last executing test programs: 8.553849655s ago: executing program 3 (id=1927): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x110161, 0x4, 0x0, 0x1, 0x40000000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008daa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x30b, 0x0, 0x8000009, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x81, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x6, 0x9, 0x6, 0x4002, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2, &(0x7f00000002c0), 0x4) sendmsg$inet(r5, &(0x7f0000000400)={0x0, 0xffffffffffffff79, 0x0}, 0x24000001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r4, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0xfffffffffffff24b) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015001800142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00'}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000030000000000000007000000180000000080000000000000594000000848a061060000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xb, 0xffff, 0x27b585d0}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.552375045s ago: executing program 0 (id=1934): socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x29, 0x1, 0x80, 0x0, 0x0, 0x0, 0x90813, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640f1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x4001, 0x35, 0x43a1bd76, 0x1, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20) 7.90118608s ago: executing program 0 (id=1938): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x23, 0x8, 0x0, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000480)=r2) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_bp={&(0x7f0000000680)}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0d00000000010000020000000002000082000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000200"/28], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x8}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/312, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r7, &(0x7f00000001c0), 0x0}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000600000000000000000000006800040000000000000000002a0000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff86) r9 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)}, 0x0) mkdirat$cgroup(r5, &(0x7f0000000200)='syz0\x00', 0x1ff) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffffffffeec, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 7.871104181s ago: executing program 1 (id=1930): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fd00fe05e8fe55a10a00050000feff0000000e41b0940900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8da", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)="f2ed1cb8730617857aaef551a14dbee40e9f071f18b08d2b516e9d9876c97d1a13a6c34c07bdc6ed788f319c937e11457fc482e5820f4d01c7733eea608637497e06ae8321d9a83564bfdae0c7b751e7b64d16c0a39c553404ab0ce6d44f40d3917b2243849c6c26060ef31bd56829b7c6595402373f9fc0fcdba853f1712942329b14e3503d799279716d5247bc1e658a7715d7f1aadb", 0x97}, {&(0x7f00000004c0)="3f0843b760108edca02e72908e06d361e17eab8ec0ec82d059cc1b75979c436372320e83c3823e447cc42003748f5b7d492e24e9f6192376cc98bb8b06dcd0cb9af6f7af2b8d8914b63cb847deed2e5e1b9b9b5f06538200fb6ba9ccbd919a49d175b16eac504392343833f70d5529008aa828a950b75f977646189293862b0aa9afa63e06eeca1be90b4bf2bcb0066b457feeab409423a679e0bdccea6c571e768ff620833b3f0803f67de6d6cc007ed1ecf8f040a5ee3c9e45c4cd08262a2b0659c04b1db0be6342a762101fc016de3420356719cf5dafb73d57dc13f82b3851e2ef72526ec47eca", 0xe9}], 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1440}, 0x8000) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0xa, 0x8}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000040)="a2cb5f67b867d9bba95be189a1564ceef11677ddd5dac50d3e8a9bf4962fb26c953a84861a24a257db2607c5a5e5323f62aa004beee5f2be", &(0x7f00000000c0)=""/173, &(0x7f0000000180)="f664c74cc53cf716e356974a3cae6cf240bfa6359b51be459fd3a966af1a8a0f92008047f005fdc0ff10fae00cfc1f71bfcecd9e97f1dced8ff2a8bc12c5e271bc3c0b8e97b6c1deb993cdddca06d1c18fb0b554f1691bf68b5a701fcc579edfcb6ebf5f95cc84a7d359c7a489295f1e8c6fa590faba559cb930e60d4a032cda0b23da19d7e2553577170893d31d70c42ca569a6e65e5a8c052afa893f749763c7", &(0x7f0000000240)="5ead0e90ba6ea5be989640ab2e7ef5c6477fe083665fd7acf590a16c826ae1da88144f93c98e8a1d3c1a1458778b053143efd39dea450db771c003e6e0fb925a361db0486522ac725be257647d44c282528850b4503e74f1cff2479db68567e92b8a3840c0967b3c266b0eee634393b41c004ffb1cfe737895e852d10bc431751c976335f31178efb90ec725e437e8cc2c977c0eae500e124bc5a9ace63e3fbc54d26d526687f2d29aef98a10b151c41b377dd95ea86", 0x4, r2, 0x4}, 0x38) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="5c00000015006b03004e21000af32c6e020675f80025030040010000002c740e17d34460bc24eab5fac905251e6182949a36c23d3b48dfd8cdbf9364c9f8ffffffffffffffd0bdd70000b6c0504bb9189d5208eddedf0cd7ecc1c31b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 7.723709455s ago: executing program 3 (id=1932): socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x29, 0x1, 0x80, 0x0, 0x0, 0x0, 0x90813, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640f1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x4001, 0x35, 0x43a1bd76, 0x1, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2], 0x20) 7.629739787s ago: executing program 3 (id=1933): perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20021000, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x200000e, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) r1 = socket$kcm(0x11, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x110161, 0x4, 0x0, 0x1, 0x40000000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42, 0xffffffffffffffff, 0x8}, 0x50) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5411, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63e214b0ebed8e46dc3f2ddf33c9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x4c) 7.567412889s ago: executing program 1 (id=1935): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0xffffffffffffffff, 0x5b, 0x0}, 0x10000) (fail_nth: 6) 7.566659569s ago: executing program 0 (id=1936): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x48000) socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5411, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="d4010000200000001800000000"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8, 0x9, 0x0, 0x20000000}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a1180015000600f300030000120800040043000000a8001600a400014020000900feffff7f3626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace806872123b6f5220f4cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040a9925667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52e9ecbee28a0", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@phonet={0x23, 0x5, 0xb, 0xb4}, 0x80, &(0x7f0000000600)=[{&(0x7f00000000c0)="f5f87e6c2e322e2534a68a59bb4d9ff91c521d412b0eb2f503eb139c0b327c1912160c577a91e422", 0x28}, {0x0}], 0x2, &(0x7f0000000280)=[{0x10, 0x84}], 0x10}, 0x4040081) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900001d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$tipc(0x1e, 0x5641e577e96e3246, 0x0, &(0x7f0000000000)) 6.994690492s ago: executing program 1 (id=1939): socket$kcm(0x10, 0x400000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640f1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x4001, 0x35, 0x43a1bd76, 0x1, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20) 4.220365569s ago: executing program 2 (id=1941): socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x29, 0x1, 0x80, 0x0, 0x0, 0x0, 0x90813, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640f1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x4001, 0x35, 0x43a1bd76, 0x1, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2], 0x20) 4.219703449s ago: executing program 3 (id=1942): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009112d40000000000950000fe5b6af30b1db300000000000de17a9642da088e5b4892ae0005e980899cae031b6a506680b701f10a2ff0ba1554223e8ed9a41d67e8577f470ed2b18af08f29a37eecc8b1eb3fe8dee6cede98e1329e103065d372e6893d3b62de"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xe, &(0x7f0000002900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000047, &(0x7f0000000700), ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe1, &(0x7f0000000cc0), 0x20, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x6, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x8}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd632000fc04082f00db5b686158bbcfe8875a060305000023000000000000000000000000ac1414aa3a2008"], 0xfdef) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0900000009000000010000000400000000100000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff0000000000000000000000000000000000000000000000ed"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x10, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2d}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x5c5}]}, &(0x7f0000000640)='syzkaller\x00', 0xd4, 0x4d, &(0x7f0000000680)=""/77, 0x41000, 0x40, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x3, 0xf, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[r4, r6, r7], 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_clone(0x5080200, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000240)="9e3d624d6a5165d84a9c832afac3a69eedcfcdc6d9266de9eefcbfcb277010b0bb22fbf563720b73b099b97332ce230b12e6a737071123a947bcd3f527") r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000c80)='cpu.weight.nice\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x300f000, 0xe, 0x88a8, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r11 = socket$kcm(0xa, 0x2, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r12, 0xfffffffffffffc55, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r11, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xfffd, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 4.216748509s ago: executing program 0 (id=1949): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x48000) socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5411, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="d4010000200000001800000000"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8, 0x9, 0x0, 0x20000000}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a1180015000600f300030000120800040043000000a8001600a400014020000900feffff7f3626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace806872123b6f5220f4cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040a9925667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52e9ecbee28a0", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@phonet={0x23, 0x5, 0xb, 0xb4}, 0x80, &(0x7f0000000600)=[{&(0x7f00000000c0)="f5f87e6c2e322e2534a68a59bb4d9ff91c521d412b0eb2f503eb139c0b327c1912160c577a91e422", 0x28}, {0x0}], 0x2, &(0x7f0000000280)=[{0x10, 0x84}], 0x10}, 0x4040081) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900001d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$tipc(0x1e, 0x5641e577e96e3246, 0x0, &(0x7f0000000000)) 4.212757869s ago: executing program 1 (id=1943): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x110161, 0x4, 0x0, 0x1, 0x40000000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008daa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x30b, 0x0, 0x8000009, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x81, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x6, 0x9, 0x6, 0x4002, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2, &(0x7f00000002c0), 0x4) sendmsg$inet(r5, &(0x7f0000000400)={0x0, 0xffffffffffffff79, 0x0}, 0x24000001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r4, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0xfffffffffffff24b) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015001800142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00'}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000030000000000000007000000180000000080000000000000594000000848a061060000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xb, 0xffff, 0x27b585d0}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.091698562s ago: executing program 2 (id=1944): socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x29, 0x1, 0x80, 0x0, 0x0, 0x0, 0x90813, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640f1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x4001, 0x35, 0x43a1bd76, 0x1, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2], 0x20) 3.718728331s ago: executing program 2 (id=1945): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x47}, 0x80, 0x0}, 0x0) 3.278225501s ago: executing program 3 (id=1946): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x809, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x35, 0x43a1bd76, 0x1, 0x3, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x110ee0, 0xc78, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x830eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8982, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9", 0x15}], 0x1}, 0x4000000) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r4, 0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r3, 0x107, 0x18, &(0x7f0000000b80), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c0", 0x24}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e", 0x21}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001500)={r6, &(0x7f0000002800), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x88, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x118880, 0x3, 0x0, 0x2, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) syz_open_procfs$namespace(0x0, 0x0) 3.183738524s ago: executing program 0 (id=1947): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x6, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4080, 0x40000000, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.158122384s ago: executing program 2 (id=1948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003800)={@cgroup, 0x10, 0x4e941739283c2577, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@fallback=r1, r1, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c40)={r4, 0x0, 0x0}, 0x10) 3.063282107s ago: executing program 1 (id=1950): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x48000) socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5411, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="d4010000200000001800000000"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8, 0x9, 0x0, 0x20000000}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xf, 0x3, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a1180015000600f300030000120800040043000000a8001600a400014020000900feffff7f3626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace806872123b6f5220f4cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040a9925667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52e9ecbee28a0", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@phonet={0x23, 0x5, 0xb, 0xb4}, 0x80, &(0x7f0000000600)=[{&(0x7f00000000c0)="f5f87e6c2e322e2534a68a59bb4d9ff91c521d412b0eb2f503eb139c0b327c1912160c577a91e422", 0x28}, {0x0}], 0x2, &(0x7f0000000280)=[{0x10, 0x84}], 0x10}, 0x4040081) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900001d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$tipc(0x1e, 0x5641e577e96e3246, 0x0, &(0x7f0000000000)) 2.893362491s ago: executing program 2 (id=1951): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x47}, 0x80, 0x0}, 0x0) (fail_nth: 3) 103.898147ms ago: executing program 0 (id=1952): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000003600)='./file0\x00', 0x47660708ddf4f68a) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000005000000090000008400000054010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000005d1dffafa231baea2b8e0000000b00"/38], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000005000000090000008400000054010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000005d1dffafa231baea2b8e0000000b00"/38], 0x50) openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r8 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 84.000498ms ago: executing program 3 (id=1953): perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20021000, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7a0af8ff7525707cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c80000040000000000b1a297cfddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1ae9f2cfe401dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4800afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692f01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c5c5b011cf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb53a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c9800000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x200000e, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) r1 = socket$kcm(0x11, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x110161, 0x4, 0x0, 0x1, 0x40000000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42, 0xffffffffffffffff, 0x8}, 0x50) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63e214b0ebed8e46dc3f2ddf33c9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x4c) 4.674509ms ago: executing program 2 (id=1954): perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20021000, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x200000e, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) r1 = socket$kcm(0x11, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x110161, 0x4, 0x0, 0x1, 0x40000000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42, 0xffffffffffffffff, 0x8}, 0x50) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63e214b0ebed8e46dc3f2ddf33c9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x4c) 0s ago: executing program 1 (id=1955): socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x29, 0x1, 0x80, 0x0, 0x0, 0x0, 0x90813, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640f1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x4001, 0x35, 0x43a1bd76, 0x1, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2], 0x20) kernel console output (not intermixed with test programs): . [ 308.610368][ T8723] netlink: 'syz.1.1048': attribute type 39 has an invalid length. [ 310.118859][ T8749] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1058'. [ 312.279519][ T8757] netlink: 'syz.3.1061': attribute type 39 has an invalid length. [ 312.434751][ T8763] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1059'. [ 312.599861][ T8763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.704734][ T8768] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1064'. [ 313.025072][ T8775] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1067'. [ 313.185993][ T8779] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1068'. [ 313.298954][ T8779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.321028][ T8775] netlink: 'syz.1.1067': attribute type 25 has an invalid length. [ 313.331817][ T8775] netlink: 'syz.1.1067': attribute type 3 has an invalid length. [ 313.362667][ T8781] netlink: 'syz.1.1067': attribute type 10 has an invalid length. [ 313.370962][ T8781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1067'. [ 314.645766][ T8790] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1072'. [ 314.696256][ T8795] netlink: 'syz.0.1073': attribute type 39 has an invalid length. [ 314.730355][ T8799] netlink: 'syz.1.1074': attribute type 39 has an invalid length. [ 315.015655][ T8806] FAULT_INJECTION: forcing a failure. [ 315.015655][ T8806] name failslab, interval 1, probability 0, space 0, times 0 [ 315.049240][ T8806] CPU: 1 PID: 8806 Comm: syz.2.1076 Not tainted syzkaller #0 [ 315.056715][ T8806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.066825][ T8806] Call Trace: [ 315.070161][ T8806] [ 315.073142][ T8806] dump_stack_lvl+0x18c/0x250 [ 315.077876][ T8806] ? show_regs_print_info+0x20/0x20 [ 315.083137][ T8806] ? load_image+0x420/0x420 [ 315.087707][ T8806] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 315.093785][ T8806] ? lock_chain_count+0x20/0x20 [ 315.098699][ T8806] should_fail_ex+0x394/0x4c0 [ 315.103443][ T8806] should_failslab+0x9/0x20 [ 315.108006][ T8806] slab_pre_alloc_hook+0x59/0x300 [ 315.113089][ T8806] kmem_cache_alloc+0x5a/0x2c0 [ 315.117900][ T8806] ? slab_build_skb+0x28/0x3e0 [ 315.122701][ T8806] slab_build_skb+0x28/0x3e0 [ 315.127330][ T8806] bpf_prog_test_run_skb+0x38f/0x18f0 [ 315.132737][ T8806] ? lockdep_hardirqs_on+0x98/0x150 [ 315.137976][ T8806] ? cpu_online+0x60/0x60 [ 315.142334][ T8806] bpf_prog_test_run+0x31f/0x390 [ 315.147309][ T8806] __sys_bpf+0x49d/0x890 [ 315.151586][ T8806] ? bpf_link_show_fdinfo+0x390/0x390 [ 315.157048][ T8806] ? lock_chain_count+0x20/0x20 [ 315.162015][ T8806] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 315.168072][ T8806] __x64_sys_bpf+0x7c/0x90 [ 315.172534][ T8806] do_syscall_64+0x55/0xb0 [ 315.176986][ T8806] ? clear_bhb_loop+0x40/0x90 [ 315.181698][ T8806] ? clear_bhb_loop+0x40/0x90 [ 315.186407][ T8806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.192329][ T8806] RIP: 0033:0x7fa887d9e0d9 [ 315.196770][ T8806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.216428][ T8806] RSP: 002b:00007fa888ccc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 315.224886][ T8806] RAX: ffffffffffffffda RBX: 00007fa888025fa0 RCX: 00007fa887d9e0d9 [ 315.232898][ T8806] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 315.240914][ T8806] RBP: 00007fa888ccc090 R08: 0000000000000000 R09: 0000000000000000 [ 315.248918][ T8806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.256918][ T8806] R13: 00007fa888026038 R14: 00007fa888025fa0 R15: 00007fff845a25b8 [ 315.264948][ T8806] [ 315.748238][ T8822] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1078'. [ 315.797237][ T8822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.004025][ T8826] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1081'. [ 316.062655][ T8828] netlink: 'syz.2.1083': attribute type 39 has an invalid length. [ 316.110958][ T8826] netlink: 'syz.0.1081': attribute type 25 has an invalid length. [ 316.139863][ T8826] netlink: 'syz.0.1081': attribute type 3 has an invalid length. [ 316.169469][ T8826] netlink: 'syz.0.1081': attribute type 10 has an invalid length. [ 316.179043][ T8826] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1081'. [ 316.265649][ T8826] batman_adv: batadv0: Adding interface: virt_wifi0 [ 316.282140][ T8826] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.313330][ T8826] batman_adv: batadv0: Interface activated: virt_wifi0 [ 316.753974][ T8846] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1090'. [ 317.143017][ T8859] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1094'. [ 317.265967][ T8863] netlink: 'syz.0.1095': attribute type 39 has an invalid length. [ 317.343320][ T8867] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1099'. [ 317.415848][ T8867] netlink: 'syz.3.1099': attribute type 25 has an invalid length. [ 317.433969][ T8867] netlink: 'syz.3.1099': attribute type 3 has an invalid length. [ 317.467785][ T8867] netlink: 'syz.3.1099': attribute type 10 has an invalid length. [ 317.486321][ T8867] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1099'. [ 317.564725][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.571426][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.625252][ T8867] team0: Port device virt_wifi0 removed [ 317.648322][ T8867] batman_adv: batadv0: Adding interface: virt_wifi0 [ 317.668780][ T8867] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.699832][ T8867] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 317.925074][ T8867] syz.3.1099 (8867) used greatest stack depth: 18696 bytes left [ 321.440322][ T8893] __nla_validate_parse: 1 callbacks suppressed [ 321.440359][ T8893] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1108'. [ 321.497338][ T8897] netlink: 'syz.0.1109': attribute type 39 has an invalid length. [ 321.809624][ T8906] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1112'. [ 322.924632][ T8912] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1115'. [ 322.996780][ T8918] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1114'. [ 323.147264][ T8918] netlink: 'syz.2.1114': attribute type 10 has an invalid length. [ 323.172158][ T8918] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1114'. [ 323.225163][ T8918] batman_adv: batadv0: Adding interface: virt_wifi0 [ 323.233161][ T8918] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.268539][ T8918] batman_adv: batadv0: Interface activated: virt_wifi0 [ 323.280291][ T8922] netlink: 'syz.3.1119': attribute type 39 has an invalid length. [ 323.496599][ T8929] netlink: 'syz.1.1122': attribute type 39 has an invalid length. [ 323.616316][ T8936] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 323.622798][ T8936] syzkaller1: linktype set to 773 [ 324.436159][ T8943] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1120'. [ 324.691387][ T8947] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1128'. [ 324.760800][ T8950] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1129'. [ 325.344227][ T8954] netlink: 'syz.1.1130': attribute type 39 has an invalid length. [ 325.760439][ T8959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 325.768710][ T8959] IPv6: NLM_F_CREATE should be set when creating new route [ 325.776793][ T8959] IPv6: NLM_F_CREATE should be set when creating new route [ 325.786776][ T8959] IPv6: NLM_F_CREATE should be set when creating new route [ 325.948247][ T8963] netlink: 'syz.3.1135': attribute type 39 has an invalid length. [ 326.077979][ T8971] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.1139'. [ 326.250814][ T8973] FAULT_INJECTION: forcing a failure. [ 326.250814][ T8973] name failslab, interval 1, probability 0, space 0, times 0 [ 326.290021][ T8973] CPU: 1 PID: 8973 Comm: syz.3.1140 Not tainted syzkaller #0 [ 326.297499][ T8973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.307617][ T8973] Call Trace: [ 326.310953][ T8973] [ 326.313935][ T8973] dump_stack_lvl+0x18c/0x250 [ 326.318672][ T8973] ? show_regs_print_info+0x20/0x20 [ 326.323938][ T8973] ? load_image+0x420/0x420 [ 326.328505][ T8973] ? __might_sleep+0xe0/0xe0 [ 326.333156][ T8973] ? __lock_acquire+0x7d80/0x7d80 [ 326.338240][ T8973] should_fail_ex+0x394/0x4c0 [ 326.342988][ T8973] should_failslab+0x9/0x20 [ 326.347557][ T8973] slab_pre_alloc_hook+0x59/0x300 [ 326.352649][ T8973] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 326.358434][ T8973] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 326.364216][ T8973] __kmem_cache_alloc_node+0x53/0x250 [ 326.369654][ T8973] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 326.375430][ T8973] __kmalloc+0xa7/0x240 [ 326.379648][ T8973] tomoyo_realpath_from_path+0xe6/0x5c0 [ 326.385256][ T8973] ? tomoyo_domain+0xd6/0x120 [ 326.389998][ T8973] tomoyo_path_number_perm+0x248/0x5e0 [ 326.395516][ T8973] ? tomoyo_path_number_perm+0x217/0x5e0 [ 326.401212][ T8973] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 326.406740][ T8973] ? ksys_write+0x1d2/0x260 [ 326.411350][ T8973] ? __fget_files+0x28/0x460 [ 326.416017][ T8973] security_file_ioctl+0x70/0xa0 [ 326.421018][ T8973] __se_sys_ioctl+0x48/0x170 [ 326.425671][ T8973] do_syscall_64+0x55/0xb0 [ 326.430174][ T8973] ? clear_bhb_loop+0x40/0x90 [ 326.434914][ T8973] ? clear_bhb_loop+0x40/0x90 [ 326.439653][ T8973] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.445601][ T8973] RIP: 0033:0x7fcaf1b9e0d9 [ 326.450071][ T8973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.469726][ T8973] RSP: 002b:00007fcaf2b03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.478194][ T8973] RAX: ffffffffffffffda RBX: 00007fcaf1e25fa0 RCX: 00007fcaf1b9e0d9 [ 326.486214][ T8973] RDX: 0000200000000980 RSI: 0000000000008917 RDI: 0000000000000003 [ 326.494230][ T8973] RBP: 00007fcaf2b03090 R08: 0000000000000000 R09: 0000000000000000 [ 326.502261][ T8973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.510287][ T8973] R13: 00007fcaf1e26038 R14: 00007fcaf1e25fa0 R15: 00007fffeb454da8 [ 326.518354][ T8973] [ 326.646661][ T8973] ERROR: Out of memory at tomoyo_realpath_from_path. [ 326.707689][ T8979] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1141'. [ 327.421026][ T8988] tap0: tun_chr_ioctl cmd 1074025677 [ 327.452458][ T8988] tap0: linktype set to 804 [ 328.043088][ T8997] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.1148'. [ 328.144544][ T8999] netlink: 'syz.2.1149': attribute type 39 has an invalid length. [ 328.523351][ T9008] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1150'. [ 328.540452][ T9008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.833528][ T9010] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1153'. [ 328.855208][ T9010] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 328.951703][ T9010] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.1153'. [ 329.004642][ T9012] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1154'. [ 329.331198][ T9025] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1159'. [ 329.962958][ T9043] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1164'. [ 330.030655][ T9043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.918219][ T9047] netlink: 'syz.0.1165': attribute type 39 has an invalid length. [ 332.873857][ T9050] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1166'. [ 333.105385][ T9061] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1170'. [ 333.163492][ T9063] FAULT_INJECTION: forcing a failure. [ 333.163492][ T9063] name failslab, interval 1, probability 0, space 0, times 0 [ 333.176670][ T9063] CPU: 0 PID: 9063 Comm: syz.3.1171 Not tainted syzkaller #0 [ 333.184103][ T9063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.194213][ T9063] Call Trace: [ 333.197571][ T9063] [ 333.200575][ T9063] dump_stack_lvl+0x18c/0x250 [ 333.205314][ T9063] ? show_regs_print_info+0x20/0x20 [ 333.210567][ T9063] ? load_image+0x420/0x420 [ 333.215139][ T9063] ? __lock_acquire+0x7d80/0x7d80 [ 333.220222][ T9063] should_fail_ex+0x394/0x4c0 [ 333.224960][ T9063] should_failslab+0x9/0x20 [ 333.229522][ T9063] slab_pre_alloc_hook+0x59/0x300 [ 333.234616][ T9063] ? security_sk_alloc+0x4b/0x130 [ 333.239710][ T9063] ? security_sk_alloc+0x4b/0x130 [ 333.244791][ T9063] __kmem_cache_alloc_node+0x53/0x250 [ 333.250234][ T9063] ? security_sk_alloc+0x4b/0x130 [ 333.255318][ T9063] __kmalloc+0xa7/0x240 [ 333.259595][ T9063] ? sk_prot_alloc+0xe7/0x210 [ 333.264351][ T9063] security_sk_alloc+0x4b/0x130 [ 333.269256][ T9063] sk_prot_alloc+0x101/0x210 [ 333.273904][ T9063] ? sk_alloc+0x24/0x350 [ 333.278200][ T9063] sk_alloc+0x3a/0x350 [ 333.282362][ T9063] ? bpf_ctx_init+0x154/0x190 [ 333.287132][ T9063] bpf_prog_test_run_skb+0x371/0x18f0 [ 333.292605][ T9063] ? __fget_files+0x28/0x460 [ 333.297255][ T9063] ? __fget_files+0x3fc/0x460 [ 333.301999][ T9063] ? cpu_online+0x60/0x60 [ 333.306388][ T9063] bpf_prog_test_run+0x31f/0x390 [ 333.311389][ T9063] __sys_bpf+0x49d/0x890 [ 333.315694][ T9063] ? bpf_link_show_fdinfo+0x390/0x390 [ 333.321136][ T9063] ? lock_chain_count+0x20/0x20 [ 333.326049][ T9063] __x64_sys_bpf+0x7c/0x90 [ 333.330515][ T9063] do_syscall_64+0x55/0xb0 [ 333.334982][ T9063] ? clear_bhb_loop+0x40/0x90 [ 333.339706][ T9063] ? clear_bhb_loop+0x40/0x90 [ 333.344478][ T9063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.350442][ T9063] RIP: 0033:0x7fcaf1b9e0d9 [ 333.354917][ T9063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.374588][ T9063] RSP: 002b:00007fcaf2b03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 333.383063][ T9063] RAX: ffffffffffffffda RBX: 00007fcaf1e25fa0 RCX: 00007fcaf1b9e0d9 [ 333.391081][ T9063] RDX: 0000000000000050 RSI: 0000200000000480 RDI: 000000000000000a [ 333.399102][ T9063] RBP: 00007fcaf2b03090 R08: 0000000000000000 R09: 0000000000000000 [ 333.407142][ T9063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.415169][ T9063] R13: 00007fcaf1e26038 R14: 00007fcaf1e25fa0 R15: 00007fffeb454da8 [ 333.423207][ T9063] [ 333.739995][ T9070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.748122][ T9070] IPv6: NLM_F_CREATE should be set when creating new route [ 333.757033][ T9070] IPv6: NLM_F_CREATE should be set when creating new route [ 333.766086][ T9070] IPv6: NLM_F_CREATE should be set when creating new route [ 334.309997][ T9079] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1178'. [ 334.324453][ T9079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.364774][ T9086] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1181'. [ 334.762674][ T9097] syzkaller0: entered promiscuous mode [ 334.768666][ T9097] syzkaller0: entered allmulticast mode [ 335.251134][ T9111] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 335.258476][ T9111] IPv6: NLM_F_CREATE should be set when creating new route [ 335.265826][ T9111] IPv6: NLM_F_CREATE should be set when creating new route [ 335.273214][ T9111] IPv6: NLM_F_CREATE should be set when creating new route [ 336.981745][ T9122] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1191'. [ 337.001090][ T9126] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1193'. [ 337.564156][ T9140] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1194'. [ 337.631556][ T9140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.094507][ T9146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 338.108291][ T9146] IPv6: NLM_F_CREATE should be set when creating new route [ 338.116676][ T9146] IPv6: NLM_F_CREATE should be set when creating new route [ 338.124235][ T9146] IPv6: NLM_F_CREATE should be set when creating new route [ 338.174700][ T9149] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1204'. [ 338.198426][ T9149] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 338.221564][ T9157] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1204'. [ 338.346438][ T9155] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1206'. [ 338.897067][ T9173] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.1213'. [ 339.235712][ T9186] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1217'. [ 339.620843][ T9196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.653244][ T9200] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1224'. [ 339.889565][ T9209] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1226'. [ 340.335230][ T9221] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1230'. [ 340.427462][ T9220] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1229'. [ 342.589023][ T9229] netlink: 'syz.3.1233': attribute type 39 has an invalid length. [ 342.695966][ T9231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 342.765823][ T9233] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1235'. [ 343.707023][ T9244] __nla_validate_parse: 1 callbacks suppressed [ 343.707044][ T9244] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1237'. [ 344.167810][ T9260] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1239'. [ 344.173592][ T9252] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1239'. [ 344.187192][ T9252] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 344.232068][ T9259] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1240'. [ 344.393925][ T9263] FAULT_INJECTION: forcing a failure. [ 344.393925][ T9263] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 344.414012][ T9263] CPU: 0 PID: 9263 Comm: syz.2.1241 Not tainted syzkaller #0 [ 344.421471][ T9263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.431581][ T9263] Call Trace: [ 344.434927][ T9263] [ 344.437894][ T9263] dump_stack_lvl+0x18c/0x250 [ 344.442632][ T9263] ? show_regs_print_info+0x20/0x20 [ 344.447878][ T9263] ? load_image+0x420/0x420 [ 344.452435][ T9263] ? __lock_acquire+0x7d80/0x7d80 [ 344.457523][ T9263] should_fail_ex+0x394/0x4c0 [ 344.462253][ T9263] prepare_alloc_pages+0x1e1/0x5b0 [ 344.467420][ T9263] __alloc_pages+0x134/0x460 [ 344.472062][ T9263] ? zone_statistics+0x170/0x170 [ 344.477080][ T9263] ? _copy_from_user+0x11/0xe0 [ 344.481899][ T9263] bpf_prog_test_run_xdp+0xc4c/0x1140 [ 344.487331][ T9263] ? __lock_acquire+0x7d80/0x7d80 [ 344.492426][ T9263] ? dev_put+0x80/0x80 [ 344.496560][ T9263] ? dev_put+0x80/0x80 [ 344.500681][ T9263] bpf_prog_test_run+0x31f/0x390 [ 344.505677][ T9263] __sys_bpf+0x49d/0x890 [ 344.509967][ T9263] ? bpf_link_show_fdinfo+0x390/0x390 [ 344.515399][ T9263] ? lock_chain_count+0x20/0x20 [ 344.520305][ T9263] __x64_sys_bpf+0x7c/0x90 [ 344.524772][ T9263] do_syscall_64+0x55/0xb0 [ 344.529234][ T9263] ? clear_bhb_loop+0x40/0x90 [ 344.533959][ T9263] ? clear_bhb_loop+0x40/0x90 [ 344.538677][ T9263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.544611][ T9263] RIP: 0033:0x7fa887d9e0d9 [ 344.549072][ T9263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.568726][ T9263] RSP: 002b:00007fa888ccc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.577190][ T9263] RAX: ffffffffffffffda RBX: 00007fa888025fa0 RCX: 00007fa887d9e0d9 [ 344.585199][ T9263] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 344.593203][ T9263] RBP: 00007fa888ccc090 R08: 0000000000000000 R09: 0000000000000000 [ 344.601221][ T9263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.609232][ T9263] R13: 00007fa888026038 R14: 00007fa888025fa0 R15: 00007fff845a25b8 [ 344.617261][ T9263] [ 344.868166][ T9269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 344.878033][ T9271] netlink: 'syz.2.1246': attribute type 39 has an invalid length. [ 345.070627][ T9274] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1248'. [ 345.656724][ T9280] netlink: 'syz.2.1251': attribute type 21 has an invalid length. [ 345.664944][ T9280] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1251'. [ 345.784768][ T9283] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1251'. [ 345.956355][ T9283] team0: Port device team_slave_0 removed [ 346.011652][ T9284] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1249'. [ 346.472379][ T9289] syzkaller0: entered promiscuous mode [ 346.563150][ T9289] syzkaller0: entered allmulticast mode [ 347.569893][ T9304] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1257'. [ 347.680800][ T9309] netlink: 'syz.3.1258': attribute type 39 has an invalid length. [ 349.746029][ T9311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.756266][ T9315] netlink: 'syz.2.1261': attribute type 10 has an invalid length. [ 349.788700][ T9327] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1265'. [ 349.872649][ T9333] FAULT_INJECTION: forcing a failure. [ 349.872649][ T9333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.886014][ T9333] CPU: 1 PID: 9333 Comm: syz.1.1266 Not tainted syzkaller #0 [ 349.893463][ T9333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.903561][ T9333] Call Trace: [ 349.906900][ T9333] [ 349.909875][ T9333] dump_stack_lvl+0x18c/0x250 [ 349.914664][ T9333] ? show_regs_print_info+0x20/0x20 [ 349.919926][ T9333] ? load_image+0x420/0x420 [ 349.924504][ T9333] ? __lock_acquire+0x7d80/0x7d80 [ 349.929584][ T9333] ? snprintf+0xe9/0x140 [ 349.933912][ T9333] should_fail_ex+0x394/0x4c0 [ 349.938656][ T9333] _copy_to_user+0x2f/0xa0 [ 349.943132][ T9333] simple_read_from_buffer+0xe7/0x150 [ 349.948570][ T9333] proc_fail_nth_read+0x1e8/0x260 [ 349.953667][ T9333] ? proc_fault_inject_write+0x360/0x360 [ 349.959370][ T9333] ? fsnotify_perm+0x271/0x5e0 [ 349.964196][ T9333] ? proc_fault_inject_write+0x360/0x360 [ 349.969872][ T9333] vfs_read+0x298/0x990 [ 349.974110][ T9333] ? kernel_read+0x1e0/0x1e0 [ 349.978739][ T9333] ? __fget_files+0x28/0x460 [ 349.983369][ T9333] ? __fget_files+0x3fc/0x460 [ 349.988085][ T9333] ? __fdget_pos+0x2a3/0x330 [ 349.992710][ T9333] ? ksys_read+0x74/0x260 [ 349.997075][ T9333] ksys_read+0x151/0x260 [ 350.001359][ T9333] ? vfs_write+0x9a0/0x9a0 [ 350.005818][ T9333] ? lockdep_hardirqs_on+0x98/0x150 [ 350.011053][ T9333] do_syscall_64+0x55/0xb0 [ 350.015500][ T9333] ? clear_bhb_loop+0x40/0x90 [ 350.020216][ T9333] ? clear_bhb_loop+0x40/0x90 [ 350.024933][ T9333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.030869][ T9333] RIP: 0033:0x7f68b375e90e [ 350.035318][ T9333] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 350.054969][ T9333] RSP: 002b:00007f68b4681fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 350.063429][ T9333] RAX: ffffffffffffffda RBX: 00007f68b46826c0 RCX: 00007f68b375e90e [ 350.071429][ T9333] RDX: 000000000000000f RSI: 00007f68b46820a0 RDI: 0000000000000004 [ 350.079424][ T9333] RBP: 00007f68b4682090 R08: 0000000000000000 R09: 0000000000000000 [ 350.087446][ T9333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.095545][ T9333] R13: 00007f68b3a26038 R14: 00007f68b3a25fa0 R15: 00007ffef16ab378 [ 350.103573][ T9333] [ 350.615378][ T9340] netlink: 'syz.1.1270': attribute type 39 has an invalid length. [ 350.833331][ T9337] syzkaller0: entered promiscuous mode [ 350.906503][ T9337] syzkaller0: entered allmulticast mode [ 354.921305][ T9346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 354.950586][ T9352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.086829][ T9359] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1276'. [ 355.162327][ T9357] netlink: 'syz.0.1275': attribute type 21 has an invalid length. [ 355.178180][ T9357] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1275'. [ 355.276132][ T9365] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1275'. [ 355.649310][ T9365] team0: Port device team_slave_0 removed [ 358.521648][ T9375] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1280'. [ 358.536949][ T9375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.760814][ T9378] netlink: 'syz.0.1282': attribute type 39 has an invalid length. [ 358.834158][ T9387] FAULT_INJECTION: forcing a failure. [ 358.834158][ T9387] name failslab, interval 1, probability 0, space 0, times 0 [ 358.847651][ T9387] CPU: 1 PID: 9387 Comm: syz.2.1285 Not tainted syzkaller #0 [ 358.855137][ T9387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.857587][ T9386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 358.865230][ T9387] Call Trace: [ 358.865246][ T9387] [ 358.865255][ T9387] dump_stack_lvl+0x18c/0x250 [ 358.865289][ T9387] ? show_regs_print_info+0x20/0x20 [ 358.865313][ T9387] ? load_image+0x420/0x420 [ 358.893354][ T9387] ? __lock_acquire+0x7d80/0x7d80 [ 358.898448][ T9387] ? verify_lock_unused+0x140/0x140 [ 358.903717][ T9387] should_fail_ex+0x394/0x4c0 [ 358.908504][ T9387] should_failslab+0x9/0x20 [ 358.913072][ T9387] slab_pre_alloc_hook+0x59/0x300 [ 358.918162][ T9387] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 358.923768][ T9387] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 358.929367][ T9387] __kmem_cache_alloc_node+0x53/0x250 [ 358.934819][ T9387] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 358.940431][ T9387] __kmalloc+0xa7/0x240 [ 358.944655][ T9387] bpf_prog_test_run_skb+0x242/0x18f0 [ 358.950100][ T9387] ? __fget_files+0x28/0x460 [ 358.954752][ T9387] ? __fget_files+0x3fc/0x460 [ 358.959500][ T9387] ? cpu_online+0x60/0x60 [ 358.963888][ T9387] bpf_prog_test_run+0x31f/0x390 [ 358.968881][ T9387] __sys_bpf+0x49d/0x890 [ 358.973182][ T9387] ? bpf_link_show_fdinfo+0x390/0x390 [ 358.978621][ T9387] ? lock_chain_count+0x20/0x20 [ 358.983533][ T9387] __x64_sys_bpf+0x7c/0x90 [ 358.988048][ T9387] do_syscall_64+0x55/0xb0 [ 358.992526][ T9387] ? clear_bhb_loop+0x40/0x90 [ 358.997303][ T9387] ? clear_bhb_loop+0x40/0x90 [ 359.002042][ T9387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.007992][ T9387] RIP: 0033:0x7fa887d9e0d9 [ 359.012455][ T9387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.032116][ T9387] RSP: 002b:00007fa888ccc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 359.040591][ T9387] RAX: ffffffffffffffda RBX: 00007fa888025fa0 RCX: 00007fa887d9e0d9 [ 359.048611][ T9387] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 359.056628][ T9387] RBP: 00007fa888ccc090 R08: 0000000000000000 R09: 0000000000000000 [ 359.064650][ T9387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.072668][ T9387] R13: 00007fa888026038 R14: 00007fa888025fa0 R15: 00007fff845a25b8 [ 359.080714][ T9387] [ 359.357892][ T9399] netlink: 'syz.1.1291': attribute type 21 has an invalid length. [ 359.366781][ T9399] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1291'. [ 359.482467][ T9402] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1291'. [ 362.762613][ T9418] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.824623][ T9416] netlink: 'syz.0.1296': attribute type 39 has an invalid length. [ 363.030615][ T9422] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1295'. [ 363.075735][ T9422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.409437][ T9421] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1303'. [ 363.432804][ T9421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.775175][ T9436] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1302'. [ 364.066939][ T9448] netlink: 'syz.3.1307': attribute type 39 has an invalid length. [ 364.174281][ T9450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.454942][ T9456] netlink: 'syz.3.1309': attribute type 21 has an invalid length. [ 364.467187][ T9456] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1309'. [ 364.589752][ T9458] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1309'. [ 364.899762][ T9458] team0: Port device team_slave_0 removed [ 365.165815][ T9457] netlink: 'syz.1.1310': attribute type 10 has an invalid length. [ 365.226831][ T9457] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.290985][ T9457] bridge_slave_1: left allmulticast mode [ 365.299014][ T9457] bridge_slave_1: left promiscuous mode [ 365.317325][ T9457] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.357971][ T9462] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1311'. [ 365.368820][ T9462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.571593][ T9470] FAULT_INJECTION: forcing a failure. [ 365.571593][ T9470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.635856][ T9470] CPU: 0 PID: 9470 Comm: syz.2.1315 Not tainted syzkaller #0 [ 365.643329][ T9470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 365.653430][ T9470] Call Trace: [ 365.656742][ T9470] [ 365.659714][ T9470] dump_stack_lvl+0x18c/0x250 [ 365.664436][ T9470] ? show_regs_print_info+0x20/0x20 [ 365.669668][ T9470] ? load_image+0x420/0x420 [ 365.674217][ T9470] ? __might_fault+0xaa/0x120 [ 365.678957][ T9470] ? __lock_acquire+0x7d80/0x7d80 [ 365.684034][ T9470] should_fail_ex+0x394/0x4c0 [ 365.688769][ T9470] _copy_from_user+0x2f/0xe0 [ 365.693504][ T9470] ___sys_recvmsg+0x174/0x590 [ 365.698244][ T9470] ? __sys_recvmsg+0x2a0/0x2a0 [ 365.703070][ T9470] ? ksys_write+0x1d2/0x260 [ 365.707645][ T9470] ? __fget_files+0x3fc/0x460 [ 365.712373][ T9470] __x64_sys_recvmsg+0x21e/0x2f0 [ 365.717357][ T9470] ? ___sys_recvmsg+0x590/0x590 [ 365.722259][ T9470] ? lockdep_hardirqs_on+0x98/0x150 [ 365.727520][ T9470] do_syscall_64+0x55/0xb0 [ 365.731984][ T9470] ? clear_bhb_loop+0x40/0x90 [ 365.736756][ T9470] ? clear_bhb_loop+0x40/0x90 [ 365.741486][ T9470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.747457][ T9470] RIP: 0033:0x7fa887d9e0d9 [ 365.751909][ T9470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.771817][ T9470] RSP: 002b:00007fa888ccc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 365.780289][ T9470] RAX: ffffffffffffffda RBX: 00007fa888025fa0 RCX: 00007fa887d9e0d9 [ 365.788305][ T9470] RDX: 0000000000010103 RSI: 0000200000000e40 RDI: 0000000000000003 [ 365.796315][ T9470] RBP: 00007fa888ccc090 R08: 0000000000000000 R09: 0000000000000000 [ 365.804326][ T9470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.812366][ T9470] R13: 00007fa888026038 R14: 00007fa888025fa0 R15: 00007fff845a25b8 [ 365.820404][ T9470] [ 366.018276][ T9475] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1317'. [ 366.137851][ T9469] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1314'. [ 366.160694][ T9469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.200206][ T9479] netlink: 'syz.2.1319': attribute type 39 has an invalid length. [ 366.287484][ T9481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.756987][ T9490] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.1324'. [ 367.201273][ T9498] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1327'. [ 367.278884][ T9498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.708387][ T9506] netlink: 'syz.3.1330': attribute type 39 has an invalid length. [ 369.771650][ T9508] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1331'. [ 369.861592][ T9514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.894711][ T9515] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1334'. [ 370.121626][ T9522] FAULT_INJECTION: forcing a failure. [ 370.121626][ T9522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.147965][ T9522] CPU: 0 PID: 9522 Comm: syz.3.1337 Not tainted syzkaller #0 [ 370.155441][ T9522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.165726][ T9522] Call Trace: [ 370.169087][ T9522] [ 370.172058][ T9522] dump_stack_lvl+0x18c/0x250 [ 370.176800][ T9522] ? show_regs_print_info+0x20/0x20 [ 370.182057][ T9522] ? load_image+0x420/0x420 [ 370.186624][ T9522] ? __lock_acquire+0x7d80/0x7d80 [ 370.191705][ T9522] ? snprintf+0xe9/0x140 [ 370.196019][ T9522] should_fail_ex+0x394/0x4c0 [ 370.200760][ T9522] _copy_to_user+0x2f/0xa0 [ 370.205235][ T9522] simple_read_from_buffer+0xe7/0x150 [ 370.210682][ T9522] proc_fail_nth_read+0x1e8/0x260 [ 370.215810][ T9522] ? proc_fault_inject_write+0x360/0x360 [ 370.221507][ T9522] ? fsnotify_perm+0x271/0x5e0 [ 370.226329][ T9522] ? proc_fault_inject_write+0x360/0x360 [ 370.232030][ T9522] vfs_read+0x298/0x990 [ 370.236261][ T9522] ? kernel_read+0x1e0/0x1e0 [ 370.240921][ T9522] ? __fget_files+0x28/0x460 [ 370.245568][ T9522] ? __fget_files+0x3fc/0x460 [ 370.250352][ T9522] ? __fdget_pos+0x2a3/0x330 [ 370.255005][ T9522] ? ksys_read+0x74/0x260 [ 370.259404][ T9522] ksys_read+0x151/0x260 [ 370.263706][ T9522] ? vfs_write+0x9a0/0x9a0 [ 370.268184][ T9522] ? lockdep_hardirqs_on+0x98/0x150 [ 370.273448][ T9522] do_syscall_64+0x55/0xb0 [ 370.277921][ T9522] ? clear_bhb_loop+0x40/0x90 [ 370.282654][ T9522] ? clear_bhb_loop+0x40/0x90 [ 370.287385][ T9522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.293342][ T9522] RIP: 0033:0x7fcaf1b5e90e [ 370.297811][ T9522] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 370.317473][ T9522] RSP: 002b:00007fcaf2b02fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 370.321541][ T9524] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1338'. [ 370.325929][ T9522] RAX: ffffffffffffffda RBX: 00007fcaf2b036c0 RCX: 00007fcaf1b5e90e [ 370.325950][ T9522] RDX: 000000000000000f RSI: 00007fcaf2b030a0 RDI: 0000000000000005 [ 370.325965][ T9522] RBP: 00007fcaf2b03090 R08: 0000000000000000 R09: 0000000000000000 [ 370.325979][ T9522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.325993][ T9522] R13: 00007fcaf1e26038 R14: 00007fcaf1e25fa0 R15: 00007fffeb454da8 [ 370.326026][ T9522] [ 370.414319][ T9526] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1339'. [ 370.627280][ T9536] netlink: 'syz.1.1342': attribute type 39 has an invalid length. [ 370.874495][ T9539] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1341'. [ 370.967467][ T9539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.260002][ T9542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.921559][ T9557] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1350'. [ 373.947560][ T9555] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1349'. [ 374.148039][ T9564] netlink: 'syz.1.1353': attribute type 39 has an invalid length. [ 374.203137][ T9562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.260881][ T9566] FAULT_INJECTION: forcing a failure. [ 374.260881][ T9566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.289932][ T9566] CPU: 0 PID: 9566 Comm: syz.3.1354 Not tainted syzkaller #0 [ 374.297445][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 374.307558][ T9566] Call Trace: [ 374.310884][ T9566] [ 374.313859][ T9566] dump_stack_lvl+0x18c/0x250 [ 374.318593][ T9566] ? show_regs_print_info+0x20/0x20 [ 374.323840][ T9566] ? load_image+0x420/0x420 [ 374.328399][ T9566] ? __might_fault+0xaa/0x120 [ 374.333121][ T9566] ? __lock_acquire+0x7d80/0x7d80 [ 374.338195][ T9566] should_fail_ex+0x394/0x4c0 [ 374.342923][ T9566] _copy_from_user+0x2f/0xe0 [ 374.347563][ T9566] ___sys_recvmsg+0x174/0x590 [ 374.352296][ T9566] ? __sys_recvmsg+0x2a0/0x2a0 [ 374.357114][ T9566] ? ksys_write+0x1d2/0x260 [ 374.361673][ T9566] ? __fget_files+0x3fc/0x460 [ 374.366414][ T9566] __x64_sys_recvmsg+0x21e/0x2f0 [ 374.371403][ T9566] ? ___sys_recvmsg+0x590/0x590 [ 374.376332][ T9566] ? lockdep_hardirqs_on+0x98/0x150 [ 374.381589][ T9566] do_syscall_64+0x55/0xb0 [ 374.386045][ T9566] ? clear_bhb_loop+0x40/0x90 [ 374.390763][ T9566] ? clear_bhb_loop+0x40/0x90 [ 374.395512][ T9566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.401449][ T9566] RIP: 0033:0x7fcaf1b9e0d9 [ 374.405908][ T9566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.425557][ T9566] RSP: 002b:00007fcaf2b03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 374.434015][ T9566] RAX: ffffffffffffffda RBX: 00007fcaf1e25fa0 RCX: 00007fcaf1b9e0d9 [ 374.442023][ T9566] RDX: 0000000000010103 RSI: 0000200000000e40 RDI: 0000000000000003 [ 374.450033][ T9566] RBP: 00007fcaf2b03090 R08: 0000000000000000 R09: 0000000000000000 [ 374.458042][ T9566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.466059][ T9566] R13: 00007fcaf1e26038 R14: 00007fcaf1e25fa0 R15: 00007fffeb454da8 [ 374.474090][ T9566] [ 374.505199][ T9569] sit0: entered allmulticast mode [ 374.583186][ T9568] sit0: entered promiscuous mode [ 377.892089][ T9587] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1361'. [ 377.921802][ T9588] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1362'. [ 378.153612][ T9595] netlink: 'syz.3.1365': attribute type 39 has an invalid length. [ 378.214366][ T9603] FAULT_INJECTION: forcing a failure. [ 378.214366][ T9603] name failslab, interval 1, probability 0, space 0, times 0 [ 378.234386][ T9603] CPU: 1 PID: 9603 Comm: syz.0.1367 Not tainted syzkaller #0 [ 378.241866][ T9603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 378.251976][ T9603] Call Trace: [ 378.255305][ T9603] [ 378.258271][ T9603] dump_stack_lvl+0x18c/0x250 [ 378.263011][ T9603] ? show_regs_print_info+0x20/0x20 [ 378.268270][ T9603] ? load_image+0x420/0x420 [ 378.272846][ T9603] ? __might_sleep+0xe0/0xe0 [ 378.277485][ T9603] ? __lock_acquire+0x7d80/0x7d80 [ 378.282569][ T9603] should_fail_ex+0x394/0x4c0 [ 378.287308][ T9603] should_failslab+0x9/0x20 [ 378.291868][ T9603] slab_pre_alloc_hook+0x59/0x300 [ 378.296956][ T9603] ? sock_kmalloc+0x96/0xf0 [ 378.301509][ T9603] ? sock_kmalloc+0x96/0xf0 [ 378.306052][ T9603] __kmem_cache_alloc_node+0x53/0x250 [ 378.311473][ T9603] ? sock_kmalloc+0x96/0xf0 [ 378.316005][ T9603] __kmalloc+0xa7/0x240 [ 378.320211][ T9603] sock_kmalloc+0x96/0xf0 [ 378.324588][ T9603] ____sys_sendmsg+0x1d4/0x980 [ 378.329396][ T9603] ? __asan_memset+0x22/0x40 [ 378.334034][ T9603] ? __sys_sendmsg_sock+0x30/0x30 [ 378.339087][ T9603] ? __import_iovec+0x5f2/0x850 [ 378.343975][ T9603] ? import_iovec+0x73/0xa0 [ 378.348510][ T9603] ___sys_sendmsg+0x2a6/0x360 [ 378.353219][ T9603] ? get_pid_task+0x20/0x1e0 [ 378.357850][ T9603] ? __sys_sendmsg+0x2b0/0x2b0 [ 378.362658][ T9603] ? __lock_acquire+0x7d80/0x7d80 [ 378.367729][ T9603] __se_sys_sendmsg+0x1d0/0x2c0 [ 378.372615][ T9603] ? __x64_sys_sendmsg+0x80/0x80 [ 378.377627][ T9603] ? lockdep_hardirqs_on+0x98/0x150 [ 378.382900][ T9603] do_syscall_64+0x55/0xb0 [ 378.387347][ T9603] ? clear_bhb_loop+0x40/0x90 [ 378.392092][ T9603] ? clear_bhb_loop+0x40/0x90 [ 378.396802][ T9603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.402732][ T9603] RIP: 0033:0x7f0a57f9e0d9 [ 378.407178][ T9603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.426835][ T9603] RSP: 002b:00007f0a561f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.435278][ T9603] RAX: ffffffffffffffda RBX: 00007f0a58225fa0 RCX: 00007f0a57f9e0d9 [ 378.443278][ T9603] RDX: 0000000000008841 RSI: 0000200000000500 RDI: 0000000000000003 [ 378.451302][ T9603] RBP: 00007f0a561f6090 R08: 0000000000000000 R09: 0000000000000000 [ 378.459298][ T9603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.467295][ T9603] R13: 00007f0a58226038 R14: 00007f0a58225fa0 R15: 00007ffed0ac4bd8 [ 378.475307][ T9603] [ 379.006005][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.013172][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.079102][ T9618] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.1374'. [ 379.252475][ T9623] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1376'. [ 379.326604][ T9626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 379.354614][ T9630] FAULT_INJECTION: forcing a failure. [ 379.354614][ T9630] name failslab, interval 1, probability 0, space 0, times 0 [ 379.371363][ T9630] CPU: 1 PID: 9630 Comm: syz.2.1378 Not tainted syzkaller #0 [ 379.378833][ T9630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 379.388993][ T9630] Call Trace: [ 379.392334][ T9630] [ 379.395349][ T9630] dump_stack_lvl+0x18c/0x250 [ 379.400098][ T9630] ? show_regs_print_info+0x20/0x20 [ 379.405360][ T9630] ? load_image+0x420/0x420 [ 379.409938][ T9630] ? __might_sleep+0xe0/0xe0 [ 379.414598][ T9630] ? __lock_acquire+0x7d80/0x7d80 [ 379.419759][ T9630] ? mark_lock+0x94/0x320 [ 379.424145][ T9630] should_fail_ex+0x394/0x4c0 [ 379.428876][ T9630] should_failslab+0x9/0x20 [ 379.433430][ T9630] slab_pre_alloc_hook+0x59/0x300 [ 379.438499][ T9630] ? __get_vm_area_node+0x125/0x370 [ 379.443734][ T9630] __kmem_cache_alloc_node+0x53/0x250 [ 379.449167][ T9630] ? __get_vm_area_node+0x125/0x370 [ 379.454407][ T9630] kmalloc_node_trace+0x26/0xe0 [ 379.459324][ T9630] __get_vm_area_node+0x125/0x370 [ 379.464386][ T9630] __vmalloc_node_range+0x36f/0x1320 [ 379.469705][ T9630] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 379.475285][ T9630] ? mark_lock+0x94/0x320 [ 379.479654][ T9630] ? __lock_acquire+0x1336/0x7d80 [ 379.484753][ T9630] ? aa_get_newest_label+0xfd/0x5c0 [ 379.490033][ T9630] ? free_vm_area+0x50/0x50 [ 379.494581][ T9630] ? end_current_label_crit_section+0x170/0x170 [ 379.500864][ T9630] ? verify_lock_unused+0x140/0x140 [ 379.506098][ T9630] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 379.511675][ T9630] __vmalloc+0x7a/0x90 [ 379.515779][ T9630] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 379.521365][ T9630] bpf_prog_alloc_no_stats+0x46/0x430 [ 379.526770][ T9630] bpf_prog_alloc+0x3d/0x1a0 [ 379.531391][ T9630] bpf_prog_load+0x6b2/0x1610 [ 379.536117][ T9630] ? map_freeze+0x420/0x420 [ 379.540660][ T9630] ? __might_fault+0xaa/0x120 [ 379.545373][ T9630] ? __lock_acquire+0x7d80/0x7d80 [ 379.550645][ T9630] ? file_end_write+0x159/0x250 [ 379.555535][ T9630] ? __might_fault+0xaa/0x120 [ 379.560241][ T9630] ? __might_fault+0xc6/0x120 [ 379.564946][ T9630] ? __might_fault+0xaa/0x120 [ 379.569665][ T9630] ? bpf_lsm_bpf+0x9/0x10 [ 379.574051][ T9630] ? security_bpf+0x7e/0xa0 [ 379.578651][ T9630] __sys_bpf+0x5ba/0x890 [ 379.582950][ T9630] ? bpf_link_show_fdinfo+0x390/0x390 [ 379.588370][ T9630] ? lock_chain_count+0x20/0x20 [ 379.593259][ T9630] __x64_sys_bpf+0x7c/0x90 [ 379.597709][ T9630] do_syscall_64+0x55/0xb0 [ 379.602164][ T9630] ? clear_bhb_loop+0x40/0x90 [ 379.606900][ T9630] ? clear_bhb_loop+0x40/0x90 [ 379.611608][ T9630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 379.617532][ T9630] RIP: 0033:0x7fa887d9e0d9 [ 379.621992][ T9630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.641630][ T9630] RSP: 002b:00007fa888ccc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 379.650080][ T9630] RAX: ffffffffffffffda RBX: 00007fa888025fa0 RCX: 00007fa887d9e0d9 [ 379.658077][ T9630] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 379.666072][ T9630] RBP: 00007fa888ccc090 R08: 0000000000000000 R09: 0000000000000000 [ 379.674068][ T9630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.682103][ T9630] R13: 00007fa888026038 R14: 00007fa888025fa0 R15: 00007fff845a25b8 [ 379.690117][ T9630] [ 379.755404][ T9630] syz.2.1378: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 379.787938][ T9630] CPU: 1 PID: 9630 Comm: syz.2.1378 Not tainted syzkaller #0 [ 379.795488][ T9630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 379.805577][ T9630] Call Trace: [ 379.808897][ T9630] [ 379.811865][ T9630] dump_stack_lvl+0x18c/0x250 [ 379.816581][ T9630] ? show_regs_print_info+0x20/0x20 [ 379.821817][ T9630] ? load_image+0x420/0x420 [ 379.826389][ T9630] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 379.832842][ T9630] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 379.839378][ T9630] warn_alloc+0x246/0x340 [ 379.843745][ T9630] ? __get_vm_area_node+0x125/0x370 [ 379.848985][ T9630] ? zone_watermark_ok_safe+0x230/0x230 [ 379.854563][ T9630] ? rcu_is_watching+0x15/0xb0 [ 379.859371][ T9630] ? __get_vm_area_node+0x356/0x370 [ 379.864615][ T9630] __vmalloc_node_range+0x394/0x1320 [ 379.869939][ T9630] ? mark_lock+0x94/0x320 [ 379.874301][ T9630] ? __lock_acquire+0x1336/0x7d80 [ 379.879365][ T9630] ? aa_get_newest_label+0xfd/0x5c0 [ 379.884595][ T9630] ? free_vm_area+0x50/0x50 [ 379.889131][ T9630] ? end_current_label_crit_section+0x170/0x170 [ 379.895407][ T9630] ? verify_lock_unused+0x140/0x140 [ 379.900645][ T9630] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 379.906220][ T9630] __vmalloc+0x7a/0x90 [ 379.910324][ T9630] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 379.915907][ T9630] bpf_prog_alloc_no_stats+0x46/0x430 [ 379.921311][ T9630] bpf_prog_alloc+0x3d/0x1a0 [ 379.925939][ T9630] bpf_prog_load+0x6b2/0x1610 [ 379.930664][ T9630] ? map_freeze+0x420/0x420 [ 379.935206][ T9630] ? __might_fault+0xaa/0x120 [ 379.939915][ T9630] ? __lock_acquire+0x7d80/0x7d80 [ 379.944982][ T9630] ? file_end_write+0x159/0x250 [ 379.949867][ T9630] ? __might_fault+0xaa/0x120 [ 379.954576][ T9630] ? __might_fault+0xc6/0x120 [ 379.959283][ T9630] ? __might_fault+0xaa/0x120 [ 379.963997][ T9630] ? bpf_lsm_bpf+0x9/0x10 [ 379.968363][ T9630] ? security_bpf+0x7e/0xa0 [ 379.972900][ T9630] __sys_bpf+0x5ba/0x890 [ 379.977175][ T9630] ? bpf_link_show_fdinfo+0x390/0x390 [ 379.982591][ T9630] ? lock_chain_count+0x20/0x20 [ 379.987490][ T9630] __x64_sys_bpf+0x7c/0x90 [ 379.991937][ T9630] do_syscall_64+0x55/0xb0 [ 379.996406][ T9630] ? clear_bhb_loop+0x40/0x90 [ 380.001116][ T9630] ? clear_bhb_loop+0x40/0x90 [ 380.005826][ T9630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.011756][ T9630] RIP: 0033:0x7fa887d9e0d9 [ 380.016194][ T9630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.035836][ T9630] RSP: 002b:00007fa888ccc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 380.044289][ T9630] RAX: ffffffffffffffda RBX: 00007fa888025fa0 RCX: 00007fa887d9e0d9 [ 380.052292][ T9630] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 380.060302][ T9630] RBP: 00007fa888ccc090 R08: 0000000000000000 R09: 0000000000000000 [ 380.068320][ T9630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.076324][ T9630] R13: 00007fa888026038 R14: 00007fa888025fa0 R15: 00007fff845a25b8 [ 380.084343][ T9630] [ 380.153080][ T9633] netlink: 'syz.0.1379': attribute type 39 has an invalid length. [ 380.171469][ T9630] Mem-Info: [ 380.174969][ T9630] active_anon:5350 inactive_anon:0 isolated_anon:0 [ 380.174969][ T9630] active_file:16555 inactive_file:40063 isolated_file:0 [ 380.174969][ T9630] unevictable:768 dirty:201 writeback:0 [ 380.174969][ T9630] slab_reclaimable:10041 slab_unreclaimable:92687 [ 380.174969][ T9630] mapped:25003 shmem:1361 pagetables:527 [ 380.174969][ T9630] sec_pagetables:0 bounce:0 [ 380.174969][ T9630] kernel_misc_reclaimable:0 [ 380.174969][ T9630] free:1349132 free_pcp:11220 free_cma:0 [ 380.275964][ T9630] Node 0 active_anon:21564kB inactive_anon:0kB active_file:66220kB inactive_file:160048kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100020kB dirty:784kB writeback:24kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10364kB pagetables:2220kB sec_pagetables:0kB all_unreclaimable? no [ 380.345188][ T9630] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 380.398945][ T9630] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 380.430948][ T9630] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 380.437591][ T9630] Node 0 DMA32 free:1487676kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21380kB inactive_anon:0kB active_file:66220kB inactive_file:159232kB unevictable:1536kB writepending:868kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:25588kB local_pcp:18948kB free_cma:0kB [ 380.485819][ T9630] lowmem_reserve[]: 0 0 0 0 0 [ 380.498894][ T9630] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 380.531257][ T9630] lowmem_reserve[]: 0 0 0 0 0 [ 380.536079][ T9630] Node 1 Normal free:3892820kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20096kB local_pcp:12960kB free_cma:0kB [ 380.613933][ T9630] lowmem_reserve[]: 0 0 0 0 0 [ 380.641204][ T9630] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 380.667505][ T9630] Node 0 DMA32: 287*4kB (UME) 1554*8kB (UME) 633*16kB (ME) 554*32kB (UME) 494*64kB (UME) 152*128kB (UME) 65*256kB (UME) 27*512kB (UME) 9*1024kB (UM) 9*2048kB (ME) 326*4096kB (UM) = 1485916kB [ 380.688322][ T9630] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 380.700535][ T9630] Node 1 Normal: 245*4kB (UME) 58*8kB (UME) 39*16kB (UME) 122*32kB (UME) 28*64kB (UE) 6*128kB (UME) 3*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3892820kB [ 380.760159][ T9630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 380.830078][ T9630] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 380.847185][ T9650] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1386'. [ 380.857951][ T9630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 380.883912][ T9630] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 380.904124][ T9652] FAULT_INJECTION: forcing a failure. [ 380.904124][ T9652] name failslab, interval 1, probability 0, space 0, times 0 [ 380.918667][ T9630] 57981 total pagecache pages [ 380.928899][ T9630] 0 pages in swap cache [ 380.933116][ T9630] Free swap = 124996kB [ 380.938455][ T9652] CPU: 1 PID: 9652 Comm: syz.3.1388 Not tainted syzkaller #0 [ 380.945883][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 380.955991][ T9652] Call Trace: [ 380.959305][ T9652] [ 380.962262][ T9652] dump_stack_lvl+0x18c/0x250 [ 380.967065][ T9652] ? show_regs_print_info+0x20/0x20 [ 380.972299][ T9652] ? load_image+0x420/0x420 [ 380.976841][ T9652] ? __might_sleep+0xe0/0xe0 [ 380.981469][ T9652] ? __lock_acquire+0x7d80/0x7d80 [ 380.986527][ T9652] ? mark_lock+0x94/0x320 [ 380.990895][ T9652] should_fail_ex+0x394/0x4c0 [ 380.995606][ T9652] should_failslab+0x9/0x20 [ 381.000149][ T9652] slab_pre_alloc_hook+0x59/0x300 [ 381.005213][ T9652] ? __get_vm_area_node+0x125/0x370 [ 381.010449][ T9652] __kmem_cache_alloc_node+0x53/0x250 [ 381.015863][ T9652] ? __get_vm_area_node+0x125/0x370 [ 381.021101][ T9652] kmalloc_node_trace+0x26/0xe0 [ 381.025990][ T9652] __get_vm_area_node+0x125/0x370 [ 381.031059][ T9652] __vmalloc_node_range+0x36f/0x1320 [ 381.036379][ T9652] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 381.041966][ T9652] ? mark_lock+0x94/0x320 [ 381.046329][ T9652] ? __lock_acquire+0x1336/0x7d80 [ 381.051401][ T9652] ? aa_get_newest_label+0xfd/0x5c0 [ 381.056632][ T9652] ? free_vm_area+0x50/0x50 [ 381.061174][ T9652] ? end_current_label_crit_section+0x170/0x170 [ 381.067455][ T9652] ? verify_lock_unused+0x140/0x140 [ 381.072688][ T9652] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 381.078260][ T9652] __vmalloc+0x7a/0x90 [ 381.082370][ T9652] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 381.087961][ T9652] bpf_prog_alloc_no_stats+0x46/0x430 [ 381.093387][ T9652] bpf_prog_alloc+0x3d/0x1a0 [ 381.098030][ T9652] bpf_prog_load+0x6b2/0x1610 [ 381.102760][ T9652] ? map_freeze+0x420/0x420 [ 381.107309][ T9652] ? __might_fault+0xaa/0x120 [ 381.112018][ T9652] ? __lock_acquire+0x7d80/0x7d80 [ 381.117077][ T9652] ? file_end_write+0x159/0x250 [ 381.121965][ T9652] ? __might_fault+0xaa/0x120 [ 381.126682][ T9652] ? __might_fault+0xc6/0x120 [ 381.131388][ T9652] ? __might_fault+0xaa/0x120 [ 381.136100][ T9652] ? bpf_lsm_bpf+0x9/0x10 [ 381.140464][ T9652] ? security_bpf+0x7e/0xa0 [ 381.145003][ T9652] __sys_bpf+0x5ba/0x890 [ 381.149287][ T9652] ? bpf_link_show_fdinfo+0x390/0x390 [ 381.154721][ T9652] ? lock_chain_count+0x20/0x20 [ 381.159623][ T9652] __x64_sys_bpf+0x7c/0x90 [ 381.164079][ T9652] do_syscall_64+0x55/0xb0 [ 381.168525][ T9652] ? clear_bhb_loop+0x40/0x90 [ 381.173231][ T9652] ? clear_bhb_loop+0x40/0x90 [ 381.177941][ T9652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 381.183873][ T9652] RIP: 0033:0x7fcaf1b9e0d9 [ 381.188315][ T9652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.207953][ T9652] RSP: 002b:00007fcaf2b03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 381.216417][ T9652] RAX: ffffffffffffffda RBX: 00007fcaf1e25fa0 RCX: 00007fcaf1b9e0d9 [ 381.224431][ T9652] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 381.232451][ T9652] RBP: 00007fcaf2b03090 R08: 0000000000000000 R09: 0000000000000000 [ 381.240460][ T9652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.248464][ T9652] R13: 00007fcaf1e26038 R14: 00007fcaf1e25fa0 R15: 00007fffeb454da8 [ 381.256482][ T9652] [ 381.260526][ T9630] Total swap = 124996kB [ 381.264735][ T9630] 2097051 pages RAM [ 381.268572][ T9630] 0 pages HighMem/MovableOnly [ 381.273504][ T9630] 416958 pages reserved [ 381.277699][ T9630] 0 pages cma reserved [ 381.582131][ T9659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 381.785072][ T9666] netlink: 'syz.2.1392': attribute type 39 has an invalid length. [ 381.881527][ T9668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.185054][ T9679] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1397'. [ 382.240956][ T9685] netlink: 'syz.2.1398': attribute type 10 has an invalid length. [ 382.250967][ T9685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 382.264024][ T9685] hsr0: entered promiscuous mode [ 382.300647][ T9685] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 382.464405][ T9690] FAULT_INJECTION: forcing a failure. [ 382.464405][ T9690] name failslab, interval 1, probability 0, space 0, times 0 [ 382.486963][ T9690] CPU: 0 PID: 9690 Comm: syz.0.1402 Not tainted syzkaller #0 [ 382.494447][ T9690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.504566][ T9690] Call Trace: [ 382.507898][ T9690] [ 382.510914][ T9690] dump_stack_lvl+0x18c/0x250 [ 382.515653][ T9690] ? show_regs_print_info+0x20/0x20 [ 382.520911][ T9690] ? load_image+0x420/0x420 [ 382.525480][ T9690] ? __might_sleep+0xe0/0xe0 [ 382.530131][ T9690] ? __lock_acquire+0x7d80/0x7d80 [ 382.535233][ T9690] should_fail_ex+0x394/0x4c0 [ 382.539975][ T9690] should_failslab+0x9/0x20 [ 382.544548][ T9690] slab_pre_alloc_hook+0x59/0x300 [ 382.549632][ T9690] ? __lock_acquire+0x7d80/0x7d80 [ 382.554722][ T9690] kmem_cache_alloc_node+0x5e/0x310 [ 382.559984][ T9690] ? __alloc_skb+0x103/0x2c0 [ 382.564638][ T9690] __alloc_skb+0x103/0x2c0 [ 382.569112][ T9690] netlink_sendmsg+0x66a/0xbf0 [ 382.573934][ T9690] ? netlink_getsockopt+0x590/0x590 [ 382.579188][ T9690] ? apparmor_socket_sendmsg+0x8e/0x330 [ 382.584789][ T9690] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 382.590132][ T9690] ? security_socket_sendmsg+0x80/0xa0 [ 382.595650][ T9690] ? netlink_getsockopt+0x590/0x590 [ 382.600914][ T9690] ____sys_sendmsg+0x61b/0x980 [ 382.605744][ T9690] ? __asan_memset+0x22/0x40 [ 382.610397][ T9690] ? __sys_sendmsg_sock+0x30/0x30 [ 382.615486][ T9690] ? __import_iovec+0x5f2/0x850 [ 382.620411][ T9690] ? import_iovec+0x73/0xa0 [ 382.624980][ T9690] ___sys_sendmsg+0x2a6/0x360 [ 382.629717][ T9690] ? __sys_sendmsg+0x2b0/0x2b0 [ 382.634583][ T9690] __se_sys_sendmsg+0x1d0/0x2c0 [ 382.639499][ T9690] ? perf_trace_preemptirq_template+0x269/0x330 [ 382.645809][ T9690] ? __x64_sys_sendmsg+0x80/0x80 [ 382.650828][ T9690] ? lockdep_hardirqs_on+0x98/0x150 [ 382.656097][ T9690] do_syscall_64+0x55/0xb0 [ 382.660565][ T9690] ? clear_bhb_loop+0x40/0x90 [ 382.665295][ T9690] ? clear_bhb_loop+0x40/0x90 [ 382.670030][ T9690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.675974][ T9690] RIP: 0033:0x7f0a57f9e0d9 [ 382.680450][ T9690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.700117][ T9690] RSP: 002b:00007f0a561f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.708616][ T9690] RAX: ffffffffffffffda RBX: 00007f0a58225fa0 RCX: 00007f0a57f9e0d9 [ 382.716651][ T9690] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 000000000000000b [ 382.724674][ T9690] RBP: 00007f0a561f6090 R08: 0000000000000000 R09: 0000000000000000 [ 382.732706][ T9690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.740771][ T9690] R13: 00007f0a58226038 R14: 00007f0a58225fa0 R15: 00007ffed0ac4bd8 [ 382.748814][ T9690] [ 383.164891][ T9698] netlink: 'syz.1.1405': attribute type 39 has an invalid length. [ 386.607769][ T9707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.829673][ T9720] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.1411'. [ 387.004539][ T9728] netlink: 'syz.1.1415': attribute type 39 has an invalid length. [ 387.159587][ T9732] sit0: entered allmulticast mode [ 387.259506][ T9737] sit0: entered promiscuous mode [ 387.348524][ T9740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 387.579361][ T9746] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1422'. [ 387.636078][ T9747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 387.814773][ T9757] FAULT_INJECTION: forcing a failure. [ 387.814773][ T9757] name failslab, interval 1, probability 0, space 0, times 0 [ 387.860222][ T9757] CPU: 0 PID: 9757 Comm: syz.1.1427 Not tainted syzkaller #0 [ 387.867692][ T9757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.877813][ T9757] Call Trace: [ 387.881144][ T9757] [ 387.884114][ T9757] dump_stack_lvl+0x18c/0x250 [ 387.888852][ T9757] ? show_regs_print_info+0x20/0x20 [ 387.894119][ T9757] ? load_image+0x420/0x420 [ 387.898692][ T9757] ? __might_sleep+0xe0/0xe0 [ 387.903340][ T9757] ? __lock_acquire+0x7d80/0x7d80 [ 387.908469][ T9757] should_fail_ex+0x394/0x4c0 [ 387.913207][ T9757] should_failslab+0x9/0x20 [ 387.917766][ T9757] slab_pre_alloc_hook+0x59/0x300 [ 387.922858][ T9757] kmem_cache_alloc_node+0x5e/0x310 [ 387.928127][ T9757] ? perf_event_alloc+0x146/0x2150 [ 387.933295][ T9757] perf_event_alloc+0x146/0x2150 [ 387.938294][ T9757] ? _raw_spin_unlock+0x28/0x40 [ 387.943294][ T9757] ? find_lively_task_by_vpid+0x19/0x290 [ 387.948987][ T9757] ? find_lively_task_by_vpid+0x19/0x290 [ 387.954730][ T9757] __se_sys_perf_event_open+0x740/0x1c60 [ 387.960438][ T9757] ? mutex_unlock+0x10/0x10 [ 387.965009][ T9757] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 387.970717][ T9757] ? lock_chain_count+0x20/0x20 [ 387.975628][ T9757] ? lockdep_hardirqs_on+0x98/0x150 [ 387.980895][ T9757] ? __x64_sys_perf_event_open+0x20/0xc0 [ 387.986590][ T9757] do_syscall_64+0x55/0xb0 [ 387.991067][ T9757] ? clear_bhb_loop+0x40/0x90 [ 387.995804][ T9757] ? clear_bhb_loop+0x40/0x90 [ 388.000547][ T9757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.006525][ T9757] RIP: 0033:0x7f68b379e0d9 [ 388.010992][ T9757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.030661][ T9757] RSP: 002b:00007f68b4682028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 388.039131][ T9757] RAX: ffffffffffffffda RBX: 00007f68b3a25fa0 RCX: 00007f68b379e0d9 [ 388.047148][ T9757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 388.055167][ T9757] RBP: 00007f68b4682090 R08: 0000000000000000 R09: 0000000000000000 [ 388.063193][ T9757] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 388.071221][ T9757] R13: 00007f68b3a26038 R14: 00007f68b3a25fa0 R15: 00007ffef16ab378 [ 388.079256][ T9757] [ 388.096594][ T9755] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.1425'. [ 388.261189][ T9761] netlink: 'syz.3.1428': attribute type 39 has an invalid length. [ 388.317726][ T9763] netlink: 'syz.2.1429': attribute type 46 has an invalid length. [ 388.718089][ T9775] sit0: entered allmulticast mode [ 388.796221][ T9773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 388.829288][ T9779] sit0: entered promiscuous mode [ 389.026363][ T9786] netlink: 'syz.2.1440': attribute type 39 has an invalid length. [ 389.093371][ T9781] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1439'. [ 389.184744][ T9783] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.1438'. [ 389.425035][ T9794] FAULT_INJECTION: forcing a failure. [ 389.425035][ T9794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.451735][ T9794] CPU: 1 PID: 9794 Comm: syz.0.1443 Not tainted syzkaller #0 [ 389.459206][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.469310][ T9794] Call Trace: [ 389.472627][ T9794] [ 389.475587][ T9794] dump_stack_lvl+0x18c/0x250 [ 389.480299][ T9794] ? show_regs_print_info+0x20/0x20 [ 389.485528][ T9794] ? load_image+0x420/0x420 [ 389.490073][ T9794] ? __lock_acquire+0x7d80/0x7d80 [ 389.495329][ T9794] ? snprintf+0xe9/0x140 [ 389.499627][ T9794] should_fail_ex+0x394/0x4c0 [ 389.504387][ T9794] _copy_to_user+0x2f/0xa0 [ 389.508846][ T9794] simple_read_from_buffer+0xe7/0x150 [ 389.514255][ T9794] proc_fail_nth_read+0x1e8/0x260 [ 389.520232][ T9794] ? proc_fault_inject_write+0x360/0x360 [ 389.525940][ T9794] ? fsnotify_perm+0x271/0x5e0 [ 389.530838][ T9794] ? proc_fault_inject_write+0x360/0x360 [ 389.536541][ T9794] vfs_read+0x298/0x990 [ 389.541289][ T9794] ? kernel_read+0x1e0/0x1e0 [ 389.546025][ T9794] ? __fget_files+0x28/0x460 [ 389.550666][ T9794] ? __fget_files+0x3fc/0x460 [ 389.555410][ T9794] ? __fdget_pos+0x2a3/0x330 [ 389.560086][ T9794] ? ksys_read+0x74/0x260 [ 389.564503][ T9794] ksys_read+0x151/0x260 [ 389.568808][ T9794] ? vfs_write+0x9a0/0x9a0 [ 389.573274][ T9794] ? lockdep_hardirqs_on+0x98/0x150 [ 389.578514][ T9794] do_syscall_64+0x55/0xb0 [ 389.582968][ T9794] ? clear_bhb_loop+0x40/0x90 [ 389.587689][ T9794] ? clear_bhb_loop+0x40/0x90 [ 389.592402][ T9794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.598351][ T9794] RIP: 0033:0x7f0a57f5e90e [ 389.602794][ T9794] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 389.622457][ T9794] RSP: 002b:00007f0a561f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 389.630904][ T9794] RAX: ffffffffffffffda RBX: 00007f0a561f66c0 RCX: 00007f0a57f5e90e [ 389.638904][ T9794] RDX: 000000000000000f RSI: 00007f0a561f60a0 RDI: 0000000000000007 [ 389.646905][ T9794] RBP: 00007f0a561f6090 R08: 0000000000000000 R09: 0000000000000000 [ 389.654903][ T9794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.662901][ T9794] R13: 00007f0a58226038 R14: 00007f0a58225fa0 R15: 00007ffed0ac4bd8 [ 389.670914][ T9794] [ 390.231329][ T9807] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1446'. [ 390.292966][ T9811] netlink: 'syz.2.1449': attribute type 39 has an invalid length. [ 390.545926][ T9814] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1450'. [ 390.624123][ T9816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.855924][ T9822] netlink: 'syz.0.1453': attribute type 6 has an invalid length. [ 390.873272][ T9822] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1453'. [ 391.025971][ T9826] FAULT_INJECTION: forcing a failure. [ 391.025971][ T9826] name failslab, interval 1, probability 0, space 0, times 0 [ 391.067805][ T9824] netlink: 'syz.2.1454': attribute type 39 has an invalid length. [ 391.080606][ T9826] CPU: 0 PID: 9826 Comm: syz.0.1455 Not tainted syzkaller #0 [ 391.088077][ T9826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.098198][ T9826] Call Trace: [ 391.101514][ T9826] [ 391.104470][ T9826] dump_stack_lvl+0x18c/0x250 [ 391.109186][ T9826] ? show_regs_print_info+0x20/0x20 [ 391.114448][ T9826] ? load_image+0x420/0x420 [ 391.119023][ T9826] ? __might_sleep+0xe0/0xe0 [ 391.123658][ T9826] ? __lock_acquire+0x7d80/0x7d80 [ 391.128857][ T9826] should_fail_ex+0x394/0x4c0 [ 391.133613][ T9826] should_failslab+0x9/0x20 [ 391.138172][ T9826] slab_pre_alloc_hook+0x59/0x300 [ 391.143269][ T9826] ? __get_vm_area_node+0x125/0x370 [ 391.148527][ T9826] __kmem_cache_alloc_node+0x53/0x250 [ 391.153970][ T9826] ? __get_vm_area_node+0x125/0x370 [ 391.159196][ T9826] kmalloc_node_trace+0x26/0xe0 [ 391.164078][ T9826] __get_vm_area_node+0x125/0x370 [ 391.169129][ T9826] __vmalloc_node_range+0x36f/0x1320 [ 391.174440][ T9826] ? netlink_sendmsg+0x602/0xbf0 [ 391.179447][ T9826] ? netlink_insert+0x1094/0x1390 [ 391.184503][ T9826] ? netlink_insert+0x2ba/0x1390 [ 391.189496][ T9826] ? free_vm_area+0x50/0x50 [ 391.194074][ T9826] ? netlink_sendmsg+0x602/0xbf0 [ 391.199063][ T9826] vmalloc+0x79/0x90 [ 391.203014][ T9826] ? netlink_sendmsg+0x602/0xbf0 [ 391.207993][ T9826] netlink_sendmsg+0x602/0xbf0 [ 391.212799][ T9826] ? netlink_getsockopt+0x590/0x590 [ 391.218024][ T9826] ? apparmor_socket_sendmsg+0x8e/0x330 [ 391.223616][ T9826] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 391.228948][ T9826] ? security_socket_sendmsg+0x80/0xa0 [ 391.234433][ T9826] ? netlink_getsockopt+0x590/0x590 [ 391.239716][ T9826] ____sys_sendmsg+0x61b/0x980 [ 391.244546][ T9826] ? __asan_memset+0x22/0x40 [ 391.249194][ T9826] ? __sys_sendmsg_sock+0x30/0x30 [ 391.254260][ T9826] ? __import_iovec+0x5f2/0x850 [ 391.259149][ T9826] ? import_iovec+0x73/0xa0 [ 391.263709][ T9826] ___sys_sendmsg+0x2a6/0x360 [ 391.268411][ T9826] ? get_pid_task+0x20/0x1e0 [ 391.273055][ T9826] ? __sys_sendmsg+0x2b0/0x2b0 [ 391.277898][ T9826] ? __lock_acquire+0x7d80/0x7d80 [ 391.282968][ T9826] __se_sys_sendmsg+0x1d0/0x2c0 [ 391.287876][ T9826] ? __x64_sys_sendmsg+0x80/0x80 [ 391.292866][ T9826] ? lockdep_hardirqs_on+0x98/0x150 [ 391.298122][ T9826] do_syscall_64+0x55/0xb0 [ 391.302586][ T9826] ? clear_bhb_loop+0x40/0x90 [ 391.307298][ T9826] ? clear_bhb_loop+0x40/0x90 [ 391.312017][ T9826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.317946][ T9826] RIP: 0033:0x7f0a57f9e0d9 [ 391.322382][ T9826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.342017][ T9826] RSP: 002b:00007f0a561f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.350491][ T9826] RAX: ffffffffffffffda RBX: 00007f0a58225fa0 RCX: 00007f0a57f9e0d9 [ 391.358511][ T9826] RDX: 3500000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 391.366525][ T9826] RBP: 00007f0a561f6090 R08: 0000000000000000 R09: 0000000000000000 [ 391.374522][ T9826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.382530][ T9826] R13: 00007f0a58226038 R14: 00007f0a58225fa0 R15: 00007ffed0ac4bd8 [ 391.390545][ T9826] [ 391.409863][ T9826] warn_alloc: 1 callbacks suppressed [ 391.409882][ T9826] syz.0.1455: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 391.441138][ T9826] CPU: 1 PID: 9826 Comm: syz.0.1455 Not tainted syzkaller #0 [ 391.448588][ T9826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.458696][ T9826] Call Trace: [ 391.462046][ T9826] [ 391.465018][ T9826] dump_stack_lvl+0x18c/0x250 [ 391.469758][ T9826] ? show_regs_print_info+0x20/0x20 [ 391.475010][ T9826] ? load_image+0x420/0x420 [ 391.479570][ T9826] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 391.486036][ T9826] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 391.492590][ T9826] warn_alloc+0x246/0x340 [ 391.496972][ T9826] ? zone_watermark_ok_safe+0x230/0x230 [ 391.502580][ T9826] ? __get_vm_area_node+0x356/0x370 [ 391.507904][ T9826] __vmalloc_node_range+0x394/0x1320 [ 391.513256][ T9826] ? netlink_insert+0x1094/0x1390 [ 391.518347][ T9826] ? netlink_insert+0x2ba/0x1390 [ 391.523339][ T9826] ? free_vm_area+0x50/0x50 [ 391.527911][ T9826] ? netlink_sendmsg+0x602/0xbf0 [ 391.532984][ T9826] vmalloc+0x79/0x90 [ 391.536938][ T9826] ? netlink_sendmsg+0x602/0xbf0 [ 391.541920][ T9826] netlink_sendmsg+0x602/0xbf0 [ 391.546742][ T9826] ? netlink_getsockopt+0x590/0x590 [ 391.551993][ T9826] ? apparmor_socket_sendmsg+0x8e/0x330 [ 391.557593][ T9826] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 391.562999][ T9826] ? security_socket_sendmsg+0x80/0xa0 [ 391.568515][ T9826] ? netlink_getsockopt+0x590/0x590 [ 391.573776][ T9826] ____sys_sendmsg+0x61b/0x980 [ 391.578602][ T9826] ? __asan_memset+0x22/0x40 [ 391.583278][ T9826] ? __sys_sendmsg_sock+0x30/0x30 [ 391.588355][ T9826] ? __import_iovec+0x5f2/0x850 [ 391.593273][ T9826] ? import_iovec+0x73/0xa0 [ 391.597838][ T9826] ___sys_sendmsg+0x2a6/0x360 [ 391.602609][ T9826] ? get_pid_task+0x20/0x1e0 [ 391.607267][ T9826] ? __sys_sendmsg+0x2b0/0x2b0 [ 391.612105][ T9826] ? __lock_acquire+0x7d80/0x7d80 [ 391.617216][ T9826] __se_sys_sendmsg+0x1d0/0x2c0 [ 391.622132][ T9826] ? __x64_sys_sendmsg+0x80/0x80 [ 391.627143][ T9826] ? lockdep_hardirqs_on+0x98/0x150 [ 391.632402][ T9826] do_syscall_64+0x55/0xb0 [ 391.636872][ T9826] ? clear_bhb_loop+0x40/0x90 [ 391.641607][ T9826] ? clear_bhb_loop+0x40/0x90 [ 391.646359][ T9826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.652307][ T9826] RIP: 0033:0x7f0a57f9e0d9 [ 391.656772][ T9826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.676438][ T9826] RSP: 002b:00007f0a561f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.684908][ T9826] RAX: ffffffffffffffda RBX: 00007f0a58225fa0 RCX: 00007f0a57f9e0d9 [ 391.692934][ T9826] RDX: 3500000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 391.700959][ T9826] RBP: 00007f0a561f6090 R08: 0000000000000000 R09: 0000000000000000 [ 391.708992][ T9826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.717009][ T9826] R13: 00007f0a58226038 R14: 00007f0a58225fa0 R15: 00007ffed0ac4bd8 [ 391.725051][ T9826] [ 391.738561][ T9826] Mem-Info: [ 391.741885][ T9826] active_anon:5396 inactive_anon:0 isolated_anon:0 [ 391.741885][ T9826] active_file:16625 inactive_file:40069 isolated_file:0 [ 391.741885][ T9826] unevictable:768 dirty:543 writeback:0 [ 391.741885][ T9826] slab_reclaimable:10149 slab_unreclaimable:91633 [ 391.741885][ T9826] mapped:25071 shmem:1361 pagetables:557 [ 391.741885][ T9826] sec_pagetables:0 bounce:0 [ 391.741885][ T9826] kernel_misc_reclaimable:0 [ 391.741885][ T9826] free:1351778 free_pcp:10730 free_cma:0 [ 391.793028][ T9826] Node 0 active_anon:21584kB inactive_anon:0kB active_file:66500kB inactive_file:160072kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100284kB dirty:2168kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10352kB pagetables:2228kB sec_pagetables:0kB all_unreclaimable? no [ 391.834751][ T9826] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 391.876334][ T9826] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 391.911561][ T9826] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 391.917529][ T9826] Node 0 DMA32 free:1498708kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21544kB inactive_anon:0kB active_file:66500kB inactive_file:159248kB unevictable:1536kB writepending:2168kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:22348kB local_pcp:14536kB free_cma:0kB [ 391.953870][ T9826] lowmem_reserve[]: 0 0 0 0 0 [ 391.958689][ T9826] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 392.001305][ T9826] lowmem_reserve[]: 0 0 0 0 0 [ 392.006345][ T9826] Node 1 Normal free:3892820kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20096kB local_pcp:12960kB free_cma:0kB [ 392.041352][ T9826] lowmem_reserve[]: 0 0 0 0 0 [ 392.046189][ T9826] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 392.064122][ T9826] Node 0 DMA32: 2457*4kB (UME) 1816*8kB (UM) 1293*16kB (UME) 887*32kB (UME) 356*64kB (UME) 101*128kB (UME) 50*256kB (UME) 27*512kB (UME) 9*1024kB (UM) 9*2048kB (ME) 326*4096kB (UM) = 1498708kB [ 392.088640][ T9826] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 392.108918][ T9826] Node 1 Normal: 245*4kB (UME) 58*8kB (UME) 39*16kB (UME) 122*32kB (UME) 28*64kB (UE) 6*128kB (UME) 3*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3892820kB [ 392.132558][ T9826] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.143939][ T9826] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 392.157238][ T9826] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.168664][ T9826] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 392.184263][ T9826] 58055 total pagecache pages [ 392.189385][ T9826] 0 pages in swap cache [ 392.193690][ T9826] Free swap = 124996kB [ 392.198029][ T9826] Total swap = 124996kB [ 392.207251][ T9826] 2097051 pages RAM [ 392.216032][ T9826] 0 pages HighMem/MovableOnly [ 392.225846][ T9826] 416958 pages reserved [ 392.230581][ T9826] 0 pages cma reserved [ 393.481809][ T9838] netlink: 'syz.0.1460': attribute type 39 has an invalid length. [ 393.640847][ T9840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 393.830484][ T9847] FAULT_INJECTION: forcing a failure. [ 393.830484][ T9847] name failslab, interval 1, probability 0, space 0, times 0 [ 393.855879][ T9849] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1465'. [ 393.859766][ T9847] CPU: 1 PID: 9847 Comm: syz.0.1463 Not tainted syzkaller #0 [ 393.872512][ T9847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.882629][ T9847] Call Trace: [ 393.885949][ T9847] [ 393.888925][ T9847] dump_stack_lvl+0x18c/0x250 [ 393.893697][ T9847] ? show_regs_print_info+0x20/0x20 [ 393.898960][ T9847] ? load_image+0x420/0x420 [ 393.903536][ T9847] ? __might_sleep+0xe0/0xe0 [ 393.908198][ T9847] ? __lock_acquire+0x7d80/0x7d80 [ 393.913280][ T9847] should_fail_ex+0x394/0x4c0 [ 393.918024][ T9847] should_failslab+0x9/0x20 [ 393.922603][ T9847] slab_pre_alloc_hook+0x59/0x300 [ 393.927703][ T9847] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 393.933485][ T9847] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 393.939269][ T9847] __kmem_cache_alloc_node+0x53/0x250 [ 393.944761][ T9847] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 393.950536][ T9847] __kmalloc+0xa7/0x240 [ 393.954768][ T9847] tomoyo_realpath_from_path+0xe6/0x5c0 [ 393.960374][ T9847] ? tomoyo_domain+0xd6/0x120 [ 393.965120][ T9847] tomoyo_path_number_perm+0x248/0x5e0 [ 393.970637][ T9847] ? tomoyo_path_number_perm+0x217/0x5e0 [ 393.976339][ T9847] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 393.981856][ T9847] ? ksys_write+0x1d2/0x260 [ 393.986450][ T9847] ? __fget_files+0x28/0x460 [ 393.991110][ T9847] security_file_ioctl+0x70/0xa0 [ 393.996111][ T9847] __se_sys_ioctl+0x48/0x170 [ 394.000767][ T9847] do_syscall_64+0x55/0xb0 [ 394.005242][ T9847] ? clear_bhb_loop+0x40/0x90 [ 394.009978][ T9847] ? clear_bhb_loop+0x40/0x90 [ 394.014715][ T9847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.020680][ T9847] RIP: 0033:0x7f0a57f9e0d9 [ 394.025142][ T9847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.044929][ T9847] RSP: 002b:00007f0a561f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.053408][ T9847] RAX: ffffffffffffffda RBX: 00007f0a58225fa0 RCX: 00007f0a57f9e0d9 [ 394.061443][ T9847] RDX: 0000200000000340 RSI: 00000000400454de RDI: 0000000000000003 [ 394.069468][ T9847] RBP: 00007f0a561f6090 R08: 0000000000000000 R09: 0000000000000000 [ 394.077499][ T9847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.085527][ T9847] R13: 00007f0a58226038 R14: 00007f0a58225fa0 R15: 00007ffed0ac4bd8 [ 394.093589][ T9847] [ 394.135572][ T9849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.201211][ T9847] ERROR: Out of memory at tomoyo_realpath_from_path. [ 394.271723][ T9847] tap0: tun_chr_ioctl cmd 1074025694 [ 397.167804][ T9861] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1467'. [ 397.457556][ T9869] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1470'. [ 397.478630][ T9871] netlink: 'syz.2.1471': attribute type 39 has an invalid length. [ 397.615244][ T9875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 398.080341][ T9892] netlink: 'syz.0.1478': attribute type 8 has an invalid length. [ 398.088179][ T9892] netlink: 'syz.0.1478': attribute type 1 has an invalid length. [ 398.145421][ T9892] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1478'. [ 398.183488][ T9894] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1479'. [ 398.527077][ T9905] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 398.550247][ T9904] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.1483'. [ 398.693760][ T9907] netlink: 'syz.1.1485': attribute type 39 has an invalid length. [ 399.091291][ T9915] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1489'. [ 399.761385][ T9928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 399.879581][ T9930] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1494'. [ 400.075538][ T9939] netlink: 'syz.1.1497': attribute type 39 has an invalid length. [ 400.114419][ T9936] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 400.296495][ T9945] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1498'. [ 400.487231][ T9951] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1502'. [ 400.888047][ T9961] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1506'. [ 401.424999][ T9966] netlink: 'syz.2.1509': attribute type 39 has an invalid length. [ 401.611294][ T9970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 401.841972][ T9982] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1515'. [ 402.115490][ T9987] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.1518'. [ 402.285877][ T9994] netlink: 'syz.2.1521': attribute type 39 has an invalid length. [ 402.518031][ T9999] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 402.938444][T10006] netlink: 'syz.2.1524': attribute type 10 has an invalid length. [ 403.316265][T10006] team0: Port device geneve1 added [ 403.594455][T10014] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1528'. [ 403.733382][T10016] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1529'. [ 403.892830][T10019] netlink: 'syz.1.1530': attribute type 39 has an invalid length. [ 403.928988][T10021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.066857][T10025] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1533'. [ 404.163473][T10031] FAULT_INJECTION: forcing a failure. [ 404.163473][T10031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.179221][T10031] CPU: 0 PID: 10031 Comm: syz.2.1535 Not tainted syzkaller #0 [ 404.186759][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.196861][T10031] Call Trace: [ 404.200188][T10031] [ 404.203158][T10031] dump_stack_lvl+0x18c/0x250 [ 404.207914][T10031] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 404.214233][T10031] ? show_regs_print_info+0x20/0x20 [ 404.219489][T10031] ? load_image+0x420/0x420 [ 404.224243][T10031] should_fail_ex+0x394/0x4c0 [ 404.228987][T10031] _copy_from_user+0x2f/0xe0 [ 404.233645][T10031] bpf_prog_test_run_skb+0x267/0x18f0 [ 404.239080][T10031] ? __fget_files+0x28/0x460 [ 404.243730][T10031] ? __fget_files+0x3fc/0x460 [ 404.248472][T10031] ? cpu_online+0x60/0x60 [ 404.252859][T10031] bpf_prog_test_run+0x31f/0x390 [ 404.257852][T10031] __sys_bpf+0x49d/0x890 [ 404.262140][T10031] ? bpf_link_show_fdinfo+0x390/0x390 [ 404.267578][T10031] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 404.273795][T10031] __x64_sys_bpf+0x7c/0x90 [ 404.278265][T10031] do_syscall_64+0x55/0xb0 [ 404.282730][T10031] ? clear_bhb_loop+0x40/0x90 [ 404.287474][T10031] ? clear_bhb_loop+0x40/0x90 [ 404.292200][T10031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.298143][T10031] RIP: 0033:0x7fa887d9e0d9 [ 404.302603][T10031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.322285][T10031] RSP: 002b:00007fa888ccc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 404.330762][T10031] RAX: ffffffffffffffda RBX: 00007fa888025fa0 RCX: 00007fa887d9e0d9 [ 404.338784][T10031] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 404.346800][T10031] RBP: 00007fa888ccc090 R08: 0000000000000000 R09: 0000000000000000 [ 404.354819][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.362839][T10031] R13: 00007fa888026038 R14: 00007fa888025fa0 R15: 00007fff845a25b8 [ 404.370872][T10031] [ 404.922091][T10051] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1540'. [ 404.960122][T10052] netlink: 'syz.3.1539': attribute type 8 has an invalid length. [ 404.968651][T10052] netlink: 'syz.3.1539': attribute type 1 has an invalid length. [ 404.986633][T10052] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1539'. [ 405.661980][T10054] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1541'. [ 405.691232][T10056] netlink: 'syz.2.1542': attribute type 39 has an invalid length. [ 405.851133][T10059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.897557][T10061] FAULT_INJECTION: forcing a failure. [ 405.897557][T10061] name failslab, interval 1, probability 0, space 0, times 0 [ 405.929028][T10061] CPU: 0 PID: 10061 Comm: syz.3.1547 Not tainted syzkaller #0 [ 405.936599][T10061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.946709][T10061] Call Trace: [ 405.950075][T10061] [ 405.953064][T10061] dump_stack_lvl+0x18c/0x250 [ 405.957802][T10061] ? show_regs_print_info+0x20/0x20 [ 405.963067][T10061] ? load_image+0x420/0x420 [ 405.967636][T10061] ? __might_sleep+0xe0/0xe0 [ 405.972296][T10061] ? __lock_acquire+0x7d80/0x7d80 [ 405.977385][T10061] should_fail_ex+0x394/0x4c0 [ 405.982127][T10061] should_failslab+0x9/0x20 [ 405.986699][T10061] slab_pre_alloc_hook+0x59/0x300 [ 405.991784][T10061] ? __lock_acquire+0x7d80/0x7d80 [ 405.996895][T10061] kmem_cache_alloc_node+0x5e/0x310 [ 406.002157][T10061] ? __alloc_skb+0x103/0x2c0 [ 406.006795][T10061] __alloc_skb+0x103/0x2c0 [ 406.011256][T10061] netlink_sendmsg+0x66a/0xbf0 [ 406.016091][T10061] ? __sanitizer_cov_trace_const_cmp2+0x90/0x90 [ 406.022388][T10061] ? netlink_getsockopt+0x590/0x590 [ 406.027615][T10061] ? apparmor_socket_sendmsg+0x8e/0x330 [ 406.033199][T10061] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 406.038541][T10061] ? security_socket_sendmsg+0x80/0xa0 [ 406.044044][T10061] ? netlink_getsockopt+0x590/0x590 [ 406.049315][T10061] ____sys_sendmsg+0x61b/0x980 [ 406.054115][T10061] ? __asan_memset+0x22/0x40 [ 406.058740][T10061] ? __sys_sendmsg_sock+0x30/0x30 [ 406.063794][T10061] ? __import_iovec+0x5f2/0x850 [ 406.068690][T10061] ? import_iovec+0x73/0xa0 [ 406.073229][T10061] ___sys_sendmsg+0x2a6/0x360 [ 406.077942][T10061] ? __sys_sendmsg+0x2b0/0x2b0 [ 406.082774][T10061] __se_sys_sendmsg+0x1d0/0x2c0 [ 406.087658][T10061] ? __x64_sys_sendmsg+0x80/0x80 [ 406.092640][T10061] ? syscall_enter_from_user_mode+0x2e/0x80 [ 406.098605][T10061] do_syscall_64+0x55/0xb0 [ 406.103068][T10061] ? clear_bhb_loop+0x40/0x90 [ 406.107797][T10061] ? clear_bhb_loop+0x40/0x90 [ 406.112559][T10061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.118496][T10061] RIP: 0033:0x7fcaf1b9e0d9 [ 406.122945][T10061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.142582][T10061] RSP: 002b:00007fcaf2b03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.151025][T10061] RAX: ffffffffffffffda RBX: 00007fcaf1e25fa0 RCX: 00007fcaf1b9e0d9 [ 406.159045][T10061] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 406.167046][T10061] RBP: 00007fcaf2b03090 R08: 0000000000000000 R09: 0000000000000000 [ 406.175045][T10061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.183041][T10061] R13: 00007fcaf1e26038 R14: 00007fcaf1e25fa0 R15: 00007fffeb454da8 [ 406.191058][T10061] [ 406.263103][T10063] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1546'. [ 406.306942][T10065] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1554'. [ 406.826187][T10080] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1553'. [ 407.003373][T10083] netlink: 'syz.2.1555': attribute type 39 has an invalid length. [ 407.242137][T10086] netlink: 'syz.2.1556': attribute type 21 has an invalid length. [ 407.289753][T10086] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1556'. [ 407.502627][T10095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 407.836487][T10099] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.1561'. [ 408.101185][T10105] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1564'. [ 408.313104][T10111] netlink: 'syz.2.1565': attribute type 39 has an invalid length. [ 408.342164][T10110] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1566'. [ 408.692008][T10117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.833871][T10124] netlink: 'syz.3.1570': attribute type 10 has an invalid length. [ 408.952703][T10124] team0: Port device geneve1 added [ 409.078046][T10126] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 412.000224][T10140] __nla_validate_parse: 1 callbacks suppressed [ 412.000242][T10140] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.1574'. [ 412.021477][T10142] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1576'. [ 412.054195][T10147] netlink: 'syz.2.1577': attribute type 39 has an invalid length. [ 412.193037][T10151] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1578'. [ 412.420481][T10154] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1588'. [ 412.460630][T10158] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1580'. [ 413.094733][T10167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 413.135590][T10165] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1591'. [ 413.218715][T10169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 413.478177][T10176] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1587'. [ 413.610803][T10182] netlink: 'syz.1.1586': attribute type 39 has an invalid length. [ 413.699429][T10184] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1590'. [ 413.833684][T10188] netlink: 'syz.3.1592': attribute type 39 has an invalid length. [ 413.933802][T10191] netlink: 'syz.1.1593': attribute type 10 has an invalid length. [ 414.166661][T10191] team0: Port device geneve1 added [ 414.274018][T10200] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1603'. [ 414.896064][T10191] syz.1.1593 (10191) used greatest stack depth: 18536 bytes left [ 415.098741][T10210] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 415.257096][T10214] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.1598'. [ 415.755222][T10228] netlink: 'syz.0.1604': attribute type 39 has an invalid length. [ 415.962076][T10234] netlink: 'syz.2.1608': attribute type 10 has an invalid length. [ 416.304040][T10240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.335857][T10243] FAULT_INJECTION: forcing a failure. [ 416.335857][T10243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.359252][T10243] CPU: 1 PID: 10243 Comm: syz.3.1611 Not tainted syzkaller #0 [ 416.366870][T10243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.377027][T10243] Call Trace: [ 416.380358][T10243] [ 416.383345][T10243] dump_stack_lvl+0x18c/0x250 [ 416.388092][T10243] ? show_regs_print_info+0x20/0x20 [ 416.393359][T10243] ? load_image+0x420/0x420 [ 416.397973][T10243] ? __might_fault+0xaa/0x120 [ 416.402713][T10243] ? __lock_acquire+0x7d80/0x7d80 [ 416.407819][T10243] should_fail_ex+0x394/0x4c0 [ 416.412568][T10243] _copy_from_user+0x2f/0xe0 [ 416.417240][T10243] smc_setsockopt+0x3bb/0xb00 [ 416.422088][T10243] ? smc_shutdown+0x9a0/0x9a0 [ 416.426823][T10243] ? __fget_files+0x28/0x460 [ 416.431482][T10243] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 416.437095][T10243] ? security_socket_setsockopt+0x7e/0xa0 [ 416.442876][T10243] ? smc_shutdown+0x9a0/0x9a0 [ 416.447600][T10243] do_sock_setsockopt+0x175/0x1a0 [ 416.452668][T10243] ? __fdget+0x180/0x210 [ 416.456949][T10243] __x64_sys_setsockopt+0x182/0x200 [ 416.462186][T10243] do_syscall_64+0x55/0xb0 [ 416.466632][T10243] ? clear_bhb_loop+0x40/0x90 [ 416.471339][T10243] ? clear_bhb_loop+0x40/0x90 [ 416.476050][T10243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.481987][T10243] RIP: 0033:0x7fcaf1b9e0d9 [ 416.486438][T10243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.506101][T10243] RSP: 002b:00007fcaf2b03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 416.514552][T10243] RAX: ffffffffffffffda RBX: 00007fcaf1e25fa0 RCX: 00007fcaf1b9e0d9 [ 416.522557][T10243] RDX: 0000000000000017 RSI: 0000000000000006 RDI: 0000000000000003 [ 416.530562][T10243] RBP: 00007fcaf2b03090 R08: 0000000000000004 R09: 0000000000000000 [ 416.538567][T10243] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 416.546591][T10243] R13: 00007fcaf1e26038 R14: 00007fcaf1e25fa0 R15: 00007fffeb454da8 [ 416.554605][T10243] [ 417.058286][T10249] __nla_validate_parse: 4 callbacks suppressed [ 417.079691][T10249] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1614'. [ 417.124782][T10249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.303086][T10260] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1619'. [ 417.374734][T10264] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 418.043815][T10279] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1627'. [ 418.451915][T10286] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1630'. [ 418.469773][T10286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.507951][T10290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 418.681857][T10294] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1633'. [ 418.738609][T10299] netlink: 'syz.2.1635': attribute type 39 has an invalid length. [ 419.092755][T10307] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1639'. [ 419.402153][T10317] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 419.632888][T10322] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1645'. [ 419.695440][T10324] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1644'. [ 419.717562][T10324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.798078][T10325] netlink: 'syz.3.1646': attribute type 39 has an invalid length. [ 420.203794][T10335] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.1651'. [ 420.364283][T10340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.594548][T10346] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1655'. [ 420.786214][T10350] netlink: 'syz.1.1657': attribute type 39 has an invalid length. [ 420.868147][T10352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.537030][T10368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 421.883656][T10374] netlink: 'syz.0.1667': attribute type 39 has an invalid length. [ 422.361196][T10377] __nla_validate_parse: 2 callbacks suppressed [ 422.361237][T10377] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1668'. [ 425.028785][T10379] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1669'. [ 425.080768][T10379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.185294][T10390] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.1673'. [ 425.365138][T10395] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 425.679998][T10401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 425.746627][T10404] netlink: 'syz.2.1678': attribute type 39 has an invalid length. [ 425.845841][T10408] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1680'. [ 426.787840][T10417] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1683'. [ 426.797271][T10417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.888735][T10420] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1684'. [ 429.026596][T10421] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 429.350472][T10432] netlink: 'syz.1.1689': attribute type 39 has an invalid length. [ 429.540548][T10438] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1688'. [ 429.551521][T10438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.180843][T10448] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1694'. [ 430.246792][T10448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.772431][T10452] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1695'. [ 433.005376][T10461] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1697'. [ 433.070855][T10458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 433.317464][T10463] netlink: 'syz.0.1700': attribute type 39 has an invalid length. [ 434.424608][T10479] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1706'. [ 434.541505][T10481] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1705'. [ 434.698891][T10481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.486202][T10489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 437.705297][T10495] netlink: 'syz.3.1712': attribute type 39 has an invalid length. [ 437.779742][T10494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 437.819099][T10500] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1711'. [ 438.259547][T10510] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1717'. [ 438.461376][T10516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 440.433520][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.447164][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.417539][T10524] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1721'. [ 441.446495][T10524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.696838][T10535] netlink: 'syz.3.1726': attribute type 39 has an invalid length. [ 441.733057][T10531] netlink: 'syz.0.1724': attribute type 39 has an invalid length. [ 441.872769][T10543] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1727'. [ 441.966114][T10545] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1729'. [ 442.077275][T10546] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 445.813798][T10566] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1736'. [ 445.832580][T10566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.864875][T10575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 446.062069][T10577] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1741'. [ 446.108553][T10579] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1740'. [ 446.336842][T10585] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1742'. [ 446.850070][T10598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.756119][T10603] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1750'. [ 449.779399][T10603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.076229][T10610] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1753'. [ 450.267105][T10619] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1754'. [ 451.235635][T10629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 451.378469][T10630] sock: sock_timestamping_bind_phc: sock not bind to device [ 451.418846][T10630] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1759'. [ 451.505286][T10630] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.450108][T10630] bridge_slave_0 (unregistering): left allmulticast mode [ 454.457206][T10630] bridge_slave_0 (unregistering): left promiscuous mode [ 454.467872][T10630] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.504874][T10632] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1760'. [ 454.516873][T10639] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1762'. [ 454.529227][T10639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.734946][T10650] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1765'. [ 454.932520][T10650] syzkaller0: entered promiscuous mode [ 454.955036][T10650] syzkaller0: entered allmulticast mode [ 455.334500][T10657] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1768'. [ 455.353692][T10660] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1769'. [ 455.404759][T10663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 455.981685][T10667] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.1771'. [ 458.206806][T10680] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1774'. [ 458.278899][T10680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.106272][T10694] netlink: 'syz.2.1781': attribute type 9 has an invalid length. [ 461.137520][T10690] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 461.151080][T10694] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1781'. [ 461.272799][T10695] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1780'. [ 461.389873][T10698] netlink: 'syz.2.1781': attribute type 9 has an invalid length. [ 461.419393][T10698] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1781'. [ 461.618447][T10699] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1782'. [ 461.661090][T10704] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1783'. [ 462.219290][T10710] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1784'. [ 462.289895][T10713] netlink: 'syz.2.1787': attribute type 10 has an invalid length. [ 462.385572][T10713] netlink: 'syz.2.1787': attribute type 10 has an invalid length. [ 462.603674][T10713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.656154][T10713] team0: Port device bond0 added [ 465.512218][T10724] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1790'. [ 465.526129][T10724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.808666][T10736] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1793'. [ 465.855735][T10735] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1794'. [ 465.915241][T10742] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1797'. [ 466.051229][T10742] syzkaller0: entered promiscuous mode [ 466.056798][T10742] syzkaller0: entered allmulticast mode [ 466.233641][T10746] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1798'. [ 466.375063][T10753] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1801'. [ 466.403900][T10753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.135150][T10759] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1803'. [ 469.144516][T10759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.166244][T10763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 469.405796][T10776] netlink: 'syz.1.1811': attribute type 10 has an invalid length. [ 470.055654][T10772] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.1807'. [ 470.071803][T10779] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1809'. [ 470.096747][T10784] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1810'. [ 470.111987][T10783] netlink: 'syz.1.1811': attribute type 10 has an invalid length. [ 470.180219][T10783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.198704][T10783] team0: Port device bond0 added [ 470.729728][T10798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 470.965866][T10805] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1816'. [ 470.998329][T10805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.145760][T10810] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1820'. [ 471.190310][T10809] netlink: 'syz.2.1822': attribute type 39 has an invalid length. [ 471.223084][T10812] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1821'. [ 471.473202][T10812] syzkaller0: entered promiscuous mode [ 471.492460][T10812] syzkaller0: entered allmulticast mode [ 472.464071][T10832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 474.622632][T10846] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1832'. [ 474.632928][T10846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.823438][T10856] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1833'. [ 475.294248][T10861] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1837'. [ 475.317121][T10861] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 475.411880][T10861] tap0: tun_chr_ioctl cmd 2147767520 [ 476.049029][T10873] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1848'. [ 476.086460][T10872] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 476.572813][T10882] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1842'. [ 476.608808][T10882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.734303][T10906] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1852'. [ 477.809642][T10906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.013070][T10911] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1853'. [ 478.276298][T10911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.635643][T10921] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1856'. [ 479.355237][T10934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 479.957366][T10955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 480.052213][T10957] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1866'. [ 480.121998][T10957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 480.622762][T10964] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1869'. [ 481.012480][T10969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 481.147340][T10975] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1874'. [ 481.215571][T10975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.652354][T10985] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 482.257927][T11000] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1881'. [ 482.290062][T11000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 482.327939][T11001] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1883'. [ 482.639621][T11005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 483.377692][T11008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1885'. [ 483.450114][T11008] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.647786][T11008] bridge_slave_0 (unregistering): left allmulticast mode [ 483.659023][T11008] bridge_slave_0 (unregistering): left promiscuous mode [ 483.674299][T11008] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.131412][ T5088] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 484.735710][T11035] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1894'. [ 484.756471][T11036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 484.791513][T11033] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1896'. [ 484.807121][T11033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.216110][T11047] netlink: 'syz.3.1899': attribute type 39 has an invalid length. [ 485.463757][T11054] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1903'. [ 485.588517][T11061] netlink: 'syz.3.1905': attribute type 10 has an invalid length. [ 486.363259][T11068] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1907'. [ 486.379035][T11068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.834437][T11078] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1908'. [ 489.060684][T11082] netlink: 'syz.2.1913': attribute type 39 has an invalid length. [ 489.810114][T11092] netlink: 'syz.0.1915': attribute type 10 has an invalid length. [ 489.903451][T11091] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1916'. [ 490.214174][T11108] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1920'. [ 490.567935][T11102] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1919'. [ 490.590012][T11102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.801355][T11118] FAULT_INJECTION: forcing a failure. [ 490.801355][T11118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.849662][T11118] CPU: 1 PID: 11118 Comm: syz.1.1925 Not tainted syzkaller #0 [ 490.857217][T11118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.867375][T11118] Call Trace: [ 490.870714][T11118] [ 490.873690][T11118] dump_stack_lvl+0x18c/0x250 [ 490.878423][T11118] ? show_regs_print_info+0x20/0x20 [ 490.883701][T11118] ? load_image+0x420/0x420 [ 490.888249][T11118] ? __lock_acquire+0x7d80/0x7d80 [ 490.893313][T11118] ? snprintf+0xe9/0x140 [ 490.897598][T11118] should_fail_ex+0x394/0x4c0 [ 490.902324][T11118] _copy_to_user+0x2f/0xa0 [ 490.906778][T11118] simple_read_from_buffer+0xe7/0x150 [ 490.912187][T11118] proc_fail_nth_read+0x1e8/0x260 [ 490.917260][T11118] ? proc_fault_inject_write+0x360/0x360 [ 490.922943][T11118] ? fsnotify_perm+0x271/0x5e0 [ 490.927775][T11118] ? proc_fault_inject_write+0x360/0x360 [ 490.933446][T11118] vfs_read+0x298/0x990 [ 490.937645][T11118] ? kernel_read+0x1e0/0x1e0 [ 490.942278][T11118] ? __fget_files+0x28/0x460 [ 490.946907][T11118] ? __fget_files+0x3fc/0x460 [ 490.951628][T11118] ? __fdget_pos+0x2a3/0x330 [ 490.956260][T11118] ? ksys_read+0x74/0x260 [ 490.960627][T11118] ksys_read+0x151/0x260 [ 490.964911][T11118] ? vfs_write+0x9a0/0x9a0 [ 490.969372][T11118] ? lockdep_hardirqs_on+0x98/0x150 [ 490.974618][T11118] do_syscall_64+0x55/0xb0 [ 490.979236][T11118] ? clear_bhb_loop+0x40/0x90 [ 490.983961][T11118] ? clear_bhb_loop+0x40/0x90 [ 490.988701][T11118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.994631][T11118] RIP: 0033:0x7f68b375e90e [ 490.999081][T11118] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 491.018756][T11118] RSP: 002b:00007f68b4681fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 491.027207][T11118] RAX: ffffffffffffffda RBX: 00007f68b46826c0 RCX: 00007f68b375e90e [ 491.035210][T11118] RDX: 000000000000000f RSI: 00007f68b46820a0 RDI: 0000000000000006 [ 491.043209][T11118] RBP: 00007f68b4682090 R08: 0000000000000000 R09: 0000000000000000 [ 491.051216][T11118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.059222][T11118] R13: 00007f68b3a26038 R14: 00007f68b3a25fa0 R15: 00007ffef16ab378 [ 491.067239][T11118] [ 491.214564][T11125] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1927'. [ 491.282637][T11122] netlink: 'syz.2.1926': attribute type 39 has an invalid length. [ 491.532830][T11132] netlink: 'syz.2.1929': attribute type 10 has an invalid length. [ 491.611095][T11131] netlink: 'syz.0.1938': attribute type 39 has an invalid length. [ 491.626868][T11134] netlink: 'syz.1.1930': attribute type 5 has an invalid length. [ 491.636429][T11134] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1930'. [ 491.802699][T11136] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1931'. [ 491.860030][T11141] FAULT_INJECTION: forcing a failure. [ 491.860030][T11141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.904307][T11141] CPU: 1 PID: 11141 Comm: syz.1.1935 Not tainted syzkaller #0 [ 491.911861][T11141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.921975][T11141] Call Trace: [ 491.925307][T11141] [ 491.928282][T11141] dump_stack_lvl+0x18c/0x250 [ 491.933026][T11141] ? show_regs_print_info+0x20/0x20 [ 491.938282][T11141] ? load_image+0x420/0x420 [ 491.943042][T11141] ? __lock_acquire+0x7d80/0x7d80 [ 491.948134][T11141] ? snprintf+0xe9/0x140 [ 491.952452][T11141] should_fail_ex+0x394/0x4c0 [ 491.957207][T11141] _copy_to_user+0x2f/0xa0 [ 491.961686][T11141] simple_read_from_buffer+0xe7/0x150 [ 491.967115][T11141] proc_fail_nth_read+0x1e8/0x260 [ 491.972196][T11141] ? proc_fault_inject_write+0x360/0x360 [ 491.977890][T11141] ? fsnotify_perm+0x271/0x5e0 [ 491.982738][T11141] ? proc_fault_inject_write+0x360/0x360 [ 491.988441][T11141] vfs_read+0x298/0x990 [ 491.992666][T11141] ? kernel_read+0x1e0/0x1e0 [ 491.997304][T11141] ? __fget_files+0x28/0x460 [ 492.001949][T11141] ? __fget_files+0x3fc/0x460 [ 492.006687][T11141] ? __fdget_pos+0x2a3/0x330 [ 492.011321][T11141] ? ksys_read+0x74/0x260 [ 492.015697][T11141] ksys_read+0x151/0x260 [ 492.019992][T11141] ? vfs_write+0x9a0/0x9a0 [ 492.024467][T11141] ? lockdep_hardirqs_on+0x98/0x150 [ 492.029726][T11141] do_syscall_64+0x55/0xb0 [ 492.034189][T11141] ? clear_bhb_loop+0x40/0x90 [ 492.038895][T11141] ? clear_bhb_loop+0x40/0x90 [ 492.043657][T11141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.049990][T11141] RIP: 0033:0x7f68b375e90e [ 492.054451][T11141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 492.074107][T11141] RSP: 002b:00007f68b4681fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 492.082561][T11141] RAX: ffffffffffffffda RBX: 00007f68b46826c0 RCX: 00007f68b375e90e [ 492.090569][T11141] RDX: 000000000000000f RSI: 00007f68b46820a0 RDI: 0000000000000006 [ 492.098604][T11141] RBP: 00007f68b4682090 R08: 0000000000000000 R09: 0000000000000000 [ 492.106629][T11141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.114648][T11141] R13: 00007f68b3a26038 R14: 00007f68b3a25fa0 R15: 00007ffef16ab378 [ 492.122675][T11141] [ 492.224868][T11145] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1936'. [ 492.255340][T11145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.028365][T11157] netlink: 'syz.2.1940': attribute type 4 has an invalid length. [ 493.036345][T11157] netlink: 108496 bytes leftover after parsing attributes in process `syz.2.1940'. [ 493.483998][T11155] syzkaller0: entered promiscuous mode [ 493.491691][T11155] syzkaller0: entered allmulticast mode [ 495.349602][T11168] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1943'. [ 495.442749][T11170] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1949'. [ 495.506479][T11170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.367900][T11176] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1946'. [ 496.676292][T11187] FAULT_INJECTION: forcing a failure. [ 496.676292][T11187] name failslab, interval 1, probability 0, space 0, times 0 [ 496.719122][T11187] CPU: 1 PID: 11187 Comm: syz.2.1951 Not tainted syzkaller #0 [ 496.726690][T11187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 496.736796][T11187] Call Trace: [ 496.740146][T11187] [ 496.743124][T11187] dump_stack_lvl+0x18c/0x250 [ 496.747860][T11187] ? show_regs_print_info+0x20/0x20 [ 496.753119][T11187] ? load_image+0x420/0x420 [ 496.757720][T11187] ? __might_sleep+0xe0/0xe0 [ 496.762376][T11187] ? __lock_acquire+0x7d80/0x7d80 [ 496.767462][T11187] ? __lock_acquire+0x1262/0x7d80 [ 496.772548][T11187] ? ima_match_policy+0x100/0x1fa0 [ 496.777767][T11187] should_fail_ex+0x394/0x4c0 [ 496.782518][T11187] should_failslab+0x9/0x20 [ 496.787104][T11187] slab_pre_alloc_hook+0x59/0x300 [ 496.792196][T11187] kmem_cache_alloc_node+0x5e/0x310 [ 496.797461][T11187] ? __alloc_skb+0x103/0x2c0 [ 496.802212][T11187] __alloc_skb+0x103/0x2c0 [ 496.806695][T11187] alloc_skb_with_frags+0xcd/0x7a0 [ 496.811945][T11187] ? mark_lock+0x94/0x320 [ 496.816342][T11187] sock_alloc_send_pskb+0x883/0x9a0 [ 496.821987][T11187] ? sock_kzfree_s+0x50/0x50 [ 496.826653][T11187] ? verify_lock_unused+0x140/0x140 [ 496.831911][T11187] ? aa_label_sk_perm+0x500/0x6a0 [ 496.837016][T11187] ? dev_get_by_index+0x22/0x2d0 [ 496.842016][T11187] ? dev_get_by_index+0x22/0x2d0 [ 496.847049][T11187] packet_sendmsg+0x3058/0x4c70 [ 496.852087][T11187] ? set_user_nice+0x920/0xb20 [ 496.856917][T11187] ? verify_lock_unused+0x140/0x140 [ 496.862183][T11187] ? aa_sk_perm+0x83c/0x970 [ 496.866755][T11187] ? packet_getsockopt+0xad0/0xad0 [ 496.871928][T11187] ? tomoyo_get_name+0x490/0x570 [ 496.876936][T11187] ? aa_sock_msg_perm+0x94/0x150 [ 496.881944][T11187] ? apparmor_socket_sendmsg+0x8e/0x330 [ 496.887565][T11187] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 496.892922][T11187] ? security_socket_sendmsg+0x80/0xa0 [ 496.898440][T11187] ? packet_getsockopt+0xad0/0xad0 [ 496.903633][T11187] ____sys_sendmsg+0x61b/0x980 [ 496.908466][T11187] ? __asan_memset+0x22/0x40 [ 496.913117][T11187] ? __sys_sendmsg_sock+0x30/0x30 [ 496.918200][T11187] ? __import_iovec+0x3fa/0x850 [ 496.923122][T11187] ? import_iovec+0x73/0xa0 [ 496.927699][T11187] ___sys_sendmsg+0x2a6/0x360 [ 496.932470][T11187] ? get_pid_task+0x20/0x1e0 [ 496.937125][T11187] ? __sys_sendmsg+0x2b0/0x2b0 [ 496.941999][T11187] ? __lock_acquire+0x7d80/0x7d80 [ 496.947111][T11187] __se_sys_sendmsg+0x1d0/0x2c0 [ 496.952020][T11187] ? __x64_sys_sendmsg+0x80/0x80 [ 496.957031][T11187] ? lockdep_hardirqs_on+0x98/0x150 [ 496.962303][T11187] do_syscall_64+0x55/0xb0 [ 496.966780][T11187] ? clear_bhb_loop+0x40/0x90 [ 496.971782][T11187] ? clear_bhb_loop+0x40/0x90 [ 496.976535][T11187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.982506][T11187] RIP: 0033:0x7fa887d9e0d9 [ 496.986974][T11187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.991891][T11184] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1950'. [ 497.006610][T11187] RSP: 002b:00007fa888cab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.006642][T11187] RAX: ffffffffffffffda RBX: 00007fa888026090 RCX: 00007fa887d9e0d9 [ 497.006657][T11187] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 497.006671][T11187] RBP: 00007fa888cab090 R08: 0000000000000000 R09: 0000000000000000 [ 497.006685][T11187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.006698][T11187] R13: 00007fa888026128 R14: 00007fa888026090 R15: 00007fff845a25b8 [ 497.006729][T11187] [ 497.143556][T11184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.485216][T11195] ------------[ cut here ]------------ [ 499.490865][T11195] WARNING: CPU: 1 PID: 11195 at kernel/events/core.c:6800 perf_pending_task+0x357/0x480 [ 499.500865][T11195] Modules linked in: [ 499.504807][T11195] CPU: 1 PID: 11195 Comm: syz.0.1952 Not tainted syzkaller #0 [ 499.512363][T11195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 499.522541][T11195] RIP: 0010:perf_pending_task+0x357/0x480 [ 499.528332][T11195] Code: e8 ae c8 d5 ff 84 db 75 10 e8 15 c6 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 05 c6 d5 ff e8 10 f1 4e ff eb e9 e8 f9 c5 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 499.548394][T11195] RSP: 0018:ffffc9000cc879c8 EFLAGS: 00010293 [ 499.554844][T11195] RAX: ffffffff81b1ac27 RBX: ffff88807ed965e8 RCX: ffff888029599e00 [ 499.562933][T11195] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 499.571035][T11195] RBP: ffff88807ed963a8 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 499.579187][T11195] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffff888029599e00 [ 499.587208][T11195] R13: ffff88805ec0a130 R14: 0000000000000000 R15: 1ffff1100fdb2c75 [ 499.595323][T11195] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 499.604826][T11195] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.611526][T11195] CR2: 0000000000000000 CR3: 000000005f0f9000 CR4: 00000000003506e0 [ 499.619623][T11195] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 499.627651][T11195] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 499.636015][T11195] Call Trace: [ 499.639502][T11195] [ 499.642479][T11195] task_work_run+0x1d4/0x260 [ 499.647132][T11195] ? task_work_cancel+0x220/0x220 [ 499.652291][T11195] do_exit+0x986/0x2530 [ 499.656613][T11195] ? put_task_struct+0xc0/0xc0 [ 499.661510][T11195] ? preempt_schedule_common+0x82/0xc0 [ 499.667027][T11195] ? preempt_schedule+0xc0/0xd0 [ 499.672026][T11195] ? schedule_preempt_disabled+0x20/0x20 [ 499.677720][T11195] ? lock_chain_count+0x20/0x20 [ 499.682697][T11195] do_group_exit+0x22d/0x2f0 [ 499.687358][T11195] get_signal+0x12a6/0x1390 [ 499.692046][T11195] arch_do_signal_or_restart+0xc2/0x7b0 [ 499.697709][T11195] ? mutex_unlock+0x10/0x10 [ 499.702337][T11195] ? get_sigframe_size+0x20/0x20 [ 499.707354][T11195] ? ksys_write+0x201/0x260 [ 499.712228][T11195] ? exit_to_user_mode_loop+0x3b/0x110 [ 499.717762][T11195] exit_to_user_mode_loop+0x70/0x110 [ 499.723169][T11195] exit_to_user_mode_prepare+0xee/0x180 [ 499.728838][T11195] syscall_exit_to_user_mode+0x1a/0x50 [ 499.734688][T11195] do_syscall_64+0x61/0xb0 [ 499.739245][T11195] ? clear_bhb_loop+0x40/0x90 [ 499.743998][T11195] ? clear_bhb_loop+0x40/0x90 [ 499.748825][T11195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.754811][T11195] RIP: 0033:0x7f0a57f9e0d9 [ 499.759341][T11195] Code: Unable to access opcode bytes at 0x7f0a57f9e0af. [ 499.766416][T11195] RSP: 002b:00007f0a561d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 499.774933][T11195] RAX: 0000000000000012 RBX: 00007f0a58226090 RCX: 00007f0a57f9e0d9 [ 499.783033][T11195] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000b [ 499.791265][T11195] RBP: 00007f0a58035024 R08: 0000000000000000 R09: 0000000000000000 [ 499.799360][T11195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.807384][T11195] R13: 00007f0a58226128 R14: 00007f0a58226090 R15: 00007ffed0ac4bd8 [ 499.815457][T11195] [ 499.818520][T11195] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 499.825840][T11195] CPU: 1 PID: 11195 Comm: syz.0.1952 Not tainted syzkaller #0 [ 499.833475][T11195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 499.843575][T11195] Call Trace: [ 499.846892][T11195] [ 499.849864][T11195] dump_stack_lvl+0x18c/0x250 [ 499.854599][T11195] ? show_regs_print_info+0x20/0x20 [ 499.859852][T11195] ? load_image+0x420/0x420 [ 499.864468][T11195] panic+0x2ca/0x720 [ 499.868421][T11195] ? bpf_jit_dump+0xd0/0xd0 [ 499.872993][T11195] __warn+0x2e0/0x470 [ 499.877029][T11195] ? perf_pending_task+0x357/0x480 [ 499.882216][T11195] ? perf_pending_task+0x357/0x480 [ 499.887365][T11195] report_bug+0x2be/0x4f0 [ 499.891753][T11195] ? perf_pending_task+0x357/0x480 [ 499.896915][T11195] ? perf_pending_task+0x357/0x480 [ 499.902074][T11195] ? perf_pending_task+0x359/0x480 [ 499.907226][T11195] handle_bug+0xcf/0x120 [ 499.911502][T11195] exc_invalid_op+0x1a/0x50 [ 499.916033][T11195] asm_exc_invalid_op+0x1a/0x20 [ 499.920912][T11195] RIP: 0010:perf_pending_task+0x357/0x480 [ 499.926672][T11195] Code: e8 ae c8 d5 ff 84 db 75 10 e8 15 c6 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 05 c6 d5 ff e8 10 f1 4e ff eb e9 e8 f9 c5 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 499.946309][T11195] RSP: 0018:ffffc9000cc879c8 EFLAGS: 00010293 [ 499.952409][T11195] RAX: ffffffff81b1ac27 RBX: ffff88807ed965e8 RCX: ffff888029599e00 [ 499.960406][T11195] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 499.968399][T11195] RBP: ffff88807ed963a8 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 499.976394][T11195] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffff888029599e00 [ 499.984397][T11195] R13: ffff88805ec0a130 R14: 0000000000000000 R15: 1ffff1100fdb2c75 [ 499.992401][T11195] ? perf_pending_task+0x357/0x480 [ 499.997563][T11195] ? perf_pending_task+0x357/0x480 [ 500.002881][T11195] task_work_run+0x1d4/0x260 [ 500.007516][T11195] ? task_work_cancel+0x220/0x220 [ 500.012578][T11195] do_exit+0x986/0x2530 [ 500.016781][T11195] ? put_task_struct+0xc0/0xc0 [ 500.021579][T11195] ? preempt_schedule_common+0x82/0xc0 [ 500.027069][T11195] ? preempt_schedule+0xc0/0xd0 [ 500.031957][T11195] ? schedule_preempt_disabled+0x20/0x20 [ 500.037634][T11195] ? lock_chain_count+0x20/0x20 [ 500.042521][T11195] do_group_exit+0x22d/0x2f0 [ 500.047150][T11195] get_signal+0x12a6/0x1390 [ 500.051695][T11195] arch_do_signal_or_restart+0xc2/0x7b0 [ 500.057286][T11195] ? mutex_unlock+0x10/0x10 [ 500.061822][T11195] ? get_sigframe_size+0x20/0x20 [ 500.066807][T11195] ? ksys_write+0x201/0x260 [ 500.071345][T11195] ? exit_to_user_mode_loop+0x3b/0x110 [ 500.076839][T11195] exit_to_user_mode_loop+0x70/0x110 [ 500.082159][T11195] exit_to_user_mode_prepare+0xee/0x180 [ 500.087743][T11195] syscall_exit_to_user_mode+0x1a/0x50 [ 500.093242][T11195] do_syscall_64+0x61/0xb0 [ 500.097688][T11195] ? clear_bhb_loop+0x40/0x90 [ 500.102395][T11195] ? clear_bhb_loop+0x40/0x90 [ 500.107104][T11195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.113022][T11195] RIP: 0033:0x7f0a57f9e0d9 [ 500.117468][T11195] Code: Unable to access opcode bytes at 0x7f0a57f9e0af. [ 500.124515][T11195] RSP: 002b:00007f0a561d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 500.132964][T11195] RAX: 0000000000000012 RBX: 00007f0a58226090 RCX: 00007f0a57f9e0d9 [ 500.140962][T11195] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000b [ 500.148963][T11195] RBP: 00007f0a58035024 R08: 0000000000000000 R09: 0000000000000000 [ 500.156959][T11195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.164952][T11195] R13: 00007f0a58226128 R14: 00007f0a58226090 R15: 00007ffed0ac4bd8 [ 500.172971][T11195] [ 500.176174][T11195] Kernel Offset: disabled [ 500.180529][T11195] Rebooting in 86400 seconds..