0x320 [ 264.314410][T10608] ? mark_lock+0x94/0x320 [ 264.314436][T10608] ? release_firmware_map_entry+0x190/0x190 [ 264.314460][T10608] ? preempt_schedule_irq+0xa6/0x150 [ 264.314479][T10608] preempt_schedule_irq+0xb1/0x150 [ 264.314496][T10608] ? __cond_resched+0xb0/0xb0 [ 264.314515][T10608] ? rcu_is_watching+0x11/0xa0 [ 264.314535][T10608] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 264.314552][T10608] irqentry_exit+0x63/0x70 [ 264.314567][T10608] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 264.314584][T10608] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 264.314603][T10608] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 264.314617][T10608] RSP: 0018:ffffc900033cfa40 EFLAGS: 00000206 [ 264.314628][T10608] RAX: 0000000000000001 RBX: 0000000000000000 RCX: f6322c3cb0729e00 [ 264.314637][T10608] RDX: 0000000000000000 RSI: ffffffff8a0b2f00 RDI: ffffffff8a59e580 [ 264.314645][T10608] RBP: ffffc900033cfb60 R08: dffffc0000000000 R09: fffffbfff1ff7c1b [ 264.314655][T10608] R10: fffffbfff1ff7c1b R11: 1ffffffff1ff7c1a R12: ffffffff8c1ece60 [ 264.314664][T10608] R13: 1ffff92000679f54 R14: 0000000000000246 R15: dffffc0000000000 [ 264.314699][T10608] ? read_lock_is_recursive+0x10/0x10 [ 264.314722][T10608] ? __might_sleep+0xf0/0xf0 [ 264.314737][T10608] ? __might_fault+0xb7/0x110 [ 264.314756][T10608] fs_reclaim_acquire+0x91/0x100 [ 264.314772][T10608] ? fs_reclaim_acquire+0x71/0x100 [ 264.314800][T10608] slab_pre_alloc_hook+0x20/0xc0 [ 264.314818][T10608] __kmalloc+0x6b/0x330 [ 264.314831][T10608] ? sk_prot_alloc+0xe7/0x210 [ 264.314853][T10608] sk_prot_alloc+0xe7/0x210 [ 264.314866][T10608] ? sk_alloc+0x1d/0x310 [ 264.314884][T10608] sk_alloc+0x2f/0x310 [ 264.314901][T10608] bpf_prog_test_run_skb+0x240/0x1180 [ 264.314921][T10608] ? __fget_files+0x40f/0x480 [ 264.314948][T10608] ? cpu_online+0x60/0x60 [ 264.314965][T10608] bpf_prog_test_run+0x31e/0x390 [ 264.314986][T10608] __sys_bpf+0x535/0x670 [ 264.315005][T10608] ? bpf_link_show_fdinfo+0x340/0x340 [ 264.315045][T10608] __x64_sys_bpf+0x78/0x90 [ 264.315063][T10608] do_syscall_64+0x4c/0xa0 [ 264.315076][T10608] ? clear_bhb_loop+0x30/0x80 [ 264.315091][T10608] ? clear_bhb_loop+0x30/0x80 [ 264.315109][T10608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.315124][T10608] RIP: 0033:0x7fde0957c749 [ 264.315141][T10608] Code: Unable to access opcode bytes at RIP 0x7fde0957c71f. [ 264.315148][T10608] RSP: 002b:00007fde077e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 264.315163][T10608] RAX: ffffffffffffffda RBX: 00007fde097d2fa0 RCX: 00007fde0957c749 [ 264.315172][T10608] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 264.315181][T10608] RBP: 00007fde077e3090 R08: 0000000000000000 R09: 0000000000000000 [ 264.315190][T10608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.315198][T10608] R13: 00007fde097d3038 R14: 00007fde097d2fa0 R15: 00007ffc8a654b98 [ 264.315220][T10608] [ 265.634638][T10608] CPU: 1 PID: 10608 Comm: syz.5.2219 Not tainted syzkaller #0 [ 265.642071][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.652107][T10608] Call Trace: [ 265.655383][T10608] [ 265.658294][T10608] dump_stack_lvl+0x168/0x230 [ 265.662954][T10608] ? __traceiter_bpf_trace_printk+0xb0/0xb0 [ 265.668828][T10608] ? show_regs_print_info+0x20/0x20 [ 265.674035][T10608] ? load_image+0x3b0/0x3b0 [ 265.678527][T10608] should_fail+0x38c/0x4c0 [ 265.682923][T10608] strncpy_from_user+0x32/0x360 [ 265.687748][T10608] ? read_lock_is_recursive+0x10/0x10 [ 265.693096][T10608] strncpy_from_user_nofault+0x6d/0x140 [ 265.698619][T10608] bpf_probe_read_compat_str+0xdd/0x170 [ 265.704144][T10608] bpf_prog_d777b8437d649bea+0x5c/0x3f8 [ 265.709664][T10608] bpf_trace_run2+0x242/0x2d0 [ 265.714317][T10608] ? bpf_trace_run1+0x2d0/0x2d0 [ 265.719142][T10608] ? __perf_event_task_sched_out+0xa6a/0xdb0 [ 265.725098][T10608] trace_tlb_flush+0xe6/0x110 [ 265.729750][T10608] switch_mm_irqs_off+0x6e3/0x9a0 [ 265.734753][T10608] ? switch_mm+0x120/0x120 [ 265.739152][T10608] ? psi_task_switch+0x495/0x810 [ 265.744071][T10608] __schedule+0x1024/0x4390 [ 265.748576][T10608] ? ___might_sleep+0x600/0x600 [ 265.753412][T10608] ? mark_lock+0x94/0x320 [ 265.758406][T10608] ? mark_lock+0x94/0x320 [ 265.762818][T10608] ? release_firmware_map_entry+0x190/0x190 [ 265.769118][T10608] ? preempt_schedule_irq+0xa6/0x150 [ 265.774403][T10608] preempt_schedule_irq+0xb1/0x150 [ 265.779504][T10608] ? __cond_resched+0xb0/0xb0 [ 265.784162][T10608] ? rcu_is_watching+0x11/0xa0 [ 265.788904][T10608] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 265.794796][T10608] irqentry_exit+0x63/0x70 [ 265.799213][T10608] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 265.805183][T10608] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 265.810466][T10608] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 265.830071][T10608] RSP: 0018:ffffc900033cfa40 EFLAGS: 00000206 [ 265.836115][T10608] RAX: 0000000000000001 RBX: 0000000000000000 RCX: f6322c3cb0729e00 [ 265.844084][T10608] RDX: 0000000000000000 RSI: ffffffff8a0b2f00 RDI: ffffffff8a59e580 [ 265.852052][T10608] RBP: ffffc900033cfb60 R08: dffffc0000000000 R09: fffffbfff1ff7c1b [ 265.860020][T10608] R10: fffffbfff1ff7c1b R11: 1ffffffff1ff7c1a R12: ffffffff8c1ece60 [ 265.867970][T10608] R13: 1ffff92000679f54 R14: 0000000000000246 R15: dffffc0000000000 [ 265.875939][T10608] ? read_lock_is_recursive+0x10/0x10 [ 265.881301][T10608] ? __might_sleep+0xf0/0xf0 [ 265.885867][T10608] ? __might_fault+0xb7/0x110 [ 265.890536][T10608] fs_reclaim_acquire+0x91/0x100 [ 265.895540][T10608] ? fs_reclaim_acquire+0x71/0x100 [ 265.900624][T10608] slab_pre_alloc_hook+0x20/0xc0 [ 265.905538][T10608] __kmalloc+0x6b/0x330 [ 265.909669][T10608] ? sk_prot_alloc+0xe7/0x210 [ 265.914487][T10608] sk_prot_alloc+0xe7/0x210 [ 265.918967][T10608] ? sk_alloc+0x1d/0x310 [ 265.923185][T10608] sk_alloc+0x2f/0x310 [ 265.927229][T10608] bpf_prog_test_run_skb+0x240/0x1180 [ 265.932579][T10608] ? __fget_files+0x40f/0x480 [ 265.937238][T10608] ? cpu_online+0x60/0x60 [ 265.941539][T10608] bpf_prog_test_run+0x31e/0x390 [ 265.946458][T10608] __sys_bpf+0x535/0x670 [ 265.950677][T10608] ? bpf_link_show_fdinfo+0x340/0x340 [ 265.956040][T10608] __x64_sys_bpf+0x78/0x90 [ 265.960434][T10608] do_syscall_64+0x4c/0xa0 [ 265.964828][T10608] ? clear_bhb_loop+0x30/0x80 [ 265.969481][T10608] ? clear_bhb_loop+0x30/0x80 [ 265.974131][T10608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.979996][T10608] RIP: 0033:0x7fde0957c749 [ 265.984387][T10608] Code: Unable to access opcode bytes at RIP 0x7fde0957c71f. [ 265.991722][T10608] RSP: 002b:00007fde077e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 266.000111][T10608] RAX: ffffffffffffffda RBX: 00007fde097d2fa0 RCX: 00007fde0957c749 [ 266.008066][T10608] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 266.016013][T10608] RBP: 00007fde077e3090 R08: 0000000000000000 R09: 0000000000000000 [ 266.023963][T10608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.031910][T10608] R13: 00007fde097d3038 R14: 00007fde097d2fa0 R15: 00007ffc8a654b98 [ 266.039876][T10608]