last executing test programs: 2.827849299s ago: executing program 0 (id=17533): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x200000c0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x40) 2.574074941s ago: executing program 0 (id=17538): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) (fail_nth: 4) 1.974457141s ago: executing program 0 (id=17543): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = gettid() perf_event_open(&(0x7f0000000580)={0x7, 0x80, 0x3, 0x6, 0x9, 0xe8, 0x0, 0x101, 0x80004, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000200)}, 0x100002, 0x9, 0x8, 0x9, 0x0, 0x81, 0x7, 0x0, 0x4, 0x0, 0x7ff}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x11}, 0x20) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000380)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="2e00000011008188040f80ec59acbc0413a1f848090000005e2f0042180000180e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000000c0)={r10}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe4000000071101d000000000095000000000000005c9c425e81ea36b568304b23fe7b40a2d4de5740e23736a62670cf1289eccfc6d5c3a50deee323425466ea0c9a806e008d3b17fa508d4f32cdccbe4e2515d91e8adcc85056b4e0c5bb3cedf7a8b2280aa6c4d1a8395a756eaa95bb18c800000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) 1.675230421s ago: executing program 2 (id=17549): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000007180)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000007240)={0x1b, 0xa, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe3f, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x1, 0x7, 0x7, 0x7, 0xffffffffffffffc0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000880)='GPL\x00', 0x1, 0xca, &(0x7f0000001c00)=""/202, 0x0, 0x11, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000001d00)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001d40)={0x3, 0x3, 0x4, 0x6bb6}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000071c0)=[r1, r1, r2], &(0x7f0000007200)=[{0x0, 0x1, 0xa, 0x4}, {0x4, 0x2, 0xf}, {0x0, 0x5, 0x0, 0xf}, {0x4, 0x5, 0x10, 0x4}], 0x10, 0x1ff}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x736}, 0x40000000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) recvmsg$unix(r3, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005ec0)=[{&(0x7f0000001b40)=""/155, 0x9b}, {&(0x7f0000004c80)=""/4096, 0x1000}, {&(0x7f0000005c80)=""/207, 0xcf}, {&(0x7f0000005d80)=""/225, 0xe1}, {&(0x7f0000005e80)=""/6, 0x6}], 0x5}, 0x142) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x41, &(0x7f0000000100)=r10, 0x8) setsockopt$sock_attach_bpf(r9, 0x1, 0x41, &(0x7f0000000100)=r8, 0x4) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1829, 0x0, 0x0, 0x0, 0xe, 0x1, 0x9, 0x0, 0xad8f, 0x0, 0x40}, 0x0, 0x10, r8, 0x0) openat$cgroup_ro(r8, &(0x7f00000003c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r7, &(0x7f00000002c0), &(0x7f0000000300)=""/109}, 0x20) r11 = socket$kcm(0x22, 0x2, 0x21) sendmsg$inet(r11, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="800000d3633013ec37ab170000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 1.534883985s ago: executing program 3 (id=17550): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 1.326307259s ago: executing program 2 (id=17551): r0 = perf_event_open(&(0x7f00000006c0)={0x0, 0x80, 0x2, 0x7, 0x5, 0x3, 0x0, 0x7f, 0x8, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0xd, 0x5f}, 0x800, 0x2565, 0x1, 0x8, 0x8c00000000000000, 0x101, 0x0, 0x0, 0xb38, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000740)='\x00'}, 0x30) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x11, 0x20000000000000a, 0x300) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.323245699s ago: executing program 1 (id=17559): perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f00"], 0x48}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640)) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, 0x0}, 0x20040000) socketpair(0x1, 0xa, 0x80000001, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r2}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0c408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4bb0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8700000d16a4683f1aeb4edbb57a5025cc67e006dcdf63955ce3bb9ad809d5e1cece81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9243370e9701fa4a3f7d561b343411dfa6244de137817856", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80d1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, 0x0, 0x4000000) r7 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r7, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{0x0}], 0x1}, 0x4000040) 1.116845574s ago: executing program 1 (id=17552): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x36, &(0x7f0000000100), 0x120) (fail_nth: 1) 750.257145ms ago: executing program 3 (id=17553): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b000a", 0x23}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 651.841751ms ago: executing program 1 (id=17554): r0 = perf_event_open(&(0x7f00000006c0)={0x0, 0x80, 0x2, 0x7, 0x5, 0x3, 0x0, 0x7f, 0x8, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0xd, 0x5f}, 0x800, 0x2565, 0x1, 0x8, 0x8c00000000000000, 0x101, 0x0, 0x0, 0xb38, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000740)='\x00'}, 0x30) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x11, 0x20000000000000a, 0x300) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 615.743378ms ago: executing program 2 (id=17555): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c7a15a118000a000000010000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 597.95687ms ago: executing program 3 (id=17556): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x200000c0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40) 535.835741ms ago: executing program 0 (id=17557): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x4014) 474.545161ms ago: executing program 2 (id=17558): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x9151, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x1, @perf_config_ext={0xe, 0x1ef7}, 0x17, 0x4, 0x98, 0x9, 0x8, 0x32f7cb41, 0xffff, 0x0, 0x0, 0x0, 0x100024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f5, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 473.856901ms ago: executing program 1 (id=17560): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000007180)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000007240)={0x1b, 0xa, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe3f, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x1, 0x7, 0x7, 0x7, 0xffffffffffffffc0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000880)='GPL\x00', 0x1, 0xca, &(0x7f0000001c00)=""/202, 0x0, 0x11, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000001d00)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001d40)={0x3, 0x3, 0x4, 0x6bb6}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000071c0)=[r1, r1, r2], &(0x7f0000007200)=[{0x0, 0x1, 0xa, 0x4}, {0x4, 0x2, 0xf}, {0x0, 0x5, 0x0, 0xf}, {0x4, 0x5, 0x10, 0x4}], 0x10, 0x1ff}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x736}, 0x40000000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) recvmsg$unix(r3, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005ec0)=[{&(0x7f0000001b40)=""/155, 0x9b}, {&(0x7f0000004c80)=""/4096, 0x1000}, {&(0x7f0000005c80)=""/207, 0xcf}, {&(0x7f0000005d80)=""/225, 0xe1}, {&(0x7f0000005e80)=""/6, 0x6}], 0x5}, 0x142) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x41, &(0x7f0000000100)=r10, 0x8) setsockopt$sock_attach_bpf(r9, 0x1, 0x41, &(0x7f0000000100)=r8, 0x4) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1829, 0x0, 0x0, 0x0, 0xe, 0x1, 0x9, 0x0, 0xad8f, 0x0, 0x40}, 0x0, 0x10, r8, 0x0) openat$cgroup_ro(r8, &(0x7f00000003c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r7, &(0x7f00000002c0), &(0x7f0000000300)=""/109}, 0x20) r11 = socket$kcm(0x22, 0x2, 0x21) sendmsg$inet(r11, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="800000d3633013ec37ab170000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 405.280233ms ago: executing program 0 (id=17561): perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f00"], 0x48}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640)) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, 0x0}, 0x20040000) socketpair(0x1, 0xa, 0x80000001, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r2}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0c408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4bb0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8700000d16a4683f1aeb4edbb57a5025cc67e006dcdf63955ce3bb9ad809d5e1cece81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9243370e9701fa4a3f7d561b343411dfa6244de137817856", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80d1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, 0x0, 0x4000000) r7 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r7, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{0x0}], 0x1}, 0x4000040) 375.271508ms ago: executing program 3 (id=17562): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xc) (async) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r1}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) (async) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000001d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x2c}, 0x28) r3 = perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0xd8, 0xf7, 0x3, 0x0, 0x0, 0x1ff, 0x9022, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x0, @perf_config_ext={0x1, 0x7}, 0x1000, 0x1ff, 0x100, 0x7, 0x57739627, 0xd, 0x2, 0x0, 0x0, 0x0, 0x40}, r2, 0x10, r0, 0x5) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 287.355573ms ago: executing program 1 (id=17563): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 145.336576ms ago: executing program 2 (id=17564): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2ee5ffff09", 0x5}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8990, &(0x7f0000000200)={'bond0\x00', @local}) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfe33) 145.038226ms ago: executing program 3 (id=17565): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0xf3, 0xa, 0x0, 0x0, 0xd006e1258c4875cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x4c30, 0xc8, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0911000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa2c200007"], 0xfdef) 93.584385ms ago: executing program 0 (id=17566): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2a609, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xa, 0x7fffffff}, 0x10c101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x120000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000180)='%pK \x00'}, 0x20) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000380)}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[], 0x0, 0x36, 0x0, 0x1, 0x7}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01171800000000000000280000002800000004000000020000000000000c02000000000000000200000d020000001000000000000000000000000000000000005f00"], 0x0, 0x44, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f0000000a40), &(0x7f0000000a80)='%pB \x00'}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x3fff7ffa}, 0x0, 0x1000000000035, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRESHEX=r4], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000090010000000000003"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_bp={&(0x7f00000002c0), 0x5}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x6, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000a00300000500000000000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r8, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) ioctl$SIOCSIFHWADDR(r5, 0xc0189436, 0x0) 54.816551ms ago: executing program 3 (id=17567): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000007180)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000007240)={0x1b, 0xa, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe3f, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x1, 0x7, 0x7, 0x7, 0xffffffffffffffc0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000880)='GPL\x00', 0x1, 0xca, &(0x7f0000001c00)=""/202, 0x0, 0x11, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000001d00)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001d40)={0x3, 0x3, 0x4, 0x6bb6}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000071c0)=[r1, r1, r2], &(0x7f0000007200)=[{0x0, 0x1, 0xa, 0x4}, {0x4, 0x2, 0xf}, {0x0, 0x5, 0x0, 0xf}, {0x4, 0x5, 0x10, 0x4}], 0x10, 0x1ff}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x736}, 0x40000000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r3, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005ec0)=[{&(0x7f0000001b40)=""/155, 0x9b}, {&(0x7f0000004c80)=""/4096, 0x1000}, {&(0x7f0000005c80)=""/207, 0xcf}, {&(0x7f0000005d80)=""/225, 0xe1}, {&(0x7f0000005e80)=""/6, 0x6}], 0x5}, 0x142) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x4003, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x41, &(0x7f0000000100)=r9, 0x8) setsockopt$sock_attach_bpf(r8, 0x1, 0x41, &(0x7f0000000100)=r7, 0x4) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1829, 0x0, 0x0, 0x0, 0xe, 0x1, 0x9, 0x0, 0xad8f, 0x0, 0x40}, 0x0, 0x10, r7, 0x0) openat$cgroup_ro(r7, &(0x7f00000003c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=""/109}, 0x20) r10 = socket$kcm(0x22, 0x2, 0x21) sendmsg$inet(r10, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="800000d3633013ec37ab170000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 12.648828ms ago: executing program 2 (id=17568): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001580)={{r0}, &(0x7f0000001500), &(0x7f0000001540)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x9151, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x1, @perf_config_ext={0xe, 0x1ef7}, 0x17, 0x4, 0x98, 0x9, 0x8, 0x32f7cb41, 0xffff, 0x0, 0x0, 0x0, 0x100024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0700147ea64e21160af3650ab68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367", 0x44}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='5-2'], 0x23) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x4, 0xc1, 0xffffffffffffffff, 0x1000000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x3d, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r6, &(0x7f0000000580)="3539582fb4c6", &(0x7f0000000940)=""/208}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) 0s ago: executing program 1 (id=17569): r0 = perf_event_open(&(0x7f00000006c0)={0x0, 0x80, 0x2, 0x7, 0x5, 0x3, 0x0, 0x7f, 0x8, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0xd, 0x5f}, 0x800, 0x2565, 0x1, 0x8, 0x8c00000000000000, 0x101, 0x0, 0x0, 0xb38, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000740)='\x00'}, 0x30) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x11, 0x20000000000000a, 0x300) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 23747] netlink: 'syz.3.16901': attribute type 2 has an invalid length. [ 3351.498092][T23747] __nla_validate_parse: 2 callbacks suppressed [ 3351.498104][T23747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16901'. [ 3351.562777][T23753] netlink: 'syz.0.16902': attribute type 10 has an invalid length. [ 3351.705343][T23760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3351.741407][T23760] netlink: 'syz.1.16906': attribute type 2 has an invalid length. [ 3351.750136][T23760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16906'. [ 3352.432499][T23773] syz.1.16910[23773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3352.432751][T23773] syz.1.16910[23773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3352.586717][T23776] delete_channel: no stack [ 3352.618029][T23780] FAULT_INJECTION: forcing a failure. [ 3352.618029][T23780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3352.653828][T23780] CPU: 0 PID: 23780 Comm: syz.1.16912 Not tainted syzkaller #0 [ 3352.661828][T23780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3352.672873][T23780] Call Trace: [ 3352.676351][T23780] [ 3352.679572][T23780] dump_stack_lvl+0x18c/0x250 [ 3352.684912][T23780] ? show_regs_print_info+0x20/0x20 [ 3352.690411][T23780] ? load_image+0x420/0x420 [ 3352.695062][T23780] ? __might_fault+0xaa/0x120 [ 3352.700381][T23780] ? __lock_acquire+0x7d40/0x7d40 [ 3352.705793][T23780] ? unix_ioctl+0x261/0x670 [ 3352.710715][T23780] should_fail_ex+0x39d/0x4d0 [ 3352.715826][T23780] _copy_from_user+0x2f/0xe0 [ 3352.720808][T23780] sock_do_ioctl+0x190/0x310 [ 3352.725710][T23780] ? sock_show_fdinfo+0xb0/0xb0 [ 3352.731056][T23780] sock_ioctl+0x5ba/0x7e0 [ 3352.735602][T23780] ? sock_poll+0x3e0/0x3e0 [ 3352.740341][T23780] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3352.745569][T23780] ? security_file_ioctl+0x80/0xa0 [ 3352.750805][T23780] ? sock_poll+0x3e0/0x3e0 [ 3352.755575][T23780] __se_sys_ioctl+0xfd/0x170 [ 3352.760898][T23780] do_syscall_64+0x55/0xa0 [ 3352.765424][T23780] ? clear_bhb_loop+0x40/0x90 [ 3352.770739][T23780] ? clear_bhb_loop+0x40/0x90 [ 3352.775528][T23780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3352.781632][T23780] RIP: 0033:0x7f4361f9c819 [ 3352.786196][T23780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3352.806453][T23780] RSP: 002b:00007f43601f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3352.815104][T23780] RAX: ffffffffffffffda RBX: 00007f4362215fa0 RCX: 00007f4361f9c819 [ 3352.823378][T23780] RDX: 0000200000000900 RSI: 0000000000008914 RDI: 0000000000000004 [ 3352.831497][T23780] RBP: 00007f43601f6090 R08: 0000000000000000 R09: 0000000000000000 [ 3352.839847][T23780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3352.847947][T23780] R13: 00007f4362216038 R14: 00007f4362215fa0 R15: 00007ffeaca6b268 [ 3352.856360][T23780] [ 3352.895655][T23782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3353.025048][T23782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16913'. [ 3354.922842][T23815] validate_nla: 4 callbacks suppressed [ 3354.922859][T23815] netlink: 'syz.2.16926': attribute type 10 has an invalid length. [ 3354.965681][T23820] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.16927'. [ 3354.985093][T23819] bridge0: port 3(batadv0) entered disabled state [ 3354.991995][T23819] bridge0: port 2(bridge_slave_1) entered disabled state [ 3354.999931][T23819] bridge0: port 1(bridge_slave_0) entered disabled state [ 3355.028377][T23819] bridge0: entered allmulticast mode [ 3355.354707][T23837] FAULT_INJECTION: forcing a failure. [ 3355.354707][T23837] name failslab, interval 1, probability 0, space 0, times 0 [ 3355.370352][T23837] CPU: 1 PID: 23837 Comm: syz.3.16933 Not tainted syzkaller #0 [ 3355.378408][T23837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3355.389293][T23837] Call Trace: [ 3355.392596][T23837] [ 3355.395728][T23837] dump_stack_lvl+0x18c/0x250 [ 3355.400607][T23837] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3355.407192][T23837] ? show_regs_print_info+0x20/0x20 [ 3355.412930][T23837] ? load_image+0x420/0x420 [ 3355.417545][T23837] should_fail_ex+0x39d/0x4d0 [ 3355.422312][T23837] should_failslab+0x9/0x20 [ 3355.426925][T23837] slab_pre_alloc_hook+0x59/0x310 [ 3355.432222][T23837] ? bpf_prog_alloc+0x3d/0x1a0 [ 3355.437283][T23837] ? bpf_prog_load+0x6eb/0x1670 [ 3355.442302][T23837] ? __sys_bpf+0x5ba/0x890 [ 3355.446739][T23837] kmem_cache_alloc_node+0x60/0x320 [ 3355.452218][T23837] ? alloc_vmap_area+0x1b4/0x1e30 [ 3355.457425][T23837] alloc_vmap_area+0x1b4/0x1e30 [ 3355.462288][T23837] ? vm_map_ram+0xcb0/0xcb0 [ 3355.466789][T23837] ? rcu_is_watching+0x15/0xb0 [ 3355.471736][T23837] __get_vm_area_node+0x162/0x370 [ 3355.476850][T23837] __vmalloc_node_range+0x36e/0x1330 [ 3355.482240][T23837] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 3355.487981][T23837] ? irqentry_enter+0x37/0x50 [ 3355.492783][T23837] ? lock_chain_count+0x20/0x20 [ 3355.497652][T23837] ? free_vm_area+0x50/0x50 [ 3355.502161][T23837] ? lockdep_hardirqs_on+0x98/0x150 [ 3355.507723][T23837] ? end_current_label_crit_section+0x170/0x170 [ 3355.513966][T23837] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 3355.519603][T23837] __vmalloc+0x7a/0x90 [ 3355.523690][T23837] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 3355.529339][T23837] bpf_prog_alloc_no_stats+0x47/0x440 [ 3355.534925][T23837] ? bpf_prog_alloc+0x2b/0x1a0 [ 3355.539895][T23837] bpf_prog_alloc+0x3d/0x1a0 [ 3355.544751][T23837] bpf_prog_load+0x6eb/0x1670 [ 3355.549536][T23837] ? map_freeze+0x420/0x420 [ 3355.554127][T23837] ? __might_fault+0xaa/0x120 [ 3355.558993][T23837] ? __lock_acquire+0x7d40/0x7d40 [ 3355.564108][T23837] ? __might_fault+0xaa/0x120 [ 3355.568867][T23837] ? __might_fault+0xc6/0x120 [ 3355.573802][T23837] ? __might_fault+0xaa/0x120 [ 3355.578757][T23837] ? bpf_lsm_bpf+0x9/0x10 [ 3355.583296][T23837] ? security_bpf+0x7e/0xa0 [ 3355.588005][T23837] __sys_bpf+0x5ba/0x890 [ 3355.592340][T23837] ? bpf_link_show_fdinfo+0x390/0x390 [ 3355.598282][T23837] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3355.604574][T23837] __x64_sys_bpf+0x7c/0x90 [ 3355.609094][T23837] do_syscall_64+0x55/0xa0 [ 3355.613640][T23837] ? clear_bhb_loop+0x40/0x90 [ 3355.618336][T23837] ? clear_bhb_loop+0x40/0x90 [ 3355.623186][T23837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3355.629375][T23837] RIP: 0033:0x7f2d4cd9c819 [ 3355.633987][T23837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3355.654166][T23837] RSP: 002b:00007f2d4dc2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3355.662842][T23837] RAX: ffffffffffffffda RBX: 00007f2d4d015fa0 RCX: 00007f2d4cd9c819 [ 3355.671337][T23837] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 3355.679750][T23837] RBP: 00007f2d4dc2e090 R08: 0000000000000000 R09: 0000000000000000 [ 3355.688502][T23837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3355.697002][T23837] R13: 00007f2d4d016038 R14: 00007f2d4d015fa0 R15: 00007ffc8ef9ff68 [ 3355.705208][T23837] [ 3355.757145][T23837] syz.3.16933: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 3355.785926][T23837] CPU: 0 PID: 23837 Comm: syz.3.16933 Not tainted syzkaller #0 [ 3355.793792][T23837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3355.804479][T23837] Call Trace: [ 3355.807889][T23837] [ 3355.810852][T23837] dump_stack_lvl+0x18c/0x250 [ 3355.815921][T23837] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3355.822544][T23837] ? show_regs_print_info+0x20/0x20 [ 3355.828076][T23837] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3355.834447][T23837] ? dump_stack+0x9/0x20 [ 3355.838850][T23837] warn_alloc+0x246/0x340 [ 3355.843298][T23837] ? slab_free_freelist_hook+0x130/0x1a0 [ 3355.849038][T23837] ? zone_watermark_ok_safe+0x230/0x230 [ 3355.854694][T23837] ? __get_vm_area_node+0x17b/0x370 [ 3355.860218][T23837] ? __get_vm_area_node+0x17b/0x370 [ 3355.865793][T23837] __vmalloc_node_range+0x393/0x1330 [ 3355.871649][T23837] ? irqentry_enter+0x37/0x50 [ 3355.876355][T23837] ? lock_chain_count+0x20/0x20 [ 3355.881491][T23837] ? free_vm_area+0x50/0x50 [ 3355.886136][T23837] ? lockdep_hardirqs_on+0x98/0x150 [ 3355.891443][T23837] ? end_current_label_crit_section+0x170/0x170 [ 3355.897981][T23837] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 3355.903731][T23837] __vmalloc+0x7a/0x90 [ 3355.908013][T23837] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 3355.913767][T23837] bpf_prog_alloc_no_stats+0x47/0x440 [ 3355.919349][T23837] ? bpf_prog_alloc+0x2b/0x1a0 [ 3355.924661][T23837] bpf_prog_alloc+0x3d/0x1a0 [ 3355.929456][T23837] bpf_prog_load+0x6eb/0x1670 [ 3355.934430][T23837] ? map_freeze+0x420/0x420 [ 3355.939139][T23837] ? __might_fault+0xaa/0x120 [ 3355.944178][T23837] ? __lock_acquire+0x7d40/0x7d40 [ 3355.949319][T23837] ? __might_fault+0xaa/0x120 [ 3355.954141][T23837] ? __might_fault+0xc6/0x120 [ 3355.959147][T23837] ? __might_fault+0xaa/0x120 [ 3355.964024][T23837] ? bpf_lsm_bpf+0x9/0x10 [ 3355.968652][T23837] ? security_bpf+0x7e/0xa0 [ 3355.973455][T23837] __sys_bpf+0x5ba/0x890 [ 3355.978079][T23837] ? bpf_link_show_fdinfo+0x390/0x390 [ 3355.983922][T23837] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3355.990380][T23837] __x64_sys_bpf+0x7c/0x90 [ 3355.994999][T23837] do_syscall_64+0x55/0xa0 [ 3355.999615][T23837] ? clear_bhb_loop+0x40/0x90 [ 3356.004413][T23837] ? clear_bhb_loop+0x40/0x90 [ 3356.009289][T23837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3356.015478][T23837] RIP: 0033:0x7f2d4cd9c819 [ 3356.020088][T23837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3356.040940][T23837] RSP: 002b:00007f2d4dc2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3356.049560][T23837] RAX: ffffffffffffffda RBX: 00007f2d4d015fa0 RCX: 00007f2d4cd9c819 [ 3356.057907][T23837] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 3356.066355][T23837] RBP: 00007f2d4dc2e090 R08: 0000000000000000 R09: 0000000000000000 [ 3356.074434][T23837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3356.082520][T23837] R13: 00007f2d4d016038 R14: 00007f2d4d015fa0 R15: 00007ffc8ef9ff68 [ 3356.090801][T23837] [ 3356.138995][T23837] Mem-Info: [ 3356.146014][T23837] active_anon:7735 inactive_anon:0 isolated_anon:0 [ 3356.146014][T23837] active_file:19499 inactive_file:41224 isolated_file:0 [ 3356.146014][T23837] unevictable:768 dirty:650 writeback:0 [ 3356.146014][T23837] slab_reclaimable:11069 slab_unreclaimable:93276 [ 3356.146014][T23837] mapped:25071 shmem:1361 pagetables:548 [ 3356.146014][T23837] sec_pagetables:0 bounce:0 [ 3356.146014][T23837] kernel_misc_reclaimable:0 [ 3356.146014][T23837] free:1338813 free_pcp:8722 free_cma:0 [ 3356.198880][T23837] Node 0 active_anon:30940kB inactive_anon:0kB active_file:77996kB inactive_file:164692kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103284kB dirty:2600kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10152kB pagetables:2192kB sec_pagetables:0kB all_unreclaimable? no [ 3356.233639][T23837] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 3356.265712][T23837] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3356.294461][T23837] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 3356.300759][T23837] Node 0 DMA32 free:1447972kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:30900kB inactive_anon:0kB active_file:77996kB inactive_file:163864kB unevictable:1536kB writepending:2600kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:8768kB local_pcp:248kB free_cma:0kB [ 3356.332609][T23837] lowmem_reserve[]: 0 0 0 0 0 [ 3356.337787][T23837] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 3356.366622][T23837] lowmem_reserve[]: 0 0 0 0 0 [ 3356.372374][T23837] Node 1 Normal free:3913056kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:5280kB local_pcp:5280kB free_cma:0kB [ 3356.408152][T23837] lowmem_reserve[]: 0 0 0 0 0 [ 3356.413455][T23837] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 3356.431322][T23837] Node 0 DMA32: 1436*4kB (UME) 1155*8kB (UME) 1970*16kB (UME) 1584*32kB (UME) 968*64kB (UME) 449*128kB (UME) 181*256kB (UME) 98*512kB (UME) 60*1024kB (UME) 30*2048kB (UM) 247*4096kB (UM) = 1447720kB [ 3356.459027][T23837] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3356.474397][T23837] Node 1 Normal: 242*4kB (UME) 63*8kB (UME) 44*16kB (UME) 209*32kB (UME) 111*64kB (UME) 28*128kB (UME) 5*256kB (UME) 2*512kB (U) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3913056kB [ 3356.493719][T23837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3356.503886][T23837] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3356.515118][T23837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3356.525698][T23837] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3356.536855][T23837] 62084 total pagecache pages [ 3356.542155][T23837] 0 pages in swap cache [ 3356.546638][T23837] Free swap = 124996kB [ 3356.551492][T23837] Total swap = 124996kB [ 3356.555694][T23837] 2097051 pages RAM [ 3356.561011][T23837] 0 pages HighMem/MovableOnly [ 3356.565853][T23837] 416927 pages reserved [ 3356.570637][T23837] 0 pages cma reserved [ 3356.691790][T23851] netlink: 'syz.1.16937': attribute type 21 has an invalid length. [ 3356.700797][T23851] netlink: 128 bytes leftover after parsing attributes in process `syz.1.16937'. [ 3356.719601][T23851] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16937'. [ 3356.725815][T23848] netlink: 'syz.0.16936': attribute type 10 has an invalid length. [ 3356.738982][T23849] netlink: 'syz.3.16935': attribute type 41 has an invalid length. [ 3356.753269][T23849] netlink: 144 bytes leftover after parsing attributes in process `syz.3.16935'. [ 3356.800228][T23851] ¿: renamed from vlan0 (while UP) [ 3356.930543][T23859] FAULT_INJECTION: forcing a failure. [ 3356.930543][T23859] name failslab, interval 1, probability 0, space 0, times 0 [ 3356.960450][T23859] CPU: 0 PID: 23859 Comm: syz.2.16941 Not tainted syzkaller #0 [ 3356.968170][T23859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3356.978549][T23859] Call Trace: [ 3356.981957][T23859] [ 3356.985084][T23859] dump_stack_lvl+0x18c/0x250 [ 3356.989805][T23859] ? show_regs_print_info+0x20/0x20 [ 3356.995221][T23859] ? load_image+0x420/0x420 [ 3356.999942][T23859] ? __might_sleep+0xe0/0xe0 [ 3357.004676][T23859] ? __lock_acquire+0x7d40/0x7d40 [ 3357.010301][T23859] should_fail_ex+0x39d/0x4d0 [ 3357.015129][T23859] should_failslab+0x9/0x20 [ 3357.019727][T23859] slab_pre_alloc_hook+0x59/0x310 [ 3357.024775][T23859] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 3357.030604][T23859] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 3357.036406][T23859] __kmem_cache_alloc_node+0x53/0x250 [ 3357.041881][T23859] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 3357.047562][T23859] __kmalloc_node+0xa4/0x230 [ 3357.052558][T23859] memcg_alloc_slab_cgroups+0x87/0x130 [ 3357.058318][T23859] slab_post_alloc_hook+0xf4/0x4b0 [ 3357.063534][T23859] kmem_cache_alloc_node+0x14c/0x320 [ 3357.068942][T23859] ? __alloc_skb+0x103/0x2c0 [ 3357.073908][T23859] __alloc_skb+0x103/0x2c0 [ 3357.078555][T23859] alloc_skb_with_frags+0xca/0x7b0 [ 3357.084498][T23859] ? verify_lock_unused+0x140/0x140 [ 3357.089988][T23859] ? verify_lock_unused+0x140/0x140 [ 3357.095363][T23859] sock_alloc_send_pskb+0x883/0x9a0 [ 3357.100839][T23859] ? sock_kzfree_s+0x50/0x50 [ 3357.105448][T23859] ? do_raw_spin_lock+0x11f/0x2c0 [ 3357.110606][T23859] ? __rwlock_init+0x150/0x150 [ 3357.115638][T23859] ? do_raw_spin_unlock+0x121/0x230 [ 3357.120955][T23859] unix_dgram_sendmsg+0x5a2/0x16d0 [ 3357.126106][T23859] ? verify_lock_unused+0x140/0x140 [ 3357.131576][T23859] ? aa_sk_perm+0x83c/0x970 [ 3357.136258][T23859] ? unix_dgram_poll+0x680/0x680 [ 3357.141331][T23859] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 3357.147843][T23859] ? aa_sock_msg_perm+0x94/0x150 [ 3357.152885][T23859] ? unix_seqpacket_sendmsg+0x10c/0x1e0 [ 3357.158520][T23859] ? unix_dgram_peer_wake_me+0x430/0x430 [ 3357.164260][T23859] ____sys_sendmsg+0x5ba/0x960 [ 3357.169123][T23859] ? __asan_memset+0x22/0x40 [ 3357.174072][T23859] ? __sys_sendmsg_sock+0x30/0x30 [ 3357.179270][T23859] ? __import_iovec+0x3fa/0x850 [ 3357.184469][T23859] ? import_iovec+0x73/0xa0 [ 3357.189082][T23859] ___sys_sendmsg+0x2a6/0x360 [ 3357.193946][T23859] ? get_pid_task+0x20/0x1e0 [ 3357.198631][T23859] ? __sys_sendmsg+0x2a0/0x2a0 [ 3357.203927][T23859] ? __lock_acquire+0x7d40/0x7d40 [ 3357.208964][T23859] __se_sys_sendmsg+0x1c2/0x2b0 [ 3357.214169][T23859] ? __x64_sys_sendmsg+0x80/0x80 [ 3357.219296][T23859] ? lockdep_hardirqs_on+0x98/0x150 [ 3357.224678][T23859] do_syscall_64+0x55/0xa0 [ 3357.229116][T23859] ? clear_bhb_loop+0x40/0x90 [ 3357.233886][T23859] ? clear_bhb_loop+0x40/0x90 [ 3357.238744][T23859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3357.244730][T23859] RIP: 0033:0x7fb65ed9c819 [ 3357.249402][T23859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3357.269715][T23859] RSP: 002b:00007fb65fc3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3357.278514][T23859] RAX: ffffffffffffffda RBX: 00007fb65f015fa0 RCX: 00007fb65ed9c819 [ 3357.286675][T23859] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 3357.295005][T23859] RBP: 00007fb65fc3b090 R08: 0000000000000000 R09: 0000000000000000 [ 3357.303343][T23859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3357.312215][T23859] R13: 00007fb65f016038 R14: 00007fb65f015fa0 R15: 00007ffea6c0c008 [ 3357.320470][T23859] [ 3358.086511][T23877] netlink: 'syz.1.16947': attribute type 10 has an invalid length. [ 3358.274648][T23884] FAULT_INJECTION: forcing a failure. [ 3358.274648][T23884] name failslab, interval 1, probability 0, space 0, times 0 [ 3358.303785][T23884] CPU: 0 PID: 23884 Comm: syz.1.16950 Not tainted syzkaller #0 [ 3358.311920][T23884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3358.322536][T23884] Call Trace: [ 3358.326031][T23884] [ 3358.329167][T23884] dump_stack_lvl+0x18c/0x250 [ 3358.333896][T23884] ? show_regs_print_info+0x20/0x20 [ 3358.339226][T23884] ? load_image+0x420/0x420 [ 3358.343777][T23884] ? __might_sleep+0xe0/0xe0 [ 3358.348523][T23884] ? __lock_acquire+0x7d40/0x7d40 [ 3358.353992][T23884] should_fail_ex+0x39d/0x4d0 [ 3358.359194][T23884] should_failslab+0x9/0x20 [ 3358.364006][T23884] slab_pre_alloc_hook+0x59/0x310 [ 3358.369259][T23884] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3358.375281][T23884] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3358.381212][T23884] __kmem_cache_alloc_node+0x53/0x250 [ 3358.386977][T23884] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3358.392850][T23884] __kmalloc+0xa4/0x230 [ 3358.397119][T23884] tomoyo_realpath_from_path+0xe3/0x5d0 [ 3358.402947][T23884] tomoyo_path_number_perm+0x248/0x620 [ 3358.408677][T23884] ? tomoyo_path_number_perm+0x217/0x620 [ 3358.414578][T23884] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3358.420070][T23884] ? __fget_files+0x28/0x4b0 [ 3358.424656][T23884] ? __fget_files+0x28/0x4b0 [ 3358.429338][T23884] security_file_ioctl+0x70/0xa0 [ 3358.434476][T23884] __se_sys_ioctl+0x48/0x170 [ 3358.439254][T23884] do_syscall_64+0x55/0xa0 [ 3358.443751][T23884] ? clear_bhb_loop+0x40/0x90 [ 3358.448607][T23884] ? clear_bhb_loop+0x40/0x90 [ 3358.453917][T23884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3358.460581][T23884] RIP: 0033:0x7f4361f9c819 [ 3358.465344][T23884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3358.485679][T23884] RSP: 002b:00007f43601f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3358.494197][T23884] RAX: ffffffffffffffda RBX: 00007f4362215fa0 RCX: 00007f4361f9c819 [ 3358.502429][T23884] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000018 [ 3358.510842][T23884] RBP: 00007f43601f6090 R08: 0000000000000000 R09: 0000000000000000 [ 3358.519775][T23884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3358.528101][T23884] R13: 00007f4362216038 R14: 00007f4362215fa0 R15: 00007ffeaca6b268 [ 3358.536442][T23884] [ 3358.598837][T23884] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3358.759916][T23898] FAULT_INJECTION: forcing a failure. [ 3358.759916][T23898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3358.773854][T23894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3358.794167][T23898] CPU: 1 PID: 23898 Comm: syz.1.16956 Not tainted syzkaller #0 [ 3358.795320][T23894] netlink: 'syz.3.16954': attribute type 2 has an invalid length. [ 3358.802375][T23898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3358.802393][T23898] Call Trace: [ 3358.802401][T23898] [ 3358.802410][T23898] dump_stack_lvl+0x18c/0x250 [ 3358.802440][T23898] ? show_regs_print_info+0x20/0x20 [ 3358.802463][T23898] ? load_image+0x420/0x420 [ 3358.802486][T23898] ? __might_fault+0xaa/0x120 [ 3358.802505][T23898] ? __lock_acquire+0x7d40/0x7d40 [ 3358.802521][T23898] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 3358.802543][T23898] should_fail_ex+0x39d/0x4d0 [ 3358.802571][T23898] _copy_from_user+0x2f/0xe0 [ 3358.802594][T23898] __sys_bpf+0x23e/0x890 [ 3358.802615][T23898] ? bpf_link_show_fdinfo+0x390/0x390 [ 3358.802648][T23898] ? lock_chain_count+0x20/0x20 [ 3358.802665][T23898] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3358.802691][T23898] __x64_sys_bpf+0x7c/0x90 [ 3358.802709][T23898] do_syscall_64+0x55/0xa0 [ 3358.802724][T23898] ? clear_bhb_loop+0x40/0x90 [ 3358.802744][T23898] ? clear_bhb_loop+0x40/0x90 [ 3358.802765][T23898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3358.802785][T23898] RIP: 0033:0x7f4361f9c819 [ 3358.802802][T23898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3358.802816][T23898] RSP: 002b:00007f43601f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3358.802836][T23898] RAX: ffffffffffffffda RBX: 00007f4362215fa0 RCX: 00007f4361f9c819 [ 3358.802850][T23898] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 3358.802861][T23898] RBP: 00007f43601f6090 R08: 0000000000000000 R09: 0000000000000000 [ 3358.802872][T23898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3358.802881][T23898] R13: 00007f4362216038 R14: 00007f4362215fa0 R15: 00007ffeaca6b268 [ 3358.802908][T23898] [ 3358.843895][T23900] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16955'. [ 3358.848173][T23894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16954'. [ 3359.025332][T23900] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16955'. [ 3359.058019][T23899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3359.211857][T23910] netlink: 'syz.3.16960': attribute type 10 has an invalid length. [ 3359.391848][T23916] netlink: 830 bytes leftover after parsing attributes in process `syz.3.16962'. [ 3359.566324][T23921] FAULT_INJECTION: forcing a failure. [ 3359.566324][T23921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3359.644782][T23921] CPU: 1 PID: 23921 Comm: syz.3.16964 Not tainted syzkaller #0 [ 3359.652404][T23921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3359.662744][T23921] Call Trace: [ 3359.666139][T23921] [ 3359.669173][T23921] dump_stack_lvl+0x18c/0x250 [ 3359.674060][T23921] ? show_regs_print_info+0x20/0x20 [ 3359.679293][T23921] ? load_image+0x420/0x420 [ 3359.683909][T23921] ? __might_fault+0xaa/0x120 [ 3359.688614][T23921] ? __lock_acquire+0x7d40/0x7d40 [ 3359.694207][T23921] ? unix_ioctl+0x261/0x670 [ 3359.699088][T23921] should_fail_ex+0x39d/0x4d0 [ 3359.704332][T23921] _copy_from_user+0x2f/0xe0 [ 3359.709295][T23921] sock_do_ioctl+0x190/0x310 [ 3359.714632][T23921] ? sock_show_fdinfo+0xb0/0xb0 [ 3359.719658][T23921] sock_ioctl+0x5ba/0x7e0 [ 3359.724198][T23921] ? sock_poll+0x3e0/0x3e0 [ 3359.728917][T23921] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3359.733893][T23921] ? security_file_ioctl+0x80/0xa0 [ 3359.739166][T23921] ? sock_poll+0x3e0/0x3e0 [ 3359.743721][T23921] __se_sys_ioctl+0xfd/0x170 [ 3359.748611][T23921] do_syscall_64+0x55/0xa0 [ 3359.753154][T23921] ? clear_bhb_loop+0x40/0x90 [ 3359.757854][T23921] ? clear_bhb_loop+0x40/0x90 [ 3359.762636][T23921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3359.768683][T23921] RIP: 0033:0x7f2d4cd9c819 [ 3359.773334][T23921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3359.793583][T23921] RSP: 002b:00007f2d4dc2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3359.802224][T23921] RAX: ffffffffffffffda RBX: 00007f2d4d015fa0 RCX: 00007f2d4cd9c819 [ 3359.810606][T23921] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 3359.818779][T23921] RBP: 00007f2d4dc2e090 R08: 0000000000000000 R09: 0000000000000000 [ 3359.827187][T23921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3359.835280][T23921] R13: 00007f2d4d016038 R14: 00007f2d4d015fa0 R15: 00007ffc8ef9ff68 [ 3359.843379][T23921] [ 3360.283120][T23930] netlink: 'syz.0.16966': attribute type 21 has an invalid length. [ 3360.314801][T23933] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16968'. [ 3360.339241][T23933] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16968'. [ 3360.389836][T23931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3360.399400][T23927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3360.498159][T23939] netlink: 'syz.2.16970': attribute type 10 has an invalid length. [ 3360.631663][T23945] netlink: 830 bytes leftover after parsing attributes in process `syz.1.16972'. [ 3361.078115][T23962] netlink: 'syz.1.16977': attribute type 10 has an invalid length. [ 3361.148121][T23974] netlink: 'syz.2.16981': attribute type 10 has an invalid length. [ 3361.608821][T23985] netlink: 'syz.0.16986': attribute type 41 has an invalid length. [ 3361.714366][T23985] __nla_validate_parse: 1 callbacks suppressed [ 3361.714434][T23985] netlink: 144 bytes leftover after parsing attributes in process `syz.0.16986'. [ 3362.315585][T23996] netlink: 'syz.0.16990': attribute type 39 has an invalid length. [ 3362.513486][T24000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3362.654685][T24003] netlink: 'syz.1.16992': attribute type 10 has an invalid length. [ 3362.684724][T24005] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3362.691986][T24005] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3362.803163][T24012] FAULT_INJECTION: forcing a failure. [ 3362.803163][T24012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3362.826193][T24012] CPU: 0 PID: 24012 Comm: syz.1.16997 Not tainted syzkaller #0 [ 3362.833989][T24012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3362.844220][T24012] Call Trace: [ 3362.847695][T24012] [ 3362.850643][T24012] dump_stack_lvl+0x18c/0x250 [ 3362.855422][T24012] ? show_regs_print_info+0x20/0x20 [ 3362.860626][T24012] ? load_image+0x420/0x420 [ 3362.865251][T24012] ? __might_fault+0xaa/0x120 [ 3362.869941][T24012] should_fail_ex+0x39d/0x4d0 [ 3362.874624][T24012] copyin+0x1a/0x90 [ 3362.878731][T24012] _copy_from_iter+0x404/0x12e0 [ 3362.883606][T24012] ? copyout_mc+0x70/0x70 [ 3362.888134][T24012] ? verify_lock_unused+0x140/0x140 [ 3362.893431][T24012] ? dev_get_by_index+0x22/0x2d0 [ 3362.898810][T24012] ? dev_get_by_index+0x22/0x2d0 [ 3362.903921][T24012] packet_sendmsg+0x2e23/0x4d70 [ 3362.908981][T24012] ? aa_sk_perm+0x970/0x970 [ 3362.913971][T24012] ? __might_sleep+0xe0/0xe0 [ 3362.918665][T24012] ? verify_lock_unused+0x140/0x140 [ 3362.923980][T24012] ? perf_trace_lock_acquire+0x104/0x410 [ 3362.930104][T24012] ? aa_sk_perm+0x83c/0x970 [ 3362.934617][T24012] ? packet_getsockopt+0xad0/0xad0 [ 3362.940259][T24012] ? aa_sock_msg_perm+0x94/0x150 [ 3362.945545][T24012] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3362.951060][T24012] ? security_socket_sendmsg+0x80/0xa0 [ 3362.956624][T24012] ? packet_getsockopt+0xad0/0xad0 [ 3362.961839][T24012] ____sys_sendmsg+0x5ba/0x960 [ 3362.966809][T24012] ? __lock_acquire+0x7d40/0x7d40 [ 3362.972218][T24012] ? __asan_memset+0x22/0x40 [ 3362.976995][T24012] ? __sys_sendmsg_sock+0x30/0x30 [ 3362.982209][T24012] ? __import_iovec+0x3fa/0x850 [ 3362.987517][T24012] ? import_iovec+0x73/0xa0 [ 3362.992223][T24012] ___sys_sendmsg+0x2a6/0x360 [ 3362.997264][T24012] ? __sys_sendmsg+0x2a0/0x2a0 [ 3363.002322][T24012] ? __lock_acquire+0x7d40/0x7d40 [ 3363.007462][T24012] __se_sys_sendmsg+0x1c2/0x2b0 [ 3363.012403][T24012] ? __x64_sys_sendmsg+0x80/0x80 [ 3363.017705][T24012] ? lockdep_hardirqs_on+0x98/0x150 [ 3363.022991][T24012] do_syscall_64+0x55/0xa0 [ 3363.027583][T24012] ? clear_bhb_loop+0x40/0x90 [ 3363.032351][T24012] ? clear_bhb_loop+0x40/0x90 [ 3363.037116][T24012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3363.043196][T24012] RIP: 0033:0x7f4361f9c819 [ 3363.047784][T24012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3363.068461][T24012] RSP: 002b:00007f43601f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3363.076969][T24012] RAX: ffffffffffffffda RBX: 00007f4362215fa0 RCX: 00007f4361f9c819 [ 3363.085040][T24012] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 3363.093034][T24012] RBP: 00007f43601f6090 R08: 0000000000000000 R09: 0000000000000000 [ 3363.101469][T24012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3363.109716][T24012] R13: 00007f4362216038 R14: 00007f4362215fa0 R15: 00007ffeaca6b268 [ 3363.117856][T24012] [ 3363.294669][ T9740] Bluetooth: hci3: unexpected event 0x16 length: 15 > 6 [ 3363.630997][T24031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3363.725408][T24031] netlink: 'syz.3.17003': attribute type 2 has an invalid length. [ 3363.748594][T24031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17003'. [ 3364.008526][T24042] FAULT_INJECTION: forcing a failure. [ 3364.008526][T24042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3364.026506][T24042] CPU: 1 PID: 24042 Comm: syz.0.17007 Not tainted syzkaller #0 [ 3364.034670][T24042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3364.044842][T24042] Call Trace: [ 3364.048141][T24042] [ 3364.051106][T24042] dump_stack_lvl+0x18c/0x250 [ 3364.055910][T24042] ? show_regs_print_info+0x20/0x20 [ 3364.061415][T24042] ? load_image+0x420/0x420 [ 3364.066756][T24042] ? __might_fault+0xaa/0x120 [ 3364.071726][T24042] ? __lock_acquire+0x7d40/0x7d40 [ 3364.077404][T24042] should_fail_ex+0x39d/0x4d0 [ 3364.082308][T24042] _copy_from_user+0x2f/0xe0 [ 3364.087375][T24042] bpf_prog_test_run_skb+0x266/0x12b0 [ 3364.093058][T24042] ? __fget_files+0x28/0x4b0 [ 3364.098073][T24042] ? __fget_files+0x28/0x4b0 [ 3364.102791][T24042] ? __fget_files+0x43d/0x4b0 [ 3364.107847][T24042] ? cpu_online+0x60/0x60 [ 3364.112418][T24042] bpf_prog_test_run+0x321/0x390 [ 3364.117522][T24042] __sys_bpf+0x49d/0x890 [ 3364.121968][T24042] ? bpf_link_show_fdinfo+0x390/0x390 [ 3364.127683][T24042] ? lock_chain_count+0x20/0x20 [ 3364.132576][T24042] __x64_sys_bpf+0x7c/0x90 [ 3364.137189][T24042] do_syscall_64+0x55/0xa0 [ 3364.141776][T24042] ? clear_bhb_loop+0x40/0x90 [ 3364.146450][T24042] ? clear_bhb_loop+0x40/0x90 [ 3364.151218][T24042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3364.157195][T24042] RIP: 0033:0x7f69b999c819 [ 3364.161697][T24042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3364.181914][T24042] RSP: 002b:00007f69ba93b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3364.190755][T24042] RAX: ffffffffffffffda RBX: 00007f69b9c15fa0 RCX: 00007f69b999c819 [ 3364.199080][T24042] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 3364.207224][T24042] RBP: 00007f69ba93b090 R08: 0000000000000000 R09: 0000000000000000 [ 3364.215448][T24042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3364.223778][T24042] R13: 00007f69b9c16038 R14: 00007f69b9c15fa0 R15: 00007ffc793da708 [ 3364.231869][T24042] [ 3364.443670][T24060] netlink: 'syz.3.17012': attribute type 11 has an invalid length. [ 3364.476639][T24060] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17012'. [ 3364.721044][T24060] netlink: 'syz.3.17012': attribute type 10 has an invalid length. [ 3364.863502][T24060] team0: Port device macvlan0 added [ 3365.202288][T24072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3365.281850][T24072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17015'. [ 3365.514013][T24080] syzkaller0: entered promiscuous mode [ 3365.547462][T24080] syzkaller0: entered allmulticast mode [ 3365.623022][T24089] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.17020'. [ 3368.782687][T24101] validate_nla: 1 callbacks suppressed [ 3368.782707][T24101] netlink: 'syz.1.17024': attribute type 10 has an invalid length. [ 3369.008579][T24109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3369.088367][T24109] netlink: 'syz.1.17029': attribute type 2 has an invalid length. [ 3369.106156][T24109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17029'. [ 3369.220435][T24107] netlink: 'syz.2.17027': attribute type 10 has an invalid length. [ 3369.458251][T24124] delete_channel: no stack [ 3369.564738][T24127] delete_channel: no stack [ 3369.789740][T24136] netlink: 'syz.1.17035': attribute type 10 has an invalid length. [ 3369.809650][T24137] netlink: 830 bytes leftover after parsing attributes in process `syz.3.17036'. [ 3372.252617][T24148] netlink: 'syz.1.17040': attribute type 2 has an invalid length. [ 3372.267514][T24148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17040'. [ 3372.647539][T24157] delete_channel: no stack [ 3372.654018][T24165] netlink: 'syz.1.17046': attribute type 10 has an invalid length. [ 3372.827178][T24175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3372.866706][T24175] netlink: 'syz.1.17050': attribute type 2 has an invalid length. [ 3372.876268][T24175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17050'. [ 3372.901540][T24173] netlink: 'syz.3.17049': attribute type 10 has an invalid length. [ 3372.967329][T24181] netlink: 'syz.2.17051': attribute type 11 has an invalid length. [ 3372.976029][T24181] netlink: 168 bytes leftover after parsing attributes in process `syz.2.17051'. [ 3375.529826][T24195] FAULT_INJECTION: forcing a failure. [ 3375.529826][T24195] name failslab, interval 1, probability 0, space 0, times 0 [ 3375.570331][T24195] CPU: 0 PID: 24195 Comm: syz.2.17056 Not tainted syzkaller #0 [ 3375.578204][T24195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3375.588928][T24195] Call Trace: [ 3375.592234][T24195] [ 3375.595366][T24195] dump_stack_lvl+0x18c/0x250 [ 3375.600266][T24195] ? show_regs_print_info+0x20/0x20 [ 3375.605769][T24195] ? load_image+0x420/0x420 [ 3375.610468][T24195] ? __might_sleep+0xe0/0xe0 [ 3375.615433][T24195] ? __lock_acquire+0x7d40/0x7d40 [ 3375.620758][T24195] should_fail_ex+0x39d/0x4d0 [ 3375.625919][T24195] should_failslab+0x9/0x20 [ 3375.630678][T24195] slab_pre_alloc_hook+0x59/0x310 [ 3375.636444][T24195] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3375.642814][T24195] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3375.648994][T24195] __kmem_cache_alloc_node+0x53/0x250 [ 3375.654764][T24195] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3375.660698][T24195] __kmalloc+0xa4/0x230 [ 3375.665057][T24195] tomoyo_realpath_from_path+0xe3/0x5d0 [ 3375.670799][T24195] tomoyo_path_number_perm+0x248/0x620 [ 3375.676462][T24195] ? tomoyo_path_number_perm+0x217/0x620 [ 3375.682285][T24195] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3375.688102][T24195] ? ksys_write+0x1c4/0x260 [ 3375.692764][T24195] ? __fget_files+0x28/0x4b0 [ 3375.697732][T24195] ? __fget_files+0x28/0x4b0 [ 3375.702527][T24195] security_file_ioctl+0x70/0xa0 [ 3375.707731][T24195] __se_sys_ioctl+0x48/0x170 [ 3375.712507][T24195] do_syscall_64+0x55/0xa0 [ 3375.717191][T24195] ? clear_bhb_loop+0x40/0x90 [ 3375.722077][T24195] ? clear_bhb_loop+0x40/0x90 [ 3375.727132][T24195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3375.733766][T24195] RIP: 0033:0x7fb65ed9c819 [ 3375.738275][T24195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3375.758679][T24195] RSP: 002b:00007fb65fc3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3375.767386][T24195] RAX: ffffffffffffffda RBX: 00007fb65f015fa0 RCX: 00007fb65ed9c819 [ 3375.775388][T24195] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000004 [ 3375.783733][T24195] RBP: 00007fb65fc3b090 R08: 0000000000000000 R09: 0000000000000000 [ 3375.791857][T24195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3375.800229][T24195] R13: 00007fb65f016038 R14: 00007fb65f015fa0 R15: 00007ffea6c0c008 [ 3375.808782][T24195] [ 3375.829942][T24195] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3375.881997][T24199] netlink: 'syz.0.17055': attribute type 10 has an invalid length. [ 3376.023810][T24204] delete_channel: no stack [ 3376.074943][T24210] netlink: 'syz.2.17059': attribute type 10 has an invalid length. [ 3376.223469][T24213] delete_channel: no stack [ 3378.777410][T24231] netlink: 'syz.1.17068': attribute type 10 has an invalid length. [ 3379.063155][T24246] netlink: 'syz.0.17072': attribute type 9 has an invalid length. [ 3379.072712][T24246] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.17072'. [ 3379.142141][T24240] delete_channel: no stack [ 3379.329412][T24247] netlink: 'syz.0.17072': attribute type 9 has an invalid length. [ 3379.378396][T24247] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.17072'. [ 3379.441519][T24256] delete_channel: no stack [ 3379.954274][T24264] delete_channel: no stack [ 3380.983308][T24275] delete_channel: no stack [ 3380.990935][T24274] netlink: 'syz.3.17081': attribute type 10 has an invalid length. [ 3381.350316][T24291] netlink: 'syz.2.17089': attribute type 10 has an invalid length. [ 3381.769513][T24299] delete_channel: no stack [ 3382.155601][T24309] delete_channel: no stack [ 3382.618938][T24325] FAULT_INJECTION: forcing a failure. [ 3382.618938][T24325] name failslab, interval 1, probability 0, space 0, times 0 [ 3382.649651][T24325] CPU: 0 PID: 24325 Comm: syz.2.17102 Not tainted syzkaller #0 [ 3382.657677][T24325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3382.668028][T24325] Call Trace: [ 3382.671339][T24325] [ 3382.674274][T24325] dump_stack_lvl+0x18c/0x250 [ 3382.679140][T24325] ? show_regs_print_info+0x20/0x20 [ 3382.684530][T24325] ? load_image+0x420/0x420 [ 3382.689132][T24325] ? __lock_acquire+0x7d40/0x7d40 [ 3382.694391][T24325] should_fail_ex+0x39d/0x4d0 [ 3382.699178][T24325] should_failslab+0x9/0x20 [ 3382.704053][T24325] slab_pre_alloc_hook+0x59/0x310 [ 3382.709429][T24325] ? __vmalloc_node_range+0x59a/0x1330 [ 3382.715436][T24325] ? __vmalloc_node_range+0x59a/0x1330 [ 3382.721259][T24325] __kmem_cache_alloc_node+0x53/0x250 [ 3382.727174][T24325] ? __vmalloc_node_range+0x59a/0x1330 [ 3382.732814][T24325] __kmalloc_node+0xa4/0x230 [ 3382.737839][T24325] __vmalloc_node_range+0x59a/0x1330 [ 3382.743492][T24325] ? mark_lock+0x94/0x320 [ 3382.748006][T24325] ? free_vm_area+0x50/0x50 [ 3382.752605][T24325] ? end_current_label_crit_section+0x170/0x170 [ 3382.758949][T24325] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 3382.764731][T24325] __vmalloc+0x7a/0x90 [ 3382.769166][T24325] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 3382.774979][T24325] bpf_prog_alloc_no_stats+0x47/0x440 [ 3382.780603][T24325] ? bpf_prog_alloc+0x2b/0x1a0 [ 3382.785645][T24325] bpf_prog_alloc+0x3d/0x1a0 [ 3382.790495][T24325] bpf_prog_load+0x6eb/0x1670 [ 3382.795823][T24325] ? map_freeze+0x420/0x420 [ 3382.800420][T24325] ? __might_fault+0xaa/0x120 [ 3382.805359][T24325] ? __lock_acquire+0x7d40/0x7d40 [ 3382.810551][T24325] ? file_end_write+0x159/0x250 [ 3382.815410][T24325] ? __might_fault+0xaa/0x120 [ 3382.820115][T24325] ? __might_fault+0xc6/0x120 [ 3382.824875][T24325] ? __might_fault+0xaa/0x120 [ 3382.829545][T24325] ? bpf_lsm_bpf+0x9/0x10 [ 3382.834186][T24325] ? security_bpf+0x7e/0xa0 [ 3382.838707][T24325] __sys_bpf+0x5ba/0x890 [ 3382.842961][T24325] ? bpf_link_show_fdinfo+0x390/0x390 [ 3382.848361][T24325] ? lock_chain_count+0x20/0x20 [ 3382.853406][T24325] __x64_sys_bpf+0x7c/0x90 [ 3382.858256][T24325] do_syscall_64+0x55/0xa0 [ 3382.862934][T24325] ? clear_bhb_loop+0x40/0x90 [ 3382.867613][T24325] ? clear_bhb_loop+0x40/0x90 [ 3382.872294][T24325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3382.878270][T24325] RIP: 0033:0x7fb65ed9c819 [ 3382.882785][T24325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3382.903005][T24325] RSP: 002b:00007fb65fc3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3382.911770][T24325] RAX: ffffffffffffffda RBX: 00007fb65f015fa0 RCX: 00007fb65ed9c819 [ 3382.919997][T24325] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 3382.928065][T24325] RBP: 00007fb65fc3b090 R08: 0000000000000000 R09: 0000000000000000 [ 3382.936559][T24325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3382.945243][T24325] R13: 00007fb65f016038 R14: 00007fb65f015fa0 R15: 00007ffea6c0c008 [ 3382.953859][T24325] [ 3382.995591][T24325] syz.2.17102: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 3383.018240][T24325] CPU: 1 PID: 24325 Comm: syz.2.17102 Not tainted syzkaller #0 [ 3383.026811][T24325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3383.037417][T24325] Call Trace: [ 3383.040719][T24325] [ 3383.043928][T24325] dump_stack_lvl+0x18c/0x250 [ 3383.048911][T24325] ? show_regs_print_info+0x20/0x20 [ 3383.054390][T24325] ? load_image+0x420/0x420 [ 3383.059181][T24325] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 3383.065851][T24325] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 3383.072615][T24325] warn_alloc+0x246/0x340 [ 3383.077365][T24325] ? zone_watermark_ok_safe+0x230/0x230 [ 3383.083120][T24325] ? __vmalloc_node_range+0x59a/0x1330 [ 3383.088943][T24325] ? __vmalloc_node_range+0x59a/0x1330 [ 3383.094650][T24325] ? rcu_is_watching+0x15/0xb0 [ 3383.099537][T24325] ? __vmalloc_node_range+0x59a/0x1330 [ 3383.105299][T24325] ? __kmalloc_node+0xe2/0x230 [ 3383.110448][T24325] __vmalloc_node_range+0x662/0x1330 [ 3383.115827][T24325] ? mark_lock+0x94/0x320 [ 3383.120468][T24325] ? free_vm_area+0x50/0x50 [ 3383.124981][T24325] ? end_current_label_crit_section+0x170/0x170 [ 3383.131546][T24325] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 3383.137571][T24325] __vmalloc+0x7a/0x90 [ 3383.140618][T24329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3383.142055][T24325] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 3383.142084][T24325] bpf_prog_alloc_no_stats+0x47/0x440 [ 3383.142104][T24325] ? bpf_prog_alloc+0x2b/0x1a0 [ 3383.174177][T24325] bpf_prog_alloc+0x3d/0x1a0 [ 3383.179077][T24325] bpf_prog_load+0x6eb/0x1670 [ 3383.183968][T24325] ? map_freeze+0x420/0x420 [ 3383.188796][T24325] ? __might_fault+0xaa/0x120 [ 3383.193493][T24325] ? __lock_acquire+0x7d40/0x7d40 [ 3383.198604][T24325] ? file_end_write+0x159/0x250 [ 3383.203636][T24325] ? __might_fault+0xaa/0x120 [ 3383.208498][T24325] ? __might_fault+0xc6/0x120 [ 3383.213617][T24325] ? __might_fault+0xaa/0x120 [ 3383.216815][T24331] netlink: 'syz.1.17103': attribute type 2 has an invalid length. [ 3383.218476][T24325] ? bpf_lsm_bpf+0x9/0x10 [ 3383.218505][T24325] ? security_bpf+0x7e/0xa0 [ 3383.227460][T24331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17103'. [ 3383.231490][T24325] __sys_bpf+0x5ba/0x890 [ 3383.231522][T24325] ? bpf_link_show_fdinfo+0x390/0x390 [ 3383.231549][T24325] ? lock_chain_count+0x20/0x20 [ 3383.231575][T24325] __x64_sys_bpf+0x7c/0x90 [ 3383.264951][T24325] do_syscall_64+0x55/0xa0 [ 3383.269649][T24325] ? clear_bhb_loop+0x40/0x90 [ 3383.274469][T24325] ? clear_bhb_loop+0x40/0x90 [ 3383.279873][T24325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3383.286217][T24325] RIP: 0033:0x7fb65ed9c819 [ 3383.290639][T24325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3383.311576][T24325] RSP: 002b:00007fb65fc3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3383.320525][T24325] RAX: ffffffffffffffda RBX: 00007fb65f015fa0 RCX: 00007fb65ed9c819 [ 3383.328769][T24325] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 3383.336838][T24325] RBP: 00007fb65fc3b090 R08: 0000000000000000 R09: 0000000000000000 [ 3383.345034][T24325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3383.353102][T24325] R13: 00007fb65f016038 R14: 00007fb65f015fa0 R15: 00007ffea6c0c008 [ 3383.361612][T24325] [ 3383.367600][T24325] Mem-Info: [ 3383.375021][T24325] active_anon:7685 inactive_anon:0 isolated_anon:0 [ 3383.375021][T24325] active_file:19565 inactive_file:41234 isolated_file:0 [ 3383.375021][T24325] unevictable:768 dirty:611 writeback:0 [ 3383.375021][T24325] slab_reclaimable:11168 slab_unreclaimable:93949 [ 3383.375021][T24325] mapped:25130 shmem:1361 pagetables:524 [ 3383.375021][T24325] sec_pagetables:0 bounce:0 [ 3383.375021][T24325] kernel_misc_reclaimable:0 [ 3383.375021][T24325] free:1344812 free_pcp:3603 free_cma:0 [ 3383.423578][T24325] Node 0 active_anon:30836kB inactive_anon:0kB active_file:78260kB inactive_file:164732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100564kB dirty:2444kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10184kB pagetables:2128kB sec_pagetables:0kB all_unreclaimable? no [ 3383.457624][T24325] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 3383.492738][T24325] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3383.522539][T24325] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 3383.531007][T24325] Node 0 DMA32 free:1450592kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:30696kB inactive_anon:0kB active_file:78260kB inactive_file:163904kB unevictable:1536kB writepending:2444kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:9664kB local_pcp:936kB free_cma:0kB [ 3383.566347][T24325] lowmem_reserve[]: 0 0 0 0 0 [ 3383.572525][T24325] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 3383.602029][T24325] lowmem_reserve[]: 0 0 0 0 0 [ 3383.607101][T24325] Node 1 Normal free:3913056kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:5280kB local_pcp:0kB free_cma:0kB [ 3383.647496][T24325] lowmem_reserve[]: 0 0 0 0 0 [ 3383.652613][T24325] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 3383.665482][T24336] netlink: 'syz.0.17105': attribute type 21 has an invalid length. [ 3383.666125][T24325] Node 0 DMA32: 3071*4kB (UME) 2385*8kB (UME) 2030*16kB (UME) 1354*32kB (UME) 973*64kB (UME) 453*128kB (UME) 189*256kB (UME) 106*512kB (UME) 64*1024kB (UME) 31*2048kB (UM) 242*4096kB (UM) = 1450340kB [ 3383.718925][T24325] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3383.749504][T24325] Node 1 Normal: 242*4kB (UME) 63*8kB (UME) 44*16kB (UME) 209*32kB (UME) 111*64kB (UME) 28*128kB (UME) 5*256kB (UME) 2*512kB (U) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3913056kB [ 3383.775122][T24325] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3383.776960][T24338] netlink: 'syz.0.17106': attribute type 9 has an invalid length. [ 3383.793030][T24325] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3383.804789][T24325] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3383.815477][T24325] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3383.826044][T24325] 62160 total pagecache pages [ 3383.830979][T24325] 0 pages in swap cache [ 3383.835231][T24325] Free swap = 124996kB [ 3383.839613][T24325] Total swap = 124996kB [ 3383.843966][T24325] 2097051 pages RAM [ 3383.855596][T24338] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.17106'. [ 3383.889552][T24325] 0 pages HighMem/MovableOnly [ 3383.894383][T24325] 416927 pages reserved [ 3383.898732][T24325] 0 pages cma reserved [ 3383.910698][T24340] netlink: 'syz.3.17107': attribute type 3 has an invalid length. [ 3383.929265][T24340] netlink: 'syz.3.17107': attribute type 1 has an invalid length. [ 3383.937495][T24345] netlink: 'syz.0.17106': attribute type 21 has an invalid length. [ 3383.956408][T24340] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.17107'. [ 3383.970473][T24342] netlink: 'syz.0.17106': attribute type 9 has an invalid length. [ 3383.970502][T24342] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.17106'. [ 3384.148356][T24351] FAULT_INJECTION: forcing a failure. [ 3384.148356][T24351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3384.167663][T24351] CPU: 0 PID: 24351 Comm: syz.3.17111 Not tainted syzkaller #0 [ 3384.175542][T24351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3384.185799][T24351] Call Trace: [ 3384.189388][T24351] [ 3384.192467][T24351] dump_stack_lvl+0x18c/0x250 [ 3384.197467][T24351] ? show_regs_print_info+0x20/0x20 [ 3384.203066][T24351] ? load_image+0x420/0x420 [ 3384.207862][T24351] ? __might_fault+0xaa/0x120 [ 3384.212668][T24351] ? __lock_acquire+0x7d40/0x7d40 [ 3384.218158][T24351] should_fail_ex+0x39d/0x4d0 [ 3384.223158][T24351] _copy_from_iter+0x1d9/0x12e0 [ 3384.228504][T24351] ? slab_post_alloc_hook+0x8a/0x4b0 [ 3384.233992][T24351] ? __virt_addr_valid+0x18c/0x540 [ 3384.239212][T24351] ? __lock_acquire+0x7d40/0x7d40 [ 3384.244431][T24351] ? rcu_is_watching+0x15/0xb0 [ 3384.249463][T24351] ? copyout_mc+0x70/0x70 [ 3384.253798][T24351] ? __virt_addr_valid+0x18c/0x540 [ 3384.259050][T24351] ? __virt_addr_valid+0x18c/0x540 [ 3384.264351][T24351] ? __virt_addr_valid+0x469/0x540 [ 3384.269471][T24351] ? __check_object_size+0x506/0xa20 [ 3384.275027][T24351] netlink_sendmsg+0x76b/0xbf0 [ 3384.279914][T24351] ? netlink_getsockopt+0x590/0x590 [ 3384.285314][T24351] ? aa_sock_msg_perm+0x94/0x150 [ 3384.290719][T24351] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3384.296554][T24351] ? security_socket_sendmsg+0x80/0xa0 [ 3384.303087][T24351] ? netlink_getsockopt+0x590/0x590 [ 3384.309019][T24351] ____sys_sendmsg+0x5ba/0x960 [ 3384.314142][T24351] ? __asan_memset+0x22/0x40 [ 3384.319213][T24351] ? __sys_sendmsg_sock+0x30/0x30 [ 3384.324422][T24351] ? __import_iovec+0x5f2/0x850 [ 3384.329715][T24351] ? import_iovec+0x73/0xa0 [ 3384.334331][T24351] ___sys_sendmsg+0x2a6/0x360 [ 3384.339021][T24351] ? __sys_sendmsg+0x2a0/0x2a0 [ 3384.344076][T24351] ? __lock_acquire+0x7d40/0x7d40 [ 3384.349346][T24351] __se_sys_sendmsg+0x1c2/0x2b0 [ 3384.354483][T24351] ? __x64_sys_sendmsg+0x80/0x80 [ 3384.359634][T24351] ? lockdep_hardirqs_on+0x98/0x150 [ 3384.365201][T24351] do_syscall_64+0x55/0xa0 [ 3384.369986][T24351] ? clear_bhb_loop+0x40/0x90 [ 3384.374910][T24351] ? clear_bhb_loop+0x40/0x90 [ 3384.379681][T24351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3384.386638][T24351] RIP: 0033:0x7f2d4cd9c819 [ 3384.392016][T24351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3384.412398][T24351] RSP: 002b:00007f2d4dc2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3384.421033][T24351] RAX: ffffffffffffffda RBX: 00007f2d4d015fa0 RCX: 00007f2d4cd9c819 [ 3384.429539][T24351] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 3384.437969][T24351] RBP: 00007f2d4dc2e090 R08: 0000000000000000 R09: 0000000000000000 [ 3384.446658][T24351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3384.455343][T24351] R13: 00007f2d4d016038 R14: 00007f2d4d015fa0 R15: 00007ffc8ef9ff68 [ 3384.463434][T24351] [ 3384.532769][T24356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3384.561992][T24355] netlink: 'syz.1.17113': attribute type 2 has an invalid length. [ 3384.571400][T24355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17113'. [ 3384.678927][T24363] netlink: 399 bytes leftover after parsing attributes in process `syz.1.17117'. [ 3384.805212][T24370] FAULT_INJECTION: forcing a failure. [ 3384.805212][T24370] name failslab, interval 1, probability 0, space 0, times 0 [ 3384.819422][T24370] CPU: 0 PID: 24370 Comm: syz.1.17119 Not tainted syzkaller #0 [ 3384.827110][T24370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3384.837634][T24370] Call Trace: [ 3384.841089][T24370] [ 3384.844193][T24370] dump_stack_lvl+0x18c/0x250 [ 3384.849053][T24370] ? show_regs_print_info+0x20/0x20 [ 3384.854529][T24370] ? load_image+0x420/0x420 [ 3384.859134][T24370] ? __lock_acquire+0x7d40/0x7d40 [ 3384.864260][T24370] should_fail_ex+0x39d/0x4d0 [ 3384.869165][T24370] should_failslab+0x9/0x20 [ 3384.873818][T24370] slab_pre_alloc_hook+0x59/0x310 [ 3384.879040][T24370] ? kvmalloc_node+0x70/0x180 [ 3384.884241][T24370] ? kvmalloc_node+0x70/0x180 [ 3384.889191][T24370] __kmem_cache_alloc_node+0x53/0x250 [ 3384.894678][T24370] ? kvmalloc_node+0x70/0x180 [ 3384.899624][T24370] __kmalloc_node+0xa4/0x230 [ 3384.904582][T24370] kvmalloc_node+0x70/0x180 [ 3384.909357][T24370] map_get_next_key+0x295/0x620 [ 3384.914652][T24370] ? __might_fault+0xc6/0x120 [ 3384.919515][T24370] __sys_bpf+0x715/0x890 [ 3384.923855][T24370] ? bpf_link_show_fdinfo+0x390/0x390 [ 3384.929493][T24370] ? lock_chain_count+0x20/0x20 [ 3384.934707][T24370] __x64_sys_bpf+0x7c/0x90 [ 3384.939581][T24370] do_syscall_64+0x55/0xa0 [ 3384.944340][T24370] ? clear_bhb_loop+0x40/0x90 [ 3384.949275][T24370] ? clear_bhb_loop+0x40/0x90 [ 3384.954141][T24370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3384.961170][T24370] RIP: 0033:0x7f4361f9c819 [ 3384.966237][T24370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3384.986882][T24370] RSP: 002b:00007f43601f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3384.995670][T24370] RAX: ffffffffffffffda RBX: 00007f4362215fa0 RCX: 00007f4361f9c819 [ 3385.004250][T24370] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000004 [ 3385.012318][T24370] RBP: 00007f43601f6090 R08: 0000000000000000 R09: 0000000000000000 [ 3385.020847][T24370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3385.029555][T24370] R13: 00007f4362216038 R14: 00007f4362215fa0 R15: 00007ffeaca6b268 [ 3385.037748][T24370] [ 3385.065049][T24365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3385.098416][T24373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17116'. [ 3385.364391][T24382] delete_channel: no stack [ 3385.485652][T24390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3385.585293][T24390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17126'. [ 3385.766136][ T7741] tipc: Subscription rejected, illegal request [ 3385.938616][T24412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3385.982908][T24412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17134'. [ 3386.164456][T24416] delete_channel: no stack [ 3386.211814][T24425] FAULT_INJECTION: forcing a failure. [ 3386.211814][T24425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3386.233992][T24425] CPU: 1 PID: 24425 Comm: syz.3.17139 Not tainted syzkaller #0 [ 3386.241857][T24425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3386.253001][T24425] Call Trace: [ 3386.256413][T24425] [ 3386.259429][T24425] dump_stack_lvl+0x18c/0x250 [ 3386.264377][T24425] ? show_regs_print_info+0x20/0x20 [ 3386.269828][T24425] ? load_image+0x420/0x420 [ 3386.274458][T24425] ? __might_fault+0xaa/0x120 [ 3386.279514][T24425] ? __lock_acquire+0x7d40/0x7d40 [ 3386.285443][T24425] should_fail_ex+0x39d/0x4d0 [ 3386.290260][T24425] _copy_from_user+0x2f/0xe0 [ 3386.295256][T24425] sctp_setsockopt+0x19e/0x11e0 [ 3386.300497][T24425] ? sock_common_recvmsg+0x190/0x190 [ 3386.306373][T24425] do_sock_setsockopt+0x175/0x1a0 [ 3386.311989][T24425] ? __fdget+0x180/0x210 [ 3386.316631][T24425] __x64_sys_setsockopt+0x182/0x200 [ 3386.322213][T24425] do_syscall_64+0x55/0xa0 [ 3386.326971][T24425] ? clear_bhb_loop+0x40/0x90 [ 3386.332217][T24425] ? clear_bhb_loop+0x40/0x90 [ 3386.337399][T24425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3386.344373][T24425] RIP: 0033:0x7f2d4cd9c819 [ 3386.349344][T24425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3386.372695][T24425] RSP: 002b:00007f2d4dc2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3386.381513][T24425] RAX: ffffffffffffffda RBX: 00007f2d4d015fa0 RCX: 00007f2d4cd9c819 [ 3386.390325][T24425] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000004 [ 3386.398846][T24425] RBP: 00007f2d4dc2e090 R08: 0000000000000010 R09: 0000000000000000 [ 3386.408249][T24425] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3386.417155][T24425] R13: 00007f2d4d016038 R14: 00007f2d4d015fa0 R15: 00007ffc8ef9ff68 [ 3386.425684][T24425] [ 3386.488079][T24431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3386.550121][T24431] validate_nla: 5 callbacks suppressed [ 3386.550155][T24431] netlink: 'syz.2.17140': attribute type 2 has an invalid length. [ 3386.586438][T24431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17140'. [ 3386.993553][T24451] FAULT_INJECTION: forcing a failure. [ 3386.993553][T24451] name failslab, interval 1, probability 0, space 0, times 0 [ 3387.007485][T24451] CPU: 0 PID: 24451 Comm: syz.3.17148 Not tainted syzkaller #0 [ 3387.015893][T24451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3387.026977][T24451] Call Trace: [ 3387.030645][T24451] [ 3387.033882][T24451] dump_stack_lvl+0x18c/0x250 [ 3387.038918][T24451] ? show_regs_print_info+0x20/0x20 [ 3387.044320][T24451] ? load_image+0x420/0x420 [ 3387.049275][T24451] ? __lock_acquire+0x7d40/0x7d40 [ 3387.054306][T24451] should_fail_ex+0x39d/0x4d0 [ 3387.059703][T24451] should_failslab+0x9/0x20 [ 3387.064307][T24451] slab_pre_alloc_hook+0x59/0x310 [ 3387.069619][T24451] ? apparmor_sk_alloc_security+0x77/0x100 [ 3387.075772][T24451] __kmem_cache_alloc_node+0x53/0x250 [ 3387.081248][T24451] ? apparmor_sk_alloc_security+0x77/0x100 [ 3387.087053][T24451] kmalloc_trace+0x2a/0xe0 [ 3387.091696][T24451] apparmor_sk_alloc_security+0x77/0x100 [ 3387.097704][T24451] security_sk_alloc+0x6e/0xa0 [ 3387.102485][T24451] sk_prot_alloc+0x101/0x210 [ 3387.107167][T24451] sk_alloc+0x3a/0x360 [ 3387.111414][T24451] inet_create+0x7a0/0xfe0 [ 3387.115921][T24451] ? inet_create+0x9c/0xfe0 [ 3387.120522][T24451] __sock_create+0x4a6/0x940 [ 3387.125413][T24451] __sys_socket+0xd7/0x1a0 [ 3387.129922][T24451] __x64_sys_socket+0x7a/0x90 [ 3387.134962][T24451] do_syscall_64+0x55/0xa0 [ 3387.139570][T24451] ? clear_bhb_loop+0x40/0x90 [ 3387.144246][T24451] ? clear_bhb_loop+0x40/0x90 [ 3387.149021][T24451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3387.155207][T24451] RIP: 0033:0x7f2d4cd9c819 [ 3387.159847][T24451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3387.179915][T24451] RSP: 002b:00007f2d4dc2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3387.188519][T24451] RAX: ffffffffffffffda RBX: 00007f2d4d015fa0 RCX: 00007f2d4cd9c819 [ 3387.197104][T24451] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 0000000000000002 [ 3387.205616][T24451] RBP: 00007f2d4dc2e090 R08: 0000000000000000 R09: 0000000000000000 [ 3387.214129][T24451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3387.223153][T24451] R13: 00007f2d4d016038 R14: 00007f2d4d015fa0 R15: 00007ffc8ef9ff68 [ 3387.232096][T24451] [ 3387.522783][T24464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3387.580380][T24469] netlink: 'syz.3.17152': attribute type 2 has an invalid length. [ 3387.607208][T24469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17152'. [ 3387.636876][T24466] delete_channel: no stack [ 3387.938609][T24475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3388.005284][T24483] pim6reg1: entered promiscuous mode [ 3388.018309][T24483] pim6reg1: entered allmulticast mode [ 3388.101231][T24484] netlink: 'syz.0.17162': attribute type 2 has an invalid length. [ 3388.134105][T24484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17162'. [ 3388.152806][T24486] netlink: 'syz.3.17158': attribute type 10 has an invalid length. [ 3388.417554][T24497] delete_channel: no stack [ 3388.519108][T24501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3388.754618][T24512] netlink: 'syz.1.17165': attribute type 2 has an invalid length. [ 3388.786111][T24512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17165'. [ 3388.963464][T24525] netlink: 'syz.2.17172': attribute type 10 has an invalid length. [ 3389.014845][T24515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3389.112302][T24523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3389.129850][T24530] netlink: 'syz.1.17171': attribute type 2 has an invalid length. [ 3389.138833][T24530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17171'. [ 3389.154212][T24515] netlink: 'syz.0.17168': attribute type 2 has an invalid length. [ 3389.168828][T24531] delete_channel: no stack [ 3389.377203][T24544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3389.414676][T24546] netlink: 'syz.1.17177': attribute type 2 has an invalid length. [ 3389.429432][T24546] netlink: 'syz.1.17177': attribute type 8 has an invalid length. [ 3389.745281][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.750367][T24561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3389.754884][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.779798][T24561] __nla_validate_parse: 6 callbacks suppressed [ 3389.779835][T24561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17185'. [ 3389.885457][T24568] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.17188'. [ 3389.898198][T24566] netlink: 830 bytes leftover after parsing attributes in process `syz.0.17186'. [ 3389.959679][T24568] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.17188'. [ 3390.211371][T24575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3390.250345][T24572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3390.284935][T24580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17189'. [ 3390.301196][T24575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17197'. [ 3390.443937][T24589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3390.508260][T24591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17193'. [ 3390.572731][T24599] netlink: 830 bytes leftover after parsing attributes in process `syz.0.17198'. [ 3390.624544][T24601] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.17199'. [ 3390.719502][T24602] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.17199'. [ 3391.031780][T24616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3391.600830][T24640] FAULT_INJECTION: forcing a failure. [ 3391.600830][T24640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3391.623772][T24640] CPU: 1 PID: 24640 Comm: syz.0.17212 Not tainted syzkaller #0 [ 3391.631579][T24640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3391.641860][T24640] Call Trace: [ 3391.645264][T24640] [ 3391.648242][T24640] dump_stack_lvl+0x18c/0x250 [ 3391.652984][T24640] ? show_regs_print_info+0x20/0x20 [ 3391.658314][T24640] ? load_image+0x420/0x420 [ 3391.662869][T24640] ? __lock_acquire+0x7d40/0x7d40 [ 3391.668131][T24640] should_fail_ex+0x39d/0x4d0 [ 3391.672874][T24640] _copy_from_user+0x2f/0xe0 [ 3391.677688][T24640] __copy_msghdr+0x3bb/0x580 [ 3391.682379][T24640] ___sys_sendmsg+0x214/0x360 [ 3391.687457][T24640] ? __sys_sendmsg+0x2a0/0x2a0 [ 3391.692377][T24640] ? __lock_acquire+0x7d40/0x7d40 [ 3391.697691][T24640] __se_sys_sendmsg+0x1c2/0x2b0 [ 3391.703296][T24640] ? __x64_sys_sendmsg+0x80/0x80 [ 3391.708381][T24640] ? lockdep_hardirqs_on+0x98/0x150 [ 3391.713984][T24640] do_syscall_64+0x55/0xa0 [ 3391.718696][T24640] ? clear_bhb_loop+0x40/0x90 [ 3391.723501][T24640] ? clear_bhb_loop+0x40/0x90 [ 3391.728580][T24640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3391.734891][T24640] RIP: 0033:0x7f69b999c819 [ 3391.739624][T24640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3391.759847][T24640] RSP: 002b:00007f69ba93b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3391.768661][T24640] RAX: ffffffffffffffda RBX: 00007f69b9c15fa0 RCX: 00007f69b999c819 [ 3391.776941][T24640] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000004 [ 3391.785038][T24640] RBP: 00007f69ba93b090 R08: 0000000000000000 R09: 0000000000000000 [ 3391.793339][T24640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3391.801443][T24640] R13: 00007f69b9c16038 R14: 00007f69b9c15fa0 R15: 00007ffc793da708 [ 3391.809917][T24640] [ 3391.856230][T24630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3391.903953][T24635] validate_nla: 18 callbacks suppressed [ 3391.903992][T24635] netlink: 'syz.3.17211': attribute type 2 has an invalid length. [ 3392.187851][T24642] mac80211_hwsim hwsim417 »»»»»»: renamed from wlan0 [ 3392.549291][T24655] netlink: 'syz.1.17218': attribute type 10 has an invalid length. [ 3392.667412][T24658] netlink: 'syz.2.17217': attribute type 2 has an invalid length. [ 3393.683610][T24669] net_ratelimit: 1 callbacks suppressed [ 3393.683699][T24669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3393.719293][T24672] netlink: 'syz.2.17222': attribute type 2 has an invalid length. [ 3394.064159][T24679] FAULT_INJECTION: forcing a failure. [ 3394.064159][T24679] name failslab, interval 1, probability 0, space 0, times 0 [ 3394.109243][T24679] CPU: 0 PID: 24679 Comm: syz.1.17225 Not tainted syzkaller #0 [ 3394.116995][T24679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3394.127313][T24679] Call Trace: [ 3394.130642][T24679] [ 3394.133620][T24679] dump_stack_lvl+0x18c/0x250 [ 3394.138673][T24679] ? show_regs_print_info+0x20/0x20 [ 3394.144048][T24679] ? load_image+0x420/0x420 [ 3394.148732][T24679] ? __might_sleep+0xe0/0xe0 [ 3394.153401][T24679] ? __lock_acquire+0x7d40/0x7d40 [ 3394.158785][T24679] ? perf_trace_lock+0x304/0x3b0 [ 3394.163956][T24679] should_fail_ex+0x39d/0x4d0 [ 3394.168719][T24679] should_failslab+0x9/0x20 [ 3394.173552][T24679] slab_pre_alloc_hook+0x59/0x310 [ 3394.178718][T24679] ? perf_trace_preemptirq_template+0x269/0x330 [ 3394.185193][T24679] kmem_cache_alloc_lru+0x4d/0x2d0 [ 3394.190424][T24679] ? __d_alloc+0x31/0x730 [ 3394.194993][T24679] __d_alloc+0x31/0x730 [ 3394.199189][T24679] d_alloc_pseudo+0x1d/0x70 [ 3394.203723][T24679] alloc_file_pseudo+0xe4/0x210 [ 3394.208599][T24679] ? alloc_empty_backing_file+0xe0/0xe0 [ 3394.214228][T24679] anon_inode_getfile+0xc5/0x1a0 [ 3394.219314][T24679] __se_sys_perf_event_open+0xee7/0x1c50 [ 3394.225368][T24679] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 3394.231494][T24679] ? lock_chain_count+0x20/0x20 [ 3394.236738][T24679] ? lockdep_hardirqs_on+0x98/0x150 [ 3394.241966][T24679] ? __x64_sys_perf_event_open+0x20/0xc0 [ 3394.247629][T24679] do_syscall_64+0x55/0xa0 [ 3394.252178][T24679] ? clear_bhb_loop+0x40/0x90 [ 3394.257084][T24679] ? clear_bhb_loop+0x40/0x90 [ 3394.261896][T24679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3394.268004][T24679] RIP: 0033:0x7f4361f9c819 [ 3394.272447][T24679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3394.293300][T24679] RSP: 002b:00007f43601f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3394.302173][T24679] RAX: ffffffffffffffda RBX: 00007f4362215fa0 RCX: 00007f4361f9c819 [ 3394.310515][T24679] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 3394.319922][T24679] RBP: 00007f43601f6090 R08: 000000000000000a R09: 0000000000000000 [ 3394.328286][T24679] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 3394.336548][T24679] R13: 00007f4362216038 R14: 00007f4362215fa0 R15: 00007ffeaca6b268 [ 3394.345196][T24679] [ 3394.449043][T24681] FAULT_INJECTION: forcing a failure. [ 3394.449043][T24681] name failslab, interval 1, probability 0, space 0, times 0 [ 3394.475340][T24681] CPU: 0 PID: 24681 Comm: syz.2.17226 Not tainted syzkaller #0 [ 3394.483308][T24681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3394.493719][T24681] Call Trace: [ 3394.497134][T24681] [ 3394.500121][T24681] dump_stack_lvl+0x18c/0x250 [ 3394.504989][T24681] ? show_regs_print_info+0x20/0x20 [ 3394.510432][T24681] ? load_image+0x420/0x420 [ 3394.515002][T24681] ? __might_sleep+0xe0/0xe0 [ 3394.519680][T24681] ? __lock_acquire+0x7d40/0x7d40 [ 3394.525020][T24681] should_fail_ex+0x39d/0x4d0 [ 3394.529866][T24681] should_failslab+0x9/0x20 [ 3394.534615][T24681] slab_pre_alloc_hook+0x59/0x310 [ 3394.540314][T24681] ? sk_prot_alloc+0xe7/0x210 [ 3394.545259][T24681] ? sk_prot_alloc+0xe7/0x210 [ 3394.550263][T24681] __kmem_cache_alloc_node+0x53/0x250 [ 3394.555964][T24681] ? sk_prot_alloc+0xe7/0x210 [ 3394.560872][T24681] __kmalloc+0xa4/0x230 [ 3394.565450][T24681] sk_prot_alloc+0xe7/0x210 [ 3394.569999][T24681] ? sk_alloc+0x24/0x360 [ 3394.574667][T24681] sk_alloc+0x3a/0x360 [ 3394.578966][T24681] ? bpf_ctx_init+0x163/0x1a0 [ 3394.583949][T24681] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 3394.589555][T24681] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 3394.595147][T24681] ? __fget_files+0x28/0x4b0 [ 3394.599877][T24681] ? __fget_files+0x28/0x4b0 [ 3394.604697][T24681] ? __fget_files+0x43d/0x4b0 [ 3394.609492][T24681] ? cpu_online+0x60/0x60 [ 3394.614283][T24681] bpf_prog_test_run+0x321/0x390 [ 3394.619286][T24681] __sys_bpf+0x49d/0x890 [ 3394.623676][T24681] ? bpf_link_show_fdinfo+0x390/0x390 [ 3394.629150][T24681] ? lock_chain_count+0x20/0x20 [ 3394.634078][T24681] __x64_sys_bpf+0x7c/0x90 [ 3394.638555][T24681] do_syscall_64+0x55/0xa0 [ 3394.643111][T24681] ? clear_bhb_loop+0x40/0x90 [ 3394.647849][T24681] ? clear_bhb_loop+0x40/0x90 [ 3394.652585][T24681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3394.659025][T24681] RIP: 0033:0x7fb65ed9c819 [ 3394.663594][T24681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3394.684036][T24681] RSP: 002b:00007fb65fc3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3394.692864][T24681] RAX: ffffffffffffffda RBX: 00007fb65f015fa0 RCX: 00007fb65ed9c819 [ 3394.701588][T24681] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 3394.710307][T24681] RBP: 00007fb65fc3b090 R08: 0000000000000000 R09: 0000000000000000 [ 3394.719034][T24681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3394.727324][T24681] R13: 00007fb65f016038 R14: 00007fb65f015fa0 R15: 00007ffea6c0c008 [ 3394.735910][T24681] [ 3395.317908][T24690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3395.374638][T24692] netlink: 'syz.3.17229': attribute type 10 has an invalid length. [ 3395.389322][T24696] netlink: 'syz.2.17230': attribute type 2 has an invalid length. [ 3395.397339][T24696] __nla_validate_parse: 9 callbacks suppressed [ 3395.397356][T24696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17230'. [ 3395.608296][T24697] delete_channel: no stack [ 3395.943126][T24707] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.17235'. [ 3396.128916][T24709] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.17234'. [ 3396.168007][T24714] À: port 1(vlan0) entered blocking state [ 3396.175137][T24714] À: port 1(vlan0) entered disabled state [ 3396.183296][T24713] netlink: 'syz.1.17238': attribute type 1 has an invalid length. [ 3396.184694][T24714] vlan0: entered allmulticast mode [ 3396.228841][T24713] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.17238'. [ 3396.229002][T24714] vlan0: entered promiscuous mode [ 3396.892265][T24723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3396.937707][T24727] netlink: 'syz.3.17241': attribute type 2 has an invalid length. [ 3396.971844][T24727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17241'. [ 3397.058827][T24729] netlink: 'syz.1.17243': attribute type 10 has an invalid length. [ 3397.312950][T24730] delete_channel: no stack [ 3397.863743][T24743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3398.110821][T24743] netlink: 'syz.1.17248': attribute type 2 has an invalid length. [ 3398.123674][T24743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17248'. [ 3398.914911][T24753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3399.094458][T24749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3399.117332][T24753] netlink: 'syz.2.17261': attribute type 2 has an invalid length. [ 3399.140357][T24753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17261'. [ 3399.180368][T24761] netlink: 'syz.1.17254': attribute type 10 has an invalid length. [ 3399.221293][T24759] netlink: 'syz.0.17251': attribute type 2 has an invalid length. [ 3399.279462][T24759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17251'. [ 3399.445472][T24760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3399.551608][T24764] netlink: 'syz.3.17253': attribute type 2 has an invalid length. [ 3399.573991][T24764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17253'. [ 3399.694725][T24767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3399.750738][T24772] FAULT_INJECTION: forcing a failure. [ 3399.750738][T24772] name failslab, interval 1, probability 0, space 0, times 0 [ 3399.764577][T24772] CPU: 0 PID: 24772 Comm: syz.2.17256 Not tainted syzkaller #0 [ 3399.772348][T24772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3399.782640][T24772] Call Trace: [ 3399.786028][T24772] [ 3399.789084][T24772] dump_stack_lvl+0x18c/0x250 [ 3399.794088][T24772] ? show_regs_print_info+0x20/0x20 [ 3399.799486][T24772] ? load_image+0x420/0x420 [ 3399.804293][T24772] should_fail_ex+0x39d/0x4d0 [ 3399.809124][T24772] should_failslab+0x9/0x20 [ 3399.813921][T24772] slab_pre_alloc_hook+0x59/0x310 [ 3399.819270][T24772] kmem_cache_alloc+0x5a/0x2d0 [ 3399.824324][T24772] ? sctp_get_port_local+0x6d4/0x1620 [ 3399.829733][T24772] sctp_get_port_local+0x6d4/0x1620 [ 3399.835282][T24772] ? sctp_do_bind+0x990/0x990 [ 3399.840073][T24772] ? sctp_bind_addr_match+0x30/0x2a0 [ 3399.845668][T24772] sctp_do_bind+0x555/0x990 [ 3399.850395][T24772] sctp_connect_new_asoc+0x26a/0x6a0 [ 3399.855879][T24772] ? __sctp_connect+0xd80/0xd80 [ 3399.860926][T24772] ? __local_bh_enable_ip+0x13a/0x1c0 [ 3399.866336][T24772] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 3399.872256][T24772] ? security_sctp_bind_connect+0x89/0xb0 [ 3399.878272][T24772] sctp_sendmsg+0x1575/0x28c0 [ 3399.883263][T24772] ? sctp_getsockopt+0xb60/0xb60 [ 3399.888389][T24772] ? aa_sk_perm+0x83c/0x970 [ 3399.893388][T24772] ? aa_af_perm+0x330/0x330 [ 3399.898783][T24772] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 3399.905660][T24772] ? sock_rps_record_flow+0x19/0x3f0 [ 3399.911467][T24772] ? inet_sendmsg+0xe9/0x2f0 [ 3399.916783][T24772] ? inet_send_prepare+0x260/0x260 [ 3399.922112][T24772] ____sys_sendmsg+0x5ba/0x960 [ 3399.927257][T24772] ? __lock_acquire+0x7d40/0x7d40 [ 3399.932416][T24772] ? __sys_sendmsg_sock+0x30/0x30 [ 3399.938012][T24772] ? __import_iovec+0x5f2/0x850 [ 3399.943576][T24772] ? import_iovec+0x73/0xa0 [ 3399.948823][T24772] ___sys_sendmsg+0x2a6/0x360 [ 3399.953806][T24772] ? __sys_sendmsg+0x2a0/0x2a0 [ 3399.958806][T24772] ? __lock_acquire+0x7d40/0x7d40 [ 3399.964279][T24772] __se_sys_sendmsg+0x1c2/0x2b0 [ 3399.969433][T24772] ? __x64_sys_sendmsg+0x80/0x80 [ 3399.974624][T24772] ? lockdep_hardirqs_on+0x98/0x150 [ 3399.980038][T24772] do_syscall_64+0x55/0xa0 [ 3399.984855][T24772] ? clear_bhb_loop+0x40/0x90 [ 3399.989732][T24772] ? clear_bhb_loop+0x40/0x90 [ 3399.994634][T24772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3400.001098][T24772] RIP: 0033:0x7fb65ed9c819 [ 3400.005891][T24772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3400.027470][T24772] RSP: 002b:00007fb65fc1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3400.036180][T24772] RAX: ffffffffffffffda RBX: 00007fb65f016090 RCX: 00007fb65ed9c819 [ 3400.044773][T24772] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 000000000000000a [ 3400.053353][T24772] RBP: 00007fb65fc1a090 R08: 0000000000000000 R09: 0000000000000000 [ 3400.061533][T24772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3400.070043][T24772] R13: 00007fb65f016128 R14: 00007fb65f016090 R15: 00007ffea6c0c008 [ 3400.078730][T24772] [ 3400.110970][T24771] netlink: 'syz.1.17255': attribute type 2 has an invalid length. [ 3400.119410][T24771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17255'. [ 3400.424108][T24777] netlink: 152 bytes leftover after parsing attributes in process `syz.2.17259'. [ 3400.764460][T24774] syzkaller0: entered promiscuous mode [ 3400.782223][T24774] syzkaller0: entered allmulticast mode [ 3400.801806][T24778] delete_channel: no stack [ 3400.821170][T24785] netlink: 'syz.2.17260': attribute type 1 has an invalid length. [ 3400.839334][T24785] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.17260'. [ 3401.378065][T24795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3401.405603][T24799] netlink: 'syz.1.17264': attribute type 10 has an invalid length. [ 3401.416776][T24800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17265'. [ 3401.574057][T24803] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.17266'. [ 3404.490356][T24806] À: port 1(75¿) entered blocking state [ 3404.496441][T24806] À: port 1(75¿) entered disabled state [ 3404.503627][T24806] ¿: entered allmulticast mode [ 3404.508609][T24806] veth0_vlan: entered allmulticast mode [ 3404.516845][T24806] ¿: entered promiscuous mode [ 3404.623269][T24811] FAULT_INJECTION: forcing a failure. [ 3404.623269][T24811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3404.678548][T24812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3404.703972][T24811] CPU: 0 PID: 24811 Comm: syz.2.17270 Not tainted syzkaller #0 [ 3404.711861][T24811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3404.722284][T24811] Call Trace: [ 3404.726018][T24811] [ 3404.729147][T24811] dump_stack_lvl+0x18c/0x250 [ 3404.734412][T24811] ? show_regs_print_info+0x20/0x20 [ 3404.739820][T24811] ? load_image+0x420/0x420 [ 3404.744803][T24811] ? __lock_acquire+0x7d40/0x7d40 [ 3404.750291][T24811] ? snprintf+0xe9/0x140 [ 3404.754571][T24811] should_fail_ex+0x39d/0x4d0 [ 3404.759448][T24811] _copy_to_user+0x2f/0xa0 [ 3404.763959][T24811] simple_read_from_buffer+0xe7/0x150 [ 3404.769776][T24811] proc_fail_nth_read+0x1e8/0x260 [ 3404.774840][T24811] ? proc_fault_inject_write+0x360/0x360 [ 3404.780743][T24811] ? fsnotify_perm+0x271/0x5e0 [ 3404.786750][T24811] ? proc_fault_inject_write+0x360/0x360 [ 3404.792749][T24811] vfs_read+0x28b/0x970 [ 3404.796920][T24811] ? kernel_read+0x1e0/0x1e0 [ 3404.801772][T24811] ? __fget_files+0x28/0x4b0 [ 3404.806454][T24811] ? __fget_files+0x28/0x4b0 [ 3404.811302][T24811] ? __fget_files+0x43d/0x4b0 [ 3404.816370][T24811] ? __fdget_pos+0x2a3/0x330 [ 3404.821135][T24811] ? ksys_read+0x75/0x260 [ 3404.825693][T24811] ksys_read+0x150/0x260 [ 3404.830198][T24811] ? vfs_write+0x990/0x990 [ 3404.835267][T24811] ? lockdep_hardirqs_on+0x98/0x150 [ 3404.841273][T24811] do_syscall_64+0x55/0xa0 [ 3404.845781][T24811] ? clear_bhb_loop+0x40/0x90 [ 3404.850541][T24811] ? clear_bhb_loop+0x40/0x90 [ 3404.855487][T24811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3404.861487][T24811] RIP: 0033:0x7fb65ed5d04e [ 3404.866184][T24811] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3404.886066][T24811] RSP: 002b:00007fb65fc3afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3404.894747][T24811] RAX: ffffffffffffffda RBX: 00007fb65fc3b6c0 RCX: 00007fb65ed5d04e [ 3404.902812][T24811] RDX: 000000000000000f RSI: 00007fb65fc3b0a0 RDI: 0000000000000004 [ 3404.911478][T24811] RBP: 00007fb65fc3b090 R08: 0000000000000000 R09: 0000000000000000 [ 3404.919889][T24811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3404.928147][T24811] R13: 00007fb65f016038 R14: 00007fb65f015fa0 R15: 00007ffea6c0c008 [ 3404.937213][T24811] [ 3404.954523][T24818] validate_nla: 1 callbacks suppressed [ 3404.954541][T24818] netlink: 'syz.1.17268': attribute type 2 has an invalid length. [ 3404.976501][T24818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17268'. [ 3405.014570][T24817] netlink: 'syz.3.17271': attribute type 10 has an invalid length. [ 3405.182570][T24826] netlink: 'syz.2.17275': attribute type 10 has an invalid length. [ 3405.386894][T24828] delete_channel: no stack [ 3405.566498][T24837] netlink: 'syz.2.17278': attribute type 21 has an invalid length. [ 3405.588908][T24837] netlink: 156 bytes leftover after parsing attributes in process `syz.2.17278'. [ 3405.773879][T24843] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.17279'. [ 3406.122826][T24846] À: port 1(vlan0) entered blocking state [ 3406.141385][T24848] netlink: 'syz.1.17280': attribute type 29 has an invalid length. [ 3406.170998][T24846] À: port 1(vlan0) entered disabled state [ 3406.193631][T24846] vlan0: entered allmulticast mode [ 3406.219516][T24846] veth0_vlan: entered allmulticast mode [ 3406.290603][T24846] vlan0: entered promiscuous mode [ 3406.335973][T24856] FAULT_INJECTION: forcing a failure. [ 3406.335973][T24856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3406.354738][T24856] CPU: 1 PID: 24856 Comm: syz.3.17283 Not tainted syzkaller #0 [ 3406.362561][T24856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3406.372863][T24856] Call Trace: [ 3406.376902][T24856] [ 3406.379891][T24856] dump_stack_lvl+0x18c/0x250 [ 3406.385352][T24856] ? show_regs_print_info+0x20/0x20 [ 3406.391142][T24856] ? load_image+0x420/0x420 [ 3406.396245][T24856] ? __might_fault+0xaa/0x120 [ 3406.401252][T24856] ? __lock_acquire+0x7d40/0x7d40 [ 3406.406971][T24856] should_fail_ex+0x39d/0x4d0 [ 3406.411906][T24856] _copy_to_user+0x2f/0xa0 [ 3406.416908][T24856] tipc_ioctl+0x285/0x340 [ 3406.421650][T24856] ? tipc_poll+0x5f0/0x5f0 [ 3406.426338][T24856] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3406.432430][T24856] sock_do_ioctl+0xfc/0x310 [ 3406.437175][T24856] ? sock_show_fdinfo+0xb0/0xb0 [ 3406.442161][T24856] sock_ioctl+0x5ba/0x7e0 [ 3406.447354][T24856] ? sock_poll+0x3e0/0x3e0 [ 3406.452115][T24856] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3406.457325][T24856] ? security_file_ioctl+0x80/0xa0 [ 3406.462588][T24856] ? sock_poll+0x3e0/0x3e0 [ 3406.467416][T24856] __se_sys_ioctl+0xfd/0x170 [ 3406.472179][T24856] do_syscall_64+0x55/0xa0 [ 3406.477014][T24856] ? clear_bhb_loop+0x40/0x90 [ 3406.481843][T24856] ? clear_bhb_loop+0x40/0x90 [ 3406.486850][T24856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3406.493155][T24856] RIP: 0033:0x7f2d4cd9c819 [ 3406.497721][T24856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3406.517942][T24856] RSP: 002b:00007f2d4dc2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3406.526594][T24856] RAX: ffffffffffffffda RBX: 00007f2d4d015fa0 RCX: 00007f2d4cd9c819 [ 3406.534914][T24856] RDX: 0000200000000000 RSI: 00000000000089e1 RDI: 0000000000000004 [ 3406.543832][T24856] RBP: 00007f2d4dc2e090 R08: 0000000000000000 R09: 0000000000000000 [ 3406.552121][T24856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3406.560321][T24856] R13: 00007f2d4d016038 R14: 00007f2d4d015fa0 R15: 00007ffc8ef9ff68 [ 3406.568949][T24856] [ 3406.576759][T24848] netlink: 'syz.1.17280': attribute type 29 has an invalid length. [ 3406.623376][T24859] netlink: 'syz.0.17284': attribute type 10 has an invalid length. [ 3406.822268][T24865] netlink: 'syz.1.17288': attribute type 3 has an invalid length. [ 3406.839431][T24865] netlink: 'syz.1.17288': attribute type 6 has an invalid length. [ 3406.847594][T24865] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.17288'. [ 3406.995076][T24869] netlink: 'syz.0.17290': attribute type 10 has an invalid length. [ 3407.086018][T24871] IPv6: Can't replace route, no match found [ 3407.103571][T24877] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.17294'. [ 3407.140350][T24871] mac80211_hwsim hwsim413 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3407.483867][T24886] bridge0: port 2(batadv0) entered disabled state [ 3407.618367][T24886] bridge_slave_0: left promiscuous mode [ 3407.627428][T24886] bridge0: port 1(bridge_slave_0) entered disabled state [ 3407.961128][T24887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17296'. [ 3408.883910][T24918] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17307'. [ 3408.893955][T24908] delete_channel: no stack [ 3409.025770][T24924] FAULT_INJECTION: forcing a failure. [ 3409.025770][T24924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3409.025840][ T9740] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 3409.045924][T24924] CPU: 1 PID: 24924 Comm: syz.1.17310 Not tainted syzkaller #0 [ 3409.054537][T24924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3409.064956][T24924] Call Trace: [ 3409.068787][T24924] [ 3409.072364][T24924] dump_stack_lvl+0x18c/0x250 [ 3409.077096][T24924] ? show_regs_print_info+0x20/0x20 [ 3409.082349][T24924] ? load_image+0x420/0x420 [ 3409.087155][T24924] ? __lock_acquire+0x7d40/0x7d40 [ 3409.092280][T24924] ? snprintf+0xe9/0x140 [ 3409.096638][T24924] should_fail_ex+0x39d/0x4d0 [ 3409.101602][T24924] _copy_to_user+0x2f/0xa0 [ 3409.106214][T24924] simple_read_from_buffer+0xe7/0x150 [ 3409.111879][T24924] proc_fail_nth_read+0x1e8/0x260 [ 3409.117178][T24924] ? proc_fault_inject_write+0x360/0x360 [ 3409.123163][T24924] ? fsnotify_perm+0x271/0x5e0 [ 3409.127935][T24924] ? proc_fault_inject_write+0x360/0x360 [ 3409.133576][T24924] vfs_read+0x28b/0x970 [ 3409.137836][T24924] ? kernel_read+0x1e0/0x1e0 [ 3409.142622][T24924] ? __fget_files+0x28/0x4b0 [ 3409.147228][T24924] ? __fget_files+0x28/0x4b0 [ 3409.151834][T24924] ? __fget_files+0x43d/0x4b0 [ 3409.156522][T24924] ? __fdget_pos+0x2a3/0x330 [ 3409.161293][T24924] ? ksys_read+0x75/0x260 [ 3409.165720][T24924] ksys_read+0x150/0x260 [ 3409.170147][T24924] ? vfs_write+0x990/0x990 [ 3409.174748][T24924] ? lockdep_hardirqs_on+0x98/0x150 [ 3409.179956][T24924] do_syscall_64+0x55/0xa0 [ 3409.184453][T24924] ? clear_bhb_loop+0x40/0x90 [ 3409.189677][T24924] ? clear_bhb_loop+0x40/0x90 [ 3409.194528][T24924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3409.200676][T24924] RIP: 0033:0x7f4361f5d04e [ 3409.205349][T24924] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3409.226438][T24924] RSP: 002b:00007f43601f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3409.235202][T24924] RAX: ffffffffffffffda RBX: 00007f43601f66c0 RCX: 00007f4361f5d04e [ 3409.243629][T24924] RDX: 000000000000000f RSI: 00007f43601f60a0 RDI: 0000000000000004 [ 3409.252149][T24924] RBP: 00007f43601f6090 R08: 0000000000000000 R09: 0000000000000000 [ 3409.260386][T24924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3409.268793][T24924] R13: 00007f4362216038 R14: 00007f4362215fa0 R15: 00007ffeaca6b268 [ 3409.277320][T24924] [ 3409.500452][T24930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3409.506518][T24936] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.17314'. [ 3409.869985][T24942] delete_channel: no stack [ 3410.266341][T24946] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.17317'. [ 3410.285786][T24946] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.17317'. [ 3410.827217][T24964] validate_nla: 3 callbacks suppressed [ 3410.827236][T24964] netlink: 'syz.2.17325': attribute type 3 has an invalid length. [ 3410.849027][T24964] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.17325'. [ 3411.310285][T24978] IPv6: Can't replace route, no match found [ 3411.327835][T24982] netlink: 'syz.1.17330': attribute type 10 has an invalid length. [ 3411.351384][T24978] mac80211_hwsim hwsim411 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3411.432192][T24987] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.17332'. [ 3412.289262][T15435] Bluetooth: hci4: command 0x0406 tx timeout [ 3412.814255][T25027] netlink: 'syz.1.17346': attribute type 10 has an invalid length. [ 3413.440211][T25035] netlink: 'syz.3.17348': attribute type 10 has an invalid length. [ 3413.666825][T25046] FAULT_INJECTION: forcing a failure. [ 3413.666825][T25046] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3413.721325][T25046] CPU: 1 PID: 25046 Comm: syz.1.17352 Not tainted syzkaller #0 [ 3413.729555][T25046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3413.740509][T25046] Call Trace: [ 3413.743819][T25046] [ 3413.746867][T25046] dump_stack_lvl+0x18c/0x250 [ 3413.751606][T25046] ? show_regs_print_info+0x20/0x20 [ 3413.757125][T25046] ? load_image+0x420/0x420 [ 3413.761936][T25046] ? __lock_acquire+0x7d40/0x7d40 [ 3413.767175][T25046] ? mark_lock+0x94/0x320 [ 3413.771745][T25046] should_fail_ex+0x39d/0x4d0 [ 3413.776632][T25046] prepare_alloc_pages+0x1e2/0x5f0 [ 3413.782136][T25046] __alloc_pages+0x134/0x460 [ 3413.787024][T25046] ? zone_statistics+0x170/0x170 [ 3413.792171][T25046] ? do_wp_page+0x7ca/0x35f0 [ 3413.797048][T25046] ? do_wp_page+0xfc5/0x35f0 [ 3413.801759][T25046] __folio_alloc+0x10/0x20 [ 3413.806206][T25046] vma_alloc_folio+0x47a/0x8f0 [ 3413.811015][T25046] do_wp_page+0x1243/0x35f0 [ 3413.815677][T25046] ? folio_put+0xd0/0xd0 [ 3413.820053][T25046] ? do_raw_spin_lock+0x11f/0x2c0 [ 3413.825248][T25046] ? __rwlock_init+0x150/0x150 [ 3413.830059][T25046] handle_mm_fault+0x135d/0x4c00 [ 3413.835036][T25046] ? handle_mm_fault+0xe7/0x4c00 [ 3413.840036][T25046] ? numa_migrate_prep+0x350/0x350 [ 3413.845189][T25046] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 3413.850663][T25046] do_user_addr_fault+0x730/0x12c0 [ 3413.855961][T25046] exc_page_fault+0x64/0x100 [ 3413.860653][T25046] asm_exc_page_fault+0x26/0x30 [ 3413.865508][T25046] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 3413.871665][T25046] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 3413.892424][T25046] RSP: 0018:ffffc9000e62f630 EFLAGS: 00050202 [ 3413.898700][T25046] RAX: ffffffff8427ca01 RBX: 0000000000000e5c RCX: 000000000000059c [ 3413.907130][T25046] RDX: 0000000000000000 RSI: ffff88802160c8c0 RDI: 0000200000006000 [ 3413.915226][T25046] RBP: ffffc9000e62f7c0 R08: ffff88802160ce5b R09: 1ffff110042c19cb [ 3413.923388][T25046] R10: dffffc0000000000 R11: ffffed10042c19cc R12: 000020000000659c [ 3413.931495][T25046] R13: ffffc9000e62fe40 R14: 0000200000005740 R15: ffff88802160c000 [ 3413.940227][T25046] ? _copy_to_iter+0x10c1/0x1120 [ 3413.945372][T25046] copyout+0x70/0x90 [ 3413.949642][T25046] _copy_to_iter+0x432/0x1120 [ 3413.954600][T25046] ? iov_iter_init+0x1e0/0x1e0 [ 3413.959365][T25046] ? __virt_addr_valid+0x18c/0x540 [ 3413.964472][T25046] ? __virt_addr_valid+0x469/0x540 [ 3413.969628][T25046] ? __phys_addr_symbol+0x2f/0x70 [ 3413.974864][T25046] __skb_datagram_iter+0xdb/0x780 [ 3413.980008][T25046] ? skb_copy_datagram_iter+0x200/0x200 [ 3413.986018][T25046] skb_copy_datagram_iter+0xb1/0x200 [ 3413.991393][T25046] netlink_recvmsg+0x2d4/0xe60 [ 3413.996277][T25046] ? netlink_sendmsg+0xbf0/0xbf0 [ 3414.001322][T25046] ? aa_af_perm+0x330/0x330 [ 3414.006189][T25046] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 3414.011781][T25046] ? security_socket_recvmsg+0x89/0xb0 [ 3414.017324][T25046] ? netlink_sendmsg+0xbf0/0xbf0 [ 3414.022439][T25046] ____sys_recvmsg+0x2ce/0x5e0 [ 3414.027228][T25046] ? __sys_recvmsg_sock+0x50/0x50 [ 3414.032260][T25046] ? import_iovec+0x73/0xa0 [ 3414.037151][T25046] ___sys_recvmsg+0x216/0x590 [ 3414.042270][T25046] ? __sys_recvmsg+0x2a0/0x2a0 [ 3414.047275][T25046] ? ksys_write+0x1c4/0x260 [ 3414.051968][T25046] ? __fget_files+0x43d/0x4b0 [ 3414.056919][T25046] __x64_sys_recvmsg+0x20c/0x2e0 [ 3414.062163][T25046] ? ___sys_recvmsg+0x590/0x590 [ 3414.067134][T25046] ? lockdep_hardirqs_on+0x98/0x150 [ 3414.072518][T25046] do_syscall_64+0x55/0xa0 [ 3414.076949][T25046] ? clear_bhb_loop+0x40/0x90 [ 3414.081829][T25046] ? clear_bhb_loop+0x40/0x90 [ 3414.086628][T25046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3414.092757][T25046] RIP: 0033:0x7f4361f9c819 [ 3414.097352][T25046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3414.117659][T25046] RSP: 002b:00007f43601d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 3414.126177][T25046] RAX: ffffffffffffffda RBX: 00007f4362216090 RCX: 00007f4361f9c819 [ 3414.134498][T25046] RDX: 0000000000012100 RSI: 0000200000000080 RDI: 0000000000000003 [ 3414.142746][T25046] RBP: 00007f43601d5090 R08: 0000000000000000 R09: 0000000000000000 [ 3414.152038][T25046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3414.160541][T25046] R13: 00007f4362216128 R14: 00007f4362216090 R15: 00007ffeaca6b268 [ 3414.168700][T25046] [ 3414.394820][T25053] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17353'. [ 3414.451489][T25053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17353'. [ 3414.681514][T25059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3414.744845][T25064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3414.770438][T25067] netlink: 'syz.3.17356': attribute type 2 has an invalid length. [ 3414.784429][T25067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17356'. [ 3414.987059][T25078] netlink: 'syz.2.17360': attribute type 10 has an invalid length. [ 3414.997366][T25078] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.17360'. [ 3415.045662][T25078] netlink: 'syz.2.17360': attribute type 2 has an invalid length. [ 3415.057582][T25079] FAULT_INJECTION: forcing a failure. [ 3415.057582][T25079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3415.069235][T25078] netlink: 51 bytes leftover after parsing attributes in process `syz.2.17360'. [ 3415.073621][T25079] CPU: 0 PID: 25079 Comm: syz.0.17359 Not tainted syzkaller #0 [ 3415.089439][T25079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3415.100075][T25079] Call Trace: [ 3415.103536][T25079] [ 3415.106595][T25079] dump_stack_lvl+0x18c/0x250 [ 3415.111870][T25079] ? show_regs_print_info+0x20/0x20 [ 3415.117178][T25079] ? load_image+0x420/0x420 [ 3415.122126][T25079] ? __might_fault+0xaa/0x120 [ 3415.127250][T25079] ? __lock_acquire+0x7d40/0x7d40 [ 3415.132727][T25079] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 3415.139499][T25079] should_fail_ex+0x39d/0x4d0 [ 3415.144329][T25079] _copy_from_user+0x2f/0xe0 [ 3415.149142][T25079] __sys_bpf+0x23e/0x890 [ 3415.153660][T25079] ? bpf_link_show_fdinfo+0x390/0x390 [ 3415.159157][T25079] ? lock_chain_count+0x20/0x20 [ 3415.164279][T25079] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3415.170360][T25079] __x64_sys_bpf+0x7c/0x90 [ 3415.175099][T25079] do_syscall_64+0x55/0xa0 [ 3415.179705][T25079] ? clear_bhb_loop+0x40/0x90 [ 3415.184381][T25079] ? clear_bhb_loop+0x40/0x90 [ 3415.189235][T25079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3415.195135][T25079] RIP: 0033:0x7f69b999c819 [ 3415.199724][T25079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3415.220214][T25079] RSP: 002b:00007f69ba93b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3415.228751][T25079] RAX: ffffffffffffffda RBX: 00007f69b9c15fa0 RCX: 00007f69b999c819 [ 3415.236742][T25079] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 3415.244895][T25079] RBP: 00007f69ba93b090 R08: 0000000000000000 R09: 0000000000000000 [ 3415.253316][T25079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3415.261550][T25079] R13: 00007f69b9c16038 R14: 00007f69b9c15fa0 R15: 00007ffc793da708 [ 3415.269897][T25079] [ 3415.275572][T25075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17361'. [ 3415.486604][T25084] netlink: 'syz.2.17363': attribute type 9 has an invalid length. [ 3415.507312][T25084] netlink: 163088 bytes leftover after parsing attributes in process `syz.2.17363'. [ 3415.626769][T25086] netlink: 'syz.3.17364': attribute type 10 has an invalid length. [ 3415.733205][T25093] FAULT_INJECTION: forcing a failure. [ 3415.733205][T25093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3415.809447][T25093] CPU: 1 PID: 25093 Comm: syz.1.17366 Not tainted syzkaller #0 [ 3415.817693][T25093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3415.828504][T25093] Call Trace: [ 3415.831818][T25093] [ 3415.834854][T25093] dump_stack_lvl+0x18c/0x250 [ 3415.839900][T25093] ? show_regs_print_info+0x20/0x20 [ 3415.845523][T25093] ? load_image+0x420/0x420 [ 3415.850296][T25093] ? __lock_acquire+0x7d40/0x7d40 [ 3415.855607][T25093] ? snprintf+0xe9/0x140 [ 3415.859883][T25093] should_fail_ex+0x39d/0x4d0 [ 3415.864829][T25093] _copy_to_user+0x2f/0xa0 [ 3415.869355][T25093] simple_read_from_buffer+0xe7/0x150 [ 3415.874802][T25093] proc_fail_nth_read+0x1e8/0x260 [ 3415.879944][T25093] ? proc_fault_inject_write+0x360/0x360 [ 3415.885714][T25093] ? fsnotify_perm+0x271/0x5e0 [ 3415.890629][T25093] ? proc_fault_inject_write+0x360/0x360 [ 3415.896559][T25093] vfs_read+0x28b/0x970 [ 3415.901259][T25093] ? kernel_read+0x1e0/0x1e0 [ 3415.906140][T25093] ? __fget_files+0x28/0x4b0 [ 3415.911894][T25093] ? __fget_files+0x28/0x4b0 [ 3415.916715][T25093] ? __fget_files+0x43d/0x4b0 [ 3415.921713][T25093] ? __fdget_pos+0x2a3/0x330 [ 3415.926766][T25093] ? ksys_read+0x75/0x260 [ 3415.931416][T25093] ksys_read+0x150/0x260 [ 3415.936386][T25093] ? vfs_write+0x990/0x990 [ 3415.941649][T25093] ? lockdep_hardirqs_on+0x98/0x150 [ 3415.947397][T25093] do_syscall_64+0x55/0xa0 [ 3415.952248][T25093] ? clear_bhb_loop+0x40/0x90 [ 3415.957360][T25093] ? clear_bhb_loop+0x40/0x90 [ 3415.962312][T25093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3415.968475][T25093] RIP: 0033:0x7f4361f5d04e [ 3415.973071][T25093] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3415.994001][T25093] RSP: 002b:00007f43601f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3416.002940][T25093] RAX: ffffffffffffffda RBX: 00007f43601f66c0 RCX: 00007f4361f5d04e [ 3416.010996][T25093] RDX: 000000000000000f RSI: 00007f43601f60a0 RDI: 0000000000000004 [ 3416.019329][T25093] RBP: 00007f43601f6090 R08: 0000000000000000 R09: 0000000000000000 [ 3416.028541][T25093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3416.036783][T25093] R13: 00007f4362216038 R14: 00007f4362215fa0 R15: 00007ffeaca6b268 [ 3416.044948][T25093] [ 3416.403869][T25102] netlink: 'syz.2.17368': attribute type 10 has an invalid length. [ 3416.419648][T25102] netlink: 152 bytes leftover after parsing attributes in process `syz.2.17368'. [ 3416.567386][T25104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3416.613393][T25107] delete_channel: no stack [ 3416.638647][T25104] netlink: 'syz.1.17369': attribute type 2 has an invalid length. [ 3416.666493][T25104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17369'. [ 3416.714682][T25110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3416.885591][T25119] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.17374'. [ 3417.341998][T25131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3417.629144][T25139] delete_channel: no stack [ 3417.793225][T25142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3418.006206][T25145] delete_channel: no stack [ 3418.539542][T25161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3419.184642][T25173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3419.280088][T25173] netlink: 'syz.3.17392': attribute type 2 has an invalid length. [ 3419.288528][T25173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17392'. [ 3419.363236][T25176] delete_channel: no stack [ 3419.510920][T25187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3419.548663][T25187] netlink: 'syz.0.17404': attribute type 2 has an invalid length. [ 3419.577720][T25187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17404'. [ 3419.660601][T25191] netlink: 'syz.2.17407': attribute type 10 has an invalid length. [ 3420.015226][T25201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3420.051363][T25201] netlink: 'syz.0.17399': attribute type 2 has an invalid length. [ 3420.061293][T25201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17399'. [ 3420.437878][T25207] netlink: 'syz.1.17401': attribute type 21 has an invalid length. [ 3420.468090][T25207] netlink: 156 bytes leftover after parsing attributes in process `syz.1.17401'. [ 3420.894955][T25216] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17412'. [ 3421.035245][T25211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17412'. [ 3421.853908][T25223] netlink: 'syz.3.17406': attribute type 9 has an invalid length. [ 3421.874072][T25223] netlink: 163088 bytes leftover after parsing attributes in process `syz.3.17406'. [ 3422.089047][T25230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3422.491272][T25245] netlink: 'syz.2.17415': attribute type 10 has an invalid length. [ 3422.529618][T25250] netlink: 'syz.3.17417': attribute type 4 has an invalid length. [ 3422.619313][T25250] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17417'. [ 3423.570974][T25274] netlink: 'syz.0.17428': attribute type 10 has an invalid length. [ 3423.573933][T25270] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17420'. [ 3423.665785][T25270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17420'. [ 3423.813555][T25280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3424.294575][T25293] delete_channel: no stack [ 3427.308367][T25312] netlink: 'syz.2.17434': attribute type 10 has an invalid length. [ 3427.321537][T25312] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.17434'. [ 3427.335381][T25312] openvswitch: netlink: Message has 4 unknown bytes. [ 3427.500530][T25310] netlink: 'syz.3.17432': attribute type 10 has an invalid length. [ 3427.553062][T25315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3427.661681][ T9740] Bluetooth: hci1: command 0x0406 tx timeout [ 3427.676151][T25321] netlink: 10 bytes leftover after parsing attributes in process `syz.3.17436'. [ 3427.706184][T25321] netlink: 'syz.3.17436': attribute type 10 has an invalid length. [ 3428.071366][T25321] team0: Device hsr_slave_0 failed to register rx_handler [ 3428.454621][T25331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3428.546231][T25331] netlink: 'syz.1.17439': attribute type 2 has an invalid length. [ 3428.578173][T25331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17439'. [ 3428.803586][T25344] netlink: 'syz.2.17443': attribute type 10 has an invalid length. [ 3428.816415][T25346] netlink: 'syz.1.17444': attribute type 10 has an invalid length. [ 3429.252212][T25355] netlink: 'syz.1.17445': attribute type 21 has an invalid length. [ 3429.290473][T25355] netlink: 'syz.1.17445': attribute type 1 has an invalid length. [ 3429.298606][T25355] netlink: 144 bytes leftover after parsing attributes in process `syz.1.17445'. [ 3429.354536][T25354] netlink: 144 bytes leftover after parsing attributes in process `syz.1.17445'. [ 3429.379740][T25356] netlink: 180 bytes leftover after parsing attributes in process `syz.1.17445'. [ 3429.471762][T25359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3429.838870][T25367] delete_channel: no stack [ 3429.868265][T25376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3429.989669][T25379] netlink: 'syz.0.17453': attribute type 10 has an invalid length. [ 3430.449550][ T7739] wlan1: Trigger new scan to find an IBSS to join [ 3430.981923][T25403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3431.218554][T25410] netlink: 'syz.1.17460': attribute type 10 has an invalid length. [ 3431.745321][T25418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3432.400264][T25436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3435.410866][ T7740] wlan1: Trigger new scan to find an IBSS to join [ 3435.878762][T25455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3435.896328][T25458] validate_nla: 1 callbacks suppressed [ 3435.896343][T25458] netlink: 'syz.0.17477': attribute type 10 has an invalid length. [ 3435.922248][T25461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17478'. [ 3436.356576][T28757] wlan1: Creating new IBSS network, BSSID 32:17:b8:ae:b2:59 [ 3441.579178][T25477] netlink: 'syz.0.17480': attribute type 10 has an invalid length. [ 3441.768202][T25494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3441.883863][T25499] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.17484'. [ 3442.106397][T25508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3442.400321][T25520] netlink: 'syz.1.17489': attribute type 10 has an invalid length. [ 3442.408851][T25520] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.17489'. [ 3442.418543][T25520] openvswitch: netlink: Message has 4 unknown bytes. [ 3442.430515][T25519] netlink: 'syz.2.17488': attribute type 10 has an invalid length. [ 3442.480225][T25516] delete_channel: no stack [ 3442.676874][T25524] netlink: 'syz.0.17492': attribute type 10 has an invalid length. [ 3442.844244][T25531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3443.175960][T25539] netlink: 'syz.3.17496': attribute type 10 has an invalid length. [ 3443.202002][T25539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17496'. [ 3443.229680][T25539] dummy0: entered promiscuous mode [ 3443.236090][T25539] dummy0: entered allmulticast mode [ 3443.300944][T25539] team0: Port device dummy0 removed [ 3443.324851][T25539] bridge0: port 3(dummy0) entered blocking state [ 3443.344727][T25539] bridge0: port 3(dummy0) entered disabled state [ 3443.501929][T25543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3443.709791][T25548] netlink: 'syz.3.17499': attribute type 10 has an invalid length. [ 3443.718869][T25548] dummy0: left allmulticast mode [ 3443.729763][T25548] dummy0: left promiscuous mode [ 3443.735424][T25548] bridge0: port 3(dummy0) entered disabled state [ 3443.758794][ T188] tipc: Subscription rejected, illegal request [ 3443.768986][T25548] team0: Port device dummy0 added [ 3443.911759][T25561] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17501'. [ 3443.996483][T25558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3444.026781][T25557] delete_channel: no stack [ 3444.170807][T25563] delete_channel: no stack [ 3444.185195][T25554] syzkaller0: entered promiscuous mode [ 3444.201800][T25554] syzkaller0: entered allmulticast mode [ 3444.696113][T25573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3444.714014][T25576] netlink: 'syz.2.17509': attribute type 10 has an invalid length. [ 3444.726506][T25576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17509'. [ 3444.737468][T25576] dummy0: entered promiscuous mode [ 3444.744807][T25576] dummy0: entered allmulticast mode [ 3444.767990][T25576] team0: Port device dummy0 removed [ 3444.790357][T25576] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 3447.862379][T25578] netlink: 'syz.3.17510': attribute type 10 has an invalid length. [ 3447.878484][T25590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3448.063687][T25597] delete_channel: no stack [ 3448.085309][T25595] delete_channel: no stack [ 3448.320077][T25603] delete_channel: no stack [ 3448.451116][T25608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3448.489965][T25601] delete_channel: no stack [ 3448.816327][T25617] netlink: 'syz.1.17523': attribute type 10 has an invalid length. [ 3448.886952][T25619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3449.248277][T21984] tipc: Subscription rejected, illegal request [ 3449.495696][T25632] delete_channel: no stack [ 3449.618744][T25642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3449.827803][T25648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3449.981904][T25657] netlink: 68 bytes leftover after parsing attributes in process `syz.3.17540'. [ 3450.000541][T25659] FAULT_INJECTION: forcing a failure. [ 3450.000541][T25659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3450.014785][T25659] CPU: 0 PID: 25659 Comm: syz.0.17538 Not tainted syzkaller #0 [ 3450.022918][T25659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3450.034018][T25659] Call Trace: [ 3450.037961][T25659] [ 3450.041277][T25659] dump_stack_lvl+0x18c/0x250 [ 3450.046219][T25659] ? show_regs_print_info+0x20/0x20 [ 3450.051659][T25659] ? load_image+0x420/0x420 [ 3450.056478][T25659] ? __might_fault+0xaa/0x120 [ 3450.061345][T25659] ? __lock_acquire+0x7d40/0x7d40 [ 3450.066767][T25659] should_fail_ex+0x39d/0x4d0 [ 3450.072522][T25659] _copy_from_user+0x2f/0xe0 [ 3450.077424][T25659] dev_ethtool+0xc6/0x18d0 [ 3450.081971][T25659] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 3450.088506][T25659] ? __lock_acquire+0x7d40/0x7d40 [ 3450.094148][T25659] ? __might_fault+0xaa/0x120 [ 3450.099432][T25659] ? full_name_hash+0x92/0xe0 [ 3450.104113][T25659] ? dev_load+0x21/0x1f0 [ 3450.108459][T25659] dev_ioctl+0x392/0x1140 [ 3450.113512][T25659] sock_do_ioctl+0x239/0x310 [ 3450.118388][T25659] ? sock_show_fdinfo+0xb0/0xb0 [ 3450.123767][T25659] sock_ioctl+0x5ba/0x7e0 [ 3450.128101][T25659] ? sock_poll+0x3e0/0x3e0 [ 3450.132546][T25659] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3450.137754][T25659] ? security_file_ioctl+0x80/0xa0 [ 3450.143168][T25659] ? sock_poll+0x3e0/0x3e0 [ 3450.147673][T25659] __se_sys_ioctl+0xfd/0x170 [ 3450.152529][T25659] do_syscall_64+0x55/0xa0 [ 3450.157033][T25659] ? clear_bhb_loop+0x40/0x90 [ 3450.162179][T25659] ? clear_bhb_loop+0x40/0x90 [ 3450.168359][T25659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3450.174454][T25659] RIP: 0033:0x7f69b999c819 [ 3450.179056][T25659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3450.200024][T25659] RSP: 002b:00007f69ba93b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3450.209046][T25659] RAX: ffffffffffffffda RBX: 00007f69b9c15fa0 RCX: 00007f69b999c819 [ 3450.217385][T25659] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 3450.226339][T25659] RBP: 00007f69ba93b090 R08: 0000000000000000 R09: 0000000000000000 [ 3450.234789][T25659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3450.243530][T25659] R13: 00007f69b9c16038 R14: 00007f69b9c15fa0 R15: 00007ffc793da708 [ 3450.252502][T25659] [ 3450.403492][T25660] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.17540'. [ 3450.547807][T25665] delete_channel: no stack [ 3450.573956][T25670] netlink: 'syz.0.17543': attribute type 10 has an invalid length. [ 3450.886541][T25678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3450.991165][T25680] delete_channel: no stack [ 3451.151530][T25687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3451.198858][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3451.205690][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 3451.316499][T25693] FAULT_INJECTION: forcing a failure. [ 3451.316499][T25693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3451.330527][T25693] CPU: 0 PID: 25693 Comm: syz.1.17552 Not tainted syzkaller #0 [ 3451.338747][T25693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3451.349517][T25693] Call Trace: [ 3451.352921][T25693] [ 3451.355941][T25693] dump_stack_lvl+0x18c/0x250 [ 3451.360668][T25693] ? show_regs_print_info+0x20/0x20 [ 3451.366091][T25693] ? load_image+0x420/0x420 [ 3451.370803][T25693] ? __might_fault+0xaa/0x120 [ 3451.375576][T25693] ? __lock_acquire+0x7d40/0x7d40 [ 3451.380876][T25693] should_fail_ex+0x39d/0x4d0 [ 3451.386086][T25693] _copy_from_user+0x2f/0xe0 [ 3451.390794][T25693] do_ipv6_setsockopt+0x3a2/0x3e20 [ 3451.396466][T25693] ? sk_dst_reset+0xa0/0xa0 [ 3451.401434][T25693] ? mark_lock+0x94/0x320 [ 3451.405770][T25693] ? __lock_acquire+0x1273/0x7d40 [ 3451.411040][T25693] ? trace_event_raw_event_lock+0x250/0x250 [ 3451.417545][T25693] ? aa_label_sk_perm+0x463/0x5c0 [ 3451.423081][T25693] ? trace_call_bpf+0xc3/0x6c0 [ 3451.428046][T25693] ? aa_sk_perm+0x970/0x970 [ 3451.432839][T25693] ? trace_event_raw_event_lock+0x250/0x250 [ 3451.439712][T25693] ? __might_sleep+0xe0/0xe0 [ 3451.444930][T25693] ? trace_call_bpf+0xc3/0x6c0 [ 3451.450057][T25693] ? trace_call_bpf+0x5e9/0x6c0 [ 3451.455283][T25693] ? aa_sk_perm+0x83c/0x970 [ 3451.459894][T25693] ? __fget_files+0x28/0x4b0 [ 3451.464778][T25693] ? aa_af_perm+0x330/0x330 [ 3451.469554][T25693] ? __fget_files+0x28/0x4b0 [ 3451.474406][T25693] ? __fget_files+0x28/0x4b0 [ 3451.479255][T25693] ? aa_sock_opt_perm+0x74/0x100 [ 3451.484398][T25693] ipv6_setsockopt+0x59/0x190 [ 3451.489178][T25693] ? sock_common_recvmsg+0x190/0x190 [ 3451.494569][T25693] do_sock_setsockopt+0x175/0x1a0 [ 3451.500050][T25693] ? __fdget+0x180/0x210 [ 3451.504566][T25693] __x64_sys_setsockopt+0x182/0x200 [ 3451.510142][T25693] do_syscall_64+0x55/0xa0 [ 3451.514671][T25693] ? clear_bhb_loop+0x40/0x90 [ 3451.519723][T25693] ? clear_bhb_loop+0x40/0x90 [ 3451.524756][T25693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3451.530829][T25693] RIP: 0033:0x7f4361f9c819 [ 3451.535426][T25693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3451.555926][T25693] RSP: 002b:00007f43601f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3451.564894][T25693] RAX: ffffffffffffffda RBX: 00007f4362215fa0 RCX: 00007f4361f9c819 [ 3451.573656][T25693] RDX: 0000000000000036 RSI: 0000000000000029 RDI: 0000000000000003 [ 3451.582076][T25693] RBP: 00007f43601f6090 R08: 0000000000000120 R09: 0000000000000000 [ 3451.590427][T25693] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 3451.599956][T25693] R13: 00007f4362216038 R14: 00007f4362215fa0 R15: 00007ffeaca6b268 [ 3451.608223][T25693] [ 3451.716087][T25696] netlink: 'syz.3.17553': attribute type 10 has an invalid length. [ 3451.727167][T25696] netlink: 2 bytes leftover after parsing attributes in process `syz.3.17553'. [ 3451.737032][T25696] batadv_slave_1: entered promiscuous mode [ 3451.745774][T25696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3451.754286][T25696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3451.846392][T25700] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17555'. [ 3452.041554][T25707] delete_channel: no stack [ 3452.133889][T25710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3452.445786][T25723] delete_channel: no stack [ 3452.476469][ C1] [ 3452.476480][ C1] ================================ [ 3452.476485][ C1] WARNING: inconsistent lock state [ 3452.476495][ C1] syzkaller #0 Not tainted [ 3452.476505][ C1] -------------------------------- [ 3452.476509][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 3452.476517][ C1] syz.2.17568/25726 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 3452.476537][ C1] ffff88804aba28f8 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 3452.476586][ C1] {INITIAL USE} state was registered at: [ 3452.476596][ C1] lock_acquire+0x19e/0x420 [ 3452.476613][ C1] _raw_spin_lock+0x2e/0x40 [ 3452.476631][ C1] htab_lock_bucket+0x17d/0x300 [ 3452.476646][ C1] htab_map_update_elem+0x229/0x1040 [ 3452.476661][ C1] bpf_map_update_value+0x660/0x720 [ 3452.476675][ C1] map_update_elem+0x57b/0x700 [ 3452.476697][ C1] __sys_bpf+0x6b5/0x890 [ 3452.476716][ C1] __x64_sys_bpf+0x7c/0x90 [ 3452.476749][ C1] do_syscall_64+0x55/0xa0 [ 3452.476763][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3452.476782][ C1] irq event stamp: 2406 [ 3452.476788][ C1] hardirqs last enabled at (2405): [] exc_debug+0xf5/0x140 [ 3452.476808][ C1] hardirqs last disabled at (2406): [] exc_debug+0x73/0x140 [ 3452.476825][ C1] softirqs last enabled at (2278): [] bpf_prog_load+0x1266/0x1670 [ 3452.476845][ C1] softirqs last disabled at (2274): [] bpf_ksym_add+0x2d/0x340 [ 3452.476867][ C1] [ 3452.476867][ C1] other info that might help us debug this: [ 3452.476872][ C1] Possible unsafe locking scenario: [ 3452.476872][ C1] [ 3452.476877][ C1] CPU0 [ 3452.476880][ C1] ---- [ 3452.476884][ C1] lock(&htab->lockdep_key); [ 3452.476895][ C1] [ 3452.476899][ C1] lock(&htab->lockdep_key); [ 3452.476913][ C1] [ 3452.476913][ C1] *** DEADLOCK *** [ 3452.476913][ C1] [ 3452.476916][ C1] no locks held by syz.2.17568/25726. [ 3452.476924][ C1] [ 3452.476924][ C1] stack backtrace: [ 3452.476934][ C1] CPU: 1 PID: 25726 Comm: syz.2.17568 Not tainted syzkaller #0 [ 3452.476951][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3452.476961][ C1] Call Trace: [ 3452.476968][ C1] <#DB> [ 3452.476980][ C1] dump_stack_lvl+0x18c/0x250 [ 3452.477036][ C1] ? show_regs_print_info+0x20/0x20 [ 3452.477109][ C1] ? print_usage_bug+0x475/0x690 [ 3452.477133][ C1] ? verify_lock_unused+0x18/0x140 [ 3452.477175][ C1] lock_acquire+0x2c2/0x420 [ 3452.477217][ C1] ? htab_lock_bucket+0x17d/0x300 [ 3452.477249][ C1] ? read_lock_is_recursive+0x20/0x20 [ 3452.477299][ C1] ? perf_trace_lock_acquire+0x34f/0x410 [ 3452.477356][ C1] _raw_spin_lock+0x2e/0x40 [ 3452.477374][ C1] ? htab_lock_bucket+0x17d/0x300 [ 3452.477394][ C1] htab_lock_bucket+0x17d/0x300 [ 3452.477428][ C1] ? htab_lru_map_delete_node+0x760/0x760 [ 3452.477446][ C1] ? perf_event_output_forward+0x330/0x3e0 [ 3452.477461][ C1] ? look_up_lock_class+0x75/0x140 [ 3452.477488][ C1] ? verify_lock_unused+0x18/0x140 [ 3452.477516][ C1] ? jhash+0x2e8/0x740 [ 3452.477546][ C1] htab_map_delete_elem+0x1a4/0x650 [ 3452.477593][ C1] ? htab_map_update_elem+0x1040/0x1040 [ 3452.477618][ C1] ? perf_callchain+0x220/0x220 [ 3452.477674][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 3452.477708][ C1] bpf_overflow_handler+0x1fc/0x510 [ 3452.477738][ C1] ? perf_tp_event+0x1520/0x1520 [ 3452.477765][ C1] ? perf_trace_buf_alloc+0x290/0x290 [ 3452.477784][ C1] ? bpf_overflow_handler+0xde/0x510 [ 3452.477813][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 3452.477867][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 3452.477908][ C1] __perf_event_overflow+0x447/0x630 [ 3452.477959][ C1] perf_swevent_overflow+0x268/0x340 [ 3452.477998][ C1] ? perf_event_switch_output+0x790/0x790 [ 3452.478066][ C1] perf_swevent_event+0x45c/0x570 [ 3452.478114][ C1] ? perf_tp_event+0x1520/0x1520 [ 3452.478132][ C1] ? trace_call_bpf+0x5e9/0x6c0 [ 3452.478161][ C1] ? perf_trace_buf_alloc+0x290/0x290 [ 3452.478230][ C1] perf_bp_event+0x319/0x430 [ 3452.478279][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 3452.478433][ C1] ? lock_acquire+0x2c2/0x420 [ 3452.478493][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 3452.478550][ C1] notifier_call_chain+0x197/0x380 [ 3452.478590][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 3452.478644][ C1] atomic_notifier_call_chain+0xda/0x180 [ 3452.478680][ C1] notify_die+0x145/0x1a0 [ 3452.478719][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 3452.478780][ C1] ? rcu_is_watching+0x15/0xb0 [ 3452.478820][ C1] notify_debug+0x2e/0x50 [ 3452.478841][ C1] exc_debug+0xde/0x140 [ 3452.478879][ C1] asm_exc_debug+0x1e/0x40 [ 3452.478900][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 3452.478920][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 3452.478934][ C1] RSP: 0018:ffffc9000bdefd50 EFLAGS: 00050202 [ 3452.478950][ C1] RAX: ffffffff842a2101 RBX: 0000000000000050 RCX: 000000000000004c [ 3452.478961][ C1] RDX: 0000000000000001 RSI: 0000200000000304 RDI: ffffc9000bdefdc4 [ 3452.478974][ C1] RBP: ffffc9000bdefee8 R08: ffffc9000bdefe0f R09: 1ffff920017bdfc1 [ 3452.478985][ C1] R10: dffffc0000000000 R11: fffff520017bdfc2 R12: 0000200000000350 [ 3452.478997][ C1] R13: 0000000000000050 R14: ffffc9000bdefdc0 R15: 0000200000000300 [ 3452.479041][ C1] ? _copy_from_user+0x31/0xe0 [ 3452.479099][ C1] [ 3452.479105][ C1] [ 3452.479110][ C1] _copy_from_user+0x8b/0xe0 [ 3452.479143][ C1] __sys_bpf+0x23e/0x890 [ 3452.479178][ C1] ? bpf_link_show_fdinfo+0x390/0x390 [ 3452.479266][ C1] ? lock_chain_count+0x20/0x20 [ 3452.479331][ C1] __x64_sys_bpf+0x7c/0x90 [ 3452.479361][ C1] do_syscall_64+0x55/0xa0 [ 3452.479375][ C1] ? clear_bhb_loop+0x40/0x90 [ 3452.479394][ C1] ? clear_bhb_loop+0x40/0x90 [ 3452.479427][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3452.479446][ C1] RIP: 0033:0x7fb65ed9c819 [ 3452.479468][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3452.479482][ C1] RSP: 002b:00007fb65fc3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3452.479499][ C1] RAX: ffffffffffffffda RBX: 00007fb65f015fa0 RCX: 00007fb65ed9c819 [ 3452.479511][ C1] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 3452.479523][ C1] RBP: 00007fb65ee32c91 R08: 0000000000000000 R09: 0000000000000000 [ 3452.479533][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3452.479544][ C1] R13: 00007fb65f016038 R14: 00007fb65f015fa0 R15: 00007ffea6c0c008 [ 3452.479623][ C1]