last executing test programs: 4.933755998s ago: executing program 1 (id=2049): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x9, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x4554, 0x1, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2d}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 3.942526809s ago: executing program 0 (id=2057): socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r0}, 0xc) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)=""/11, 0x99, 0xb, 0x0, 0xffff}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, 0x0) close(r2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000740)={0x0, 0xffffff2d, &(0x7f0000000780)=[{&(0x7f00000007c0)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.427140061s ago: executing program 4 (id=2059): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000f40)="d80000003100b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93450000000000000000", 0xd8}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="bf160000000000001801000020646c2500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000550000001500020000000000bf01000000000000850000005600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0xed, 0x0, &(0x7f0000001040)="00f7ffffffffffffff00000000003c9729d50c8ec22aa1edd522b1a24cff01a464d743fad857571f59449afe260e66dc9dd580d5c8fdd6644e151272abe4bef2dad497aee0227d8f83184e9fa600883e3bee6e98415d09d702e16a6b3bbb2f353916e8b8511219739c23521d807a66f4d9883610842c135ba93906857ab83c61e3af3550393e27c0d60e8e4f94e8df82600a81d03e2d90d0871ac77e9df435f624f0658bd5c51d526bac56b95143277642d1373acaaefe1e2545e3073f5fa2b888d02a50535b302738e56fae983974e2e5d4f57e005b446e013e22a71edb298755b96dc4e61de7485f6b037480", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000850000002e00000085000000b3be723b4fc129ded9c76bd6230000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={0x0, &(0x7f0000000600)=""/251, &(0x7f0000000700), &(0x7f0000000740), 0xa7c, r3}, 0x38) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x3, &(0x7f0000000a00)=@framed, &(0x7f0000000a40)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={r4, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x1, &(0x7f0000000c00)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xb, '\x00', r5}, 0x94) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c80), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d40)={0x1, 0x0}, 0x8) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0x18, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='GPL\x00', 0x10001, 0x6, &(0x7f0000000900)=""/6, 0x1f00, 0x24, '\x00', r5, @fallback=0x27, r6, 0x8, &(0x7f0000000cc0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000d00)={0x5, 0x5, 0xe, 0x3}, 0x10, r7, 0xffffffffffffffff, 0x3, &(0x7f0000000e00)=[0xffffffffffffffff, r8, 0xffffffffffffffff], &(0x7f0000000e40)=[{0x1, 0x5, 0x6, 0xb}, {0x5, 0x5, 0xe, 0x4}, {0x1, 0x3, 0x10, 0x7}]}, 0x94) 3.277753076s ago: executing program 4 (id=2060): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000400)="e9", 0x1}], 0x1, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @loopback}}}], 0x20}, 0xe900) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="be79bdaf7c9134b89b4fab4ccfc8fdfd3d81223b69759ba4cd5506c54a446d1304c7fa2ff45463e2f0ab0a00c71cfd5dada0e792c349869366e75624f1a71777707e", 0x42}, {&(0x7f0000000580)="010f9080fdde2803b8935cae89a852ed85f1cf276e6d09a7dc8fbab8ac952f01f90042b0294f4e3ff8ee0a6c24f0437a859d2d7667d161f9200ba7592b68751275f155ca9608dca306dad9df2bb78e50071f50b39d138c7ada2c2ddaf1388b0808a000220d2fc8f7ce0b1878aea70df2d4b273a3d61a600f0a0bfdf8f5acc0183cd05402783a4af8bd259021acce0167c683cca322101ac97b8acb854afa1b5e963de349461c7e57be77e415baa36905b9a9d6de4544fc29b58319bd62881d595aa3a5711e3724f3a13eeeeac1ee3dce05b396a158515437d7c9fcd212daf6d63cef557e127b340d0400c17044823228cc6b179c3fd9fd3714bfec3a548eafbf158925c91e5e05ab3f8bb1e6950951d98ec2b76a6f239de197c2c1eba30b40780c10d029e8306998f8db4eb7c0756359272a3d1cf764ecdfb47e7aedfde47de7f71fa9a0c6733e34ca5454b7281d9765a6e16459e1e87007bd194dda75e628951b13fe97731a21e2b60838e7f02f75ddeeb91caaf54c686f197687bd287c72261af8299ad13346501ba3ffb6a424a92822badee7e3894f07c565a7ed9671b048450724d3b488ac2dca7b16ba9f3f5ac6026cb5187227fbcf78284944c2b17b51cd0d6d0510adfe3e532f43d99035397cbb8a012fc6bfa0bdb6264d4dc266afad9c3b45a117aaf53f53d2fe151783358d8389237f3ca5c6f09bff59938a03b4dd53d293f2ed753766bd6f0ea855b9b461686082d063de356ceefe056f95119b86912a1162b63feb9bdfd443e3260d81db1cd966d6ef3374d6abfda249e7b5c9c73c18d5481cbe80ea3d611f627fc12d047b5d07ffc5b81b56ab3ad25c9a3cf698753761623709eb289a1ac7d783c8d3ae86eb3a6d047dc2fe7271c0e57d20306edd316a45fa448b605d24e3abad6bf6f8c4486e916c332c675cc3fd2a1f1a361e1a778475f0bf2d56e29f44d3a525c2b86896bbc2e640038659f85507f32a486266038fc3483a1ec9db90a0f8ebd0a3500441b1441f71bd094951273885504d754d108c7a6a11b75de24648f91bc4cd763168df67b1327370ca1f57481032e1cccb67d26a9cbafc856880141437f4096d872ab1d936e99eece9d72d703172120f050dd2a10788d2d6aadce9c75dd3e0a03927cc6ab30b77c364dca756bd1de4bdcb71577852244078d76d6de7cb1add963354b414211af695a92a9c74f02f80428da026255dca635be25d206865ec15855b2ca2d185d5eb83ea5b056be3c340e0bf5615239d6d15bad9c029805ae07958991b4d61a9e62440ded812e1902b53ed186de93505aa67f6bbb07a2548b67fdd007fd1665d61c6ea6f307abab9cebbdecb672d2fdd0823ba8e91df46366807371c82ad850fb0aa3840624dc8745ef6be482ddc827766c2d8ac4808cc5c2f79702f2cf86f03b9197dc28a34df6bcc0c137d563b93f05d5f3eece0daf6886af9e339817f4591988a74adb1c4d6c5b345d77bf52fc2873528f21c2cb0bda66aefce9a073d9960a84588fdf829ac2d0c807cdb7fc8e314a94bcb9562f2bed9f3aa6846eef1941d1814dc773000f8ea7ff83169c646a28a5980b405b8d2f12da591e9a30f718a0492375159e7ccb6790072a6af6d8f58117170cb572e3f2c79649f5dba252d05561244c1b87c09103623a8b6706f636a202ad162a2fd3a91a3bd2fce4b1f6daeee200113318e0c15613e4ff51561e20870498961043707fd838d7d41c906d532ac9f07962b4f765c6667d7e56886c7a8c99b11075d240efb336a56bb07b7be48b5a4ce1f9ba97328e7934e94e8b4a1e92f310ffc1c075eda042e8475a9391922d4f4e4b83641e7ce21d0cd5fe7c844c77fb06265044da9afa7680349182c394f34443e71444365360df4e03dde2681a7aa170528cf45f14570fb83b2e5bbe67916881915eaecab02f1bac075cf19588d4f199d7c5c8b4537ecf4ed7f5b1aa07d8c29456a8b33290364", 0x57d}], 0x2, &(0x7f0000000b00)=ANY=[], 0x118}, 0x80) 3.162223268s ago: executing program 4 (id=2061): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 3) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)=""/251, 0xfb}, {&(0x7f00000006c0)=""/19, 0x13}, {&(0x7f0000000700)=""/145, 0x91}, {&(0x7f0000002600)=""/4076, 0xfec}, {&(0x7f0000003600)=""/91, 0x5b}], 0x5}, 0x22) 2.469758199s ago: executing program 0 (id=2063): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000b00)={&(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000c40)=[{&(0x7f00000003c0)="c1fcbb1ff4c13ed3d8dc6e4124cd14a23da8d663e3ec97a34a1b6204b3b9ddfd5b83aeb298ddef6ba93b8d74deb22af5d1497178e9d147aa35189ac9", 0x3c}, {&(0x7f00000005c0)="16bdec635b801fde1f557f9632db467477cc9c0a89675e0ef07b", 0x1a}, {&(0x7f00000006c0)="de67d3f14535a14caa01898a2e41e1ada67c8c23097ab2efbca0028196e0843f07e6f884163826eeca9dd376db4f33595140195c34d805634ef365e37979b1ef58982dbdb7966a2cdcfc868051e3266ab4ee400e87d9b9ff0ddd86037aa2f289c4c559b7a4c1e61e3fc7cdf82519853a3401fa0c88043e6c71a01cab49e5e84c58864065b8560980c684ad309bc5009e2cdbe82c9bcc56512445d1f3b64d6ad76c1565c2fcfabf65f868e6d72d12c4f5840609742e5f11a598669e282636e8e1", 0xc0}, {&(0x7f0000000840)="a5734a10a2cfaca1e2a848171de963078a0a59b29781327a5fb4706d3450d6abda64be0f42beea6f262343f60d294b11c2943dbbf0af4f3a104532fe8f6923952d3c9d59908c416afb5c912d4dca09d4", 0x50}, {&(0x7f00000008c0)}, {&(0x7f0000000b80)="2adae82c670f3ac9172247ae0ec1e8fdb89982a35cafd5f0f66b1df507745311d18a5df05c9696bb6266319fc32aafb5c9213dd0df4bbe45c141a38881effa5e9b8cc68fb645412ddfdbbf8a43e293930686863f9de889fea18dbef46df34d42a42aa8", 0x63}], 0x6, &(0x7f0000000a40)}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ccb3f8080d6cc84efb6913588946f4a229a8"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f0000000940)=0x1000000, &(0x7f0000000980)}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a40)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdd, &(0x7f0000000b40)='/proc/0KgOq\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) 2.441967362s ago: executing program 1 (id=2064): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2) sendmsg$inet(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.36018455s ago: executing program 3 (id=2065): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000200)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) perf_event_open(0x0, 0x0, 0xf, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r2, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a40)={r4, r5}, 0xc) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000640)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000006c0)={r6, &(0x7f0000000700), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 2.283317648s ago: executing program 1 (id=2067): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000e80)={&(0x7f0000001380)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 2.199405326s ago: executing program 0 (id=2068): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000001640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001680)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000001700)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce000000162079f4b4d2f87e56dca6aab845013f286dd1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000001800), &(0x7f0000001840)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) (fail_nth: 3) 2.198725406s ago: executing program 4 (id=2069): r0 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000009376, 0x2241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x1, 0x4, 0x0, 0x20, 0xf6, 0x0, 0xd871}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000006311780000000000ea8300000200000085000000050000009500a51a00653700"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000200)='FROZEN\x00', 0x7) mkdirat$cgroup(r3, &(0x7f0000000240)='syz1\x00', 0x1ff) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000e80)='GPL\x00'}, 0x48) r7 = perf_event_open(&(0x7f0000000ec0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000f40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8040) recvmsg(r8, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)=""/140, 0x8c}], 0x1, &(0x7f0000001180)=""/229, 0x11}, 0x0) close(r9) perf_event_open$cgroup(&(0x7f0000001280)={0x0, 0x80, 0x1, 0x80, 0x85, 0x81, 0x0, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x62, 0x2, @perf_config_ext={0x8, 0xfffffffffffffffe}, 0x44, 0x0, 0x6, 0x0, 0x4, 0x7f, 0x98bb, 0x0, 0xf3, 0x0, 0x3}, 0xffffffffffffffff, 0x10, r7, 0xe) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002000)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r10, 0x88, 0x67, &(0x7f0000002040)=r11, 0x4) sendmsg$inet(r10, &(0x7f0000002080)={&(0x7f00000020c0)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000002100)=[{&(0x7f0000002140)="8100108cdb5c324a61d879c750cfae230631823241b82a15643746dd2683c940c3985bfa1e54be80872a526669bd387550e5ed602c3ef9df15598ca7309c936dca998ebcbd73e82c4b958dd091d2a02bff625e467d63199c3279b5a02d5bc69c3ec7cb1500c663e24b", 0x69}], 0x1, &(0x7f00000021c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4c}}], 0x38}, 0x4840) r12 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r12, &(0x7f0000002200)={&(0x7f0000002240)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0a00000205020000ff0104000700000000000000", @ANYRES32=0x1, @ANYRES64=r3, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000002300)={r13, &(0x7f0000002340), &(0x7f0000002380)=""/10, 0x2}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000023c0)={r12, r6}) perf_event_open(&(0x7f0000002400)={0x2, 0xffffffffffffff51, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x100, 0xc2ba, 0x0, 0x4000000, 0x4, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) 2.131360923s ago: executing program 3 (id=2070): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r2, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0xffffff2d, &(0x7f00000002c0)=[{&(0x7f0000000840)="e03f03003d000b08d25a80648c7494f90324fc600b0002400a000a00053582c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x29, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x5, 0x3, 0x3, 0x6, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x96, &(0x7f0000000580)=""/150, 0x41000, 0x3, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x6, 0x7fff, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[r0, r2, r2, r2, r2, r0], &(0x7f0000000800)=[{0x3, 0x3, 0xf, 0x1}], 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff0066000000a100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1b, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x14, &(0x7f0000000f40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000070"], &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000001080)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) sendmsg$kcm(r9, &(0x7f00000010c0)={0x0, 0x703, &(0x7f0000001100)=[{&(0x7f0000001140)="e03f030010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001000)={r8}, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0xfffffffffffffe26, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.87059455s ago: executing program 1 (id=2072): bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0xa, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x6, 0x4}, {0xd, 0x1}, {0x4, 0x4}, {0x9}, {0x3, 0x4}]}, @fwd={0xa}, @struct={0xb, 0x4, 0x0, 0x4, 0x0, 0x1, [{0x1, 0x1}, {0x8, 0x0, 0x7fffffff}, {0x1, 0x0, 0x7f}, {0x9, 0x4, 0x7}]}, @fwd={0x2}, @volatile={0x7}, @fwd={0x8}, @const={0x10, 0x0, 0x0, 0xa, 0x1}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x61, 0x61, 0x30, 0x0, 0x0]}}, &(0x7f0000000580)=""/49, 0xda, 0x31, 0x1, 0x3}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001680)={r1, 0x18000000000002a0, 0x182, 0x0, &(0x7f00000027c0)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x77, &(0x7f0000001800), &(0x7f0000001840)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0030c800000000000000002000000000000000fae400000000a90000"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0xcabb, 0x40}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0x3) socket$kcm(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0x1, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r4}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001fc0)={0xffffffffffffffff, 0xe0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000002100)=[0x0], &(0x7f0000002140)=[0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f0000002180)=[{}, {}], 0x10, 0x10, &(0x7f00000021c0), &(0x7f0000002200), 0x8, 0x13, 0x8, 0x8, &(0x7f0000002240)}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002280)={&(0x7f00000022c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe7, 0xe7, 0x5, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x5, 0x6}, @int={0x3, 0x0, 0x0, 0x1, 0x1, 0xd, 0x0, 0x5, 0x2}, @func={0xd, 0x0, 0x0, 0xc, 0x1}, @restrict={0x7, 0x0, 0x0, 0xb, 0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x7, 0x4}, {0xd, 0x1}, {0x4}, {0xa}, {0x2}]}, @datasec={0x8, 0x1, 0x0, 0xf, 0x3, [{0x5, 0x6, 0xbdb}], "dc922a"}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x2}, @union={0x7, 0x5, 0x0, 0x5, 0x0, 0x2, [{0xb, 0x1, 0xd}, {0x9, 0x3, 0x2}, {0xf, 0x3, 0x801}, {0x0, 0x1, 0x2}, {0x3, 0x2, 0x2}]}, @float={0xc, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x5f, 0x61, 0x61]}}, &(0x7f0000002400)=""/167, 0x105, 0xa7, 0x0, 0x2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000024c0)=@arena={0x21, 0x0, 0x0, 0x2d, 0x0, 0x1, 0x6, '\x00', r7, r8, 0x0, 0x2, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000025c0)=@bpf_ext={0x1c, 0x5, &(0x7f00000005c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @generic={0x2, 0x0, 0x7, 0x5, 0x6}], &(0x7f0000000900)='syzkaller\x00', 0x3c, 0x34, &(0x7f0000001640)=""/52, 0x41000, 0x34, '\x00', r7, 0x0, r3, 0x8, &(0x7f0000002540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000002580)={0x1, 0xd, 0x2, 0x3}, 0x10, 0x83f5, r5, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) sendmsg$kcm(r6, 0x0, 0x10049014) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000019c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r9, 0x1, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b00)={{r10, 0xffffffffffffffff}, &(0x7f0000001b40), &(0x7f0000001b80)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x6, 0x10, &(0x7f0000001c80)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000001d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0xd, 0xf, &(0x7f0000001e00)=@ringbuf={{0x18, 0x8}, {{}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000001e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x800, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7ff, '\x00', r12, r13, 0x4, 0x0, 0x4}, 0x50) 1.704007387s ago: executing program 0 (id=2073): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x1, 0xcc, 0x0, 0x0, 0x7, 0x18200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, @perf_config_ext={0x2, 0xfffffffffffffffe}, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, 0x0, 0x0, 0x0, 0xc0000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="481680edd60330c9a9b0c9094be08c91b6f84ae7adfe05348389928eb888d394d9cd56389b971c25519e8ab5c0662758a8eb0806176ca8490c47efe09777239e17fc4f712795fc040b935196917ea9f3ae399b8f97644d1cc57557bae940045528885da348d3c368bb1625ce299357", @ANYRES64=0x0], 0x20) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000200), 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socket$kcm(0x2, 0x5, 0x84) socketpair(0x10, 0x2, 0xb893, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x5, 0x9}, {0x10000002, 0x0, 0x0, 0x1}], 0x10, 0x30}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff0f, 0x0, 0x24}, 0x40012142) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001440)={r5}, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001480)={r5}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000940)=r6}, 0x20) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r3}, 0x18) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r9, 0x49) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1a, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000001000000000000ff01000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000a5255000fcffffffa777f8fffcffffff18490000ffffffff0000000000000000216520000800000018280000", @ANYRES32=r8, @ANYBLOB="000000000100010018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000000800000000000000000000b7000000000000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0xeb, &(0x7f0000000980)=""/235, 0x41100, 0x10, '\x00', 0x0, @tracing=0x19, r8, 0x8, &(0x7f0000000a80)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0x4, 0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000e00), &(0x7f0000000e40)=[{0x4, 0x5, 0xe, 0xe}, {0x4, 0x2, 0x10, 0x8}, {0x3, 0x2, 0x5, 0x8}, {0x1, 0x1, 0x3, 0x5}, {0x5, 0x4, 0x3}]}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) 1.703575107s ago: executing program 3 (id=2074): socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r0}, 0xc) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)=""/11, 0x99, 0xb, 0x0, 0xffff}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, 0x0) close(r2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000740)={0x0, 0xffffff2d, &(0x7f0000000780)=[{&(0x7f00000007c0)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.57674355s ago: executing program 1 (id=2075): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x9, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x4554, 0x1, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2d}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.57613888s ago: executing program 0 (id=2076): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x33, 0x0, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xfd, 0x0, r1, 0x0, '\x00', 0x0, r0, 0x1, 0x5, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x30, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @alu={0x4, 0x0, 0x5, 0x2, 0x1, 0x30}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0xffffffff, 0xb1, &(0x7f0000000680)=""/177, 0x41000, 0x48, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000740)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0xc, 0x6, 0x7f}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000880)=[r1, r1, r1, r1, r1, r1], &(0x7f00000008c0)=[{0x4, 0x5, 0x4, 0xc}, {0x5, 0x2, 0xf, 0x3}], 0x10, 0x4c4d}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) close(0x3) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xb7b}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000001f0000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8142000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) socket$kcm(0x29, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x50) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r7, 0xffffffffffffffff}, &(0x7f0000000400)=0xa1, &(0x7f00000004c0)=r8}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r11 = openat$cgroup_devices(r10, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r11, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tr\nr'], 0xa) close(r9) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r5}, 0x38) 1.493076628s ago: executing program 2 (id=2077): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2) sendmsg$inet(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.340162994s ago: executing program 2 (id=2078): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000b00)={&(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000c40)=[{&(0x7f00000003c0)="c1fcbb1ff4c13ed3d8dc6e4124cd14a23da8d663e3ec97a34a1b6204b3b9ddfd5b83aeb298ddef6ba93b8d74deb22af5d1497178e9d147aa35189ac9", 0x3c}, {&(0x7f00000005c0)="16bdec635b801fde1f557f9632db467477cc9c0a89675e0ef07b", 0x1a}, {&(0x7f00000006c0)="de67d3f14535a14caa01898a2e41e1ada67c8c23097ab2efbca0028196e0843f07e6f884163826eeca9dd376db4f33595140195c34d805634ef365e37979b1ef58982dbdb7966a2cdcfc868051e3266ab4ee400e87d9b9ff0ddd86037aa2f289c4c559b7a4c1e61e3fc7cdf82519853a3401fa0c88043e6c71a01cab49e5e84c58864065b8560980c684ad309bc5009e2cdbe82c9bcc56512445d1f3b64d6ad76c1565c2fcfabf65f868e6d72d12c4f5840609742e5f11a598669e282636e8e1", 0xc0}, {&(0x7f0000000840)="a5734a10a2cfaca1e2a848171de963078a0a59b29781327a5fb4706d3450d6abda64be0f42beea6f262343f60d294b11c2943dbbf0af4f3a104532fe8f6923952d3c9d59908c416afb5c912d4dca09d4", 0x50}, {&(0x7f00000008c0)}, {&(0x7f0000000b80)="2adae82c670f3ac9172247ae0ec1e8fdb89982a35cafd5f0f66b1df507745311d18a5df05c9696bb6266319fc32aafb5c9213dd0df4bbe45c141a38881effa5e9b8cc68fb645412ddfdbbf8a43e293930686863f9de889fea18dbef46df34d42a42aa8", 0x63}], 0x6, &(0x7f0000000a40)}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ccb3f8080d6cc84efb6913588946f4a229a8"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f0000000940)=0x1000000, &(0x7f0000000980)}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a40)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdd, &(0x7f0000000b40)='/proc/0KgOq\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) 1.313149906s ago: executing program 3 (id=2079): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x18, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1.197161839s ago: executing program 4 (id=2080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x22) write$cgroup_subtree(r2, &(0x7f0000001240), 0xfdef) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001280)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x1, 0x3}, 0x50) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001500), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={0xffffffffffffffff, 0xe0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640), 0x0, 0x23, &(0x7f0000001680)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000016c0), &(0x7f0000001700), 0x8, 0x20002c5, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0xf, &(0x7f0000000ec0), 0x4) sendmsg$kcm(r6, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x800) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000018c0), 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="1b00000000d016bc7ed9869aaf00000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000100"/28], 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001980)={0x0, 0x7f}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x18, 0x16, &(0x7f0000001300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x31}, {}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ldst={0x2, 0x1, 0x3, 0x6, 0x0, 0xfffffffffffffffe, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000013c0)='GPL\x00', 0x7, 0xe3, &(0x7f0000001400)=""/227, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xb, r4, 0x8, &(0x7f0000001540)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001580)={0x3, 0x1, 0x8, 0x3}, 0x10, r5, r7, 0x0, &(0x7f00000019c0)=[r8, r9], 0x0, 0x10, 0x58bf}, 0x94) close(r0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xf740, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) r12 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) r14 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x76, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x0, 0x0, 0x9f, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x5, 0x0}, 0x8) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0xf, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xb6ecb332a45f641b}}}, &(0x7f00000006c0)='syzkaller\x00', 0x3ff, 0xc9, &(0x7f0000000700)=""/201, 0x41000, 0x40, '\x00', r15, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0x7, &(0x7f00000008c0)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000900)='GPL\x00', 0x7, 0xd3, &(0x7f0000000940)=""/211, 0x41100, 0xb, '\x00', r15, @fallback=0x3, r13, 0x8, &(0x7f0000000a40)={0xd, 0x4}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x0, 0xffc, 0x200008}, 0x10, 0xffffffffffffffff, r14, 0x0, &(0x7f0000000ac0)=[r13], &(0x7f0000000b00), 0x10, 0x5}, 0x94) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@o_path={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x4010, r10}, 0x18) r19 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f80)=@bpf_tracing={0x1a, 0x15, &(0x7f0000001740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7a230544}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r18}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x0, 0x0, 0x1, 0x8, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xea7e, 0x0, 0x0, 0x0, 0xe}]}, &(0x7f0000001800)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x4e, '\x00', r15, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001d40)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001d80)={0x2, 0x3, 0x800, 0x3}, 0x10, 0x224da, r17, 0x1, &(0x7f0000001f00)=[r2, 0xffffffffffffffff, r2, r11, r18, r8, 0xffffffffffffffff], &(0x7f0000001f40)=[{0x3, 0x5, 0x2, 0x5}], 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f00)={{}, &(0x7f0000000f40), &(0x7f0000000f80)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_ext={0x1c, 0x1b, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@map_idx, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x809}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x40, '\x00', r15, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x1, 0x7fff, 0x5}, 0x10, 0x109c5, 0xffffffffffffffff, 0x3, &(0x7f0000000fc0)=[0xffffffffffffffff, r18, 0xffffffffffffffff, r19, 0xffffffffffffffff], &(0x7f0000001000)=[{0x2, 0x1, 0x4, 0x9}, {0x0, 0x3, 0x4, 0x5}, {0x5, 0x4, 0xa, 0x3}], 0x10, 0x2}, 0x94) 1.175750681s ago: executing program 3 (id=2081): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b40000000100000001ffdbe2e8543b"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000940)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10f240, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 1.056209943s ago: executing program 2 (id=2082): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000e80)={&(0x7f0000001380)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 816.715547ms ago: executing program 2 (id=2083): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000200)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sendmsg$inet(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r3}, &(0x7f0000000b80), &(0x7f0000000bc0)=r0}, 0x20) recvmsg$unix(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000d40)=""/229, 0xec1}], 0x1}, 0x0) 756.662553ms ago: executing program 3 (id=2084): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000006, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) (async) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000280)=@framed, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, r1, 0x24}, 0x14) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100100, 0x0, 0x0, 0x8, 0x67534e7a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)='i-', 0xffe3}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102}}}], 0x20}, 0x0) 680.940121ms ago: executing program 2 (id=2085): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000200)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sendmsg$inet(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r3}, &(0x7f0000000b80), &(0x7f0000000bc0)=r0}, 0x20) recvmsg$unix(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000d40)=""/229, 0xec1}], 0x1}, 0x0) (fail_nth: 3) 141.956986ms ago: executing program 2 (id=2086): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38) 82.670002ms ago: executing program 4 (id=2087): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1, 0x0, 0x2, 0x0, 0x202, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0x4, @perf_bp={0x0, 0x1}, 0x8061, 0x5, 0x0, 0x3, 0xfffffffffffffffc, 0x200, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101, 0xa6f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f00000003c0)='./file0\x00'}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x1f, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x1f, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0}, 0x40) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xe, 0x2, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x0, 0x85, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xe, 0x2, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x0, 0x85, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="150000002a000000", @ANYRES32=r4, @ANYBLOB="7a40dfe10c5022fd7bc439288a060505a3798a8f554f2f52514f06ee1a835fe21897a9fa540e7986fe66359f3adbc5e1f0db06243a2d927a9b71c59d70ed501039b2bb0132c2a33834dc1f255a1ac2d6afaa732c1317592fd792", @ANYRES32=r7, @ANYRES64=r5], 0x20) perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf18aa2dcf4c321d1, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000a00), 0x43) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000a80)='THAWED\x00', 0x7) socket$kcm(0x21, 0x2, 0xa) (async) r9 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r9, 0x110, 0x2, &(0x7f0000000ac0), 0x16) (async) setsockopt$sock_attach_bpf(r9, 0x110, 0x2, &(0x7f0000000ac0), 0x16) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r10) perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000cc0), 0x200002, 0x0) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000cc0), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f0000000d00)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f0000000d40), 0x12) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="2b700400000047be398608c8e1a4000000006f727920"], 0xe) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) 64.239064ms ago: executing program 1 (id=2088): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2) sendmsg$inet(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 0 (id=2089): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0xa, 0x2, 0x3a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) r3 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x6, 0x4, &(0x7f0000000400)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f00000004c0)='GPL\x00', 0x5, 0xd2, &(0x7f0000000740)=""/210, 0x0, 0x5}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) kernel console output (not intermixed with test programs): endmsg+0x1c3/0x2b0 [ 321.983572][ T8215] ? perf_trace_preemptirq_template+0x268/0x320 [ 321.989879][ T8215] ? __x64_sys_sendmsg+0x80/0x80 [ 321.994892][ T8215] ? lockdep_hardirqs_on+0x94/0x140 [ 322.000147][ T8215] do_syscall_64+0x4c/0xa0 [ 322.004605][ T8215] ? clear_bhb_loop+0x60/0xb0 [ 322.009358][ T8215] ? clear_bhb_loop+0x60/0xb0 [ 322.014090][ T8215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.020045][ T8215] RIP: 0033:0x7fa11939f559 [ 322.024506][ T8215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.044510][ T8215] RSP: 002b:00007fa11a2df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.053002][ T8215] RAX: ffffffffffffffda RBX: 00007fa119626090 RCX: 00007fa11939f559 [ 322.061047][ T8215] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: 0000000000000004 [ 322.069062][ T8215] RBP: 00007fa11a2df090 R08: 0000000000000000 R09: 0000000000000000 [ 322.077080][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.085112][ T8215] R13: 00007fa119626128 R14: 00007fa119626090 R15: 00007ffe83647fd8 [ 322.093155][ T8215] [ 322.806669][ T8223] netlink: 'syz.1.1245': attribute type 10 has an invalid length. [ 322.826470][ T8223] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1245'. [ 322.970726][ T8228] netlink: 'syz.4.1247': attribute type 3 has an invalid length. [ 322.988242][ T8228] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1247'. [ 323.198549][ T8237] netlink: 'syz.2.1251': attribute type 10 has an invalid length. [ 324.064006][ T8251] netlink: 'syz.3.1255': attribute type 10 has an invalid length. [ 324.106772][ T8251] __nla_validate_parse: 1 callbacks suppressed [ 324.106857][ T8251] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1255'. [ 324.384405][ T8253] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1256'. [ 324.393477][ T8259] FAULT_INJECTION: forcing a failure. [ 324.393477][ T8259] name failslab, interval 1, probability 0, space 0, times 0 [ 324.393510][ T8259] CPU: 0 PID: 8259 Comm: syz.0.1258 Not tainted syzkaller #0 [ 324.393531][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 324.393544][ T8259] Call Trace: [ 324.393552][ T8259] [ 324.393561][ T8259] dump_stack_lvl+0x188/0x24e [ 324.393590][ T8259] ? show_regs_print_info+0x12/0x12 [ 324.393614][ T8259] ? load_image+0x410/0x410 [ 324.393644][ T8259] ? __lock_acquire+0x7ea0/0x7ea0 [ 324.393682][ T8259] should_fail_ex+0x390/0x4c0 [ 324.454247][ T8259] should_failslab+0x5/0x20 [ 324.458885][ T8259] slab_pre_alloc_hook+0x59/0x300 [ 324.463966][ T8259] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 324.469579][ T8259] __kmem_cache_alloc_node+0x4f/0x270 [ 324.475048][ T8259] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 324.480651][ T8259] __kmalloc+0xa3/0x240 [ 324.484941][ T8259] bpf_prog_test_run_skb+0x23e/0x18e0 [ 324.490368][ T8259] ? __fget_files+0x28/0x460 [ 324.495038][ T8259] ? __fget_files+0x3fc/0x460 [ 324.499791][ T8259] ? cpu_online+0xa0/0xa0 [ 324.504155][ T8259] bpf_prog_test_run+0x31c/0x390 [ 324.509131][ T8259] __sys_bpf+0x62b/0x780 [ 324.513409][ T8259] ? bpf_link_show_fdinfo+0x380/0x380 [ 324.518823][ T8259] ? lock_chain_count+0x20/0x20 [ 324.523717][ T8259] __x64_sys_bpf+0x78/0x90 [ 324.528164][ T8259] do_syscall_64+0x4c/0xa0 [ 324.532629][ T8259] ? clear_bhb_loop+0x60/0xb0 [ 324.537330][ T8259] ? clear_bhb_loop+0x60/0xb0 [ 324.542042][ T8259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.547990][ T8259] RIP: 0033:0x7f1362f9f559 [ 324.552435][ T8259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.572070][ T8259] RSP: 002b:00007f1363e2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.580511][ T8259] RAX: ffffffffffffffda RBX: 00007f1363225fa0 RCX: 00007f1362f9f559 [ 324.588599][ T8259] RDX: 000000000000002c RSI: 0000200000001300 RDI: 000000000000000a [ 324.596602][ T8259] RBP: 00007f1363e2a090 R08: 0000000000000000 R09: 0000000000000000 [ 324.604598][ T8259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.612593][ T8259] R13: 00007f1363226038 R14: 00007f1363225fa0 R15: 00007ffe7634cf28 [ 324.620606][ T8259] [ 324.902468][ T8271] netlink: 'syz.0.1262': attribute type 10 has an invalid length. [ 324.921356][ T8271] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1262'. [ 324.998461][ T8272] device sit0 left promiscuous mode [ 325.010789][ T8276] netlink: 'syz.1.1265': attribute type 3 has an invalid length. [ 325.035449][ T8276] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1265'. [ 325.316665][ T8279] device sit0 entered promiscuous mode [ 325.361376][ T8281] netlink: 'syz.4.1268': attribute type 10 has an invalid length. [ 325.393877][ T8281] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1268'. [ 325.527212][ T8285] netlink: 'syz.1.1269': attribute type 3 has an invalid length. [ 325.554262][ T8285] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1269'. [ 325.634669][ T8293] FAULT_INJECTION: forcing a failure. [ 325.634669][ T8293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.666539][ T8291] FAULT_INJECTION: forcing a failure. [ 325.666539][ T8291] name failslab, interval 1, probability 0, space 0, times 0 [ 325.678119][ T8293] CPU: 0 PID: 8293 Comm: syz.1.1272 Not tainted syzkaller #0 [ 325.686639][ T8293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 325.696738][ T8293] Call Trace: [ 325.700055][ T8293] [ 325.703018][ T8293] dump_stack_lvl+0x188/0x24e [ 325.707742][ T8293] ? show_regs_print_info+0x12/0x12 [ 325.712981][ T8293] ? load_image+0x410/0x410 [ 325.717530][ T8293] ? __lock_acquire+0x7ea0/0x7ea0 [ 325.722611][ T8293] ? snprintf+0xe5/0x140 [ 325.726908][ T8293] should_fail_ex+0x390/0x4c0 [ 325.731734][ T8293] _copy_to_user+0x2c/0x130 [ 325.736282][ T8293] simple_read_from_buffer+0xe3/0x150 [ 325.741700][ T8293] proc_fail_nth_read+0x1a6/0x220 [ 325.746766][ T8293] ? proc_fault_inject_write+0x310/0x310 [ 325.752458][ T8293] ? fsnotify_perm+0x248/0x550 [ 325.757274][ T8293] ? proc_fault_inject_write+0x310/0x310 [ 325.762988][ T8293] vfs_read+0x2db/0x960 [ 325.767191][ T8293] ? kernel_read+0x1e0/0x1e0 [ 325.771833][ T8293] ? __fget_files+0x28/0x460 [ 325.776486][ T8293] ? __fget_files+0x3fc/0x460 [ 325.781234][ T8293] ? __fdget_pos+0x2ae/0x360 [ 325.785869][ T8293] ? ksys_read+0x70/0x260 [ 325.790239][ T8293] ksys_read+0x14d/0x260 [ 325.794520][ T8293] ? vfs_write+0x9a0/0x9a0 [ 325.798979][ T8293] ? lockdep_hardirqs_on+0x94/0x140 [ 325.804209][ T8293] do_syscall_64+0x4c/0xa0 [ 325.808652][ T8293] ? clear_bhb_loop+0x60/0xb0 [ 325.813356][ T8293] ? clear_bhb_loop+0x60/0xb0 [ 325.818084][ T8293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.824044][ T8293] RIP: 0033:0x7fa11935fd8e [ 325.828488][ T8293] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 325.848118][ T8293] RSP: 002b:00007fa11a2fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 325.856556][ T8293] RAX: ffffffffffffffda RBX: 00007fa11a3006c0 RCX: 00007fa11935fd8e [ 325.864568][ T8293] RDX: 000000000000000f RSI: 00007fa11a3000a0 RDI: 0000000000000006 [ 325.872562][ T8293] RBP: 00007fa11a300090 R08: 0000000000000000 R09: 0000000000000000 [ 325.880647][ T8293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.888637][ T8293] R13: 00007fa119626038 R14: 00007fa119625fa0 R15: 00007ffe83647fd8 [ 325.896736][ T8293] [ 325.908235][ T8291] CPU: 0 PID: 8291 Comm: syz.3.1270 Not tainted syzkaller #0 [ 325.915683][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 325.925773][ T8291] Call Trace: [ 325.929088][ T8291] [ 325.932059][ T8291] dump_stack_lvl+0x188/0x24e [ 325.936788][ T8291] ? show_regs_print_info+0x12/0x12 [ 325.942044][ T8291] ? load_image+0x410/0x410 [ 325.946641][ T8291] ? __might_sleep+0xd0/0xd0 [ 325.951365][ T8291] ? __lock_acquire+0x7ea0/0x7ea0 [ 325.956452][ T8291] should_fail_ex+0x390/0x4c0 [ 325.961190][ T8291] should_failslab+0x5/0x20 [ 325.965768][ T8291] slab_pre_alloc_hook+0x59/0x300 [ 325.970857][ T8291] ? tomoyo_encode+0x28a/0x550 [ 325.975688][ T8291] __kmem_cache_alloc_node+0x4f/0x270 [ 325.981152][ T8291] ? tomoyo_encode+0x28a/0x550 [ 325.985968][ T8291] __kmalloc+0xa3/0x240 [ 325.990177][ T8291] tomoyo_encode+0x28a/0x550 [ 325.994831][ T8291] tomoyo_realpath_from_path+0x578/0x5c0 [ 326.000527][ T8291] ? tomoyo_domain+0xd2/0x120 [ 326.005265][ T8291] ? tomoyo_path_number_perm+0x205/0x650 [ 326.010950][ T8291] tomoyo_path_number_perm+0x22f/0x650 [ 326.016473][ T8291] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 326.021982][ T8291] ? ksys_write+0x1ce/0x260 [ 326.026658][ T8291] ? common_file_perm+0x171/0x1c0 [ 326.031785][ T8291] ? __fget_files+0x28/0x460 [ 326.036453][ T8291] security_file_ioctl+0x6c/0xa0 [ 326.041443][ T8291] __se_sys_ioctl+0x48/0x170 [ 326.046106][ T8291] do_syscall_64+0x4c/0xa0 [ 326.050586][ T8291] ? clear_bhb_loop+0x60/0xb0 [ 326.055315][ T8291] ? clear_bhb_loop+0x60/0xb0 [ 326.060060][ T8291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.066046][ T8291] RIP: 0033:0x7f4fea79f559 [ 326.070506][ T8291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.090170][ T8291] RSP: 002b:00007f4fe89f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.098636][ T8291] RAX: ffffffffffffffda RBX: 00007f4feaa25fa0 RCX: 00007f4fea79f559 [ 326.106688][ T8291] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003c [ 326.114712][ T8291] RBP: 00007f4fe89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 326.122735][ T8291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.130834][ T8291] R13: 00007f4feaa26038 R14: 00007f4feaa25fa0 R15: 00007ffc66282118 [ 326.138881][ T8291] [ 326.177141][ T8291] ERROR: Out of memory at tomoyo_realpath_from_path. [ 326.240262][ T8295] netlink: 'syz.2.1273': attribute type 11 has an invalid length. [ 326.277852][ T8295] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1273'. [ 326.299930][ T8294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.544752][ T8307] netlink: 'syz.3.1278': attribute type 10 has an invalid length. [ 326.554029][ T8307] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1278'. [ 326.636038][ T8315] netlink: 'syz.1.1282': attribute type 3 has an invalid length. [ 326.637324][ T8317] netlink: 'syz.1.1282': attribute type 3 has an invalid length. [ 326.660095][ T8313] netlink: 'syz.2.1281': attribute type 10 has an invalid length. [ 326.691554][ T8313] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1281'. [ 326.735196][ T8316] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1279'. [ 327.103183][ T8326] device sit0 left promiscuous mode [ 327.230351][ T8325] device sit0 entered promiscuous mode [ 327.889884][ T8335] bridge0: port 4(hsr0) entered disabled state [ 327.897876][ T8335] bridge0: port 3(team0) entered disabled state [ 327.906512][ T8335] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.920906][ T8329] delete_channel: no stack [ 327.939784][ T8335] device bridge0 left promiscuous mode [ 327.992246][ T8337] bridge0: port 4(hsr0) entered blocking state [ 327.998772][ T8337] bridge0: port 4(hsr0) entered forwarding state [ 328.005633][ T8337] bridge0: port 3(team0) entered blocking state [ 328.012257][ T8337] bridge0: port 3(team0) entered forwarding state [ 328.019149][ T8337] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.026519][ T8337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.061440][ T8337] device bridge0 entered promiscuous mode [ 328.086068][ T8346] netlink: 'syz.2.1291': attribute type 39 has an invalid length. [ 328.646667][ T8360] FAULT_INJECTION: forcing a failure. [ 328.646667][ T8360] name failslab, interval 1, probability 0, space 0, times 0 [ 328.680235][ T8360] CPU: 1 PID: 8360 Comm: syz.4.1305 Not tainted syzkaller #0 [ 328.687697][ T8360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 328.697800][ T8360] Call Trace: [ 328.701115][ T8360] [ 328.704086][ T8360] dump_stack_lvl+0x188/0x24e [ 328.708816][ T8360] ? show_regs_print_info+0x12/0x12 [ 328.714062][ T8360] ? load_image+0x410/0x410 [ 328.718617][ T8360] ? __lock_acquire+0x7ea0/0x7ea0 [ 328.723701][ T8360] should_fail_ex+0x390/0x4c0 [ 328.728440][ T8360] should_failslab+0x5/0x20 [ 328.732991][ T8360] slab_pre_alloc_hook+0x59/0x300 [ 328.738067][ T8360] ? verify_lock_unused+0x140/0x140 [ 328.743329][ T8360] ? bpf_test_init+0x9f/0x140 [ 328.748063][ T8360] __kmem_cache_alloc_node+0x4f/0x270 [ 328.753498][ T8360] ? bpf_test_init+0x9f/0x140 [ 328.758227][ T8360] __kmalloc+0xa3/0x240 [ 328.762441][ T8360] bpf_test_init+0x9f/0x140 [ 328.767002][ T8360] bpf_prog_test_run_xdp+0x488/0xf80 [ 328.772355][ T8360] ? __lock_acquire+0x7ea0/0x7ea0 [ 328.777447][ T8360] ? dev_put+0x80/0x80 [ 328.781580][ T8360] ? dev_put+0x80/0x80 [ 328.785695][ T8360] bpf_prog_test_run+0x31c/0x390 [ 328.790730][ T8360] __sys_bpf+0x62b/0x780 [ 328.795057][ T8360] ? bpf_link_show_fdinfo+0x380/0x380 [ 328.800505][ T8360] ? lock_chain_count+0x20/0x20 [ 328.805452][ T8360] __x64_sys_bpf+0x78/0x90 [ 328.809929][ T8360] do_syscall_64+0x4c/0xa0 [ 328.814390][ T8360] ? clear_bhb_loop+0x60/0xb0 [ 328.819112][ T8360] ? clear_bhb_loop+0x60/0xb0 [ 328.823838][ T8360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.829787][ T8360] RIP: 0033:0x7fbf7e19f559 [ 328.834244][ T8360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.854103][ T8360] RSP: 002b:00007fbf7f083028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 328.862663][ T8360] RAX: ffffffffffffffda RBX: 00007fbf7e426090 RCX: 00007fbf7e19f559 [ 328.870688][ T8360] RDX: 0000000000000050 RSI: 0000200000000bc0 RDI: 000000000000000a [ 328.878719][ T8360] RBP: 00007fbf7f083090 R08: 0000000000000000 R09: 0000000000000000 [ 328.886756][ T8360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.894803][ T8360] R13: 00007fbf7e426128 R14: 00007fbf7e426090 R15: 00007fff757e6208 [ 328.902839][ T8360] [ 329.256408][ T8373] validate_nla: 1 callbacks suppressed [ 329.256430][ T8373] netlink: 'syz.1.1300': attribute type 10 has an invalid length. [ 330.060721][ T8385] device sit0 left promiscuous mode [ 331.173985][ T8388] device sit0 entered promiscuous mode [ 331.525254][ T8409] FAULT_INJECTION: forcing a failure. [ 331.525254][ T8409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.557701][ T8409] CPU: 0 PID: 8409 Comm: syz.2.1313 Not tainted syzkaller #0 [ 331.565291][ T8409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 331.575396][ T8409] Call Trace: [ 331.578895][ T8409] [ 331.581870][ T8409] dump_stack_lvl+0x188/0x24e [ 331.586642][ T8409] ? show_regs_print_info+0x12/0x12 [ 331.591893][ T8409] ? load_image+0x410/0x410 [ 331.596467][ T8409] ? __lock_acquire+0x7ea0/0x7ea0 [ 331.601546][ T8409] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 331.607592][ T8409] ? __lock_acquire+0x7ea0/0x7ea0 [ 331.612695][ T8409] should_fail_ex+0x390/0x4c0 [ 331.617428][ T8409] _copy_from_user+0x2c/0x170 [ 331.622155][ T8409] __ia32_sys_rt_sigreturn+0x21c/0x750 [ 331.627677][ T8409] ? load_gs_index+0x130/0x130 [ 331.632523][ T8409] ? lock_chain_count+0x20/0x20 [ 331.637439][ T8409] ? lockdep_hardirqs_on+0x94/0x140 [ 331.642679][ T8409] do_syscall_64+0x4c/0xa0 [ 331.647117][ T8409] ? clear_bhb_loop+0x60/0xb0 [ 331.651818][ T8409] ? clear_bhb_loop+0x60/0xb0 [ 331.656542][ T8409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.662469][ T8409] RIP: 0033:0x7ffac1f408d9 [ 331.666907][ T8409] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 331.686541][ T8409] RSP: 002b:00007ffac2f47a40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 331.695003][ T8409] RAX: ffffffffffffffda RBX: 00007ffac2f486c0 RCX: 00007ffac1f408d9 [ 331.703003][ T8409] RDX: 00007ffac2f47a40 RSI: 00007ffac2f47b70 RDI: 0000000000000011 [ 331.710994][ T8409] RBP: 00007ffac2f48090 R08: 0000000000000000 R09: 0000000000000000 [ 331.719073][ T8409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 331.727068][ T8409] R13: 00007ffac2226038 R14: 00007ffac2225fa0 R15: 00007ffff93ab918 [ 331.735087][ T8409] [ 331.762777][ T8412] netlink: 'syz.4.1315': attribute type 10 has an invalid length. [ 331.784326][ T8412] __nla_validate_parse: 4 callbacks suppressed [ 331.784385][ T8412] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1315'. [ 332.001213][ T8421] netlink: 'syz.2.1318': attribute type 3 has an invalid length. [ 332.035517][ T8421] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1318'. [ 332.648169][ T8432] device sit0 left promiscuous mode [ 333.018428][ T8436] device sit0 entered promiscuous mode [ 333.995283][ T8450] device sit0 left promiscuous mode [ 334.542063][ T8461] netlink: 'syz.1.1332': attribute type 3 has an invalid length. [ 334.583916][ T8461] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1332'. [ 334.887939][ T8451] device sit0 entered promiscuous mode [ 335.020369][ T8456] netlink: 'syz.3.1331': attribute type 10 has an invalid length. [ 335.050490][ T8456] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1331'. [ 335.278258][ T8471] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1337'. [ 335.660504][ T8486] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1341'. [ 336.101597][ T8484] device sit0 left promiscuous mode [ 336.181914][ T8487] device sit0 entered promiscuous mode [ 336.267239][ T8486] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1341'. [ 336.284870][ T8483] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1341'. [ 336.295085][ T8485] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1341'. [ 336.948369][ T8508] FAULT_INJECTION: forcing a failure. [ 336.948369][ T8508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.994063][ T8508] CPU: 0 PID: 8508 Comm: syz.3.1349 Not tainted syzkaller #0 [ 337.001623][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 337.011757][ T8508] Call Trace: [ 337.015107][ T8508] [ 337.018081][ T8508] dump_stack_lvl+0x188/0x24e [ 337.022852][ T8508] ? show_regs_print_info+0x12/0x12 [ 337.028090][ T8508] ? load_image+0x410/0x410 [ 337.032638][ T8508] ? __lock_acquire+0x7ea0/0x7ea0 [ 337.037710][ T8508] should_fail_ex+0x390/0x4c0 [ 337.042433][ T8508] strncpy_from_user+0x32/0x340 [ 337.047339][ T8508] bpf_prog_load+0x200/0x1530 [ 337.052070][ T8508] ? map_freeze+0x390/0x390 [ 337.056639][ T8508] ? __might_fault+0xa6/0x120 [ 337.061356][ T8508] ? __might_fault+0xa6/0x120 [ 337.066067][ T8508] ? __might_fault+0xc2/0x120 [ 337.070768][ T8508] ? __might_fault+0xa6/0x120 [ 337.075470][ T8508] ? bpf_lsm_bpf+0x5/0x10 [ 337.079827][ T8508] ? security_bpf+0x7a/0xa0 [ 337.084357][ T8508] __sys_bpf+0x5b8/0x780 [ 337.088645][ T8508] ? bpf_link_show_fdinfo+0x380/0x380 [ 337.094159][ T8508] ? lock_chain_count+0x20/0x20 [ 337.099056][ T8508] __x64_sys_bpf+0x78/0x90 [ 337.103596][ T8508] do_syscall_64+0x4c/0xa0 [ 337.108035][ T8508] ? clear_bhb_loop+0x60/0xb0 [ 337.112759][ T8508] ? clear_bhb_loop+0x60/0xb0 [ 337.117491][ T8508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.123439][ T8508] RIP: 0033:0x7f4fea79f559 [ 337.127888][ T8508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.147548][ T8508] RSP: 002b:00007f4fe89f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 337.156000][ T8508] RAX: ffffffffffffffda RBX: 00007f4feaa25fa0 RCX: 00007f4fea79f559 [ 337.164000][ T8508] RDX: 0000000000000094 RSI: 0000200000000f00 RDI: 0000000000000005 [ 337.172021][ T8508] RBP: 00007f4fe89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 337.180050][ T8508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.188052][ T8508] R13: 00007f4feaa26038 R14: 00007f4feaa25fa0 R15: 00007ffc66282118 [ 337.196069][ T8508] [ 337.270924][ T8510] netlink: 'syz.1.1350': attribute type 10 has an invalid length. [ 337.285079][ T8510] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1350'. [ 337.530047][ T8524] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1353'. [ 337.888748][ T8524] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1353'. [ 337.905571][ T8520] netlink: 'syz.4.1354': attribute type 10 has an invalid length. [ 337.915277][ T8520] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1354'. [ 337.925706][ T8517] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1353'. [ 338.044854][ T8521] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1353'. [ 338.490783][ T8531] device sit0 left promiscuous mode [ 338.662853][ T8545] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1362'. [ 338.930728][ T8548] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1363'. [ 338.955729][ T8536] device sit0 entered promiscuous mode [ 338.988798][ T8548] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 339.162957][ T8553] netlink: 'syz.0.1364': attribute type 10 has an invalid length. [ 339.175176][ T8553] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1364'. [ 339.417067][ T8560] FAULT_INJECTION: forcing a failure. [ 339.417067][ T8560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.443233][ T8560] CPU: 1 PID: 8560 Comm: syz.2.1367 Not tainted syzkaller #0 [ 339.450789][ T8560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 339.460911][ T8560] Call Trace: [ 339.464224][ T8560] [ 339.467193][ T8560] dump_stack_lvl+0x188/0x24e [ 339.471909][ T8560] ? show_regs_print_info+0x12/0x12 [ 339.477138][ T8560] ? load_image+0x410/0x410 [ 339.481689][ T8560] ? __lock_acquire+0x7ea0/0x7ea0 [ 339.486935][ T8560] should_fail_ex+0x390/0x4c0 [ 339.491659][ T8560] _copy_from_user+0x2c/0x170 [ 339.496375][ T8560] __copy_msghdr+0x384/0x560 [ 339.501045][ T8560] ___sys_sendmsg+0x210/0x360 [ 339.505862][ T8560] ? __sys_sendmsg+0x2a0/0x2a0 [ 339.510728][ T8560] __se_sys_sendmsg+0x1c3/0x2b0 [ 339.515631][ T8560] ? __x64_sys_sendmsg+0x80/0x80 [ 339.520659][ T8560] ? lockdep_hardirqs_on+0x94/0x140 [ 339.525901][ T8560] do_syscall_64+0x4c/0xa0 [ 339.530353][ T8560] ? clear_bhb_loop+0x60/0xb0 [ 339.535066][ T8560] ? clear_bhb_loop+0x60/0xb0 [ 339.539837][ T8560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.545861][ T8560] RIP: 0033:0x7ffac1f9f559 [ 339.550318][ T8560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.570219][ T8560] RSP: 002b:00007ffac2f48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.578669][ T8560] RAX: ffffffffffffffda RBX: 00007ffac2225fa0 RCX: 00007ffac1f9f559 [ 339.586769][ T8560] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 339.594785][ T8560] RBP: 00007ffac2f48090 R08: 0000000000000000 R09: 0000000000000000 [ 339.602886][ T8560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.610902][ T8560] R13: 00007ffac2226038 R14: 00007ffac2225fa0 R15: 00007ffff93ab918 [ 339.618919][ T8560] [ 339.684475][ T8567] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1369'. [ 339.945635][ T8578] FAULT_INJECTION: forcing a failure. [ 339.945635][ T8578] name failslab, interval 1, probability 0, space 0, times 0 [ 340.007658][ T8578] CPU: 1 PID: 8578 Comm: syz.3.1374 Not tainted syzkaller #0 [ 340.015133][ T8578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 340.025360][ T8578] Call Trace: [ 340.028693][ T8578] [ 340.031691][ T8578] dump_stack_lvl+0x188/0x24e [ 340.036515][ T8578] ? show_regs_print_info+0x12/0x12 [ 340.041772][ T8578] ? load_image+0x410/0x410 [ 340.046446][ T8578] ? __might_sleep+0xd0/0xd0 [ 340.051101][ T8578] ? __lock_acquire+0x7ea0/0x7ea0 [ 340.056204][ T8578] should_fail_ex+0x390/0x4c0 [ 340.060958][ T8578] should_failslab+0x5/0x20 [ 340.065523][ T8578] slab_pre_alloc_hook+0x59/0x300 [ 340.070613][ T8578] ? tomoyo_encode+0x28a/0x550 [ 340.075479][ T8578] __kmem_cache_alloc_node+0x4f/0x270 [ 340.080917][ T8578] ? tomoyo_encode+0x28a/0x550 [ 340.085760][ T8578] __kmalloc+0xa3/0x240 [ 340.089977][ T8578] tomoyo_encode+0x28a/0x550 [ 340.094623][ T8578] tomoyo_realpath_from_path+0x578/0x5c0 [ 340.100337][ T8578] ? tomoyo_domain+0xd2/0x120 [ 340.105081][ T8578] ? tomoyo_path_number_perm+0x205/0x650 [ 340.110779][ T8578] tomoyo_path_number_perm+0x22f/0x650 [ 340.116306][ T8578] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 340.121831][ T8578] ? ksys_write+0x1ce/0x260 [ 340.126422][ T8578] ? common_file_perm+0x171/0x1c0 [ 340.131559][ T8578] ? __fget_files+0x28/0x460 [ 340.136232][ T8578] security_file_ioctl+0x6c/0xa0 [ 340.141271][ T8578] __se_sys_ioctl+0x48/0x170 [ 340.145992][ T8578] do_syscall_64+0x4c/0xa0 [ 340.150474][ T8578] ? clear_bhb_loop+0x60/0xb0 [ 340.155221][ T8578] ? clear_bhb_loop+0x60/0xb0 [ 340.159960][ T8578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.165924][ T8578] RIP: 0033:0x7f4fea79f559 [ 340.170416][ T8578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.190118][ T8578] RSP: 002b:00007f4fe89f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.198622][ T8578] RAX: ffffffffffffffda RBX: 00007f4feaa25fa0 RCX: 00007f4fea79f559 [ 340.206658][ T8578] RDX: 0000200000000140 RSI: 00000000400454ca RDI: 0000000000000003 [ 340.214717][ T8578] RBP: 00007f4fe89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 340.222742][ T8578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.230773][ T8578] R13: 00007f4feaa26038 R14: 00007f4feaa25fa0 R15: 00007ffc66282118 [ 340.238824][ T8578] [ 340.363524][ T8582] netlink: 'syz.4.1376': attribute type 3 has an invalid length. [ 340.383086][ T8578] ERROR: Out of memory at tomoyo_realpath_from_path. [ 340.456171][ T8587] FAULT_INJECTION: forcing a failure. [ 340.456171][ T8587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.489926][ T8586] device sit0 left promiscuous mode [ 340.524961][ T8587] CPU: 1 PID: 8587 Comm: syz.0.1378 Not tainted syzkaller #0 [ 340.532435][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 340.542561][ T8587] Call Trace: [ 340.545882][ T8587] [ 340.548858][ T8587] dump_stack_lvl+0x188/0x24e [ 340.553595][ T8587] ? show_regs_print_info+0x12/0x12 [ 340.558839][ T8587] ? load_image+0x410/0x410 [ 340.563396][ T8587] ? __lock_acquire+0x7ea0/0x7ea0 [ 340.568527][ T8587] should_fail_ex+0x390/0x4c0 [ 340.573269][ T8587] strncpy_from_user+0x32/0x340 [ 340.578178][ T8587] bpf_prog_load+0x200/0x1530 [ 340.582930][ T8587] ? map_freeze+0x390/0x390 [ 340.587489][ T8587] ? __might_fault+0xa6/0x120 [ 340.592239][ T8587] ? __might_fault+0xa6/0x120 [ 340.597010][ T8587] ? __might_fault+0xc2/0x120 [ 340.601742][ T8587] ? __might_fault+0xa6/0x120 [ 340.606477][ T8587] ? bpf_lsm_bpf+0x5/0x10 [ 340.610872][ T8587] ? security_bpf+0x7a/0xa0 [ 340.615434][ T8587] __sys_bpf+0x5b8/0x780 [ 340.619921][ T8587] ? bpf_link_show_fdinfo+0x380/0x380 [ 340.625368][ T8587] ? lock_chain_count+0x20/0x20 [ 340.630287][ T8587] __x64_sys_bpf+0x78/0x90 [ 340.634776][ T8587] do_syscall_64+0x4c/0xa0 [ 340.639248][ T8587] ? clear_bhb_loop+0x60/0xb0 [ 340.643975][ T8587] ? clear_bhb_loop+0x60/0xb0 [ 340.648737][ T8587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.654719][ T8587] RIP: 0033:0x7f1362f9f559 [ 340.659187][ T8587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.678850][ T8587] RSP: 002b:00007f1363e09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 340.687326][ T8587] RAX: ffffffffffffffda RBX: 00007f1363226090 RCX: 00007f1362f9f559 [ 340.695355][ T8587] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 0000000000000005 [ 340.703378][ T8587] RBP: 00007f1363e09090 R08: 0000000000000000 R09: 0000000000000000 [ 340.711408][ T8587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.719488][ T8587] R13: 00007f1363226128 R14: 00007f1363226090 R15: 00007ffe7634cf28 [ 340.727541][ T8587] [ 341.048416][ T8589] device sit0 entered promiscuous mode [ 341.531388][ T8606] raw_sendmsg: syz.1.1381 forgot to set AF_INET. Fix it! [ 341.899398][ T8607] device sit0 left promiscuous mode [ 341.988282][ T8605] device sit0 entered promiscuous mode [ 342.382190][ T8617] netlink: 'syz.2.1384': attribute type 10 has an invalid length. [ 342.444350][ T8617] __nla_validate_parse: 8 callbacks suppressed [ 342.444368][ T8617] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1384'. [ 342.827793][ T8629] netlink: 'syz.4.1390': attribute type 3 has an invalid length. [ 342.865217][ T8629] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1390'. [ 342.879873][ T8632] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1391'. [ 343.243610][ T8641] device sit0 left promiscuous mode [ 343.478050][ T8653] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1397'. [ 343.702876][ T8649] device sit0 entered promiscuous mode [ 343.782984][ T8653] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1397'. [ 343.818337][ T8655] netlink: 'syz.3.1399': attribute type 10 has an invalid length. [ 343.827183][ T8655] team0: Device syz_tun is up. Set it down before adding it as a team port [ 343.857150][ T8650] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1397'. [ 343.883678][ T8651] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1397'. [ 344.399751][ T8668] netlink: 'syz.3.1404': attribute type 3 has an invalid length. [ 344.430716][ T8668] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1404'. [ 344.633647][ T8677] FAULT_INJECTION: forcing a failure. [ 344.633647][ T8677] name failslab, interval 1, probability 0, space 0, times 0 [ 344.704209][ T8677] CPU: 0 PID: 8677 Comm: syz.4.1408 Not tainted syzkaller #0 [ 344.711657][ T8677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 344.721786][ T8677] Call Trace: [ 344.725108][ T8677] [ 344.728107][ T8677] dump_stack_lvl+0x188/0x24e [ 344.732850][ T8677] ? show_regs_print_info+0x12/0x12 [ 344.738102][ T8677] ? load_image+0x410/0x410 [ 344.742669][ T8677] ? __might_sleep+0xd0/0xd0 [ 344.747309][ T8677] ? __lock_acquire+0x7ea0/0x7ea0 [ 344.752407][ T8677] should_fail_ex+0x390/0x4c0 [ 344.757157][ T8677] should_failslab+0x5/0x20 [ 344.761725][ T8677] slab_pre_alloc_hook+0x59/0x300 [ 344.766871][ T8677] ? tomoyo_encode+0x28a/0x550 [ 344.771698][ T8677] __kmem_cache_alloc_node+0x4f/0x270 [ 344.777126][ T8677] ? tomoyo_encode+0x28a/0x550 [ 344.781943][ T8677] __kmalloc+0xa3/0x240 [ 344.786233][ T8677] tomoyo_encode+0x28a/0x550 [ 344.790900][ T8677] tomoyo_realpath_from_path+0x578/0x5c0 [ 344.796591][ T8677] ? tomoyo_domain+0xd2/0x120 [ 344.801331][ T8677] ? tomoyo_path_number_perm+0x205/0x650 [ 344.807050][ T8677] tomoyo_path_number_perm+0x22f/0x650 [ 344.812566][ T8677] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 344.812782][ T8685] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1410'. [ 344.819192][ T8677] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 344.819222][ T8677] ? ksys_write+0x1ce/0x260 [ 344.819254][ T8677] ? common_file_perm+0x171/0x1c0 [ 344.843315][ T8677] ? __fget_files+0x28/0x460 [ 344.847976][ T8677] security_file_ioctl+0x6c/0xa0 [ 344.852962][ T8677] __se_sys_ioctl+0x48/0x170 [ 344.857589][ T8677] do_syscall_64+0x4c/0xa0 [ 344.862034][ T8677] ? clear_bhb_loop+0x60/0xb0 [ 344.866738][ T8677] ? clear_bhb_loop+0x60/0xb0 [ 344.871445][ T8677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.877372][ T8677] RIP: 0033:0x7fbf7e19f559 [ 344.881810][ T8677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.901456][ T8677] RSP: 002b:00007fbf7f0a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.909904][ T8677] RAX: ffffffffffffffda RBX: 00007fbf7e425fa0 RCX: 00007fbf7e19f559 [ 344.917915][ T8677] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 344.926019][ T8677] RBP: 00007fbf7f0a4090 R08: 0000000000000000 R09: 0000000000000000 [ 344.934046][ T8677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.942084][ T8677] R13: 00007fbf7e426038 R14: 00007fbf7e425fa0 R15: 00007fff757e6208 [ 344.950103][ T8677] [ 344.966774][ T8685] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1410'. [ 344.978836][ T8677] ERROR: Out of memory at tomoyo_realpath_from_path. [ 345.181961][ T8695] FAULT_INJECTION: forcing a failure. [ 345.181961][ T8695] name failslab, interval 1, probability 0, space 0, times 0 [ 345.249747][ T8697] device sit0 left promiscuous mode [ 345.337452][ T8695] CPU: 0 PID: 8695 Comm: syz.3.1414 Not tainted syzkaller #0 [ 345.345092][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 345.355196][ T8695] Call Trace: [ 345.358514][ T8695] [ 345.361496][ T8695] dump_stack_lvl+0x188/0x24e [ 345.366227][ T8695] ? show_regs_print_info+0x12/0x12 [ 345.371483][ T8695] ? load_image+0x410/0x410 [ 345.376075][ T8695] ? __lock_acquire+0x7ea0/0x7ea0 [ 345.381171][ T8695] should_fail_ex+0x390/0x4c0 [ 345.385924][ T8695] should_failslab+0x5/0x20 [ 345.390481][ T8695] slab_pre_alloc_hook+0x59/0x300 [ 345.395553][ T8695] ? verify_lock_unused+0x140/0x140 [ 345.400807][ T8695] ? bpf_test_init+0x9f/0x140 [ 345.405536][ T8695] __kmem_cache_alloc_node+0x4f/0x270 [ 345.410951][ T8695] ? bpf_test_init+0x9f/0x140 [ 345.415660][ T8695] __kmalloc+0xa3/0x240 [ 345.419846][ T8695] bpf_test_init+0x9f/0x140 [ 345.424380][ T8695] bpf_prog_test_run_xdp+0x488/0xf80 [ 345.429696][ T8695] ? __lock_acquire+0x7ea0/0x7ea0 [ 345.434787][ T8695] ? dev_put+0x80/0x80 [ 345.438893][ T8695] ? dev_put+0x80/0x80 [ 345.442992][ T8695] bpf_prog_test_run+0x31c/0x390 [ 345.447971][ T8695] __sys_bpf+0x62b/0x780 [ 345.452252][ T8695] ? bpf_link_show_fdinfo+0x380/0x380 [ 345.457672][ T8695] ? lock_chain_count+0x20/0x20 [ 345.462563][ T8695] __x64_sys_bpf+0x78/0x90 [ 345.467035][ T8695] do_syscall_64+0x4c/0xa0 [ 345.471475][ T8695] ? clear_bhb_loop+0x60/0xb0 [ 345.476173][ T8695] ? clear_bhb_loop+0x60/0xb0 [ 345.480960][ T8695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.486886][ T8695] RIP: 0033:0x7f4fea79f559 [ 345.491411][ T8695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.511082][ T8695] RSP: 002b:00007f4fe89f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 345.519560][ T8695] RAX: ffffffffffffffda RBX: 00007f4feaa25fa0 RCX: 00007f4fea79f559 [ 345.527587][ T8695] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 000000000000000a [ 345.535594][ T8695] RBP: 00007f4fe89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 345.543627][ T8695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.551648][ T8695] R13: 00007f4feaa26038 R14: 00007f4feaa25fa0 R15: 00007ffc66282118 [ 345.559669][ T8695] [ 345.841250][ T8699] device sit0 entered promiscuous mode [ 346.559050][ T8720] netlink: 'syz.1.1421': attribute type 3 has an invalid length. [ 348.273874][ T8741] device sit0 left promiscuous mode [ 348.440056][ T8742] device sit0 entered promiscuous mode [ 348.846674][ T8745] : port 1(ip6gretap0) entered blocking state [ 348.865543][ T8745] : port 1(ip6gretap0) entered disabled state [ 348.898948][ T8745] device ip6gretap0 entered promiscuous mode [ 349.113815][ T8761] netlink: 'syz.3.1439': attribute type 3 has an invalid length. [ 349.144580][ T8761] __nla_validate_parse: 7 callbacks suppressed [ 349.144616][ T8761] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1439'. [ 349.228039][ T8771] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1440'. [ 349.254986][ T8771] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1440'. [ 349.296295][ T8763] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1440'. [ 349.358542][ T8769] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1440'. [ 349.740608][ T8774] device sit0 left promiscuous mode [ 350.302239][ T8781] device sit0 entered promiscuous mode [ 350.538302][ T8782] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1444'. [ 350.755049][ T8788] device sit0 left promiscuous mode [ 350.865847][ T8789] device sit0 entered promiscuous mode [ 351.323518][ T8808] FAULT_INJECTION: forcing a failure. [ 351.323518][ T8808] name failslab, interval 1, probability 0, space 0, times 0 [ 351.373183][ T8808] CPU: 0 PID: 8808 Comm: syz.2.1454 Not tainted syzkaller #0 [ 351.380749][ T8808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 351.390852][ T8808] Call Trace: [ 351.394204][ T8808] [ 351.397179][ T8808] dump_stack_lvl+0x188/0x24e [ 351.401909][ T8808] ? show_regs_print_info+0x12/0x12 [ 351.407154][ T8808] ? load_image+0x410/0x410 [ 351.411714][ T8808] ? __lock_acquire+0x7ea0/0x7ea0 [ 351.416796][ T8808] should_fail_ex+0x390/0x4c0 [ 351.421558][ T8808] should_failslab+0x5/0x20 [ 351.426101][ T8808] slab_pre_alloc_hook+0x59/0x300 [ 351.431183][ T8808] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 351.436777][ T8808] __kmem_cache_alloc_node+0x4f/0x270 [ 351.442226][ T8808] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 351.447833][ T8808] __kmalloc+0xa3/0x240 [ 351.452033][ T8808] bpf_prog_test_run_skb+0x23e/0x18e0 [ 351.457482][ T8808] ? __fget_files+0x28/0x460 [ 351.462128][ T8808] ? __fget_files+0x3fc/0x460 [ 351.466869][ T8808] ? cpu_online+0xa0/0xa0 [ 351.471250][ T8808] bpf_prog_test_run+0x31c/0x390 [ 351.476248][ T8808] __sys_bpf+0x62b/0x780 [ 351.480557][ T8808] ? bpf_link_show_fdinfo+0x380/0x380 [ 351.485993][ T8808] ? lock_chain_count+0x20/0x20 [ 351.490901][ T8808] __x64_sys_bpf+0x78/0x90 [ 351.495370][ T8808] do_syscall_64+0x4c/0xa0 [ 351.499829][ T8808] ? clear_bhb_loop+0x60/0xb0 [ 351.504581][ T8808] ? clear_bhb_loop+0x60/0xb0 [ 351.509311][ T8808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.515281][ T8808] RIP: 0033:0x7ffac1f9f559 [ 351.519734][ T8808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.539388][ T8808] RSP: 002b:00007ffac2f48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.547858][ T8808] RAX: ffffffffffffffda RBX: 00007ffac2225fa0 RCX: 00007ffac1f9f559 [ 351.555883][ T8808] RDX: 0000000000000050 RSI: 0000200000000e40 RDI: 000000000000000a [ 351.563907][ T8808] RBP: 00007ffac2f48090 R08: 0000000000000000 R09: 0000000000000000 [ 351.571939][ T8808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.579956][ T8808] R13: 00007ffac2226038 R14: 00007ffac2225fa0 R15: 00007ffff93ab918 [ 351.587997][ T8808] [ 351.627920][ T8810] netlink: 'syz.0.1455': attribute type 3 has an invalid length. [ 351.646293][ T8810] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1455'. [ 351.776423][ T8819] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1456'. [ 351.803517][ T8819] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1456'. [ 351.843241][ T8814] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1456'. [ 353.048856][ T8833] device sit0 left promiscuous mode [ 353.108478][ T8835] netlink: 'syz.2.1464': attribute type 2 has an invalid length. [ 353.143124][ T8839] FAULT_INJECTION: forcing a failure. [ 353.143124][ T8839] name failslab, interval 1, probability 0, space 0, times 0 [ 353.179397][ T8836] device sit0 entered promiscuous mode [ 353.237626][ T8839] CPU: 0 PID: 8839 Comm: syz.1.1465 Not tainted syzkaller #0 [ 353.245089][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 353.255188][ T8839] Call Trace: [ 353.258512][ T8839] [ 353.261486][ T8839] dump_stack_lvl+0x188/0x24e [ 353.266225][ T8839] ? show_regs_print_info+0x12/0x12 [ 353.271480][ T8839] ? load_image+0x410/0x410 [ 353.276023][ T8839] ? __might_sleep+0xd0/0xd0 [ 353.280643][ T8839] ? __lock_acquire+0x7ea0/0x7ea0 [ 353.285784][ T8839] ? mark_lock+0x94/0x320 [ 353.290152][ T8839] should_fail_ex+0x390/0x4c0 [ 353.294959][ T8839] should_failslab+0x5/0x20 [ 353.299490][ T8839] slab_pre_alloc_hook+0x59/0x300 [ 353.304548][ T8839] ? __get_vm_area_node+0x122/0x330 [ 353.309779][ T8839] __kmem_cache_alloc_node+0x4f/0x270 [ 353.315181][ T8839] ? __get_vm_area_node+0x122/0x330 [ 353.320407][ T8839] kmalloc_node_trace+0x22/0xe0 [ 353.325295][ T8839] __get_vm_area_node+0x122/0x330 [ 353.330365][ T8839] ? perf_trace_lock_acquire+0x101/0x3f0 [ 353.336031][ T8839] __vmalloc_node_range+0x357/0x1380 [ 353.341437][ T8839] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 353.347022][ T8839] ? trace_event_raw_event_lock+0x230/0x230 [ 353.352965][ T8839] ? aa_get_newest_label+0xf9/0x5b0 [ 353.358202][ T8839] ? free_vm_area+0x50/0x50 [ 353.362760][ T8839] ? end_current_label_crit_section+0x170/0x170 [ 353.369056][ T8839] ? __lock_acquire+0x7ea0/0x7ea0 [ 353.374118][ T8839] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 353.379696][ T8839] __vmalloc+0x76/0x80 [ 353.383794][ T8839] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 353.389383][ T8839] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 353.394787][ T8839] ? bpf_prog_alloc+0x13/0x1b0 [ 353.399588][ T8839] bpf_prog_alloc+0x1c/0x1b0 [ 353.404216][ T8839] bpf_prog_load+0x7d4/0x1530 [ 353.408939][ T8839] ? map_freeze+0x390/0x390 [ 353.413479][ T8839] ? __might_fault+0xa6/0x120 [ 353.418200][ T8839] ? __might_fault+0xa6/0x120 [ 353.422925][ T8839] ? __might_fault+0xc2/0x120 [ 353.427630][ T8839] ? __might_fault+0xa6/0x120 [ 353.432336][ T8839] ? bpf_lsm_bpf+0x5/0x10 [ 353.436693][ T8839] ? security_bpf+0x7a/0xa0 [ 353.441244][ T8839] __sys_bpf+0x5b8/0x780 [ 353.445524][ T8839] ? bpf_link_show_fdinfo+0x380/0x380 [ 353.450946][ T8839] ? lock_chain_count+0x20/0x20 [ 353.455838][ T8839] __x64_sys_bpf+0x78/0x90 [ 353.460289][ T8839] do_syscall_64+0x4c/0xa0 [ 353.464760][ T8839] ? clear_bhb_loop+0x60/0xb0 [ 353.469460][ T8839] ? clear_bhb_loop+0x60/0xb0 [ 353.474166][ T8839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.480095][ T8839] RIP: 0033:0x7fa11939f559 [ 353.484544][ T8839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.504194][ T8839] RSP: 002b:00007fa11a300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 353.512756][ T8839] RAX: ffffffffffffffda RBX: 00007fa119625fa0 RCX: 00007fa11939f559 [ 353.520768][ T8839] RDX: 0000000000000090 RSI: 0000200000000340 RDI: 0000000000000005 [ 353.528761][ T8839] RBP: 00007fa11a300090 R08: 0000000000000000 R09: 0000000000000000 [ 353.536764][ T8839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.544778][ T8839] R13: 00007fa119626038 R14: 00007fa119625fa0 R15: 00007ffe83647fd8 [ 353.552789][ T8839] [ 353.584070][ T8839] syz.1.1465: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 353.621182][ T8839] CPU: 1 PID: 8839 Comm: syz.1.1465 Not tainted syzkaller #0 [ 353.628678][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 353.638796][ T8839] Call Trace: [ 353.642125][ T8839] [ 353.645101][ T8839] dump_stack_lvl+0x188/0x24e [ 353.649836][ T8839] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 353.656303][ T8839] ? show_regs_print_info+0x12/0x12 [ 353.661638][ T8839] ? load_image+0x410/0x410 [ 353.666201][ T8839] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 353.672671][ T8839] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 353.679240][ T8839] warn_alloc+0x242/0x330 [ 353.683629][ T8839] ? __get_vm_area_node+0x122/0x330 [ 353.688947][ T8839] ? zone_watermark_ok_safe+0x270/0x270 [ 353.694553][ T8839] ? rcu_is_watching+0x11/0xa0 [ 353.699389][ T8839] ? __get_vm_area_node+0x318/0x330 [ 353.704644][ T8839] ? perf_trace_lock_acquire+0x101/0x3f0 [ 353.710336][ T8839] __vmalloc_node_range+0x37c/0x1380 [ 353.715795][ T8839] ? trace_event_raw_event_lock+0x230/0x230 [ 353.721800][ T8839] ? aa_get_newest_label+0xf9/0x5b0 [ 353.727058][ T8839] ? free_vm_area+0x50/0x50 [ 353.731647][ T8839] ? end_current_label_crit_section+0x170/0x170 [ 353.737952][ T8839] ? __lock_acquire+0x7ea0/0x7ea0 [ 353.743039][ T8839] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 353.748648][ T8839] __vmalloc+0x76/0x80 [ 353.752779][ T8839] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 353.758387][ T8839] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 353.763816][ T8839] ? bpf_prog_alloc+0x13/0x1b0 [ 353.768646][ T8839] bpf_prog_alloc+0x1c/0x1b0 [ 353.773333][ T8839] bpf_prog_load+0x7d4/0x1530 [ 353.778076][ T8839] ? map_freeze+0x390/0x390 [ 353.782637][ T8839] ? __might_fault+0xa6/0x120 [ 353.787390][ T8839] ? __might_fault+0xa6/0x120 [ 353.792126][ T8839] ? __might_fault+0xc2/0x120 [ 353.796875][ T8839] ? __might_fault+0xa6/0x120 [ 353.801612][ T8839] ? bpf_lsm_bpf+0x5/0x10 [ 353.805989][ T8839] ? security_bpf+0x7a/0xa0 [ 353.810552][ T8839] __sys_bpf+0x5b8/0x780 [ 353.814859][ T8839] ? bpf_link_show_fdinfo+0x380/0x380 [ 353.820316][ T8839] ? lock_chain_count+0x20/0x20 [ 353.825255][ T8839] __x64_sys_bpf+0x78/0x90 [ 353.829741][ T8839] do_syscall_64+0x4c/0xa0 [ 353.834291][ T8839] ? clear_bhb_loop+0x60/0xb0 [ 353.839025][ T8839] ? clear_bhb_loop+0x60/0xb0 [ 353.843761][ T8839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.849717][ T8839] RIP: 0033:0x7fa11939f559 [ 353.854181][ T8839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.873845][ T8839] RSP: 002b:00007fa11a300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 353.882320][ T8839] RAX: ffffffffffffffda RBX: 00007fa119625fa0 RCX: 00007fa11939f559 [ 353.890351][ T8839] RDX: 0000000000000090 RSI: 0000200000000340 RDI: 0000000000000005 [ 353.898406][ T8839] RBP: 00007fa11a300090 R08: 0000000000000000 R09: 0000000000000000 [ 353.906426][ T8839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.914453][ T8839] R13: 00007fa119626038 R14: 00007fa119625fa0 R15: 00007ffe83647fd8 [ 353.922500][ T8839] [ 354.086547][ T8839] Mem-Info: [ 354.113483][ T8839] active_anon:7057 inactive_anon:0 isolated_anon:0 [ 354.113483][ T8839] active_file:17596 inactive_file:40065 isolated_file:0 [ 354.113483][ T8839] unevictable:768 dirty:600 writeback:0 [ 354.113483][ T8839] slab_reclaimable:21478 slab_unreclaimable:96231 [ 354.113483][ T8839] mapped:30448 shmem:1364 pagetables:567 [ 354.113483][ T8839] sec_pagetables:0 bounce:0 [ 354.113483][ T8839] kernel_misc_reclaimable:0 [ 354.113483][ T8839] free:1314001 free_pcp:9708 free_cma:0 [ 354.176895][ T8839] Node 0 active_anon:28328kB inactive_anon:0kB active_file:70384kB inactive_file:160056kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121892kB dirty:2400kB writeback:0kB shmem:3920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11800kB pagetables:2368kB sec_pagetables:0kB all_unreclaimable? no [ 354.210525][ T8839] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 354.247798][ T8839] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 354.303449][ T8850] netlink: 'syz.4.1470': attribute type 3 has an invalid length. [ 354.312193][ T8850] __nla_validate_parse: 1 callbacks suppressed [ 354.312231][ T8850] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1470'. [ 354.351629][ T8839] lowmem_reserve[]: 0 2509 2510 2510 2510 [ 354.371146][ T8839] Node 0 DMA32 free:1342104kB boost:0kB min:34540kB low:43172kB high:51804kB reserved_highatomic:0KB active_anon:28528kB inactive_anon:0kB active_file:70384kB inactive_file:160056kB unevictable:1536kB writepending:2400kB present:3129332kB managed:2574528kB mlocked:0kB bounce:0kB free_pcp:21396kB local_pcp:8920kB free_cma:0kB [ 354.438610][ T8839] lowmem_reserve[]: 0 0 1 1 1 [ 354.449454][ T8839] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 354.639771][ T8839] lowmem_reserve[]: 0 0 0 0 0 [ 354.675108][ T8839] Node 1 Normal free:3898288kB boost:0kB min:55344kB low:69180kB high:83016kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:17536kB local_pcp:8128kB free_cma:0kB [ 354.747417][ T8860] FAULT_INJECTION: forcing a failure. [ 354.747417][ T8860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.761112][ T8860] CPU: 0 PID: 8860 Comm: syz.0.1474 Not tainted syzkaller #0 [ 354.768553][ T8860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 354.778646][ T8860] Call Trace: [ 354.781951][ T8860] [ 354.784907][ T8860] dump_stack_lvl+0x188/0x24e [ 354.789619][ T8860] ? show_regs_print_info+0x12/0x12 [ 354.794846][ T8860] ? load_image+0x410/0x410 [ 354.799388][ T8860] ? __lock_acquire+0x7ea0/0x7ea0 [ 354.804458][ T8860] should_fail_ex+0x390/0x4c0 [ 354.809183][ T8860] _copy_from_user+0x2c/0x170 [ 354.813893][ T8860] bpf_prog_test_run_skb+0x263/0x18e0 [ 354.819305][ T8860] ? __fget_files+0x28/0x460 [ 354.823936][ T8860] ? __fget_files+0x3fc/0x460 [ 354.828656][ T8860] ? cpu_online+0xa0/0xa0 [ 354.833039][ T8860] bpf_prog_test_run+0x31c/0x390 [ 354.838011][ T8860] __sys_bpf+0x62b/0x780 [ 354.842293][ T8860] ? bpf_link_show_fdinfo+0x380/0x380 [ 354.847712][ T8860] ? lock_chain_count+0x20/0x20 [ 354.852605][ T8860] __x64_sys_bpf+0x78/0x90 [ 354.857057][ T8860] do_syscall_64+0x4c/0xa0 [ 354.861496][ T8860] ? clear_bhb_loop+0x60/0xb0 [ 354.866195][ T8860] ? clear_bhb_loop+0x60/0xb0 [ 354.870900][ T8860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.876832][ T8860] RIP: 0033:0x7f1362f9f559 [ 354.881304][ T8860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.900939][ T8860] RSP: 002b:00007f1363e2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 354.909384][ T8860] RAX: ffffffffffffffda RBX: 00007f1363225fa0 RCX: 00007f1362f9f559 [ 354.917402][ T8860] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 354.925398][ T8860] RBP: 00007f1363e2a090 R08: 0000000000000000 R09: 0000000000000000 [ 354.933392][ T8860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.941384][ T8860] R13: 00007f1363226038 R14: 00007f1363225fa0 R15: 00007ffe7634cf28 [ 354.949393][ T8860] [ 354.954931][ T8839] lowmem_reserve[]: 0 0 0 0 0 [ 354.963166][ T8839] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 355.001262][ T8839] Node 0 DMA32: 806*4kB (UE) 986*8kB (U) 1025*16kB (UM) 737*32kB (UME) 470*64kB (UME) 79*128kB (UME) 34*256kB (UME) 6*512kB (UM) 4*1024kB (UM) 3*2048kB (UME) 300*4096kB (UM) = 1342104kB [ 355.064533][ T8839] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 355.117178][ T8839] Node 1 Normal: 234*4kB (UE) 59*8kB (UE) 21*16kB (UME) 31*32kB (UME) 28*64kB (UME) 20*128kB (UME) 8*256kB (UME) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3898288kB [ 355.148397][ T8839] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.166981][ T8839] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 355.177345][ T8839] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.199910][ T8839] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 355.217418][ T8839] 59027 total pagecache pages [ 355.227268][ T8839] 0 pages in swap cache [ 355.237687][ T8839] Free swap = 124996kB [ 355.245689][ T8839] Total swap = 124996kB [ 355.255821][ T8839] 2097051 pages RAM [ 355.264748][ T8839] 0 pages HighMem/MovableOnly [ 355.275364][ T8839] 419818 pages reserved [ 355.283759][ T8839] 0 pages cma reserved [ 355.459426][ T8862] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1485'. [ 356.909545][ T8869] netlink: 'syz.0.1477': attribute type 3 has an invalid length. [ 356.959232][ T8869] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1477'. [ 357.033796][ T8873] device sit0 left promiscuous mode [ 357.410316][ T8879] device sit0 entered promiscuous mode [ 357.425210][ T8883] netlink: 'syz.0.1483': attribute type 3 has an invalid length. [ 357.448930][ T8883] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1483'. [ 358.218436][ T8900] netlink: 'syz.0.1488': attribute type 10 has an invalid length. [ 358.292348][ T8900] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1488'. [ 360.915621][ T8904] rxe_eth0 speed is unknown, defaulting to 1000 [ 360.988715][ T8918] netlink: 'syz.3.1495': attribute type 10 has an invalid length. [ 361.382368][ T8941] FAULT_INJECTION: forcing a failure. [ 361.382368][ T8941] name failslab, interval 1, probability 0, space 0, times 0 [ 361.470735][ T8941] CPU: 0 PID: 8941 Comm: syz.2.1501 Not tainted syzkaller #0 [ 361.478201][ T8941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 361.488341][ T8941] Call Trace: [ 361.491683][ T8941] [ 361.494669][ T8941] dump_stack_lvl+0x188/0x24e [ 361.499409][ T8941] ? show_regs_print_info+0x12/0x12 [ 361.504665][ T8941] ? load_image+0x410/0x410 [ 361.509235][ T8941] ? __might_sleep+0xd0/0xd0 [ 361.513882][ T8941] ? __lock_acquire+0x7ea0/0x7ea0 [ 361.519002][ T8941] ? verify_lock_unused+0x140/0x140 [ 361.524266][ T8941] should_fail_ex+0x390/0x4c0 [ 361.529051][ T8941] should_failslab+0x5/0x20 [ 361.533617][ T8941] slab_pre_alloc_hook+0x59/0x300 [ 361.538706][ T8941] ? __get_vm_area_node+0x122/0x330 [ 361.543965][ T8941] __kmem_cache_alloc_node+0x4f/0x270 [ 361.549399][ T8941] ? __get_vm_area_node+0x122/0x330 [ 361.554656][ T8941] kmalloc_node_trace+0x22/0xe0 [ 361.559590][ T8941] __get_vm_area_node+0x122/0x330 [ 361.564687][ T8941] ? __local_bh_enable_ip+0x136/0x1c0 [ 361.570124][ T8941] __vmalloc_node_range+0x357/0x1380 [ 361.575480][ T8941] ? netlink_sendmsg+0x5ec/0xbd0 [ 361.580489][ T8941] ? netlink_insert+0x28d/0x13b0 [ 361.585508][ T8941] ? free_vm_area+0x50/0x50 [ 361.590073][ T8941] ? netlink_sendmsg+0x5ec/0xbd0 [ 361.595084][ T8941] vmalloc+0x75/0x80 [ 361.599033][ T8941] ? netlink_sendmsg+0x5ec/0xbd0 [ 361.604022][ T8941] netlink_sendmsg+0x5ec/0xbd0 [ 361.608832][ T8941] ? netlink_getsockopt+0x550/0x550 [ 361.614075][ T8941] ? apparmor_socket_sendmsg+0x8a/0x330 [ 361.619660][ T8941] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 361.624987][ T8941] ? security_socket_sendmsg+0x7c/0xa0 [ 361.630496][ T8941] ? netlink_getsockopt+0x550/0x550 [ 361.635739][ T8941] ____sys_sendmsg+0x5ed/0x9a0 [ 361.640566][ T8941] ? __sys_sendmsg_sock+0x30/0x30 [ 361.645632][ T8941] ? __import_iovec+0x306/0x510 [ 361.650525][ T8941] ? import_iovec+0x6f/0xa0 [ 361.655076][ T8941] ___sys_sendmsg+0x2a2/0x360 [ 361.659798][ T8941] ? __sys_sendmsg+0x2a0/0x2a0 [ 361.664634][ T8941] ? __lock_acquire+0x7ea0/0x7ea0 [ 361.669725][ T8941] __se_sys_sendmsg+0x1c3/0x2b0 [ 361.674614][ T8941] ? __x64_sys_sendmsg+0x80/0x80 [ 361.679603][ T8941] ? lockdep_hardirqs_on+0x94/0x140 [ 361.684835][ T8941] do_syscall_64+0x4c/0xa0 [ 361.689277][ T8941] ? clear_bhb_loop+0x60/0xb0 [ 361.693982][ T8941] ? clear_bhb_loop+0x60/0xb0 [ 361.698686][ T8941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.704644][ T8941] RIP: 0033:0x7ffac1f9f559 [ 361.709102][ T8941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.728763][ T8941] RSP: 002b:00007ffac2f48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.737219][ T8941] RAX: ffffffffffffffda RBX: 00007ffac2225fa0 RCX: 00007ffac1f9f559 [ 361.745225][ T8941] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 361.753227][ T8941] RBP: 00007ffac2f48090 R08: 0000000000000000 R09: 0000000000000000 [ 361.761228][ T8941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.769236][ T8941] R13: 00007ffac2226038 R14: 00007ffac2225fa0 R15: 00007ffff93ab918 [ 361.777265][ T8941] [ 361.813208][ T8937] device sit0 left promiscuous mode [ 362.138564][ T8945] device sit0 entered promiscuous mode [ 362.269953][ T8946] tun0: tun_chr_ioctl cmd 1074812118 [ 362.276124][ T8951] netlink: 'syz.2.1502': attribute type 21 has an invalid length. [ 362.856269][ T8965] netlink: 'syz.1.1509': attribute type 10 has an invalid length. [ 363.169426][ T8972] netlink: 'syz.3.1511': attribute type 11 has an invalid length. [ 363.177343][ T8972] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1511'. [ 363.832373][ T8977] FAULT_INJECTION: forcing a failure. [ 363.832373][ T8977] name failslab, interval 1, probability 0, space 0, times 0 [ 363.883467][ T8967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.948497][ T8977] CPU: 0 PID: 8977 Comm: syz.1.1513 Not tainted syzkaller #0 [ 363.955974][ T8977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 363.966083][ T8977] Call Trace: [ 363.969407][ T8977] [ 363.972398][ T8977] dump_stack_lvl+0x188/0x24e [ 363.977143][ T8977] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 363.983355][ T8977] ? show_regs_print_info+0x12/0x12 [ 363.988645][ T8977] ? load_image+0x410/0x410 [ 363.993240][ T8977] should_fail_ex+0x390/0x4c0 [ 363.997996][ T8977] should_failslab+0x5/0x20 [ 364.002551][ T8977] slab_pre_alloc_hook+0x59/0x300 [ 364.007627][ T8977] ? lock_chain_count+0x20/0x20 [ 364.012535][ T8977] ? __get_vm_area_node+0x122/0x330 [ 364.017804][ T8977] __kmem_cache_alloc_node+0x4f/0x270 [ 364.023246][ T8977] ? __get_vm_area_node+0x122/0x330 [ 364.028509][ T8977] kmalloc_node_trace+0x22/0xe0 [ 364.033444][ T8977] __get_vm_area_node+0x122/0x330 [ 364.038542][ T8977] __vmalloc_node_range+0x357/0x1380 [ 364.043890][ T8977] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 364.049516][ T8977] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 364.055753][ T8977] ? aa_get_newest_label+0xf9/0x5b0 [ 364.061048][ T8977] ? free_vm_area+0x50/0x50 [ 364.065598][ T8977] ? end_current_label_crit_section+0x170/0x170 [ 364.071897][ T8977] ? __lock_acquire+0x7ea0/0x7ea0 [ 364.076978][ T8977] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 364.082580][ T8977] __vmalloc+0x76/0x80 [ 364.086689][ T8977] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 364.092274][ T8977] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 364.097684][ T8977] ? bpf_prog_alloc+0x13/0x1b0 [ 364.102497][ T8977] bpf_prog_alloc+0x1c/0x1b0 [ 364.107126][ T8977] bpf_prog_load+0x7d4/0x1530 [ 364.111860][ T8977] ? map_freeze+0x390/0x390 [ 364.116424][ T8977] ? bpf_lsm_bpf+0x5/0x10 [ 364.120793][ T8977] ? security_bpf+0x7a/0xa0 [ 364.125343][ T8977] __sys_bpf+0x5b8/0x780 [ 364.129906][ T8977] ? bpf_link_show_fdinfo+0x380/0x380 [ 364.135363][ T8977] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 364.141575][ T8977] __x64_sys_bpf+0x78/0x90 [ 364.146036][ T8977] do_syscall_64+0x4c/0xa0 [ 364.150488][ T8977] ? clear_bhb_loop+0x60/0xb0 [ 364.155201][ T8977] ? clear_bhb_loop+0x60/0xb0 [ 364.159911][ T8977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.166013][ T8977] RIP: 0033:0x7fa11939f559 [ 364.170460][ T8977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.190281][ T8977] RSP: 002b:00007fa11a300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 364.198730][ T8977] RAX: ffffffffffffffda RBX: 00007fa119625fa0 RCX: 00007fa11939f559 [ 364.206730][ T8977] RDX: 0000000000000048 RSI: 0000200000000300 RDI: 0000000000000005 [ 364.214756][ T8977] RBP: 00007fa11a300090 R08: 0000000000000000 R09: 0000000000000000 [ 364.222760][ T8977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.230764][ T8977] R13: 00007fa119626038 R14: 00007fa119625fa0 R15: 00007ffe83647fd8 [ 364.238784][ T8977] [ 364.267919][ T8977] warn_alloc: 1 callbacks suppressed [ 364.267959][ T8977] syz.1.1513: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 364.324991][ T8977] CPU: 1 PID: 8977 Comm: syz.1.1513 Not tainted syzkaller #0 [ 364.332470][ T8977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 364.342575][ T8977] Call Trace: [ 364.345896][ T8977] [ 364.348877][ T8977] dump_stack_lvl+0x188/0x24e [ 364.353610][ T8977] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 364.360077][ T8977] ? show_regs_print_info+0x12/0x12 [ 364.365322][ T8977] ? load_image+0x410/0x410 [ 364.369886][ T8977] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 364.376348][ T8977] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 364.382906][ T8977] warn_alloc+0x242/0x330 [ 364.387293][ T8977] ? __get_vm_area_node+0x122/0x330 [ 364.392544][ T8977] ? zone_watermark_ok_safe+0x270/0x270 [ 364.398146][ T8977] ? rcu_is_watching+0x11/0xa0 [ 364.402972][ T8977] ? __get_vm_area_node+0x318/0x330 [ 364.408230][ T8977] __vmalloc_node_range+0x37c/0x1380 [ 364.413577][ T8977] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 364.419790][ T8977] ? aa_get_newest_label+0xf9/0x5b0 [ 364.425051][ T8977] ? free_vm_area+0x50/0x50 [ 364.429641][ T8977] ? end_current_label_crit_section+0x170/0x170 [ 364.435952][ T8977] ? __lock_acquire+0x7ea0/0x7ea0 [ 364.441042][ T8977] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 364.446662][ T8977] __vmalloc+0x76/0x80 [ 364.450781][ T8977] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 364.456395][ T8977] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 364.461833][ T8977] ? bpf_prog_alloc+0x13/0x1b0 [ 364.466662][ T8977] bpf_prog_alloc+0x1c/0x1b0 [ 364.471337][ T8977] bpf_prog_load+0x7d4/0x1530 [ 364.476083][ T8977] ? map_freeze+0x390/0x390 [ 364.480689][ T8977] ? bpf_lsm_bpf+0x5/0x10 [ 364.485092][ T8977] ? security_bpf+0x7a/0xa0 [ 364.489646][ T8977] __sys_bpf+0x5b8/0x780 [ 364.493957][ T8977] ? bpf_link_show_fdinfo+0x380/0x380 [ 364.499415][ T8977] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 364.505624][ T8977] __x64_sys_bpf+0x78/0x90 [ 364.510129][ T8977] do_syscall_64+0x4c/0xa0 [ 364.514589][ T8977] ? clear_bhb_loop+0x60/0xb0 [ 364.519307][ T8977] ? clear_bhb_loop+0x60/0xb0 [ 364.524035][ T8977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.529985][ T8977] RIP: 0033:0x7fa11939f559 [ 364.534468][ T8977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.554132][ T8977] RSP: 002b:00007fa11a300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 364.562607][ T8977] RAX: ffffffffffffffda RBX: 00007fa119625fa0 RCX: 00007fa11939f559 [ 364.570636][ T8977] RDX: 0000000000000048 RSI: 0000200000000300 RDI: 0000000000000005 [ 364.578679][ T8977] RBP: 00007fa11a300090 R08: 0000000000000000 R09: 0000000000000000 [ 364.586703][ T8977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.594727][ T8977] R13: 00007fa119626038 R14: 00007fa119625fa0 R15: 00007ffe83647fd8 [ 364.602771][ T8977] [ 364.630482][ T8977] Mem-Info: [ 364.651681][ T8977] active_anon:8260 inactive_anon:0 isolated_anon:0 [ 364.651681][ T8977] active_file:17596 inactive_file:40069 isolated_file:0 [ 364.651681][ T8977] unevictable:768 dirty:438 writeback:0 [ 364.651681][ T8977] slab_reclaimable:21447 slab_unreclaimable:95998 [ 364.651681][ T8977] mapped:30461 shmem:1364 pagetables:595 [ 364.651681][ T8977] sec_pagetables:0 bounce:0 [ 364.651681][ T8977] kernel_misc_reclaimable:0 [ 364.651681][ T8977] free:1312901 free_pcp:9607 free_cma:0 [ 364.787708][ T8983] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1516'. [ 364.827697][ T8977] Node 0 active_anon:28464kB inactive_anon:0kB active_file:70384kB inactive_file:160072kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121820kB dirty:1752kB writeback:0kB shmem:3920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11788kB pagetables:2344kB sec_pagetables:0kB all_unreclaimable? no [ 364.861168][ T8984] device sit0 left promiscuous mode [ 364.872994][ T8977] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 364.906253][ T8977] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.976811][ T8977] lowmem_reserve[]: 0 2509 2510 2510 2510 [ 365.006492][ T8977] Node 0 DMA32 free:1337704kB boost:0kB min:34540kB low:43172kB high:51804kB reserved_highatomic:0KB active_anon:28348kB inactive_anon:0kB active_file:70384kB inactive_file:160080kB unevictable:1536kB writepending:1760kB present:3129332kB managed:2574528kB mlocked:0kB bounce:0kB free_pcp:25564kB local_pcp:11720kB free_cma:0kB [ 365.076761][ T8977] lowmem_reserve[]: 0 0 1 1 1 [ 365.082054][ T8977] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 365.113805][ T8977] lowmem_reserve[]: 0 0 0 0 0 [ 365.132638][ T8977] Node 1 Normal free:3898288kB boost:0kB min:55344kB low:69180kB high:83016kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:17536kB local_pcp:8128kB free_cma:0kB [ 365.170116][ T8977] lowmem_reserve[]: 0 0 0 0 0 [ 365.175247][ T8977] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 365.190727][ T8977] Node 0 DMA32: 744*4kB (UME) 801*8kB (UM) 914*16kB (UM) 709*32kB (UME) 470*64kB (UME) 79*128kB (UME) 34*256kB (UME) 6*512kB (UM) 4*1024kB (UM) 3*2048kB (UME) 300*4096kB (UM) = 1337704kB [ 365.210424][ T8977] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 365.234463][ T8977] Node 1 Normal: 234*4kB (UE) 59*8kB (UE) 21*16kB (UME) 31*32kB (UME) 28*64kB (UME) 20*128kB (UME) 8*256kB (UME) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3898288kB [ 365.274117][ T8985] device sit0 entered promiscuous mode [ 365.284629][ T8977] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.401509][ T8995] tap0: tun_chr_ioctl cmd 1074025677 [ 365.417416][ T8995] tap0: linktype set to 778 [ 365.430685][ T8977] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 365.440596][ T8977] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.451240][ T8977] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 365.477625][ T8977] 59031 total pagecache pages [ 365.488077][ T8977] 0 pages in swap cache [ 365.492342][ T8977] Free swap = 124996kB [ 365.506788][ T8977] Total swap = 124996kB [ 365.511452][ T8977] 2097051 pages RAM [ 365.515302][ T8977] 0 pages HighMem/MovableOnly [ 365.522567][ T8977] 419818 pages reserved [ 365.546884][ T8977] 0 pages cma reserved [ 365.679112][ T9001] netlink: 'syz.2.1522': attribute type 10 has an invalid length. [ 365.758507][ T9007] FAULT_INJECTION: forcing a failure. [ 365.758507][ T9007] name failslab, interval 1, probability 0, space 0, times 0 [ 365.791689][ T9007] CPU: 1 PID: 9007 Comm: syz.4.1524 Not tainted syzkaller #0 [ 365.799244][ T9007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 365.809435][ T9007] Call Trace: [ 365.812757][ T9007] [ 365.815725][ T9007] dump_stack_lvl+0x188/0x24e [ 365.820455][ T9007] ? show_regs_print_info+0x12/0x12 [ 365.825704][ T9007] ? load_image+0x410/0x410 [ 365.830269][ T9007] ? __lock_acquire+0x7ea0/0x7ea0 [ 365.835348][ T9007] ? __mutex_trylock_common+0x15c/0x260 [ 365.841041][ T9007] should_fail_ex+0x390/0x4c0 [ 365.845869][ T9007] should_failslab+0x5/0x20 [ 365.850425][ T9007] slab_pre_alloc_hook+0x59/0x300 [ 365.855511][ T9007] ? __mutex_lock+0x1ab/0xae0 [ 365.860248][ T9007] ? tracepoint_add_func+0x2f1/0xa10 [ 365.865584][ T9007] __kmem_cache_alloc_node+0x4f/0x270 [ 365.871004][ T9007] ? tracepoint_add_func+0x2f1/0xa10 [ 365.876339][ T9007] __kmalloc+0xa3/0x240 [ 365.880551][ T9007] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 365.887799][ T9007] tracepoint_add_func+0x2f1/0xa10 [ 365.892962][ T9007] ? pcpu_alloc+0x1102/0x16b0 [ 365.897712][ T9007] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 365.904960][ T9007] tracepoint_probe_register+0x5a/0x90 [ 365.910496][ T9007] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 365.917869][ T9007] perf_trace_event_init+0x41e/0x940 [ 365.923233][ T9007] perf_trace_init+0x234/0x2d0 [ 365.928066][ T9007] perf_tp_event_init+0x89/0x110 [ 365.933067][ T9007] perf_try_init_event+0x12b/0x3d0 [ 365.938254][ T9007] ? perf_event_alloc+0xb28/0x21e0 [ 365.943407][ T9007] perf_event_alloc+0xea0/0x21e0 [ 365.948418][ T9007] ? _raw_spin_unlock+0x24/0x40 [ 365.953324][ T9007] ? find_lively_task_by_vpid+0x19/0x290 [ 365.958998][ T9007] ? find_lively_task_by_vpid+0x19/0x290 [ 365.964707][ T9007] __se_sys_perf_event_open+0x701/0x1ec0 [ 365.970383][ T9007] ? __fget_files+0x3fc/0x460 [ 365.975131][ T9007] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 365.980848][ T9007] ? lockdep_hardirqs_on+0x94/0x140 [ 365.986112][ T9007] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 365.991811][ T9007] do_syscall_64+0x4c/0xa0 [ 365.996273][ T9007] ? clear_bhb_loop+0x60/0xb0 [ 366.001001][ T9007] ? clear_bhb_loop+0x60/0xb0 [ 366.005726][ T9007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.011682][ T9007] RIP: 0033:0x7fbf7e19f559 [ 366.016145][ T9007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.035805][ T9007] RSP: 002b:00007fbf7f0a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 366.044301][ T9007] RAX: ffffffffffffffda RBX: 00007fbf7e425fa0 RCX: 00007fbf7e19f559 [ 366.052342][ T9007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 366.060455][ T9007] RBP: 00007fbf7f0a4090 R08: 0000000000000000 R09: 0000000000000000 [ 366.068513][ T9007] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 366.076799][ T9007] R13: 00007fbf7e426038 R14: 00007fbf7e425fa0 R15: 00007fff757e6208 [ 366.084848][ T9007] [ 366.105086][ T9015] tun0: tun_chr_ioctl cmd 1074812118 [ 366.524292][ T9024] FAULT_INJECTION: forcing a failure. [ 366.524292][ T9024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.537809][ T9024] CPU: 0 PID: 9024 Comm: syz.2.1528 Not tainted syzkaller #0 [ 366.545234][ T9024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 366.555451][ T9024] Call Trace: [ 366.558777][ T9024] [ 366.561746][ T9024] dump_stack_lvl+0x188/0x24e [ 366.566493][ T9024] ? show_regs_print_info+0x12/0x12 [ 366.571771][ T9024] ? load_image+0x410/0x410 [ 366.576338][ T9024] ? __lock_acquire+0x7ea0/0x7ea0 [ 366.581430][ T9024] ? snprintf+0xe5/0x140 [ 366.585734][ T9024] should_fail_ex+0x390/0x4c0 [ 366.590475][ T9024] _copy_to_user+0x2c/0x130 [ 366.595034][ T9024] simple_read_from_buffer+0xe3/0x150 [ 366.600467][ T9024] proc_fail_nth_read+0x1a6/0x220 [ 366.605599][ T9024] ? proc_fault_inject_write+0x310/0x310 [ 366.611298][ T9024] ? fsnotify_perm+0x248/0x550 [ 366.616123][ T9024] ? proc_fault_inject_write+0x310/0x310 [ 366.621822][ T9024] vfs_read+0x2db/0x960 [ 366.626048][ T9024] ? kernel_read+0x1e0/0x1e0 [ 366.630695][ T9024] ? __fget_files+0x28/0x460 [ 366.635343][ T9024] ? __fget_files+0x3fc/0x460 [ 366.640091][ T9024] ? __fdget_pos+0x2ae/0x360 [ 366.644756][ T9024] ? ksys_read+0x70/0x260 [ 366.649171][ T9024] ksys_read+0x14d/0x260 [ 366.653475][ T9024] ? vfs_write+0x9a0/0x9a0 [ 366.657953][ T9024] ? lockdep_hardirqs_on+0x94/0x140 [ 366.663235][ T9024] do_syscall_64+0x4c/0xa0 [ 366.667722][ T9024] ? clear_bhb_loop+0x60/0xb0 [ 366.672441][ T9024] ? clear_bhb_loop+0x60/0xb0 [ 366.677167][ T9024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.683291][ T9024] RIP: 0033:0x7ffac1f5fd8e [ 366.687752][ T9024] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 366.707426][ T9024] RSP: 002b:00007ffac2f47fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 366.716282][ T9024] RAX: ffffffffffffffda RBX: 00007ffac2f486c0 RCX: 00007ffac1f5fd8e [ 366.724302][ T9024] RDX: 000000000000000f RSI: 00007ffac2f480a0 RDI: 0000000000000004 [ 366.732323][ T9024] RBP: 00007ffac2f48090 R08: 0000000000000000 R09: 0000000000000000 [ 366.740349][ T9024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.748372][ T9024] R13: 00007ffac2226038 R14: 00007ffac2225fa0 R15: 00007ffff93ab918 [ 366.756423][ T9024] [ 367.058009][ T9025] netlink: 'syz.1.1527': attribute type 10 has an invalid length. [ 367.065914][ T9025] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1527'. [ 367.335616][ T9033] device sit0 left promiscuous mode [ 368.384925][ T9037] device sit0 entered promiscuous mode [ 368.615776][ T9052] device sit0 left promiscuous mode [ 368.736044][ T9055] netlink: 'syz.1.1537': attribute type 3 has an invalid length. [ 368.791315][ T9055] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1537'. [ 369.060197][ T9056] device sit0 entered promiscuous mode [ 369.324904][ T9066] tun0: tun_chr_ioctl cmd 1074812118 [ 369.362401][ T9071] netlink: 'syz.0.1541': attribute type 27 has an invalid length. [ 369.799113][ T9078] netlink: 'syz.3.1543': attribute type 10 has an invalid length. [ 369.807021][ T9078] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1543'. [ 370.220664][ T9086] FAULT_INJECTION: forcing a failure. [ 370.220664][ T9086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.277772][ T9086] CPU: 0 PID: 9086 Comm: syz.3.1545 Not tainted syzkaller #0 [ 370.285240][ T9086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 370.295381][ T9086] Call Trace: [ 370.298702][ T9086] [ 370.301678][ T9086] dump_stack_lvl+0x188/0x24e [ 370.306408][ T9086] ? show_regs_print_info+0x12/0x12 [ 370.311667][ T9086] ? load_image+0x410/0x410 [ 370.316235][ T9086] ? __might_fault+0xa6/0x120 [ 370.320980][ T9086] should_fail_ex+0x390/0x4c0 [ 370.325754][ T9086] copyin+0x1b/0x120 [ 370.329745][ T9086] _copy_from_iter+0x447/0x1130 [ 370.334669][ T9086] ? copyout_mc+0x110/0x110 [ 370.339231][ T9086] ? __virt_addr_valid+0x188/0x540 [ 370.344404][ T9086] ? __virt_addr_valid+0x188/0x540 [ 370.349577][ T9086] ? __virt_addr_valid+0x467/0x540 [ 370.354792][ T9086] ? __check_object_size+0x4f6/0xa70 [ 370.360134][ T9086] udplite_getfrag+0x49/0x90 [ 370.364774][ T9086] __ip_append_data+0x1795/0x38d0 [ 370.369867][ T9086] ? mark_lock+0x94/0x320 [ 370.374278][ T9086] ? udp_sendmsg+0x23d0/0x23d0 [ 370.379106][ T9086] ? ip_setup_cork+0x850/0x850 [ 370.383937][ T9086] ? __local_bh_enable_ip+0x136/0x1c0 [ 370.389371][ T9086] ip_append_data+0x132/0x1a0 [ 370.394135][ T9086] ? udp_sendmsg+0x23d0/0x23d0 [ 370.398955][ T9086] udp_sendmsg+0x5f2/0x23d0 [ 370.403524][ T9086] ? mark_lock+0x94/0x320 [ 370.407930][ T9086] ? udp_sendmsg+0x23d0/0x23d0 [ 370.412773][ T9086] ? udp_cmsg_send+0x350/0x350 [ 370.417602][ T9086] ? __lock_acquire+0x1359/0x7ea0 [ 370.422701][ T9086] ? mark_lock+0x94/0x320 [ 370.427104][ T9086] ? aa_label_sk_perm+0x501/0x6b0 [ 370.432216][ T9086] udpv6_sendmsg+0x960/0x22c0 [ 370.436959][ T9086] ? udpv6_sendmsg+0x22c0/0x22c0 [ 370.441959][ T9086] ? __might_sleep+0xd0/0xd0 [ 370.446603][ T9086] ? udp_v6_early_demux+0xf00/0xf00 [ 370.451890][ T9086] ? aa_af_perm+0x340/0x340 [ 370.456445][ T9086] ? __might_fault+0xa6/0x120 [ 370.461178][ T9086] ? sock_rps_record_flow+0x19/0x3f0 [ 370.466526][ T9086] ? inet_send_prepare+0x57/0x250 [ 370.471601][ T9086] ? inet6_sendmsg+0x5b/0xd0 [ 370.476250][ T9086] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 370.481509][ T9086] ____sys_sendmsg+0x5ed/0x9a0 [ 370.486343][ T9086] ? __sys_sendmsg_sock+0x30/0x30 [ 370.491428][ T9086] ? __import_iovec+0x306/0x510 [ 370.496473][ T9086] ? import_iovec+0x6f/0xa0 [ 370.501047][ T9086] ___sys_sendmsg+0x2a2/0x360 [ 370.505789][ T9086] ? __sys_sendmsg+0x2a0/0x2a0 [ 370.510632][ T9086] ? __lock_acquire+0x7ea0/0x7ea0 [ 370.515747][ T9086] __se_sys_sendmsg+0x1c3/0x2b0 [ 370.520655][ T9086] ? ct_nmi_exit+0x145/0x1c0 [ 370.525306][ T9086] ? __x64_sys_sendmsg+0x80/0x80 [ 370.530382][ T9086] ? lockdep_hardirqs_on+0x94/0x140 [ 370.535680][ T9086] do_syscall_64+0x4c/0xa0 [ 370.540177][ T9086] ? clear_bhb_loop+0x60/0xb0 [ 370.544908][ T9086] ? clear_bhb_loop+0x60/0xb0 [ 370.549671][ T9086] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.555642][ T9086] RIP: 0033:0x7f4fea79f559 [ 370.560103][ T9086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.579765][ T9086] RSP: 002b:00007f4fe89f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.588258][ T9086] RAX: ffffffffffffffda RBX: 00007f4feaa25fa0 RCX: 00007f4fea79f559 [ 370.596369][ T9086] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 370.604397][ T9086] RBP: 00007f4fe89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 370.612422][ T9086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.620475][ T9086] R13: 00007f4feaa26038 R14: 00007f4feaa25fa0 R15: 00007ffc66282118 [ 370.628612][ T9086] [ 370.990787][ T9110] netlink: 'syz.1.1552': attribute type 10 has an invalid length. [ 371.161731][ T9109] netlink: 'syz.4.1551': attribute type 3 has an invalid length. [ 371.227931][ T9109] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1551'. [ 371.571463][ T9116] netlink: 'syz.1.1563': attribute type 10 has an invalid length. [ 371.703645][ T9118] netlink: 'syz.4.1553': attribute type 3 has an invalid length. [ 371.732592][ T9118] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1553'. [ 372.043740][ T9129] FAULT_INJECTION: forcing a failure. [ 372.043740][ T9129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.090694][ T9129] CPU: 0 PID: 9129 Comm: syz.4.1557 Not tainted syzkaller #0 [ 372.098151][ T9129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 372.108251][ T9129] Call Trace: [ 372.111585][ T9129] [ 372.114558][ T9129] dump_stack_lvl+0x188/0x24e [ 372.119473][ T9129] ? show_regs_print_info+0x12/0x12 [ 372.124734][ T9129] ? load_image+0x410/0x410 [ 372.129322][ T9129] ? __lock_acquire+0x7ea0/0x7ea0 [ 372.134424][ T9129] ? snprintf+0xe5/0x140 [ 372.138726][ T9129] should_fail_ex+0x390/0x4c0 [ 372.143570][ T9129] _copy_to_user+0x2c/0x130 [ 372.148134][ T9129] simple_read_from_buffer+0xe3/0x150 [ 372.153581][ T9129] proc_fail_nth_read+0x1a6/0x220 [ 372.158683][ T9129] ? proc_fault_inject_write+0x310/0x310 [ 372.164386][ T9129] ? fsnotify_perm+0x248/0x550 [ 372.169219][ T9129] ? proc_fault_inject_write+0x310/0x310 [ 372.171043][ T9130] netlink: 'syz.2.1556': attribute type 10 has an invalid length. [ 372.174997][ T9129] vfs_read+0x2db/0x960 [ 372.175045][ T9129] ? kernel_read+0x1e0/0x1e0 [ 372.175078][ T9129] ? __fget_files+0x28/0x460 [ 372.175110][ T9129] ? __fget_files+0x3fc/0x460 [ 372.175150][ T9129] ? __fdget_pos+0x2ae/0x360 [ 372.175180][ T9129] ? ksys_read+0x70/0x260 [ 372.175215][ T9129] ksys_read+0x14d/0x260 [ 372.214410][ T9129] ? vfs_write+0x9a0/0x9a0 [ 372.218931][ T9129] ? lockdep_hardirqs_on+0x94/0x140 [ 372.224229][ T9129] do_syscall_64+0x4c/0xa0 [ 372.228694][ T9129] ? clear_bhb_loop+0x60/0xb0 [ 372.233441][ T9129] ? clear_bhb_loop+0x60/0xb0 [ 372.234885][ T9130] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1556'. [ 372.238153][ T9129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.238191][ T9129] RIP: 0033:0x7fbf7e15fd8e [ 372.238211][ T9129] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 372.238230][ T9129] RSP: 002b:00007fbf7f0a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 372.238253][ T9129] RAX: ffffffffffffffda RBX: 00007fbf7f0a46c0 RCX: 00007fbf7e15fd8e [ 372.238269][ T9129] RDX: 000000000000000f RSI: 00007fbf7f0a40a0 RDI: 0000000000000005 [ 372.238282][ T9129] RBP: 00007fbf7f0a4090 R08: 0000000000000000 R09: 0000000000000000 [ 372.238297][ T9129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.238310][ T9129] R13: 00007fbf7e426038 R14: 00007fbf7e425fa0 R15: 00007fff757e6208 [ 372.238342][ T9129] [ 372.850629][ T9148] netlink: 'syz.2.1564': attribute type 3 has an invalid length. [ 372.880699][ T9148] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1564'. [ 373.226575][ T9155] netlink: 'syz.0.1566': attribute type 10 has an invalid length. [ 373.648997][ T9166] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1570'. [ 374.026818][ T9158] device sit0 left promiscuous mode [ 374.226560][ T9162] device sit0 entered promiscuous mode [ 374.329422][ T9168] device sit0 left promiscuous mode [ 374.427834][ T9169] device sit0 entered promiscuous mode [ 374.615723][ T9178] device sit0 left promiscuous mode [ 375.077774][ T9181] device sit0 entered promiscuous mode [ 375.890214][ T9206] device sit0 left promiscuous mode [ 376.589338][ T9214] validate_nla: 1 callbacks suppressed [ 376.589358][ T9214] netlink: 'syz.1.1582': attribute type 10 has an invalid length. [ 376.808761][ T9214] device nlmon0 entered promiscuous mode [ 376.827904][ T9214] team0: Device nlmon0 is of different type [ 376.863630][ T9215] device sit0 entered promiscuous mode [ 376.945178][ T9224] device sit0 left promiscuous mode [ 377.062007][ T9225] device sit0 entered promiscuous mode [ 377.150919][ T9234] FAULT_INJECTION: forcing a failure. [ 377.150919][ T9234] name failslab, interval 1, probability 0, space 0, times 0 [ 377.184252][ T9234] CPU: 1 PID: 9234 Comm: syz.0.1587 Not tainted syzkaller #0 [ 377.191721][ T9234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 377.201829][ T9234] Call Trace: [ 377.205503][ T9234] [ 377.208472][ T9234] dump_stack_lvl+0x188/0x24e [ 377.213201][ T9234] ? show_regs_print_info+0x12/0x12 [ 377.218457][ T9234] ? load_image+0x410/0x410 [ 377.223024][ T9234] ? __might_sleep+0xd0/0xd0 [ 377.227831][ T9234] ? __lock_acquire+0x7ea0/0x7ea0 [ 377.232913][ T9234] should_fail_ex+0x390/0x4c0 [ 377.237662][ T9234] should_failslab+0x5/0x20 [ 377.242217][ T9234] slab_pre_alloc_hook+0x59/0x300 [ 377.247310][ T9234] ? tomoyo_encode+0x28a/0x550 [ 377.252134][ T9234] __kmem_cache_alloc_node+0x4f/0x270 [ 377.257651][ T9234] ? tomoyo_encode+0x28a/0x550 [ 377.262471][ T9234] __kmalloc+0xa3/0x240 [ 377.266679][ T9234] tomoyo_encode+0x28a/0x550 [ 377.271330][ T9234] tomoyo_realpath_from_path+0x578/0x5c0 [ 377.277117][ T9234] ? tomoyo_domain+0xd2/0x120 [ 377.282038][ T9234] ? tomoyo_path_number_perm+0x205/0x650 [ 377.287730][ T9234] tomoyo_path_number_perm+0x22f/0x650 [ 377.293280][ T9234] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 377.298792][ T9234] ? ksys_write+0x1ce/0x260 [ 377.303355][ T9234] ? common_file_perm+0x171/0x1c0 [ 377.308474][ T9234] ? __fget_files+0x28/0x460 [ 377.313126][ T9234] security_file_ioctl+0x6c/0xa0 [ 377.318122][ T9234] __se_sys_ioctl+0x48/0x170 [ 377.322767][ T9234] do_syscall_64+0x4c/0xa0 [ 377.327220][ T9234] ? clear_bhb_loop+0x60/0xb0 [ 377.331965][ T9234] ? clear_bhb_loop+0x60/0xb0 [ 377.336733][ T9234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.342684][ T9234] RIP: 0033:0x7f1362f9f559 [ 377.347140][ T9234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.366803][ T9234] RSP: 002b:00007f1363e2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.375274][ T9234] RAX: ffffffffffffffda RBX: 00007f1363225fa0 RCX: 00007f1362f9f559 [ 377.383293][ T9234] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000003 [ 377.391315][ T9234] RBP: 00007f1363e2a090 R08: 0000000000000000 R09: 0000000000000000 [ 377.399357][ T9234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.407398][ T9234] R13: 00007f1363226038 R14: 00007f1363225fa0 R15: 00007ffe7634cf28 [ 377.415455][ T9234] [ 377.520454][ T9234] ERROR: Out of memory at tomoyo_realpath_from_path. [ 377.585539][ T9245] FAULT_INJECTION: forcing a failure. [ 377.585539][ T9245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.599045][ T9236] device sit0 left promiscuous mode [ 377.609504][ T9245] CPU: 1 PID: 9245 Comm: syz.1.1592 Not tainted syzkaller #0 [ 377.616951][ T9245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 377.627059][ T9245] Call Trace: [ 377.630372][ T9245] [ 377.633347][ T9245] dump_stack_lvl+0x188/0x24e [ 377.638095][ T9245] ? show_regs_print_info+0x12/0x12 [ 377.643901][ T9245] ? load_image+0x410/0x410 [ 377.648524][ T9245] ? __lock_acquire+0x7ea0/0x7ea0 [ 377.653635][ T9245] should_fail_ex+0x390/0x4c0 [ 377.658424][ T9245] _copy_from_user+0x2c/0x170 [ 377.663192][ T9245] bpf_prog_test_run_skb+0x263/0x18e0 [ 377.668636][ T9245] ? __fget_files+0x28/0x460 [ 377.673320][ T9245] ? __fget_files+0x3fc/0x460 [ 377.678086][ T9245] ? cpu_online+0xa0/0xa0 [ 377.682493][ T9245] bpf_prog_test_run+0x31c/0x390 [ 377.687510][ T9245] __sys_bpf+0x62b/0x780 [ 377.691911][ T9245] ? bpf_link_show_fdinfo+0x380/0x380 [ 377.697369][ T9245] ? lock_chain_count+0x20/0x20 [ 377.702332][ T9245] __x64_sys_bpf+0x78/0x90 [ 377.706831][ T9245] do_syscall_64+0x4c/0xa0 [ 377.711343][ T9245] ? clear_bhb_loop+0x60/0xb0 [ 377.716077][ T9245] ? clear_bhb_loop+0x60/0xb0 [ 377.720832][ T9245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.726848][ T9245] RIP: 0033:0x7fa11939f559 [ 377.731335][ T9245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.751269][ T9245] RSP: 002b:00007fa11a300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.759763][ T9245] RAX: ffffffffffffffda RBX: 00007fa119625fa0 RCX: 00007fa11939f559 [ 377.767799][ T9245] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 377.775836][ T9245] RBP: 00007fa11a300090 R08: 0000000000000000 R09: 0000000000000000 [ 377.783873][ T9245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.791929][ T9245] R13: 00007fa119626038 R14: 00007fa119625fa0 R15: 00007ffe83647fd8 [ 377.799988][ T9245] [ 377.885753][ T9237] device sit0 entered promiscuous mode [ 378.381344][ T9263] device sit0 left promiscuous mode [ 378.472448][ T9263] device sit0 entered promiscuous mode [ 378.573450][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.579934][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.974361][ T9272] netlink: 'syz.1.1597': attribute type 3 has an invalid length. [ 379.007816][ T9272] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1597'. [ 379.236066][ T9277] device sit0 left promiscuous mode [ 379.316050][ T9281] FAULT_INJECTION: forcing a failure. [ 379.316050][ T9281] name failslab, interval 1, probability 0, space 0, times 0 [ 379.418155][ T9281] CPU: 0 PID: 9281 Comm: syz.1.1602 Not tainted syzkaller #0 [ 379.425699][ T9281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 379.435809][ T9281] Call Trace: [ 379.439173][ T9281] [ 379.442145][ T9281] dump_stack_lvl+0x188/0x24e [ 379.446881][ T9281] ? show_regs_print_info+0x12/0x12 [ 379.452136][ T9281] ? load_image+0x410/0x410 [ 379.456695][ T9281] ? __might_sleep+0xd0/0xd0 [ 379.461332][ T9281] ? __lock_acquire+0x7ea0/0x7ea0 [ 379.466427][ T9281] should_fail_ex+0x390/0x4c0 [ 379.471170][ T9281] should_failslab+0x5/0x20 [ 379.475724][ T9281] slab_pre_alloc_hook+0x59/0x300 [ 379.480817][ T9281] kmem_cache_alloc_node+0x5a/0x310 [ 379.486106][ T9281] ? __alloc_skb+0xf9/0x7d0 [ 379.490670][ T9281] __alloc_skb+0xf9/0x7d0 [ 379.495087][ T9281] alloc_skb_with_frags+0xa7/0x710 [ 379.500256][ T9281] ? aa_label_sk_perm+0x501/0x6b0 [ 379.505343][ T9281] sock_alloc_send_pskb+0x87f/0x9a0 [ 379.510621][ T9281] ? sock_kzfree_s+0x50/0x50 [ 379.515266][ T9281] ? perf_trace_lock+0xf8/0x390 [ 379.520173][ T9281] ? apparmor_socket_getpeersec_dgram+0x5/0x10 [ 379.526391][ T9281] ? security_socket_getpeersec_dgram+0x9d/0xc0 [ 379.532699][ T9281] unix_stream_sendmsg+0x431/0xa70 [ 379.537905][ T9281] ? unix_show_fdinfo+0x2c0/0x2c0 [ 379.543007][ T9281] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 379.549493][ T9281] ? apparmor_socket_sendmsg+0x8a/0x330 [ 379.555108][ T9281] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 379.560438][ T9281] ? security_socket_sendmsg+0x7c/0xa0 [ 379.565993][ T9281] ? unix_show_fdinfo+0x2c0/0x2c0 [ 379.571077][ T9281] ____sys_sendmsg+0x5ed/0x9a0 [ 379.575916][ T9281] ? __sys_sendmsg_sock+0x30/0x30 [ 379.581003][ T9281] ? __import_iovec+0x306/0x510 [ 379.585928][ T9281] ? import_iovec+0x6f/0xa0 [ 379.590501][ T9281] ___sys_sendmsg+0x2a2/0x360 [ 379.595254][ T9281] ? __sys_sendmsg+0x2a0/0x2a0 [ 379.600104][ T9281] ? __lock_acquire+0x7ea0/0x7ea0 [ 379.605217][ T9281] __se_sys_sendmsg+0x1c3/0x2b0 [ 379.610135][ T9281] ? __x64_sys_sendmsg+0x80/0x80 [ 379.615145][ T9281] ? lockdep_hardirqs_on+0x94/0x140 [ 379.620420][ T9281] do_syscall_64+0x4c/0xa0 [ 379.624916][ T9281] ? clear_bhb_loop+0x60/0xb0 [ 379.629648][ T9281] ? clear_bhb_loop+0x60/0xb0 [ 379.634377][ T9281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 379.640340][ T9281] RIP: 0033:0x7fa11939f559 [ 379.644810][ T9281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.664480][ T9281] RSP: 002b:00007fa11a300028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.672960][ T9281] RAX: ffffffffffffffda RBX: 00007fa119625fa0 RCX: 00007fa11939f559 [ 379.680990][ T9281] RDX: 0000000000000003 RSI: 00002000000004c0 RDI: 0000000000000003 [ 379.689018][ T9281] RBP: 00007fa11a300090 R08: 0000000000000000 R09: 0000000000000000 [ 379.697046][ T9281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.705086][ T9281] R13: 00007fa119626038 R14: 00007fa119625fa0 R15: 00007ffe83647fd8 [ 379.713133][ T9281] [ 379.832496][ T9280] device sit0 entered promiscuous mode [ 379.931885][ T9285] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1604'. [ 380.600476][ T9295] FAULT_INJECTION: forcing a failure. [ 380.600476][ T9295] name failslab, interval 1, probability 0, space 0, times 0 [ 380.637914][ T9295] CPU: 0 PID: 9295 Comm: syz.2.1605 Not tainted syzkaller #0 [ 380.645502][ T9295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 380.655641][ T9295] Call Trace: [ 380.659013][ T9295] [ 380.662132][ T9295] dump_stack_lvl+0x188/0x24e [ 380.666938][ T9295] ? show_regs_print_info+0x12/0x12 [ 380.672226][ T9295] ? load_image+0x410/0x410 [ 380.676832][ T9295] ? __might_sleep+0xd0/0xd0 [ 380.681596][ T9295] ? __lock_acquire+0x7ea0/0x7ea0 [ 380.686724][ T9295] should_fail_ex+0x390/0x4c0 [ 380.691511][ T9295] should_failslab+0x5/0x20 [ 380.696086][ T9295] slab_pre_alloc_hook+0x59/0x300 [ 380.701192][ T9295] ? __get_vm_area_node+0x122/0x330 [ 380.706509][ T9295] __kmem_cache_alloc_node+0x4f/0x270 [ 380.712012][ T9295] ? __get_vm_area_node+0x122/0x330 [ 380.717391][ T9295] kmalloc_node_trace+0x22/0xe0 [ 380.722326][ T9295] __get_vm_area_node+0x122/0x330 [ 380.727434][ T9295] ? __local_bh_enable_ip+0x136/0x1c0 [ 380.732906][ T9295] __vmalloc_node_range+0x357/0x1380 [ 380.738264][ T9295] ? netlink_sendmsg+0x5ec/0xbd0 [ 380.743332][ T9295] ? netlink_insert+0x28d/0x13b0 [ 380.748382][ T9295] ? free_vm_area+0x50/0x50 [ 380.752998][ T9295] ? netlink_sendmsg+0x5ec/0xbd0 [ 380.758111][ T9295] vmalloc+0x75/0x80 [ 380.762085][ T9295] ? netlink_sendmsg+0x5ec/0xbd0 [ 380.767129][ T9295] netlink_sendmsg+0x5ec/0xbd0 [ 380.772004][ T9295] ? netlink_getsockopt+0x550/0x550 [ 380.777300][ T9295] ? apparmor_socket_sendmsg+0x8a/0x330 [ 380.782938][ T9295] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 380.788464][ T9295] ? security_socket_sendmsg+0x7c/0xa0 [ 380.794004][ T9295] ? netlink_getsockopt+0x550/0x550 [ 380.799303][ T9295] ____sys_sendmsg+0x5ed/0x9a0 [ 380.804191][ T9295] ? __sys_sendmsg_sock+0x30/0x30 [ 380.809306][ T9295] ? __import_iovec+0x306/0x510 [ 380.814282][ T9295] ? import_iovec+0x6f/0xa0 [ 380.818905][ T9295] ___sys_sendmsg+0x2a2/0x360 [ 380.823698][ T9295] ? __sys_sendmsg+0x2a0/0x2a0 [ 380.828628][ T9295] ? __lock_acquire+0x7ea0/0x7ea0 [ 380.833828][ T9295] __se_sys_sendmsg+0x1c3/0x2b0 [ 380.838798][ T9295] ? ct_nmi_exit+0x145/0x1c0 [ 380.843480][ T9295] ? __x64_sys_sendmsg+0x80/0x80 [ 380.848561][ T9295] ? lockdep_hardirqs_on+0x94/0x140 [ 380.853867][ T9295] do_syscall_64+0x4c/0xa0 [ 380.858352][ T9295] ? clear_bhb_loop+0x60/0xb0 [ 380.863098][ T9295] ? clear_bhb_loop+0x60/0xb0 [ 380.867871][ T9295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.873943][ T9295] RIP: 0033:0x7ffac1f9f559 [ 380.878471][ T9295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.898185][ T9295] RSP: 002b:00007ffac2f48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.906687][ T9295] RAX: ffffffffffffffda RBX: 00007ffac2225fa0 RCX: 00007ffac1f9f559 [ 380.914736][ T9295] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 380.922783][ T9295] RBP: 00007ffac2f48090 R08: 0000000000000000 R09: 0000000000000000 [ 380.930857][ T9295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.938900][ T9295] R13: 00007ffac2226038 R14: 00007ffac2225fa0 R15: 00007ffff93ab918 [ 380.947006][ T9295] [ 381.099667][ T9295] syz.2.1605: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 381.155481][ T9295] CPU: 1 PID: 9295 Comm: syz.2.1605 Not tainted syzkaller #0 [ 381.163067][ T9295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 381.173329][ T9295] Call Trace: [ 381.176695][ T9295] [ 381.179707][ T9295] dump_stack_lvl+0x188/0x24e [ 381.184469][ T9295] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 381.190979][ T9295] ? show_regs_print_info+0x12/0x12 [ 381.196270][ T9295] ? load_image+0x410/0x410 [ 381.200884][ T9295] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 381.207403][ T9295] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 381.214017][ T9295] warn_alloc+0x242/0x330 [ 381.218440][ T9295] ? __get_vm_area_node+0x122/0x330 [ 381.223722][ T9295] ? zone_watermark_ok_safe+0x270/0x270 [ 381.229331][ T9295] ? rcu_is_watching+0x11/0xa0 [ 381.234168][ T9295] ? __get_vm_area_node+0x318/0x330 [ 381.239456][ T9295] ? __local_bh_enable_ip+0x136/0x1c0 [ 381.244900][ T9295] __vmalloc_node_range+0x37c/0x1380 [ 381.250293][ T9295] ? netlink_insert+0x28d/0x13b0 [ 381.255347][ T9295] ? free_vm_area+0x50/0x50 [ 381.259953][ T9295] ? netlink_sendmsg+0x5ec/0xbd0 [ 381.264954][ T9295] vmalloc+0x75/0x80 [ 381.268910][ T9295] ? netlink_sendmsg+0x5ec/0xbd0 [ 381.273912][ T9295] netlink_sendmsg+0x5ec/0xbd0 [ 381.278765][ T9295] ? netlink_getsockopt+0x550/0x550 [ 381.284025][ T9295] ? apparmor_socket_sendmsg+0x8a/0x330 [ 381.289642][ T9295] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 381.294972][ T9295] ? security_socket_sendmsg+0x7c/0xa0 [ 381.300509][ T9295] ? netlink_getsockopt+0x550/0x550 [ 381.305772][ T9295] ____sys_sendmsg+0x5ed/0x9a0 [ 381.310616][ T9295] ? __sys_sendmsg_sock+0x30/0x30 [ 381.315692][ T9295] ? __import_iovec+0x306/0x510 [ 381.320652][ T9295] ? import_iovec+0x6f/0xa0 [ 381.325229][ T9295] ___sys_sendmsg+0x2a2/0x360 [ 381.329993][ T9295] ? __sys_sendmsg+0x2a0/0x2a0 [ 381.334868][ T9295] ? __lock_acquire+0x7ea0/0x7ea0 [ 381.340044][ T9295] __se_sys_sendmsg+0x1c3/0x2b0 [ 381.344942][ T9295] ? ct_nmi_exit+0x145/0x1c0 [ 381.349588][ T9295] ? __x64_sys_sendmsg+0x80/0x80 [ 381.354621][ T9295] ? lockdep_hardirqs_on+0x94/0x140 [ 381.359911][ T9295] do_syscall_64+0x4c/0xa0 [ 381.364369][ T9295] ? clear_bhb_loop+0x60/0xb0 [ 381.369097][ T9295] ? clear_bhb_loop+0x60/0xb0 [ 381.373828][ T9295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 381.379782][ T9295] RIP: 0033:0x7ffac1f9f559 [ 381.384263][ T9295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.403933][ T9295] RSP: 002b:00007ffac2f48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.412393][ T9295] RAX: ffffffffffffffda RBX: 00007ffac2225fa0 RCX: 00007ffac1f9f559 [ 381.420415][ T9295] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 381.428422][ T9295] RBP: 00007ffac2f48090 R08: 0000000000000000 R09: 0000000000000000 [ 381.436527][ T9295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.444540][ T9295] R13: 00007ffac2226038 R14: 00007ffac2225fa0 R15: 00007ffff93ab918 [ 381.452603][ T9295] [ 381.507761][ T9295] Mem-Info: [ 381.510993][ T9295] active_anon:9026 inactive_anon:0 isolated_anon:0 [ 381.510993][ T9295] active_file:17596 inactive_file:40077 isolated_file:0 [ 381.510993][ T9295] unevictable:768 dirty:330 writeback:0 [ 381.510993][ T9295] slab_reclaimable:21363 slab_unreclaimable:95930 [ 381.510993][ T9295] mapped:32481 shmem:3195 pagetables:639 [ 381.510993][ T9295] sec_pagetables:0 bounce:0 [ 381.510993][ T9295] kernel_misc_reclaimable:0 [ 381.510993][ T9295] free:1311445 free_pcp:9795 free_cma:0 [ 381.569612][ T9295] Node 0 active_anon:34304kB inactive_anon:0kB active_file:70384kB inactive_file:160104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128124kB dirty:1316kB writeback:0kB shmem:9544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11704kB pagetables:2456kB sec_pagetables:0kB all_unreclaimable? no [ 381.677869][ T9295] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 381.741857][ T9295] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 381.773768][ T9295] lowmem_reserve[]: 0 2509 2510 2510 2510 [ 381.776070][ T9302] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1608'. [ 381.788185][ T9295] Node 0 DMA32 free:1331652kB boost:0kB min:34540kB low:43172kB high:51804kB reserved_highatomic:0KB active_anon:28404kB inactive_anon:0kB active_file:70384kB inactive_file:160104kB unevictable:1536kB writepending:1316kB present:3129332kB managed:2574528kB mlocked:0kB bounce:0kB free_pcp:29828kB local_pcp:13156kB free_cma:0kB [ 381.834762][ T9295] lowmem_reserve[]: 0 0 1 1 1 [ 381.842970][ T9295] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 381.936435][ T9304] device sit0 left promiscuous mode [ 382.094269][ T9295] lowmem_reserve[]: 0 0 0 0 0 [ 382.146516][ T9295] Node 1 Normal free:3898544kB boost:0kB min:55344kB low:69180kB high:83016kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:17280kB local_pcp:8128kB free_cma:0kB [ 382.287593][ T9295] lowmem_reserve[]: 0 0 0 0 0 [ 382.292429][ T9295] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 382.441614][ T9307] device sit0 entered promiscuous mode [ 382.447639][ T9295] Node 0 DMA32: 1851*4kB (UME) 914*8kB (UME) 1427*16kB (UME) 951*32kB (UME) 339*64kB (UME) 33*128kB (UE) 11*256kB (UE) 5*512kB (UM) 1*1024kB (U) 3*2048kB (UME) 299*4096kB (UM) = 1331148kB [ 382.551442][ T9295] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 382.572367][ T9295] Node 1 Normal: 234*4kB (UE) 59*8kB (UE) 21*16kB (UME) 31*32kB (UME) 28*64kB (UME) 20*128kB (UME) 9*256kB (UME) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3898544kB [ 382.593374][ T9295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 382.603298][ T9295] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 382.612927][ T9295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 382.627923][ T9295] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 382.642219][ T9295] 59487 total pagecache pages [ 382.650585][ T9295] 0 pages in swap cache [ 382.657386][ T9295] Free swap = 124996kB [ 382.665410][ T9295] Total swap = 124996kB [ 382.672427][ T9295] 2097051 pages RAM [ 382.691190][ T9295] 0 pages HighMem/MovableOnly [ 382.707776][ T9295] 419818 pages reserved [ 382.719409][ T9295] 0 pages cma reserved [ 382.732506][ T9310] netlink: 'syz.3.1610': attribute type 16 has an invalid length. [ 382.757714][ T9310] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1610'. [ 382.787468][ T9309] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.1610'. [ 383.104682][ T9315] netlink: 'syz.4.1613': attribute type 3 has an invalid length. [ 383.136314][ T9315] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1613'. [ 383.253797][ T9321] netlink: 'syz.3.1615': attribute type 10 has an invalid length. [ 383.283986][ T9321] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1615'. [ 383.505307][ T9326] device sit0 left promiscuous mode [ 383.621291][ T9335] FAULT_INJECTION: forcing a failure. [ 383.621291][ T9335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.677905][ T9335] CPU: 0 PID: 9335 Comm: syz.3.1619 Not tainted syzkaller #0 [ 383.685381][ T9335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 383.695484][ T9335] Call Trace: [ 383.698805][ T9335] [ 383.701781][ T9335] dump_stack_lvl+0x188/0x24e [ 383.706510][ T9335] ? show_regs_print_info+0x12/0x12 [ 383.711759][ T9335] ? load_image+0x410/0x410 [ 383.716324][ T9335] ? __lock_acquire+0x7ea0/0x7ea0 [ 383.721502][ T9335] should_fail_ex+0x390/0x4c0 [ 383.726273][ T9335] _copy_from_user+0x2c/0x170 [ 383.731009][ T9335] get_user_ifreq+0x67/0x170 [ 383.735665][ T9335] sock_ioctl+0x61f/0x700 [ 383.740153][ T9335] ? sock_poll+0x420/0x420 [ 383.744647][ T9335] ? bpf_lsm_file_ioctl+0x5/0x10 [ 383.749633][ T9335] ? security_file_ioctl+0x7c/0xa0 [ 383.754799][ T9335] ? sock_poll+0x420/0x420 [ 383.759277][ T9335] __se_sys_ioctl+0xfa/0x170 [ 383.763925][ T9335] do_syscall_64+0x4c/0xa0 [ 383.768386][ T9335] ? clear_bhb_loop+0x60/0xb0 [ 383.773114][ T9335] ? clear_bhb_loop+0x60/0xb0 [ 383.777841][ T9335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.783794][ T9335] RIP: 0033:0x7f4fea79f559 [ 383.788277][ T9335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.807929][ T9335] RSP: 002b:00007f4fe89f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.816385][ T9335] RAX: ffffffffffffffda RBX: 00007f4feaa25fa0 RCX: 00007f4fea79f559 [ 383.824401][ T9335] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 383.832393][ T9335] RBP: 00007f4fe89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 383.840392][ T9335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.848410][ T9335] R13: 00007f4feaa26038 R14: 00007f4feaa25fa0 R15: 00007ffc66282118 [ 383.856509][ T9335] [ 383.863268][ T9332] netlink: 'syz.2.1618': attribute type 29 has an invalid length. [ 383.891154][ T9329] netlink: 'syz.2.1618': attribute type 29 has an invalid length. [ 384.320273][ T9331] device sit0 entered promiscuous mode [ 384.444763][ T9332] netlink: 'syz.2.1618': attribute type 29 has an invalid length. [ 384.458070][ T9337] can: request_module (can-proto-0) failed. [ 384.482178][ T9336] netlink: 'syz.2.1618': attribute type 29 has an invalid length. [ 384.586385][ T9333] netlink: 'syz.2.1618': attribute type 29 has an invalid length. [ 384.607319][ T9345] netlink: 'syz.4.1620': attribute type 10 has an invalid length. [ 384.696806][ T9345] team0: Device nlmon0 is of different type [ 385.007130][ T9362] netlink: 'syz.2.1628': attribute type 3 has an invalid length. [ 385.019491][ T9363] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1627'. [ 385.056017][ T9362] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1628'. [ 385.074979][ T9359] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.1627'. [ 385.415727][ T9365] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1629'. [ 385.689908][ T9380] device sit0 left promiscuous mode [ 386.136575][ T9383] device sit0 entered promiscuous mode [ 386.456046][ T9388] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1636'. [ 387.250493][ T9406] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1642'. [ 387.618483][ T9415] bridge0: port 4(hsr0) entered disabled state [ 387.624965][ T9415] bridge0: port 3(team0) entered disabled state [ 387.631688][ T9415] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.696993][ T9415] device bridge0 left promiscuous mode [ 387.804607][ T9417] validate_nla: 3 callbacks suppressed [ 387.804628][ T9417] netlink: 'syz.1.1647': attribute type 3 has an invalid length. [ 387.877816][ T9417] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1647'. [ 388.188793][ T9423] device sit0 left promiscuous mode [ 388.528449][ T9437] FAULT_INJECTION: forcing a failure. [ 388.528449][ T9437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.609311][ T9437] CPU: 0 PID: 9437 Comm: syz.1.1654 Not tainted syzkaller #0 [ 388.616799][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 388.626894][ T9437] Call Trace: [ 388.630203][ T9437] [ 388.633162][ T9437] dump_stack_lvl+0x188/0x24e [ 388.637869][ T9437] ? show_regs_print_info+0x12/0x12 [ 388.643096][ T9437] ? load_image+0x410/0x410 [ 388.647631][ T9437] ? __lock_acquire+0x7ea0/0x7ea0 [ 388.652685][ T9437] ? snprintf+0xe5/0x140 [ 388.656958][ T9437] should_fail_ex+0x390/0x4c0 [ 388.661676][ T9437] _copy_to_user+0x2c/0x130 [ 388.666217][ T9437] simple_read_from_buffer+0xe3/0x150 [ 388.671623][ T9437] proc_fail_nth_read+0x1a6/0x220 [ 388.676942][ T9437] ? proc_fault_inject_write+0x310/0x310 [ 388.682613][ T9437] ? fsnotify_perm+0x248/0x550 [ 388.687405][ T9437] ? proc_fault_inject_write+0x310/0x310 [ 388.693065][ T9437] vfs_read+0x2db/0x960 [ 388.697263][ T9437] ? kernel_read+0x1e0/0x1e0 [ 388.701889][ T9437] ? __fget_files+0x28/0x460 [ 388.706512][ T9437] ? __fget_files+0x3fc/0x460 [ 388.711237][ T9437] ? __fdget_pos+0x2ae/0x360 [ 388.715860][ T9437] ? ksys_read+0x70/0x260 [ 388.720230][ T9437] ksys_read+0x14d/0x260 [ 388.724506][ T9437] ? vfs_write+0x9a0/0x9a0 [ 388.728963][ T9437] ? lockdep_hardirqs_on+0x94/0x140 [ 388.734198][ T9437] do_syscall_64+0x4c/0xa0 [ 388.738724][ T9437] ? clear_bhb_loop+0x60/0xb0 [ 388.743514][ T9437] ? clear_bhb_loop+0x60/0xb0 [ 388.748220][ T9437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.754234][ T9437] RIP: 0033:0x7fa11935fd8e [ 388.758676][ T9437] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 388.778312][ T9437] RSP: 002b:00007fa11a2fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 388.786761][ T9437] RAX: ffffffffffffffda RBX: 00007fa11a3006c0 RCX: 00007fa11935fd8e [ 388.794754][ T9437] RDX: 000000000000000f RSI: 00007fa11a3000a0 RDI: 0000000000000005 [ 388.802750][ T9437] RBP: 00007fa11a300090 R08: 0000000000000000 R09: 0000000000000000 [ 388.810760][ T9437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.818761][ T9437] R13: 00007fa119626038 R14: 00007fa119625fa0 R15: 00007ffe83647fd8 [ 388.826772][ T9437] [ 389.047010][ T9426] device sit0 entered promiscuous mode [ 389.698436][ T9448] FAULT_INJECTION: forcing a failure. [ 389.698436][ T9448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.733219][ T9448] CPU: 0 PID: 9448 Comm: syz.4.1658 Not tainted syzkaller #0 [ 389.740692][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 389.750805][ T9448] Call Trace: [ 389.754135][ T9448] [ 389.757099][ T9448] dump_stack_lvl+0x188/0x24e [ 389.761832][ T9448] ? show_regs_print_info+0x12/0x12 [ 389.767101][ T9448] ? load_image+0x410/0x410 [ 389.771678][ T9448] ? __lock_acquire+0x7ea0/0x7ea0 [ 389.776766][ T9448] should_fail_ex+0x390/0x4c0 [ 389.781506][ T9448] _copy_from_user+0x2c/0x170 [ 389.786241][ T9448] bpf_test_init+0xde/0x140 [ 389.790810][ T9448] bpf_prog_test_run_xdp+0x488/0xf80 [ 389.796143][ T9448] ? __lock_acquire+0x7ea0/0x7ea0 [ 389.801238][ T9448] ? dev_put+0x80/0x80 [ 389.805410][ T9448] ? dev_put+0x80/0x80 [ 389.809527][ T9448] bpf_prog_test_run+0x31c/0x390 [ 389.814527][ T9448] __sys_bpf+0x62b/0x780 [ 389.818814][ T9448] ? bpf_link_show_fdinfo+0x380/0x380 [ 389.824235][ T9448] ? lock_chain_count+0x20/0x20 [ 389.829151][ T9448] __x64_sys_bpf+0x78/0x90 [ 389.833606][ T9448] do_syscall_64+0x4c/0xa0 [ 389.838051][ T9448] ? clear_bhb_loop+0x60/0xb0 [ 389.842755][ T9448] ? clear_bhb_loop+0x60/0xb0 [ 389.847464][ T9448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.853397][ T9448] RIP: 0033:0x7fbf7e19f559 [ 389.857864][ T9448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.877684][ T9448] RSP: 002b:00007fbf7f0a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 389.886142][ T9448] RAX: ffffffffffffffda RBX: 00007fbf7e425fa0 RCX: 00007fbf7e19f559 [ 389.894155][ T9448] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 389.902164][ T9448] RBP: 00007fbf7f0a4090 R08: 0000000000000000 R09: 0000000000000000 [ 389.910245][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.918242][ T9448] R13: 00007fbf7e426038 R14: 00007fbf7e425fa0 R15: 00007fff757e6208 [ 389.926256][ T9448] [ 392.136915][ T9483] device sit0 left promiscuous mode [ 392.745193][ T9485] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.1670'. [ 392.787264][ T9486] device sit0 entered promiscuous mode [ 393.388529][ T9506] netlink: 'syz.4.1676': attribute type 10 has an invalid length. [ 393.504258][ T9506] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1676'. [ 393.676849][ T9508] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1677'. [ 394.759357][ T9522] netlink: 'syz.2.1680': attribute type 3 has an invalid length. [ 394.808360][ T9522] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1680'. [ 395.579067][ T9528] netlink: 'syz.4.1682': attribute type 3 has an invalid length. [ 395.587158][ T9528] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1682'. [ 395.633456][ T9530] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1685'. [ 395.974695][ T9536] device sit0 left promiscuous mode [ 396.491211][ T9540] device sit0 entered promiscuous mode [ 396.713230][ T9546] netlink: 'syz.3.1689': attribute type 10 has an invalid length. [ 396.752776][ T9546] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1689'. [ 397.078628][ T9551] delete_channel: no stack [ 397.666266][ T9566] netlink: 'syz.0.1697': attribute type 3 has an invalid length. [ 397.731011][ T9566] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1697'. [ 399.349689][ T9591] netlink: 'syz.1.1703': attribute type 10 has an invalid length. [ 399.410184][ T9591] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1703'. [ 399.551648][ T9593] netlink: 'syz.0.1704': attribute type 10 has an invalid length. [ 399.606649][ T9595] FAULT_INJECTION: forcing a failure. [ 399.606649][ T9595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.641093][ T9595] CPU: 0 PID: 9595 Comm: syz.3.1705 Not tainted syzkaller #0 [ 399.648601][ T9595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 399.658702][ T9595] Call Trace: [ 399.662019][ T9595] [ 399.664992][ T9595] dump_stack_lvl+0x188/0x24e [ 399.669732][ T9595] ? show_regs_print_info+0x12/0x12 [ 399.675003][ T9595] ? load_image+0x410/0x410 [ 399.679575][ T9595] ? __lock_acquire+0x7ea0/0x7ea0 [ 399.684659][ T9595] should_fail_ex+0x390/0x4c0 [ 399.689401][ T9595] _copy_from_user+0x2c/0x170 [ 399.694137][ T9595] bpf_prog_test_run_skb+0x263/0x18e0 [ 399.699574][ T9595] ? __fget_files+0x28/0x460 [ 399.704323][ T9595] ? __fget_files+0x3fc/0x460 [ 399.709057][ T9595] ? cpu_online+0xa0/0xa0 [ 399.713430][ T9595] bpf_prog_test_run+0x31c/0x390 [ 399.718846][ T9595] __sys_bpf+0x62b/0x780 [ 399.723146][ T9595] ? bpf_link_show_fdinfo+0x380/0x380 [ 399.728576][ T9595] ? lock_chain_count+0x20/0x20 [ 399.733467][ T9595] __x64_sys_bpf+0x78/0x90 [ 399.737917][ T9595] do_syscall_64+0x4c/0xa0 [ 399.742354][ T9595] ? clear_bhb_loop+0x60/0xb0 [ 399.747051][ T9595] ? clear_bhb_loop+0x60/0xb0 [ 399.751766][ T9595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.757705][ T9595] RIP: 0033:0x7f4fea79f559 [ 399.762148][ T9595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.781791][ T9595] RSP: 002b:00007f4fe89f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 399.790243][ T9595] RAX: ffffffffffffffda RBX: 00007f4feaa25fa0 RCX: 00007f4fea79f559 [ 399.798241][ T9595] RDX: 0000000000000050 RSI: 0000200000000880 RDI: 000000000000000a [ 399.806259][ T9595] RBP: 00007f4fe89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 399.814251][ T9595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.822260][ T9595] R13: 00007f4feaa26038 R14: 00007f4feaa25fa0 R15: 00007ffc66282118 [ 399.830312][ T9595] [ 399.964719][ T9602] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 401.096130][ T9596] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1704'. [ 401.112047][ T9599] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1704'. [ 401.122058][ T9598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1706'. [ 401.138581][ T9598] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 401.197844][ T9604] device sit0 left promiscuous mode [ 401.307823][ T9607] device sit0 entered promiscuous mode [ 401.877425][ T9622] netlink: 'syz.4.1712': attribute type 10 has an invalid length. [ 401.931967][ T9622] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1712'. [ 402.611157][ T9630] netlink: 'syz.0.1715': attribute type 10 has an invalid length. [ 402.671976][ T9630] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1715'. [ 402.842782][ T9644] FAULT_INJECTION: forcing a failure. [ 402.842782][ T9644] name failslab, interval 1, probability 0, space 0, times 0 [ 402.898050][ T9644] CPU: 0 PID: 9644 Comm: syz.4.1719 Not tainted syzkaller #0 [ 402.905519][ T9644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 402.915733][ T9644] Call Trace: [ 402.919066][ T9644] [ 402.922047][ T9644] dump_stack_lvl+0x188/0x24e [ 402.926791][ T9644] ? show_regs_print_info+0x12/0x12 [ 402.932071][ T9644] ? load_image+0x410/0x410 [ 402.936646][ T9644] ? __might_sleep+0xd0/0xd0 [ 402.941295][ T9644] ? __lock_acquire+0x7ea0/0x7ea0 [ 402.946394][ T9644] should_fail_ex+0x390/0x4c0 [ 402.951277][ T9644] should_failslab+0x5/0x20 [ 402.955848][ T9644] slab_pre_alloc_hook+0x59/0x300 [ 402.960956][ T9644] kmem_cache_alloc_node+0x5a/0x310 [ 402.966230][ T9644] ? __alloc_skb+0xf9/0x7d0 [ 402.970819][ T9644] __alloc_skb+0xf9/0x7d0 [ 402.975228][ T9644] netlink_sendmsg+0x654/0xbd0 [ 402.980087][ T9644] ? netlink_getsockopt+0x550/0x550 [ 402.985359][ T9644] ? apparmor_socket_sendmsg+0x8a/0x330 [ 402.990975][ T9644] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 402.996313][ T9644] ? security_socket_sendmsg+0x7c/0xa0 [ 403.001840][ T9644] ? netlink_getsockopt+0x550/0x550 [ 403.007117][ T9644] ____sys_sendmsg+0x5ed/0x9a0 [ 403.011959][ T9644] ? __import_iovec+0x229/0x510 [ 403.016879][ T9644] ? __sys_sendmsg_sock+0x30/0x30 [ 403.021968][ T9644] ? __import_iovec+0x306/0x510 [ 403.026900][ T9644] ? import_iovec+0x6f/0xa0 [ 403.031479][ T9644] ___sys_sendmsg+0x2a2/0x360 [ 403.036221][ T9644] ? migrate_enable+0x148/0x220 [ 403.041140][ T9644] ? __sys_sendmsg+0x2a0/0x2a0 [ 403.046073][ T9644] __se_sys_sendmsg+0x1c3/0x2b0 [ 403.051140][ T9644] ? __x64_sys_sendmsg+0x80/0x80 [ 403.056197][ T9644] ? syscall_enter_from_user_mode+0x2a/0x80 [ 403.062259][ T9644] do_syscall_64+0x4c/0xa0 [ 403.066766][ T9644] ? clear_bhb_loop+0x60/0xb0 [ 403.071522][ T9644] ? clear_bhb_loop+0x60/0xb0 [ 403.076283][ T9644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.082274][ T9644] RIP: 0033:0x7fbf7e19f559 [ 403.086771][ T9644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.106440][ T9644] RSP: 002b:00007fbf7f0a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.114921][ T9644] RAX: ffffffffffffffda RBX: 00007fbf7e425fa0 RCX: 00007fbf7e19f559 [ 403.122997][ T9644] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 403.131062][ T9644] RBP: 00007fbf7f0a4090 R08: 0000000000000000 R09: 0000000000000000 [ 403.139121][ T9644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.147147][ T9644] R13: 00007fbf7e426038 R14: 00007fbf7e425fa0 R15: 00007fff757e6208 [ 403.155214][ T9644] [ 403.246930][ T9640] delete_channel: no stack [ 404.088059][ T9654] device sit0 left promiscuous mode [ 404.246352][ T9665] netlink: 'syz.1.1725': attribute type 3 has an invalid length. [ 404.320056][ T9665] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1725'. [ 404.537227][ T9655] device sit0 entered promiscuous mode [ 405.036382][ T9673] device sit0 left promiscuous mode [ 405.560451][ T9674] device sit0 entered promiscuous mode [ 407.511605][ T9709] netlink: 'syz.3.1740': attribute type 3 has an invalid length. [ 407.580009][ T9709] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1740'. [ 407.805421][ T9713] device sit0 left promiscuous mode [ 408.459275][ T9726] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 408.482400][ T9717] device sit0 entered promiscuous mode [ 408.570662][ T9718] netlink: 'syz.1.1743': attribute type 10 has an invalid length. [ 410.515488][ T9721] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1743'. [ 410.529097][ T9722] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1743'. [ 410.546527][ T9724] netlink: 'syz.3.1744': attribute type 10 has an invalid length. [ 410.554722][ T9724] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1744'. [ 410.581717][ T9733] netlink: 'syz.4.1745': attribute type 10 has an invalid length. [ 410.597653][ T9733] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1745'. [ 410.651095][ T9743] device sit0 left promiscuous mode [ 410.779220][ T9744] device sit0 entered promiscuous mode [ 410.891982][ T9751] netlink: 'syz.4.1750': attribute type 3 has an invalid length. [ 410.932027][ T9751] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1750'. [ 411.233180][ T9757] FAULT_INJECTION: forcing a failure. [ 411.233180][ T9757] name failslab, interval 1, probability 0, space 0, times 0 [ 411.279837][ T9757] CPU: 1 PID: 9757 Comm: syz.3.1754 Not tainted syzkaller #0 [ 411.287304][ T9757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 411.297433][ T9757] Call Trace: [ 411.300756][ T9757] [ 411.303732][ T9757] dump_stack_lvl+0x188/0x24e [ 411.308458][ T9757] ? show_regs_print_info+0x12/0x12 [ 411.313707][ T9757] ? load_image+0x410/0x410 [ 411.318273][ T9757] ? __might_sleep+0xd0/0xd0 [ 411.322929][ T9757] ? __lock_acquire+0x7ea0/0x7ea0 [ 411.328021][ T9757] should_fail_ex+0x390/0x4c0 [ 411.332851][ T9757] should_failslab+0x5/0x20 [ 411.337411][ T9757] slab_pre_alloc_hook+0x59/0x300 [ 411.342490][ T9757] ? l2tp_ip_sendmsg+0x30/0x1480 [ 411.347487][ T9757] kmem_cache_alloc_node+0x5a/0x310 [ 411.352724][ T9757] ? __alloc_skb+0xf9/0x7d0 [ 411.357280][ T9757] __alloc_skb+0xf9/0x7d0 [ 411.361665][ T9757] sock_wmalloc+0xa6/0x120 [ 411.366133][ T9757] l2tp_ip_sendmsg+0x1bf/0x1480 [ 411.371040][ T9757] ? sock_rps_record_flow+0x19/0x3f0 [ 411.376377][ T9757] ? inet_sendmsg+0x7a/0x2a0 [ 411.381051][ T9757] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 411.386399][ T9757] ? inet_send_prepare+0x250/0x250 [ 411.391565][ T9757] ____sys_sendmsg+0x5ed/0x9a0 [ 411.396408][ T9757] ? __sys_sendmsg_sock+0x30/0x30 [ 411.401522][ T9757] ? ___sys_sendmsg+0x287/0x360 [ 411.406448][ T9757] ___sys_sendmsg+0x2a2/0x360 [ 411.411178][ T9757] ? migrate_enable+0x148/0x220 [ 411.416080][ T9757] ? __sys_sendmsg+0x2a0/0x2a0 [ 411.420956][ T9757] __se_sys_sendmsg+0x1c3/0x2b0 [ 411.425879][ T9757] ? __x64_sys_sendmsg+0x80/0x80 [ 411.430899][ T9757] ? syscall_enter_from_user_mode+0x2a/0x80 [ 411.436847][ T9757] do_syscall_64+0x4c/0xa0 [ 411.441307][ T9757] ? clear_bhb_loop+0x60/0xb0 [ 411.446029][ T9757] ? clear_bhb_loop+0x60/0xb0 [ 411.450756][ T9757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.456705][ T9757] RIP: 0033:0x7f4fea79f559 [ 411.461191][ T9757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.480856][ T9757] RSP: 002b:00007f4fe89f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.489339][ T9757] RAX: ffffffffffffffda RBX: 00007f4feaa25fa0 RCX: 00007f4fea79f559 [ 411.497374][ T9757] RDX: 0000000004000090 RSI: 0000200000000300 RDI: 0000000000000006 [ 411.505506][ T9757] RBP: 00007f4fe89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 411.513545][ T9757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.521553][ T9757] R13: 00007f4feaa26038 R14: 00007f4feaa25fa0 R15: 00007ffc66282118 [ 411.529618][ T9757] [ 411.683612][ T9765] device sit0 left promiscuous mode [ 411.833757][ T9769] netlink: 'syz.1.1757': attribute type 2 has an invalid length. [ 411.947197][ T9769] netlink: 'syz.1.1757': attribute type 1 has an invalid length. [ 411.958479][ T9769] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1757'. [ 412.078539][ T9773] netlink: 'syz.1.1757': attribute type 2 has an invalid length. [ 412.129071][ T9768] device sit0 entered promiscuous mode [ 412.147268][ T9773] netlink: 'syz.1.1757': attribute type 1 has an invalid length. [ 412.181639][ T9773] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1757'. [ 412.202823][ T9772] netlink: 'syz.3.1758': attribute type 3 has an invalid length. [ 412.263090][ T9772] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1758'. [ 412.609104][ T9780] FAULT_INJECTION: forcing a failure. [ 412.609104][ T9780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.648508][ T9780] CPU: 1 PID: 9780 Comm: syz.3.1761 Not tainted syzkaller #0 [ 412.655975][ T9780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 412.666086][ T9780] Call Trace: [ 412.669404][ T9780] [ 412.672473][ T9780] dump_stack_lvl+0x188/0x24e [ 412.677232][ T9780] ? show_regs_print_info+0x12/0x12 [ 412.682487][ T9780] ? load_image+0x410/0x410 [ 412.687050][ T9780] ? __lock_acquire+0x7ea0/0x7ea0 [ 412.692136][ T9780] ? unix_ioctl+0x255/0x6a0 [ 412.696738][ T9780] should_fail_ex+0x390/0x4c0 [ 412.701476][ T9780] _copy_from_user+0x2c/0x170 [ 412.706207][ T9780] sock_do_ioctl+0x18c/0x320 [ 412.710852][ T9780] ? sock_show_fdinfo+0xb0/0xb0 [ 412.715852][ T9780] sock_ioctl+0x48a/0x700 [ 412.720599][ T9780] ? sock_poll+0x420/0x420 [ 412.725087][ T9780] ? bpf_lsm_file_ioctl+0x5/0x10 [ 412.730079][ T9780] ? security_file_ioctl+0x7c/0xa0 [ 412.735240][ T9780] ? sock_poll+0x420/0x420 [ 412.739712][ T9780] __se_sys_ioctl+0xfa/0x170 [ 412.744366][ T9780] do_syscall_64+0x4c/0xa0 [ 412.748828][ T9780] ? clear_bhb_loop+0x60/0xb0 [ 412.753555][ T9780] ? clear_bhb_loop+0x60/0xb0 [ 412.758292][ T9780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.764247][ T9780] RIP: 0033:0x7f4fea79f559 [ 412.768710][ T9780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.788367][ T9780] RSP: 002b:00007f4fe89f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.796837][ T9780] RAX: ffffffffffffffda RBX: 00007f4feaa25fa0 RCX: 00007f4fea79f559 [ 412.804860][ T9780] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000044 [ 412.813063][ T9780] RBP: 00007f4fe89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 412.821081][ T9780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.829112][ T9780] R13: 00007f4feaa26038 R14: 00007f4feaa25fa0 R15: 00007ffc66282118 [ 412.837152][ T9780] [ 412.961532][ T9777] netlink: 'syz.2.1760': attribute type 10 has an invalid length. [ 412.972794][ T9777] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1760'. [ 413.305798][ T9795] device sit0 left promiscuous mode [ 413.542021][ T9807] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 413.720138][ T9794] netlink: 'syz.4.1766': attribute type 10 has an invalid length. [ 415.286370][ T9799] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1766'. [ 415.326788][ T9802] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1766'. [ 415.359591][ T9797] device sit0 entered promiscuous mode [ 415.432385][ T9801] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1769'. [ 415.457675][ T9801] : renamed from caif0 [ 415.467260][ T9801] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 415.922659][ T9836] device sit0 left promiscuous mode [ 416.004836][ T9837] FAULT_INJECTION: forcing a failure. [ 416.004836][ T9837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.039768][ T9837] CPU: 1 PID: 9837 Comm: syz.1.1775 Not tainted syzkaller #0 [ 416.047231][ T9837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 416.057438][ T9837] Call Trace: [ 416.060852][ T9837] [ 416.063826][ T9837] dump_stack_lvl+0x188/0x24e [ 416.068543][ T9837] ? show_regs_print_info+0x12/0x12 [ 416.073786][ T9837] ? load_image+0x410/0x410 [ 416.078325][ T9837] ? __lock_acquire+0x7ea0/0x7ea0 [ 416.083390][ T9837] should_fail_ex+0x390/0x4c0 [ 416.088127][ T9837] _copy_to_user+0x2c/0x130 [ 416.092684][ T9837] simple_read_from_buffer+0xe3/0x150 [ 416.098102][ T9837] proc_fail_nth_read+0x1a6/0x220 [ 416.103162][ T9837] ? proc_fault_inject_write+0x310/0x310 [ 416.108837][ T9837] ? fsnotify_perm+0x248/0x550 [ 416.113646][ T9837] ? proc_fault_inject_write+0x310/0x310 [ 416.119328][ T9837] vfs_read+0x2db/0x960 [ 416.123611][ T9837] ? kernel_read+0x1e0/0x1e0 [ 416.128236][ T9837] ? __fget_files+0x28/0x460 [ 416.132857][ T9837] ? __fget_files+0x3fc/0x460 [ 416.137583][ T9837] ? __fdget_pos+0x2ae/0x360 [ 416.142227][ T9837] ? ksys_read+0x70/0x260 [ 416.146590][ T9837] ksys_read+0x14d/0x260 [ 416.150889][ T9837] ? vfs_write+0x9a0/0x9a0 [ 416.155376][ T9837] ? syscall_enter_from_user_mode+0x2a/0x80 [ 416.161308][ T9837] do_syscall_64+0x4c/0xa0 [ 416.165766][ T9837] ? clear_bhb_loop+0x60/0xb0 [ 416.170468][ T9837] ? clear_bhb_loop+0x60/0xb0 [ 416.175173][ T9837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.181217][ T9837] RIP: 0033:0x7fa11935fd8e [ 416.185659][ T9837] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 416.205298][ T9837] RSP: 002b:00007fa11a2fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 416.213744][ T9837] RAX: ffffffffffffffda RBX: 00007fa11a3006c0 RCX: 00007fa11935fd8e [ 416.221843][ T9837] RDX: 000000000000000f RSI: 00007fa11a3000a0 RDI: 0000000000000007 [ 416.229841][ T9837] RBP: 00007fa11a300090 R08: 0000000000000000 R09: 0000000000000000 [ 416.237836][ T9837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.245831][ T9837] R13: 00007fa119626038 R14: 00007fa119625fa0 R15: 00007ffe83647fd8 [ 416.253848][ T9837] [ 417.031803][ T9839] device sit0 entered promiscuous mode [ 417.246571][ T9845] netlink: 'syz.3.1777': attribute type 10 has an invalid length. [ 417.265474][ T9845] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1777'. [ 417.894415][ T9864] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1782'. [ 418.021667][ T9866] netlink: 'syz.3.1783': attribute type 10 has an invalid length. [ 418.437811][ T9872] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 419.157019][ T9880] FAULT_INJECTION: forcing a failure. [ 419.157019][ T9880] name failslab, interval 1, probability 0, space 0, times 0 [ 419.207085][ T9880] CPU: 0 PID: 9880 Comm: syz.0.1786 Not tainted syzkaller #0 [ 419.214550][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 419.224664][ T9880] Call Trace: [ 419.227998][ T9880] [ 419.230981][ T9880] dump_stack_lvl+0x188/0x24e [ 419.235742][ T9880] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 419.242036][ T9880] ? show_regs_print_info+0x12/0x12 [ 419.247281][ T9880] ? load_image+0x410/0x410 [ 419.251848][ T9880] should_fail_ex+0x390/0x4c0 [ 419.256623][ T9880] should_failslab+0x5/0x20 [ 419.261202][ T9880] slab_pre_alloc_hook+0x59/0x300 [ 419.266316][ T9880] ? tracepoint_add_func+0x2f1/0xa10 [ 419.271712][ T9880] __kmem_cache_alloc_node+0x4f/0x270 [ 419.277201][ T9880] ? tracepoint_add_func+0x2f1/0xa10 [ 419.282559][ T9880] __kmalloc+0xa3/0x240 [ 419.286811][ T9880] ? trace_event_raw_event_mmap_lock_acquire_returned+0x2d0/0x2d0 [ 419.294685][ T9880] tracepoint_add_func+0x2f1/0xa10 [ 419.299862][ T9880] ? pcpu_alloc+0x1102/0x16b0 [ 419.304621][ T9880] ? trace_event_raw_event_mmap_lock_acquire_returned+0x2d0/0x2d0 [ 419.312503][ T9880] tracepoint_probe_register+0x5a/0x90 [ 419.318024][ T9880] ? trace_event_raw_event_mmap_lock_acquire_returned+0x2d0/0x2d0 [ 419.325906][ T9880] perf_trace_event_init+0x41e/0x940 [ 419.331268][ T9880] perf_trace_init+0x234/0x2d0 [ 419.336108][ T9880] perf_tp_event_init+0x89/0x110 [ 419.341108][ T9880] perf_try_init_event+0x12b/0x3d0 [ 419.346288][ T9880] ? perf_event_alloc+0xb28/0x21e0 [ 419.351472][ T9880] perf_event_alloc+0xea0/0x21e0 [ 419.356476][ T9880] ? _raw_spin_unlock+0x24/0x40 [ 419.361450][ T9880] ? find_lively_task_by_vpid+0x19/0x290 [ 419.367155][ T9880] ? find_lively_task_by_vpid+0x19/0x290 [ 419.372873][ T9880] __se_sys_perf_event_open+0x701/0x1ec0 [ 419.378580][ T9880] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 419.384347][ T9880] ? syscall_enter_from_user_mode+0x2a/0x80 [ 419.390331][ T9880] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 419.396038][ T9880] do_syscall_64+0x4c/0xa0 [ 419.400511][ T9880] ? clear_bhb_loop+0x60/0xb0 [ 419.405252][ T9880] ? clear_bhb_loop+0x60/0xb0 [ 419.409996][ T9880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.415961][ T9880] RIP: 0033:0x7f1362f9f559 [ 419.420431][ T9880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.440105][ T9880] RSP: 002b:00007f1363e2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 419.448671][ T9880] RAX: ffffffffffffffda RBX: 00007f1363225fa0 RCX: 00007f1362f9f559 [ 419.456731][ T9880] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 419.464774][ T9880] RBP: 00007f1363e2a090 R08: 0000000000000008 R09: 0000000000000000 [ 419.472811][ T9880] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 419.480859][ T9880] R13: 00007f1363226038 R14: 00007f1363225fa0 R15: 00007ffe7634cf28 [ 419.489005][ T9880] [ 421.689331][ T9869] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1783'. [ 421.740072][ T9899] FAULT_INJECTION: forcing a failure. [ 421.740072][ T9899] name failslab, interval 1, probability 0, space 0, times 0 [ 421.790981][ T9870] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1783'. [ 421.814351][ T9868] rxe_eth0 speed is unknown, defaulting to 1000 [ 421.834857][ T9899] CPU: 0 PID: 9899 Comm: syz.4.1794 Not tainted syzkaller #0 [ 421.842307][ T9899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 421.852409][ T9899] Call Trace: [ 421.855730][ T9899] [ 421.858704][ T9899] dump_stack_lvl+0x188/0x24e [ 421.863435][ T9899] ? show_regs_print_info+0x12/0x12 [ 421.868675][ T9899] ? load_image+0x410/0x410 [ 421.870246][ T9902] netlink: 'syz.1.1793': attribute type 10 has an invalid length. [ 421.873214][ T9899] ? __might_sleep+0xd0/0xd0 [ 421.885677][ T9899] ? __lock_acquire+0x7ea0/0x7ea0 [ 421.890813][ T9899] should_fail_ex+0x390/0x4c0 [ 421.895550][ T9899] should_failslab+0x5/0x20 [ 421.900119][ T9899] slab_pre_alloc_hook+0x59/0x300 [ 421.903210][ T9902] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1793'. [ 421.905178][ T9899] ? lock_chain_count+0x20/0x20 [ 421.905226][ T9899] kmem_cache_alloc_node+0x5a/0x310 [ 421.924193][ T9899] ? __local_bh_enable_ip+0x136/0x1c0 [ 421.929613][ T9899] ? __alloc_skb+0xf9/0x7d0 [ 421.934202][ T9899] __alloc_skb+0xf9/0x7d0 [ 421.938588][ T9899] sock_wmalloc+0xa6/0x120 [ 421.943057][ T9899] l2tp_ip_sendmsg+0x1bf/0x1480 [ 421.947975][ T9899] ? sock_rps_record_flow+0x19/0x3f0 [ 421.953306][ T9899] ? inet_sendmsg+0x7a/0x2a0 [ 421.957939][ T9899] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 421.963268][ T9899] ? inet_send_prepare+0x250/0x250 [ 421.968430][ T9899] ____sys_sendmsg+0x5ed/0x9a0 [ 421.973259][ T9899] ? __lock_acquire+0x7ea0/0x7ea0 [ 421.978336][ T9899] ? __sys_sendmsg_sock+0x30/0x30 [ 421.983414][ T9899] ? __import_iovec+0x306/0x510 [ 421.988324][ T9899] ? import_iovec+0x6f/0xa0 [ 421.992890][ T9899] ___sys_sendmsg+0x2a2/0x360 [ 421.997621][ T9899] ? __sys_sendmsg+0x2a0/0x2a0 [ 422.002457][ T9899] ? trace_call_bpf+0xbf/0x6b0 [ 422.007298][ T9899] __se_sys_sendmsg+0x1c3/0x2b0 [ 422.012205][ T9899] ? perf_trace_preemptirq_template+0x268/0x320 [ 422.018511][ T9899] ? __x64_sys_sendmsg+0x80/0x80 [ 422.023553][ T9899] ? lockdep_hardirqs_on+0x94/0x140 [ 422.028808][ T9899] do_syscall_64+0x4c/0xa0 [ 422.033262][ T9899] ? clear_bhb_loop+0x60/0xb0 [ 422.037980][ T9899] ? clear_bhb_loop+0x60/0xb0 [ 422.042704][ T9899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.048655][ T9899] RIP: 0033:0x7fbf7e19f559 [ 422.053114][ T9899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.072765][ T9899] RSP: 002b:00007fbf7f0a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.081232][ T9899] RAX: ffffffffffffffda RBX: 00007fbf7e425fa0 RCX: 00007fbf7e19f559 [ 422.089248][ T9899] RDX: 0000000004000090 RSI: 0000200000000300 RDI: 0000000000000009 [ 422.097265][ T9899] RBP: 00007fbf7f0a4090 R08: 0000000000000000 R09: 0000000000000000 [ 422.105278][ T9899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.113295][ T9899] R13: 00007fbf7e426038 R14: 00007fbf7e425fa0 R15: 00007fff757e6208 [ 422.121330][ T9899] [ 422.218674][ T9905] device sit0 left promiscuous mode [ 422.544982][ T9906] device sit0 entered promiscuous mode [ 424.481714][ T9949] netlink: 'syz.4.1811': attribute type 3 has an invalid length. [ 424.505014][ T9949] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1811'. [ 424.557949][ T9959] FAULT_INJECTION: forcing a failure. [ 424.557949][ T9959] name failslab, interval 1, probability 0, space 0, times 0 [ 424.587644][ T9959] CPU: 1 PID: 9959 Comm: syz.3.1814 Not tainted syzkaller #0 [ 424.595110][ T9959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 424.605227][ T9959] Call Trace: [ 424.608536][ T9959] [ 424.611516][ T9959] dump_stack_lvl+0x188/0x24e [ 424.616232][ T9959] ? show_regs_print_info+0x12/0x12 [ 424.621456][ T9959] ? load_image+0x410/0x410 [ 424.626018][ T9959] ? __lock_acquire+0x7ea0/0x7ea0 [ 424.631078][ T9959] ? __mutex_trylock_common+0x15c/0x260 [ 424.636672][ T9959] should_fail_ex+0x390/0x4c0 [ 424.641388][ T9959] should_failslab+0x5/0x20 [ 424.646001][ T9959] slab_pre_alloc_hook+0x59/0x300 [ 424.651078][ T9959] ? __mutex_lock+0x1ab/0xae0 [ 424.655806][ T9959] ? tracepoint_add_func+0x2f1/0xa10 [ 424.661133][ T9959] __kmem_cache_alloc_node+0x4f/0x270 [ 424.666541][ T9959] ? tracepoint_add_func+0x2f1/0xa10 [ 424.671861][ T9959] __kmalloc+0xa3/0x240 [ 424.676046][ T9959] ? trace_event_raw_event_mmap_lock_acquire_returned+0x2d0/0x2d0 [ 424.683888][ T9959] tracepoint_add_func+0x2f1/0xa10 [ 424.689037][ T9959] ? pcpu_alloc+0x1102/0x16b0 [ 424.693772][ T9959] ? trace_event_raw_event_mmap_lock_acquire_returned+0x2d0/0x2d0 [ 424.701629][ T9959] tracepoint_probe_register+0x5a/0x90 [ 424.707209][ T9959] ? trace_event_raw_event_mmap_lock_acquire_returned+0x2d0/0x2d0 [ 424.715055][ T9959] perf_trace_event_init+0x41e/0x940 [ 424.720380][ T9959] perf_trace_init+0x234/0x2d0 [ 424.725174][ T9959] perf_tp_event_init+0x89/0x110 [ 424.730151][ T9959] perf_try_init_event+0x12b/0x3d0 [ 424.735327][ T9959] ? perf_event_alloc+0xb28/0x21e0 [ 424.740466][ T9959] perf_event_alloc+0xea0/0x21e0 [ 424.745431][ T9959] ? _raw_spin_unlock+0x24/0x40 [ 424.750319][ T9959] ? find_lively_task_by_vpid+0x19/0x290 [ 424.755986][ T9959] ? find_lively_task_by_vpid+0x19/0x290 [ 424.761652][ T9959] __se_sys_perf_event_open+0x701/0x1ec0 [ 424.767312][ T9959] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 424.773161][ T9959] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 424.778842][ T9959] ? lockdep_hardirqs_on+0x94/0x140 [ 424.784072][ T9959] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 424.789757][ T9959] do_syscall_64+0x4c/0xa0 [ 424.794203][ T9959] ? clear_bhb_loop+0x60/0xb0 [ 424.799009][ T9959] ? clear_bhb_loop+0x60/0xb0 [ 424.803713][ T9959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.809646][ T9959] RIP: 0033:0x7f4fea79f559 [ 424.814087][ T9959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.833732][ T9959] RSP: 002b:00007f4fe89f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 424.842183][ T9959] RAX: ffffffffffffffda RBX: 00007f4feaa25fa0 RCX: 00007f4fea79f559 [ 424.850186][ T9959] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 424.858197][ T9959] RBP: 00007f4fe89f6090 R08: 0000000000000008 R09: 0000000000000000 [ 424.866202][ T9959] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 424.874211][ T9959] R13: 00007f4feaa26038 R14: 00007f4feaa25fa0 R15: 00007ffc66282118 [ 424.882250][ T9959] [ 424.903367][ T9951] device sit0 left promiscuous mode [ 425.312813][ T9960] device sit0 entered promiscuous mode [ 425.793667][ T9977] device sit0 left promiscuous mode [ 426.238683][ T9979] device sit0 entered promiscuous mode [ 426.998453][ T9999] FAULT_INJECTION: forcing a failure. [ 426.998453][ T9999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.033392][ T9999] CPU: 1 PID: 9999 Comm: syz.3.1825 Not tainted syzkaller #0 [ 427.040849][ T9999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 427.050974][ T9999] Call Trace: [ 427.054279][ T9999] [ 427.057232][ T9999] dump_stack_lvl+0x188/0x24e [ 427.061945][ T9999] ? show_regs_print_info+0x12/0x12 [ 427.067204][ T9999] ? load_image+0x410/0x410 [ 427.071745][ T9999] ? __lock_acquire+0x7ea0/0x7ea0 [ 427.076806][ T9999] should_fail_ex+0x390/0x4c0 [ 427.081526][ T9999] _copy_from_user+0x2c/0x170 [ 427.086229][ T9999] get_user_ifreq+0x67/0x170 [ 427.090855][ T9999] sock_ioctl+0x61f/0x700 [ 427.095222][ T9999] ? sock_poll+0x420/0x420 [ 427.099675][ T9999] ? bpf_lsm_file_ioctl+0x5/0x10 [ 427.104646][ T9999] ? security_file_ioctl+0x7c/0xa0 [ 427.109805][ T9999] ? sock_poll+0x420/0x420 [ 427.114262][ T9999] __se_sys_ioctl+0xfa/0x170 [ 427.118885][ T9999] do_syscall_64+0x4c/0xa0 [ 427.123416][ T9999] ? clear_bhb_loop+0x60/0xb0 [ 427.128114][ T9999] ? clear_bhb_loop+0x60/0xb0 [ 427.132810][ T9999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.138736][ T9999] RIP: 0033:0x7f4fea79f559 [ 427.143176][ T9999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.162827][ T9999] RSP: 002b:00007f4fe89f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.171300][ T9999] RAX: ffffffffffffffda RBX: 00007f4feaa25fa0 RCX: 00007f4fea79f559 [ 427.179301][ T9999] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 427.187295][ T9999] RBP: 00007f4fe89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 427.195490][ T9999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.203488][ T9999] R13: 00007f4feaa26038 R14: 00007f4feaa25fa0 R15: 00007ffc66282118 [ 427.211528][ T9999] [ 428.133598][T10026] FAULT_INJECTION: forcing a failure. [ 428.133598][T10026] name failslab, interval 1, probability 0, space 0, times 0 [ 428.181749][T10026] CPU: 0 PID: 10026 Comm: syz.0.1836 Not tainted syzkaller #0 [ 428.189308][T10026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 428.199445][T10026] Call Trace: [ 428.202767][T10026] [ 428.205911][T10026] dump_stack_lvl+0x188/0x24e [ 428.210653][T10026] ? show_regs_print_info+0x12/0x12 [ 428.215901][T10026] ? load_image+0x410/0x410 [ 428.220475][T10026] ? __might_sleep+0xd0/0xd0 [ 428.225113][T10026] ? __lock_acquire+0x7ea0/0x7ea0 [ 428.230206][T10026] should_fail_ex+0x390/0x4c0 [ 428.234956][T10026] should_failslab+0x5/0x20 [ 428.239510][T10026] slab_pre_alloc_hook+0x59/0x300 [ 428.244592][T10026] ? __get_vm_area_node+0x122/0x330 [ 428.249847][T10026] __kmem_cache_alloc_node+0x4f/0x270 [ 428.255266][T10026] ? __get_vm_area_node+0x122/0x330 [ 428.260517][T10026] kmalloc_node_trace+0x22/0xe0 [ 428.265413][T10026] __get_vm_area_node+0x122/0x330 [ 428.270493][T10026] __vmalloc_node_range+0x357/0x1380 [ 428.275824][T10026] ? netlink_sendmsg+0x5ec/0xbd0 [ 428.280817][T10026] ? perf_trace_preemptirq_template+0x268/0x320 [ 428.287127][T10026] ? rcu_is_watching+0x11/0xa0 [ 428.291956][T10026] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 428.298162][T10026] ? lockdep_hardirqs_on+0x94/0x140 [ 428.305064][T10026] ? free_vm_area+0x50/0x50 [ 428.309617][T10026] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 428.315833][T10026] ? netlink_sendmsg+0x5ec/0xbd0 [ 428.320829][T10026] vmalloc+0x75/0x80 [ 428.324799][T10026] ? netlink_sendmsg+0x5ec/0xbd0 [ 428.329796][T10026] netlink_sendmsg+0x5ec/0xbd0 [ 428.334635][T10026] ? netlink_getsockopt+0x550/0x550 [ 428.339892][T10026] ? apparmor_socket_sendmsg+0x8a/0x330 [ 428.345502][T10026] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 428.350839][T10026] ? security_socket_sendmsg+0x7c/0xa0 [ 428.356358][T10026] ? netlink_getsockopt+0x550/0x550 [ 428.361618][T10026] ____sys_sendmsg+0x5ed/0x9a0 [ 428.366458][T10026] ? __sys_sendmsg_sock+0x30/0x30 [ 428.371544][T10026] ? __import_iovec+0x306/0x510 [ 428.376465][T10026] ? import_iovec+0x6f/0xa0 [ 428.381035][T10026] ___sys_sendmsg+0x2a2/0x360 [ 428.385807][T10026] ? __sys_sendmsg+0x2a0/0x2a0 [ 428.390652][T10026] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 428.396442][T10026] __se_sys_sendmsg+0x1c3/0x2b0 [ 428.401344][T10026] ? __x64_sys_sendmsg+0x80/0x80 [ 428.406348][T10026] ? syscall_enter_from_user_mode+0x2a/0x80 [ 428.412294][T10026] do_syscall_64+0x4c/0xa0 [ 428.416735][T10026] ? clear_bhb_loop+0x60/0xb0 [ 428.421434][T10026] ? clear_bhb_loop+0x60/0xb0 [ 428.426140][T10026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.432070][T10026] RIP: 0033:0x7f1362f9f559 [ 428.436508][T10026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.456142][T10026] RSP: 002b:00007f1363e2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.464602][T10026] RAX: ffffffffffffffda RBX: 00007f1363225fa0 RCX: 00007f1362f9f559 [ 428.472604][T10026] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000000a [ 428.480600][T10026] RBP: 00007f1363e2a090 R08: 0000000000000000 R09: 0000000000000000 [ 428.488593][T10026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.496595][T10026] R13: 00007f1363226038 R14: 00007f1363225fa0 R15: 00007ffe7634cf28 [ 428.504604][T10026] [ 428.853030][T10026] syz.0.1836: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 428.878509][T10026] CPU: 0 PID: 10026 Comm: syz.0.1836 Not tainted syzkaller #0 [ 428.886056][T10026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 428.896338][T10026] Call Trace: [ 428.899658][T10026] [ 428.902641][T10026] dump_stack_lvl+0x188/0x24e [ 428.907375][T10026] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 428.913857][T10026] ? show_regs_print_info+0x12/0x12 [ 428.919119][T10026] ? load_image+0x410/0x410 [ 428.923690][T10026] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 428.930160][T10026] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 428.936753][T10026] warn_alloc+0x242/0x330 [ 428.941155][T10026] ? __get_vm_area_node+0x122/0x330 [ 428.946452][T10026] ? zone_watermark_ok_safe+0x270/0x270 [ 428.952072][T10026] ? rcu_is_watching+0x11/0xa0 [ 428.956925][T10026] ? __get_vm_area_node+0x318/0x330 [ 428.962211][T10026] __vmalloc_node_range+0x37c/0x1380 [ 428.967572][T10026] ? perf_trace_preemptirq_template+0x268/0x320 [ 428.973915][T10026] ? rcu_is_watching+0x11/0xa0 [ 428.978756][T10026] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 428.985111][T10026] ? lockdep_hardirqs_on+0x94/0x140 [ 428.990425][T10026] ? free_vm_area+0x50/0x50 [ 428.994995][T10026] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 429.001230][T10026] ? netlink_sendmsg+0x5ec/0xbd0 [ 429.006260][T10026] vmalloc+0x75/0x80 [ 429.010216][T10026] ? netlink_sendmsg+0x5ec/0xbd0 [ 429.015203][T10026] netlink_sendmsg+0x5ec/0xbd0 [ 429.020045][T10026] ? netlink_getsockopt+0x550/0x550 [ 429.025316][T10026] ? apparmor_socket_sendmsg+0x8a/0x330 [ 429.030913][T10026] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 429.036248][T10026] ? security_socket_sendmsg+0x7c/0xa0 [ 429.041759][T10026] ? netlink_getsockopt+0x550/0x550 [ 429.047014][T10026] ____sys_sendmsg+0x5ed/0x9a0 [ 429.051830][T10026] ? __sys_sendmsg_sock+0x30/0x30 [ 429.056907][T10026] ? __import_iovec+0x306/0x510 [ 429.061833][T10026] ? import_iovec+0x6f/0xa0 [ 429.066374][T10026] ___sys_sendmsg+0x2a2/0x360 [ 429.071093][T10026] ? __sys_sendmsg+0x2a0/0x2a0 [ 429.075905][T10026] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 429.081680][T10026] __se_sys_sendmsg+0x1c3/0x2b0 [ 429.086572][T10026] ? __x64_sys_sendmsg+0x80/0x80 [ 429.091568][T10026] ? syscall_enter_from_user_mode+0x2a/0x80 [ 429.097510][T10026] do_syscall_64+0x4c/0xa0 [ 429.101958][T10026] ? clear_bhb_loop+0x60/0xb0 [ 429.106672][T10026] ? clear_bhb_loop+0x60/0xb0 [ 429.111406][T10026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.117338][T10026] RIP: 0033:0x7f1362f9f559 [ 429.121779][T10026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.141526][T10026] RSP: 002b:00007f1363e2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.149982][T10026] RAX: ffffffffffffffda RBX: 00007f1363225fa0 RCX: 00007f1362f9f559 [ 429.157988][T10026] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000000a [ 429.165989][T10026] RBP: 00007f1363e2a090 R08: 0000000000000000 R09: 0000000000000000 [ 429.174006][T10026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.182009][T10026] R13: 00007f1363226038 R14: 00007f1363225fa0 R15: 00007ffe7634cf28 [ 429.190038][T10026] [ 429.200606][T10026] Mem-Info: [ 429.203977][T10026] active_anon:7630 inactive_anon:0 isolated_anon:0 [ 429.203977][T10026] active_file:22942 inactive_file:40095 isolated_file:0 [ 429.203977][T10026] unevictable:768 dirty:87 writeback:0 [ 429.203977][T10026] slab_reclaimable:21483 slab_unreclaimable:95408 [ 429.203977][T10026] mapped:31068 shmem:1364 pagetables:602 [ 429.203977][T10026] sec_pagetables:0 bounce:0 [ 429.203977][T10026] kernel_misc_reclaimable:0 [ 429.203977][T10026] free:1310957 free_pcp:7132 free_cma:0 [ 429.231661][T10034] device sit0 left promiscuous mode [ 429.264985][T10026] Node 0 active_anon:30520kB inactive_anon:0kB active_file:91768kB inactive_file:160176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128272kB dirty:348kB writeback:0kB shmem:3920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11996kB pagetables:2408kB sec_pagetables:0kB all_unreclaimable? no [ 429.299044][T10026] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 429.333296][T10026] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 429.374580][T10026] lowmem_reserve[]: 0 2509 2510 2510 2510 [ 429.385214][T10026] Node 0 DMA32 free:1329164kB boost:0kB min:34540kB low:43172kB high:51804kB reserved_highatomic:0KB active_anon:30520kB inactive_anon:0kB active_file:91768kB inactive_file:160176kB unevictable:1536kB writepending:348kB present:3129332kB managed:2574528kB mlocked:0kB bounce:0kB free_pcp:11520kB local_pcp:7256kB free_cma:0kB [ 429.451819][T10026] lowmem_reserve[]: 0 0 1 1 1 [ 429.465745][T10026] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 429.513532][T10026] lowmem_reserve[]: 0 0 0 0 0 [ 429.543638][T10026] Node 1 Normal free:3899056kB boost:0kB min:55344kB low:69180kB high:83016kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:16768kB local_pcp:7616kB free_cma:0kB [ 429.636546][T10043] device sit0 entered promiscuous mode [ 429.642455][T10026] lowmem_reserve[]: 0 0 0 0 0 [ 429.668500][T10026] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 429.724759][T10042] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1840'. [ 429.765018][T10042] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 429.873992][T10026] Node 0 DMA32: 1586*4kB (UME) 2045*8kB (UME) 1688*16kB (UME) 810*32kB (UME) 558*64kB (UME) 125*128kB (UME) 50*256kB (UME) 12*512kB (UM) 4*1024kB (UM) 3*2048kB (UME) 286*4096kB (UM) = 1327984kB [ 429.900057][T10026] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 429.921847][T10026] Node 1 Normal: 234*4kB (UE) 59*8kB (UE) 21*16kB (UME) 37*32kB (UME) 29*64kB (UME) 20*128kB (UME) 10*256kB (UME) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3899056kB [ 429.961536][T10026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 430.022555][T10026] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 430.120722][T10026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 430.180663][T10026] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 430.200114][T10026] 64401 total pagecache pages [ 430.204875][T10026] 0 pages in swap cache [ 430.209149][T10026] Free swap = 124996kB [ 430.213447][T10026] Total swap = 124996kB [ 430.228151][T10026] 2097051 pages RAM [ 430.238740][T10026] 0 pages HighMem/MovableOnly [ 430.243514][T10026] 419818 pages reserved [ 430.278058][T10026] 0 pages cma reserved [ 430.502084][T10060] device sit0 left promiscuous mode [ 431.017765][T10061] device sit0 entered promiscuous mode [ 431.232643][T10071] netlink: 'syz.0.1851': attribute type 10 has an invalid length. [ 433.266207][T10086] device sit0 left promiscuous mode [ 433.660968][T10091] device sit0 entered promiscuous mode [ 433.829851][T10090] netlink: 'syz.4.1858': attribute type 10 has an invalid length. [ 433.856586][T10090] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1858'. [ 434.413038][T10116] rxe_eth0 speed is unknown, defaulting to 1000 [ 435.348596][T10127] FAULT_INJECTION: forcing a failure. [ 435.348596][T10127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.434147][T10127] CPU: 0 PID: 10127 Comm: syz.3.1871 Not tainted syzkaller #0 [ 435.441687][T10127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 435.451799][T10127] Call Trace: [ 435.455116][T10127] [ 435.458089][T10127] dump_stack_lvl+0x188/0x24e [ 435.462823][T10127] ? show_regs_print_info+0x12/0x12 [ 435.468077][T10127] ? load_image+0x410/0x410 [ 435.472646][T10127] ? __lock_acquire+0x7ea0/0x7ea0 [ 435.477742][T10127] should_fail_ex+0x390/0x4c0 [ 435.482488][T10127] _copy_from_user+0x2c/0x170 [ 435.487251][T10127] iovec_from_user+0x143/0x360 [ 435.492108][T10127] __import_iovec+0x6c/0x510 [ 435.496770][T10127] import_iovec+0x6f/0xa0 [ 435.501172][T10127] ___sys_sendmsg+0x252/0x360 [ 435.505911][T10127] ? __sys_sendmsg+0x2a0/0x2a0 [ 435.510759][T10127] ? __lock_acquire+0x7ea0/0x7ea0 [ 435.515869][T10127] __se_sys_sendmsg+0x1c3/0x2b0 [ 435.520789][T10127] ? __x64_sys_sendmsg+0x80/0x80 [ 435.525823][T10127] ? lockdep_hardirqs_on+0x94/0x140 [ 435.531086][T10127] do_syscall_64+0x4c/0xa0 [ 435.535567][T10127] ? clear_bhb_loop+0x60/0xb0 [ 435.540295][T10127] ? clear_bhb_loop+0x60/0xb0 [ 435.545030][T10127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.550976][T10127] RIP: 0033:0x7f4fea79f559 [ 435.555425][T10127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.575061][T10127] RSP: 002b:00007f4fe89f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.583517][T10127] RAX: ffffffffffffffda RBX: 00007f4feaa25fa0 RCX: 00007f4fea79f559 [ 435.591524][T10127] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 435.599521][T10127] RBP: 00007f4fe89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 435.607528][T10127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.615526][T10127] R13: 00007f4feaa26038 R14: 00007f4feaa25fa0 R15: 00007ffc66282118 [ 435.623559][T10127] [ 436.013430][T10133] netlink: 'syz.2.1874': attribute type 10 has an invalid length. [ 436.098383][T10133] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1874'. [ 436.366918][T10147] device sit0 left promiscuous mode [ 436.683069][T10148] device sit0 entered promiscuous mode [ 436.812215][T10157] netlink: 'syz.2.1888': attribute type 10 has an invalid length. [ 436.833308][T10157] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1888'. [ 438.925283][T10195] netlink: 'syz.3.1892': attribute type 10 has an invalid length. [ 438.995839][T10195] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1892'. [ 439.589062][T10207] netlink: 'syz.2.1895': attribute type 1 has an invalid length. [ 439.602359][T10207] netlink: 'syz.2.1895': attribute type 2 has an invalid length. [ 439.622483][T10207] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1895'. [ 439.988895][T10213] FAULT_INJECTION: forcing a failure. [ 439.988895][T10213] name failslab, interval 1, probability 0, space 0, times 0 [ 440.009878][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.016295][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.088055][T10213] CPU: 0 PID: 10213 Comm: syz.1.1897 Not tainted syzkaller #0 [ 440.095599][T10213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 440.105687][T10213] Call Trace: [ 440.108997][T10213] [ 440.111959][T10213] dump_stack_lvl+0x188/0x24e [ 440.116674][T10213] ? show_regs_print_info+0x12/0x12 [ 440.121903][T10213] ? load_image+0x410/0x410 [ 440.126472][T10213] ? __might_sleep+0xd0/0xd0 [ 440.131097][T10213] ? __lock_acquire+0x7ea0/0x7ea0 [ 440.136150][T10213] ? mark_lock+0x94/0x320 [ 440.140543][T10213] should_fail_ex+0x390/0x4c0 [ 440.145269][T10213] should_failslab+0x5/0x20 [ 440.149818][T10213] slab_pre_alloc_hook+0x59/0x300 [ 440.154897][T10213] ? __get_vm_area_node+0x122/0x330 [ 440.160143][T10213] __kmem_cache_alloc_node+0x4f/0x270 [ 440.165560][T10213] ? __get_vm_area_node+0x122/0x330 [ 440.170810][T10213] kmalloc_node_trace+0x22/0xe0 [ 440.175712][T10213] __get_vm_area_node+0x122/0x330 [ 440.180789][T10213] __vmalloc_node_range+0x357/0x1380 [ 440.186111][T10213] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 440.191717][T10213] ? aa_get_newest_label+0xf9/0x5b0 [ 440.197248][T10213] ? free_vm_area+0x50/0x50 [ 440.201792][T10213] ? end_current_label_crit_section+0x170/0x170 [ 440.208103][T10213] ? __lock_acquire+0x7ea0/0x7ea0 [ 440.213172][T10213] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 440.218782][T10213] __vmalloc+0x76/0x80 [ 440.222882][T10213] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 440.228466][T10213] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 440.233874][T10213] ? bpf_prog_alloc+0x13/0x1b0 [ 440.238681][T10213] bpf_prog_alloc+0x1c/0x1b0 [ 440.243322][T10213] bpf_prog_load+0x7d4/0x1530 [ 440.248389][T10213] ? map_freeze+0x390/0x390 [ 440.252924][T10213] ? __might_fault+0xa6/0x120 [ 440.257659][T10213] ? __might_fault+0xa6/0x120 [ 440.262361][T10213] ? __might_fault+0xc2/0x120 [ 440.267055][T10213] ? __might_fault+0xa6/0x120 [ 440.271770][T10213] ? bpf_lsm_bpf+0x5/0x10 [ 440.276126][T10213] ? security_bpf+0x7a/0xa0 [ 440.280654][T10213] __sys_bpf+0x5b8/0x780 [ 440.284934][T10213] ? bpf_link_show_fdinfo+0x380/0x380 [ 440.290371][T10213] ? lock_chain_count+0x20/0x20 [ 440.295258][T10213] __x64_sys_bpf+0x78/0x90 [ 440.299710][T10213] do_syscall_64+0x4c/0xa0 [ 440.304153][T10213] ? clear_bhb_loop+0x60/0xb0 [ 440.308950][T10213] ? clear_bhb_loop+0x60/0xb0 [ 440.313654][T10213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.319585][T10213] RIP: 0033:0x7fa11939f559 [ 440.324026][T10213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.343659][T10213] RSP: 002b:00007fa11a300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 440.352101][T10213] RAX: ffffffffffffffda RBX: 00007fa119625fa0 RCX: 00007fa11939f559 [ 440.360116][T10213] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 440.368116][T10213] RBP: 00007fa11a300090 R08: 0000000000000000 R09: 0000000000000000 [ 440.376118][T10213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.384300][T10213] R13: 00007fa119626038 R14: 00007fa119625fa0 R15: 00007ffe83647fd8 [ 440.392337][T10213] [ 440.455933][T10221] FAULT_INJECTION: forcing a failure. [ 440.455933][T10221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.493112][T10215] rxe_eth0 speed is unknown, defaulting to 1000 [ 440.500610][T10221] CPU: 1 PID: 10221 Comm: syz.4.1899 Not tainted syzkaller #0 [ 440.508130][T10221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 440.518315][T10221] Call Trace: [ 440.521631][T10221] [ 440.524600][T10221] dump_stack_lvl+0x188/0x24e [ 440.529419][T10221] ? show_regs_print_info+0x12/0x12 [ 440.534706][T10221] ? load_image+0x410/0x410 [ 440.539275][T10221] ? __lock_acquire+0x7ea0/0x7ea0 [ 440.544397][T10221] should_fail_ex+0x390/0x4c0 [ 440.549165][T10221] _copy_from_user+0x2c/0x170 [ 440.553890][T10221] iovec_from_user+0x143/0x360 [ 440.558717][T10221] __import_iovec+0x6c/0x510 [ 440.563371][T10221] import_iovec+0x6f/0xa0 [ 440.567758][T10221] ___sys_sendmsg+0x252/0x360 [ 440.572511][T10221] ? __sys_sendmsg+0x2a0/0x2a0 [ 440.577347][T10221] ? __lock_acquire+0x7ea0/0x7ea0 [ 440.582455][T10221] __se_sys_sendmsg+0x1c3/0x2b0 [ 440.587373][T10221] ? __x64_sys_sendmsg+0x80/0x80 [ 440.592385][T10221] ? lockdep_hardirqs_on+0x94/0x140 [ 440.597641][T10221] do_syscall_64+0x4c/0xa0 [ 440.602104][T10221] ? clear_bhb_loop+0x60/0xb0 [ 440.606822][T10221] ? clear_bhb_loop+0x60/0xb0 [ 440.611981][T10221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.617930][T10221] RIP: 0033:0x7fbf7e19f559 [ 440.622383][T10221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.642133][T10221] RSP: 002b:00007fbf7f0a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.650637][T10221] RAX: ffffffffffffffda RBX: 00007fbf7e425fa0 RCX: 00007fbf7e19f559 [ 440.658678][T10221] RDX: 0000000020008000 RSI: 0000200000000740 RDI: 0000000000000003 [ 440.666700][T10221] RBP: 00007fbf7f0a4090 R08: 0000000000000000 R09: 0000000000000000 [ 440.674717][T10221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.682746][T10221] R13: 00007fbf7e426038 R14: 00007fbf7e425fa0 R15: 00007fff757e6208 [ 440.690790][T10221] [ 440.747684][T10213] syz.1.1897: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 440.777858][T10213] CPU: 1 PID: 10213 Comm: syz.1.1897 Not tainted syzkaller #0 [ 440.785403][T10213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 440.795512][T10213] Call Trace: [ 440.798826][T10213] [ 440.801826][T10213] dump_stack_lvl+0x188/0x24e [ 440.806584][T10213] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 440.813079][T10213] ? show_regs_print_info+0x12/0x12 [ 440.818331][T10213] ? load_image+0x410/0x410 [ 440.822902][T10213] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 440.829371][T10213] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 440.835931][T10213] warn_alloc+0x242/0x330 [ 440.840321][T10213] ? __get_vm_area_node+0x122/0x330 [ 440.845599][T10213] ? zone_watermark_ok_safe+0x270/0x270 [ 440.851206][T10213] ? rcu_is_watching+0x11/0xa0 [ 440.856117][T10213] ? __get_vm_area_node+0x318/0x330 [ 440.861372][T10213] __vmalloc_node_range+0x37c/0x1380 [ 440.866740][T10213] ? aa_get_newest_label+0xf9/0x5b0 [ 440.872028][T10213] ? free_vm_area+0x50/0x50 [ 440.876580][T10213] ? end_current_label_crit_section+0x170/0x170 [ 440.882993][T10213] ? __lock_acquire+0x7ea0/0x7ea0 [ 440.888105][T10213] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 440.893718][T10213] __vmalloc+0x76/0x80 [ 440.897841][T10213] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 440.903448][T10213] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 440.908866][T10213] ? bpf_prog_alloc+0x13/0x1b0 [ 440.913669][T10213] bpf_prog_alloc+0x1c/0x1b0 [ 440.918295][T10213] bpf_prog_load+0x7d4/0x1530 [ 440.923016][T10213] ? map_freeze+0x390/0x390 [ 440.927558][T10213] ? __might_fault+0xa6/0x120 [ 440.932287][T10213] ? __might_fault+0xa6/0x120 [ 440.936989][T10213] ? __might_fault+0xc2/0x120 [ 440.941694][T10213] ? __might_fault+0xa6/0x120 [ 440.946398][T10213] ? bpf_lsm_bpf+0x5/0x10 [ 440.950840][T10213] ? security_bpf+0x7a/0xa0 [ 440.955369][T10213] __sys_bpf+0x5b8/0x780 [ 440.959651][T10213] ? bpf_link_show_fdinfo+0x380/0x380 [ 440.965072][T10213] ? lock_chain_count+0x20/0x20 [ 440.969968][T10213] __x64_sys_bpf+0x78/0x90 [ 440.974419][T10213] do_syscall_64+0x4c/0xa0 [ 440.978857][T10213] ? clear_bhb_loop+0x60/0xb0 [ 440.983560][T10213] ? clear_bhb_loop+0x60/0xb0 [ 440.988350][T10213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.994381][T10213] RIP: 0033:0x7fa11939f559 [ 440.998833][T10213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.018742][T10213] RSP: 002b:00007fa11a300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 441.027219][T10213] RAX: ffffffffffffffda RBX: 00007fa119625fa0 RCX: 00007fa11939f559 [ 441.035242][T10213] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 441.043274][T10213] RBP: 00007fa11a300090 R08: 0000000000000000 R09: 0000000000000000 [ 441.051293][T10213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.059301][T10213] R13: 00007fa119626038 R14: 00007fa119625fa0 R15: 00007ffe83647fd8 [ 441.067348][T10213] [ 441.096980][T10213] Mem-Info: [ 441.115564][T10213] active_anon:7630 inactive_anon:0 isolated_anon:0 [ 441.115564][T10213] active_file:22942 inactive_file:40099 isolated_file:0 [ 441.115564][T10213] unevictable:768 dirty:174 writeback:0 [ 441.115564][T10213] slab_reclaimable:21511 slab_unreclaimable:96104 [ 441.115564][T10213] mapped:31111 shmem:1364 pagetables:623 [ 441.115564][T10213] sec_pagetables:0 bounce:0 [ 441.115564][T10213] kernel_misc_reclaimable:0 [ 441.115564][T10213] free:1308086 free_pcp:8807 free_cma:0 [ 441.275561][T10228] device sit0 left promiscuous mode [ 441.305611][T10213] Node 0 active_anon:30620kB inactive_anon:0kB active_file:91768kB inactive_file:160192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124444kB dirty:696kB writeback:0kB shmem:3920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11796kB pagetables:2492kB sec_pagetables:0kB all_unreclaimable? no [ 441.353602][T10213] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 441.490288][T10213] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 441.706023][T10213] lowmem_reserve[]: 0 2509 2510 2510 2510 [ 441.758295][T10213] Node 0 DMA32 free:1316916kB boost:0kB min:34540kB low:43172kB high:51804kB reserved_highatomic:0KB active_anon:30920kB inactive_anon:0kB active_file:91768kB inactive_file:160192kB unevictable:1536kB writepending:696kB present:3129332kB managed:2574528kB mlocked:0kB bounce:0kB free_pcp:18380kB local_pcp:10424kB free_cma:0kB [ 441.981546][T10213] lowmem_reserve[]: 0 0 1 1 1 [ 442.005674][T10213] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 442.092291][T10231] device sit0 entered promiscuous mode [ 442.146463][T10213] lowmem_reserve[]: 0 0 0 0 0 [ 442.171233][T10213] Node 1 Normal free:3899312kB boost:0kB min:55344kB low:69180kB high:83016kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:16512kB local_pcp:9152kB free_cma:0kB [ 442.323205][T10213] lowmem_reserve[]: 0 0 0 0 0 [ 442.337706][T10213] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 442.361018][T10213] Node 0 DMA32: 1097*4kB (UME) 1565*8kB (UME) 1667*16kB (UME) 656*32kB (UME) 552*64kB (UME) 124*128kB (UME) 50*256kB (UME) 12*512kB (UM) 4*1024kB (UM) 3*2048kB (UME) 286*4096kB (UM) = 1316412kB [ 442.390812][T10213] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 442.418746][T10213] Node 1 Normal: 234*4kB (UE) 59*8kB (UE) 21*16kB (UME) 41*32kB (UME) 31*64kB (UME) 20*128kB (UME) 10*256kB (UME) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3899312kB [ 442.457733][T10213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 442.467367][T10213] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 442.524149][T10213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 442.545672][T10213] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 442.566191][T10213] 64407 total pagecache pages [ 442.577147][T10213] 0 pages in swap cache [ 442.586926][T10213] Free swap = 124996kB [ 442.591603][T10213] Total swap = 124996kB [ 442.595805][T10213] 2097051 pages RAM [ 442.612185][T10213] 0 pages HighMem/MovableOnly [ 442.616948][T10213] 419818 pages reserved [ 442.638474][T10213] 0 pages cma reserved [ 442.756102][T10235] device sit0 left promiscuous mode [ 442.807176][T10236] device sit0 entered promiscuous mode [ 442.890542][T10240] netlink: 'syz.2.1904': attribute type 10 has an invalid length. [ 442.915449][T10240] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1904'. [ 444.619234][T10272] FAULT_INJECTION: forcing a failure. [ 444.619234][T10272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.723629][T10272] CPU: 1 PID: 10272 Comm: syz.0.1916 Not tainted syzkaller #0 [ 444.731175][T10272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 444.741275][T10272] Call Trace: [ 444.744584][T10272] [ 444.747580][T10272] dump_stack_lvl+0x188/0x24e [ 444.752338][T10272] ? show_regs_print_info+0x12/0x12 [ 444.757587][T10272] ? load_image+0x410/0x410 [ 444.762156][T10272] ? __lock_acquire+0x7ea0/0x7ea0 [ 444.767265][T10272] should_fail_ex+0x390/0x4c0 [ 444.772016][T10272] _copy_from_user+0x2c/0x170 [ 444.776779][T10272] ___sys_sendmsg+0x1c3/0x360 [ 444.781524][T10272] ? __sys_sendmsg+0x2a0/0x2a0 [ 444.786370][T10272] ? __lock_acquire+0x7ea0/0x7ea0 [ 444.791486][T10272] __se_sys_sendmsg+0x1c3/0x2b0 [ 444.796578][T10272] ? __x64_sys_sendmsg+0x80/0x80 [ 444.801589][T10272] ? lockdep_hardirqs_on+0x94/0x140 [ 444.806895][T10272] do_syscall_64+0x4c/0xa0 [ 444.811356][T10272] ? clear_bhb_loop+0x60/0xb0 [ 444.816102][T10272] ? clear_bhb_loop+0x60/0xb0 [ 444.820821][T10272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.826799][T10272] RIP: 0033:0x7f1362f9f559 [ 444.831351][T10272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.851104][T10272] RSP: 002b:00007f1363e2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.859574][T10272] RAX: ffffffffffffffda RBX: 00007f1363225fa0 RCX: 00007f1362f9f559 [ 444.867597][T10272] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 444.875622][T10272] RBP: 00007f1363e2a090 R08: 0000000000000000 R09: 0000000000000000 [ 444.883647][T10272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.891749][T10272] R13: 00007f1363226038 R14: 00007f1363225fa0 R15: 00007ffe7634cf28 [ 444.899807][T10272] [ 444.911750][T10274] device sit0 left promiscuous mode [ 446.164760][T10277] device sit0 entered promiscuous mode [ 446.203928][T10290] netlink: 'syz.0.1922': attribute type 10 has an invalid length. [ 446.214805][T10290] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1922'. [ 446.245099][T10292] device sit0 left promiscuous mode [ 446.363277][T10293] device sit0 entered promiscuous mode serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.